last executing test programs: 13.869071885s ago: executing program 1 (id=8826): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x4814) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000680)=""/246, 0xf6}], 0x4}, 0x3}], 0x1, 0x2001, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x60066c85, &(0x7f0000000300)="fd") 13.157012482s ago: executing program 1 (id=8833): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x25dfdbfd, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800003, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x1, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 10.304070762s ago: executing program 1 (id=8845): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0xa, 0x3, 0x4) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(0x3) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xfffffffffffffd4b}}}]}]}, 0x48}}, 0x0) 9.613861111s ago: executing program 1 (id=8850): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x7fff, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) recvmmsg(r0, &(0x7f000000e280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x12123, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x7fff, 0x4) (async) sendto$inet(r0, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) (async) recvmmsg(r0, &(0x7f000000e280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x12123, 0x0) (async) 9.495615783s ago: executing program 1 (id=8852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x100, r8, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa87a089}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x15}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="68100000", @ANYRES16=r1, @ANYBLOB="20002ebd70004ffc9df374098231eef486e1", @ANYRES32=r2, @ANYBLOB="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"], 0x1068}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x0, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'wg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x3a, 0x9, 0x1, 0x10}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4d3a46e177abbed5001ef11bd2f0c66301c685c93d118e7c89799c396822"}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'ipvlan0\x00', 'wg1\x00', {}, {}, 0x3a, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r0, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r2], 0x58}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) close(r0) 7.617844182s ago: executing program 1 (id=8859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="547f7a85b6a19222b478903999b73d51c0222ed21eaf17199c17", @ANYRES16=r1, @ANYBLOB="000400000000000000000d00000006000800a0aa000005000700040000000500170000000000050019000000000006000a0000000000050019000d00000005001a0000000000050019000c000000"], 0x54}}, 0x0) r2 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc040) 2.300659778s ago: executing program 2 (id=8890): ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0x2}]}, {0x0, [0x30]}}, &(0x7f0000000040)=""/49, 0x27, 0x31, 0x0, 0x5, 0x10000}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff2}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x5, 0x0, 0x4, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) accept4(r3, 0x0, 0x0, 0x0) 1.725167213s ago: executing program 4 (id=8897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000004b39dd918ceddd0010000100"/27, @ANYRES32=0x0, @ANYBLOB="000000000000000018001680140001801000020001000080770200000001000008001b0000000000"], 0x40}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c000000000140000140035"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newqdisc={0x19c, 0x24, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0x9}, {}, {0x7, 0x7}}, [@TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1f, 0x1, 0x7624, 0x0, 0xffeffffc, 0x7, 0x4}}, {0xc, 0x2, [0xfffa, 0x3, 0x0, 0x8]}}, {{0x1c, 0x1, {0x3, 0x27, 0xf60, 0x5, 0x0, 0xf, 0xe}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x10, 0x2, 0x1, 0x1, 0x3, 0xfffff53e}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x3, 0x400, 0x3, 0x5, 0x101, 0x9, 0x8}}, {0x14, 0x2, [0x9932, 0x2, 0x2, 0x5caf, 0xff, 0xb1ab, 0x1, 0xde]}}, {{0x1c, 0x1, {0x5, 0x3, 0x8ca2, 0x2, 0x2, 0x7fff, 0x5, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xfc, 0x2, 0x8001, 0xfffff71b, 0x0, 0x1, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x0, 0x2, 0x9, 0x1, 0xcf59, 0x893, 0x5}}, {0xe, 0x2, [0x4, 0x5, 0xff, 0x6, 0x1]}}]}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa3, 0x1, 0x1, 0xbd5b, 0x0, 0x5, 0x9bf, 0x8}}, {0x14, 0x2, [0x800, 0xaa09, 0x800, 0x0, 0x7ff, 0x5, 0xfffe, 0x7]}}, {{0x1c, 0x1, {0x4, 0xa5, 0xb12c, 0xc, 0x0, 0x3, 0xad, 0x4}}, {0xc, 0x2, [0x101, 0x80, 0x8001, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}]}, 0x19c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000004b39dd918ceddd0010000100"/27, @ANYRES32=0x0, @ANYBLOB="000000000000000018001680140001801000020001000080770200000001000008001b0000000000"], 0x40}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c000000000140000140035"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newqdisc={0x19c, 0x24, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0x9}, {}, {0x7, 0x7}}, [@TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1f, 0x1, 0x7624, 0x0, 0xffeffffc, 0x7, 0x4}}, {0xc, 0x2, [0xfffa, 0x3, 0x0, 0x8]}}, {{0x1c, 0x1, {0x3, 0x27, 0xf60, 0x5, 0x0, 0xf, 0xe}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x10, 0x2, 0x1, 0x1, 0x3, 0xfffff53e}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x3, 0x400, 0x3, 0x5, 0x101, 0x9, 0x8}}, {0x14, 0x2, [0x9932, 0x2, 0x2, 0x5caf, 0xff, 0xb1ab, 0x1, 0xde]}}, {{0x1c, 0x1, {0x5, 0x3, 0x8ca2, 0x2, 0x2, 0x7fff, 0x5, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xfc, 0x2, 0x8001, 0xfffff71b, 0x0, 0x1, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x0, 0x2, 0x9, 0x1, 0xcf59, 0x893, 0x5}}, {0xe, 0x2, [0x4, 0x5, 0xff, 0x6, 0x1]}}]}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa3, 0x1, 0x1, 0xbd5b, 0x0, 0x5, 0x9bf, 0x8}}, {0x14, 0x2, [0x800, 0xaa09, 0x800, 0x0, 0x7ff, 0x5, 0xfffe, 0x7]}}, {{0x1c, 0x1, {0x4, 0xa5, 0xb12c, 0xc, 0x0, 0x3, 0xad, 0x4}}, {0xc, 0x2, [0x101, 0x80, 0x8001, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}]}, 0x19c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) 1.646004309s ago: executing program 2 (id=8899): r0 = socket(0x2, 0x2, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x118, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (rerun: 64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xb}}}, 0x24}}, 0x800) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'dvmrp0\x00', 0x0}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r7, 0x25, 0x0, @void}, 0x10) 1.320299011s ago: executing program 4 (id=8901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001280040001"], 0x28}}, 0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40048d0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x0, 0x0, 0x5}}]}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, 0x0, 0x4041050) r9 = socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtfilter={0x1028, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0xffe0, 0xffe0}, {0xd}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xffc, 0x2, [@TCA_BPF_NAME={0xfed, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0x5}}]}}]}, 0x1028}, 0x1, 0x0, 0x0, 0x22044028}, 0x8080) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5e000d00cb50906ea120c693099bb54a75307269a38c39afd0968e8110d9d3371833d6af59", @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf2506000000050013000600000006001a004e24000006001d000500000006000e00dc0c00000500060002000000050013000400000006001a004e2000000500070003000000", @ANYRES16=r12, @ANYRES8=r4, @ANYRES8=r9], 0x54}, 0x1, 0x0, 0x0, 0x24000004}, 0x20004811) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) 921.435702ms ago: executing program 0 (id=8904): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) socketpair(0x11, 0x4, 0x40, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012090b00010062726964676500001c0002800c001f0000000000000000000c001e000000000000000000"], 0x4c}}, 0x0) 808.171307ms ago: executing program 0 (id=8905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000004c0)="e6ac3d0044f4a291db711371ec84498502af66aa09f70f8c030eaddafd10f5283e559373faee01edb55db3fe76038b3df6d25dbb1f260bf601e8a3ba04516ae26e5a45f81cfb624b5893b4566fd80b7c71592de53aeda9a4e146b28c55bd4cea24af451e5139a8e7ec85587b117608e8002954bec3acf3f2846c7d55e644c1a1cd2cf06caf87872b8941b9560516834cd3d8806cbf2b148f69f8a3e38ccf90ba14fa6fd2ce95c7307b9d3a93a6230c5ed050f36459bb7e060a1b447c88b504", 0xfffffec7}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000680)={'syz_tun\x00', 0x400}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a"], 0x18}}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x4000041}, 0x44000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) close(r0) 774.832136ms ago: executing program 3 (id=8906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) pipe(&(0x7f0000000600)={0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000500)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc3c3a84e76304785}}, [@NFT_MSG_DELCHAIN={0x1d4, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xfa, 0xc, "0f9ea56bc017315adcea004ba1680a0f3fa21a32ee8927697b81dc36d07cde1e929b47d772bc4117374dc04f9ee8019405139b2fc3514cae7adc5005a3098d386ce341253bd7c1fadad2445ce86bd711114e8b12e92873f279875ef7e3a978f01b23499c20f21317ef0bbc57c4173a5579c345f6fff529f00a070a6502a49dfe08d2a5f4d207990fb67db0423fc6ff4bccfd8f8b485305052809b210ae3e620086b6f1d64a0c497d000cdb05d28d3c40cfab110485995710180e8ff3f9b60e0226793e5c3fee6a2aa4eab496e55a121caed117ae44539b5c2ae6392b308da92b648477dfae14a747fb7bff0e8927cc30783c36451835"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x9a, 0xc, "b18e433706614b85c5f478615396b5a0326efa676464f70ecc1acc60c1762ed70b9b38bdd7b5d6372d0b20489d3874a44dd2fc38c4d074d5975db244e77cff1b782a4b138e4c29b196113fa6d41fce38fdf623da5b484290d61ef826a54d08e13e78651fb96b5bd12d393dde8de01accda3f98dfe73082f952cc38f3d3356eeec332a32bbc409461bbff97d52faae0bfcea83ae1365f"}]}, @NFT_MSG_NEWCHAIN={0x104, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c7a3fc3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f480b5a}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0x2e0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xe9, 0x6, "f71e7d4248f1b53a87d848091e8784f0da371de5675e08250e9c8e21e50a7ffcdb1032c3167c90d4221995b9ec84508e90ffc6250eef7824b79cd6df9b8e8dadbd87b32719fa980ebafee365bd78c636f6b6ac558126628c3f91913f9fb550b94ab37e507e2429f3581a30595234352bcebb08409f213b21bbdb85cea05cef3297408d2458ce6a9457a59158d21a0b1f58ee689487afd8018bb159868ae9aabc784031a1fae4f8a044f405ff371e9c65f55fc600a5a98611000d407892da9364ade9a0b24b7e872c095e27e47f514c134d0692f7211c048d39166d85c46e2412436d33004a"}, @NFTA_TABLE_USERDATA={0xfa, 0x6, "e39e2572b92c45ff5da8d7487965bcfbbf4cead8435f6c1a432846535370c5c934a086c0a96bf415a0fb369cb787f3c134699a123c03e9b3f6a605dc45ddd58c1809e4da441da109e20ea236222afad43151a40af9ebd0f35e4cce0505d268b11f336e74dd3f8106f452ed6b4328eda79861a383768b17675419fc92371f5160e7da968619ca6c12757b35323a86f4cb826dd3bb6a95d2140f4ce8bcd551daf4693a0287d90201c3a52b33f0b4776d0a29df20b7c4a4098c5376f161bf255c3dceaa24a7bc197d1703eef146d30ebbf1e25de62f6584ee39fe6564dae0dcd7535a7bf4d3e5f63c9c90a3945e124f2cbb56479a216e52"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xd5, 0x6, "bdc05930d1339dd8672ffb874c5d39ad385a5281a6bff7c57d81057a19e87a7db2d8fdf69b617ba3012c3d01aafee062b18b063325239bfaf33d928bbd1fae404bbcc07759b03b6aaf13c00351794a255e1a1277607e806911d91b124e0e0132df2d3fe623d8f11467ca2680340cfe1b0c65935b82caf8a98c74448c310c2e1c517dba93707ec65d3e0a2fc641366a67d672974c8e828e0650584ccf40e150d2fb63ba30bae1048770a059ac317583f6e7bf0e8d2a1bbd3e39edef98dd2a82ef15166d70f98ab2b50330f35164fcf21f64"}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x1f4, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x1b4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x338, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x318, 0x3, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x234, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x74, 0x1, "afd1def5182a9719623a98ea54d5559d04d67826948f4f7ea2d5ba09db4dbadff36ae2620577b2a85280b1ce58b75a67994d27b7e0c757fe3939897461e25ab8203c70e94ee4522ce1445be52ff5ad971852984b92adbffb27147c58552dd623a12de150cbea9aed176e83a3dab70457"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x10, 0x1, "1db86bd9cfb957fba6c186f0"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x16, 0x1, "039faae2b87701917b1cb3adfc3dcac84adb"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfa, 0x1, "f5dd96efcbba7add029c543d5123ed1a826b17efe57735adba38ee0e1d05df4997d543f43a7292a534c160658702b7f59ed7dc5eba394eda3670156fbcb5641a3f6b81933891c73faaf504782f5ea71c03f47f85031c3980ec5a2169fdf70384956c6e86a6c10fee7fdb0cf00aa20f3957425da17a143eeaaca4e5bfd9e03be6cdfa50b0e47c7d45a90323b53e7a6d960d17b7b0ac08afde2f8c2d483191deb090af34afc9dcd9644e954fd9a0400f7ae2476b288691a41fba0e3e1c2656ad5e37c26b25d06879296ae566a07b54ebbb6cf5c88c772039dc0c23394df2908269149a6dac19471eca5ae9c0561167f4aece755f7070a8"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_KEY_END={0x6c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "8542bf5822c8897e096b312e559cea4e44117bd096452b3b7533c585e0fb9862e0be66a82adf8022a626afce5c5999cfdc9a9256f233d43160a710ac0c91fa9dfe31f9d9dfa84ee6d8"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x84c2}]}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc0}, 0x1, 0x0, 0x0, 0x86}, 0x0) epoll_create1(0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 664.844937ms ago: executing program 2 (id=8907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="100000000000000000000000000300000000000000000000bcfd751bbc053e3243b71a85088f099403b73d31bb4c9072db99dde1c016d7e1b1309a4820f4f51405c9a2adf3033871453936a6b45b3fea897b718720d13491a286f16a4b40a7de166533875c9298927a70f9687d76a280646095fb7818d29bf74700c5e3ff0f7d801ed22662d64fe677c2c11361e2a722343f5e33060531a7dbe4afb1dca7007eccd7d54c36cef3ab3415b03d370cfad61427535d8a5eeec0b06bfc557d8111e57b2c292e979a079e56f49958b5651acac4406bd99dc7c78a670ed6025376140b7439ec0a4d8b68fbb4b213df7e23a301bbee7b6dfcab29c791a8e46b8fac550c54c7a4e3f614c299d63ddac8833b3ac6e731d5d97350"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r0}, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000002000000041000000200008e5c5044114ff41a52428a000000000050cff9c14dc6b8e77c97d5752583e7d6eced5f5ff2da7b157e2926e1f2180d11b53d1afa17861fea3ecdbcae97981371d74a41475358c72970ad0c4db0d82dc0fa942e34ab98b7d3f08a81452f40ee5c72e13c29bd529b182d445d6d73b57e765b6e864e33a31663b675723d69365850744cd053f059f30a1acce1e4e6f5fea43d990238386de0d0dac4e5815c74e59437809f1911c5025f8b9d9943c96515e5f31418aaeb5cbfb8d19b3ecce9701e1ca8c7d71de3b738a2a3e6116feeaabf5256", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x39) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000140), &(0x7f00000004c0), 0x8}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000400)=[@mss, @timestamp, @mss={0x2, 0x2}, @mss={0x2, 0xfff}, @timestamp, @sack_perm, @window={0x3, 0x8, 0x401}, @mss={0x2, 0x80}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r4, 0x11a, 0x12, &(0x7f00000003c0)=0x304, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xfffc, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000800)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xc, 0xa}, {0x1, 0xffe0}, {0x6, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x10, &(0x7f00000002c0), 0x4) 651.830752ms ago: executing program 4 (id=8908): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a00110001"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x48080) syz_emit_ethernet(0xc2, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @broadcast, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "74e5c9a9d700000000000000"}, {0x5, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x1, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "09009580"}}}}}, 0x0) (async) sendmmsg(r3, &(0x7f0000000f80)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}, 0x5b4}], 0x1, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000280)={0x0, 'batadv_slave_1\x00'}, 0x18) 581.948291ms ago: executing program 4 (id=8909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x4808) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x4000000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='macvtap0\x00', 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xdc, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7c}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_hsr\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c254995a4563740ce9d87b3c1106f905e2977ab6716ff27a"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a74b26eb645eaa55ce979214134bc82e37bf8b95cc69b032"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x10004}, 0x20000894) 497.059495ms ago: executing program 3 (id=8910): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x27, 0x107, 0x0, 0x0, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 496.349823ms ago: executing program 4 (id=8911): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000001) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (rerun: 64) 488.851755ms ago: executing program 3 (id=8912): r0 = syz_init_net_socket$llc(0x1a, 0x6, 0x0) sendmmsg$inet(r0, &(0x7f0000002e80)=[{{&(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001300)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000001c0)="a35a5a0e2c967ebf6d28edfe3f3fdd9329aca315bb04dc7f4ddea2491cde1000e074dcf4b64f0506f3bc5a83fcf668bd030154e03e068aec3b19108693df03d56f54f19a503557551592f0b1c2d2429c2cd3bdc5b39d2ed7e56344add64b4c2d6549056b07d89912825c974e3059d5d15492df78", 0x74}, {&(0x7f0000000240)="5c31d664a9c81f173e580d6365727a12590a382cc8f8", 0x16}, {&(0x7f00000012c0)="4455a9a065604baef13db8375cd04f95127870be769b8765d108", 0x1a}], 0x4, &(0x7f0000001340)}}, {{&(0x7f0000001380)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002600)=[{&(0x7f00000013c0)="c9c3450396cb9022a4efa14afb2297ee69e69fbbd78fed04dd1f2eb5bc345e88c764d131e51d86c14c2a574f0f448dc9de6c303702fa99556064a67ba26f7586de8afe469054b3028b7a9fe02281e2da0f92776ef8039426c5bb23b064fc2ceff8c2f907126ae446f9cc8dbdfe52cffa30a0d9f0841e283843d2d31c6dbcb08143e02ca20435a959ba9ee85c8795f271152e85e3953635bec2201c0a1b83f2b63d7685b259c3ac439a2cd2ec5db48246c7f85989f3887e5e9e4b7db28c719f59a10e65c5abb76a3848f840c942987567214ec235c7aa574bec16296a1547ccaa86357d38237302b0e39d135870bcbc02aa02ceb31ba8d2", 0xf7}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="d1d453cf97b0dc5a89b3e64aa31c23b761c1efea6818504ff6db21e8f0cf0957ba7301cbdfd8e8ca7c372a0213fb1dcedb33a7e4f690a875ac6d813bd7d521c9b1c7c2993243303dc9df67750bbf52f0eef15cacc4753647dfb8c1e1f2f9ab3b44423fa4e2f2d8fcc67df2796f8e37d8b6b234ff868a2f477dd9b771ce25c52efe8a51c4698b44c429f89d8dd8269385dc07fdce76a50bc65d01da065ff9b063d567", 0xa2}, {&(0x7f0000002580)="4bed1b59294a4477b9882e1601f9d5f8aebdc6a4c9b47ad2aae805321a42050722efba0e84b9f1c1c23e20d2277d11968018cea1270cb9f2a8920d3babd3bee7b269ab6444c72e33ae6069211d8cb8e2fe2abc36955c71f5244dc6bd", 0x5c}], 0x4}}, {{&(0x7f0000002640)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002c40)=[{&(0x7f0000002680)="ce0c8bb84f148f5599056a31daeb6f93ddfb0a66a35653d31b3806e87495e169a19ad3bbbeb6b95b7cc0790f41b75d0f3757870834f0ed4fa8765a6e95cca9fb2c55931dadeae972915d5495510273cfdb4d6bd511aaab6a808b0b4c588704e5907e575a1c9c4b0a65bd67812da57ee28bf6d54a254fcfe974f9541868531fc21964d52360d13b31a179f1fa851bb5e76107f4e5306a225ec908dc6c7180fb88400e2337c883e4ec870979cbb9ff3f1d279a6fd2ee53af202e52bf0ee7f868e891949c2b1faf4fe83a16316e5e7c7e2e79fbb9ae8fb7cdac875c149e78ed27c6a3636ecdfe2426", 0xe7}, {&(0x7f0000002780)="9585b71fbb59317b92e40daf550809c6196952158d48c90af10bb091fcbc7ea96cea63d5ec57238a0f01e60f6869e9ffd5b080da9b4f05be7d3b497c6db10f1979ac076f3e7226ffa121e315fafe6472a267390ff2686701c41c17b36e5b429693571066a1fdcbc4066f78369dd0bd3479784cb3c462b94365bb240886cc53715b14a312fa05b06f56402598d3760d78b8844f08d925c681877dc0d2bc51254bce76e21a1be15b4ca8056029b0a3a7ad3943ea730d1193257d2b2d1022e440bc0288a7b6c23a2d2301fc338f00d666f798b1a36fb2741cae259e196c2d6691fc77853de582b9adfa20e0f048a7ed75123cc4f43a847bfcf0", 0xf8}, {&(0x7f0000002880)="ecb8a8b2e755c5024d5468b800ae5be8574d70bb89b21db4ce21b52e2a294fabb1790982dc70026e852fd04dd02ce1c5be16b5ad406caa0b36fc6a68ba0a28d087377422dca768bdbc856e0eed71e7e7aec134e042c8d916298dca2a08fecbde1aaa56705a97ef2df6b6a0d7baaedba59c5d5d9215", 0x75}, {&(0x7f0000002900)="994d6f09577c5684078b36d528665464bb46a25dc4a9091177dba1045959cfa9857c9c9f842b15f6def450378688fa3bad17107c4e89bb6eae2165c77fba63428c154737ef6955ef4a9b4100fc428a465d43e95ffffb8fd5d87aa36f4b095b0fac9b53b9847e1d987f9a6693cd78c55621523d6bf2f84beee955a160e614e0d95da79c1e821e81b12b7a4967660dc2e0a922e583f1d6d22f974a82b18e53c645fdd69576dc3777dfcd44d57a34546b1df4eb48509efc17a35bd1a75c42eb57fad76dc065eafc4b9015a651ccdfafca278a64766522689adf9d33bed0377a1f55e58229d17cba", 0xe6}, {&(0x7f0000002a00)="25d22d75c880f9d183be45bded0b", 0xe}, {&(0x7f0000002a40)="b41d89c3ea04bb3f7faac9c55e6da158dc06fe009e56d2f071fa19596366ed707535", 0x22}, {&(0x7f0000002a80)="2eff0b4c60dbfff3867e29eabb7e05613fe8f7a29c40a60f2bf0dd58c2d9eec10a2e167f11416aa16edd0a64fb5bd7cbcae489e10c3e5ee18c8d1a58757a748e3e0abffd2cc5ba1f975ba4ce14cb5fac6e0ab14bc20fc4a3b66bf5a7de4c51c8cd2f4619bff26fb91daa3a7aed2e5df7faf43f03e8c6887faa61ce22f6a0aaf736edbbb50a001c03e3527b8a3eb317fb7c083704b877d86b06e0a3aacd13e6f7dbcf6808f6753d1584d0c263a3d4c7293d7d911bbb86caec9438031b6309a3a405ab05616607e7de869846e6a526fd7c6daa4d3b2980d8a3c7597ee05cdf937c4e1a87b1e86e", 0xe6}, {&(0x7f0000002b80)="f43ea5918d8c3270338c8d50d6aa8b1d8457061d72a90cd4533d592b054229ea9d619251dc1396a2b46e1a3ad2c2e6a147b3092d83581b8bccb222ab9a0c8529d6474db25ac91cb8c0ceee3ac01c103dcc3a9c7a36ddbd64185392388995e3e918c3f080dbced84a85ac1cc1d6cfcc9772fda8276e9a0931eaa751d0ee24bb82aabb2d2e66468d76e53fc36748aede673f0f02faa892a083103b76f2521c78ca46a3ce1e382af0547ad61ab40590f1db5ef5ebd6480e26a7185bf088", 0xbc}], 0x8, &(0x7f0000002cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}, {{&(0x7f0000002d00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002d40)="a086e51aaf9dd9077b180f826a8270cb844e279089523dd91775d11bf775f9ed4379443fc41761f7b8700c2ff915b04ab1703a63d750e586b0f48e9b9ae77de58709ddf4f1774c223ba1c3d523e6cd3dd19639c9a27b949f22c71e5b32cacbfc697b25dd4097f441cef4c61ae17ff50351ed0e8bf8df98a688b94c8a65d77645cdd8f74079b7ff1f8ab296a8419b7ad4339054894eac91ecfbd0598ef89b59c2fcd856d10df8c1c9554bc15cb8272cd0daf1298d", 0xb4}], 0x1, &(0x7f0000002e40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x30}}], 0x4, 0x8c1) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @empty}, 0x12, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)='wg0\x00', 0xffffffff00000001, 0x3, 0x8001}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x143, 0x80, 0x88a8}}, {0x28, 0x1, {0x3912, 0xf31, 0x7f, 0x8100}}]}]}]}]}, 0x68}}, 0x24040800) 458.240664ms ago: executing program 0 (id=8913): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108f000000000007900000000000d414f4f9b7c3881d49"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x10}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) 369.121089ms ago: executing program 2 (id=8914): syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 323.226563ms ago: executing program 3 (id=8915): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="450000001a00010000000000000000000a0010090000fd0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="450000001a00010000000000000000000a0010090000fd0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 318.760282ms ago: executing program 2 (id=8916): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20004100) 249.164136ms ago: executing program 0 (id=8917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x70b, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x40000a0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="a90d0100000000000000ef11f3c90ed7000005000000bdb26ec500001247c807662b5203fd5b7eae7a0b9e47a35e1b0cb39d6dcf134f21139356778f"], 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$inet(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1010c61994fa3c726723908dbef5d1dd0800000914000127bd7000fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0xc0000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) (async, rerun: 64) r8 = socket(0x1, 0x2, 0x0) (rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x4, 0x0, &(0x7f0000000340)) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc0078b9b2351456526fbd00df5fcc8ecc624db7ea6c9c9ef82b2d23f60947c03d0717b3a017858e8488ecce95919f50393f2f71eeee0ebc96ba0092bc6b0b88329991086846dc218ad8964040f874a101d08c97c3fc1a2917b0b85c77b7a6b85e48b598024a14e0fe282625995664e10febba485b3a4da50d48564a0c75157d7552619710bbcbc6ce6de0717823b3951e8aa78c25181eba894df57a9467857fedd2e255476a69a7fa1be774001e4f4c3999a71984cb93c17070070055847f134b240e", @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf2503000000080008000000000006000a004e23000008000600ac1e000106000a004e2100000500030052000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4050) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, 0x0, &(0x7f0000001040)) socket(0x840000000002, 0x3, 0xff) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000180)) (async, rerun: 64) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x5c}, {0x6}]}, 0x10) 227.680178ms ago: executing program 4 (id=8918): r0 = socket(0x1e, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000180), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r6, 0x29, 0xd3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket(0x1e, 0x1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000180), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_buf(r6, 0x29, 0xd3, 0x0, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) 142.64562ms ago: executing program 3 (id=8919): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x24, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffa}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffff3}]}, 0x24}}, 0x11) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000080)) 92.976292ms ago: executing program 2 (id=8920): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r2, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@phonet={0x23, 0x2, 0x9, 0x3}, 0x80, 0x0}}], 0x1, 0x8840) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x6ae0}, 0x1c) r3 = epoll_create(0x1) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000002c0)='cgroup.kill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x401}, &(0x7f0000000140)=0x8) r8 = accept(r0, &(0x7f0000000300)=@pppoe, &(0x7f0000000380)=0x80) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f00000003c0)=0x1f, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x6, 0x200}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042801000018006000600800a000004001c000400028032c49df09b1142cb97b1280c1dd104bd2c34c207df7b56f01449243813f64161b9db8900a8a48a640b505fbd72ac09b78364ed5def9b660f51c3bdac029f0df4cad1c5ce154fa5bae4b1086cf68bf2434e5ba21f8a56"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 92.707668ms ago: executing program 0 (id=8921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x1d, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@report={0x4c, 0x20, 0x2, 0x70bd26, 0x9, {0x32, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in6=@local, 0x4e22, 0x0, 0x4e21, 0x7ff, 0x2, 0x0, 0xa0, 0x88}}}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x48040) 46.424196ms ago: executing program 0 (id=8922): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @mptcp=@ack={0x1e, 0xc, 0x7, 0x4, "0b6df4f5c06e887c"}, @exp_fastopen={0xfe, 0x7, 0xf989, "519f7e"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}]}}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r5, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) close(r4) (async) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r4, 0x0, 0x0, 0x0}, 0x30) (async) syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/net\x00') (async) poll(0x0, 0x0, 0x80000201) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=8923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="15000500000000b5000071abbc819e00800000000000e1144508", @ANYRES8, @ANYRES16=r1, @ANYRES8=r1, @ANYRES8=r1, @ANYBLOB="00000000020003000000000000000011000008000000000080000400"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x105, 0x70bd2d, 0xa, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000040)={'vlan0\x00', 0x57e7}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x290, r9, 0xa00, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3, 0x0, 0x2b, 0x6}}]}, @NL80211_ATTR_IE={0x122, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @channel_switch={0x25, 0x3, {0x1, 0xac, 0x9}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0x2f, {0xf3, 0x3, [{{}, @broadcast, 0x4, @void, 0x1e}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x3e}, {{}, @device_a, 0x6, @void, 0x2c}]}}, @measure_req={0x26, 0xd6, {0x9, 0xf9, 0x5, "97e6e642daac2c52e9433026f244fb837ed6a952cc08f5759296794cc0ac6d4680eaf9704897516a068952d16d3a0296e1bbbb13a18f54919e3068c834b358a8fe5ef822be3e2854807d61df60928987908a5f15713b316a27d7e1d10ea056f935c33deea807b85c399903ff572cc7b1509d112977c1b375faee73cfeb14bb0dbb8d37895f0b6b8fe6e4c56e1f0d4eb5b98c504c38ab2a2b5541b02a75cbf12f91d34bb7cc4f49225f06262066ea0f577ecc4c91be0a1290775df681b963eb630a8f99a62ba017cc43024d6e2615bb742767f7"}}]}, @NL80211_ATTR_IE={0xd8, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x10, 0xa5, 0x2}}, @random={0x2, 0x49, "e73ba529e7f3b349f88026146b4ac2c4e2901f56bef2e731fc8d0fd24ded4a2098d7d985033c52c12ebc722d03b8e3959134681719b53341680f3cc38e8aabee0871f824781bacf1dc"}, @random_vendor={0xdd, 0x81, "f8a4c89a87c7aba7ad0bcf41fda5e6ecc0913c6e6a95408f922dcb5374daaa931e1920955c917e302ba78aff1f78ff355070cc262efa78087b8f0efc2312f1ebca5a16b368131a30d7118e0747316c7b6411310ac44e1279c547b0f6d259f24fc50fff08e2e3210519716e7fa80b316dec84a980ae7c49b762a2aba5bf117e8e0e"}]}, @NL80211_ATTR_IE={0x69, 0x2a, [@challenge={0x10, 0x1, 0xc8}, @perr={0x84, 0x22, {0x9, 0x2, [{{}, @device_a, 0x3, @void, 0xa}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x26}]}}, @ibss={0x6, 0x2, 0xffff}, @dsss={0x3, 0x1, 0x4}, @mesh_chsw={0x76, 0x6, {0x2c, 0x4b, 0x1d, 0xd}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9, 0x40}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @ibss={0x6, 0x2, 0x9}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x3c, 0xa}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x81}]}, 0x290}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r12, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0xffffeb76}], 0x1, 0x20000040, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r14 = socket(0x2, 0x3, 0xff) sendto$inet(r14, &(0x7f0000000040)="b401fcc8070000090000008e052af9c34b7d7494", 0xffffffe1, 0x4085, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) kernel console output (not intermixed with test programs): > [ 578.709058][T31325] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 578.734643][T31325] bond10 (unregistering): Released all slaves [ 579.003354][T31347] netlink: 'syz.3.7257': attribute type 1 has an invalid length. [ 579.164106][ T1340] nci: nci_rsp_packet: unknown rsp opcode 0x123 [ 579.791365][ T36] net_ratelimit: 26 callbacks suppressed [ 579.791386][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 579.912140][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 580.027639][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 580.142111][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 580.264110][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 580.391483][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 580.429528][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 580.511123][T31397] netlink: 'syz.1.7268': attribute type 64 has an invalid length. [ 580.521653][T31397] __nla_validate_parse: 5 callbacks suppressed [ 580.521672][T31397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7268'. [ 580.522762][T12487] bond6: (slave macvlan3): failed to get link speed/duplex [ 580.651876][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 580.760801][T31433] netlink: 'syz.1.7279': attribute type 13 has an invalid length. [ 580.768845][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 580.921314][T12487] bond6: (slave macvlan3): failed to get link speed/duplex [ 581.638585][T31493] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7295'. [ 582.035426][T31513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7304'. [ 582.066670][T31513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7304'. [ 582.116281][T31518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7306'. [ 582.148410][T31520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7307'. [ 582.157708][T31520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.278057][T31528] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7309'. [ 582.293816][T31520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.397208][T31539] netem: change failed [ 582.568357][T31547] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.588382][T31548] bridge0: entered allmulticast mode [ 582.626005][T31553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7312'. [ 582.645002][T31550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7313'. [ 582.722675][T31551] netlink: 'syz.0.7313': attribute type 10 has an invalid length. [ 582.743936][T31551] bond0: (slave team0): Releasing backup interface [ 582.776700][T31551] bridge0: port 2(team0) entered blocking state [ 582.783467][T31551] bridge0: port 2(team0) entered disabled state [ 582.790035][T31551] team0: entered allmulticast mode [ 582.796652][T31551] team_slave_0: entered allmulticast mode [ 582.802594][T31551] team_slave_1: entered allmulticast mode [ 582.809994][T31551] team0: entered promiscuous mode [ 582.817202][T31551] team_slave_0: entered promiscuous mode [ 582.825363][T31551] team_slave_1: entered promiscuous mode [ 582.832896][T31565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7316'. [ 583.050158][T31581] bond9: entered allmulticast mode [ 583.058229][T31581] 8021q: adding VLAN 0 to HW filter on device bond9 [ 583.115992][T31586] bond10: entered allmulticast mode [ 583.130872][T31586] 8021q: adding VLAN 0 to HW filter on device bond10 [ 583.859883][T31628] tipc: Enabled bearer , priority 0 [ 583.908948][T31628] syzkaller0: entered promiscuous mode [ 583.915599][T31628] syzkaller0: entered allmulticast mode [ 583.950896][T31628] tipc: Resetting bearer [ 584.010307][T31643] "syz.2.7335" (31643) uses obsolete ecb(arc4) skcipher [ 584.283989][T31627] tipc: Resetting bearer [ 584.355064][T31627] tipc: Disabling bearer [ 584.991462][T12478] net_ratelimit: 31 callbacks suppressed [ 584.991482][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 585.090401][T31723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.147705][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 585.271744][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 585.391028][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 585.408456][T31750] netlink: 'syz.2.7364': attribute type 1 has an invalid length. [ 585.521913][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 585.615697][T31763] netlink: 'syz.3.7366': attribute type 1 has an invalid length. [ 585.651971][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 585.744844][T31763] bond8: entered promiscuous mode [ 585.750003][T31763] bond8: entered allmulticast mode [ 585.755816][T31763] 8021q: adding VLAN 0 to HW filter on device bond8 [ 585.763713][T31763] __nla_validate_parse: 11 callbacks suppressed [ 585.763730][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7366'. [ 585.779234][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 585.799143][T31763] macvlan4: entered promiscuous mode [ 585.804773][T31763] macvlan4: entered allmulticast mode [ 585.813170][T31763] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 585.922236][T31783] syz0: rxe_newlink: already configured on bond_slave_0 [ 585.931690][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 585.953553][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7366'. [ 585.989949][T31763] macvlan4: entered promiscuous mode [ 586.006459][T31790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7375'. [ 586.011267][T31763] macvlan4: entered allmulticast mode [ 586.029301][T31791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7375'. [ 586.033099][T31763] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 586.050859][T31792] netlink: 'syz.1.7374': attribute type 10 has an invalid length. [ 586.129296][T31792] bridge_slave_1: entered promiscuous mode [ 586.136537][T31792] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 586.153864][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7366'. [ 586.163598][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 586.197077][T31763] macvlan4: entered promiscuous mode [ 586.202649][T31763] macvlan4: entered allmulticast mode [ 586.210405][T31763] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 586.276424][T31800] syzkaller1: entered promiscuous mode [ 586.293544][T31800] syzkaller1: entered allmulticast mode [ 586.313809][T31794] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 586.319903][T31794] syzkaller1: Linktype set failed because interface is up [ 586.341884][ T6015] syzkaller1: tun_net_xmit 90 [ 586.354462][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7366'. [ 586.431865][T31763] macvlan4: entered promiscuous mode [ 586.437992][T31763] macvlan4: entered allmulticast mode [ 586.450821][T31763] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 586.534116][T31821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7384'. [ 586.800513][T31844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7390'. [ 587.111852][T31858] veth1_to_bond: entered allmulticast mode [ 587.164291][T31858] veth1_to_bond: left allmulticast mode [ 587.427219][T31886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7403'. [ 587.504572][T31892] netlink: 'syz.4.7404': attribute type 10 has an invalid length. [ 587.576872][T31892] team0: Device veth1_macvtap failed to register rx_handler [ 587.778816][T31906] vlan3: entered allmulticast mode [ 587.785316][T31906] hsr0: entered allmulticast mode [ 587.790573][T31906] hsr_slave_0: entered allmulticast mode [ 587.804164][T31906] hsr_slave_1: entered allmulticast mode [ 587.864730][T31915] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7407'. [ 588.112904][T31931] dvmrp0: entered allmulticast mode [ 588.143719][T31940] netlink: 'syz.4.7418': attribute type 29 has an invalid length. [ 588.152489][T31940] netlink: 'syz.4.7418': attribute type 29 has an invalid length. [ 588.293831][T31947] netlink: 'syz.3.7423': attribute type 13 has an invalid length. [ 588.310440][T31949] netlink: 'syz.2.7424': attribute type 5 has an invalid length. [ 588.844570][T31947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.874128][T31947] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.383174][T31978] netlink: 'syz.2.7431': attribute type 21 has an invalid length. [ 589.473194][T31978] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 589.506634][T31978] bond8 (unregistering): Released all slaves [ 589.555414][T31984] netlink: 'syz.4.7429': attribute type 5 has an invalid length. [ 589.737023][T31995] netlink: 'syz.4.7435': attribute type 1 has an invalid length. [ 590.061355][T12418] net_ratelimit: 22 callbacks suppressed [ 590.061373][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 590.174284][T32019] netlink: 'syz.1.7445': attribute type 1 has an invalid length. [ 590.200965][T32021] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 590.202131][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 590.222039][T32021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.226263][T32022] netlink: 'syz.3.7446': attribute type 1 has an invalid length. [ 590.292223][T32022] bond9 (unregistering): Released all slaves [ 590.311404][T32028] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 590.327154][T32031] ip6tnl2: entered promiscuous mode [ 590.334077][T32031] ip6tnl2: entered allmulticast mode [ 590.401369][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 590.521998][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 590.602783][T32049] netlink: 'syz.3.7451': attribute type 12 has an invalid length. [ 590.632417][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 590.742781][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 590.806746][T32059] __nla_validate_parse: 10 callbacks suppressed [ 590.806763][T32059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7458'. [ 590.841084][T32059] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7458'. [ 590.862487][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 590.973433][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 590.980754][T32017] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 590.991631][T32035] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 591.074095][T32070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7462'. [ 591.083411][T32070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7462'. [ 591.110780][T32058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7456'. [ 591.205938][T32082] bond11: (slave gretap2): making interface the new active one [ 591.215321][T32082] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 591.254806][T32086] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7465'. [ 591.305519][T32089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7466'. [ 591.779439][T32122] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 591.858876][T32130] tipc: Enabling of bearer rejected, failed to enable media [ 591.861807][T32131] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7482'. [ 591.901982][T32127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7480'. [ 592.275195][T32148] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 592.311340][T32148] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 592.325731][T32147] tipc: Enabled bearer , priority 0 [ 592.336047][T32147] syzkaller0: entered promiscuous mode [ 592.341750][T32147] syzkaller0: entered allmulticast mode [ 592.351142][T32147] tipc: Enabling of bearer rejected, already enabled [ 592.360642][T32147] tipc: Resetting bearer [ 592.375247][T32147] syzkaller0: left promiscuous mode [ 592.453449][T32144] tipc: Disabling bearer [ 592.627813][T32172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7495'. [ 592.893495][T32189] bridge0: port 3(team0) entered blocking state [ 592.921534][T32189] bridge0: port 3(team0) entered disabled state [ 592.928591][T32189] team0: entered allmulticast mode [ 592.934771][T32189] team_slave_0: entered allmulticast mode [ 592.940928][T32189] team_slave_1: entered allmulticast mode [ 592.947308][T32189] dummy0: entered allmulticast mode [ 592.957883][T32189] team0: entered promiscuous mode [ 592.963708][T32189] team_slave_0: entered promiscuous mode [ 592.969726][T32189] team_slave_1: entered promiscuous mode [ 592.975904][T32189] dummy0: entered promiscuous mode [ 592.982238][T32189] bridge0: port 3(team0) entered blocking state [ 592.988821][T32189] bridge0: port 3(team0) entered forwarding state [ 593.036165][T32190] pim6reg: entered allmulticast mode [ 593.081771][T32185] pim6reg: left allmulticast mode [ 593.259890][T31305] Bluetooth: hci2: link tx timeout [ 593.270065][T31305] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 593.540753][T32235] xt_hashlimit: size too large, truncated to 1048576 [ 593.567832][T32239] FAULT_INJECTION: forcing a failure. [ 593.567832][T32239] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 593.593256][T32239] CPU: 0 UID: 0 PID: 32239 Comm: syz.4.7515 Not tainted syzkaller #0 PREEMPT(full) [ 593.593289][T32239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 593.593301][T32239] Call Trace: [ 593.593309][T32239] [ 593.593318][T32239] dump_stack_lvl+0x189/0x250 [ 593.593346][T32239] ? __pfx____ratelimit+0x10/0x10 [ 593.593370][T32239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.593394][T32239] ? __pfx__printk+0x10/0x10 [ 593.593413][T32239] ? __might_fault+0xb0/0x130 [ 593.593451][T32239] should_fail_ex+0x414/0x560 [ 593.593483][T32239] _copy_from_user+0x2d/0xb0 [ 593.593514][T32239] kstrtouint_from_user+0xc4/0x170 [ 593.593537][T32239] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 593.593576][T32239] proc_fail_nth_write+0x88/0x200 [ 593.593599][T32239] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 593.593628][T32239] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 593.593652][T32239] vfs_write+0x27e/0xb30 [ 593.593687][T32239] ? __pfx_vfs_write+0x10/0x10 [ 593.593713][T32239] ? __fget_files+0x2a/0x420 [ 593.593736][T32239] ? __fget_files+0x3a0/0x420 [ 593.593752][T32239] ? __fget_files+0x2a/0x420 [ 593.593780][T32239] ksys_write+0x145/0x250 [ 593.593807][T32239] ? __pfx_ksys_write+0x10/0x10 [ 593.593836][T32239] ? do_syscall_64+0xbe/0xfa0 [ 593.593864][T32239] do_syscall_64+0xfa/0xfa0 [ 593.593886][T32239] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.593910][T32239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.593928][T32239] ? clear_bhb_loop+0x60/0xb0 [ 593.593950][T32239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.593968][T32239] RIP: 0033:0x7f6a8778da7f [ 593.593986][T32239] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 593.594002][T32239] RSP: 002b:00007f6a8855e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 593.594022][T32239] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a8778da7f [ 593.594035][T32239] RDX: 0000000000000001 RSI: 00007f6a8855e0a0 RDI: 0000000000000004 [ 593.594047][T32239] RBP: 00007f6a8855e090 R08: 0000000000000000 R09: 0000000000000000 [ 593.594058][T32239] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 593.594069][T32239] R13: 00007f6a879e6038 R14: 00007f6a879e5fa0 R15: 00007ffce419c478 [ 593.594103][T32239] [ 593.865074][T31305] Bluetooth: hci2: command 0x0405 tx timeout [ 594.017418][T32254] x_tables: duplicate underflow at hook 2 [ 594.754649][T32298] veth15: entered allmulticast mode [ 594.812567][T32305] validate_nla: 6 callbacks suppressed [ 594.812585][T32305] netlink: 'syz.2.7534': attribute type 1 has an invalid length. [ 594.883770][T32305] 8021q: adding VLAN 0 to HW filter on device bond8 [ 594.951100][T32315] vlan0: entered promiscuous mode [ 594.959237][T32315] bond8: entered promiscuous mode [ 594.965934][T32315] vlan0: entered allmulticast mode [ 594.971151][T32315] bond8: entered allmulticast mode [ 595.023030][T32305] bond8: (slave gretap0): making interface the new active one [ 595.030749][T32305] gretap0: entered promiscuous mode [ 595.039481][T32305] gretap0: entered allmulticast mode [ 595.049821][T32305] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 595.075899][T32321] tipc: Enabled bearer , priority 0 [ 595.083987][T32321] syzkaller0: entered promiscuous mode [ 595.089593][T32321] syzkaller0: entered allmulticast mode [ 595.108121][T32321] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 595.150352][T32321] tipc: Resetting bearer [ 595.171438][T12478] net_ratelimit: 27 callbacks suppressed [ 595.171458][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 595.187477][T32319] tipc: Resetting bearer [ 595.245605][T32319] tipc: Disabling bearer [ 595.296882][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 595.417741][T12480] bond6: (slave macvlan3): failed to get link speed/duplex [ 595.425355][T32339] sctp: [Deprecated]: syz.3.7543 (pid 32339) Use of int in max_burst socket option. [ 595.425355][T32339] Use struct sctp_assoc_value instead [ 595.479774][T32339] bond9: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 595.498181][T32339] bond9: entered promiscuous mode [ 595.504479][T32339] bond9: entered allmulticast mode [ 595.518445][T32339] 8021q: adding VLAN 0 to HW filter on device bond9 [ 595.547263][T32352] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 595.572501][T32352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.595053][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 595.687496][T32359] team0: Device wireguard1 is of different type [ 595.754430][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 595.829223][T32368] __nla_validate_parse: 12 callbacks suppressed [ 595.829241][T32368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7550'. [ 595.877952][T32373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7552'. [ 595.946174][T31305] Bluetooth: hci2: command 0x0405 tx timeout [ 595.973473][T32378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7554'. [ 595.991692][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 596.111644][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 596.119542][T32388] netlink: 'syz.2.7558': attribute type 13 has an invalid length. [ 596.144313][T32388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7558'. [ 596.157547][T32386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7559'. [ 596.179045][T32386] chnl_net:caif_netlink_parms(): no params data found [ 596.202436][T32388] netlink: 'syz.2.7558': attribute type 13 has an invalid length. [ 596.210558][T32388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7558'. [ 596.221393][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 596.339827][T32411] netlink: 'syz.2.7563': attribute type 14 has an invalid length. [ 596.502730][T32417] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7565'. [ 596.528456][T32427] netlink: 'syz.2.7567': attribute type 2 has an invalid length. [ 596.538166][T32423] xt_limit: Overflow, try lower: 271964/0 [ 596.540563][T32427] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7567'. [ 596.548288][ T5989] hid-generic 0005:04F3:5505.0003: unknown main item tag 0x0 [ 596.565077][ T5989] hid-generic 0005:04F3:5505.0003: hidraw0: BLUETOOTH HID ve7.ef Device [syz0] on aa:aa:aa:aa:aa:aa [ 596.850022][T32445] ip6t_srh: unknown srh match flags 5F28 [ 596.864653][T32440] netlink: 'syz.4.7570': attribute type 4 has an invalid length. [ 597.078701][T32456] netlink: 'syz.2.7576': attribute type 1 has an invalid length. [ 597.285588][T32465] batadv0: Device is already in use. [ 597.331324][T32469] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7581'. [ 597.358544][T32469] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 597.373648][T32469] bond12 (unregistering): Released all slaves [ 597.420651][T32472] sctp: [Deprecated]: syz.4.7581 (pid 32472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.420651][T32472] Use struct sctp_sack_info instead [ 597.443238][T32469] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.570568][T32481] netlink: 808 bytes leftover after parsing attributes in process `syz.4.7584'. [ 597.906526][T32491] x_tables: duplicate entry at hook 1 [ 598.054854][T32504] netlink: 'syz.3.7593': attribute type 1 has an invalid length. [ 598.112066][T32504] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 598.382400][T32532] netlink: 'syz.2.7600': attribute type 22 has an invalid length. [ 598.400576][T32531] netlink: 'syz.2.7600': attribute type 22 has an invalid length. [ 598.526387][T32541] pim6reg1: entered promiscuous mode [ 598.544709][T32541] pim6reg1: entered allmulticast mode [ 599.119647][ T36] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 599.128852][ T36] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - a6:e8:11:80:22:55 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 599.342330][ T36] bond6 (unregistering): (slave gretap0): Releasing active interface [ 599.350819][ T36] gretap0 (unregistering): left allmulticast mode [ 599.404700][ T36] bond2 (unregistering): (slave gre2): Releasing backup interface [ 599.414894][ T36] gre2 (unregistering): left promiscuous mode [ 599.449543][ T36] dvmrp0 (unregistering): left allmulticast mode [ 599.610968][T32566] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 599.756959][T32598] x_tables: unsorted entry at hook 3 [ 599.783786][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.797481][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.808745][ T36] bond0 (unregistering): Released all slaves [ 599.829087][ T36] bond1 (unregistering): (slave veth3): Releasing backup interface [ 599.840512][ T36] bond1 (unregistering): Released all slaves [ 599.980389][ T36] bond2 (unregistering): Released all slaves [ 599.993929][ T36] bond3 (unregistering): Released all slaves [ 600.107958][ T36] bond4 (unregistering): Released all slaves [ 600.122360][ T36] bond5 (unregistering): (slave lo): Releasing backup interface [ 600.130446][ T36] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 600.144821][ T36] bond5 (unregistering): Released all slaves [ 600.266622][ T36] bond6 (unregistering): Released all slaves [ 600.282878][T32573] bond0: Caught tx_queue_len zero misconfig [ 600.300470][T32587] xfrm1: entered allmulticast mode [ 600.329150][T12480] net_ratelimit: 23 callbacks suppressed [ 600.329170][T12480] bond6: (slave macvlan3): failed to get link speed/duplex [ 600.453741][ T36] tipc: Left network mode [ 600.487861][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 600.530421][T32605] validate_nla: 2 callbacks suppressed [ 600.530447][T32605] netlink: 'syz.1.7619': attribute type 21 has an invalid length. [ 600.611815][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 600.775965][T32616] bond0: (slave bond_slave_1): Releasing backup interface [ 600.788909][ T30] audit: type=1804 audit(1762122380.339:2): pid=32622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7626" name="/newroot/385/cgroup.controllers" dev="tmpfs" ino=1978 res=1 errno=0 [ 600.815074][ T30] audit: type=1800 audit(1762122380.339:3): pid=32622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7626" name="cgroup.controllers" dev="tmpfs" ino=1978 res=0 errno=0 [ 600.848848][T32623] __nla_validate_parse: 25 callbacks suppressed [ 600.848864][T32623] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7627'. [ 600.911012][T32618] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 600.947550][T32618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.018996][T32632] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7631'. [ 601.021166][T32629] vlan1: entered allmulticast mode [ 601.034727][T32629] veth0_vlan: entered allmulticast mode [ 601.041046][T12487] bond6: (slave macvlan3): failed to get link speed/duplex [ 601.171865][T12480] bond6: (slave macvlan3): failed to get link speed/duplex [ 601.353988][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 601.367149][T32648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7635'. [ 601.385145][T32648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7635'. [ 601.417049][T32648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7635'. [ 601.482306][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 601.590364][T32666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7642'. [ 601.591959][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 601.643051][T32666] netlink: 'syz.4.7642': attribute type 2 has an invalid length. [ 601.731719][T32670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7640'. [ 601.732874][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 601.785146][T32672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7643'. [ 601.861172][T32678] netlink: 'syz.0.7645': attribute type 21 has an invalid length. [ 601.891990][T32678] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.023582][T32685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7646'. [ 602.040641][T32670] hsr_slave_0 (unregistering): left promiscuous mode [ 602.086667][T32687] x_tables: duplicate underflow at hook 3 [ 602.141475][T32689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7648'. [ 602.488764][T32711] netlink: 'syz.0.7654': attribute type 1 has an invalid length. [ 602.519160][T32700] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 602.543529][ T36] hsr_slave_0: left promiscuous mode [ 602.553240][ T36] hsr_slave_1: left promiscuous mode [ 602.559438][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.567429][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.577912][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.585706][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.615890][ T36] veth1_macvtap: left promiscuous mode [ 602.621687][ T36] veth0_macvtap: left promiscuous mode [ 602.627280][ T36] veth1_vlan: left promiscuous mode [ 602.794616][ T36] pim6reg527 (unregistering): left allmulticast mode [ 603.598097][T32713] lo: Caught tx_queue_len zero misconfig [ 603.689740][T32720] pim6reg: entered allmulticast mode [ 603.705802][T32729] dvmrp0: left allmulticast mode [ 603.747515][T32730] pim6reg: left allmulticast mode [ 603.892931][T32746] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 603.945956][T32747] nbd: must specify a size in bytes for the device [ 604.017501][T32753] lo: entered promiscuous mode [ 604.036993][T32734] netlink: 'syz.1.7658': attribute type 27 has an invalid length. [ 604.038179][T32753] netlink: 'syz.2.7664': attribute type 2 has an invalid length. [ 604.045116][T32734] netlink: 'syz.1.7658': attribute type 4 has an invalid length. [ 604.368585][ T36] IPVS: stop unused estimator thread 0... [ 604.521726][ T323] nbd: illegal input index -8454144 [ 604.655454][ T328] tipc: Enabled bearer , priority 0 [ 604.708303][ T330] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 605.332144][T12487] net_ratelimit: 15 callbacks suppressed [ 605.332164][T12487] bond6: (slave macvlan3): failed to get link speed/duplex [ 605.461519][T12487] bond6: (slave macvlan3): failed to get link speed/duplex [ 605.532830][ T354] vxcan1 speed is unknown, defaulting to 1000 [ 605.581403][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 605.691353][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 605.791575][ T6015] tipc: Node number set to 1036982455 [ 605.801693][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 605.913011][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 605.971591][ T406] netlink: 'syz.0.7693': attribute type 21 has an invalid length. [ 605.979452][ T406] __nla_validate_parse: 14 callbacks suppressed [ 605.979470][ T406] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7693'. [ 606.011701][ T406] netlink: 'syz.0.7693': attribute type 4 has an invalid length. [ 606.024329][ T406] netlink: 'syz.0.7693': attribute type 5 has an invalid length. [ 606.025172][T32751] Bluetooth: hci4: command 0x0406 tx timeout [ 606.040097][T32751] Bluetooth: hci1: command 0x0406 tx timeout [ 606.073130][ T406] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7693'. [ 606.087077][ T396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7691'. [ 606.104725][ T411] netlink: 'syz.0.7693': attribute type 21 has an invalid length. [ 606.112847][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 606.136809][ T411] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7693'. [ 606.187646][ T411] netlink: 'syz.0.7693': attribute type 4 has an invalid length. [ 606.198085][ T411] netlink: 'syz.0.7693': attribute type 5 has an invalid length. [ 606.206524][ T411] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7693'. [ 606.221650][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 606.234631][ T354] hsr0 speed is unknown, defaulting to 1000 [ 606.452265][T12487] bond6: (slave macvlan3): failed to get link speed/duplex [ 606.580783][ T423] syzkaller1: entered promiscuous mode [ 606.615016][ T423] syzkaller1: entered allmulticast mode [ 606.651564][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 606.930585][ T436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7700'. [ 607.040655][ T443] tipc: New replicast peer: 255.255.255.255 [ 607.047856][ T443] tipc: Enabled bearer , priority 10 [ 607.057262][ T443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7703'. [ 607.249224][ T449] netlink: 'syz.4.7706': attribute type 8 has an invalid length. [ 607.265956][ T452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7705'. [ 607.277446][ T452] netlink: 'syz.0.7705': attribute type 8 has an invalid length. [ 607.315327][ T449] netlink: 'syz.4.7706': attribute type 8 has an invalid length. [ 607.354884][ T449] netlink: 'syz.4.7706': attribute type 8 has an invalid length. [ 607.435181][T12487] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.472470][T12487] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.481852][T12487] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.518255][ T463] Cannot find set identified by id 0 to match [ 607.523247][T12487] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.605833][ T466] syz.3.7711 (466) used obsolete PPPIOCDETACH ioctl [ 607.678968][ T466] syzkaller0: entered promiscuous mode [ 607.689396][ T466] syzkaller0: entered allmulticast mode [ 608.065650][ T487] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7718'. [ 608.076119][ T487] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7718'. [ 610.401678][T12478] net_ratelimit: 6 callbacks suppressed [ 610.401699][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 610.562914][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 610.671351][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 610.774333][ T560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.841441][T12486] bond6: (slave macvlan3): failed to get link speed/duplex [ 610.957250][ T575] macsec0: entered promiscuous mode [ 610.972471][ T575] macsec0: entered allmulticast mode [ 611.089586][ T583] __nla_validate_parse: 4 callbacks suppressed [ 611.089670][ T583] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7742'. [ 611.105954][T12486] bond6: (slave macvlan3): failed to get link speed/duplex [ 611.115711][ T583] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 611.222389][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 611.248914][ T592] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7745'. [ 611.289953][ T593] syzkaller0: entered promiscuous mode [ 611.291627][ T592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7745'. [ 611.300922][ T593] syzkaller0: entered allmulticast mode [ 611.311345][ T592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7745'. [ 611.422789][ T603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7748'. [ 611.511407][T12487] bond6: (slave macvlan3): failed to get link speed/duplex [ 611.622205][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 611.629795][ T620] IPVS: length: 210 != 24 [ 611.743045][ T626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7756'. [ 611.745258][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 611.827591][ T631] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7759'. [ 612.117793][ T651] tipc: Enabled bearer , priority 0 [ 612.432506][ T682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7772'. [ 612.525158][ T687] sctp: [Deprecated]: syz.2.7774 (pid 687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.525158][ T687] Use struct sctp_sack_info instead [ 612.544202][ T687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7774'. [ 612.595468][ T690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7775'. [ 612.685045][ T692] syzkaller0: entered promiscuous mode [ 612.759086][ T692] syzkaller0: entered allmulticast mode [ 612.800326][ T700] IPVS: Unknown mcast interface: vcan0 [ 612.861143][ T702] syzkaller0: entered promiscuous mode [ 612.869359][ T702] syzkaller0: entered allmulticast mode [ 612.891709][ T702] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 613.058184][ T715] syzkaller0: refused to change device tx_queue_len [ 613.104723][ T718] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20001 [ 613.181720][ T6015] tipc: Node number set to 2210959656 [ 613.346944][ T739] validate_nla: 33 callbacks suppressed [ 613.346961][ T739] netlink: 'syz.2.7790': attribute type 64 has an invalid length. [ 613.437900][ T744] mac80211_hwsim hwsim41 wlan0: Caught tx_queue_len zero misconfig [ 613.472601][ T747] policy can only be matched on NF_INET_PRE_ROUTING [ 613.472620][ T747] unable to load match [ 613.856385][ T779] netlink: 'syz.3.7805': attribute type 1 has an invalid length. [ 613.858685][ T780] netlink: 'syz.3.7805': attribute type 1 has an invalid length. [ 613.865812][ T779] netlink: 'syz.3.7805': attribute type 2 has an invalid length. [ 613.876081][ T780] netlink: 'syz.3.7805': attribute type 2 has an invalid length. [ 614.161148][ T795] netlink: 'syz.1.7808': attribute type 1 has an invalid length. [ 614.211024][ T805] netlink: 'syz.4.7813': attribute type 1 has an invalid length. [ 614.222754][ T800] gre2: entered promiscuous mode [ 614.228411][ T800] gre2: entered allmulticast mode [ 614.250899][ T795] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 614.263451][ T795] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 614.312401][ T803] syzkaller1: entered promiscuous mode [ 614.318009][ T803] syzkaller1: entered allmulticast mode [ 614.359969][ T805] bond12 (unregistering): Released all slaves [ 614.409781][ T810] ip6tnl1: entered promiscuous mode [ 614.416284][ T810] ip6tnl1: entered allmulticast mode [ 614.509713][ T813] gretap2: entered promiscuous mode [ 614.569603][ T813] bond10: (slave gretap2): making interface the new active one [ 614.584208][ T813] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 614.648806][ T795] macvlan2: entered promiscuous mode [ 614.655123][ T795] macvlan2: entered allmulticast mode [ 614.662554][ T795] bond10: entered promiscuous mode [ 614.675059][ T795] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 614.686297][ T795] bond10: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 614.700764][ T795] bond10: left promiscuous mode [ 614.733622][ T841] veth0: entered promiscuous mode [ 614.965088][ T851] tipc: Enabling of bearer rejected, already enabled [ 615.451991][T12485] net_ratelimit: 20 callbacks suppressed [ 615.452011][T12485] bond6: (slave macvlan3): failed to get link speed/duplex [ 615.617044][ T900] bridge0: port 3(team0) entered disabled state [ 615.642787][ T900] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.692350][ T909] netlink: 'syz.3.7838': attribute type 39 has an invalid length. [ 615.714664][ T9993] hsr0 speed is unknown, defaulting to 1000 [ 615.721139][ T9993] syz1: Port: 1 Link DOWN [ 615.725606][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 615.746989][ T912] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 615.779875][ T912] team1: entered promiscuous mode [ 615.786817][ T912] team1: entered allmulticast mode [ 615.860513][ T3548] bond6: (slave macvlan3): failed to get link speed/duplex [ 615.981373][T12486] bond6: (slave macvlan3): failed to get link speed/duplex [ 616.123564][ T964] __nla_validate_parse: 10 callbacks suppressed [ 616.123585][ T964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7846'. [ 616.131414][T12486] bond6: (slave macvlan3): failed to get link speed/duplex [ 616.253592][ T970] netlink: 'syz.3.7848': attribute type 16 has an invalid length. [ 616.276521][ T970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7848'. [ 616.293407][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 616.413459][T12486] bond6: (slave macvlan3): failed to get link speed/duplex [ 616.535426][ T990] ip6tnl0: entered allmulticast mode [ 616.576115][ T994] "syz.3.7856" (994) uses obsolete ecb(arc4) skcipher [ 616.583077][T12487] bond6: (slave macvlan3): failed to get link speed/duplex [ 616.701624][T12486] bond6: (slave macvlan3): failed to get link speed/duplex [ 616.811657][T12487] bond6: (slave macvlan3): failed to get link speed/duplex [ 618.025972][ T1084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7879'. [ 618.327081][ T1114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7885'. [ 618.352250][ T1114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7885'. [ 618.369946][ T1114] netlink: 'syz.4.7885': attribute type 15 has an invalid length. [ 618.400916][ T1095] tipc: Enabling of bearer rejected, already enabled [ 618.425483][T12487] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 618.525284][ T1117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.544204][ T1127] x_tables: duplicate underflow at hook 1 [ 618.614049][ T1128] pimreg: entered allmulticast mode [ 619.158108][ T1170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7901'. [ 619.274906][ T1171] vlan4: entered promiscuous mode [ 619.280793][ T1171] vlan4: entered allmulticast mode [ 619.320019][ T1180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7897'. [ 619.330068][ T1180] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7897'. [ 619.399360][ T1184] netlink: 'syz.4.7905': attribute type 2 has an invalid length. [ 619.411501][ T1180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7897'. [ 619.663643][ T1200] netlink: 'syz.1.7907': attribute type 1 has an invalid length. [ 619.679512][ T1199] netlink: 'syz.1.7907': attribute type 1 has an invalid length. [ 619.822738][ T1199] 8021q: adding VLAN 0 to HW filter on device bond11 [ 620.043472][ T1222] netlink: 'syz.1.7910': attribute type 8 has an invalid length. [ 620.068621][ T1224] set match dimension is over the limit! [ 620.107641][ T1229] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7913'. [ 620.167416][ T1229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.178946][ T1229] bond_slave_0: left promiscuous mode [ 620.196815][ T1229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.207645][ T1229] bond_slave_1: left promiscuous mode [ 620.220092][ T1229] bond0 (unregistering): Released all slaves [ 620.413335][ T1248] netlink: 'syz.2.7917': attribute type 10 has an invalid length. [ 620.472682][ T1340] net_ratelimit: 26 callbacks suppressed [ 620.472703][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 620.608715][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 620.741920][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 620.851590][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 620.962320][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 621.071678][ T3548] bond6: (slave macvlan3): failed to get link speed/duplex [ 621.181372][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 621.312396][ T3548] bond6: (slave macvlan3): failed to get link speed/duplex [ 621.522178][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 621.633265][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 621.651794][ T1308] __nla_validate_parse: 5 callbacks suppressed [ 621.651813][ T1308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7928'. [ 621.690441][ T1308] netlink: 'syz.1.7928': attribute type 23 has an invalid length. [ 621.975298][ T1331] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7938'. [ 622.090608][ T1337] netlink: 'syz.1.7941': attribute type 21 has an invalid length. [ 622.099127][ T1337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7941'. [ 622.114332][ T1338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7940'. [ 622.123618][ T1338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7940'. [ 622.282849][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7945'. [ 622.774671][ T1357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7948'. [ 622.898161][ T1366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7952'. [ 622.953871][ T1366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7952'. [ 622.965705][ T1367] netlink: 'syz.3.7951': attribute type 2 has an invalid length. [ 622.974225][ T1367] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7951'. [ 622.997116][ T1367] bridge5: entered allmulticast mode [ 623.368497][ T1399] ipt_REJECT: TCP_RESET invalid for non-tcp [ 623.414075][ T1400] netlink: 'syz.0.7962': attribute type 12 has an invalid length. [ 624.179414][ T1450] sctp: [Deprecated]: syz.0.7974 (pid 1450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.179414][ T1450] Use struct sctp_sack_info instead [ 624.366993][ T1457] netlink: 'syz.3.7978': attribute type 6 has an invalid length. [ 624.376138][ T1457] netlink: 'syz.3.7978': attribute type 6 has an invalid length. [ 624.396075][ T1457] tipc: Enabled bearer , priority 0 [ 624.478190][ T1457] syzkaller0: entered promiscuous mode [ 624.484283][ T1457] syzkaller0: entered allmulticast mode [ 624.492085][ T1457] tipc: Resetting bearer [ 624.498565][ T1463] tipc: New replicast peer: 255.255.255.255 [ 624.507210][ T1463] tipc: Enabled bearer , priority 10 [ 624.524122][ T1456] tipc: Resetting bearer [ 625.525328][ T24] tipc: Node number set to 487726323 [ 626.566494][ T1456] tipc: Disabling bearer [ 626.575992][ T1470] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 626.591781][ T36] net_ratelimit: 21 callbacks suppressed [ 626.591802][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 626.773304][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 626.804404][ T1502] __nla_validate_parse: 3 callbacks suppressed [ 626.804422][ T1502] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7991'. [ 626.873582][ T1506] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 626.881622][ T1506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.911811][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 627.034812][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 627.089815][ T1520] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 627.153891][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 627.245349][ T1530] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7997'. [ 627.271433][ T3548] bond6: (slave macvlan3): failed to get link speed/duplex [ 627.402108][ T3548] bond6: (slave macvlan3): failed to get link speed/duplex [ 627.513097][ T3548] bond6: (slave macvlan3): failed to get link speed/duplex [ 627.875562][ T1558] x_tables: duplicate underflow at hook 1 [ 628.235159][ T1572] netlink: 'syz.4.8008': attribute type 1 has an invalid length. [ 628.374061][ T1572] 8021q: adding VLAN 0 to HW filter on device bond12 [ 628.387182][ T1576] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8010'. [ 628.628728][ T1593] netlink: 'syz.0.8013': attribute type 8 has an invalid length. [ 628.811008][ T1605] vlan1: entered allmulticast mode [ 628.826935][ T1605] veth0_vlan: entered allmulticast mode [ 628.906552][ T1607] bond13: Unable to set up delay as MII monitoring is disabled [ 628.928016][ T1607] bond13 (unregistering): Released all slaves [ 628.994675][ T1611] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8020'. [ 629.737228][T31305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 629.757021][T31305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 629.776198][T31305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 629.792453][T31305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 629.800479][T31305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.144046][ T1650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8029'. [ 630.164034][ T1640] vxcan1 speed is unknown, defaulting to 1000 [ 630.202410][ T1654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8031'. [ 630.217962][ T1650] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 630.506387][ T1669] netlink: 'syz.3.8036': attribute type 12 has an invalid length. [ 630.522568][ T1669] netlink: 'syz.3.8036': attribute type 29 has an invalid length. [ 630.541132][ T1669] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8036'. [ 630.571380][ T1669] netlink: 59 bytes leftover after parsing attributes in process `syz.3.8036'. [ 630.849961][ T1684] x_tables: unsorted entry at hook 3 [ 630.919101][ T1687] tipc: Enabled bearer , priority 0 [ 630.928378][ T1687] syzkaller0: entered promiscuous mode [ 630.936477][ T1687] syzkaller0: entered allmulticast mode [ 630.960192][ T1687] tipc: Resetting bearer [ 631.023054][ T1640] hsr0 speed is unknown, defaulting to 1000 [ 631.226114][ T1703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8046'. [ 631.435249][ T1640] chnl_net:caif_netlink_parms(): no params data found [ 631.579097][ T1716] netlink: 'syz.4.8052': attribute type 11 has an invalid length. [ 631.617796][ T1687] vxcan1 speed is unknown, defaulting to 1000 [ 631.621398][ T36] net_ratelimit: 29 callbacks suppressed [ 631.621417][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 631.735094][ T1640] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.749242][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.760369][ T1640] bridge_slave_0: entered allmulticast mode [ 631.768710][ T1640] bridge_slave_0: entered promiscuous mode [ 631.777880][ T1640] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.780656][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8054'. [ 631.794931][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.804206][ T1640] bridge_slave_1: entered allmulticast mode [ 631.814053][ T1640] bridge_slave_1: entered promiscuous mode [ 631.845473][ T1732] netlink: 'syz.4.8054': attribute type 30 has an invalid length. [ 631.853618][ T1732] __nla_validate_parse: 1 callbacks suppressed [ 631.853636][ T1732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8054'. [ 631.862744][ T1736] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 631.877330][ T1736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.880084][ T5848] Bluetooth: hci5: command tx timeout [ 631.990152][ T1686] tipc: Resetting bearer [ 632.081054][ T1686] tipc: Disabling bearer [ 632.143363][ T1640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.165732][ T1640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.252034][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 632.262895][ T1640] team0: Port device team_slave_0 added [ 632.274144][ T1640] team0: Port device team_slave_1 added [ 632.338544][ T1640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.356957][ T1640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.383866][ T1640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.396208][ T1687] hsr0 speed is unknown, defaulting to 1000 [ 632.404395][ T1640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.413014][ T1640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.440056][ T1640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.558395][ T1640] hsr_slave_0: entered promiscuous mode [ 632.567545][ T1640] hsr_slave_1: entered promiscuous mode [ 632.717734][ T1759] syz_tun: entered allmulticast mode [ 633.435425][ T1640] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.447133][ T1640] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.481423][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 633.557593][ T1640] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.572080][ T1640] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.622116][ T36] bond6: (slave macvlan3): failed to get link speed/duplex [ 633.683817][ T1640] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.694302][ T1640] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.744990][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 633.919175][ T1640] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.924638][ T1809] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:4 [ 633.941812][ T5848] Bluetooth: hci5: command tx timeout [ 633.949789][ T1640] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.991987][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 634.102507][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 634.231775][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 634.241092][ T1821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8074'. [ 634.266865][ T1823] ipt_REJECT: ECHOREPLY no longer supported. [ 634.298350][ T1821] bond0 (unregistering): Released all slaves [ 634.391089][ T1640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 634.415153][ T1640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 634.438496][ T1640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 634.477410][ T1640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 634.504427][ T1830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8076'. [ 634.718399][ T1640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.760533][ T1640] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.790873][T12413] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.798095][T12413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.843471][T12413] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.851242][T12413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.311986][ T1640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.329448][ T1872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8088'. [ 635.351581][ T1872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8088'. [ 635.403105][ T1868] xt_ecn: cannot match TCP bits for non-tcp packets [ 635.477030][ T1640] veth0_vlan: entered promiscuous mode [ 635.500133][ T1640] veth1_vlan: entered promiscuous mode [ 635.544939][ T1880] netlink: 'syz.2.8091': attribute type 10 has an invalid length. [ 635.554886][ T1640] veth0_macvtap: entered promiscuous mode [ 635.566909][ T1640] veth1_macvtap: entered promiscuous mode [ 635.606500][ T1886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8092'. [ 635.614266][ T1882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8093'. [ 635.616417][ T1886] netlink: 'syz.3.8092': attribute type 7 has an invalid length. [ 635.643563][ T1640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.657933][ T1886] netlink: 'syz.3.8092': attribute type 8 has an invalid length. [ 635.672859][ T1640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.677417][ T1886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8092'. [ 635.706247][T12478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.748233][T12478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.758991][T12478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.813972][T12478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.827076][ T1892] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.8096'. [ 635.915353][ T1892] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 635.921375][T12485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.941244][T12485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.997269][T12418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.006759][T12418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.023393][ T5848] Bluetooth: hci5: command tx timeout [ 636.087627][ T1892] syzkaller0: entered promiscuous mode [ 636.096659][ T1892] syzkaller0: entered allmulticast mode [ 636.264785][ T1909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8027'. [ 638.101642][ T5848] Bluetooth: hci5: command tx timeout [ 638.329342][ T1910] netlink: 'syz.1.8099': attribute type 29 has an invalid length. [ 638.462092][ T1931] __nla_validate_parse: 1 callbacks suppressed [ 638.462110][ T1931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8105'. [ 638.566612][T12413] net_ratelimit: 13 callbacks suppressed [ 638.566631][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 638.726094][ T1950] tipc: Enabling of bearer rejected, failed to enable media [ 638.743173][ T1953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8113'. [ 638.781364][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 638.789005][ T1953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8113'. [ 638.891638][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 638.912272][ T1958] netlink: 4240 bytes leftover after parsing attributes in process `syz.2.8115'. [ 639.001359][T12485] bond6: (slave macvlan3): failed to get link speed/duplex [ 639.018684][ T1963] dvmrp0: entered allmulticast mode [ 639.112610][T12413] bond6: (slave macvlan3): failed to get link speed/duplex [ 639.241939][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 639.286530][ T1980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8122'. [ 639.361583][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 639.474456][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 639.591630][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 639.662561][ T2002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8127'. [ 639.705147][ T1340] smc: removing ib device syz2 [ 639.843020][T12418] bond6: (slave macvlan3): failed to get link speed/duplex [ 640.029384][ T2012] netlink: 'syz.4.8132': attribute type 1 has an invalid length. [ 640.196257][ T2017] netlink: 'syz.2.8134': attribute type 10 has an invalid length. [ 640.213210][ T2014] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8132'. [ 640.262299][ T2012] bond13: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 640.576197][ T2027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8137'. [ 640.592628][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8137'. [ 640.843740][ T2033] netlink: 'syz.2.8140': attribute type 1 has an invalid length. [ 640.869210][ T2036] netlink: 'syz.4.8141': attribute type 1 has an invalid length. [ 640.882299][ T2036] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8141'. [ 640.987060][ T2035] bond0 (unregistering): Released all slaves [ 641.124191][ T2037] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 641.133657][ T2052] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 641.350507][ T2057] sctp: [Deprecated]: syz.0.8145 (pid 2057) Use of int in maxseg socket option. [ 641.350507][ T2057] Use struct sctp_assoc_value instead [ 641.402865][ T2058] veth0: entered promiscuous mode [ 641.454249][ T2058] veth0 (unregistering): left promiscuous mode [ 641.545062][ T5848] Bluetooth: hci5: command tx timeout [ 641.856929][ T2075] pim6reg1: entered promiscuous mode [ 641.862902][ T2075] pim6reg1: entered allmulticast mode [ 642.269927][ T2100] sctp: [Deprecated]: syz.2.8155 (pid 2100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.269927][ T2100] Use struct sctp_sack_info instead [ 642.680777][ T2118] team0: Device wireguard0 is of different type [ 643.065446][ T1340] bridge0: port 3(team0) entered blocking state [ 643.071860][ T1340] bridge0: port 3(team0) entered forwarding state [ 643.264830][ T2151] netlink: 'syz.2.8170': attribute type 29 has an invalid length. [ 643.297723][ T2151] netlink: 'syz.2.8170': attribute type 29 has an invalid length. [ 643.398724][ T2157] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 643.425974][ T2157] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 643.612972][T12478] net_ratelimit: 23 callbacks suppressed [ 643.612993][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 643.668359][ T2166] xt_bpf: check failed: parse error [ 643.706981][ T2170] netlink: 'syz.0.8176': attribute type 1 has an invalid length. [ 643.715724][ T2170] __nla_validate_parse: 39 callbacks suppressed [ 643.715741][ T2170] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8176'. [ 643.763753][ T3548] bond6: (slave macvlan3): failed to get link speed/duplex [ 643.840164][ T2181] lo: entered promiscuous mode [ 643.867325][ T2181] gre0: entered promiscuous mode [ 643.882344][ T2181] gretap0: entered promiscuous mode [ 643.896549][ T2181] erspan0: entered promiscuous mode [ 643.905901][ T2181] ip_vti0: entered promiscuous mode [ 643.931329][ T3548] bond6: (slave macvlan3): failed to get link speed/duplex [ 643.962350][ T2187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8180'. [ 644.210610][ T2187] team0 (unregistering): Port device team_slave_0 removed [ 644.222533][ T2187] team0 (unregistering): Port device team_slave_1 removed [ 644.251482][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 644.330069][ T2196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8183'. [ 644.343032][ T2196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8183'. [ 644.374871][ T2196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8183'. [ 644.384598][ T2196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8183'. [ 644.412870][ T1340] bond6: (slave macvlan3): failed to get link speed/duplex [ 644.475632][ T2205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8186'. [ 644.532185][ T3548] bond6: (slave macvlan3): failed to get link speed/duplex [ 644.586600][ T2212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8189'. [ 644.641949][T12485] bond6: (slave macvlan3): failed to get link speed/duplex [ 644.658657][ T2217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8191'. [ 644.687120][ T2217] netlink: 'syz.3.8191': attribute type 12 has an invalid length. [ 644.696613][ T2217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8191'. [ 644.710014][ T2217] netlink: 'syz.3.8191': attribute type 12 has an invalid length. [ 644.738246][ T2217] 8021q: VLANs not supported on sit0 [ 644.738562][ T2218] netlink: 'syz.4.8192': attribute type 1 has an invalid length. [ 644.753568][ T2220] netlink: 'syz.4.8192': attribute type 1 has an invalid length. [ 644.771956][T12485] bond6: (slave macvlan3): failed to get link speed/duplex [ 644.881504][T12485] bond6: (slave macvlan3): failed to get link speed/duplex [ 644.901473][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.991350][T12478] bond6: (slave macvlan3): failed to get link speed/duplex [ 645.057265][ T2250] netlink: 'syz.4.8200': attribute type 1 has an invalid length. [ 645.186740][ T2258] bond12: entered promiscuous mode [ 645.192492][ T2258] bond12: entered allmulticast mode [ 645.198321][ T2258] 8021q: adding VLAN 0 to HW filter on device bond12 [ 645.227985][ T2250] veth1: entered promiscuous mode [ 645.240019][ T2250] bond14: (slave veth1): Enslaving as a backup interface with a down link [ 645.272902][ T2263] Unknown options in mask b7f2 [ 645.295891][ T24] hid-generic 0005:0C45:1012.0004: unknown main item tag 0x1 [ 645.303595][ T24] hid-generic 0005:0C45:1012.0004: ignoring exceeding usage max [ 645.363136][ T24] hid-generic 0005:0C45:1012.0004: unknown main item tag 0x4 [ 645.380714][ T24] hid-generic 0005:0C45:1012.0004: unknown main item tag 0x5 [ 645.403946][ T24] hid-generic 0005:0C45:1012.0004: reserved main item tag 0xd [ 645.419799][ T24] hid-generic 0005:0C45:1012.0004: unexpected long global item [ 645.440426][ T24] hid-generic 0005:0C45:1012.0004: probe with driver hid-generic failed with error -22 [ 645.469856][ T2258] macvlan2: entered promiscuous mode [ 645.479198][ T2258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 646.162999][ T2272] tipc: Resetting bearer [ 646.382336][ T2272] veth0_macvtap: left allmulticast mode [ 646.497041][ T2290] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 646.612681][T12418] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.634624][T12418] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.654216][T12418] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.681796][T12418] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.784146][ T2324] lo: Caught tx_queue_len zero misconfig [ 646.833661][T12418] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.851535][T12418] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.861985][T12418] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.871042][T12418] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.006688][ T2343] vxcan0: entered allmulticast mode [ 647.406751][ T2371] validate_nla: 1 callbacks suppressed [ 647.406770][ T2371] netlink: 'syz.0.8230': attribute type 13 has an invalid length. [ 647.520538][ T2376] tipc: Started in network mode [ 647.526174][ T2376] tipc: Node identity 1a8b57d250fe, cluster identity 4711 [ 647.573460][ T2376] tipc: Enabled bearer , priority 0 [ 647.587107][ T2378] syzkaller0: entered promiscuous mode [ 647.593184][ T2378] syzkaller0: entered allmulticast mode [ 647.634703][ T2378] tipc: Resetting bearer [ 647.654158][ T2375] tipc: Resetting bearer [ 647.712368][ T2375] tipc: Disabling bearer [ 647.863973][ T2405] netlink: 'syz.2.8236': attribute type 1 has an invalid length. [ 647.874288][ T2405] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 647.953261][ T2412] netlink: 'syz.0.8238': attribute type 10 has an invalid length. [ 648.112225][ T2428] netlink: 'syz.2.8240': attribute type 8 has an invalid length. [ 648.148346][ T2427] syzkaller0: entered allmulticast mode [ 648.298278][ T2443] delete_channel: no stack [ 648.398408][ T2454] syzkaller0: entered promiscuous mode [ 648.404590][ T2454] syzkaller0: entered allmulticast mode [ 648.968471][ T2503] syzkaller0: entered promiscuous mode [ 648.974415][ T2503] syzkaller0: entered allmulticast mode [ 649.037187][ T2500] __nla_validate_parse: 10 callbacks suppressed [ 649.037207][ T2500] netlink: 576 bytes leftover after parsing attributes in process `syz.2.8260'. [ 649.263239][ T2524] netlink: 'syz.0.8266': attribute type 10 has an invalid length. [ 649.283537][ T2525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8265'. [ 649.294336][ T2524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8266'. [ 649.304979][ T2530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8267'. [ 649.392545][ T2524] net_ratelimit: 3 callbacks suppressed [ 649.392563][ T2524] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 649.534572][ T2539] tipc: Enabled bearer , priority 0 [ 649.548772][ T2539] syzkaller0: entered promiscuous mode [ 649.582192][ T2539] syzkaller0: entered allmulticast mode [ 649.616686][ T2539] tipc: Resetting bearer [ 649.659424][ T2538] tipc: Resetting bearer [ 649.710858][ T2555] netlink: 'syz.3.8275': attribute type 11 has an invalid length. [ 649.730491][ T2555] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8275'. [ 649.783749][ T2538] tipc: Disabling bearer [ 649.808309][ T2553] netlink: 'syz.3.8275': attribute type 5 has an invalid length. [ 649.892138][ T2568] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8278'. [ 649.913483][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8280'. [ 650.585684][T31305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.639813][T31305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.660030][T31305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.669749][T31305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.681007][T31305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 652.418718][ T2581] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 652.581038][ T2612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8289'. [ 652.622312][ T2613] bond0: entered allmulticast mode [ 652.629536][ T2613] bond_slave_0: entered allmulticast mode [ 652.639402][ T2613] bond_slave_1: entered allmulticast mode [ 652.741883][ T5848] Bluetooth: hci0: command tx timeout [ 652.801416][ T2626] netlink: 'syz.1.8291': attribute type 12 has an invalid length. [ 652.884168][ T2626] bond13: option primary_reselect: invalid value (255) [ 652.894103][ T2626] bond13 (unregistering): Released all slaves [ 652.957821][ T2631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8295'. [ 653.239320][ T2600] hsr0 speed is unknown, defaulting to 1000 [ 653.251420][ T2648] bond0: Caught tx_queue_len zero misconfig [ 653.504158][ T2664] netlink: 'syz.3.8299': attribute type 33 has an invalid length. [ 653.516360][ T2664] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8299'. [ 653.649442][ T2600] chnl_net:caif_netlink_parms(): no params data found [ 653.987165][ T2600] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.995135][ T2600] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.007804][ T2600] bridge_slave_0: entered allmulticast mode [ 654.016440][ T2600] bridge_slave_0: entered promiscuous mode [ 654.029898][ T2705] tipc: Enabling of bearer rejected, failed to enable media [ 654.063021][ T2600] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.070234][ T2600] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.078127][ T2600] bridge_slave_1: entered allmulticast mode [ 654.086734][ T2600] bridge_slave_1: entered promiscuous mode [ 654.140178][ T2600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.155096][ T2600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.215825][ T2600] team0: Port device team_slave_0 added [ 654.244700][ T2600] team0: Port device team_slave_1 added [ 654.275168][ T2716] netlink: 'syz.4.8309': attribute type 1 has an invalid length. [ 654.359496][ T2716] 8021q: adding VLAN 0 to HW filter on device bond15 [ 654.396313][ T2724] bond15: (slave geneve3): making interface the new active one [ 654.404562][ T2727] __nla_validate_parse: 2 callbacks suppressed [ 654.404581][ T2727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8310'. [ 654.422496][ T2724] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 654.453866][ T2600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.462094][ T2600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.489438][ T2600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.498972][ T2731] ipt_REJECT: TCP_RESET invalid for non-tcp [ 654.507029][ T2600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.516976][ T2600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.543631][ T2600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.555920][T12418] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 20000 - 0 [ 654.564695][T12418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 654.589368][T12418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 654.598798][T12418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 654.666567][ T2600] hsr_slave_0: entered promiscuous mode [ 654.674222][ T2600] hsr_slave_1: entered promiscuous mode [ 654.681639][ T2600] debugfs: 'hsr0' already exists in 'hsr' [ 654.687684][ T2600] Cannot create hsr debugfs directory [ 654.833151][ T5848] Bluetooth: hci0: command tx timeout [ 654.958001][ T2600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.970119][ T2600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.974771][ T2753] netlink: 'syz.1.8317': attribute type 1 has an invalid length. [ 654.990477][ T2753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8317'. [ 655.076707][ T2600] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 655.103295][ T2600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.113925][ T2600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.215037][ T2600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.226949][ T2600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.235222][ T2763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8320'. [ 655.334849][ T2733] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 655.353371][ T2600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.364493][ T2600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.434884][ T2765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8322'. [ 655.483865][ T2772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8323'. [ 655.711131][ T2779] syzkaller0: entered promiscuous mode [ 655.717064][ T2779] syzkaller0: entered allmulticast mode [ 655.737018][ T2600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 655.867098][ T2600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 656.917780][ T5848] Bluetooth: hci0: command 0x040f tx timeout [ 657.994032][ T2600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 658.009002][ T2600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 658.130334][ T2600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.170436][ T2600] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.235483][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.242709][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.282455][T12418] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.289662][T12418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.357468][ T2600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 658.416921][ T2600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.446585][ T2847] netlink: 'syz.0.8341': attribute type 1 has an invalid length. [ 658.458162][ T2845] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8340'. [ 658.459992][ T2847] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8341'. [ 658.474369][ T2845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8340'. [ 658.764818][ T2600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.780669][ T2870] netlink: 348 bytes leftover after parsing attributes in process `syz.0.8344'. [ 658.820220][ T2867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8342'. [ 658.927077][ T2600] veth0_vlan: entered promiscuous mode [ 658.955202][ T2600] veth1_vlan: entered promiscuous mode [ 658.984010][ T5848] Bluetooth: hci0: command 0x040f tx timeout [ 659.101605][ T2600] veth0_macvtap: entered promiscuous mode [ 659.165384][ T2600] veth1_macvtap: entered promiscuous mode [ 659.204450][ T2600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.228591][ T2600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.256308][ T2879] netlink: 'syz.4.8346': attribute type 1 has an invalid length. [ 659.266338][ T2879] netlink: 'syz.4.8346': attribute type 2 has an invalid length. [ 659.281172][T12485] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.292362][T12478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.304884][T12418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.314530][T12418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.472911][ T2891] __nla_validate_parse: 1 callbacks suppressed [ 659.472931][ T2891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8349'. [ 659.512421][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.520450][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.520484][ T2891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8349'. [ 659.548019][ T2891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8349'. [ 659.571602][ T2891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8349'. [ 659.580832][ T2894] netlink: 'syz.3.8351': attribute type 1 has an invalid length. [ 659.625693][T12478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.653314][ T2894] tipc: Enabled bearer , priority 0 [ 659.667469][T12478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.679659][ T2894] bond10: (slave bridge7): making interface the new active one [ 659.691134][ T2894] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 659.709847][ T2898] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 659.726289][ T2893] tipc: Disabling bearer [ 659.915458][ T2913] netlink: 'syz.2.8354': attribute type 21 has an invalid length. [ 659.927089][ T2913] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.997130][ T2918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8355'. [ 660.146033][ T2923] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8358'. [ 660.364841][ T2941] netlink: 124 bytes leftover after parsing attributes in process `syz.4.8361'. [ 660.395706][ T2942] netlink: 'syz.0.8363': attribute type 126 has an invalid length. [ 660.598825][ T2957] syzkaller1: entered promiscuous mode [ 660.605843][ T2957] syzkaller1: entered allmulticast mode [ 660.626324][ T2959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8369'. [ 660.637186][ T2959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8369'. [ 660.649770][ T2959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8369'. [ 660.748714][ T2967] Bluetooth: MGMT ver 1.23 [ 660.839622][ T2971] syzkaller0: entered promiscuous mode [ 660.845649][ T2971] syzkaller0: entered allmulticast mode [ 661.061964][T31305] Bluetooth: hci0: command 0x040f tx timeout [ 661.074881][ T2992] netlink: 'syz.0.8379': attribute type 21 has an invalid length. [ 661.083225][ T2992] netlink: 'syz.0.8379': attribute type 6 has an invalid length. [ 661.397698][ T3006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.409863][ T3008] netlink: 'syz.0.8384': attribute type 6 has an invalid length. [ 661.710010][ T3028] tipc: Enabling of bearer rejected, failed to enable media [ 661.722744][ T3028] xt_ecn: cannot match TCP bits for non-tcp packets [ 661.786225][ T3031] xfrm1: entered allmulticast mode [ 663.141930][ T5848] Bluetooth: hci0: command 0x040f tx timeout [ 737.557839][ T3041] __nla_validate_parse: 16 callbacks suppressed [ 737.557862][ T3041] netlink: 576 bytes leftover after parsing attributes in process `syz.0.8393'. [ 737.736328][ T3045] bond11 (unregistering): Released all slaves [ 737.757475][ T3057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8400'. [ 737.856656][ T3060] tipc: Enabled bearer , priority 0 [ 737.882317][ T3056] syzkaller0: entered promiscuous mode [ 737.887827][ T3056] syzkaller0: entered allmulticast mode [ 737.914429][ T3056] syzkaller0: mtu less than device minimum [ 737.925086][ T3054] tipc: Resetting bearer [ 737.953435][ T3054] tipc: Disabling bearer [ 738.268830][ T3072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8403'. [ 738.298675][ T3075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8405'. [ 738.351842][ T3077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8405'. [ 738.576518][ T3080] ipt_REJECT: TCP_RESET invalid for non-tcp [ 738.924455][ T3099] vlan2: entered promiscuous mode [ 738.929632][ T3099] bridge0: entered promiscuous mode [ 738.955650][ T3101] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8413'. [ 739.083261][ T3105] 8021q: VLANs not supported on vcan0 [ 739.088976][ T3106] 8021q: VLANs not supported on vcan0 [ 739.094467][ T3108] netlink: 'syz.0.8416': attribute type 1 has an invalid length. [ 739.095258][ T3108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8416'. [ 739.137784][ T3108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8416'. [ 739.152291][T31305] Bluetooth: hci2: command 0x0405 tx timeout [ 739.182452][ T3106] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 739.712604][ T3144] gtp0: entered promiscuous mode [ 739.717779][ T3144] gtp0: entered allmulticast mode [ 739.743699][ T3148] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8425'. [ 740.020655][ T3169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8434'. [ 740.358788][ T3186] tipc: Started in network mode [ 740.368759][ T3186] tipc: Node identity 3a3dc91afc9d, cluster identity 4711 [ 740.386926][ T3186] tipc: Enabled bearer , priority 0 [ 740.403677][ T3186] syzkaller0: entered promiscuous mode [ 740.412760][ T3186] syzkaller0: entered allmulticast mode [ 740.435087][ T3186] tipc: Resetting bearer [ 740.454867][ T3182] tipc: Resetting bearer [ 740.487045][ T3182] tipc: Disabling bearer [ 740.524568][ T3192] netlink: 'syz.1.8441': attribute type 2 has an invalid length. [ 740.711558][ T3201] nbd: nbd0 already in use [ 740.722120][ T3201] block nbd0: NBD_DISCONNECT [ 740.726863][ T3201] block nbd0: Send disconnect failed -32 [ 740.751637][ T3201] block nbd0: shutting down sockets [ 740.790223][ T3205] ip6gretap0: entered promiscuous mode [ 740.885713][ T3206] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.008215][ T3216] netlink: 'syz.2.8449': attribute type 2 has an invalid length. [ 741.267967][ T3228] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 741.284172][ T3189] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 741.329064][ T3228] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 741.371518][ T3228] gretap2: entered promiscuous mode [ 741.376772][ T3228] gretap2: entered allmulticast mode [ 741.640444][ T3254] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 742.086124][ T3271] bond1 (unregistering): Released all slaves [ 742.255331][ T3281] pim6reg1: entered promiscuous mode [ 742.260668][ T3281] pim6reg1: entered allmulticast mode [ 742.328260][ T3284] tipc: Enabled bearer , priority 0 [ 742.341092][ T3284] syzkaller0: entered promiscuous mode [ 742.351371][ T3284] syzkaller0: entered allmulticast mode [ 742.353881][ T3286] delete_channel: no stack [ 742.369197][ T3286] netlink: 'syz.1.8469': attribute type 11 has an invalid length. [ 742.377676][ T3286] netlink: 'syz.1.8469': attribute type 11 has an invalid length. [ 742.442881][ T3283] tipc: Resetting bearer [ 742.488614][ T3283] tipc: Disabling bearer [ 742.906411][ T3302] xt_socket: unknown flags 0x50 [ 742.908718][ T3293] hsr0 speed is unknown, defaulting to 1000 [ 742.928930][ T3298] openvswitch: netlink: Message has 2712 unknown bytes. [ 743.265505][ T3307] ip6gre3: entered allmulticast mode [ 743.363798][T10005] IPVS: starting estimator thread 0... [ 743.387022][ T3322] veth0: entered allmulticast mode [ 743.467742][ T3324] IPVS: using max 25 ests per chain, 60000 per kthread [ 743.473530][ T3327] __nla_validate_parse: 11 callbacks suppressed [ 743.473547][ T3327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8485'. [ 743.646042][ T3333] vlan3: entered promiscuous mode [ 743.654730][ T3333] vlan3: entered allmulticast mode [ 743.661385][ T3333] hsr_slave_1: entered allmulticast mode [ 743.770507][ T3327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8485'. [ 743.815645][ T3348] netlink: 'syz.1.8482': attribute type 1 has an invalid length. [ 743.894091][ T3348] netlink: 'syz.1.8482': attribute type 3 has an invalid length. [ 743.906830][ T3348] netlink: 'syz.1.8482': attribute type 7 has an invalid length. [ 743.936491][ T3348] netlink: 'syz.1.8482': attribute type 8 has an invalid length. [ 743.959252][ T3348] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8482'. [ 743.997559][ T3358] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 744.042070][ T3348] NCSI netlink: No device for ifindex 131092 [ 744.324444][ T3377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8499'. [ 744.330515][ T3375] ip6gre4: entered allmulticast mode [ 744.409138][ T3381] netlink: 'syz.3.8500': attribute type 33 has an invalid length. [ 744.423491][ T3381] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8500'. [ 744.436847][ T3384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8501'. [ 744.553289][ T3390] ip6erspan0: entered promiscuous mode [ 744.559813][ T3390] ip6erspan0: entered allmulticast mode [ 744.569934][ T3387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8500'. [ 744.661001][ T3395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8503'. [ 744.689707][ T3403] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8504'. [ 744.715659][ T3402] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8504'. [ 744.789700][ T3403] netlink: 'syz.0.8504': attribute type 12 has an invalid length. [ 744.887259][ T3403] bond1: option primary_reselect: invalid value (255) [ 744.968226][ T3403] bond1 (unregistering): Released all slaves [ 745.176812][T31305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 745.189558][T31305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 745.219571][T31305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 745.258521][T31305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 745.268780][T31305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 745.453400][ T3433] netlink: 'syz.0.8512': attribute type 32 has an invalid length. [ 745.532174][ T3433] bond1: Setting coupled_control to off (0) [ 745.631752][ T3440] block nbd0: not configured, cannot reconfigure [ 745.883533][ T3453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 745.889920][ T3453] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 745.914049][ T3453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 745.925034][ T3453] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 745.934614][ T3453] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 745.940654][ T3453] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 745.984066][ T3465] netlink: 'syz.0.8523': attribute type 11 has an invalid length. [ 746.069306][ T3453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 746.074646][ T3467] netlink: 'syz.0.8524': attribute type 21 has an invalid length. [ 746.078155][ T3453] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 746.118477][ T3469] netlink: 'syz.2.8525': attribute type 1 has an invalid length. [ 746.137640][ T3453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 746.143955][ T3453] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 746.193158][ T3469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 746.220344][ T3337] hsr0 speed is unknown, defaulting to 1000 [ 746.287434][ T3472] netlink: 'syz.0.8526': attribute type 5 has an invalid length. [ 746.499381][ T3493] xt_hashlimit: size too large, truncated to 1048576 [ 746.791715][ T3421] hsr0 speed is unknown, defaulting to 1000 [ 746.822497][ T3506] bridge0: port 3(vlan2) entered blocking state [ 746.829048][ T3506] bridge0: port 3(vlan2) entered disabled state [ 746.837766][ T3506] vlan2: entered allmulticast mode [ 746.853035][ T3506] bridge0: entered allmulticast mode [ 746.861081][ T3506] vlan2: left allmulticast mode [ 746.866414][ T3506] bridge0: left allmulticast mode [ 746.893965][ T3514] lo: entered allmulticast mode [ 746.962623][ T3516] IPVS: length: 129 != 8 [ 747.490494][ T3421] chnl_net:caif_netlink_parms(): no params data found [ 747.615225][ T3554] netlink: 'syz.4.8543': attribute type 1 has an invalid length. [ 747.615225][ T3556] netlink: 'syz.4.8543': attribute type 1 has an invalid length. [ 747.664119][ T3554] 8021q: adding VLAN 0 to HW filter on device bond16 [ 747.720110][ T3562] bond16: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 747.784717][ T3568] netlink: 'syz.2.8544': attribute type 1 has an invalid length. [ 747.979982][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.999803][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.008978][ T3421] bridge_slave_0: entered allmulticast mode [ 748.025339][ T3421] bridge_slave_0: entered promiscuous mode [ 748.043945][ T3577] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 748.051586][ T3577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.062334][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.070318][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.084121][ T3421] bridge_slave_1: entered allmulticast mode [ 748.093219][ T3421] bridge_slave_1: entered promiscuous mode [ 748.105595][ T3581] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 748.121917][ T3581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.220395][ T3421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.254322][ T3421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.310179][ T3421] team0: Port device team_slave_0 added [ 748.319842][ T3421] team0: Port device team_slave_1 added [ 748.414096][ T3421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.433219][ T3421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.468212][ T3421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.494674][ T3421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.502296][ T3421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.530488][ T3421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.596404][ T3421] hsr_slave_0: entered promiscuous mode [ 748.603709][ T3421] hsr_slave_1: entered promiscuous mode [ 748.610225][ T3421] debugfs: 'hsr0' already exists in 'hsr' [ 748.618021][ T3421] Cannot create hsr debugfs directory [ 748.790505][ T3621] __nla_validate_parse: 15 callbacks suppressed [ 748.790524][ T3621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8560'. [ 748.888336][ T3421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.999244][ T3421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.090840][ T3421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.182667][ T3421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.197317][ T3638] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8567'. [ 749.206888][ T3638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8567'. [ 749.217235][ T3638] netlink: 31 bytes leftover after parsing attributes in process `syz.2.8567'. [ 749.228424][ T3638] netlink: 31 bytes leftover after parsing attributes in process `syz.2.8567'. [ 749.414315][ T3650] vcan0: entered allmulticast mode [ 749.465496][ T3651] validate_nla: 4 callbacks suppressed [ 749.465514][ T3651] netlink: 'syz.0.8571': attribute type 8 has an invalid length. [ 749.497021][ T3651] bridge0: entered promiscuous mode [ 749.583520][ T3657] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8574'. [ 749.584716][ T3421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 749.620352][ T3421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 749.645434][ T3421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 749.646230][ T3659] netlink: 'syz.2.8576': attribute type 1 has an invalid length. [ 749.654346][ T3660] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8575'. [ 749.675711][ T3421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 749.678189][ T3660] ksmbd: Unknown IPC event: 3, ignore. [ 749.726681][ T3659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 749.776478][ T3671] 8021q: VLANs not supported on lo [ 749.798086][ T3659] bond2: (slave gretap2): making interface the new active one [ 749.809449][ T3659] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 749.966326][ T3421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.995763][ T3421] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.015796][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.023010][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.049867][T12418] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.058072][T12418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.122637][ T3671] ip6tnl0: Caught tx_queue_len zero misconfig [ 750.198773][ T3689] netlink: 'syz.2.8582': attribute type 2 has an invalid length. [ 750.221804][ T3689] 9: entered promiscuous mode [ 750.582601][ T3421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.655461][ T3421] veth0_vlan: entered promiscuous mode [ 750.681666][ T3421] veth1_vlan: entered promiscuous mode [ 750.734371][ T3421] veth0_macvtap: entered promiscuous mode [ 750.747097][ T3421] veth1_macvtap: entered promiscuous mode [ 750.777453][ T3719] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 750.820316][ T3421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.848753][ T3421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.902538][T12478] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.917671][T12478] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.951165][T12478] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.972583][ T3732] geneve2: entered promiscuous mode [ 750.977975][ T3732] geneve2: entered allmulticast mode [ 750.988897][T12478] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.019987][T12478] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 751.058223][T12478] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 751.080996][ T3731] netlink: 165 bytes leftover after parsing attributes in process `syz.1.8594'. [ 751.096172][T12478] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 751.176793][ T3732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.260117][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.269042][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.363973][T12418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.368751][ T3746] syzkaller0: entered promiscuous mode [ 751.379238][ T3746] syzkaller0: entered allmulticast mode [ 751.390197][T12418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.420021][ T3746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8600'. [ 751.434292][ T3746] netlink: 'syz.2.8600': attribute type 1 has an invalid length. [ 751.474310][ T3746] netlink: 'syz.2.8600': attribute type 1 has an invalid length. [ 751.493092][ T3746] netlink: 'syz.2.8600': attribute type 2 has an invalid length. [ 752.166167][T31305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.176828][T31305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.186811][T31305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.195536][T31305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.203852][T31305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 752.414531][T26559] syz_tun (unregistering): left allmulticast mode [ 752.578389][ T3796] pimreg3: entered allmulticast mode [ 752.716817][ T3809] netlink: 'syz.1.8616': attribute type 11 has an invalid length. [ 752.725292][ T3809] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8616'. [ 752.934070][ T3732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.961697][ T3732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 753.145142][ T3820] veth1_to_bridge: entered promiscuous mode [ 753.151531][ T3820] veth1_to_bridge: entered allmulticast mode [ 753.174701][ T3783] hsr0 speed is unknown, defaulting to 1000 [ 753.252975][ T3732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.263978][ T3732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 753.359757][ T3732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.380440][ T3732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 753.750518][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.759947][ T36] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 753.802142][ T3783] chnl_net:caif_netlink_parms(): no params data found [ 753.816673][T12478] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.831532][T12478] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 753.872700][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.891472][ T36] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 753.947810][T12478] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.965835][T12478] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 754.145465][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.163393][ T3876] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8634'. [ 754.172167][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.172935][ T3876] xt_policy: neither incoming nor outgoing policy selected [ 754.194724][ T3783] bridge_slave_0: entered allmulticast mode [ 754.207685][ T3783] bridge_slave_0: entered promiscuous mode [ 754.231628][ T3881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8637'. [ 754.264897][T31305] Bluetooth: hci1: command tx timeout [ 754.264972][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.278661][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.288355][ T3783] bridge_slave_1: entered allmulticast mode [ 754.297223][ T3783] bridge_slave_1: entered promiscuous mode [ 754.363282][ T3881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8637'. [ 754.366712][ T3783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.386954][ T3783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.450386][ T3783] team0: Port device team_slave_0 added [ 754.460724][ T3783] team0: Port device team_slave_1 added [ 754.554512][ T3783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.562695][ T3783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.562725][ T3783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.564909][ T3783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.608865][ T3783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.643507][ T3783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.738015][ T3783] hsr_slave_0: entered promiscuous mode [ 754.749729][ T3783] hsr_slave_1: entered promiscuous mode [ 754.756366][ T3783] debugfs: 'hsr0' already exists in 'hsr' [ 754.762383][ T3783] Cannot create hsr debugfs directory [ 754.809052][ T3911] bond13: Removing last ns target with arp_interval on [ 754.951486][ T3918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8647'. [ 754.999212][ T3920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.006536][ T3916] netlink: 'syz.2.8646': attribute type 1 has an invalid length. [ 755.014338][ T3920] IPv6: NLM_F_CREATE should be set when creating new route [ 755.021607][ T3920] IPv6: NLM_F_CREATE should be set when creating new route [ 755.038872][ T3920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.074972][ T3916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 755.085132][ T3916] bond3: (slave bond4): making interface the new active one [ 755.093923][ T3916] bond3: (slave bond4): Enslaving as an active interface with an up link [ 755.288246][ T3783] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 755.334221][ T3942] sctp: [Deprecated]: syz.2.8652 (pid 3942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 755.334221][ T3942] Use struct sctp_sack_info instead [ 755.389016][ T3783] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 755.478970][ T3783] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 755.534877][ T3783] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 755.869621][ T3783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 755.889986][ T3783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 755.930876][ T3783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 755.969659][ T3783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 756.008237][ T3967] netlink: 'syz.0.8657': attribute type 6 has an invalid length. [ 756.027020][ T3967] netlink: 'syz.0.8657': attribute type 6 has an invalid length. [ 756.342449][T31305] Bluetooth: hci1: command tx timeout [ 756.466932][ T3783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.515262][ T3783] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.533742][T12418] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.540965][T12418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.596300][T12418] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.603524][T12418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.702699][ T4002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8668'. [ 756.938639][ T4015] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8671'. [ 756.986755][ T4015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8671'. [ 757.029877][ T3783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.418075][ T4048] xt_TCPMSS: Only works on TCP SYN packets [ 757.437759][ T3783] veth0_vlan: entered promiscuous mode [ 757.472244][ T3783] veth1_vlan: entered promiscuous mode [ 757.557264][ T4054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8681'. [ 757.583268][ T3783] veth0_macvtap: entered promiscuous mode [ 757.605262][ T3783] veth1_macvtap: entered promiscuous mode [ 757.714235][ T3783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.743870][ T4063] netlink: 300 bytes leftover after parsing attributes in process `syz.2.8683'. [ 757.756496][ T3783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.770954][ T4063] netlink: 'syz.2.8683': attribute type 1 has an invalid length. [ 757.790556][T12478] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.800381][T12478] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.809727][T12478] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.830128][T12478] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.855122][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8683'. [ 758.087972][T12418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.103129][T12418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.221471][T12413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.241788][T12413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.414879][ T4082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.421560][T31305] Bluetooth: hci1: command tx timeout [ 758.543838][ T4082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.719742][ T4082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.833307][ T4082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.037204][ T4126] bridge1: entered promiscuous mode [ 759.043129][ T4126] bridge1: entered allmulticast mode [ 759.088204][ T3548] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.122005][ T3548] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.152805][ T3548] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.176034][T12487] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.387366][ T4137] 8021q: VLANs not supported on ip6tnl0 [ 759.510202][ T4144] netlink: 'syz.1.8699': attribute type 1 has an invalid length. [ 759.519723][ T4144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.530908][ T4150] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8705'. [ 759.542895][ T4143] delete_channel: no stack [ 759.859546][ T3548] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 759.978134][ T4179] netlink: 'syz.1.8714': attribute type 1 has an invalid length. [ 759.981778][ T4177] netlink: 'syz.2.8715': attribute type 1 has an invalid length. [ 759.986783][ T4179] netlink: 'syz.1.8714': attribute type 3 has an invalid length. [ 760.009799][ T4179] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8714'. [ 760.180982][ T4187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8717'. [ 760.318335][ T4194] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 760.504689][T31305] Bluetooth: hci1: command tx timeout [ 760.569091][ T4199] syzkaller0: entered promiscuous mode [ 760.606872][ T4199] syzkaller0: entered allmulticast mode [ 760.722204][ T4204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8721'. [ 760.745049][ T4204] syzkaller0: entered promiscuous mode [ 760.750652][ T4204] syzkaller0: entered allmulticast mode [ 760.934914][ T4208] netlink: 'syz.1.8723': attribute type 4 has an invalid length. [ 761.114234][ T4212] tipc: Started in network mode [ 761.119295][ T4212] tipc: Node identity baf97d7c9a67, cluster identity 4711 [ 761.128496][ T4212] tipc: Enabled bearer , priority 0 [ 761.137479][ T4212] syzkaller0: entered promiscuous mode [ 761.145653][ T4212] syzkaller0: entered allmulticast mode [ 761.158136][ T4212] tipc: Resetting bearer [ 761.206214][ T4212] tipc: Resetting bearer [ 761.228411][ T4219] netlink: 'syz.0.8727': attribute type 2 has an invalid length. [ 761.237021][ T4219] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8727'. [ 761.249447][ T4220] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8726'. [ 761.261576][ T4212] tipc: Disabling bearer [ 761.345656][ T4227] netlink: 'syz.0.8729': attribute type 11 has an invalid length. [ 761.372617][ T4229] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 761.488230][ T4239] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8732'. [ 761.619833][ T4253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8737'. [ 761.634195][ T4253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8737'. [ 761.768884][ T4264] netlink: 'syz.2.8742': attribute type 1 has an invalid length. [ 761.783631][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8741'. [ 761.817050][ T4270] xt_l2tp: missing protocol rule (udp|l2tpip) [ 761.929696][ T4277] netlink: 'syz.1.8740': attribute type 1 has an invalid length. [ 762.020715][ T4282] tipc: New replicast peer: 255.255.255.255 [ 762.032378][ T4282] tipc: Enabled bearer , priority 10 [ 762.140425][ T4286] syzkaller0: entered promiscuous mode [ 762.148427][ T4286] syzkaller0: entered allmulticast mode [ 762.184294][ T4286] tipc: Enabled bearer , priority 0 [ 762.192942][ T4285] tipc: Resetting bearer [ 762.218102][ T4285] tipc: Disabling bearer [ 762.276739][ T4291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 762.360024][ T4305] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 762.766311][T12487] tipc: Resetting bearer [ 762.898414][T12487] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 762.907692][T12487] bond9 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - be:ca:5f:01:a7:0a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 763.022437][ T6015] tipc: Node number set to 547257724 [ 763.073967][T12487] tipc: Disabling bearer [ 763.095442][T12487] bond4 (unregistering): (slave gretap1): Releasing active interface [ 763.124454][T12487] bond8 (unregistering): (slave gretap2): Releasing active interface [ 763.190439][ T4332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 763.286430][ T4335] block nbd0: Unsupported socket: should be TCP or UNIX. [ 763.304459][ T4336] block nbd0: Unsupported socket: should be TCP or UNIX. [ 763.486024][T12487] bond3 (unregistering): (slave bridge3): Releasing active interface [ 763.913881][T12487] bond0 (unregistering): Released all slaves [ 763.927119][T12487] bond1 (unregistering): Released all slaves [ 763.944559][T12487] bond2 (unregistering): Released all slaves [ 763.961000][T12487] bond3 (unregistering): Released all slaves [ 763.979622][T12487] bond4 (unregistering): Released all slaves [ 763.993549][T12487] bond5 (unregistering): Released all slaves [ 764.161686][T12487] bond6 (unregistering): Released all slaves [ 764.335224][T12487] bond7 (unregistering): (slave veth9): Releasing active interface [ 764.345169][T12487] bond7 (unregistering): Released all slaves [ 764.358795][T12487] bond8 (unregistering): Released all slaves [ 764.373171][T12487] bond9 (unregistering): (slave veth13): Releasing backup interface [ 764.383705][T12487] bond9 (unregistering): Released all slaves [ 764.402267][T12487] bond10 (unregistering): Released all slaves [ 764.414492][ T4328] bridge_slave_1: left allmulticast mode [ 764.420171][ T4328] bridge_slave_1: left promiscuous mode [ 764.436902][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.517329][ T4328] bridge_slave_0: left allmulticast mode [ 764.531789][ T4328] bridge_slave_0: left promiscuous mode [ 764.537637][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.624692][ T4348] netlink: 'syz.1.8765': attribute type 39 has an invalid length. [ 764.748993][ T4343] netlink: 'syz.4.8764': attribute type 12 has an invalid length. [ 764.759000][ T4343] netlink: 'syz.4.8764': attribute type 29 has an invalid length. [ 764.767193][ T4343] __nla_validate_parse: 6 callbacks suppressed [ 764.767211][ T4343] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8764'. [ 764.783275][ T4343] netlink: 59 bytes leftover after parsing attributes in process `syz.4.8764'. [ 764.794852][T12487] 9: left promiscuous mode [ 764.907688][ T4318] hsr0 speed is unknown, defaulting to 1000 [ 764.915237][ T4351] vlan2: entered promiscuous mode [ 764.929367][ T4351] vlan2: entered allmulticast mode [ 764.939351][ T4351] hsr_slave_1: entered allmulticast mode [ 764.946910][T12487] tipc: Disabling bearer [ 764.953167][T12487] tipc: Left network mode [ 764.986181][T12487] IPVS: stopping master sync thread 18214 ... [ 765.891842][ T4398] macvtap1: entered promiscuous mode [ 765.897302][ T4398] vlan0: entered promiscuous mode [ 765.903136][ T4398] macvtap1: entered allmulticast mode [ 765.908736][ T4398] vlan0: entered allmulticast mode [ 765.914953][ T4398] veth0_vlan: entered allmulticast mode [ 766.520553][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8787'. [ 766.559334][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8786'. [ 766.739299][ T4438] nbd: nbd3 already in use [ 766.898491][T12487] hsr_slave_0: left promiscuous mode [ 767.010410][ T4451] IPv6: NLM_F_CREATE should be specified when creating new route [ 767.531066][T12487] hsr_slave_1: left promiscuous mode [ 767.759058][T12487] vlan0: left allmulticast mode [ 767.765922][T12487] vlan0: left promiscuous mode [ 767.777157][T12487] veth0_macvtap: left promiscuous mode [ 767.795532][T12487] veth1_vlan: left promiscuous mode [ 767.800896][T12487] veth0_vlan: left promiscuous mode [ 768.578718][T12487] pimreg (unregistering): left allmulticast mode [ 768.734603][T12487] vlan1 (unregistering): left allmulticast mode [ 768.740892][T12487] veth0_vlan (unregistering): left allmulticast mode [ 769.046279][T12485] smc: removing ib device !yz! [ 769.707205][ T4482] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8800'. [ 769.911017][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8802'. [ 770.007755][ T4493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.152703][ T4490] tipc: Started in network mode [ 770.157616][ T4490] tipc: Node identity 2616ce016e6f, cluster identity 4711 [ 770.174859][ T4490] tipc: Enabled bearer , priority 0 [ 770.196349][ T4490] syzkaller0: entered promiscuous mode [ 770.213352][ T4490] syzkaller0: entered allmulticast mode [ 770.492210][ T4496] tipc: Resetting bearer [ 770.584942][ T4489] tipc: Resetting bearer [ 770.751145][ T4489] tipc: Disabling bearer [ 771.085017][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8816'. [ 771.316829][ T4546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8817'. [ 771.423258][ T4562] IPVS: Unknown mcast interface: ipvlan1 [ 771.448183][ T4561] block nbd3: NBD_DISCONNECT [ 771.453015][ T4561] block nbd3: Send disconnect failed -32 [ 771.459113][ T4561] block nbd3: shutting down sockets [ 772.387857][ T4613] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20004 [ 774.762639][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8828'. [ 774.782325][ T4611] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 774.915762][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8834'. [ 774.956532][ T4629] vlan2: entered promiscuous mode [ 775.154030][ T4647] netlink: 'syz.0.8841': attribute type 13 has an invalid length. [ 775.176922][ T4647] netlink: 'syz.0.8841': attribute type 17 has an invalid length. [ 775.550077][T12487] IPVS: stop unused estimator thread 0... [ 775.648066][T12487] bridge0: port 3(batadv0) entered disabled state [ 775.662351][T12487] bridge_slave_0: left allmulticast mode [ 775.670372][T12487] bridge_slave_0: left promiscuous mode [ 775.685630][T12487] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.130786][T12487] dvmrp0 (unregistering): left allmulticast mode [ 776.196239][T12487] team0: Port device geneve2 removed [ 776.426198][T12487] bond4 (unregistering): (slave bridge3): Releasing active interface [ 776.925048][T12487] bond1 (unregistering): Released all slaves [ 776.938345][T12487] bond2 (unregistering): (slave bond3): Releasing backup interface [ 776.950084][T12487] bond2 (unregistering): Released all slaves [ 777.097012][T12487] bond3 (unregistering): Released all slaves [ 777.241339][T12487] bond0 (unregistering): Released all slaves [ 777.255470][T12487] bond4 (unregistering): Released all slaves [ 777.398685][T12487] bond5 (unregistering): Released all slaves [ 777.412216][T12487] bond6 (unregistering): Released all slaves [ 777.423866][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.431828][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.439302][ T4685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.455733][ T4696] tipc: Enabled bearer , priority 0 [ 777.519243][ T4702] syzkaller0: entered promiscuous mode [ 777.542630][ T4702] syzkaller0: entered allmulticast mode [ 777.687766][ T4702] tipc: Resetting bearer [ 778.021568][ T4747] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 778.049291][ T4747] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 778.061149][ T4747] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 778.073063][ T4747] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 778.084478][ T4747] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 778.571416][ T2315] tipc: Node number set to 1215942145 [ 778.659284][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 778.738903][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 778.762565][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 778.802663][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 778.829996][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.346830][ T4702] tipc: Disabling bearer [ 780.356464][ T4731] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 780.700876][ T4774] tipc: Enabling of bearer rejected, failed to enable media [ 780.785764][T12487] : left promiscuous mode [ 780.822805][ T4754] hsr0 speed is unknown, defaulting to 1000 [ 780.886774][T12487] tipc: Left network mode [ 780.901892][T31305] Bluetooth: hci2: command tx timeout [ 780.958664][ T4787] : renamed from hsr0 (while UP) [ 780.999994][ T4790] netlink: 'syz.0.8872': attribute type 1 has an invalid length. [ 781.184515][ T4801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.240213][ T4801] dvmrp0: entered allmulticast mode [ 781.335249][ T4804] tipc: Enabling of bearer rejected, failed to enable media [ 781.387273][ T4754] chnl_net:caif_netlink_parms(): no params data found [ 781.810799][ T4830] bond1: option arp_validate: invalid value (18446744073709551615) [ 781.833131][ T4830] bond1 (unregistering): Released all slaves [ 781.935391][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.944144][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.961186][ T4754] bridge_slave_0: entered allmulticast mode [ 781.998372][ T4754] bridge_slave_0: entered promiscuous mode [ 782.074652][T12487] hsr_slave_0: left promiscuous mode [ 782.089805][T12487] hsr_slave_1: left promiscuous mode [ 782.098911][T12487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.167854][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8886'. [ 782.189718][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8885'. [ 782.229809][ T4853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8887'. [ 782.529057][T12487] team0 (unregistering): Port device hsr0 removed [ 782.679500][T12487] team0 (unregistering): Port device team_slave_1 removed [ 782.729344][T12487] team0 (unregistering): Port device team_slave_0 removed [ 782.987304][T31305] Bluetooth: hci2: command tx timeout [ 782.995360][T12487] lo (unregistering): left allmulticast mode [ 783.006702][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.014743][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.024484][ T4754] bridge_slave_1: entered allmulticast mode [ 783.032153][ T4754] bridge_slave_1: entered promiscuous mode [ 783.057679][ T4851] geneve2: entered promiscuous mode [ 783.192557][ T4754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.222179][ T4754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.254577][ T4868] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3492 [ 783.281806][ T4870] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3492 [ 783.337687][ T4754] team0: Port device team_slave_0 added [ 783.367132][ T4754] team0: Port device team_slave_1 added [ 783.395122][ T4875] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 783.527217][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.535237][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.579089][ T4754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.594142][ T4880] syzkaller0: entered promiscuous mode [ 783.601120][ T4880] syzkaller0: entered allmulticast mode [ 783.627800][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.637959][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.664584][ T4754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.916557][ T4754] hsr_slave_0: entered promiscuous mode [ 783.923748][ T4754] hsr_slave_1: entered promiscuous mode [ 783.930298][ T4754] debugfs: 'hsr0' already exists in 'hsr' [ 783.939229][ T4754] Cannot create hsr debugfs directory [ 783.994730][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8897'. [ 784.180794][ T4915] netlink: 'syz.3.8900': attribute type 30 has an invalid length. [ 784.246956][ T4915] bond1: option arp_missed_max: invalid value (0) [ 784.253728][ T4915] bond1: option arp_missed_max: allowed values 1 - 255 [ 784.273931][ T4915] bond1 (unregistering): Released all slaves [ 784.425181][ T2312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.571152][ T4754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.689211][ T4754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.901134][ T4754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.067307][T31305] Bluetooth: hci2: command tx timeout [ 785.075788][ T4754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.145471][ T2322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.268921][ T4975] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8916'. [ 785.359219][T12487] IPVS: stop unused estimator thread 0... [ 785.449365][ T4754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 785.462039][T31305] Bluetooth: hci0: command tx timeout [ 785.479813][ T4754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 785.517722][T12487] ------------[ cut here ]------------ [ 785.523910][T12487] WARNING: CPU: 1 PID: 12487 at fs/proc/proc_sysctl.c:1558 retire_sysctl_set+0x48/0x60 [ 785.533739][T12487] Modules linked in: [ 785.538032][T12487] CPU: 1 UID: 0 PID: 12487 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 785.548728][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 785.560291][T12487] Workqueue: netns cleanup_net [ 785.565266][T12487] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 785.570932][T12487] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 60 62 c6 ff 48 83 3b 00 75 0c e8 35 ad 60 ff 5b c3 cc cc cc cc cc e8 29 ad 60 ff 90 <0f> 0b 90 5b e9 4f cd e9 08 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 785.591715][T12487] RSP: 0018:ffffc9001b9678b0 EFLAGS: 00010293 [ 785.597839][T12487] RAX: ffffffff825f5747 RBX: ffff88807d9d4c18 RCX: ffff88807d961e40 [ 785.606172][T12487] RDX: 0000000000000000 RSI: ffffffff8d8f3ee2 RDI: ffff88807d9d4bb8 [ 785.614782][T12487] RBP: ffffc9001b967990 R08: ffffffff8f7cdb77 R09: 1ffffffff1ef9b6e [ 785.623536][T12487] R10: dffffc0000000000 R11: ffffffff8b039ac0 R12: ffffffff8f5ced40 [ 785.631610][T12487] R13: 1ffff9200372cf3c R14: ffffffff8f5ced20 R15: ffff88807d9d49a8 [ 785.632978][ T4754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 785.639593][T12487] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 785.656994][T12487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 785.663829][T12487] CR2: 000055555b4605c8 CR3: 0000000072eaa000 CR4: 00000000003526f0 [ 785.672310][T12487] Call Trace: [ 785.675693][T12487] [ 785.678641][T12487] ops_undo_list+0x49a/0x990 [ 785.683410][T12487] ? __pfx_ops_undo_list+0x10/0x10 [ 785.688563][T12487] ? do_raw_spin_unlock+0x122/0x240 [ 785.693883][T12487] cleanup_net+0x4d8/0x820 [ 785.698331][T12487] ? __pfx_cleanup_net+0x10/0x10 [ 785.704269][T12487] ? _raw_spin_unlock_irq+0x23/0x50 [ 785.709700][T12487] ? process_scheduled_works+0x9ef/0x17b0 [ 785.712792][ T9993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.716119][T12487] ? process_scheduled_works+0x9ef/0x17b0 [ 785.729948][T12487] process_scheduled_works+0xae1/0x17b0 [ 785.735928][T12487] ? __pfx_process_scheduled_works+0x10/0x10 [ 785.742019][T12487] worker_thread+0x8a0/0xda0 [ 785.746659][T12487] kthread+0x711/0x8a0 [ 785.751276][T12487] ? __pfx_worker_thread+0x10/0x10 [ 785.756423][T12487] ? __pfx_kthread+0x10/0x10 [ 785.761047][T12487] ? _raw_spin_unlock_irq+0x23/0x50 [ 785.767159][T12487] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.772563][T12487] ? __pfx_kthread+0x10/0x10 [ 785.777196][T12487] ret_from_fork+0x4bc/0x870 [ 785.782295][T12487] ? __pfx_ret_from_fork+0x10/0x10 [ 785.787461][T12487] ? __switch_to_asm+0x39/0x70 [ 785.792596][T12487] ? __switch_to_asm+0x33/0x70 [ 785.797396][T12487] ? __pfx_kthread+0x10/0x10 [ 785.802155][T12487] ret_from_fork_asm+0x1a/0x30 [ 785.806965][T12487] [ 785.809995][T12487] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 785.817292][T12487] CPU: 1 UID: 0 PID: 12487 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 785.826941][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 785.837016][T12487] Workqueue: netns cleanup_net [ 785.841809][T12487] Call Trace: [ 785.845126][T12487] [ 785.848057][T12487] dump_stack_lvl+0x99/0x250 [ 785.852650][T12487] ? __asan_memcpy+0x40/0x70 [ 785.857234][T12487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.862427][T12487] ? __pfx__printk+0x10/0x10 [ 785.867027][T12487] vpanic+0x237/0x6d0 [ 785.871003][T12487] ? __pfx_vpanic+0x10/0x10 [ 785.875521][T12487] panic+0xb9/0xc0 [ 785.879286][T12487] ? __pfx_panic+0x10/0x10 [ 785.883722][T12487] __warn+0x31b/0x4b0 [ 785.887696][T12487] ? retire_sysctl_set+0x48/0x60 [ 785.892627][T12487] ? retire_sysctl_set+0x48/0x60 [ 785.897551][T12487] report_bug+0x2be/0x4f0 [ 785.901872][T12487] ? retire_sysctl_set+0x48/0x60 [ 785.906800][T12487] ? retire_sysctl_set+0x48/0x60 [ 785.911734][T12487] ? retire_sysctl_set+0x4a/0x60 [ 785.916679][T12487] handle_bug+0x84/0x160 [ 785.920929][T12487] exc_invalid_op+0x1a/0x50 [ 785.925423][T12487] asm_exc_invalid_op+0x1a/0x20 [ 785.930261][T12487] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 785.935798][T12487] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 60 62 c6 ff 48 83 3b 00 75 0c e8 35 ad 60 ff 5b c3 cc cc cc cc cc e8 29 ad 60 ff 90 <0f> 0b 90 5b e9 4f cd e9 08 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 785.955741][T12487] RSP: 0018:ffffc9001b9678b0 EFLAGS: 00010293 [ 785.961908][T12487] RAX: ffffffff825f5747 RBX: ffff88807d9d4c18 RCX: ffff88807d961e40 [ 785.969938][T12487] RDX: 0000000000000000 RSI: ffffffff8d8f3ee2 RDI: ffff88807d9d4bb8 [ 785.977904][T12487] RBP: ffffc9001b967990 R08: ffffffff8f7cdb77 R09: 1ffffffff1ef9b6e [ 785.985866][T12487] R10: dffffc0000000000 R11: ffffffff8b039ac0 R12: ffffffff8f5ced40 [ 785.993940][T12487] R13: 1ffff9200372cf3c R14: ffffffff8f5ced20 R15: ffff88807d9d49a8 [ 786.002047][T12487] ? __pfx_sysctl_net_exit+0x10/0x10 [ 786.007368][T12487] ? retire_sysctl_set+0x47/0x60 [ 786.012311][T12487] ops_undo_list+0x49a/0x990 [ 786.016990][T12487] ? __pfx_ops_undo_list+0x10/0x10 [ 786.022132][T12487] ? do_raw_spin_unlock+0x122/0x240 [ 786.027359][T12487] cleanup_net+0x4d8/0x820 [ 786.031770][T12487] ? __pfx_cleanup_net+0x10/0x10 [ 786.036707][T12487] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.041994][T12487] ? process_scheduled_works+0x9ef/0x17b0 [ 786.047825][T12487] ? process_scheduled_works+0x9ef/0x17b0 [ 786.053836][T12487] process_scheduled_works+0xae1/0x17b0 [ 786.059937][T12487] ? __pfx_process_scheduled_works+0x10/0x10 [ 786.066058][T12487] worker_thread+0x8a0/0xda0 [ 786.070815][T12487] kthread+0x711/0x8a0 [ 786.074879][T12487] ? __pfx_worker_thread+0x10/0x10 [ 786.080074][T12487] ? __pfx_kthread+0x10/0x10 [ 786.084656][T12487] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.090049][T12487] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.095452][T12487] ? __pfx_kthread+0x10/0x10 [ 786.100838][T12487] ret_from_fork+0x4bc/0x870 [ 786.105529][T12487] ? __pfx_ret_from_fork+0x10/0x10 [ 786.110702][T12487] ? __switch_to_asm+0x39/0x70 [ 786.115561][T12487] ? __switch_to_asm+0x33/0x70 [ 786.120687][T12487] ? __pfx_kthread+0x10/0x10 [ 786.125293][T12487] ret_from_fork_asm+0x1a/0x30 [ 786.130060][T12487] [ 786.133406][T12487] Kernel Offset: disabled [ 786.137717][T12487] Rebooting in 86400 seconds..