last executing test programs: 3m26.478954298s ago: executing program 3 (id=12050): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@local, 0x73, r3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r3}, [@IFA_FLAGS={0x8, 0x8, 0x7a2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) 3m26.329111784s ago: executing program 3 (id=12052): socket$packet(0x11, 0x2, 0x300) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3m25.59127889s ago: executing program 3 (id=12058): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="20020000300001002dbd70000000000007"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m25.421617473s ago: executing program 3 (id=12059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) 3m24.451123935s ago: executing program 3 (id=12068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r2], 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0xc004) 3m24.014886887s ago: executing program 3 (id=12072): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r1, 0x3fcb7000) 3m8.892075903s ago: executing program 32 (id=12072): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r1, 0x3fcb7000) 3m2.444098863s ago: executing program 5 (id=12127): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000500)={0x18, 0x0, {0x1, @empty, 'wg0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) readv(r1, &(0x7f0000001d40)=[{&(0x7f0000000200)=""/137, 0x89}], 0x1) close(0x3) 3m2.305640359s ago: executing program 5 (id=12128): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a", 0x47}, {&(0x7f0000000140)="b0739954efcd20a879c167d7bf729f4a3a63ce90905f4c3a9693de6c832cdd3f65ebe1d0abec3c3beb42e643e7db3bb184b3e304fcc282cf0397f7f63f", 0x3d}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2040) recvfrom$l2tp(r1, &(0x7f0000000040)=""/67, 0x43, 0x2000, 0x0, 0x0) 3m2.23799759s ago: executing program 5 (id=12129): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000380)={@multicast2, @loopback, @empty}, 0xc) 3m2.124924424s ago: executing program 5 (id=12130): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r1, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m2.089683337s ago: executing program 5 (id=12131): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000040)={r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x4) 3m1.946335832s ago: executing program 5 (id=12132): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000600)}, 0x10) 2m56.981045332s ago: executing program 2 (id=12156): recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x2}, 0x2a45}], 0x1, 0x40000041, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 2m56.904015271s ago: executing program 2 (id=12157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x1, 0x241) 2m56.864243522s ago: executing program 2 (id=12158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x22900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr=0x64010101}]}}}]}, 0x38}}, 0x4040000) 2m56.753687447s ago: executing program 2 (id=12159): r0 = socket(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000005c0), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000640)={0x0, 0x0, 0x1, r1, 0xfffffff9}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000680)={{0xa, 0x3, 0xe, @rand_addr, 0x1}, {0xa, 0xfffe, 0xfffffffc}, 0x0, {[0x3, 0x0, 0x2, 0x0, 0x2000000, 0x0, 0x0, 0x3]}}, 0x5c) syz_emit_ethernet(0x46, &(0x7f0000000700)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e"], 0x0) 2m56.68396875s ago: executing program 2 (id=12160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x38, 0x2c, 0x601, 0x4000000, 0x0, {0x0, 0x0, 0x0, r3, {0xe4}, {0xfff1, 0xffff}, {0x300, 0x9702fd4b6861288c}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}]}}]}, 0x38}}, 0x0) 2m53.203351055s ago: executing program 0 (id=12171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffff7f, 0x8, 0xe, 0x65ff05df, 0xd1b, 0x80000001, 0x9, 0x10000, 0x1, 0x6, 0x3ff, 0x0, 0xc755, 0x6, 0x1, 0xc, 0xfffffff9, 0x1f1, 0x68, 0x642, 0x3, 0x1, 0x9, 0x1, 0xef, 0x9, 0xfff, 0xe, 0x6, 0x3ff, 0x8, 0x7eb1, 0x8, 0x4, 0xd0, 0x7db1b20b, 0x3, 0x6, 0x2, 0xae0, 0x6, 0x8, 0x9, 0x4, 0x1000, 0x2, 0x12e, 0xe32, 0x2, 0x4, 0x1, 0x93, 0x7, 0x5, 0x2, 0x0, 0x52, 0x1, 0x4, 0x8000, 0x8, 0x9, 0x7, 0x80000001, 0x5, 0x7, 0x100, 0x8, 0x2685, 0x3, 0x9, 0x5, 0x8, 0x5, 0xf, 0xb, 0xc89, 0x7, 0x600, 0x6, 0x80000000, 0x3, 0x7, 0x2, 0x46c, 0x4, 0x8, 0x4, 0x0, 0x9, 0x979, 0x5, 0x3ff, 0x3, 0x4, 0x9, 0x4, 0x6, 0xfff, 0x1, 0x9, 0x0, 0x30cd, 0x7fff, 0x2, 0x380, 0x1ccd, 0x8a, 0x8, 0x1a8000, 0x8, 0x7, 0x7fff, 0x1ff, 0x800, 0xd, 0x10, 0xc58, 0x80, 0x1, 0x9, 0x400000, 0x7fff, 0x1000, 0x2e8d, 0x3, 0x1, 0x400, 0x0, 0x3, 0x7, 0x0, 0xb20, 0x75, 0x7, 0x65d, 0x0, 0x401, 0xa0a, 0x7, 0x2, 0x1, 0x9, 0x4, 0x4, 0x9, 0x5, 0xd, 0x7ff, 0x4, 0xd, 0x6, 0x7, 0x9, 0x0, 0x73c7, 0x4, 0x80, 0x6, 0x200, 0x7, 0x80, 0x7, 0x7, 0x8, 0xa, 0x6, 0x0, 0x1, 0x6, 0x8000, 0x1, 0x0, 0x92600000, 0x80, 0xffffbb79, 0xffb, 0xa0e, 0x8, 0x30, 0x2, 0x62, 0x9, 0x0, 0x6c, 0x1, 0x5, 0x8, 0x1, 0x4, 0x0, 0x9, 0xfffffff8, 0x74, 0x6, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x2, 0xfffff4e2, 0xcbb, 0x7, 0xffff, 0x9, 0x2, 0x8001, 0x1, 0x1000000, 0x3, 0x6, 0xcba, 0x1bc, 0x1, 0xe07, 0xac, 0x137487da, 0x0, 0xfffffffa, 0x7fffffff, 0x1000, 0x3, 0x7fffffff, 0x5000, 0x2, 0x5b, 0x2, 0x3ff, 0x1ff, 0x3, 0x1, 0x9, 0x3ffc0, 0x1, 0xff, 0x5, 0x0, 0x299b, 0x0, 0x81, 0xfffffffe, 0x3c4, 0x7, 0x236, 0x5816, 0x53eb, 0x4, 0x101, 0x9, 0x1b3, 0x3, 0x1, 0x6, 0x591, 0x7fffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x2, 0xffff, 0x0, 0xfffffffc, 0x800, 0x7, 0x100, 0x80000000, 0x4, 0xffffff8e, 0x4, 0x6, 0x4, 0x6, 0x6, 0x8, 0x0, 0x1, 0x8, 0xf0d, 0xb, 0x5ff, 0x2, 0x1, 0x7, 0xfffffffe, 0x8, 0x0, 0x4, 0x1, 0x6, 0x7, 0x6, 0x2, 0x5, 0x100, 0x0, 0xaf0, 0x2, 0x9, 0x3, 0x6, 0x28a, 0x6, 0x6, 0x43cffa48, 0xfffffffa, 0xa, 0x9, 0x9, 0x919, 0x5, 0x1, 0x8000, 0x1, 0x9, 0x0, 0x9, 0x7, 0x2, 0xe, 0x7, 0x8184, 0x5, 0x4, 0x1, 0x0, 0xff, 0x376, 0x7f, 0x2, 0x4000, 0x7, 0x1, 0x4, 0x8, 0x9, 0x1, 0x2, 0x0, 0x0, 0x5, 0x9, 0x8, 0x3, 0x8, 0x7, 0x6, 0x8, 0x400, 0x4, 0x2, 0x3, 0x6e1, 0x4db, 0x2, 0x2, 0x7, 0x2, 0x9, 0x0, 0x5, 0x5, 0x4, 0x800, 0x24, 0x9, 0x3, 0x2, 0x2, 0x0, 0x4db9, 0x200, 0xffffff39, 0xb, 0x4, 0x101, 0xdcc, 0x12af800, 0x1, 0x7ff, 0x9, 0x7cf, 0xd48, 0xb, 0x9, 0x700000, 0x1, 0x1, 0x3, 0x8, 0x10001, 0xb, 0xfffffffd, 0x6, 0xb7, 0x7f, 0x8, 0x2, 0x9, 0x3, 0x9, 0xc29b, 0xffff7eac, 0x3f, 0xf1, 0xf, 0x8, 0x2, 0x4, 0x0, 0x4, 0x0, 0x5, 0xfffffff9, 0x2, 0x2, 0x8, 0x57, 0x9, 0x0, 0x80000001, 0x7, 0x8, 0xffffffff, 0x7fffffff, 0x96, 0x3, 0x5, 0x2, 0x1, 0x1, 0x4, 0x10, 0x2, 0x8001, 0x3516, 0x7, 0x8, 0x6, 0x38, 0xfffffffc, 0x67, 0x2, 0x401, 0x320a, 0x3ff, 0x3, 0x5, 0xfffffffa, 0xbe8f, 0x4, 0x7fffffff, 0x862, 0x5, 0x100, 0x3ff, 0xa, 0x0, 0x8, 0x12bf, 0xffffffff, 0x1, 0xfe32, 0x1, 0x6, 0x10001, 0xf8, 0x6, 0x9, 0xa, 0x4, 0x5, 0x8, 0x0, 0x9, 0x7fffffff, 0x7, 0xfffffffe, 0x80, 0x3, 0x5, 0x1, 0x9, 0xd, 0xfcc, 0xfff, 0x2, 0x7, 0x0, 0x5, 0xb, 0x5, 0x1, 0x5, 0x7, 0xb, 0x3, 0xfffffbff, 0xffffffff, 0x8, 0x10000, 0x8, 0x7, 0x8, 0x1, 0x0, 0x6, 0xd, 0x10000, 0x8000, 0x7, 0x7cba8000, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd2, 0x1, 0x6, 0x8, 0x7, {0x7, 0x0, 0x5, 0x3, 0x6, 0x5}, {0x9, 0x0, 0xe9, 0x40, 0x8, 0x4}, 0x9, 0x3, 0xdf9}}]}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 2m52.856703927s ago: executing program 0 (id=12174): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001aca80c0000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000200000ffffffffffffffff000000000000000000000000000000000000000000000000d72a0c5700000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000ffffffff00000000000000000000000000000000000308"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='a', 0x1}], 0x1}, 0x240280d1) 2m52.617630671s ago: executing program 0 (id=12175): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x12, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) 2m52.452510273s ago: executing program 0 (id=12176): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x21, &(0x7f00000003c0)=ANY=[], 0x0) 2m52.335629887s ago: executing program 0 (id=12177): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) unshare(0x22020400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r1, 0x0, 0x0) 2m52.191321104s ago: executing program 0 (id=12178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffe0, 0xffff}, {0x300, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xe173}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044801}, 0x0) 2m50.537771778s ago: executing program 2 (id=12179): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2m46.899595541s ago: executing program 33 (id=12132): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000600)}, 0x10) 2m36.858697193s ago: executing program 34 (id=12178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffe0, 0xffff}, {0x300, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xe173}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044801}, 0x0) 2m35.363784634s ago: executing program 35 (id=12179): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2m5.667115381s ago: executing program 6 (id=12229): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x2) close(r2) 2m5.59427421s ago: executing program 6 (id=12230): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0x40106183, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0}) 2m4.901769095s ago: executing program 6 (id=12231): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) 2m4.82298742s ago: executing program 6 (id=12232): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0xaf) 1m57.647343175s ago: executing program 6 (id=12246): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x8, 0x4, 0x3) accept4$packet(r0, 0x0, 0x0, 0x80800) 1m56.979649609s ago: executing program 6 (id=12247): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @empty, r3}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x2400c000) 1m41.978807679s ago: executing program 36 (id=12247): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @empty, r3}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x2400c000) 1m5.898479146s ago: executing program 9 (id=12344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080) 52.801390724s ago: executing program 7 (id=12364): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x1) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 52.767895635s ago: executing program 7 (id=12365): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 52.660800345s ago: executing program 7 (id=12366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffa, 0x2, 0x7, 0x0, 0x2}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000580), 0x56) sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7f00006e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 51.333556507s ago: executing program 9 (id=12370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) 47.215741949s ago: executing program 7 (id=12381): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) writev(r2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000200), 0x0}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth0_to_batadv\x00'}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 46.528595347s ago: executing program 8 (id=12384): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) 46.341004731s ago: executing program 8 (id=12386): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 46.227140491s ago: executing program 8 (id=12387): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 45.745116818s ago: executing program 8 (id=12388): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 43.663063801s ago: executing program 9 (id=12389): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 42.79643879s ago: executing program 9 (id=12391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000280)={'veth1_macvtap\x00', 0x6c0}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000240), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000000c0)=0x122) sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xb}, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000300)={0x7, 'veth0_vlan\x00', {0x3}, 0x9a0e}) 42.594912024s ago: executing program 9 (id=12392): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 42.226245431s ago: executing program 9 (id=12393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) close(0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x7, 0xd}, {}, {0x8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) 39.654333716s ago: executing program 8 (id=12396): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000800)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 39.397656426s ago: executing program 8 (id=12397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x10, 0x7, 0x8, 0xb, 0x9000000}, 0x6, 0x2}, [{0x40, 0x0, 0x200, 0x9, 0x8}, {0x7, 0x9, 0x2, 0x9, 0xffffffc0, 0x9}, {0x9, 0x5, 0x4, 0xa9, 0xf, 0x1}, {0x401, 0xa, 0x66, 0x2, 0x7, 0x9}, {0x4, 0x8e5, 0x1, 0x7f, 0x2, 0x7}, {0x5, 0x8, 0x2, 0x9db, 0x2, 0x4}, {0x7, 0xfffffffa, 0xc1c6, 0x8, 0x1000, 0x1}, {0xfffffffe, 0x5, 0x1a2, 0x2, 0x1, 0x8}, {0x9, 0x3334, 0x3, 0x0, 0x1, 0x9}, {0x7, 0x6, 0x11dfaf67, 0xbd, 0x9, 0x1}, {0xffff0000, 0x4, 0x7fff, 0x800, 0x9, 0x4}, {0x99, 0x5, 0x0, 0xe, 0x2, 0x8}, {0x7, 0xffffffb4, 0x7fffffff, 0x3, 0x3, 0x5}, {0x8, 0x3ff, 0x5, 0x3ff, 0x2, 0x49}, {0x6, 0x3, 0xffa6, 0x1, 0x2, 0x6}, {0x6, 0x9, 0xffffffff, 0x35, 0x5, 0x202f}, {0x1, 0x94, 0x6, 0x76dd666, 0x0, 0x1}, {0x9, 0x8b, 0x5, 0xaa16, 0x5, 0x2}, {0x6, 0x7, 0x35443ee4, 0x3, 0x5, 0x1ff}, {0xcb, 0x1, 0x80000001, 0x5, 0x9, 0xd}, {0xffffffcf, 0x0, 0x47f, 0x400, 0x100, 0x58b}, {0x2, 0x6, 0x5, 0x45f8, 0x7}, {0x5, 0x8001, 0xffffffff, 0x5, 0x0, 0xf9a7}, {0x6, 0x40, 0x2, 0x2, 0x6, 0x9}, {0x380000, 0x1, 0x0, 0x5, 0x7, 0x5}, {0x5, 0x7, 0x5, 0x8e, 0x3ff0000, 0x1}, {0xfffffffd, 0x1, 0xfe32, 0x30f9040d, 0x7fffffff, 0x80000001}, {0xa2a, 0xc08, 0x2, 0x7, 0xa9, 0x9}, {0x400, 0x8001, 0x8000, 0xfffffffa, 0x1, 0x400}, {0x8, 0x1, 0x8, 0x4, 0x3, 0x6}, {0x7, 0x1, 0x5, 0x8, 0x1, 0x3}, {0x899d, 0x1, 0x6, 0xffff, 0xfaad}, {0xfffffffe, 0x7fff, 0xcb, 0x80, 0x81, 0x7}, {0x4, 0x2, 0x80000000, 0x7, 0xe, 0xe2d2}, {0x2, 0x7, 0x2, 0x80, 0x6a, 0xc4}, {0x7, 0xfffffff7, 0x8, 0x3, 0x7}, {0x7, 0x80, 0xb, 0x200, 0x7, 0x5f00}, {0x80000001, 0x3, 0x9, 0x1, 0x8, 0xfff}, {0x3ff, 0x4, 0x0, 0x8001, 0x5, 0x7}, {0x4, 0x8, 0x925, 0x3, 0x51d, 0x1}, {0x8e, 0x9, 0x7, 0x8, 0x51, 0x5}, {0x1, 0x1, 0x0, 0x214, 0x4, 0x400}, {0x122e, 0x5dc32eaa, 0xfffffffb, 0xf629, 0x51, 0xfff}, {0x8, 0x8, 0x0, 0x7e, 0xffffffff, 0x6}, {0x3, 0x5, 0x7a13, 0xfcf3237, 0x2, 0x8}, {0x47, 0x10, 0x7ff, 0x8, 0x2f, 0x6}, {0x1, 0xe, 0x8, 0x1ff, 0x4, 0x50c2}, {0x2, 0xd4, 0x732a, 0x21, 0xffff, 0x8001}, {0x4, 0x2, 0x9, 0x5, 0x7, 0x7f}, {0x50, 0x4c8, 0xffffffff, 0x7fffffff, 0xd}, {0x4, 0x80, 0x1, 0x8, 0x7f, 0x5}, {0x2c1ec80, 0x0, 0x1, 0x8, 0x1, 0x1000}, {0x512753d3, 0x7ff, 0xf6, 0x2, 0x1}, {0x5, 0x4, 0x10001, 0x1, 0x9, 0x7}, {0x9, 0x3, 0x4, 0xe192, 0x8, 0x1}, {0x4, 0x0, 0x6, 0xffffffff, 0xd, 0xff}, {0x8001, 0xff, 0x7, 0x6, 0x0, 0x400}, {0x3c31c95b, 0xd, 0x3, 0xd, 0x2e800, 0x1}, {0xe, 0x1, 0x3, 0x3, 0x5, 0x4}, {0x57, 0x2, 0x3, 0x5, 0x7fffffff, 0x7}, {0x1, 0xffffffff, 0x7, 0x0, 0x1, 0x587}, {0x1, 0x7, 0x9, 0x2, 0xa6, 0x8}, {0x427, 0x8, 0x0, 0x7, 0x1, 0x4}, {0x159, 0x7fffffff, 0xb, 0xd4, 0x3, 0x8001}, {0x9, 0x7, 0x7, 0xd, 0xe, 0x40}, {0x1ff, 0x5, 0x5, 0x3, 0x2, 0x7}, {0x3, 0x8000, 0x4, 0x2, 0x5b2c, 0xff}, {0x3, 0x7507, 0x4, 0x974c, 0x9, 0x4}, {0xd2d, 0x4, 0x7, 0x7, 0x9, 0x6}, {0x3, 0x2, 0xffffffff, 0x3, 0x8, 0x3}, {0x7, 0x0, 0x800, 0x9, 0x7, 0xfffffa29}, {0xc730, 0x1, 0xa61c, 0x3, 0x6, 0xfff}, {0x6, 0x5, 0x100, 0x8, 0x8, 0x7}, {0x5, 0x6f, 0x67b, 0x2, 0x4, 0x10}, {0x1e, 0x6, 0x8, 0x2, 0x9a, 0x6}, {0x0, 0x9, 0x4, 0x9dbd, 0x401, 0xffff}, {0x3, 0x3, 0x5, 0x1, 0xf076, 0x4}, {0x4, 0x2, 0x5, 0x9f, 0x0, 0x8}, {0x9, 0xffffffff, 0x101, 0x8, 0x80000000}, {0xa0, 0x1, 0x6, 0x6, 0x6, 0x5}, {0x9, 0x3f57, 0x2, 0x8, 0x3, 0x5}, {0x7488e1bb, 0x1, 0x0, 0xc, 0x65c, 0x3}, {0x5, 0x7, 0x7f21, 0x6e, 0x5, 0x12f}, {0x6e000000, 0x345, 0x9, 0x8, 0xf, 0x33}, {0x9, 0x0, 0x0, 0x8, 0x9, 0x1}, {0x8, 0x2, 0x1, 0x9, 0xffffffff, 0x515}, {0x1ff, 0x6, 0xf, 0x80, 0x1, 0x1}, {0x80, 0x5, 0x32d2, 0x9, 0x8001, 0x101}, {0x1, 0x2, 0xffff34b0, 0x9, 0xf, 0xd}, {0x2, 0xb99f, 0x6, 0x200, 0x9, 0x400}, {0x6, 0xada, 0xffff5dc6, 0x0, 0x5, 0x9}, {0x6, 0xd, 0x6, 0x8, 0x4, 0x2}, {0x1000, 0x5, 0x4, 0x7fffffff, 0x6, 0x4}, {0x4, 0xa, 0x3, 0x5, 0xcb, 0xd5f}, {0x8c7, 0x3, 0x0, 0x2, 0x1, 0xff}, {0x8b, 0x2be, 0x7, 0x0, 0x7, 0x7}, {0x8, 0xe, 0x892e, 0x12, 0x6, 0xa9dc}, {0x9, 0x1, 0x6, 0x2, 0x5, 0x94f7}, {0x0, 0x8, 0x9, 0x4, 0x2, 0x3ff}, {0x101, 0x4, 0x3, 0x1ffc, 0xf, 0x5}, {0x5, 0x10000, 0xee5, 0x6, 0x4, 0x5}, {0x8, 0x1, 0x9, 0x475c, 0x0, 0x9}, {0x2, 0x9, 0x17, 0x0, 0x10001, 0x7fff}, {0x0, 0xcb78, 0x401, 0xfb, 0xdde3, 0x2}, {0x0, 0x6, 0x5, 0xebf, 0xe, 0xe7e9c2cc}, {0xfffffff9, 0x3ff, 0x10, 0x10001, 0x2, 0x101}, {0x1, 0x24000, 0x9, 0x1, 0x8000, 0x2}, {0x261c7524, 0x3a1, 0x5, 0x5, 0x7, 0x5}, {0x4, 0x800, 0xb3b, 0xe867, 0x8}, {0x602b6d63, 0x5, 0xba, 0x9, 0x20b, 0x3}, {0x7, 0x8, 0x7, 0xf40d, 0x20000000, 0x4}, {0x4, 0x1000, 0x80000000, 0x99a, 0xffff, 0x9}, {0x5, 0x4, 0x1, 0x2, 0x1, 0x1}, {0x3e37c0e2, 0xe, 0x7, 0x6, 0x3, 0x3}, {0x8000, 0x0, 0x22f, 0x8000, 0x8001, 0x7}, {0x6, 0xa, 0x0, 0x6, 0x400, 0x1}, {0x8, 0x8, 0x7, 0xf, 0x2, 0xfffffffe}, {0x94, 0xfbc, 0x800, 0x18, 0x9, 0x400}, {0x8001, 0x1, 0x3, 0x0, 0x0, 0x6}, {0x10, 0x3, 0x0, 0xffffffff, 0x5, 0x800}, {0xfffffffc, 0xb, 0x7f, 0xfffffff7, 0x3, 0x6}, {0x9, 0x3, 0x3, 0x1ff, 0xffffff2d, 0x1}, {0x5, 0x400, 0x7, 0x1, 0x2, 0x200}, {0x81, 0x2, 0x3, 0x1a93, 0x101}, {0x4, 0xb94, 0x1, 0x6, 0x75, 0x5}, {0x80000000, 0x9, 0x1, 0x2, 0x9, 0x4f}, {0xe9, 0x4, 0x10, 0x4, 0x6, 0xff}, {0xffff, 0x1, 0x9, 0xb77b, 0x4, 0x1000}], [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x5}, {0x5}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0xf6f021f455f2ae44}, {0x3}, {0x2}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x3}, {0x4}, {0x369908a45905f94d, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x2}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x4}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000001240)={&(0x7f0000001280)=@xdp={0x2c, 0x8, r2, 0x109}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001340)='k', 0x1}], 0x1}, 0x20000885) 35.877276439s ago: executing program 7 (id=12398): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f0000000580)='GPL\x00'}, 0x94) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 33.706862891s ago: executing program 7 (id=12401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 32.991439406s ago: executing program 1 (id=12405): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @remote, 0xf66e}}, 0x24) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000002b80)=0x2006, 0x4) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'sed\x00', 0x1, 0xa88, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'lblc\x00', 0x1, 0xa8a, 0x30}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000240)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x200055}, {@remote, 0x4e24, 0x10000, 0x7, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r6, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 32.000126181s ago: executing program 1 (id=12413): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1410, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x80) 31.822176871s ago: executing program 1 (id=12415): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000840)) 31.712232242s ago: executing program 4 (id=12416): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 31.673813049s ago: executing program 1 (id=12417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000001640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 31.561140717s ago: executing program 4 (id=12418): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$nci(r0, 0x0, 0xfffffed2) 31.536508633s ago: executing program 1 (id=12419): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000140)="970800000000000000008cc5fffff982", 0x10}, {&(0x7f0000000000)="74145fdae5ca0070777c079c", 0xc}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010104}}}], 0x20}, 0x4044040) 31.325165368s ago: executing program 1 (id=12420): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000b40), 0x56) sendmsg$kcm(r1, &(0x7f0000000b80)={&(0x7f0000000bc0)=@xdp={0x2c, 0x0, r2, 0x36}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000cc0)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 31.315745299s ago: executing program 4 (id=12421): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040), 0xc) 31.055650978s ago: executing program 4 (id=12422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 30.953010468s ago: executing program 4 (id=12423): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r0, 0x0) 30.846562735s ago: executing program 4 (id=12424): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="fb9f", 0x2}], 0x1}}], 0x1, 0x4) 13.861803253s ago: executing program 37 (id=12397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x10, 0x7, 0x8, 0xb, 0x9000000}, 0x6, 0x2}, [{0x40, 0x0, 0x200, 0x9, 0x8}, {0x7, 0x9, 0x2, 0x9, 0xffffffc0, 0x9}, {0x9, 0x5, 0x4, 0xa9, 0xf, 0x1}, {0x401, 0xa, 0x66, 0x2, 0x7, 0x9}, {0x4, 0x8e5, 0x1, 0x7f, 0x2, 0x7}, {0x5, 0x8, 0x2, 0x9db, 0x2, 0x4}, {0x7, 0xfffffffa, 0xc1c6, 0x8, 0x1000, 0x1}, {0xfffffffe, 0x5, 0x1a2, 0x2, 0x1, 0x8}, {0x9, 0x3334, 0x3, 0x0, 0x1, 0x9}, {0x7, 0x6, 0x11dfaf67, 0xbd, 0x9, 0x1}, {0xffff0000, 0x4, 0x7fff, 0x800, 0x9, 0x4}, {0x99, 0x5, 0x0, 0xe, 0x2, 0x8}, {0x7, 0xffffffb4, 0x7fffffff, 0x3, 0x3, 0x5}, {0x8, 0x3ff, 0x5, 0x3ff, 0x2, 0x49}, {0x6, 0x3, 0xffa6, 0x1, 0x2, 0x6}, {0x6, 0x9, 0xffffffff, 0x35, 0x5, 0x202f}, {0x1, 0x94, 0x6, 0x76dd666, 0x0, 0x1}, {0x9, 0x8b, 0x5, 0xaa16, 0x5, 0x2}, {0x6, 0x7, 0x35443ee4, 0x3, 0x5, 0x1ff}, {0xcb, 0x1, 0x80000001, 0x5, 0x9, 0xd}, {0xffffffcf, 0x0, 0x47f, 0x400, 0x100, 0x58b}, {0x2, 0x6, 0x5, 0x45f8, 0x7}, {0x5, 0x8001, 0xffffffff, 0x5, 0x0, 0xf9a7}, {0x6, 0x40, 0x2, 0x2, 0x6, 0x9}, {0x380000, 0x1, 0x0, 0x5, 0x7, 0x5}, {0x5, 0x7, 0x5, 0x8e, 0x3ff0000, 0x1}, {0xfffffffd, 0x1, 0xfe32, 0x30f9040d, 0x7fffffff, 0x80000001}, {0xa2a, 0xc08, 0x2, 0x7, 0xa9, 0x9}, {0x400, 0x8001, 0x8000, 0xfffffffa, 0x1, 0x400}, {0x8, 0x1, 0x8, 0x4, 0x3, 0x6}, {0x7, 0x1, 0x5, 0x8, 0x1, 0x3}, {0x899d, 0x1, 0x6, 0xffff, 0xfaad}, {0xfffffffe, 0x7fff, 0xcb, 0x80, 0x81, 0x7}, {0x4, 0x2, 0x80000000, 0x7, 0xe, 0xe2d2}, {0x2, 0x7, 0x2, 0x80, 0x6a, 0xc4}, {0x7, 0xfffffff7, 0x8, 0x3, 0x7}, {0x7, 0x80, 0xb, 0x200, 0x7, 0x5f00}, {0x80000001, 0x3, 0x9, 0x1, 0x8, 0xfff}, {0x3ff, 0x4, 0x0, 0x8001, 0x5, 0x7}, {0x4, 0x8, 0x925, 0x3, 0x51d, 0x1}, {0x8e, 0x9, 0x7, 0x8, 0x51, 0x5}, {0x1, 0x1, 0x0, 0x214, 0x4, 0x400}, {0x122e, 0x5dc32eaa, 0xfffffffb, 0xf629, 0x51, 0xfff}, {0x8, 0x8, 0x0, 0x7e, 0xffffffff, 0x6}, {0x3, 0x5, 0x7a13, 0xfcf3237, 0x2, 0x8}, {0x47, 0x10, 0x7ff, 0x8, 0x2f, 0x6}, {0x1, 0xe, 0x8, 0x1ff, 0x4, 0x50c2}, {0x2, 0xd4, 0x732a, 0x21, 0xffff, 0x8001}, {0x4, 0x2, 0x9, 0x5, 0x7, 0x7f}, {0x50, 0x4c8, 0xffffffff, 0x7fffffff, 0xd}, {0x4, 0x80, 0x1, 0x8, 0x7f, 0x5}, {0x2c1ec80, 0x0, 0x1, 0x8, 0x1, 0x1000}, {0x512753d3, 0x7ff, 0xf6, 0x2, 0x1}, {0x5, 0x4, 0x10001, 0x1, 0x9, 0x7}, {0x9, 0x3, 0x4, 0xe192, 0x8, 0x1}, {0x4, 0x0, 0x6, 0xffffffff, 0xd, 0xff}, {0x8001, 0xff, 0x7, 0x6, 0x0, 0x400}, {0x3c31c95b, 0xd, 0x3, 0xd, 0x2e800, 0x1}, {0xe, 0x1, 0x3, 0x3, 0x5, 0x4}, {0x57, 0x2, 0x3, 0x5, 0x7fffffff, 0x7}, {0x1, 0xffffffff, 0x7, 0x0, 0x1, 0x587}, {0x1, 0x7, 0x9, 0x2, 0xa6, 0x8}, {0x427, 0x8, 0x0, 0x7, 0x1, 0x4}, {0x159, 0x7fffffff, 0xb, 0xd4, 0x3, 0x8001}, {0x9, 0x7, 0x7, 0xd, 0xe, 0x40}, {0x1ff, 0x5, 0x5, 0x3, 0x2, 0x7}, {0x3, 0x8000, 0x4, 0x2, 0x5b2c, 0xff}, {0x3, 0x7507, 0x4, 0x974c, 0x9, 0x4}, {0xd2d, 0x4, 0x7, 0x7, 0x9, 0x6}, {0x3, 0x2, 0xffffffff, 0x3, 0x8, 0x3}, {0x7, 0x0, 0x800, 0x9, 0x7, 0xfffffa29}, {0xc730, 0x1, 0xa61c, 0x3, 0x6, 0xfff}, {0x6, 0x5, 0x100, 0x8, 0x8, 0x7}, {0x5, 0x6f, 0x67b, 0x2, 0x4, 0x10}, {0x1e, 0x6, 0x8, 0x2, 0x9a, 0x6}, {0x0, 0x9, 0x4, 0x9dbd, 0x401, 0xffff}, {0x3, 0x3, 0x5, 0x1, 0xf076, 0x4}, {0x4, 0x2, 0x5, 0x9f, 0x0, 0x8}, {0x9, 0xffffffff, 0x101, 0x8, 0x80000000}, {0xa0, 0x1, 0x6, 0x6, 0x6, 0x5}, {0x9, 0x3f57, 0x2, 0x8, 0x3, 0x5}, {0x7488e1bb, 0x1, 0x0, 0xc, 0x65c, 0x3}, {0x5, 0x7, 0x7f21, 0x6e, 0x5, 0x12f}, {0x6e000000, 0x345, 0x9, 0x8, 0xf, 0x33}, {0x9, 0x0, 0x0, 0x8, 0x9, 0x1}, {0x8, 0x2, 0x1, 0x9, 0xffffffff, 0x515}, {0x1ff, 0x6, 0xf, 0x80, 0x1, 0x1}, {0x80, 0x5, 0x32d2, 0x9, 0x8001, 0x101}, {0x1, 0x2, 0xffff34b0, 0x9, 0xf, 0xd}, {0x2, 0xb99f, 0x6, 0x200, 0x9, 0x400}, {0x6, 0xada, 0xffff5dc6, 0x0, 0x5, 0x9}, {0x6, 0xd, 0x6, 0x8, 0x4, 0x2}, {0x1000, 0x5, 0x4, 0x7fffffff, 0x6, 0x4}, {0x4, 0xa, 0x3, 0x5, 0xcb, 0xd5f}, {0x8c7, 0x3, 0x0, 0x2, 0x1, 0xff}, {0x8b, 0x2be, 0x7, 0x0, 0x7, 0x7}, {0x8, 0xe, 0x892e, 0x12, 0x6, 0xa9dc}, {0x9, 0x1, 0x6, 0x2, 0x5, 0x94f7}, {0x0, 0x8, 0x9, 0x4, 0x2, 0x3ff}, {0x101, 0x4, 0x3, 0x1ffc, 0xf, 0x5}, {0x5, 0x10000, 0xee5, 0x6, 0x4, 0x5}, {0x8, 0x1, 0x9, 0x475c, 0x0, 0x9}, {0x2, 0x9, 0x17, 0x0, 0x10001, 0x7fff}, {0x0, 0xcb78, 0x401, 0xfb, 0xdde3, 0x2}, {0x0, 0x6, 0x5, 0xebf, 0xe, 0xe7e9c2cc}, {0xfffffff9, 0x3ff, 0x10, 0x10001, 0x2, 0x101}, {0x1, 0x24000, 0x9, 0x1, 0x8000, 0x2}, {0x261c7524, 0x3a1, 0x5, 0x5, 0x7, 0x5}, {0x4, 0x800, 0xb3b, 0xe867, 0x8}, {0x602b6d63, 0x5, 0xba, 0x9, 0x20b, 0x3}, {0x7, 0x8, 0x7, 0xf40d, 0x20000000, 0x4}, {0x4, 0x1000, 0x80000000, 0x99a, 0xffff, 0x9}, {0x5, 0x4, 0x1, 0x2, 0x1, 0x1}, {0x3e37c0e2, 0xe, 0x7, 0x6, 0x3, 0x3}, {0x8000, 0x0, 0x22f, 0x8000, 0x8001, 0x7}, {0x6, 0xa, 0x0, 0x6, 0x400, 0x1}, {0x8, 0x8, 0x7, 0xf, 0x2, 0xfffffffe}, {0x94, 0xfbc, 0x800, 0x18, 0x9, 0x400}, {0x8001, 0x1, 0x3, 0x0, 0x0, 0x6}, {0x10, 0x3, 0x0, 0xffffffff, 0x5, 0x800}, {0xfffffffc, 0xb, 0x7f, 0xfffffff7, 0x3, 0x6}, {0x9, 0x3, 0x3, 0x1ff, 0xffffff2d, 0x1}, {0x5, 0x400, 0x7, 0x1, 0x2, 0x200}, {0x81, 0x2, 0x3, 0x1a93, 0x101}, {0x4, 0xb94, 0x1, 0x6, 0x75, 0x5}, {0x80000000, 0x9, 0x1, 0x2, 0x9, 0x4f}, {0xe9, 0x4, 0x10, 0x4, 0x6, 0xff}, {0xffff, 0x1, 0x9, 0xb77b, 0x4, 0x1000}], [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x5}, {0x5}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0xf6f021f455f2ae44}, {0x3}, {0x2}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x3}, {0x4}, {0x369908a45905f94d, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x2}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x4}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000001240)={&(0x7f0000001280)=@xdp={0x2c, 0x8, r2, 0x109}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001340)='k', 0x1}], 0x1}, 0x20000885) 804.870801ms ago: executing program 38 (id=12393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) close(0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x7, 0xd}, {}, {0x8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) 578.099379ms ago: executing program 39 (id=12401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 353.000986ms ago: executing program 40 (id=12420): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000b40), 0x56) sendmsg$kcm(r1, &(0x7f0000000b80)={&(0x7f0000000bc0)=@xdp={0x2c, 0x0, r2, 0x36}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000cc0)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 0s ago: executing program 41 (id=12424): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="fb9f", 0x2}], 0x1}}], 0x1, 0x4) kernel console output (not intermixed with test programs): s `syz.1.10123'. [ 529.775492][T27039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10123'. [ 531.252337][T27090] netlink: 'syz.0.10149': attribute type 2 has an invalid length. [ 531.252365][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10149'. [ 531.761328][T27113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10160'. [ 532.393142][T27139] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10171'. [ 533.361178][ T5620] block nbd1: Receive control failed (result -32) [ 534.016039][T27202] veth1_to_hsr: entered allmulticast mode [ 534.854848][T27223] netlink: 81 bytes leftover after parsing attributes in process `syz.0.10212'. [ 535.901287][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10234'. [ 536.819209][T27307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10250'. [ 536.823345][T27307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10250'. [ 536.823395][T27307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10250'. [ 537.293164][T27322] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10256'. [ 537.610415][T27331] xt_hashlimit: size too large, truncated to 1048576 [ 537.663129][T27332] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.10260'. [ 537.663334][T27332] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 537.699215][T27332] 0ªX¹¦Dö»: entered allmulticast mode [ 539.208214][T27383] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 539.208336][T27383] syzkaller1: linktype set to 823 [ 539.594689][T27397] netlink: 165 bytes leftover after parsing attributes in process `syz.2.10290'. [ 543.458997][T27467] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10320'. [ 546.171931][T27500] sctp: [Deprecated]: syz.1.10336 (pid 27500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.171931][T27500] Use struct sctp_sack_info instead [ 547.383483][T27534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10352'. [ 548.451297][T27552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10361'. [ 548.451326][T27552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10361'. [ 556.205533][T27609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10385'. [ 557.214661][T27623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10391'. [ 557.214814][T27623] netlink: 6 bytes leftover after parsing attributes in process `syz.0.10391'. [ 562.910666][T27657] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10408'. [ 562.944049][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.885334][T27674] block nbd2: Unsupported socket: should be TCP or UNIX. [ 565.524435][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10425'. [ 565.549597][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10425'. [ 565.816158][T27699] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10427'. [ 567.446579][T27747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10451'. [ 567.801746][T27757] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 567.803972][T27756] netlink: 'syz.2.10456': attribute type 1 has an invalid length. [ 567.803994][T27756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10456'. [ 568.037319][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.378722][T27769] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 568.494415][T27776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10464'. [ 568.494453][T27776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10464'. [ 570.528654][T27830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10492'. [ 570.979854][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10496'. [ 572.225752][T27878] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 573.048170][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10525'. [ 573.671621][T27924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10535'. [ 577.219908][T27988] veth1_to_bond: entered allmulticast mode [ 577.234215][T27988] veth1_to_bond: left allmulticast mode [ 579.597520][T28030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10583'. [ 580.622840][T28058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10598'. [ 583.224817][T28123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10626'. [ 589.112228][T28167] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.223740][T28164] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.322600][T28170] netlink: 'syz.1.10647': attribute type 2 has an invalid length. [ 589.323122][T28169] tun0: tun_chr_ioctl cmd 1074025675 [ 589.323144][T28169] tun0: persist enabled [ 589.456548][T28177] ip_tables: iptables: counters copy to user failed while replacing table [ 589.629845][T28183] Cannot find set identified by id 4 to match [ 591.266821][T28236] netlink: Only one type of NAT may be specified [ 591.266856][T28236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.994179][T28258] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10688'. [ 593.265820][T28302] syzkaller1: entered promiscuous mode [ 593.265846][T28302] syzkaller1: entered allmulticast mode [ 593.407021][T28309] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 593.579025][T28313] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10711'. [ 593.904967][T28325] ip_tables: iptables: counters copy to user failed while replacing table [ 593.917019][T28325] C: renamed from lo [ 593.937803][T28325] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 595.114687][T28369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10737'. [ 595.114838][T28369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.266863][T28369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.278348][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10738'. [ 596.036404][T28399] tipc: Enabled bearer , priority 0 [ 596.348016][T28409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 596.348040][T28409] IPv6: NLM_F_CREATE should be set when creating new route [ 597.435503][T28442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10768'. [ 597.657000][T28446] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.10770'. [ 597.875141][T28451] syzkaller1: entered promiscuous mode [ 597.875167][T28451] syzkaller1: entered allmulticast mode [ 598.141300][T28460] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 598.429415][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10782'. [ 598.604255][T28477] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10784'. [ 599.112366][T28489] geneve4: entered promiscuous mode [ 599.247577][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 58938 - 0 [ 599.247629][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 58938 - 0 [ 599.247666][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 58938 - 0 [ 599.247719][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 58938 - 0 [ 599.585692][T28502] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 601.059242][T28555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10817'. [ 601.059283][T28555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10817'. [ 601.235829][T28561] netlink: 'syz.0.10819': attribute type 11 has an invalid length. [ 601.969626][T28590] ip_tables: iptables: counters copy to user failed while replacing table [ 602.067118][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10836'. [ 602.097009][T28598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10838'. [ 602.270885][T28604] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10842'. [ 603.191840][T28631] syzkaller1: entered allmulticast mode [ 603.364111][T28637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10857'. [ 603.765906][T28656] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 603.841073][T28659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10867'. [ 603.845573][T28659] netlink: 'syz.0.10867': attribute type 9 has an invalid length. [ 603.845595][T28659] netlink: 23 bytes leftover after parsing attributes in process `syz.0.10867'. [ 604.016696][T28663] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 604.172678][T28670] sctp: [Deprecated]: syz.2.10870 (pid 28670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.172678][T28670] Use struct sctp_sack_info instead [ 604.509880][T28681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10877'. [ 605.724437][T28726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10899'. [ 606.215672][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10908'. [ 606.388780][T28746] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 606.388953][T26305] wg0 speed is unknown, defaulting to 1000 [ 606.390093][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.390212][ T59] bridge0: port 2(bridge_slave_1) entered listening state [ 606.942126][T28774] netlink: 'syz.2.10922': attribute type 1 has an invalid length. [ 608.120145][T28818] netlink: 'syz.3.10940': attribute type 10 has an invalid length. [ 608.495149][T28835] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 608.496603][T28833] blkio.reset_stats is deprecated [ 608.594796][T28841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10951'. [ 609.526791][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10966'. [ 610.356825][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10976'. [ 610.356851][T28895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10976'. [ 612.002668][T28932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10992'. [ 612.073273][T28932] bridge4: entered promiscuous mode [ 612.073491][T28932] bridge4: entered allmulticast mode [ 612.760769][T28957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11002'. [ 613.226818][T28961] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 614.524052][T29000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11020'. [ 614.529276][ T5620] block nbd2: Receive control failed (result -107) [ 614.734705][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11024'. [ 614.821782][T29012] netlink: 'syz.3.11025': attribute type 3 has an invalid length. [ 615.445618][T29037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11037'. [ 615.801759][T29051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11042'. [ 615.896461][T29054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11045'. [ 616.484602][T29075] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.11053'. [ 616.981636][T29088] netlink: 'syz.0.11060': attribute type 2 has an invalid length. [ 616.981667][T29088] netlink: 'syz.0.11060': attribute type 2 has an invalid length. [ 617.866777][T29120] ip_tables: iptables: counters copy to user failed while replacing table [ 617.955207][T29117] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11071'. [ 618.484609][T29143] veth0: entered promiscuous mode [ 618.487925][T29140] veth0: left promiscuous mode [ 619.109147][T29167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11095'. [ 619.109954][T29167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11095'. [ 619.110320][T29167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11095'. [ 619.219451][T29174] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 619.570878][T29182] netlink: 'syz.4.11100': attribute type 1 has an invalid length. [ 619.570905][T29182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11100'. [ 620.160094][T29203] ip_tables: iptables: counters copy to user failed while replacing table [ 620.350600][T29212] batadv_slave_1: entered promiscuous mode [ 620.356220][T29210] batadv_slave_1: left promiscuous mode [ 621.050583][T29234] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11120'. [ 621.051113][T29234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11120'. [ 621.801042][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 622.695141][T29279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11142'. [ 622.695185][T29279] netlink: 'syz.4.11142': attribute type 7 has an invalid length. [ 622.695200][T29279] netlink: 'syz.4.11142': attribute type 8 has an invalid length. [ 622.695232][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11142'. [ 622.954600][T29285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11145'. [ 623.748717][T29311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11155'. [ 623.910950][T29318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11157'. [ 624.172189][T29311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11155'. [ 624.360672][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.432919][T29365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11177'. [ 625.448658][T29365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11177'. [ 625.775128][T29378] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 625.898532][T29382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11186'. [ 626.244958][T29397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11191'. [ 626.257469][T29397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11191'. [ 626.262052][T29382] team0: Port device team_slave_0 removed [ 626.358085][T29386] syzkaller1: entered promiscuous mode [ 626.358292][T29386] syzkaller1: entered allmulticast mode [ 626.891166][T29420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11203'. [ 626.946437][T29424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11203'. [ 628.126424][T29473] tipc: Enabled bearer , priority 0 [ 629.682632][T29519] netlink: 'syz.1.11247': attribute type 21 has an invalid length. [ 630.909151][T29550] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11260'. [ 630.909177][T29550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11260'. [ 632.609400][T29601] ip_tables: iptables: counters copy to user failed while replacing table [ 632.706723][T29608] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 635.446610][T29674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11314'. [ 636.854368][T29711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11330'. [ 637.078624][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.078675][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.078712][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.157212][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.157238][ C1] bridge0: topology change detected, propagating [ 637.262345][T29720] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11334'. [ 637.368816][T29726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11336'. [ 638.905658][T29768] netlink: 'syz.2.11357': attribute type 39 has an invalid length. [ 639.573677][T29785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11363'. [ 640.001324][T29797] netlink: 11 bytes leftover after parsing attributes in process `syz.2.11369'. [ 640.278486][T29800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11368'. [ 640.323551][ T5620] block nbd3: Receive control failed (result -107) [ 640.783561][T29812] vcan0: tx address claim with different name [ 641.219406][T29822] netlink: 'syz.0.11381': attribute type 2 has an invalid length. [ 641.247577][T29822] netlink: 'syz.0.11381': attribute type 2 has an invalid length. [ 641.247604][T29822] netlink: 67 bytes leftover after parsing attributes in process `syz.0.11381'. [ 641.392508][T29826] vcan0: tx address claim with dlc 0 [ 642.600447][T29858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11396'. [ 642.600488][T29858] netlink: 'syz.2.11396': attribute type 7 has an invalid length. [ 642.600503][T29858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11396'. [ 644.178096][T29898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11416'. [ 644.820787][T29919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.152997][T29925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11428'. [ 645.153089][T29925] bridge_slave_1: left allmulticast mode [ 645.153348][T29925] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.215983][T29925] bridge_slave_0: left allmulticast mode [ 645.216013][T29925] bridge_slave_0: left promiscuous mode [ 645.238233][T29925] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.274531][T29932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11429'. [ 645.335652][T29934] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 646.270236][T29955] block nbd0: Unsupported socket: should be TCP or UNIX. [ 646.541021][T29960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11442'. [ 646.541090][T29960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11442'. [ 647.249805][T29985] netlink: 'syz.2.11453': attribute type 11 has an invalid length. [ 648.455598][T30018] sctp: [Deprecated]: syz.3.11470 (pid 30018) Use of int in max_burst socket option. [ 648.455598][T30018] Use struct sctp_assoc_value instead [ 650.155213][T30066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11485'. [ 651.570659][T30101] ip_tables: iptables: counters copy to user failed while replacing table [ 652.122890][T30111] xt_hashlimit: size too large, truncated to 1048576 [ 652.318870][T30117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11508'. [ 652.325580][T30117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11508'. [ 653.041042][T30127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11513'. [ 653.046890][T30127] ip_tables: iptables: counters copy to user failed while replacing table [ 653.634387][T30141] netlink: 'syz.1.11517': attribute type 17 has an invalid length. [ 653.634413][T30141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11517'. [ 653.634440][T30141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11517'. [ 653.696194][T30141] 0ªX¹¦Dö»: entered promiscuous mode [ 653.828038][T30141] 0ªX¹¦Dö»: left promiscuous mode [ 653.861296][T30148] netlink: 'syz.2.11518': attribute type 64 has an invalid length. [ 653.922688][T30142] netlink: 'syz.2.11518': attribute type 64 has an invalid length. [ 654.458117][T30162] ip_tables: iptables: counters copy to user failed while replacing table [ 654.822688][T30173] macvlan0: entered promiscuous mode [ 655.212626][T30186] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 655.912862][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11543'. [ 656.337499][T30214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11548'. [ 656.337550][T30214] bridge_slave_0: entered promiscuous mode [ 656.341282][T30214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11548'. [ 656.579123][T30218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11550'. [ 658.431579][T30264] xt_hashlimit: size too large, truncated to 1048576 [ 659.929736][T30306] sctp: [Deprecated]: syz.0.11588 (pid 30306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.929736][T30306] Use struct sctp_sack_info instead [ 660.353391][T30311] syzkaller1: entered promiscuous mode [ 660.353419][T30311] syzkaller1: entered allmulticast mode [ 660.685481][T30321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11594'. [ 660.705562][T30321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11594'. [ 661.458266][T30347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11607'. [ 661.458308][T30347] netlink: 'syz.4.11607': attribute type 30 has an invalid length. [ 661.513060][T30351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11607'. [ 661.513097][T30351] netlink: 'syz.4.11607': attribute type 30 has an invalid length. [ 661.638373][T22728] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.639647][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.639725][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.649027][T22728] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.255574][T30369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11617'. [ 662.255780][T30369] netlink: 'syz.2.11617': attribute type 7 has an invalid length. [ 662.255797][T30369] netlink: 'syz.2.11617': attribute type 8 has an invalid length. [ 662.255811][T30369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11617'. [ 662.652316][T30374] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 662.652910][T30374] gretap2: entered promiscuous mode [ 662.652930][T30374] gretap2: entered allmulticast mode [ 662.956176][T30388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11625'. [ 663.294176][T30397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11630'. [ 663.673437][T30408] netlink: 'syz.3.11636': attribute type 12 has an invalid length. [ 663.673464][T30408] netlink: 'syz.3.11636': attribute type 29 has an invalid length. [ 663.673479][T30408] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11636'. [ 663.673498][T30408] netlink: 'syz.3.11636': attribute type 1 has an invalid length. [ 663.673512][T30408] netlink: 'syz.3.11636': attribute type 2 has an invalid length. [ 663.673526][T30408] netlink: 11 bytes leftover after parsing attributes in process `syz.3.11636'. [ 664.464194][T30431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11643'. [ 664.476621][T30432] sock: sock_set_timeout: `syz.3.11646' (pid 30432) tries to set negative timeout [ 664.854825][T30434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11643'. [ 664.854856][T30434] nbd: device at index 64 is going down [ 666.223903][T30447] udevd[30447]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 666.274641][T30443] udevd[30443]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 667.168858][T30499] macvlan0: entered promiscuous mode [ 669.046051][T30559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11688'. [ 669.046082][T30559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11688'. [ 669.046289][T30559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11688'. [ 669.046307][T30559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11688'. [ 669.440554][T30563] ip6erspan0: entered allmulticast mode [ 670.247757][T30586] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 670.362458][T30592] netlink: 'syz.1.11703': attribute type 5 has an invalid length. [ 670.362483][T30592] netlink: 'syz.1.11703': attribute type 9 has an invalid length. [ 670.362499][T30592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11703'. [ 670.968339][T30604] xt_hashlimit: size too large, truncated to 1048576 [ 671.540112][T30617] netlink: 'syz.3.11715': attribute type 1 has an invalid length. [ 671.540138][T30617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11715'. [ 673.473542][T30669] ip_tables: iptables: counters copy to user failed while replacing table [ 674.484602][T30694] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 674.732801][T30701] netlink: 'syz.1.11751': attribute type 4 has an invalid length. [ 674.735914][T30700] vcan0: tx address claim with dest, not broadcast [ 674.812641][T30701] netlink: 'syz.1.11751': attribute type 4 has an invalid length. [ 675.223785][T30711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11755'. [ 675.799567][T30733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11765'. [ 675.799619][T30733] netlink: 'syz.2.11765': attribute type 10 has an invalid length. [ 675.799637][T30733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11765'. [ 676.516085][T30751] netlink: 'syz.0.11772': attribute type 17 has an invalid length. [ 676.516108][T30751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11772'. [ 676.516137][T30751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11772'. [ 677.512033][T30776] netlink: 'syz.3.11784': attribute type 4 has an invalid length. [ 677.544312][T30779] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.11785'. [ 677.848270][T30786] syz_tun: entered allmulticast mode [ 677.849907][T30783] syz_tun: left allmulticast mode [ 677.942972][T30790] netlink: 'syz.1.11791': attribute type 5 has an invalid length. [ 677.942997][T30790] netlink: 'syz.1.11791': attribute type 9 has an invalid length. [ 677.943012][T30790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11791'. [ 678.082021][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11793'. [ 678.166736][T30792] wlan1 speed is unknown, defaulting to 1000 [ 678.190492][T30792] lo speed is unknown, defaulting to 1000 [ 678.206033][T30792] wg0 speed is unknown, defaulting to 1000 [ 679.631019][T30829] netlink: 'syz.0.11807': attribute type 1 has an invalid length. [ 679.783954][T30829] 8021q: adding VLAN 0 to HW filter on device bond3 [ 679.984495][T30832] bond3: (slave gretap1): making interface the new active one [ 679.985571][T30832] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 680.011983][T30839] batman_adv: batadv0: Adding interface: syz_tun [ 680.012003][T30839] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.012037][T30839] batman_adv: batadv0: Interface activated: syz_tun [ 680.264527][T30841] ip_tables: iptables: counters copy to user failed while replacing table [ 681.826195][T30881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11827'. [ 682.610378][T30903] netlink: 'syz.1.11834': attribute type 1 has an invalid length. [ 682.812698][T30909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11836'. [ 682.812727][T30909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11836'. [ 682.815934][T30903] 8021q: adding VLAN 0 to HW filter on device bond4 [ 682.952964][T30906] bond4: (slave geneve2): making interface the new active one [ 682.999389][T30906] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 683.363435][T30918] xt_hashlimit: size too large, truncated to 1048576 [ 683.413487][T30919] netlink: 'syz.0.11840': attribute type 20 has an invalid length. [ 683.413514][T30919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11840'. [ 683.620420][T30919] netlink: 'syz.0.11840': attribute type 20 has an invalid length. [ 683.620447][T30919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11840'. [ 684.255898][T30935] netlink: 'syz.2.11848': attribute type 14 has an invalid length. [ 684.255925][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11848'. [ 684.280796][T30935] netlink: 'syz.2.11848': attribute type 14 has an invalid length. [ 684.280820][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11848'. [ 684.285128][T30937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11849'. [ 684.350973][T30937] team0: Port device dummy0 removed [ 685.075764][T30954] bond0: entered promiscuous mode [ 685.106306][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11856'. [ 685.219226][T30957] veth0: entered promiscuous mode [ 685.225291][T30956] veth0: left promiscuous mode [ 685.806632][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.056410][T30978] ip_tables: iptables: counters copy to user failed while replacing table [ 687.584259][T31024] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 687.803068][T31029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11887'. [ 688.517979][T31040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.520606][T31040] bridge0: port 3(bond0) entered blocking state [ 688.522183][T31040] bridge0: port 3(bond0) entered disabled state [ 688.522348][T31040] bond0: entered allmulticast mode [ 688.566323][T31040] bond0: entered promiscuous mode [ 688.577742][T31040] bridge0: port 3(bond0) entered blocking state [ 688.579314][T31040] bridge0: port 3(bond0) entered forwarding state [ 688.681787][T31050] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 688.938949][T22729] bridge0: port 3(bond0) entered disabled state [ 689.246237][T31066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11905'. [ 689.264170][T31066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11905'. [ 689.591255][T31071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11908'. [ 690.050426][T31086] netlink: 'syz.3.11911': attribute type 15 has an invalid length. [ 690.122031][T31086] netlink: 'syz.3.11911': attribute type 15 has an invalid length. [ 690.137355][T22729] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 690.137866][T22729] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 690.137917][T22729] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 690.137953][T22729] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 692.027516][T31122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11930'. [ 692.262228][T31122] hsr_slave_1 (unregistering): left promiscuous mode [ 692.341698][T31126] batadv_slave_1: entered promiscuous mode [ 692.357868][T31125] batadv_slave_1: left promiscuous mode [ 692.920898][T31143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11938'. [ 692.920923][T31143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11938'. [ 692.966190][T31141] syzkaller1: entered promiscuous mode [ 692.966217][T31141] syzkaller1: entered allmulticast mode [ 693.781960][T31165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11950'. [ 694.720257][T31198] af_packet: packet size is too long (4294967270 > 2016) [ 695.270412][T31213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11971'. [ 695.270441][T31213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11971'. [ 695.270698][T31213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11971'. [ 695.270715][T31213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11971'. [ 695.564229][T31223] netlink: 'syz.0.11975': attribute type 1 has an invalid length. [ 695.833807][T31231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11977'. [ 695.876769][T31223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 696.066955][T31235] syzkaller1: entered promiscuous mode [ 696.066981][T31235] syzkaller1: entered allmulticast mode [ 696.138057][T31237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11980'. [ 696.781201][T31250] netlink: 'syz.0.11984': attribute type 1 has an invalid length. [ 697.198306][T31262] netlink: 'syz.2.11991': attribute type 16 has an invalid length. [ 697.198333][T31262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11991'. [ 697.273404][T31266] netlink: 'syz.4.11992': attribute type 7 has an invalid length. [ 697.399912][T31266] netlink: 'syz.4.11992': attribute type 7 has an invalid length. [ 700.025943][T31326] __nla_validate_parse: 1 callbacks suppressed [ 700.025965][T31326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12016'. [ 705.244608][T31386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12039'. [ 705.244649][T31386] netlink: 'syz.1.12039': attribute type 7 has an invalid length. [ 705.244664][T31386] netlink: 'syz.1.12039': attribute type 8 has an invalid length. [ 705.244696][T31386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12039'. [ 706.335617][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880736f8000: rx timeout, send abort [ 706.339400][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880736f8000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 713.993239][T31432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12058'. [ 714.223835][T31438] netlink: 'syz.0.12061': attribute type 4 has an invalid length. [ 714.295210][T31439] netlink: 'syz.0.12061': attribute type 4 has an invalid length. [ 714.391006][T31441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12062'. [ 714.391775][T31441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12062'. [ 714.597931][T31443] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 714.764667][T31449] netlink: 'syz.1.12066': attribute type 12 has an invalid length. [ 715.218443][T31461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12068'. [ 715.955794][T31478] netlink: 'syz.1.12076': attribute type 15 has an invalid length. [ 716.450045][T31491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12081'. [ 718.335421][T31536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12092'. [ 718.360205][T31520] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 718.360357][T31520] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 718.361256][T31536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12092'. [ 718.650481][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12094'. [ 718.650519][T31543] netlink: 'syz.0.12094': attribute type 30 has an invalid length. [ 718.651760][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12094'. [ 719.020548][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12094'. [ 719.020585][T31543] netlink: 'syz.0.12094': attribute type 30 has an invalid length. [ 719.020602][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12094'. [ 720.861625][T31572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12103'. [ 721.011711][T31577] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 721.011814][T31577] syzkaller1: linktype set to 823 [ 729.144544][T31621] veth0: entered promiscuous mode [ 729.161017][T31621] veth0: left promiscuous mode [ 729.251845][T31623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12120'. [ 730.791601][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 730.806507][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 730.809101][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 730.826626][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 730.837995][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 730.906645][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 730.907486][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 730.923379][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 730.943997][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 730.944712][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 731.475886][T31625] wlan1 speed is unknown, defaulting to 1000 [ 731.490966][T31625] lo speed is unknown, defaulting to 1000 [ 731.493114][T31625] wg0 speed is unknown, defaulting to 1000 [ 731.828217][ C0] sched: DL replenish lagged too much [ 732.141600][T31625] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.141796][T31625] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.141943][T31625] bridge_slave_0: entered allmulticast mode [ 732.144153][T31625] bridge_slave_0: entered promiscuous mode [ 732.180838][T31625] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.181021][T31625] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.181176][T31625] bridge_slave_1: entered allmulticast mode [ 732.183212][T31625] bridge_slave_1: entered promiscuous mode [ 732.260289][T31625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.264470][T31625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.339326][T31625] team0: Port device team_slave_0 added [ 732.342911][T31625] team0: Port device team_slave_1 added [ 732.395164][T31625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.395185][T31625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.395213][T31625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.448789][T31625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.448817][T31625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.448847][T31625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.555624][T31625] hsr_slave_0: entered promiscuous mode [ 732.556901][T31625] hsr_slave_1: entered promiscuous mode [ 732.572707][T31625] debugfs: 'hsr0' already exists in 'hsr' [ 732.572752][T31625] Cannot create hsr debugfs directory [ 732.998408][ T5620] Bluetooth: hci5: command tx timeout [ 733.696501][T31625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 733.730430][T31625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 733.733487][T31625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 733.771691][T31625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 733.773024][T31625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 733.810617][T31625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 733.812196][T31625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 733.890138][T31625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.175673][T31625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.231984][T31625] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.271723][T30463] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.271852][T30463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.306684][T30463] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.306786][T30463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.976546][T31625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.078067][ T5620] Bluetooth: hci5: command tx timeout [ 735.419716][T31625] veth0_vlan: entered promiscuous mode [ 735.435136][T31625] veth1_vlan: entered promiscuous mode [ 735.491604][T31625] veth0_macvtap: entered promiscuous mode [ 735.506281][T31625] veth1_macvtap: entered promiscuous mode [ 735.536200][T31625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.556941][T31625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.739938][ T84] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.812290][ T84] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.813361][T22727] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.813405][T22727] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.909980][T22727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.910005][T22727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.986159][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.986184][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.683431][T31694] netlink: 'syz.5.12124': attribute type 1 has an invalid length. [ 737.157411][ T5620] Bluetooth: hci5: command tx timeout [ 737.304461][T31707] netlink: 'syz.5.12129': attribute type 4 has an invalid length. [ 737.459036][T31711] sctp: [Deprecated]: syz.5.12131 (pid 31711) Use of int in maxseg socket option. [ 737.459036][T31711] Use struct sctp_assoc_value instead [ 739.238553][ T5620] Bluetooth: hci5: command tx timeout [ 739.973370][T31751] batman_adv: batadv0: Adding interface: syzkaller0 [ 739.973392][T31751] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.973426][T31751] batman_adv: batadv0: Interface activated: syzkaller0 [ 745.998611][T31817] netlink: 'syz.4.12167': attribute type 1 has an invalid length. [ 746.071812][T31817] bond4: entered promiscuous mode [ 746.072637][T31817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 746.321918][T31817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 746.322387][T31817] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 746.322410][T31817] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 746.401083][T31817] bond4: (slave ip6gre2): making interface the new active one [ 746.401112][T31817] ip6gre2: entered promiscuous mode [ 746.424912][T31817] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 746.709508][T31829] ip_tables: iptables: counters copy to user failed while replacing table [ 746.771203][T31829] syzkaller1: entered promiscuous mode [ 746.771230][T31829] syzkaller1: entered allmulticast mode [ 747.259176][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.820347][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 752.835396][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 752.836585][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 752.865463][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 752.875188][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 754.997297][ T5620] Bluetooth: hci6: command tx timeout [ 757.077637][ T5620] Bluetooth: hci6: command tx timeout [ 759.157557][ T5620] Bluetooth: hci6: command tx timeout [ 761.237320][ T5620] Bluetooth: hci6: command tx timeout [ 761.796814][T31468] tipc: Resetting bearer [ 761.889893][T31866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12183'. [ 762.079145][T31468] tipc: Disabling bearer [ 763.182094][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 763.202550][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 763.203560][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 763.224863][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 763.225539][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 764.323489][ T5620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 764.338608][ T5620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 764.342135][ T5620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 764.345713][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 764.346428][ T5620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 765.319828][ T5620] Bluetooth: hci0: command tx timeout [ 766.439523][ T5620] Bluetooth: hci7: command tx timeout [ 767.397604][ T5620] Bluetooth: hci0: command tx timeout [ 768.519131][ T5620] Bluetooth: hci7: command tx timeout [ 768.735757][T31855] wlan1 speed is unknown, defaulting to 1000 [ 768.752210][T31855] lo speed is unknown, defaulting to 1000 [ 768.776554][T31855] wg0 speed is unknown, defaulting to 1000 [ 769.478292][ T5620] Bluetooth: hci0: command tx timeout [ 769.596616][T31887] wlan1 speed is unknown, defaulting to 1000 [ 769.608579][T31887] lo speed is unknown, defaulting to 1000 [ 769.667536][T31895] wlan1 speed is unknown, defaulting to 1000 [ 769.671066][T31895] lo speed is unknown, defaulting to 1000 [ 769.951236][T31887] wg0 speed is unknown, defaulting to 1000 [ 770.606518][ T5620] Bluetooth: hci7: command tx timeout [ 771.035314][T31895] wg0 speed is unknown, defaulting to 1000 [ 771.558414][ T5620] Bluetooth: hci0: command tx timeout [ 771.773786][T31855] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.773940][T31855] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.774089][T31855] bridge_slave_0: entered allmulticast mode [ 771.776147][T31855] bridge_slave_0: entered promiscuous mode [ 771.822221][T31855] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.822441][T31855] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.822915][T31855] bridge_slave_1: entered allmulticast mode [ 771.853254][T31855] bridge_slave_1: entered promiscuous mode [ 771.946211][T31855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.992659][T31855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.101441][T31855] team0: Port device team_slave_0 added [ 772.115107][T31855] team0: Port device team_slave_1 added [ 772.456216][T31855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.456238][T31855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.456269][T31855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.534140][T31855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.534162][T31855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.534192][T31855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.677458][ T5620] Bluetooth: hci7: command tx timeout [ 773.173199][T31855] hsr_slave_0: entered promiscuous mode [ 773.174393][T31855] hsr_slave_1: entered promiscuous mode [ 773.175282][T31855] debugfs: 'hsr0' already exists in 'hsr' [ 773.175303][T31855] Cannot create hsr debugfs directory [ 773.470307][T31887] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.470504][T31887] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.472517][T31887] bridge_slave_0: entered allmulticast mode [ 773.505174][T31887] bridge_slave_0: entered promiscuous mode [ 773.551281][T31887] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.551479][T31887] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.551624][T31887] bridge_slave_1: entered allmulticast mode [ 773.553957][T31887] bridge_slave_1: entered promiscuous mode [ 773.740768][T31887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.793367][T31895] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.793564][T31895] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.793705][T31895] bridge_slave_0: entered allmulticast mode [ 773.796497][T31895] bridge_slave_0: entered promiscuous mode [ 773.830626][T31895] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.830770][T31895] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.831305][T31895] bridge_slave_1: entered allmulticast mode [ 773.833454][T31895] bridge_slave_1: entered promiscuous mode [ 773.876716][T31887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.030733][T31895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.056060][T31895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.076163][T31887] team0: Port device team_slave_0 added [ 774.159352][T31887] team0: Port device team_slave_1 added [ 775.248662][T31895] team0: Port device team_slave_0 added [ 775.307625][T31895] team0: Port device team_slave_1 added [ 775.343232][T31887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.343251][T31887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.343280][T31887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.450583][T31887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.450604][T31887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.450635][T31887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.662093][T31895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.662114][T31895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.662143][T31895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.753312][T31895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.753357][T31895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.753387][T31895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.088034][T31887] hsr_slave_0: entered promiscuous mode [ 776.089226][T31887] hsr_slave_1: entered promiscuous mode [ 776.090073][T31887] debugfs: 'hsr0' already exists in 'hsr' [ 776.090095][T31887] Cannot create hsr debugfs directory [ 776.203709][T31895] hsr_slave_0: entered promiscuous mode [ 776.205945][T31895] hsr_slave_1: entered promiscuous mode [ 776.221523][T31895] debugfs: 'hsr0' already exists in 'hsr' [ 776.221549][T31895] Cannot create hsr debugfs directory [ 776.377496][T31855] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 776.406878][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 776.454469][T31855] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 776.483047][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.522981][T31855] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 776.541552][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.587266][T31855] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 776.620175][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.258731][T31895] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 777.311076][T31895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.338592][T31895] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 777.409254][T31895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.430948][T31855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.431417][T31895] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 777.528757][T31895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.682760][T31895] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 777.730756][T31979] netlink: 'syz.1.12203': attribute type 1 has an invalid length. [ 777.760880][T31895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.009398][T31979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 778.560080][T31980] bond5: (slave veth5): Enslaving as an active interface with a down link [ 778.562169][T31981] veth0_virt_wifi: entered promiscuous mode [ 778.645053][T31981] bond5: (slave veth0_virt_wifi): making interface the new active one [ 778.662909][T31981] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 778.864162][T31855] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.980481][T31887] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 779.021010][T31887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 779.022074][T31887] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 779.081596][T31887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 779.084452][T22728] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.084565][T22728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.185172][T31887] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 779.226892][T31887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 779.251827][T22728] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.251939][T22728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.294546][T31887] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 779.340041][T31887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 780.310627][T31895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.423898][T31887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.492938][T31895] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.582040][T22727] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.582189][T22727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.688631][T22727] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.688747][T22727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.722369][T31887] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.891775][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.891893][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.976386][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.976502][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.476808][T32025] syzkaller1: entered promiscuous mode [ 782.476833][T32025] syzkaller1: entered allmulticast mode [ 783.561502][T31855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.579429][T31887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.756119][T31895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.279131][T32061] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12212'. [ 785.529582][T22289] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.920927][T31855] veth0_vlan: entered promiscuous mode [ 785.983252][T31855] veth1_vlan: entered promiscuous mode [ 786.181215][T31855] veth0_macvtap: entered promiscuous mode [ 786.223617][T31855] veth1_macvtap: entered promiscuous mode [ 786.340984][T31855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.407718][T31855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.568331][ T1148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.568434][ T1148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.568476][ T1148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.568516][ T1148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.187166][T22729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.187192][T22729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.193388][T31895] veth0_vlan: entered promiscuous mode [ 787.234648][T31887] veth0_vlan: entered promiscuous mode [ 787.341227][T31895] veth1_vlan: entered promiscuous mode [ 787.385261][T31887] veth1_vlan: entered promiscuous mode [ 787.408120][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.408147][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.652713][T31895] veth0_macvtap: entered promiscuous mode [ 787.702672][T31887] veth0_macvtap: entered promiscuous mode [ 787.735074][T31895] veth1_macvtap: entered promiscuous mode [ 787.770356][T31887] veth1_macvtap: entered promiscuous mode [ 787.874034][T31895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.942081][T31895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.966098][T31887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.027284][ T1148] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.027351][ T1148] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.027394][ T1148] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.027434][ T1148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.096522][T31887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.328453][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.328651][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.521308][T32081] tipc: Started in network mode [ 788.521349][T32081] tipc: Node identity c2755a743318, cluster identity 4711 [ 788.522328][T32081] tipc: Enabled bearer , priority 10 [ 788.680851][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.700800][T22728] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.026506][T32080] tipc: Resetting bearer [ 789.124691][T32080] tipc: Disabling bearer [ 789.292238][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.292265][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.536002][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.536027][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.636637][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.636664][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.683790][T32095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12217'. [ 789.874899][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.874923][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.211075][T32120] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12224'. [ 791.278200][T32121] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12224'. [ 791.278337][T32121] 0ªî{X¹¦: renamed from gretap0 [ 791.353507][T32121] 0ªî{X¹¦: entered allmulticast mode [ 791.410433][T32121] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 794.348344][T22289] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.223346][T32141] netlink: 'syz.4.12228': attribute type 2 has an invalid length. [ 797.223377][T32141] netlink: 'syz.4.12228': attribute type 2 has an invalid length. [ 797.484430][T32156] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12233'. [ 798.744610][T32175] netlink: 64 bytes leftover after parsing attributes in process `syz.8.12241'. [ 798.791606][T32175] syzkaller1: entered promiscuous mode [ 798.791633][T32175] syzkaller1: entered allmulticast mode [ 799.809845][T32186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12244'. [ 802.074051][T22289] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.507858][T32194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12247'. [ 805.944446][T32208] ip_tables: iptables: counters copy to user failed while replacing table [ 806.182501][T32213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.596939][T32222] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12258'. [ 807.598934][T32222] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12258'. [ 810.305884][T22289] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.033343][ T1148] IPVS: starting estimator thread 0... [ 816.117355][T32290] IPVS: using max 25 ests per chain, 60000 per kthread [ 817.042245][T32299] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12280'. [ 818.097105][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.104611][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.141862][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.142984][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.143685][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 819.035877][T22289] bridge_slave_1: left allmulticast mode [ 819.035958][T22289] bridge_slave_1: left promiscuous mode [ 819.039012][T22289] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.166131][T22289] bridge_slave_0: left allmulticast mode [ 819.166162][T22289] bridge_slave_0: left promiscuous mode [ 819.166403][T22289] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.735876][T22289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.795374][T22289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.888045][T22289] bond0 (unregistering): Released all slaves [ 820.192526][T32316] wlan1 speed is unknown, defaulting to 1000 [ 820.195025][T32316] lo speed is unknown, defaulting to 1000 [ 820.196885][T32316] wg0 speed is unknown, defaulting to 1000 [ 820.278276][ T5620] Bluetooth: hci1: command tx timeout [ 821.391632][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 821.871200][T32316] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.877773][T32316] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.877961][T32316] bridge_slave_0: entered allmulticast mode [ 821.880060][T32316] bridge_slave_0: entered promiscuous mode [ 821.923744][T32316] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.923941][T32316] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.924111][T32316] bridge_slave_1: entered allmulticast mode [ 821.953480][T32316] bridge_slave_1: entered promiscuous mode [ 822.082770][T32316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.109982][T32316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.212590][T32316] team0: Port device team_slave_0 added [ 822.241240][T32316] team0: Port device team_slave_1 added [ 822.357447][ T5620] Bluetooth: hci1: command tx timeout [ 822.359827][T32316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.359845][T32316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.359873][T32316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.361923][T32316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.361939][T32316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.361967][T32316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.770529][T32316] hsr_slave_0: entered promiscuous mode [ 822.773404][T32316] hsr_slave_1: entered promiscuous mode [ 822.775924][T32316] debugfs: 'hsr0' already exists in 'hsr' [ 822.775948][T32316] Cannot create hsr debugfs directory [ 823.126609][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 823.683200][T32370] netlink: 'syz.4.12285': attribute type 1 has an invalid length. [ 824.395992][T32375] sctp: [Deprecated]: syz.4.12288 (pid 32375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 824.395992][T32375] Use struct sctp_sack_info instead [ 824.439335][ T5620] Bluetooth: hci1: command tx timeout [ 824.460652][T32375] netlink: 'syz.4.12288': attribute type 10 has an invalid length. [ 824.552731][T32375] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12288'. [ 826.031161][T32316] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 826.146381][T32316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 826.404564][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 826.406020][T32316] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 826.473658][T32316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 826.494413][T32316] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 826.517189][ T5620] Bluetooth: hci1: command tx timeout [ 826.559532][T32316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 826.560513][T32316] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 826.608747][T32316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 826.906379][T32316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.989075][T32316] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.014881][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.015001][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.103435][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.103563][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.170221][T32421] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12291'. [ 829.054331][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 829.995708][T32316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.456248][T32316] veth0_vlan: entered promiscuous mode [ 830.505361][T32316] veth1_vlan: entered promiscuous mode [ 830.578300][T32316] veth0_macvtap: entered promiscuous mode [ 830.585938][T32316] veth1_macvtap: entered promiscuous mode [ 830.633774][T32316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.658611][T32316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.805091][T22725] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.805498][T22725] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.805879][T22725] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.806242][T22725] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.066546][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.066571][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.172832][T22727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.172857][T22727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.709045][T32486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12302'. [ 833.709093][T32486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12302'. [ 834.252810][T32494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12303'. [ 834.279492][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 837.370413][T32517] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12309'. [ 840.381649][T32536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12311'. [ 840.381740][T32536] bridge_slave_1: left allmulticast mode [ 840.381764][T32536] bridge_slave_1: left promiscuous mode [ 840.382019][T32536] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.570979][T32536] bridge_slave_0: left allmulticast mode [ 840.571009][T32536] bridge_slave_0: left promiscuous mode [ 840.617578][T32536] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.343532][T32584] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12318'. [ 846.173344][T32609] netlink: 604 bytes leftover after parsing attributes in process `syz.1.12324'. [ 846.935483][T22289] hsr_slave_0: left promiscuous mode [ 846.969265][T22289] hsr_slave_1: left promiscuous mode [ 846.970606][T22289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.970657][T22289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.023417][T22289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.023443][T22289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.173446][T22289] veth1_macvtap: left promiscuous mode [ 847.173537][T22289] veth0_macvtap: left promiscuous mode [ 847.173754][T22289] veth1_vlan: left promiscuous mode [ 847.175475][T22289] veth0_vlan: left promiscuous mode [ 848.113877][T22289] team0 (unregistering): Port device team_slave_1 removed [ 848.208658][T22289] team0 (unregistering): Port device team_slave_0 removed [ 848.483936][T32614] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 849.682549][T32638] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 849.682689][T32638] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 852.522770][T32687] syzkaller0: entered promiscuous mode [ 852.522796][T32687] syzkaller0: entered allmulticast mode [ 853.176609][T32697] syzkaller0: entered promiscuous mode [ 853.176635][T32697] syzkaller0: entered allmulticast mode [ 853.724441][T32707] netlink: 'syz.4.12345': attribute type 1 has an invalid length. [ 853.776135][T32707] bond5: entered promiscuous mode [ 853.776580][T32707] 8021q: adding VLAN 0 to HW filter on device bond5 [ 853.793199][T32710] netlink: 'syz.9.12344': attribute type 1 has an invalid length. [ 853.866386][T32707] macvtap0: entered allmulticast mode [ 854.311887][T32713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12346'. [ 857.315799][T32726] netlink: 'syz.1.12350': attribute type 1 has an invalid length. [ 863.352923][T32707] macvtap1: entered allmulticast mode [ 863.384885][T32709] bond5: (slave bridge0): making interface the new active one [ 863.384913][T32709] bridge0: entered promiscuous mode [ 863.411758][T32709] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 863.496244][T32726] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 863.522488][T32728] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 863.961125][T32739] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12353'. [ 865.299476][T32766] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12359'. [ 865.692117][ T303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12360'. [ 865.825251][ T303] bond6: entered promiscuous mode [ 865.825277][ T303] bond6: entered allmulticast mode [ 866.344446][ T311] ip_tables: iptables: counters copy to user failed while replacing table [ 866.895631][ T319] syzkaller0: entered promiscuous mode [ 866.895656][ T319] syzkaller0: entered allmulticast mode [ 868.064771][ T328] syzkaller0: left promiscuous mode [ 868.064798][ T328] syzkaller0: left allmulticast mode [ 869.030090][ T334] ip_tables: iptables: counters copy to user failed while replacing table [ 869.956575][ T343] syzkaller0: entered promiscuous mode [ 869.956601][ T343] syzkaller0: entered allmulticast mode [ 871.376435][ T356] netlink: 550 bytes leftover after parsing attributes in process `syz.4.12379'. [ 871.483020][ T358] syzkaller1: entered promiscuous mode [ 871.483046][ T358] syzkaller1: entered allmulticast mode [ 872.380474][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.380504][ T364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.503872][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.503900][ T364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.143249][ T374] syzkaller0: entered promiscuous mode [ 873.143275][ T374] syzkaller0: entered allmulticast mode [ 873.795042][ T383] syzkaller0: entered promiscuous mode [ 873.795068][ T383] syzkaller0: entered allmulticast mode [ 877.650830][ T396] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 886.181973][ T436] syzkaller0: entered promiscuous mode [ 886.181998][ T436] syzkaller0: entered allmulticast mode [ 886.210445][ T438] syzkaller0: left promiscuous mode [ 886.210471][ T438] syzkaller0: left allmulticast mode [ 887.352305][ T460] syzkaller0: entered promiscuous mode [ 887.352330][ T460] syzkaller0: entered allmulticast mode [ 887.557518][ T429] Bluetooth: hci7: command 0x0406 tx timeout [ 887.557608][ T429] Bluetooth: hci0: command 0x0406 tx timeout [ 921.692947][ T551] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 921.696321][ T429] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 921.716773][ T551] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 921.738969][ T551] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 921.741835][ T429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 921.743572][ T429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 921.744315][ T429] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 921.748000][ T551] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 921.762440][ T551] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 921.764261][ T551] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 921.777297][ T429] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 921.783148][ T553] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 921.798953][ T551] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 921.834146][ T553] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 921.834738][ T553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 921.857548][ T550] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 921.898494][ T551] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 921.919987][ T553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 921.982042][ T550] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 921.985028][ T550] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 922.045131][ T5617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 922.046651][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 922.070556][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 922.086566][T31626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 922.099057][T31626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 923.957751][ T549] Bluetooth: hci9: command tx timeout [ 924.127930][ T549] Bluetooth: hci6: command tx timeout [ 924.197291][ T549] Bluetooth: hci5: command tx timeout [ 924.277917][ T549] Bluetooth: hci8: command tx timeout [ 924.281066][ T549] Bluetooth: hci3: command tx timeout [ 924.936112][ T543] wlan1 speed is unknown, defaulting to 1000 [ 924.964682][ T547] wlan1 speed is unknown, defaulting to 1000 [ 924.974686][ T543] lo speed is unknown, defaulting to 1000 [ 925.011323][ T543] wg0 speed is unknown, defaulting to 1000 [ 925.013000][ T545] wlan1 speed is unknown, defaulting to 1000 [ 925.015564][ T547] lo speed is unknown, defaulting to 1000 [ 925.040750][ T539] wlan1 speed is unknown, defaulting to 1000 [ 925.043357][ T545] lo speed is unknown, defaulting to 1000 [ 925.089995][ T539] lo speed is unknown, defaulting to 1000 [ 925.095675][ T541] wlan1 speed is unknown, defaulting to 1000 [ 925.122402][ T541] lo speed is unknown, defaulting to 1000 [ 925.394226][ T547] wg0 speed is unknown, defaulting to 1000 [ 925.985111][ T545] wg0 speed is unknown, defaulting to 1000 [ 926.037465][ T5620] Bluetooth: hci9: command tx timeout [ 926.197928][ T5620] Bluetooth: hci6: command tx timeout [ 926.277398][ T5620] Bluetooth: hci5: command tx timeout [ 926.357094][ T5620] Bluetooth: hci3: command tx timeout [ 926.357131][ T5620] Bluetooth: hci8: command tx timeout [ 926.418004][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.418194][ T543] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.418354][ T543] bridge_slave_0: entered allmulticast mode [ 926.424132][ T543] bridge_slave_0: entered promiscuous mode [ 926.517976][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.518088][ T543] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.518253][ T543] bridge_slave_1: entered allmulticast mode [ 926.526854][ T543] bridge_slave_1: entered promiscuous mode [ 926.701744][ T543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.746533][ T543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.813189][ T539] wg0 speed is unknown, defaulting to 1000 [ 926.926859][ T543] team0: Port device team_slave_0 added [ 926.944908][ T543] team0: Port device team_slave_1 added [ 927.259891][ T543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.259911][ T543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.259949][ T543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.407677][ T543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.407698][ T543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.407727][ T543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.755137][ T543] hsr_slave_0: entered promiscuous mode [ 927.756411][ T543] hsr_slave_1: entered promiscuous mode [ 927.770248][ T543] debugfs: 'hsr0' already exists in 'hsr' [ 927.770275][ T543] Cannot create hsr debugfs directory [ 927.837119][ T541] wg0 speed is unknown, defaulting to 1000 [ 928.118182][ T549] Bluetooth: hci9: command tx timeout [ 928.277260][ T549] Bluetooth: hci6: command tx timeout [ 928.358218][ T549] Bluetooth: hci5: command tx timeout [ 928.437234][ T5620] Bluetooth: hci8: command tx timeout [ 928.437272][ T5620] Bluetooth: hci3: command tx timeout [ 928.830851][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.832524][ T547] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.832718][ T547] bridge_slave_0: entered allmulticast mode [ 928.835998][ T547] bridge_slave_0: entered promiscuous mode [ 928.950540][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.950766][ T547] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.950938][ T547] bridge_slave_1: entered allmulticast mode [ 928.956207][ T547] bridge_slave_1: entered promiscuous mode [ 929.181403][ T547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.271889][ T547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.572142][ T547] team0: Port device team_slave_0 added [ 929.756161][ T543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.756204][ T543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.756229][ T543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 929.898596][ T547] team0: Port device team_slave_1 added [ 929.961226][ T545] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.961394][ T545] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.961550][ T545] bridge_slave_0: entered allmulticast mode [ 929.964168][ T545] bridge_slave_0: entered promiscuous mode [ 930.063534][ T545] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.063729][ T545] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.063899][ T545] bridge_slave_1: entered allmulticast mode [ 930.066168][ T545] bridge_slave_1: entered promiscuous mode [ 930.114235][ T547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.114255][ T547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.114289][ T547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.201666][ T549] Bluetooth: hci9: command tx timeout [ 930.254231][ T547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.254251][ T547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.254282][ T547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.357195][ T549] Bluetooth: hci6: command tx timeout [ 930.437894][ T549] Bluetooth: hci5: command tx timeout [ 930.472568][ T545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.486900][ T545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.517215][ T549] Bluetooth: hci3: command tx timeout [ 930.517251][ T549] Bluetooth: hci8: command tx timeout [ 930.821243][ T545] team0: Port device team_slave_0 added [ 930.850043][ T547] hsr_slave_0: entered promiscuous mode [ 930.851353][ T547] hsr_slave_1: entered promiscuous mode [ 930.852186][ T547] debugfs: 'hsr0' already exists in 'hsr' [ 930.852207][ T547] Cannot create hsr debugfs directory [ 930.903546][ T545] team0: Port device team_slave_1 added [ 931.115745][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.115937][ T539] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.116096][ T539] bridge_slave_0: entered allmulticast mode [ 931.149736][ T539] bridge_slave_0: entered promiscuous mode [ 931.169177][ T545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.169198][ T545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.169227][ T545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.174222][ T539] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.174346][ T539] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.174534][ T539] bridge_slave_1: entered allmulticast mode [ 931.254113][ T539] bridge_slave_1: entered promiscuous mode [ 931.298578][ T545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.298598][ T545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.298628][ T545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.633160][ T539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.747540][ T539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.747780][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.748196][ T541] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.748353][ T541] bridge_slave_0: entered allmulticast mode [ 931.750520][ T541] bridge_slave_0: entered promiscuous mode [ 931.810615][ T545] hsr_slave_0: entered promiscuous mode [ 931.811930][ T545] hsr_slave_1: entered promiscuous mode [ 931.814049][ T545] debugfs: 'hsr0' already exists in 'hsr' [ 931.814072][ T545] Cannot create hsr debugfs directory [ 931.894977][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.895161][ T541] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.895318][ T541] bridge_slave_1: entered allmulticast mode [ 931.933676][ T541] bridge_slave_1: entered promiscuous mode [ 932.024908][ T539] team0: Port device team_slave_0 added [ 932.113004][ T539] team0: Port device team_slave_1 added [ 932.164448][ T541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.245667][ T541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.269413][ T539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.269435][ T539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.269464][ T539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.398300][ T539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.398320][ T539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.398349][ T539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.496784][ T541] team0: Port device team_slave_0 added [ 932.700392][ T541] team0: Port device team_slave_1 added [ 932.871616][ T541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.871654][ T541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.871684][ T541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.963749][ T541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.963770][ T541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.963800][ T541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.023355][ T539] hsr_slave_0: entered promiscuous mode [ 933.024632][ T539] hsr_slave_1: entered promiscuous mode [ 933.025496][ T539] debugfs: 'hsr0' already exists in 'hsr' [ 933.025518][ T539] Cannot create hsr debugfs directory [ 933.176084][ T541] hsr_slave_0: entered promiscuous mode [ 933.184596][ T541] hsr_slave_1: entered promiscuous mode [ 933.185604][ T541] debugfs: 'hsr0' already exists in 'hsr' [ 933.185624][ T541] Cannot create hsr debugfs directory [ 936.034618][ T543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.034661][ T543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.034690][ T543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 938.431412][ T5622] tipc: Resetting bearer [ 938.431466][ T5622] batman_adv: batadv0: Interface deactivated: syz_tun [ 938.745916][ T5622] tipc: Disabling bearer [ 938.815576][ T5622] batman_adv: batadv0: Removing interface: syz_tun [ 941.584132][ T543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.584173][ T543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.584203][ T543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 944.653983][T22289] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.511638][T22289] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.490468][ T547] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.105147][T22289] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.600394][ T547] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.003922][T22289] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.145276][ T547] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.523908][ T549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 966.535974][ T549] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 966.548934][ T549] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 966.550123][ T549] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 966.551286][ T549] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 967.101234][ T637] wlan1 speed is unknown, defaulting to 1000 [ 967.103070][ T637] lo speed is unknown, defaulting to 1000 [ 967.104909][ T637] wg0 speed is unknown, defaulting to 1000 [ 967.881513][ T637] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.881697][ T637] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.881845][ T637] bridge_slave_0: entered allmulticast mode [ 967.883881][ T637] bridge_slave_0: entered promiscuous mode [ 967.918074][ T637] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.918251][ T637] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.918402][ T637] bridge_slave_1: entered allmulticast mode [ 967.920560][ T637] bridge_slave_1: entered promiscuous mode [ 968.014828][ T637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.029251][ T637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.091337][ T637] team0: Port device team_slave_0 added [ 968.094661][ T637] team0: Port device team_slave_1 added [ 968.147959][ T637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.147981][ T637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.148011][ T637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.150290][ T637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.150306][ T637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.150336][ T637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.325828][ T637] hsr_slave_0: entered promiscuous mode [ 968.335212][ T637] hsr_slave_1: entered promiscuous mode [ 968.336109][ T637] debugfs: 'hsr0' already exists in 'hsr' [ 968.336132][ T637] Cannot create hsr debugfs directory [ 968.598280][ T5620] Bluetooth: hci0: command tx timeout [ 969.532454][T22289] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.978993][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 970.677678][ T5620] Bluetooth: hci0: command tx timeout [ 970.819520][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 971.628323][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 972.429626][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 972.757663][ T5620] Bluetooth: hci0: command tx timeout [ 973.478957][ T547] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.838266][ T5620] Bluetooth: hci0: command tx timeout [ 976.418830][T22289] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.051841][ T549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 979.075642][ T549] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 979.076566][ T549] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 979.112450][ T549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 979.114977][ T549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 980.270020][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 980.273607][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 980.274456][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 980.293533][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 980.316694][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 980.489486][ T549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 980.493896][ T549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 980.494786][ T549] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 980.538767][ T549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 980.539471][ T549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.624364][ T545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.624406][ T545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.121752][ T549] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 981.166526][ T549] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 981.184221][ T549] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 981.194667][ T549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 981.209450][ T549] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 981.239823][ T5620] Bluetooth: hci1: command tx timeout [ 981.542796][ T726] wlan1 speed is unknown, defaulting to 1000 [ 981.574904][ T726] lo speed is unknown, defaulting to 1000 [ 981.586171][ T726] wg0 speed is unknown, defaulting to 1000 [ 982.437665][ T549] Bluetooth: hci2: command tx timeout [ 982.679693][ T549] Bluetooth: hci4: command tx timeout [ 982.739840][ T740] wlan1 speed is unknown, defaulting to 1000 [ 982.743003][ T740] lo speed is unknown, defaulting to 1000 [ 982.745695][ T744] wlan1 speed is unknown, defaulting to 1000 [ 982.788225][ T744] lo speed is unknown, defaulting to 1000 [ 982.860583][ T740] wg0 speed is unknown, defaulting to 1000 [ 983.169444][ T752] wlan1 speed is unknown, defaulting to 1000 [ 983.172174][ T752] lo speed is unknown, defaulting to 1000 [ 983.238305][ T549] Bluetooth: hci7: command tx timeout [ 983.317451][ T549] Bluetooth: hci1: command tx timeout [ 983.761966][ T744] wg0 speed is unknown, defaulting to 1000 [ 984.394669][ T726] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.394783][ T726] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.394990][ T726] bridge_slave_0: entered allmulticast mode [ 984.428141][ T726] bridge_slave_0: entered promiscuous mode [ 984.471683][ T726] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.471848][ T726] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.472020][ T726] bridge_slave_1: entered allmulticast mode [ 984.517403][ T549] Bluetooth: hci2: command tx timeout [ 984.535069][ T726] bridge_slave_1: entered promiscuous mode [ 984.741995][ T726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.759976][ T549] Bluetooth: hci4: command tx timeout [ 984.784614][ T726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.014243][T22289] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.125565][ T752] wg0 speed is unknown, defaulting to 1000 [ 985.298820][ T726] team0: Port device team_slave_0 added [ 985.318157][ T549] Bluetooth: hci7: command tx timeout [ 985.397639][ T5620] Bluetooth: hci1: command tx timeout [ 985.458198][ T726] team0: Port device team_slave_1 added [ 985.873032][ T726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.873054][ T726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.873084][ T726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.985763][ T726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.985783][ T726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.985814][ T726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.420973][ T726] hsr_slave_0: entered promiscuous mode [ 986.450852][ T726] hsr_slave_1: entered promiscuous mode [ 986.460435][ T726] debugfs: 'hsr0' already exists in 'hsr' [ 986.460461][ T726] Cannot create hsr debugfs directory [ 986.603923][ T5620] Bluetooth: hci2: command tx timeout [ 986.837885][ T549] Bluetooth: hci4: command tx timeout [ 987.398002][ T549] Bluetooth: hci7: command tx timeout [ 987.477559][ T549] Bluetooth: hci1: command tx timeout [ 987.546754][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.555765][ T740] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.566193][ T740] bridge_slave_0: entered allmulticast mode [ 987.579481][ T740] bridge_slave_0: entered promiscuous mode [ 987.732658][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.732775][ T740] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.732982][ T740] bridge_slave_1: entered allmulticast mode [ 987.737533][ T740] bridge_slave_1: entered promiscuous mode [ 988.145508][ T740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.224142][ T740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.446641][ T740] team0: Port device team_slave_0 added [ 988.470260][ T740] team0: Port device team_slave_1 added [ 988.545406][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.545631][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.545854][ T744] bridge_slave_0: entered allmulticast mode [ 988.573294][ T744] bridge_slave_0: entered promiscuous mode [ 988.592390][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.594105][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.594280][ T744] bridge_slave_1: entered allmulticast mode [ 988.637972][ T744] bridge_slave_1: entered promiscuous mode [ 988.677444][ T549] Bluetooth: hci2: command tx timeout [ 988.763709][ T740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.763729][ T740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.763776][ T740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.889632][ T740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.889652][ T740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.889680][ T740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.945769][ T549] Bluetooth: hci4: command tx timeout [ 989.057300][ T744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.205541][ T744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.364823][ T740] hsr_slave_0: entered promiscuous mode [ 989.376386][ T740] hsr_slave_1: entered promiscuous mode [ 989.386083][ T740] debugfs: 'hsr0' already exists in 'hsr' [ 989.386108][ T740] Cannot create hsr debugfs directory [ 989.477613][ T549] Bluetooth: hci7: command tx timeout [ 989.505332][ T744] team0: Port device team_slave_0 added [ 989.572628][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.572841][ T752] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.573045][ T752] bridge_slave_0: entered allmulticast mode [ 989.576585][ T752] bridge_slave_0: entered promiscuous mode [ 989.616235][ T744] team0: Port device team_slave_1 added [ 989.698977][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.699135][ T752] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.699328][ T752] bridge_slave_1: entered allmulticast mode [ 989.705126][ T752] bridge_slave_1: entered promiscuous mode [ 989.994277][ T744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.994300][ T744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.994328][ T744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.144236][ T752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.161375][ T744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.161395][ T744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.161427][ T744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.504871][ T545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.504925][ T545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.818190][ T752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.996092][ T744] hsr_slave_0: entered promiscuous mode [ 991.011268][ T744] hsr_slave_1: entered promiscuous mode [ 991.012271][ T744] debugfs: 'hsr0' already exists in 'hsr' [ 991.012292][ T744] Cannot create hsr debugfs directory [ 991.045527][ T752] team0: Port device team_slave_0 added [ 991.084295][ T752] team0: Port device team_slave_1 added [ 991.193973][ T752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.193994][ T752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.194023][ T752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.269992][ T752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.270029][ T752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.270060][ T752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.433575][ T752] hsr_slave_0: entered promiscuous mode [ 991.434849][ T752] hsr_slave_1: entered promiscuous mode [ 991.435712][ T752] debugfs: 'hsr0' already exists in 'hsr' [ 991.435734][ T752] Cannot create hsr debugfs directory [ 994.910733][T22289] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.887911][ T545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.887955][ T545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.773218][ T545] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.773259][ T545] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.613279][T22289] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.889551][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1008.835559][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1009.800194][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1010.564238][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1019.994687][T22289] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.505571][ T539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.505611][ T539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1020.505638][ T539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.505665][ T539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58938 - 0 [ 1023.354367][T22289] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.515422][ T539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.515464][ T539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1024.515493][ T539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.515522][ T539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58938 - 0 [ 1026.581089][ T5620] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1026.595960][ T5620] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1026.610730][ T5620] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1026.614602][ T5620] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1026.615309][ T5620] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1027.104385][ T977] wlan1 speed is unknown, defaulting to 1000 [ 1027.106212][ T977] lo speed is unknown, defaulting to 1000 [ 1027.126681][ T977] wg0 speed is unknown, defaulting to 1000 [ 1027.775000][ T977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.775188][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.775363][ T977] bridge_slave_0: entered allmulticast mode [ 1027.806279][ T977] bridge_slave_0: entered promiscuous mode [ 1027.815905][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.816097][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.816611][ T977] bridge_slave_1: entered allmulticast mode [ 1027.844497][ T977] bridge_slave_1: entered promiscuous mode [ 1027.920195][ T977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.925141][ T977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.999323][ T977] team0: Port device team_slave_0 added [ 1028.002741][ T977] team0: Port device team_slave_1 added [ 1028.061152][ T977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.061172][ T977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.061201][ T977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.063415][ T977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.063431][ T977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.063460][ T977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.279838][ T977] hsr_slave_0: entered promiscuous mode [ 1028.284451][ T977] hsr_slave_1: entered promiscuous mode [ 1028.285390][ T977] debugfs: 'hsr0' already exists in 'hsr' [ 1028.285412][ T977] Cannot create hsr debugfs directory [ 1028.677290][ T549] Bluetooth: hci10: command tx timeout [ 1029.665305][T22289] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.757524][ T549] Bluetooth: hci10: command tx timeout [ 1032.506637][ T539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.506678][ T539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1032.506719][ T539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.506746][ T539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58938 - 0 [ 1032.838411][ T549] Bluetooth: hci10: command tx timeout [ 1034.917899][ T549] Bluetooth: hci10: command tx timeout [ 1035.192091][T22289] bridge_slave_1: left allmulticast mode [ 1035.192122][T22289] bridge_slave_1: left promiscuous mode [ 1035.192349][T22289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.336075][T22289] bridge_slave_0: left allmulticast mode [ 1035.336107][T22289] bridge_slave_0: left promiscuous mode [ 1035.336335][T22289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.552543][T22289] bridge_slave_1: left allmulticast mode [ 1035.552572][T22289] bridge_slave_1: left promiscuous mode [ 1035.552846][T22289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.706438][T22289] bridge_slave_0: left allmulticast mode [ 1035.706486][T22289] bridge_slave_0: left promiscuous mode [ 1035.706714][T22289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.991176][T22289] bridge_slave_1: left allmulticast mode [ 1035.991218][T22289] bridge_slave_1: left promiscuous mode [ 1035.991427][T22289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.040202][T22289] bridge_slave_0: left allmulticast mode [ 1036.040231][T22289] bridge_slave_0: left promiscuous mode [ 1036.040425][T22289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.150798][T22289] bridge_slave_1: left allmulticast mode [ 1036.150827][T22289] bridge_slave_1: left promiscuous mode [ 1036.151109][T22289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.218711][T22289] bridge_slave_0: left allmulticast mode [ 1036.218741][T22289] bridge_slave_0: left promiscuous mode [ 1036.220838][T22289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.086106][T22289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.140420][T22289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.197854][T22289] bond0 (unregistering): Released all slaves [ 1037.523038][T22289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.585307][T22289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.615004][T22289] bond0 (unregistering): Released all slaves [ 1037.937920][T22289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.010345][T22289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.064226][T22289] bond0 (unregistering): Released all slaves [ 1038.095045][T22289] bond1 (unregistering): Released all slaves [ 1038.434736][T22289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.493195][T22289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.515702][T22289] bond0 (unregistering): Released all slaves [ 1038.558948][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1038.675966][ T539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.676017][ T539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1038.676048][ T539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.676077][ T539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58938 - 0 [ 1039.364370][ T5620] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1039.380445][ T5620] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1039.381236][ T5620] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1039.402799][ T5620] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1039.406532][ T5620] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1040.234179][ T549] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1040.250527][ T549] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1040.253292][ T549] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1040.278838][ T549] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1040.282296][ T549] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1040.404296][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1041.176805][ T549] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1041.195911][ T549] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1041.225163][ T549] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1041.278228][ T549] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1041.278966][ T549] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1041.477273][ T5620] Bluetooth: hci11: command tx timeout [ 1041.705791][ T549] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1041.730053][ T549] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1041.732457][ T549] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1041.756332][ T549] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1041.772438][ T549] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1041.973678][ T1075] wlan1 speed is unknown, defaulting to 1000 [ 1041.989143][ T1075] lo speed is unknown, defaulting to 1000 [ 1041.998209][ T1075] wg0 speed is unknown, defaulting to 1000 [ 1042.360068][ T549] Bluetooth: hci12: command tx timeout [ 1043.182803][ T1091] wlan1 speed is unknown, defaulting to 1000 [ 1043.210155][ T1091] lo speed is unknown, defaulting to 1000 [ 1043.397805][ T549] Bluetooth: hci13: command tx timeout [ 1043.557634][ T5620] Bluetooth: hci11: command tx timeout [ 1043.624690][ T1091] wg0 speed is unknown, defaulting to 1000 [ 1043.878067][ T549] Bluetooth: hci14: command tx timeout [ 1044.030532][ T1102] wlan1 speed is unknown, defaulting to 1000 [ 1044.063853][ T1102] lo speed is unknown, defaulting to 1000 [ 1044.194709][ T1110] wlan1 speed is unknown, defaulting to 1000 [ 1044.252020][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1044.327309][ T1110] lo speed is unknown, defaulting to 1000 [ 1044.439110][ T550] Bluetooth: hci12: command tx timeout [ 1044.859848][ T1102] wg0 speed is unknown, defaulting to 1000 [ 1045.442585][T22289] tipc: Left network mode [ 1045.478142][ T550] Bluetooth: hci13: command tx timeout [ 1045.637141][ T550] Bluetooth: hci11: command tx timeout [ 1045.645664][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.645885][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.646055][ T1075] bridge_slave_0: entered allmulticast mode [ 1045.699070][ T1075] bridge_slave_0: entered promiscuous mode [ 1045.731305][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.734787][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.734983][ T1075] bridge_slave_1: entered allmulticast mode [ 1045.781371][ T1075] bridge_slave_1: entered promiscuous mode [ 1045.958175][ T550] Bluetooth: hci14: command tx timeout [ 1046.303674][ T550] Bluetooth: hci3: command 0x0406 tx timeout [ 1046.303780][ T550] Bluetooth: hci9: command 0x0406 tx timeout [ 1046.303830][ T550] Bluetooth: hci6: command 0x0406 tx timeout [ 1046.303877][ T550] Bluetooth: hci5: command 0x0406 tx timeout [ 1046.520313][ T5617] Bluetooth: hci12: command tx timeout [ 1047.559849][ T549] Bluetooth: hci13: command tx timeout [ 1047.717290][ T549] Bluetooth: hci11: command tx timeout [ 1048.039247][ T549] Bluetooth: hci14: command tx timeout [ 1048.597583][ T549] Bluetooth: hci12: command tx timeout [ 1049.637643][ T549] Bluetooth: hci13: command tx timeout [ 1050.118676][ T549] Bluetooth: hci14: command tx timeout [ 1060.427910][ T1110] wg0 speed is unknown, defaulting to 1000 [ 1060.449804][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1061.059919][ T1075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.064012][ T1075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.482838][ T1075] team0: Port device team_slave_0 added [ 1061.506730][ T1075] team0: Port device team_slave_1 added [ 1064.784770][ T1075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.784790][ T1075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.784819][ T1075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.206340][ T1075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.206362][ T1075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.206393][ T1075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.605690][ T1075] hsr_slave_0: entered promiscuous mode [ 1065.616450][ T1075] hsr_slave_1: entered promiscuous mode [ 1065.629442][ T1075] debugfs: 'hsr0' already exists in 'hsr' [ 1065.629477][ T1075] Cannot create hsr debugfs directory [ 1066.393507][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.393633][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.393794][ T1091] bridge_slave_0: entered allmulticast mode [ 1066.419736][ T1091] bridge_slave_0: entered promiscuous mode [ 1066.591164][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.591366][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.591527][ T1091] bridge_slave_1: entered allmulticast mode [ 1066.596803][ T1091] bridge_slave_1: entered promiscuous mode [ 1066.858499][ T1091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.968045][ T1091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.372032][ T1091] team0: Port device team_slave_0 added [ 1067.407851][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.408006][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.408221][ T1102] bridge_slave_0: entered allmulticast mode [ 1067.418351][ T1102] bridge_slave_0: entered promiscuous mode [ 1067.450025][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.450141][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.450366][ T1102] bridge_slave_1: entered allmulticast mode [ 1067.452922][ T1102] bridge_slave_1: entered promiscuous mode [ 1067.586721][ T1091] team0: Port device team_slave_1 added [ 1067.827562][ T1102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.972029][ T1102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.096354][ T1091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.096376][ T1091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.096405][ T1091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.435852][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.435971][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.436190][ T1110] bridge_slave_0: entered allmulticast mode [ 1068.465983][ T1110] bridge_slave_0: entered promiscuous mode [ 1068.479282][ T1091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.479301][ T1091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.479332][ T1091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.485037][ T1102] team0: Port device team_slave_0 added [ 1068.485377][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.485565][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.485728][ T1110] bridge_slave_1: entered allmulticast mode [ 1068.572513][ T1110] bridge_slave_1: entered promiscuous mode [ 1068.656817][ T1102] team0: Port device team_slave_1 added [ 1068.723856][ T1110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.860044][ T1110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.912553][ T1102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.912573][ T1102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.912617][ T1102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.968828][ T1102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.968847][ T1102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.968877][ T1102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.168612][ T1091] hsr_slave_0: entered promiscuous mode [ 1069.172879][ T1091] hsr_slave_1: entered promiscuous mode [ 1069.173776][ T1091] debugfs: 'hsr0' already exists in 'hsr' [ 1069.173798][ T1091] Cannot create hsr debugfs directory [ 1069.216315][ T1110] team0: Port device team_slave_0 added [ 1069.330976][ T1110] team0: Port device team_slave_1 added [ 1069.651646][ T1102] hsr_slave_0: entered promiscuous mode [ 1069.654435][ T1102] hsr_slave_1: entered promiscuous mode [ 1069.655891][ T1102] debugfs: 'hsr0' already exists in 'hsr' [ 1069.655913][ T1102] Cannot create hsr debugfs directory [ 1069.933576][ T1110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.933597][ T1110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.933643][ T1110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.583271][ T1110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.583292][ T1110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.583322][ T1110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.896771][ T1110] hsr_slave_0: entered promiscuous mode [ 1070.904319][ T1110] hsr_slave_1: entered promiscuous mode [ 1070.905292][ T1110] debugfs: 'hsr0' already exists in 'hsr' [ 1070.905315][ T1110] Cannot create hsr debugfs directory [ 1092.532317][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 1102.453805][ T32] INFO: task syz-executor:543 blocked for more than 143 seconds. [ 1102.454197][ T32] Not tainted syzkaller #0 [ 1102.454554][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1102.454566][ T32] task:syz-executor state:D stack:22440 pid:543 tgid:543 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1102.456465][ T32] Call Trace: [ 1102.457465][ T32] [ 1102.457843][ T32] __schedule+0x17db/0x58f0 [ 1102.459509][ T32] ? __pfx___schedule+0x10/0x10 [ 1102.460262][ T32] ? schedule+0x90/0x2b0 [ 1102.460692][ T32] schedule+0x164/0x2b0 [ 1102.461085][ T32] schedule_preempt_disabled+0x13/0x30 [ 1102.461474][ T32] __mutex_lock+0x7c1/0x1550 [ 1102.461869][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1102.462266][ T32] ? new_device_store+0x13c/0x6d0 [ 1102.462773][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1102.463538][ T32] ? lock_acquire+0x115/0x350 [ 1102.463973][ T32] new_device_store+0x13c/0x6d0 [ 1102.464363][ T32] ? __pfx_new_device_store+0x10/0x10 [ 1102.464752][ T32] ? sysfs_file_kobj+0x1a/0x230 [ 1102.465176][ T32] ? sysfs_file_kobj+0x1e4/0x230 [ 1102.465536][ T32] ? sysfs_kf_write+0x166/0x260 [ 1102.465937][ T32] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1102.466318][ T32] kernfs_fop_write_iter+0x3a4/0x540 [ 1102.466726][ T32] vfs_write+0x612/0xba0 [ 1102.467701][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1102.468097][ T32] ? do_sys_openat2+0x14e/0x200 [ 1102.468519][ T32] ? kmem_cache_free+0x182/0x650 [ 1102.469151][ T32] ksys_write+0x150/0x270 [ 1102.469571][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1102.470353][ T32] do_syscall_64+0x166/0x520 [ 1102.470779][ T32] ? trace_irq_disable+0x3b/0x140 [ 1102.471204][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.471599][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1102.472031][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.472421][ T32] RIP: 0033:0x7f0e8db5ed8e [ 1102.472769][ T32] RSP: 002b:00007ffd3cbdf1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1102.473499][ T32] RAX: ffffffffffffffda RBX: 0000555571c57500 RCX: 00007f0e8db5ed8e [ 1102.473864][ T32] RDX: 0000000000000003 RSI: 00007ffd3cbdf240 RDI: 0000000000000005 [ 1102.474285][ T32] RBP: 00007f0e8dc363a0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.474645][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1102.475006][ T32] R13: 00007ffd3cbdf240 R14: 00007ffd3cbdfa80 R15: 0000000000000003 [ 1102.475771][ T32] [ 1102.477986][ T32] [ 1102.477986][ T32] Showing all locks held in the system: [ 1102.478004][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 1102.478380][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1102.479529][ T32] #1: ffffc900000f7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1102.480643][ T32] #2: ffffffff915c6460 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 1102.481830][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1102.483427][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1102.483789][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1102.485006][ T32] locks held by kworker/0:2/190: 2, last CPU#0: [ 1102.485394][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1102.486507][ T32] #1: ffffc9000303fc40 ( [ 1102.709735][T31626] Bluetooth: hci2: command 0x0406 tx timeout [ 1102.710495][T31626] Bluetooth: hci1: command 0x0406 tx timeout [ 1102.734997][ T32] (debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1102.736473][ T32] locks held by klogd/4971: 2, last CPU#0: [ 1102.736867][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1102.738103][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1102.739291][ T32] locks held by getty/5367: 2, on CPU#1: [ 1102.739647][ T32] #0: ffff888033c8e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1102.740893][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1102.741748][ T32] locks held by kworker/u9:3/5620: 5, on CPU#0: [ 1102.742105][ T32] #0: ffff888058aeb940 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1102.743248][ T32] #1: ffffc90003e9fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1102.744367][ T32] #2: ffff888052e4cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 1102.745612][ T32] #3: ffff888052e4c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1103.116785][ T32] #4: ffffffff913dcc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1103.116962][ T32] locks held by kworker/u8:7/22289: 6, on CPU#0: [ 1103.116979][ T32] #0: ffff88801d2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.117041][ T32] #1: ffffc90003a2fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.117100][ T32] #2: ffffffff91247468 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1103.117221][ T32] #3: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x274/0xb20 [ 1103.117335][ T32] #4: ffff88803a310800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: wiphy_unregister+0x27e/0xb20 [ 1103.117398][ T32] #5: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1103.117470][ T32] locks held by kworker/u8:9/22725: 3, on CPU#0: [ 1103.117486][ T32] #0: ffff88803376c940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.117543][ T32] #1: ffffc9000deb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.119737][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1103.120981][ T32] locks held by kworker/u8:11/22727: 3, last CPU#0: [ 1103.121337][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.122355][ T32] #1: ffffc9000e51fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.123506][ T32] #2: ffff888066fc5258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1103.124630][ T32] locks held by kworker/u8:29/479: 3, last CPU#0: [ 1103.125011][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.126124][ T32] #1: ffffc900046a7c40 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.627622][ T32] #2: ffff8880b843bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1103.628599][ T32] locks held by kworker/u8:36/486: 3, last CPU#0: [ 1103.628964][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.631019][ T32] #1: ffffc9000480fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.632504][ T32] #2: ffff88803a360800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1103.633620][ T32] locks held by kworker/u8:38/488: 3, last CPU#0: [ 1103.634011][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.635125][ T32] #1: ffffc9000482fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.636239][ T32] #2: ffff888050964258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1103.637619][ T32] locks held by kworker/u8:42/514: 4, last CPU#0: [ 1103.637933][ T32] #0: ffff888056b31940 ((wq_completion)krds_cp_wq#19/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.639320][ T32] #1: ffffc9000e2bfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.640762][ T32] #2: ffff888052194980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1103.641876][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 1103.643121][ T32] locks held by kworker/u8:46/518: 2, last CPU#0: [ 1103.643517][ T32] #0: ffff888032d02940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.645022][ T32] #1: ffffc90004507c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1103.646495][ T32] locks held by kworker/u8:53/527: 3, on CPU#0: [ 1104.002892][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1104.004370][ T32] #1: ffffc90004547c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1104.005481][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1104.006861][ T32] locks held by kworker/u8:54/531: 7, last CPU#1: [ 1104.007251][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1104.008393][ T32] #1: ffffc90004c07c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1104.009544][ T32] #2: ffff888040be0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1104.010523][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 1104.011769][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1104.012915][ T32] #5: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_check_no_obj_freed+0xcb/0x450 [ 1104.014592][ T32] #6: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 1104.015771][ T32] locks held by syz-executor/539: 1, on CPU#0: [ 1104.016129][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1104.449339][ T32] locks held by syz-executor/541: 7, on CPU#1: [ 1104.449359][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.449423][ T32] #1: ffff88802c614c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.449487][ T32] #2: ffff88802a47ca58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.449556][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1104.449633][ T32] #4: ffff88802bafe128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1104.449765][ T32] #5: ffff88802b77c258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1104.449871][ T32] #6: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1104.449973][ T32] locks held by syz-executor/543: 4, on CPU#1: [ 1104.449989][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.450048][ T32] #1: ffff888026dd7c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.450111][ T32] #2: ffff88802a47cb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.450193][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 1104.450254][ T32] locks held by syz-executor/547: 4, on CPU#1: [ 1104.450269][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.450326][ T32] #1: ffff888053042880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.450387][ T32] #2: ffff88802a47cb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.450454][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 1104.450514][ T32] locks held by kworker/u9:4/549: 7, on CPU#0: [ 1104.450530][ T32] #0: ffff88804030e140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1104.450591][ T32] #1: ffffc90003a7fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1104.450660][ T32] #2: ffff88805ec30ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 1104.450724][ T32] #3: ffff88805ec300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1104.450780][ T32] #4: ffffffff913dcc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1104.450835][ T32] #5: ffff888037405af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 1104.450933][ T32] #6: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1104.451001][ T32] locks held by syz-executor/637: 4, on CPU#1: [ 1104.451017][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.451073][ T32] #1: ffff88807f245480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.451135][ T32] #2: ffff88802a47ca58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.451201][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1104.451264][ T32] locks held by syz-executor/726: 4, on CPU#1: [ 1104.451279][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.451336][ T32] #1: ffff88805ad55c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.451398][ T32] #2: ffff88802a47ca58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.451464][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1104.451524][ T32] locks held by syz-executor/740: 4, on CPU#1: [ 1104.451540][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.451596][ T32] #1: ffff8880666e3880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.451665][ T32] #2: ffff88802a47ca58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.451732][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1104.451792][ T32] locks held by syz-executor/744: 4, on CPU#1: [ 1104.451826][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.451884][ T32] #1: ffff888043ed2080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.451947][ T32] #2: ffff88802a47ca58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.452016][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1104.452078][ T32] locks held by syz-executor/752: 4, on CPU#1: [ 1104.452093][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.452152][ T32] #1: ffff88802b700480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.452215][ T32] #2: ffff88802a47ca58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.452283][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1104.452351][ T32] locks held by syz-executor/977: 4, on CPU#1: [ 1104.452365][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.452423][ T32] #1: ffff88804449c080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.980557][ T32] #2: ffff88802a47ca58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.982292][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1104.983803][ T32] locks held by kworker/1:14/1052: 2, last CPU#1: [ 1104.984233][ T32] #0: ffff8880367c6140 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1104.985405][ T32] #1: ffffc9000248fc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1104.987207][ T32] locks held by syz-executor/1075: 4, on CPU#1: [ 1104.987567][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.988681][ T32] #1: ffff888060ba5080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.989825][ T32] #2: ffff88802a47ca58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.991666][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1104.993140][ T32] locks held by syz-executor/1091: 4, on CPU#0: [ 1104.993822][ T32] #0: ffff8880372dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1104.994909][ T32] #1: ffff888084c84c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1104.996378][ T32] #2: ffff88802a47ca58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1104.998448][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1104.999274][ T32] locks held by syz-executor/1102: 2, on CPU#0: [ 1104.999655][ T32] #0: ffffffff917ab1a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1105.001130][ T32] #1: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1105.002610][ T32] locks held by syz-executor/1110: 2, on CPU#0: [ 1105.002969][ T32] #0: ffffffff909bc988 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1105.004115][ T32] #1: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1105.005402][ T32] locks held by dhcpcd-run-hook/1239: 2, last CPU#0: [ 1105.005420][ T32] #0: ffffffff904f2b38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 1105.005624][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1105.005686][ T32] locks held by syz-executor/1240: 4, last CPU#1: [ 1105.005702][ T32] #0: ffff88806144ae48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1105.005772][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 1105.005831][ T32] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 1105.005897][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1105.005965][ T32] locks held by udevd/1241: 2, last CPU#0: [ 1105.005981][ T32] #0: ffff8880637d61c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1105.006055][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1105.006118][ T32] locks held by syz-executor/1242: 2, last CPU#0: [ 1105.006134][ T32] #0: ffff888056090948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1105.006186][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1106.069302][ T32] [ 1106.069665][ T32] ============================================= [ 1106.069665][ T32] [ 1106.070061][ T32] NMI backtrace for cpu 0 [ 1106.070097][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1106.070139][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1106.070160][ T32] Call Trace: [ 1106.070174][ T32] [ 1106.070189][ T32] dump_stack_lvl+0xe8/0x150 [ 1106.070261][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1106.070360][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1106.070398][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1106.070437][ T32] sys_info+0x135/0x170 [ 1106.070509][ T32] watchdog+0xfd7/0x1030 [ 1106.070557][ T32] ? watchdog+0x1c7/0x1030 [ 1106.070589][ T32] kthread+0x38b/0x480 [ 1106.070612][ T32] ? __pfx_watchdog+0x10/0x10 [ 1106.070634][ T32] ? __pfx_kthread+0x10/0x10 [ 1106.070657][ T32] ret_from_fork+0x514/0xb70 [ 1106.070701][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.070723][ T32] ? __switch_to+0xc89/0x1420 [ 1106.070758][ T32] ? __pfx_kthread+0x10/0x10 [ 1106.070781][ T32] ret_from_fork_asm+0x1a/0x30 [ 1106.070820][ T32] [ 1106.071271][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1106.071761][ C1] NMI backtrace for cpu 1 [ 1106.071779][ C1] CPU: 1 UID: 0 PID: 487 Comm: kworker/u8:37 Not tainted syzkaller #0 PREEMPT(full) [ 1106.071804][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1106.071820][ C1] Workqueue: events_unbound macvlan_process_broadcast [ 1106.071906][ C1] RIP: 0010:do_raw_spin_unlock+0x0/0x200 [ 1106.071943][ C1] Code: f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 ff ff ff e8 36 e1 94 00 e9 5b ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 48 89 fb 49 bc 00 00 00 [ 1106.071963][ C1] RSP: 0000:ffffc90000a17d00 EFLAGS: 00000082 [ 1106.071981][ C1] RAX: 2cb1acfb4ebf3000 RBX: 0000000000000246 RCX: 8000000000000102 [ 1106.071997][ C1] RDX: ffff888052bfc6c8 RSI: ffffffff8e6f1e7e RDI: ffff88807eb76700 [ 1106.072015][ C1] RBP: ffffc90000a17e50 R08: 0000000000000003 R09: 0000000000000004 [ 1106.072029][ C1] R10: dffffc0000000000 R11: fffff52000142f90 R12: ffff888052bfc680 [ 1106.072046][ C1] R13: dffffc0000000000 R14: ffff88807eb76700 R15: 1ffff1100fd6ecea [ 1106.072063][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 1106.072081][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1106.072096][ C1] CR2: 00007f2aac4620c0 CR3: 000000007f306000 CR4: 00000000003526f0 [ 1106.072115][ C1] Call Trace: [ 1106.072123][ C1] [ 1106.072131][ C1] _raw_spin_unlock_irqrestore+0x23/0x80 [ 1106.072157][ C1] ref_tracker_alloc+0x2d7/0x4b0 [ 1106.072257][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1106.072287][ C1] ? dst_init+0xbe/0x470 [ 1106.072312][ C1] ? dst_alloc+0x12a/0x170 [ 1106.072338][ C1] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1106.072401][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 1106.072439][ C1] ? ip_route_output_flow+0x2a/0x150 [ 1106.072467][ C1] ? ip_route_me_harder+0x762/0xfe0 [ 1106.072528][ C1] ? synproxy_send_tcp+0x332/0x670 [ 1106.072590][ C1] ? synproxy_send_client_synack+0x89b/0xde0 [ 1106.072610][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 1106.072664][ C1] ? nft_synproxy_do_eval+0x389/0x5d0 [ 1106.072687][ C1] ? nft_do_chain+0x48d/0x1b10 [ 1106.072709][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1106.072815][ C1] ? nf_hook_slow+0xc5/0x220 [ 1106.072891][ C1] ? NF_HOOK+0x21f/0x3c0 [ 1106.072914][ C1] ? NF_HOOK+0x336/0x3c0 [ 1106.072936][ C1] ? process_backlog+0xa6b/0x18b0 [ 1106.072970][ C1] ? dst_alloc+0x105/0x170 [ 1106.072997][ C1] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 1106.073022][ C1] ? dst_alloc+0x105/0x170 [ 1106.073046][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1106.073071][ C1] dst_init+0xbe/0x470 [ 1106.073097][ C1] ? dst_alloc+0x112/0x170 [ 1106.073126][ C1] dst_alloc+0x12a/0x170 [ 1106.073157][ C1] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1106.073198][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1106.073231][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 1106.073266][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1106.073302][ C1] ? lock_acquire+0x115/0x350 [ 1106.073334][ C1] ip_route_output_flow+0x2a/0x150 [ 1106.073366][ C1] ip_route_me_harder+0x762/0xfe0 [ 1106.073405][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1106.073451][ C1] ? __alloc_skb+0x27a/0x7a0 [ 1106.073547][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 1106.073571][ C1] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1106.073605][ C1] synproxy_send_tcp+0x332/0x670 [ 1106.073631][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 1106.073662][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1106.073723][ C1] ? nft_tproxy_eval+0xd88/0x1c80 [ 1106.073745][ C1] ? synproxy_pernet+0x45/0x270 [ 1106.073773][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 1106.073800][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1106.073821][ C1] ? __lock_acquire+0x747/0x2de0 [ 1106.073848][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1106.073874][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 1106.073903][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1106.073939][ C1] nft_do_chain+0x48d/0x1b10 [ 1106.073984][ C1] ? lock_acquire+0x115/0x350 [ 1106.074008][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1106.074037][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 1106.074067][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1106.074103][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1106.074128][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1106.074152][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 1106.074179][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1106.074208][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1106.074233][ C1] nf_hook_slow+0xc5/0x220 [ 1106.074266][ C1] NF_HOOK+0x21f/0x3c0 [ 1106.074291][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1106.074316][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1106.074338][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1106.074363][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1106.074392][ C1] ? ip_local_deliver+0x113/0x190 [ 1106.074418][ C1] NF_HOOK+0x336/0x3c0 [ 1106.074448][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1106.074470][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1106.074492][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1106.074517][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1106.074538][ C1] ? ip_rcv_core+0x88d/0xd50 [ 1106.074582][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1106.074605][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1106.074629][ C1] process_backlog+0xa6b/0x18b0 [ 1106.074664][ C1] ? process_backlog+0x3de/0x18b0 [ 1106.074707][ C1] __napi_poll+0xaa/0x330 [ 1106.074737][ C1] net_rx_action+0x61d/0xf50 [ 1106.074778][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1106.074830][ C1] handle_softirqs+0x226/0x860 [ 1106.074860][ C1] ? do_softirq+0x77/0xd0 [ 1106.074893][ C1] ? macvlan_process_broadcast+0x225/0x660 [ 1106.074920][ C1] do_softirq+0x77/0xd0 [ 1106.074948][ C1] [ 1106.074956][ C1] [ 1106.074964][ C1] __local_bh_enable_ip+0x100/0x140 [ 1106.074991][ C1] macvlan_process_broadcast+0x225/0x660 [ 1106.075025][ C1] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 1106.075060][ C1] ? rcu_is_watching+0x16/0xb0 [ 1106.075091][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1106.075119][ C1] process_scheduled_works+0xc3d/0x1630 [ 1106.075170][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1106.075203][ C1] ? assign_work+0x3cf/0x5d0 [ 1106.075247][ C1] worker_thread+0xa47/0xfb0 [ 1106.075295][ C1] kthread+0x38b/0x480 [ 1106.075313][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1106.075342][ C1] ? __pfx_kthread+0x10/0x10 [ 1106.075364][ C1] ret_from_fork+0x514/0xb70 [ 1106.075385][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.075405][ C1] ? __switch_to+0xc89/0x1420 [ 1106.075442][ C1] ? __pfx_kthread+0x10/0x10 [ 1106.075463][ C1] ret_from_fork_asm+0x1a/0x30 [ 1106.075494][ C1] [ 1106.780560][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1107.832522][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1107.841663][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1107.851740][ T32] Call Trace: [ 1107.855039][ T32] [ 1107.857998][ T32] vpanic+0x56d/0xa60 [ 1107.862009][ T32] ? __pfx___schedule+0x10/0x10 [ 1107.866878][ T32] ? __pfx_vpanic+0x10/0x10 [ 1107.871422][ T32] panic+0xc5/0xd0 [ 1107.875178][ T32] ? __pfx_panic+0x10/0x10 [ 1107.879619][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1107.885102][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1107.890499][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1107.896725][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1107.902915][ T32] watchdog+0x1030/0x1030 [ 1107.907305][ T32] ? watchdog+0x1c7/0x1030 [ 1107.911762][ T32] kthread+0x38b/0x480 [ 1107.915861][ T32] ? __pfx_watchdog+0x10/0x10 [ 1107.920556][ T32] ? __pfx_kthread+0x10/0x10 [ 1107.925169][ T32] ret_from_fork+0x514/0xb70 [ 1107.929787][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.934915][ T32] ? __switch_to+0xc89/0x1420 [ 1107.939616][ T32] ? __pfx_kthread+0x10/0x10 [ 1107.944222][ T32] ret_from_fork_asm+0x1a/0x30 [ 1107.949045][ T32] [ 1107.952712][ T32] Kernel Offset: disabled [ 1107.957056][ T32] Rebooting in 86400 seconds..