last executing test programs: 6.909128999s ago: executing program 0 (id=14965): r0 = socket$inet(0x2, 0x3, 0x101) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010"], 0x68}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000140000"], 0x30}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xe2, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0, 0xffffffffffffff5d}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000798b9f4fe5444beca4acdd74de58c79b26fe61ba92694def7e81437575bd829e59b7b19a84a15c0ef4aeb6679ba184278cd23fa13d6012666e1c82eb0199e0383ae08e595eacc88fed9aec579a91aa67c7f8c72cc2c824409987d8b7517d11b5544d66864cf70344614c4dbf29bfc708", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a09040000000000ec00000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r10, &(0x7f0000004b80)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000006411ff0000000000000000000000ff0200000000000000000000000000014f194e2000309078020000000400000000000001954819110bcf22796f6cb28be9a1224c000be94660dd39d2cb40f22ff59e284c9432ca693246dd965f2232f1884e12b4984b5769ec3117e138db720f57b5977508cb0087a738e17dda00000d00000000"], 0x9e) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFLAGS(r12, 0x80086601, &(0x7f0000000180)) 6.901799586s ago: executing program 0 (id=14970): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = epoll_create1(0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000115900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "488ef106a320a3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000116900)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "f45eea8aed62fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000117900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000117b00)={{0x0, 0xab7e, 0x6, 0x4, 0x491, 0x5, 0x0, 0x3f5, 0x80, 0x80, 0x8, 0x4, 0x1, 0x1, 0x1}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000118b00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x6, "7fc27c7dfa4ed5"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000119b00)={{0x0, 0x10, 0x8, 0xa90d, 0x35, 0x7, 0x9, 0x10, 0x4, 0x1, 0x0, 0x6, 0x7, 0x3, 0x2}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000119bc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r7, r8}, {r9, r10}, {r12}], 0x3, "c1650c01f470c2"}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000115900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "488ef106a320a3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000116900)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "f45eea8aed62fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000117900)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000117b00)={{0x0, 0xab7e, 0x6, 0x4, 0x491, 0x5, 0x0, 0x3f5, 0x80, 0x80, 0x8, 0x4, 0x1, 0x1, 0x1}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000118b00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}], 0x6, "7fc27c7dfa4ed5"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000119b00)={{0x0, 0x10, 0x8, 0xa90d, 0x35, 0x7, 0x9, 0x10, 0x4, 0x1, 0x0, 0x6, 0x7, 0x3, 0x2}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000119bc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {r17, r18}, {r19, r20}, {r21}], 0x3, "c1650c01f470c2"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r13, 0xd000943e, &(0x7f00000c5b40)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r14, 0xd0009411, &(0x7f00000c6b40)={{0x0, 0x5, 0x1, 0x10, 0x6, 0x59, 0x2, 0x7, 0x2, 0x7, 0x3, 0xd, 0x0, 0x8, 0x16}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r13, 0xd000943e, &(0x7f00000c7b40)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f00000c8b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000c8d40)={0x7b7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {0x0, r22}, {r23, r24}, {0x0, r25}], 0x0, "d725b352c1bb37"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000cf580)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {0x0, r18}], 0xb, "3888f36fdeedcf"}) (async) r26 = socket$pppoe(0x18, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r26, &(0x7f0000000140)={0x10000002}) (async) r27 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e0000002e85c996040009000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r28 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r28, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r27, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.748881538s ago: executing program 0 (id=14994): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007f000000000000000a00000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000090000000b70900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000c4000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 5.279793273s ago: executing program 3 (id=15005): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x19, &(0x7f0000000400)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@lx}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 5.045306097s ago: executing program 3 (id=15009): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x130, 0xc8, 0x8, 0x130, 0x5803, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff7f, 0xfffffefe, 0xffffffff, 0xffffffff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x84, 0xb7}, 0x0, 0x108, 0x130, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc, 0x100, 0x3}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffffff], 'team0\x00', 'wg2\x00', {}, {}, 0x112, 0x6, 0x4, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0x0, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) syz_emit_ethernet(0x3b4, &(0x7f0000000380)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "7fecb2", 0x37e, 0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x3a, 0x15, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @generic={0xb, 0x75, "68df14939ba64f177323057008add307742ff74154bbeed3ddff8d304a3bc30c2e4949527aa4580075777041eadb1583c2ab4743a961380767ab407692278e9b85355e54e530f3621952b4cf3ae7d64cb475763b2b32d3cf3a166ff4dfe6a8846942d328db7bcf47af1e7f9ffb5f19d9061be18f4e"}, @pad1, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x7bccc6f0}, @jumbo={0xc2, 0x4, 0x5353}]}, @routing={0x21, 0x2, 0x0, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x11, 0x0, 0x80, 0x0, 0x0, 0x2, 0x64}, @routing={0x87, 0x2, 0x2, 0x4, 0x0, [@remote]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x97, 0x1, [0xb32f, 0x9], "9f5aaf244cd38b16db1e58025808e5f3a7e6b1ab8e7fb9c755e77f1f42c12f30d239ea34044abc25fbb492d8e112fb73ef9946a99568c50f06f810be33f26143c5bd2f2cc1441bf5dd283cd5e3a4ad37d05ba3e7f1188bfb14774acd1df0257f9ebbdea9626051c0434a158a779cf568006397d6dc82cffdfc7371deb2d4aae8a41a07761033444cfd06e87776a94b2de646f661cbfd5c"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2, 0xf, 0xb214], "5688425f220014015ecf590d1d75b4773f3d91ed58b76deab72e5145e57de67d2eb81c4d40aa9d08e11888025a4f6d4e857285d96103bed31c166c9814a3cda3dfd20eae092ca6a50bb390f82fafb4becdef141af39c292112181661073cd4ac1f9cce63f94f53dd6168570515d90e68906c71b47667a0eafdbdbeede48ed604ee59da78300bd42e5973f0d5"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x20, 0x5, 0x8], "a70832b37970078abfbc6ada9aa4b8119edfa5502bc231899e42f12f428ddd9dd8d34ea52eca9f5e92630bb72d46d4f6fde6731298e5b20063284b562debe2c73df13eab255a1ad86fd7c63c3efafaab2688d919ad7a929c3ed063ab643a2e1159caa0ce9d25603487d08f6c3bd70e8d19a35f97190c78b5b4012e4393826e79d998898edf1e8495635dc4d3d22ba3664de7563f8060b09ec53aa89beb9420d08ce2"}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0xa0, 0x1, 0x0, 0x2, 0x4, 0x3}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x5, 0x2, 0x3, 0x2, 0x0, 0x0, 0x1, 0x8}, 0x2, {0x1, 0x3, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "eb224663e8d947b5edfe92bfd528c8e65a081911f3c49b4e6dc856ad9af9a7f915dcfb533806b6f5f3780bfdee75821be75c5afde6cb242f38f22e92a7d1c7423b17b1e056c6133f7bd735df7075a974b1e842d266a1668090822100e1e8753af54e6cd6d58a7f58e39ed733fc660758157318accb"}}}}}}}, 0x0) 4.851894384s ago: executing program 3 (id=15013): socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000170069103c0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r0, r1, 0x0, 0xffffffff004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$tipc(r3, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x80000) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x4}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00)}], 0x4}, 0x0) 4.657209825s ago: executing program 0 (id=15017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r9, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) 4.652722022s ago: executing program 4 (id=15018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000000880)={0x27, r3, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r2) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.368227406s ago: executing program 4 (id=15019): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0xa8, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x710}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @private0, 0x87f3}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x806}, 0x0) 4.140891158s ago: executing program 4 (id=15021): r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0010000000000000000000000000000000000000e4a34cf63305b371fd2af70db03d2e7df5afb7c656c7e17442d61e89bb3d505799bff60060a6160e645317d0c6ea0cd37301a3ee23097a5d98ff6861d620eb0737e9dc45bc214c6f10", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="03000000030000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.094851253s ago: executing program 4 (id=15022): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001140)) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r5, 0x716e) accept$inet6(r5, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ddb6687c54aaef37d2c109dccaa9ca67dd38c18f156299b51b16252530657d8737f56d87c61bf50ef007b57fe988c8f7675350f13454dc2109963e3cc346370ef4a093ce66088cb8c90c27e3d0c14650399b404b3355c3aa340b2b4b4efd6038d50db2ef4687b4e237e802409df8792f969f25f9f5c73eff3d964501149a8106c9597fe9e874e390bf4ba9716efe507904b73051cde90069f9d190cedec6803614cf25955e7fc594284c57fd5b219637f8f", @ANYRES8=r5, @ANYRES16=r1, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.919557701s ago: executing program 3 (id=15025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x2b7}, 0x7f, 0x7, 0x100, 0x40, 0x7, 'syz0\x00', "f1dd3960bdaa05f9bb632c30bdfe0339ee40355e2968d15344b160a1237b6691", "744445a04315083d3bb1f29d63e5f0d8691fec058c796ecf85b2dc5b31b65a70", [{0x7, 0x4, {0x0, 0x2}}, {0x4, 0x7, {0x0, 0x2}}, {0x2, 0xd, {0x1, 0xffffffff}}, {0x200, 0x2c2d, {0x1, 0x6000}}, {0x3, 0x5, {0x3, 0xc852}}, {0x6, 0x3, {0x2, 0x8001}}, {0x2, 0xd, {0x1, 0x1}}, {0x3ff, 0x0, {0x2, 0x7}}, {0x2, 0x7, {0x3}}, {0x9, 0xfff1, {0x1, 0xa}}, {0x2, 0x2, {0x3, 0x9}}, {0xb3, 0xff, {0x0, 0x80000001}}, {0x2f, 0x101, {0x0, 0x7}}, {0x5, 0x5, {0x3, 0xd}}, {0x800, 0x26, {0x2, 0x4}}, {0x2, 0x9, {0x2, 0x434}}, {0x2, 0xf000, {0x2, 0x1000}}, {0x1, 0x7, {0x2, 0x3}}, {0x4, 0xa, {0x2, 0x4}}, {0x8000, 0x6, {0x1, 0x80000001}}, {0xc, 0xfe, {0x3, 0x3}}, {0x4, 0x7ff, {0x2, 0x9}}, {0x55b1, 0x7f, {0x0, 0x6}}, {0x0, 0x9, {0x2, 0x80000000}}, {0x400, 0x3, {0x2, 0xec}}, {0x2, 0x1000, {0x3, 0x4}}, {0x8, 0x3ff}, {0x3, 0xfffb, {0x0, 0x6}}, {0x6, 0x7, {0x2, 0x80000001}}, {0xc8b, 0x9, {0x3, 0x6}}, {0xfff8, 0xd, {0x2, 0x2}}, {0x1b6, 0x1, {0x3, 0x10001}}, {0x1, 0x8001, {0x1, 0xffffffff}}, {0x4, 0x7, {0x3, 0x1}}, {0x9, 0x101, {0x3, 0x8}}, {0x9276}, {0x6, 0x1, {0x0, 0x8001}}, {0x9, 0x101, {0x3, 0x7}}, {0x1, 0x3, {0x0, 0x7fff}}, {0x3, 0x2, {0x2, 0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000045}, 0x20000004) 3.734626448s ago: executing program 3 (id=15029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000300)="108de77045bc9a18063a9e4831b7463f63cb6afb0c0e7d0200d79455510ffebac3c4f8e5ea6e18dae9b96f1d7e97a41f0fb1c9b502efadbf0c4208923c43dfecaacf4935a540a72c30e21ca26cf11e34000d049b9fe0fd3867c124bc8ee6b095e7ab7cb8d63c4196bf7158615cf6e4c05031d188cb11994ba60d84803d40e4a8fabc51f75c74e91648775e0cf69fa38e258885054b065cc9b10793f4a505d2eb7be834037c68e83739aa613e6173adb761709c1ee14f5ecba278f105ba655e238c51748b0b82798df1a280", 0xcb}, {&(0x7f0000000400)="49c36132467f1fb7d94455c1a28bb5d9850c05a4023d91aae4806b65b4e8f185b1aaaa04e2bb9ec2d205260792d780b2274f4ed39ca861b4f2810dbc08cc73f1770f8513740c63b01dfc66739aec7f02d1045377bac5cff1ce0bd31d28177111d05063048a1997f6f969b6a2e1935380c8331bb8cbc78f1d9a499d07f964eefa060e2fc515", 0x85}, {&(0x7f0000000680)="c1d3bdd236734d1a1b2d87d9679a84f7f252efbf71c97792cfbf4fe02e8480bbbab7a35e658cd5943a2bfa70114b82fd91c5c71c12ebb51224f3adc7d94aec48399bb6236a652fd8e7a4e3cfeba5b9d63259bb246af66357738abdf41f907f4b1d3aba7f9c4f2b294afede5aa66d8065b47729e385aa1806787234acb1b3a4c1b863265a21c366b20b914f3078a03a0065555bfd608185884ca163d8805de3882e90239ce088657fba4e01665a608490fc4b79df9a2d16971609ab03f85042a293e048e31f157eac461fa5f7760f", 0xce}, {&(0x7f0000000780)="9cc5d5c074a39e9e50233b9c", 0xc}], 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400"], 0xd4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174005c000000060a010400000000000000000100000008000b40000000000900010073797a30000000003400048030000180080001006e6174002400028008000240679349b9080004400000000c0800034000000009080001"], 0xec}}, 0x0) splice(r2, &(0x7f0000000180), r3, 0x0, 0x2000000000004, 0xa) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)={@rand_addr, @local, 0x0}, &(0x7f0000000100)=0xc) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x1c, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRES8=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000800005bbf09200000000000350901000000000095000000000000000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/132, @ANYRES32=r0, @ANYBLOB="00000000831bbfc151a841c621b10b8a5001000000b7050000080000001c0000000000001d8d343ec07f3ca90056080000000200008500000005000000b700f1000200000095bdc22e431a466c5128802b90a15357abae290f53d85996e9571254b758b0a4ba03e90eb9f88208c7e57e760d9ff43473384346391fdf79f9317f2b7c76056635d5e30f04cc1df9f5ecc5b19fdaf30622e1480154aa6220b38a2bfdf27362636eb16db8d179365b7cceb4518346f2edecc7d65126f836d1618464195e410cb8134c121311205f3e18b536ea99697f43faf98648"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x69, '\x00', r7, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.645287909s ago: executing program 3 (id=15030): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300050000000500030080ff000005000300050000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x3f, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000", @ANYBLOB="095f4e51d2d2f9f74d183612b5a4c5dd4c035cdbe18bfc30c8b6e447bf0d04467b5bc607d98bcefe464bf79ad893e3f3b417547738ec9e88dd2798a9de41be429e70a8eaed7fff40c113c5f05b329ff6563dc051"], &(0x7f0000000200)='syzkaller\x00', 0x4004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.560498317s ago: executing program 2 (id=15033): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) close(0x3) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000019, 0x11, r5, 0x100000000) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4008000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x40, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8b33}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x80010) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xac470c28201243a5}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c4) 3.437425067s ago: executing program 2 (id=15036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x400}) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x2c, 0x66, 0x221, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xd, 0xfff3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) 3.350124052s ago: executing program 1 (id=15037): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}, 0x80003}}, 0x10, 0x0}, 0x4004) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x6}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000040)=0x148e, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000800)=[{{&(0x7f0000000440)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000fe}, 0x1c, &(0x7f0000000500)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@tclass={{0x14, 0x29, 0x43, 0xe523}}], 0x18}}], 0x2, 0x4001c00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x4c, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xe11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8004) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth1_to_team\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010926bd0000fddbdf2524fff7fd08000200", @ANYRES32=r12, @ANYBLOB="060006000000000005002a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}}, 0x2041815) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.144747741s ago: executing program 4 (id=15038): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1e4, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_SEC_DEVKEY={0x8c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb3f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x71}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x401}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3d744827}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x8c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7b3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9f}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2a}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8011}, 0x4081) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, r8, 0xf21, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003300)=ANY=[@ANYRES32, @ANYBLOB], 0x48) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0xffffffffffffffff) 3.115282491s ago: executing program 2 (id=15039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xd}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000190063018c00000000009545ccf8fb05d9aea610e3425ea4eb5bad995207ff8840d6d5fdb99c0101ff9990e5439df969eac6ec0387aa2306d413bd886d"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.024381547s ago: executing program 2 (id=15040): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) 2.936793897s ago: executing program 0 (id=15041): ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000000c0)={0x1, 0x5, 0x1}) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(r1, 0x1, 0xb, 0x0, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, r2, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2865d00184e6b721c05f19c5fb2e4df0d389abaa886577a2"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4001) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000004c0)={0x10000005}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000000c0)={0x1, 0x5, 0x1}) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$sock_int(r1, 0x1, 0xb, 0x0, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, r2, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2865d00184e6b721c05f19c5fb2e4df0d389abaa886577a2"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4001) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000004c0)={0x10000005}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) close(r8) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) (async) 2.935720111s ago: executing program 2 (id=15042): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@updpolicy={0xec, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, [@extra_flags={0x8}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd28, 0x47}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0xb, @in6=@private1}}]}, 0xec}}, 0x4004) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e0000002000000000000000000000000000000000300000000005b000000000000000800100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x8044821}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000d0a9e504", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x3, 0x3}, 0x10) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000010000000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.928586833s ago: executing program 1 (id=15043): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000000fc0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/230, 0xe6}}], 0x1, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000f700000018110000", @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000007b8af8ff00000000bfa200008000000000000000000000ff0008000000b7040000050000008500000082000000bf91002000000000b7020002020000008500000000000000b7000000000000009500000000090000fd6877ee297e5835fe025b46a986499fc1f39ebadd9f97c0c3296b171a7d33976235d07a08894000cd88bc000000"], &(0x7f0000000680)='syzkaller\x00', 0x4313, 0x80, &(0x7f00000006c0)=""/128, 0x40f00, 0x42, '\x00', r4, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x7, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r1, r1, r1, r1, 0x1], 0x0, 0x10, 0x80000001}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000900)={0x2, 0x0}, 0x8) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="340000007c20008000000000", @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @local}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "fd1bd3edff00", "c754c484c6157749c7a85b040000008e", "0460f800", "9fd74ba2972e7547"}, 0x28) (async) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x2, 0x5, r10}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012080, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 2.825581256s ago: executing program 1 (id=15044): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000853f09083eec619711b495000000001800b137c2c53fd7e53e12800800010070707000", @ANYRES32=r1, @ANYBLOB="08001f0005000000"], 0x40}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtclass={0x3c, 0x28, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x2, 0xfffb}, {0xb}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004045) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000580)=0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x40, 0x107, 0xfffffffe, 0x2000, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) (async) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000880)='\b', 0x1}], 0x1}}], 0x1, 0x200400c0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff088471fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x108, 0xa000000, 0x10c, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000100), 0x0, 0x0, 0xfffffffe}, 0x50) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a6631e5", @ANYRES32=0x0, @ANYBLOB="a19001000e2c00002c00128009000100626f6e64000000001c00028008000700020000000500060001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6gre0\x00', r11, 0x4, 0x7f, 0x9, 0xfff, 0x4, @remote, @loopback, 0x80, 0x8, 0x7d4a666f, 0x1d}}) 2.721116435s ago: executing program 1 (id=15045): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp, 0x2}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x5c, 0x3}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x1a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0x8}, {0x0, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRESOCT=r7], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050000000600000008000300000000000000", @ANYRES8=r11, @ANYRES16=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00040300000000000000060000000c0099000500000017000000000018000303030303030000"], 0x2c}}, 0x11) (async) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0xf9, 0xb}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x5}, {0xfff2, 0xffff}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 2.55640267s ago: executing program 1 (id=15046): r0 = socket(0x10, 0x80000, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf2502000000", @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000800000082000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000500)={r12, 0x5}, &(0x7f0000000540)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 78.803407ms ago: executing program 1 (id=15047): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) 21.888863ms ago: executing program 2 (id=15048): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) (async) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) sendmsg$inet_sctp(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000eaffffffffb5000000020000000100048005000000380b0000", @ANYRES32=0x0], 0x20, 0x4002804}, 0x0) (async) socket(0x22, 0x5, 0x9) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r4) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) unshare(0xc020680) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 18.853323ms ago: executing program 4 (id=15049): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @empty, 0x9}}}, 0x90) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=@can={{0x0, 0x1, 0x0, 0x1}, 0x2, 0x4, 0x0, 0x0, "efc2081289f0238a"}, 0x10}}, 0x8000) (async) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000003c0)={'vlan0\x00', 0x1}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfd3fd, {0x0, 0x0, 0x0, r6, {0x3, 0xf}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xfffffffffffffef4, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000045}, 0x40000) 0s ago: executing program 0 (id=15050): unshare(0x22020400) r0 = socket$unix(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xef}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="b0d0492530f721c317fdf5bdb5f3b4452939195d4825a20f31d3425a50de100c157eba23d3159c91104f3e8e1446e7caaf303ce881384c0923811e0fea2e7ca9e879304c454af0e4b02d000ec934fe6b1b473b497f66c9", 0x57) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r6, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2100, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x2e, 0x20, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x80, 0x0, 0x0, @ipv4=@empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x2000860) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@generic={0x81, 0x1, 0x1, 0x69}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x800) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000240)={'bridge0\x00', 0x8000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xcc010c98ede8aa95}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x6c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3e, 0x2e}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x6c}}, 0x4011) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002020800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 1114.533394][ T168] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 46504 - 0 [ 1114.564176][ T168] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.587256][ T168] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.618152][ T168] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 46504 - 0 [ 1114.636003][ T168] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.645138][ T168] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.653943][ T168] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 46504 - 0 [ 1114.682319][T26867] tun0: tun_chr_ioctl cmd 1074025681 [ 1114.698689][T26885] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13722'. [ 1114.838963][T26885] nbd5: detected capacity change from 0 to 2 [ 1114.865470][T26632] block nbd5: Send control failed (result -32) [ 1114.872286][T14304] block nbd5: Receive control failed (result -32) [ 1114.881789][T26632] block nbd5: Request send failed, requeueing [ 1114.890405][T26892] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13723'. [ 1114.899983][ T1764] block nbd5: Dead connection, failed to find a fallback [ 1114.907083][ T1764] block nbd5: shutting down sockets [ 1114.913567][ T1764] blk_print_req_error: 138 callbacks suppressed [ 1114.913583][ T1764] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.931460][ T1764] buffer_io_error: 138 callbacks suppressed [ 1114.931476][ T1764] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1114.947227][T26632] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.959945][T26896] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1114.975811][T26896] bond6 (unregistering): Released all slaves [ 1114.986023][T26632] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1115.008905][T26632] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1115.018897][T26632] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1115.027228][T26632] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1115.039099][T26897] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1115.046787][T26632] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1115.074965][T26632] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1115.085647][T26632] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1115.102069][T26632] ldm_validate_partition_table(): Disk read failed. [ 1115.119834][T26632] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1115.174784][T26632] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1115.199355][T26632] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1115.221598][T26632] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1115.243594][T26632] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1115.282653][T26632] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1115.303392][T26632] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1115.349528][T26632] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1115.370896][T26632] Dev nbd5: unable to read RDB block 0 [ 1115.394440][T26632] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1115.423204][T26632] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1115.455554][T26632] nbd5: unable to read partition table [ 1115.476068][T26632] nbd5: partition table beyond EOD, truncated [ 1115.492583][T26632] ldm_validate_partition_table(): Disk read failed. [ 1115.515870][T26632] Dev nbd5: unable to read RDB block 0 [ 1115.531668][T26632] nbd5: unable to read partition table [ 1115.545029][T26632] nbd5: partition table beyond EOD, truncated [ 1115.654870][T26948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13738'. [ 1115.819000][T26959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13739'. [ 1115.849462][T26959] netlink: 'syz.1.13739': attribute type 30 has an invalid length. [ 1115.869949][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13739'. [ 1115.899115][T19555] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.905159][T26962] netlink: 'syz.1.13739': attribute type 30 has an invalid length. [ 1115.918275][T19555] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.940430][T19555] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.961179][T19555] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.865979][T27002] netlink: 'syz.4.13747': attribute type 3 has an invalid length. [ 1116.887942][T27002] netlink: 'syz.4.13747': attribute type 1 has an invalid length. [ 1117.447346][T27038] netlink: 'syz.4.13754': attribute type 13 has an invalid length. [ 1117.463883][T27038] netlink: 'syz.4.13754': attribute type 17 has an invalid length. [ 1117.513474][T19557] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1117.538673][T27043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1117.560797][T19557] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1117.867799][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1118.027987][T10765] Bluetooth: hci2: command 0x0406 tx timeout [ 1118.225467][ T5712] lo speed is unknown, defaulting to 1000 [ 1118.253049][T27038] sit0: left promiscuous mode [ 1118.287532][T27038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.296863][T27038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.308651][T27038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.340771][T27038] batadv_slave_1: left promiscuous mode [ 1118.355092][T27038] veth1_vlan: left promiscuous mode [ 1118.363520][T27038] veth0_vlan: left promiscuous mode [ 1118.370801][T27038] veth0_vlan: entered promiscuous mode [ 1118.380881][T27038] veth1_vlan: entered promiscuous mode [ 1118.392126][T27038] veth1_macvtap: left promiscuous mode [ 1118.398932][T27038] veth0_macvtap: left promiscuous mode [ 1118.406742][T27038] veth0_macvtap: entered promiscuous mode [ 1118.422809][T27038] veth1_macvtap: entered promiscuous mode [ 1118.433926][T27038] net_ratelimit: 35 callbacks suppressed [ 1118.433948][T27038] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1118.468759][T27066] bond7: ARP target 9.0.0.0 is already present [ 1118.475002][T27066] bond7: option arp_ip_target: invalid value (9) [ 1118.483844][T27066] bond7 (unregistering): Released all slaves [ 1118.509206][T19547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.518549][ T5712] lo speed is unknown, defaulting to 1000 [ 1118.537379][T30987] lo speed is unknown, defaulting to 1000 [ 1118.549814][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1118.689650][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1118.821321][T27091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1118.837903][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1118.887153][T27091] __nla_validate_parse: 3 callbacks suppressed [ 1118.887246][T27091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13763'. [ 1118.940054][T27105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13768'. [ 1118.968145][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1119.074839][T27114] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13770'. [ 1119.087914][T27114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13770'. [ 1119.097769][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1119.183951][T27091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13763'. [ 1119.196281][T27091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13763'. [ 1119.207770][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1119.337821][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1119.457787][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1119.470891][T14304] block nbd6: Receive control failed (result -32) [ 1119.549151][T27127] netlink: 'syz.3.13772': attribute type 24 has an invalid length. [ 1119.987042][T27143] netlink: 6 bytes leftover after parsing attributes in process `syz.4.13778'. [ 1120.017505][T27144] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 1120.037858][T27143] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 1120.114789][T27153] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13780'. [ 1120.128233][T27153] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13780'. [ 1120.210159][T27159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13782'. [ 1120.272909][T27159] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1120.333033][T27161] bond7: (slave veth9): Enslaving as an active interface with an up link [ 1120.534029][T27175] netlink: 'syz.3.13786': attribute type 1 has an invalid length. [ 1120.538211][T27182] netlink: 'syz.1.13789': attribute type 1 has an invalid length. [ 1120.588830][T27182] netlink: 'syz.1.13789': attribute type 1 has an invalid length. [ 1120.597094][T27182] netlink: 'syz.1.13789': attribute type 8 has an invalid length. [ 1120.780333][T27194] veth11: entered allmulticast mode [ 1120.790473][T27193] bond8 (unregistering): Released all slaves [ 1120.839023][T27200] syzkaller0: entered promiscuous mode [ 1120.844870][T27200] syzkaller0: entered allmulticast mode [ 1120.865564][T27200] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1121.248365][T27229] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1121.437376][T27247] netlink: 'syz.4.13806': attribute type 62 has an invalid length. [ 1121.561361][T27257] Cannot find del_set index 4 as target [ 1123.508069][T19562] net_ratelimit: 114 callbacks suppressed [ 1123.508104][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1123.638001][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1123.747770][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1123.756416][T27198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1123.871711][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1123.997750][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1124.076556][T27288] __nla_validate_parse: 7 callbacks suppressed [ 1124.076598][T27288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13816'. [ 1124.088002][T27291] syzkaller0: entered promiscuous mode [ 1124.098053][T27291] syzkaller0: entered allmulticast mode [ 1124.151430][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1124.267868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.276262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.284973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.298771][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1124.376771][T27291] tipc: Enabled bearer , priority 0 [ 1124.386952][T27290] tipc: Resetting bearer [ 1124.404964][T27290] tipc: Disabling bearer [ 1124.412344][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13825'. [ 1124.426105][T27310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13824'. [ 1124.509911][T27321] netlink: 404 bytes leftover after parsing attributes in process `syz.3.13826'. [ 1124.523545][T27321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13826'. [ 1124.535668][T27321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13826'. [ 1124.546147][T27321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13826'. [ 1124.571977][T27325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13827'. [ 1124.807861][T27344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13832'. [ 1124.808366][T27342] netlink: 344 bytes leftover after parsing attributes in process `syz.1.13833'. [ 1124.986648][T27357] netlink: 'syz.3.13836': attribute type 1 has an invalid length. [ 1125.031984][T27357] netlink: 'syz.3.13836': attribute type 4 has an invalid length. [ 1125.074625][T27357] netlink: 'syz.3.13836': attribute type 4 has an invalid length. [ 1125.297571][T27373] syzkaller0: entered promiscuous mode [ 1125.318550][T27373] syzkaller0: entered allmulticast mode [ 1125.551694][T27404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.569954][T27404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.679107][T27404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.691457][T27404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.811488][T27404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.826291][T27426] IPVS: Scheduler module ip_vs_sip not found [ 1125.837833][T27404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.958633][T27439] IPv6: sit2: Disabled Multicast RS [ 1125.964795][T27439] sit2: entered allmulticast mode [ 1126.141073][T27404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.157174][T27404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.307029][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.323527][T19555] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.343814][T19555] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.375144][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.375379][T19555] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.402609][T19555] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.423226][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.432201][T19555] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.444631][T27460] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1126.458658][T19555] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.478554][T19555] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.496343][T19555] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.498327][T27460] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1126.528163][T27460] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1126.567147][T27460] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1126.602271][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.609283][T27475] IPVS: length: 78 != 8 [ 1126.610523][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.622696][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.626237][T27476] syzkaller1: entered promiscuous mode [ 1126.648409][T27476] syzkaller1: entered allmulticast mode [ 1126.668427][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.700399][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.722141][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.734670][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.748784][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.802457][T27460] xfrm0 speed is unknown, defaulting to 1000 [ 1126.899330][T27500] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1127.627167][T27564] netlink: 'syz.2.13890': attribute type 13 has an invalid length. [ 1127.946706][T27597] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1128.164757][T27609] netlink: 'syz.1.13898': attribute type 1 has an invalid length. [ 1128.199399][T27609] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1128.261436][T27609] vlan4: entered allmulticast mode [ 1128.278078][T27609] bond8: entered allmulticast mode [ 1128.314631][T27625] bond8: (slave geneve3): making interface the new active one [ 1128.322505][T27625] geneve3: entered allmulticast mode [ 1128.330378][T27625] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1128.584110][T27648] macvlan0: entered promiscuous mode [ 1128.618256][T19562] net_ratelimit: 36 callbacks suppressed [ 1128.618289][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1128.770961][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1128.810210][T27667] netlink: 'syz.1.13913': attribute type 39 has an invalid length. [ 1128.891218][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1129.004180][T27691] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1129.012906][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1129.107142][T27702] __nla_validate_parse: 15 callbacks suppressed [ 1129.107159][T27702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13922'. [ 1129.128032][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1129.338029][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1129.373466][T27707] netlink: 'syz.0.13924': attribute type 1 has an invalid length. [ 1129.382991][T27707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13924'. [ 1129.448996][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1129.476228][T27712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13927'. [ 1129.518925][T27714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.567808][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1129.687727][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1129.853572][T27738] tipc: Enabled bearer , priority 0 [ 1130.021779][T27752] lo speed is unknown, defaulting to 1000 [ 1130.173398][T27752] xfrm0 speed is unknown, defaulting to 1000 [ 1132.700976][ T29] audit: type=1804 audit(1782139290.797:48): pid=27761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13939" name="/newroot/562/cgroup.controllers" dev="tmpfs" ino=2892 res=1 errno=0 [ 1132.725063][ T29] audit: type=1800 audit(1782139290.797:49): pid=27761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13939" name="cgroup.controllers" dev="tmpfs" ino=2892 res=0 errno=0 [ 1132.748560][ T29] audit: type=1800 audit(1782139290.797:50): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13939" name="cgroup.controllers" dev="tmpfs" ino=2892 res=0 errno=0 [ 1132.790184][T27766] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1132.799480][T27766] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001 [ 1132.921188][T27744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1133.145950][T27782] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 1133.228372][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1133.388146][T14304] Bluetooth: hci4: command 0x0406 tx timeout [ 1133.460409][T27803] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.13950'. [ 1133.471443][T27803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13950'. [ 1133.521980][T27819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13954'. [ 1133.533060][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13952'. [ 1133.554814][T27819] vlan5: entered promiscuous mode [ 1133.560265][T27819] 0ªî{X¹¦: entered promiscuous mode [ 1133.598053][T27820] netlink: 'syz.4.13951': attribute type 1 has an invalid length. [ 1133.606492][T27820] netlink: 'syz.4.13951': attribute type 1 has an invalid length. [ 1133.617286][T27820] syzkaller0: entered promiscuous mode [ 1133.647341][T27820] syzkaller0: entered allmulticast mode [ 1133.687786][T19556] net_ratelimit: 34 callbacks suppressed [ 1133.687805][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1133.807882][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1133.918151][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1134.028005][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1134.137909][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1134.247908][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1134.368016][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1134.380287][T27807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1134.442604][T27844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13960'. [ 1134.500347][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1134.556903][T27844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13960'. [ 1134.570097][T27854] netlink: 204 bytes leftover after parsing attributes in process `syz.1.13964'. [ 1134.583406][T27854] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13964'. [ 1134.614742][T27852] tipc: Resetting bearer [ 1134.632502][T27844] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13960'. [ 1134.637022][T27858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13966'. [ 1134.648505][T27860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13965'. [ 1134.661252][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1134.682720][T27859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13965'. [ 1134.702579][T27844] bond10: entered promiscuous mode [ 1134.717933][T27844] bond10: entered allmulticast mode [ 1134.725064][T27844] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1134.780736][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1135.156863][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.178058][T27912] tipc: Enabling of bearer rejected, failed to enable media [ 1135.240380][ T8095] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1135.251433][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.257534][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.276542][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.288245][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.293725][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.299660][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.305215][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.312449][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.318755][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.324278][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.330618][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.336123][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.345519][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.351694][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.357220][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.363152][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.369073][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.374697][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.380841][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.386478][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.393870][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.399712][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.405178][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.411082][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.416748][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.423670][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.429372][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.435652][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.449228][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.459324][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.476363][T27911] tun0: tun_chr_ioctl cmd 1074025673 [ 1135.553661][T27923] netlink: 'syz.4.13985': attribute type 1 has an invalid length. [ 1135.669908][T27941] Cannot find del_set index 3 as target [ 1135.693905][T27938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13988'. [ 1135.723496][T27946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1135.749872][T27946] IPVS: set_ctl: invalid protocol: 171 172.20.20.187:0 [ 1135.791277][T27950] tipc: Resetting bearer [ 1135.825507][T27955] netlink: 6 bytes leftover after parsing attributes in process `syz.4.13995'. [ 1135.847230][T27948] tipc: Resetting bearer [ 1135.867159][T10765] Bluetooth: hci5: link tx timeout [ 1135.872564][T10765] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1135.880711][T10765] Bluetooth: hci5: link tx timeout [ 1135.886069][T10765] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1135.976760][T27969] netlink: 'syz.4.13998': attribute type 1 has an invalid length. [ 1135.997869][T27972] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1135.999296][T27969] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1136.111857][T27990] netlink: 'syz.3.14003': attribute type 30 has an invalid length. [ 1136.188967][ T8095] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1136.243064][T27976] x_tables: duplicate underflow at hook 2 [ 1136.261622][T27999] netlink: 'syz.4.14006': attribute type 12 has an invalid length. [ 1136.270729][T27999] netlink: 'syz.4.14006': attribute type 5 has an invalid length. [ 1136.281060][T27999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.289279][T27999] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.297153][T27999] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.547456][T28019] Cannot find set identified by id 65535 to match [ 1136.800509][T28034] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1136.830204][T19555] tipc: Resetting bearer [ 1137.792131][T28088] bond0: Caught tx_queue_len zero misconfig [ 1137.819393][T28080] syzkaller0: entered promiscuous mode [ 1137.835114][T28080] syzkaller0: entered allmulticast mode [ 1137.888440][T28091] geneve4: entered promiscuous mode [ 1137.916454][T28091] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1137.948138][T10765] Bluetooth: hci5: command 0x0405 tx timeout [ 1137.962720][T28091] geneve0: entered promiscuous mode [ 1137.984457][T28091] geneve0: left promiscuous mode [ 1138.325033][T28115] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1138.466391][T28119] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1138.543584][T28119] bond6 (unregistering): Released all slaves [ 1138.613805][T28141] netlink: 'syz.1.14043': attribute type 1 has an invalid length. [ 1138.691817][T28141] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1138.829500][T28147] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1138.859635][T28147] bond9: (slave gre2): The slave device specified does not support setting the MAC address [ 1138.886480][T28147] bond9: (slave gre2): Error -95 calling set_mac_address [ 1138.962010][T28141] gretap0: entered promiscuous mode [ 1139.016802][T28141] bond9: (slave gretap0): making interface the new active one [ 1139.055013][T28141] bond9: (slave gretap0): Enslaving as an active interface with an up link [ 1139.095433][T28153] macvlan3: entered promiscuous mode [ 1139.104685][T28153] macvlan3: entered allmulticast mode [ 1139.117140][T28153] bond9: entered promiscuous mode [ 1139.128372][T28153] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1139.816500][T28153] bond9: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 1139.862052][T28153] bond9: left promiscuous mode [ 1140.019216][T19562] net_ratelimit: 25 callbacks suppressed [ 1140.019237][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1140.037727][T10765] Bluetooth: hci5: command 0x0405 tx timeout [ 1140.170272][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1140.289697][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1140.428539][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1140.557760][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1140.718116][ T168] bond5: (slave bridge5): failed to get link speed/duplex [ 1140.837751][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1140.891778][T28261] netlink: 'syz.3.14063': attribute type 1 has an invalid length. [ 1140.927800][T28261] __nla_validate_parse: 15 callbacks suppressed [ 1140.927829][T28261] netlink: 248 bytes leftover after parsing attributes in process `syz.3.14063'. [ 1140.962096][T28270] syzkaller0: left promiscuous mode [ 1140.971840][T28270] syzkaller0: left allmulticast mode [ 1140.980649][T28270] tipc: Resetting bearer [ 1140.987297][T28263] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.14064'. [ 1141.071686][T28213] erspan0: left promiscuous mode [ 1141.215677][T28213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1141.227461][T28213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1141.245424][T28213] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1141.508884][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1141.539433][T28282] lo speed is unknown, defaulting to 1000 [ 1141.641011][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1142.095981][T28282] xfrm0 speed is unknown, defaulting to 1000 [ 1142.263630][T28338] : option downdelay: invalid value (18446744073709547007) [ 1142.284754][T28338] : option downdelay: allowed values 0 - 2147483647 [ 1142.305703][T28338]  (unregistering): Released all slaves [ 1142.433774][T28353] netlink: 'syz.4.14080': attribute type 1 has an invalid length. [ 1142.529165][T28360] syzkaller0: entered promiscuous mode [ 1142.542518][T28360] syzkaller0: entered allmulticast mode [ 1142.884461][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14085'. [ 1142.961890][T28375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14085'. [ 1143.112373][T28381] netlink: 'syz.3.14087': attribute type 1 has an invalid length. [ 1143.155396][T28388] lo speed is unknown, defaulting to 1000 [ 1143.168771][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14089'. [ 1143.314661][T28398] syzkaller0: entered promiscuous mode [ 1143.320621][T28398] syzkaller0: entered allmulticast mode [ 1143.326595][T28398] tipc: Resetting bearer [ 1143.337087][T28388] xfrm0 speed is unknown, defaulting to 1000 [ 1143.344653][T28398] lo: Caught tx_queue_len zero misconfig [ 1143.520263][T10765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1143.527787][T10765] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1143.535622][T10765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1143.544893][T10765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1143.554072][T10765] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1143.793385][T28417] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1143.859676][T28421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14097'. [ 1144.054341][T28428] netlink: 'syz.1.14102': attribute type 1 has an invalid length. [ 1144.141716][T28436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14102'. [ 1144.166348][T28438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14104'. [ 1144.188929][T28438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14104'. [ 1144.202960][T28434] mac80211_hwsim hwsim184 syzkaller0: Caught tx_queue_len zero misconfig [ 1144.275022][T28443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14105'. [ 1144.332629][T27048] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.479108][T27048] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.551906][T28460] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1144.578041][T27048] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.615490][T28405] lo speed is unknown, defaulting to 1000 [ 1144.670562][T27048] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.914721][T28405] xfrm0 speed is unknown, defaulting to 1000 [ 1145.042675][T27048] pimreg: left allmulticast mode [ 1145.167417][T27048] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 1145.295276][T27048] bond7 (unregistering): (slave geneve3): Releasing active interface [ 1145.313337][T27048] team0: Port device geneve1 removed [ 1145.354755][T27048] bond9 (unregistering): (slave bridge6): Releasing active interface [ 1145.363725][T27048] bridge6 (unregistering): left promiscuous mode [ 1145.376542][T27048] bridge6 (unregistering): left allmulticast mode [ 1145.403738][T27048] bond0 (unregistering): Released all slaves [ 1145.414603][T27048] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1145.423936][T27048] bond1 (unregistering): Released all slaves [ 1145.435838][T27048] bond2 (unregistering): Released all slaves [ 1145.455257][T27048] bond3 (unregistering): Released all slaves [ 1145.467199][T27048] bond4 (unregistering): Released all slaves [ 1145.480756][T27048] bond5 (unregistering): Released all slaves [ 1145.492226][T27048] bond6 (unregistering): Released all slaves [ 1145.503620][T27048] bond7 (unregistering): Released all slaves [ 1145.523593][T27048] bond8 (unregistering): Released all slaves [ 1145.535175][T27048] bond9 (unregistering): Released all slaves [ 1145.546442][T27048] bond10 (unregistering): Released all slaves [ 1145.558086][T27048] bond11 (unregistering): Released all slaves [ 1145.588170][T28503] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1145.595541][T28496] lo speed is unknown, defaulting to 1000 [ 1145.605454][T28506] netlink: 'syz.3.14120': attribute type 4 has an invalid length. [ 1145.628307][T10765] Bluetooth: hci3: command tx timeout [ 1145.891552][T27048] : left promiscuous mode [ 1145.911841][T28533] netlink: 'syz.1.14126': attribute type 1 has an invalid length. [ 1145.920848][T28533] net_ratelimit: 23 callbacks suppressed [ 1145.920866][T28533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1146.081284][T28496] xfrm0 speed is unknown, defaulting to 1000 [ 1146.088808][T27048] hmac(sha224): left promiscuous mode [ 1146.220844][T27048] tipc: Disabling bearer [ 1146.227354][T27048] tipc: Left network mode [ 1146.264928][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1146.277813][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1146.294761][T27048] IPVS: stopping backup sync thread 27597 ... [ 1146.401962][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1146.444973][T28560] __nla_validate_parse: 9 callbacks suppressed [ 1146.444991][T28560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14131'. [ 1146.474729][T28562] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14132'. [ 1146.758639][T28560] syzkaller0: entered promiscuous mode [ 1146.764287][T28560] syzkaller0: entered allmulticast mode [ 1146.802140][T28405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.816822][T28405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.849303][T28405] bridge_slave_0: entered allmulticast mode [ 1146.876609][T28405] bridge_slave_0: entered promiscuous mode [ 1146.899719][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1146.916500][T28405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.935777][T28405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.954153][T28405] bridge_slave_1: entered allmulticast mode [ 1146.965101][T28405] bridge_slave_1: entered promiscuous mode [ 1147.045232][T28596] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14136'. [ 1147.078799][T28405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.118079][T28405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.309260][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1147.326023][T28405] team0: Port device team_slave_0 added [ 1147.335146][T28405] team0: Port device team_slave_1 added [ 1147.382605][T28599] lo speed is unknown, defaulting to 1000 [ 1147.463792][T28405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.484819][T28405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.511427][T28405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.531208][T27048] hsr_slave_0: left promiscuous mode [ 1147.543793][T27048] veth1_macvtap: left promiscuous mode [ 1147.551462][T27048] veth0_macvtap: left promiscuous mode [ 1147.557412][T27048] veth1_vlan: left promiscuous mode [ 1147.563800][T27048] veth0_vlan: left promiscuous mode [ 1147.626033][T28618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14140'. [ 1147.718167][T10765] Bluetooth: hci3: command tx timeout [ 1147.774448][T28405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.783137][T28405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.814622][T28405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.837955][T28599] xfrm0 speed is unknown, defaulting to 1000 [ 1147.850574][T19555] smc: removing ib device syz1 [ 1147.895166][T19555] smbdirect: ib_dev[syz1] removed [ 1148.336361][ T5712] lo speed is unknown, defaulting to 1000 [ 1148.357899][ T5712] syz1: Port: 1 Link DOWN [ 1148.451978][T28405] hsr_slave_0: entered promiscuous mode [ 1148.464109][T28405] hsr_slave_1: entered promiscuous mode [ 1148.481670][T28405] debugfs: 'hsr0' already exists in 'hsr' [ 1148.495013][T28405] Cannot create hsr debugfs directory [ 1148.527325][T28636] tipc: Enabling of bearer rejected, already enabled [ 1148.552318][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1148.575455][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1148.660675][T28635] tipc: Resetting bearer [ 1148.676408][T28632] netlink: 'syz.2.14141': attribute type 5 has an invalid length. [ 1148.693376][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1148.703734][T28646] sctp: [Deprecated]: syz.0.14142 (pid 28646) Use of int in maxseg socket option. [ 1148.703734][T28646] Use struct sctp_assoc_value instead [ 1148.764007][T28640] team_slave_1: Caught tx_queue_len zero misconfig [ 1148.775682][T28648] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1148.825607][T28645] batadv0: entered promiscuous mode [ 1148.840708][T28645] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1149.026584][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1149.106219][T28660] --map-set only usable from mangle table [ 1149.355426][T28663] tipc: Enabling of bearer rejected, already enabled [ 1149.394307][T28665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14148'. [ 1149.411558][T27048] IPVS: stop unused estimator thread 0... [ 1149.437941][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1149.654991][T28688] dvmrp6: entered allmulticast mode [ 1149.788275][T10765] Bluetooth: hci3: command tx timeout [ 1149.932936][T28713] netlink: 'syz.1.14156': attribute type 1 has an invalid length. [ 1149.952331][T28714] syzkaller1: entered promiscuous mode [ 1149.972229][T28714] syzkaller1: entered allmulticast mode [ 1149.997469][T28713] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1150.076269][T28723] netlink: 35 bytes leftover after parsing attributes in process `syz.1.14158'. [ 1150.146093][T28721] netlink: 192 bytes leftover after parsing attributes in process `syz.2.14157'. [ 1150.465469][T28405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1150.487389][T28755] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14162'. [ 1150.503613][T28405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1150.528517][T28405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1150.548910][T28405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1150.585541][T28405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1150.616885][T28405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1150.625998][T28405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1150.642165][T28405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1150.665471][T28758] tipc: Enabling of bearer rejected, already enabled [ 1150.794319][T28783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14168'. [ 1150.928313][T27048] net_ratelimit: 10 callbacks suppressed [ 1150.928341][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1151.007776][T28799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14172'. [ 1151.039049][T28405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.048795][T28802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1151.107227][T28405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.143315][T19556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.150504][T19556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.205866][T19556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.213061][T19556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.307993][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1151.394342][ T29] audit: type=1107 audit(1782139309.477:51): pid=28832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1151.437589][T28405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1151.570673][T28405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1151.607821][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1151.731475][T28846] veth0_to_bond: Caught tx_queue_len zero misconfig [ 1151.777811][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1151.870400][T10765] Bluetooth: hci3: command tx timeout [ 1151.888230][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1152.024988][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1152.083045][T28866] bond11: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1152.102785][T28866] bond11 (unregistering): Released all slaves [ 1152.156678][T28870] netlink: zone id is out of range [ 1152.195716][T28870] netlink: zone id is out of range [ 1152.203298][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1152.226625][T28873] netlink: 'syz.0.14186': attribute type 2 has an invalid length. [ 1152.237539][T28873] netlink: 'syz.0.14186': attribute type 2 has an invalid length. [ 1152.420235][T28887] __nla_validate_parse: 2 callbacks suppressed [ 1152.420268][T28887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14187'. [ 1152.522071][T28887] netlink: 'syz.2.14187': attribute type 1 has an invalid length. [ 1152.547290][T28405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.764477][T28904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14189'. [ 1153.017415][T28920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1153.185888][T28405] veth0_vlan: entered promiscuous mode [ 1153.225797][T28405] veth1_vlan: entered promiscuous mode [ 1153.282181][T28929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14194'. [ 1153.312233][T28405] veth0_macvtap: entered promiscuous mode [ 1153.328935][T28405] veth1_macvtap: entered promiscuous mode [ 1153.356690][T28405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.391939][T28405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.423502][T19562] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.454121][T19562] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.507939][T19562] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.538254][T19562] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.781046][T19562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.810612][T19562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.878471][T19547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.900180][T19547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.389682][T28968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 1155.199482][T28996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14208'. [ 1155.214188][T28998] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14209'. [ 1155.219563][T28996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14208'. [ 1155.233919][T28998] gretap0: entered promiscuous mode [ 1155.444476][T29011] syz.4.14213: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1155.462648][T29011] CPU: 0 UID: 0 PID: 29011 Comm: syz.4.14213 Not tainted syzkaller #0 PREEMPT(full) [ 1155.462675][T29011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1155.462686][T29011] Call Trace: [ 1155.462694][T29011] [ 1155.462702][T29011] dump_stack_lvl+0xe8/0x150 [ 1155.462727][T29011] warn_alloc+0x249/0x340 [ 1155.462750][T29011] ? __pfx_stack_trace_save+0x10/0x10 [ 1155.462775][T29011] ? __pfx_warn_alloc+0x10/0x10 [ 1155.462798][T29011] ? __kasan_kmalloc+0x93/0xb0 [ 1155.462818][T29011] ? __kmalloc_cache_noprof+0x318/0x660 [ 1155.462839][T29011] ? xskq_create+0x56/0x170 [ 1155.462858][T29011] ? xsk_init_queue+0x8a/0xe0 [ 1155.462875][T29011] ? xsk_setsockopt+0x52a/0x960 [ 1155.462891][T29011] ? do_sock_setsockopt+0x17c/0x1b0 [ 1155.462924][T29011] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1155.462946][T29011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.462970][T29011] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1155.463003][T29011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1155.463027][T29011] ? __kasan_kmalloc+0x93/0xb0 [ 1155.463051][T29011] vmalloc_user_noprof+0xad/0xe0 [ 1155.463071][T29011] ? xskq_create+0xbf/0x170 [ 1155.463090][T29011] xskq_create+0xbf/0x170 [ 1155.463109][T29011] xsk_init_queue+0x8a/0xe0 [ 1155.463129][T29011] xsk_setsockopt+0x52a/0x960 [ 1155.463148][T29011] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1155.463165][T29011] ? __pfx_aa_sk_perm+0x10/0x10 [ 1155.463187][T29011] ? lock_release+0x4b/0x3c0 [ 1155.463212][T29011] ? aa_sock_opt_perm+0xff/0x1a0 [ 1155.463230][T29011] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1155.463249][T29011] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1155.463267][T29011] do_sock_setsockopt+0x17c/0x1b0 [ 1155.463296][T29011] __x64_sys_setsockopt+0x13d/0x1b0 [ 1155.463320][T29011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.463338][T29011] do_syscall_64+0x174/0x580 [ 1155.463357][T29011] ? trace_irq_disable+0x3b/0x140 [ 1155.463376][T29011] ? clear_bhb_loop+0x40/0x90 [ 1155.463393][T29011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.463408][T29011] RIP: 0033:0x7fb50359ce59 [ 1155.463425][T29011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.463439][T29011] RSP: 002b:00007fb504393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1155.463459][T29011] RAX: ffffffffffffffda RBX: 00007fb503815fa0 RCX: 00007fb50359ce59 [ 1155.463471][T29011] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1155.463481][T29011] RBP: 00007fb503632e6f R08: 0000000000000004 R09: 0000000000000000 [ 1155.463491][T29011] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.463499][T29011] R13: 00007fb503816038 R14: 00007fb503815fa0 R15: 00007ffe3f646448 [ 1155.463519][T29011] [ 1155.463544][T29011] Mem-Info: [ 1155.491865][T29014] netlink: 'syz.0.14210': attribute type 10 has an invalid length. [ 1155.495175][T29011] active_anon:23713 inactive_anon:0 isolated_anon:0 [ 1155.495175][T29011] active_file:2988 inactive_file:40779 isolated_file:0 [ 1155.495175][T29011] unevictable:768 dirty:80 writeback:0 [ 1155.495175][T29011] slab_reclaimable:14300 slab_unreclaimable:146826 [ 1155.495175][T29011] mapped:29878 shmem:5379 pagetables:1694 [ 1155.495175][T29011] sec_pagetables:0 bounce:0 [ 1155.495175][T29011] kernel_misc_reclaimable:0 [ 1155.495175][T29011] free:1229859 free_pcp:24444 free_cma:0 [ 1155.648086][T29019] netlink: 'syz.4.14213': attribute type 10 has an invalid length. [ 1155.653094][T29011] Node 0 active_anon:94952kB inactive_anon:0kB active_file:11952kB inactive_file:162912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:17112kB dirty:316kB writeback:0kB shmem:19980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17480kB pagetables:6632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1155.849635][T29011] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110500kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1155.913871][T29011] Node 0 DMA free:11168kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:84kB free_cma:0kB [ 1155.970341][T19547] net_ratelimit: 27 callbacks suppressed [ 1155.970373][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1155.987177][T29011] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1156.022725][T29019] team0: Port device dummy0 added [ 1156.033827][T29023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14214'. [ 1156.045666][T29011] Node 0 DMA32 free:1253656kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:78364kB inactive_anon:0kB active_file:11952kB inactive_file:162912kB unevictable:1536kB writepending:336kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:37108kB local_pcp:22796kB free_cma:0kB [ 1156.088442][T29011] lowmem_reserve[]: 0 0 0 0 0 [ 1156.093427][T29011] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1156.123622][T29011] lowmem_reserve[]: 0 0 0 0 0 [ 1156.130947][T29011] Node 1 Normal free:3672772kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59120kB local_pcp:32472kB free_cma:0kB [ 1156.165108][T29011] lowmem_reserve[]: 0 0 0 0 0 [ 1156.178809][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1156.206738][T29011] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB [ 1156.229147][T29038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14216'. [ 1156.246774][T29011] (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11168kB [ 1156.260138][T29011] Node 0 DMA32: 10578*4kB (UME) 9722*8kB (UM) 7598*16kB (UME) 1524*32kB (UME) 975*64kB (UME) 546*128kB (UME) 556*256kB (UME) 403*512kB (UE) 287*1024kB (UE) 92*2048kB (UM) 0*4096kB = 1253688kB [ 1156.287928][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1156.295132][T29011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1156.295301][T29011] Node 1 Normal: 7*4kB (U) 15*8kB (UM) 7*16kB (UM) 18*32kB (UM) 18*64kB (UM) 12*128kB (UM) 15*256kB (UM) 19*512kB (UM) 12*1024kB (UM) 11*2048kB (U) 884*4096kB (UM) = 3672772kB [ 1156.337254][T29040] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1156.372307][T29011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1156.383975][T29011] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1156.394566][T29011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1156.404737][T29011] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1156.415276][T29011] 45079 total pagecache pages [ 1156.420259][T29011] 0 pages in swap cache [ 1156.424539][T29011] Free swap = 124996kB [ 1156.429382][T29011] Total swap = 124996kB [ 1156.433857][T29011] 2097051 pages RAM [ 1156.437998][T29011] 0 pages HighMem/MovableOnly [ 1156.443103][T29011] 427122 pages reserved [ 1156.447275][T29011] 0 pages cma reserved [ 1156.456959][T29042] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1156.522485][T29053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14222'. [ 1156.557005][T29055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14224'. [ 1156.583150][T29047] tipc: Resetting bearer [ 1156.597977][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1156.613253][T19547] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.637371][T19562] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.661858][T29042] netlink: 'syz.3.14220': attribute type 3 has an invalid length. [ 1156.682770][T19562] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.695890][T29059] hsr_slave_0: left promiscuous mode [ 1156.719534][T29059] hsr_slave_1: left promiscuous mode [ 1156.765225][T29041] tipc: Resetting bearer [ 1156.778695][T19562] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.861702][T29063] syzkaller0: entered promiscuous mode [ 1156.873574][T29063] syzkaller0: entered allmulticast mode [ 1157.048150][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1157.171139][T19555] tipc: Resetting bearer [ 1157.258453][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1157.367951][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1157.488049][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1157.610883][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1157.642931][T29118] __nla_validate_parse: 3 callbacks suppressed [ 1157.642966][T29118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14237'. [ 1157.733087][T29135] tunl0: Caught tx_queue_len zero misconfig [ 1157.851008][T29140] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14244'. [ 1158.129113][T29152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14245'. [ 1158.336021][T29170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14249'. [ 1158.339867][T29168] gre2: entered allmulticast mode [ 1158.351691][T29163] syzkaller1: entered promiscuous mode [ 1158.359155][T29163] syzkaller1: entered allmulticast mode [ 1158.526731][T29182] netlink: 284 bytes leftover after parsing attributes in process `syz.4.14255'. [ 1158.556949][T29186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14256'. [ 1158.616750][T29193] netlink: 'syz.4.14258': attribute type 1 has an invalid length. [ 1158.690334][T29200] team0: Port device dummy0 removed [ 1158.820900][T29208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14260'. [ 1158.899233][T29212] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1159.018086][T29212] bond5 (unregistering): Released all slaves [ 1159.066913][T29217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14263'. [ 1159.077527][T29217] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1159.086568][T29217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1159.094869][T29217] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14263'. [ 1159.112308][T29217] netlink: 'syz.0.14263': attribute type 1 has an invalid length. [ 1159.249754][T29233] syzkaller0: entered promiscuous mode [ 1159.256340][T29233] syzkaller0: entered allmulticast mode [ 1159.357277][T29239] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1159.580461][T29244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14269'. [ 1159.754713][T29257] tipc: Resetting bearer [ 1159.882149][T29256] tipc: Resetting bearer [ 1159.904676][T29268] syzkaller0: entered promiscuous mode [ 1159.920399][T29268] syzkaller0: entered allmulticast mode [ 1159.952918][T29268] rdma_op ffff888052ae41f0 conn xmit_rdma 0000000000000000 [ 1160.414151][T29294] netlink: 'syz.1.14285': attribute type 3 has an invalid length. [ 1160.432096][T19547] tipc: Resetting bearer [ 1160.447984][T29294] netlink: 'syz.1.14285': attribute type 1 has an invalid length. [ 1160.866567][T29304] syzkaller1: left promiscuous mode [ 1160.872800][T29304] syzkaller1: left allmulticast mode [ 1161.047820][T19562] net_ratelimit: 23 callbacks suppressed [ 1161.047853][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1161.167797][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1161.287966][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1161.397742][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1161.541937][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1161.577847][T29336] netlink: 'syz.3.14294': attribute type 15 has an invalid length. [ 1161.678857][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1161.839655][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1161.953252][T29359] tipc: Resetting bearer [ 1161.988338][T29358] tipc: Resetting bearer [ 1162.030861][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1162.159963][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1162.298909][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1162.630735][T27048] tipc: Resetting bearer [ 1162.670309][T29415] __nla_validate_parse: 10 callbacks suppressed [ 1162.670340][T29415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14322'. [ 1162.690066][T29418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14323'. [ 1163.785660][T29496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14347'. [ 1163.966578][T29513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14350'. [ 1163.979951][T29513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14350'. [ 1163.990369][T29513] netlink: 'syz.4.14350': attribute type 12 has an invalid length. [ 1163.999349][T29513] netlink: 'syz.4.14350': attribute type 13 has an invalid length. [ 1164.125446][T29521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14353'. [ 1164.139800][T29521] ip6gre1: entered promiscuous mode [ 1164.145893][T29521] ip6gre1: entered allmulticast mode [ 1164.147279][T14304] block nbd7: Receive control failed (result -32) [ 1164.152100][T10765] block nbd7: Receive control failed (result -32) [ 1164.181786][T29521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14353'. [ 1164.220680][T29523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14354'. [ 1164.475807][T29529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14357'. [ 1164.916476][T29570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14369'. [ 1165.900644][T29609] vlan4: entered allmulticast mode [ 1166.820862][T19562] net_ratelimit: 30 callbacks suppressed [ 1166.820892][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1166.969122][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1167.008197][T29641] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1167.020687][ T8107] team_slave_0: entered promiscuous mode [ 1167.026779][ T8107] team_slave_1: entered promiscuous mode [ 1167.102420][T29643] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1167.193707][T29647] macvlan3: entered promiscuous mode [ 1167.209891][T29647] macvlan3: entered allmulticast mode [ 1167.229487][T29647] bond6: entered promiscuous mode [ 1167.251672][T29647] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1167.281785][T29647] bond6: left promiscuous mode [ 1167.385792][T29653] xt_hashlimit: size too large, truncated to 1048576 [ 1167.449704][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1167.466433][T29658] xt_hashlimit: size too large, truncated to 1048576 [ 1167.478638][T29658] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1167.568824][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1167.692757][T29679] __nla_validate_parse: 5 callbacks suppressed [ 1167.692787][T29679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14403'. [ 1167.696053][T29680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14403'. [ 1167.700056][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1167.729338][T29680] ip6tnl0: entered allmulticast mode [ 1167.735125][T29683] Cannot find add_set index 2 as target [ 1167.805381][T29686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14405'. [ 1167.847507][T29688] pimreg: entered allmulticast mode [ 1167.870078][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1167.950081][T29690] netlink: 'syz.2.14407': attribute type 1 has an invalid length. [ 1167.999936][T29699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14410'. [ 1168.003487][T29690] bond7: entered promiscuous mode [ 1168.015395][T29690] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1168.033353][T10765] block nbd8: Receive control failed (result -32) [ 1168.040985][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1168.086046][T29690] ipvlan2: entered allmulticast mode [ 1168.105123][T29690] bond7: entered allmulticast mode [ 1168.124691][T29690] ipvlan3: entered allmulticast mode [ 1168.164989][T29690] bond7: (slave bridge7): making interface the new active one [ 1168.174124][T29690] bridge7: entered promiscuous mode [ 1168.180455][T29690] bridge7: entered allmulticast mode [ 1168.190150][T29690] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1168.282979][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1168.418026][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1168.547722][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1168.647415][T29743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14422'. [ 1168.710267][T29751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14424'. [ 1168.857487][T29755] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 1168.914859][T29755] bond8: (slave vti0): Error -95 calling set_mac_address [ 1168.976466][T29768] syzkaller0: entered promiscuous mode [ 1168.982180][T29768] syzkaller0: entered allmulticast mode [ 1169.038940][T29748] xfrm0 speed is unknown, defaulting to 1000 [ 1169.416943][T29804] tipc: Resetting bearer [ 1169.434933][T29801] tipc: Resetting bearer [ 1169.526907][T29812] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14437'. [ 1169.694671][T29829] SET target dimension over the limit! [ 1169.774111][T29837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14444'. [ 1169.821390][T29840] bond9: option updelay: invalid value (18446744073709518847) [ 1169.829094][T29840] bond9: option updelay: allowed values 0 - 2147483647 [ 1169.838400][T29840] bond9 (unregistering): Released all slaves [ 1169.950274][T19555] tipc: Resetting bearer [ 1169.988542][T29851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14449'. [ 1170.066645][T29861] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14450'. [ 1170.431314][T29880] sctp: [Deprecated]: syz.1.14456 (pid 29880) Use of int in maxseg socket option. [ 1170.431314][T29880] Use struct sctp_assoc_value instead [ 1171.797909][T14304] Bluetooth: hci3: command 0x0405 tx timeout [ 1171.857847][T19556] net_ratelimit: 28 callbacks suppressed [ 1171.857867][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1171.977841][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1172.088870][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1172.197762][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1172.319104][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1172.458016][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1172.567811][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1172.677869][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1172.787961][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1172.897828][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1173.129724][T29864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1173.140565][T29883] __nla_validate_parse: 1 callbacks suppressed [ 1173.140616][T29883] netlink: 260 bytes leftover after parsing attributes in process `syz.1.14457'. [ 1173.200916][T29924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14468'. [ 1173.281392][T29930] ip6gre2: entered promiscuous mode [ 1173.297770][T29930] ip6gre2: entered allmulticast mode [ 1173.319669][T29939] tipc: Resetting bearer [ 1173.355740][T29941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14473'. [ 1173.365817][T29941] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1173.445089][T29939] netlink: 'syz.3.14471': attribute type 1 has an invalid length. [ 1173.457056][T29939] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14471'. [ 1173.467481][T29939] netlink: 'syz.3.14471': attribute type 1 has an invalid length. [ 1173.477112][T29939] netlink: 634 bytes leftover after parsing attributes in process `syz.3.14471'. [ 1173.486881][T29939] netlink: 1 bytes leftover after parsing attributes in process `syz.3.14471'. [ 1173.503941][T29949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14475'. [ 1173.523344][T29936] tipc: Resetting bearer [ 1173.574621][T29949] netlink: 'syz.4.14475': attribute type 1 has an invalid length. [ 1173.606000][T29953] xfrm0 speed is unknown, defaulting to 1000 [ 1174.012752][T29982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14483'. [ 1174.172626][T29996] team_slave_1: Caught tx_queue_len zero misconfig [ 1174.309564][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14489'. [ 1174.350624][T27048] tipc: Resetting bearer [ 1174.397487][T30007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14489'. [ 1174.673822][T30029] netlink: 'syz.4.14494': attribute type 8 has an invalid length. [ 1175.009735][T30042] netlink: 'syz.1.14499': attribute type 10 has an invalid length. [ 1175.046125][T30042] team0: Port device dummy0 added [ 1175.067958][T30042] netlink: 'syz.1.14499': attribute type 10 has an invalid length. [ 1175.105548][T30042] team0: Port device dummy0 removed [ 1175.113459][T30042] dummy0: entered allmulticast mode [ 1175.120036][T30042] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1175.305220][T30045] netlink: 'syz.4.14500': attribute type 11 has an invalid length. [ 1176.897768][T27048] net_ratelimit: 32 callbacks suppressed [ 1176.897830][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.017775][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.127754][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.237889][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.358116][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.398912][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1177.467806][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.577788][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.687773][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.797831][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.907809][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1177.998107][T30043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1178.185565][T30096] __nla_validate_parse: 7 callbacks suppressed [ 1178.185583][T30096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14512'. [ 1178.389675][T30110] xfrm0 speed is unknown, defaulting to 1000 [ 1178.483065][T30124] veth0: entered promiscuous mode [ 1178.503642][T30122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14515'. [ 1178.514034][T30124] bond0: entered promiscuous mode [ 1178.531050][T30126] netlink: 148 bytes leftover after parsing attributes in process `syz.4.14519'. [ 1178.533741][T30124] bond_slave_0: entered promiscuous mode [ 1178.549482][T30126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14519'. [ 1178.571714][T30124] bond_slave_1: entered promiscuous mode [ 1178.599249][T30124] dummy0: entered promiscuous mode [ 1178.715778][T30136] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14522'. [ 1178.948899][T30112] bond0: left promiscuous mode [ 1178.961666][T30112] bond_slave_0: left promiscuous mode [ 1178.977501][T30112] bond_slave_1: left promiscuous mode [ 1178.997106][T30112] dummy0: left promiscuous mode [ 1179.013078][T30112] veth0: left promiscuous mode [ 1179.203447][T30143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14524'. [ 1179.322837][T30159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14525'. [ 1179.591004][T30184] netlink: 'syz.1.14534': attribute type 1 has an invalid length. [ 1179.634754][T30190] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.14535'. [ 1179.636624][T30184] bond11: entered promiscuous mode [ 1179.653287][T30184] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1179.709785][T30191] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1179.739001][T30191] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 1179.759951][T30191] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1179.771863][T30191] bond11: (slave vti0): making interface the new active one [ 1179.779861][T30191] vti0: entered promiscuous mode [ 1179.785992][T30191] bond11: (slave vti0): Enslaving as an active interface with an up link [ 1179.933354][T30211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14543'. [ 1180.255692][ T29] audit: type=1800 audit(1782139338.347:52): pid=30233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14548" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2745 res=0 errno=0 [ 1180.293677][ T29] audit: type=1800 audit(1782139338.387:53): pid=30209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14540" name="memory.events" dev="tmpfs" ino=2536 res=0 errno=0 [ 1180.320142][T30241] netlink: 'syz.1.14549': attribute type 8 has an invalid length. [ 1180.331529][T30240] netlink: 'syz.4.14551': attribute type 32 has an invalid length. [ 1180.396037][T30240] gretap0: left promiscuous mode [ 1180.459711][T30240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.467261][T30240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.485668][T30240] team_slave_0: left promiscuous mode [ 1180.491684][T30240] team_slave_1: left promiscuous mode [ 1180.533026][T30258] netlink: 'syz.0.14556': attribute type 1 has an invalid length. [ 1180.563568][T30240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.578488][T30240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.688908][T30240] ip6gre1: left promiscuous mode [ 1180.694007][T30240] ip6gre1: left allmulticast mode [ 1180.722452][T30240] ip6gre2: left promiscuous mode [ 1180.727482][T30240] ip6gre2: left allmulticast mode [ 1180.835318][T27048] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.847533][T27048] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.867344][T27048] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.879759][T27048] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.908780][T30275] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14559'. [ 1180.943012][T30276] xfrm0 speed is unknown, defaulting to 1000 [ 1181.128430][T30295] tipc: Enabling of bearer rejected, media not registered [ 1181.911019][T30336] syzkaller0: entered promiscuous mode [ 1181.917988][T30336] syzkaller0: entered allmulticast mode [ 1181.957855][T19540] net_ratelimit: 31 callbacks suppressed [ 1181.957887][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1181.999087][T30356] netlink: 'syz.2.14579': attribute type 1 has an invalid length. [ 1182.066491][T30356] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1182.088264][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1182.217771][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1182.294664][T30368] netlink: 'syz.2.14582': attribute type 6 has an invalid length. [ 1182.321781][T30368] netlink: 'syz.2.14582': attribute type 5 has an invalid length. [ 1182.338981][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1182.448117][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1182.491045][T30380] netlink: 'syz.0.14585': attribute type 21 has an invalid length. [ 1182.500570][T30380] netlink: 'syz.0.14585': attribute type 5 has an invalid length. [ 1182.517860][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1182.520523][T30380] macsec2: entered allmulticast mode [ 1182.533360][T30380] bond0: entered allmulticast mode [ 1182.539820][T30380] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1182.549310][T30380] bond0: left allmulticast mode [ 1182.577700][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1182.690154][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1182.812580][T30396] bond12: option packets_per_slave: invalid value (1048582) [ 1182.821477][T30396] bond12: option packets_per_slave: allowed values 0 - 65535 [ 1182.832734][T30396] bond12 (unregistering): Released all slaves [ 1182.872698][T30402] syzkaller0: entered promiscuous mode [ 1182.879039][T30402] syzkaller0: entered allmulticast mode [ 1182.888542][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1182.904158][T30402] netlink: 'syz.4.14592': attribute type 1 has an invalid length. [ 1182.998269][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1183.101493][T30424] vti0: entered promiscuous mode [ 1183.149002][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1183.438744][T30453] __nla_validate_parse: 13 callbacks suppressed [ 1183.438762][T30453] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14605'. [ 1183.499036][T30446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1183.542607][T30448] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1183.575225][T30462] mac80211_hwsim hwsim185 wlan1: Caught tx_queue_len zero misconfig [ 1183.876737][T30484] bond5: entered promiscuous mode [ 1184.005172][T30489] bond6: (slave tunl0): Device is not bonding slave [ 1184.011968][T30489] bond6: option active_slave: invalid value (tunl0) [ 1184.019872][T30489] bond6 (unregistering): Released all slaves [ 1184.300011][T30493] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 1184.493635][T30498] syzkaller1: entered promiscuous mode [ 1184.499477][T30498] syzkaller1: entered allmulticast mode [ 1184.560185][T30498] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14615'. [ 1186.686594][T30473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1186.816602][T30513] validate_nla: 3 callbacks suppressed [ 1186.816632][T30513] netlink: 'syz.1.14620': attribute type 1 has an invalid length. [ 1186.887011][T30514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14619'. [ 1186.888024][T30513] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14620'. [ 1186.908144][T30513] bond12: entered promiscuous mode [ 1186.913668][T30513] bond12: entered allmulticast mode [ 1186.919623][T30517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14618'. [ 1186.920206][T30513] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1186.983784][T30514] syzkaller0: entered promiscuous mode [ 1187.003245][T30514] syzkaller0: entered allmulticast mode [ 1187.167764][T19562] net_ratelimit: 32 callbacks suppressed [ 1187.167795][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1187.297870][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1187.305927][T30545] netlink: 'syz.4.14629': attribute type 1 has an invalid length. [ 1187.417818][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1187.527890][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1187.637845][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1187.807760][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1187.917756][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1188.095330][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1188.280115][T30585] netlink: 'syz.4.14642': attribute type 62 has an invalid length. [ 1188.312804][T30588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14643'. [ 1188.346785][T30585] syzkaller0: entered promiscuous mode [ 1188.355457][T30585] syzkaller0: entered allmulticast mode [ 1188.369456][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1188.500534][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1188.600219][T30611] set match dimension is over the limit! [ 1188.759472][T30629] netlink: 256 bytes leftover after parsing attributes in process `syz.3.14652'. [ 1188.814253][T30630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.834267][T30624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.844043][T30632] netlink: 516 bytes leftover after parsing attributes in process `syz.3.14653'. [ 1189.926836][T30680] bond0: (slave dummy0): Releasing backup interface [ 1189.944690][T30680] dummy0: left allmulticast mode [ 1189.975389][T30680] bridge_slave_1: left allmulticast mode [ 1189.983385][T30680] bridge_slave_1: left promiscuous mode [ 1189.991054][T30680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.036208][T30680] bond0: (slave bond_slave_0): Releasing backup interface [ 1190.051984][T30680] bond_slave_0: left allmulticast mode [ 1190.073166][T30680] bond0: (slave bond_slave_1): Releasing backup interface [ 1190.129898][T30680] bond_slave_1: left allmulticast mode [ 1190.170571][T30680] team0: Port device team_slave_0 removed [ 1190.208127][T30680] team0: Port device team_slave_1 removed [ 1190.216407][T30680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.225913][T30680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.236931][T30680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.246923][T30680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.279984][T30680] bond5: (slave veth5): Releasing backup interface [ 1190.287218][T30680] bond5: (slave veth5): the permanent HWaddr of slave - 92:a5:ba:51:c9:9c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1190.323853][T30680] bond5: (slave veth7): Releasing backup interface [ 1190.351060][T30680] bond7: (slave veth9): Releasing backup interface [ 1190.372888][ T8101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1190.382089][T30680] bond8: (slave geneve3): Releasing active interface [ 1190.391103][T30680] geneve3: left allmulticast mode [ 1190.411990][T30680] bond9: (slave gretap0): Releasing active interface [ 1190.434096][T30680] bond11: (slave vti0): Releasing backup interface [ 1190.441603][T30680] vti0: left promiscuous mode [ 1190.482164][T30683] team0: Port device xfrm0 added [ 1190.501649][T30691] tipc: Enabled bearer , priority 0 [ 1190.784801][T30702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14670'. [ 1190.836100][T30702] : entered promiscuous mode [ 1190.849377][T30702] netlink: 'syz.1.14670': attribute type 1 has an invalid length. [ 1190.948831][ T8105] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1190.978158][T30715] tipc: Started in network mode [ 1190.983098][T30715] tipc: Node identity 52f497c6a642, cluster identity 4711 [ 1191.006379][T30715] tipc: Enabled bearer , priority 0 [ 1191.035131][T30715] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1191.045465][T30715] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14674'. [ 1191.079607][T30719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14676'. [ 1191.118410][T30715] tipc: Disabling bearer [ 1191.123368][T30726] netlink: 'syz.3.14677': attribute type 1 has an invalid length. [ 1191.136289][T30726] netlink: 'syz.3.14677': attribute type 2 has an invalid length. [ 1191.180808][T30738] netlink: 'syz.3.14677': attribute type 1 has an invalid length. [ 1191.194825][T30738] netlink: 'syz.3.14677': attribute type 2 has an invalid length. [ 1191.309389][T30736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14679'. [ 1191.314930][T30723] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1191.352907][T30723] syzkaller1: linktype set to 780 [ 1191.439008][T30743] netlink: 'syz.2.14679': attribute type 3 has an invalid length. [ 1191.612757][T14304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1191.626225][T14304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1191.628208][T15753] tipc: Node number set to 1992735899 [ 1191.636299][T14304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1191.649437][T14304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1191.659796][T14304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1191.721234][T30766] netlink: 'syz.4.14686': attribute type 1 has an invalid length. [ 1191.818386][T30775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14686'. [ 1191.836422][T30777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14690'. [ 1191.837689][T30766] bond3: entered promiscuous mode [ 1191.846562][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14690'. [ 1191.852080][T30766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1191.865075][T30777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14690'. [ 1191.876831][T30777] netlink: 'syz.3.14690': attribute type 2 has an invalid length. [ 1191.885011][T30777] netlink: 'syz.3.14690': attribute type 1 has an invalid length. [ 1191.893299][T30777] netlink: 'syz.3.14690': attribute type 1 has an invalid length. [ 1191.932712][T30766] bond3: (slave bridge2): making interface the new active one [ 1191.950127][T30766] bridge2: entered promiscuous mode [ 1191.957519][T30766] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1192.213690][T30762] xfrm0 speed is unknown, defaulting to 1000 [ 1192.467872][T19540] net_ratelimit: 23 callbacks suppressed [ 1192.467892][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1192.527538][T30824] netlink: Unknown conntrack attr (0) [ 1192.636931][T30832] netlink: 'syz.3.14700': attribute type 2 has an invalid length. [ 1192.699610][T30839] tipc: Failed to remove unknown binding: 66,0,0/0:3008903085/3008903087 [ 1192.709936][T30839] tipc: Failed to remove unknown binding: 66,0,0/0:3008903085/3008903086 [ 1192.731572][T30762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.748069][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1192.765072][T30762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.774594][T30762] bridge_slave_0: entered allmulticast mode [ 1192.782031][T30762] bridge_slave_0: entered promiscuous mode [ 1192.797798][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1192.814675][T30762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.824119][T30762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.843798][T30762] bridge_slave_1: entered allmulticast mode [ 1192.853846][T30762] bridge_slave_1: entered promiscuous mode [ 1192.890956][T30762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.911194][T30762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.936323][T30849] sit0: left promiscuous mode [ 1192.975669][T30849] macvlan0: left promiscuous mode [ 1192.997179][T30849] mac80211_hwsim hwsim188 wlan0: left promiscuous mode [ 1193.032837][T30849] batadv0: left promiscuous mode [ 1193.046707][T30849] syzkaller0: left promiscuous mode [ 1193.054377][T30849] tipc: Resetting bearer [ 1193.055674][T30868] openvswitch: netlink: nsh attr 0 has unexpected len 2 expected 0 [ 1193.069487][T30868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.079436][T30849] team0: left promiscuous mode [ 1193.086351][T30849] team1: left promiscuous mode [ 1193.099495][T30849] bond5: left promiscuous mode [ 1193.117716][ T8105] xfrm0 speed is unknown, defaulting to 1000 [ 1193.128777][T30762] team0: Port device team_slave_0 added [ 1193.140672][T30762] team0: Port device team_slave_1 added [ 1193.162149][T30872] netlink: 'syz.3.14711': attribute type 1 has an invalid length. [ 1193.172191][T30762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.179482][T30762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.205800][T30762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.217930][T30762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.224941][T30762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.251464][T30762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.265005][T30872] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1193.278016][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1193.313723][T30877] syzkaller1: entered promiscuous mode [ 1193.319345][T30877] syzkaller1: entered allmulticast mode [ 1193.339412][T30762] hsr_slave_0: entered promiscuous mode [ 1193.345888][T30762] hsr_slave_1: entered promiscuous mode [ 1193.352457][T30762] debugfs: 'hsr0' already exists in 'hsr' [ 1193.358446][T30762] Cannot create hsr debugfs directory [ 1193.641091][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1193.663748][T30762] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.677168][T30762] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.707732][T14304] Bluetooth: hci1: command tx timeout [ 1193.783444][T30762] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.797506][T30762] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.817029][T30905] macvtap2: entered promiscuous mode [ 1193.825823][T30905] bridge0: entered promiscuous mode [ 1193.832961][T30887] __nla_validate_parse: 16 callbacks suppressed [ 1193.832975][T30887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14714'. [ 1193.841363][T30903] netlink: 'syz.0.14719': attribute type 13 has an invalid length. [ 1193.882364][T30903] netlink: 'syz.0.14719': attribute type 17 has an invalid length. [ 1193.956321][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14722'. [ 1193.969486][T30887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14714'. [ 1193.971249][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14722'. [ 1193.991031][T30916] netlink: 'syz.2.14722': attribute type 30 has an invalid length. [ 1194.086333][T30925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14722'. [ 1194.107341][T30925] netlink: 'syz.2.14722': attribute type 30 has an invalid length. [ 1194.160238][T30903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.169209][T30903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.188657][T30903] wg1: left promiscuous mode [ 1194.193551][T30903] wg1: left allmulticast mode [ 1194.215927][T30903] xfrm0: left allmulticast mode [ 1194.226604][T30903] veth1_vlan: left promiscuous mode [ 1194.233677][T30903] veth0_vlan: left promiscuous mode [ 1194.240080][T30903] veth0_vlan: entered promiscuous mode [ 1194.250548][T30903] veth1_vlan: entered promiscuous mode [ 1194.264713][T30903] veth1_macvtap: left promiscuous mode [ 1194.273471][T30903] veth0_macvtap: left promiscuous mode [ 1194.281896][T30903] veth0_macvtap: entered promiscuous mode [ 1194.304509][T30903] veth1_macvtap: entered promiscuous mode [ 1194.321116][T30903] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1194.338788][T30903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1194.358512][T30903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1194.374827][T30903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1194.387236][T30903] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1194.429744][T30762] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.448598][T30762] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.467867][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1194.577145][T19562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.596180][T19562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.626030][T19562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.647999][T19562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.704705][T19562] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.732755][T30762] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.757682][T30762] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.825459][T19562] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.836963][T19562] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.890481][T19562] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.952868][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1195.083951][T30762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1195.102551][T30762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1195.122023][T30960] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1195.133468][T30960] bond9 (unregistering): Released all slaves [ 1195.155290][T30951] bridge0: port 1(vlan2) entered blocking state [ 1195.162172][T30951] bridge0: port 1(vlan2) entered disabled state [ 1195.171935][T30951] vlan2: entered allmulticast mode [ 1195.179914][T30951] geneve0: entered allmulticast mode [ 1195.201885][T30762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1195.219157][T30762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1195.235138][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14734'. [ 1195.235780][T30762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1195.255811][T30762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1195.267928][T30762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1195.278629][T30762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1195.287155][T30969] netlink: 'syz.2.14734': attribute type 4 has an invalid length. [ 1195.412614][T30762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.451643][T30762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.473504][T19557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.480657][T19557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.499225][T27048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.507031][T27048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.646068][T30990] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14740'. [ 1195.735600][T30998] netlink: 108 bytes leftover after parsing attributes in process `syz.4.14743'. [ 1195.787852][T14304] Bluetooth: hci1: command tx timeout [ 1195.800865][T31001] syzkaller0: entered promiscuous mode [ 1195.806553][T31001] syzkaller0: entered allmulticast mode [ 1195.841642][T31001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.850032][T31001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.861822][T31001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.930704][T31001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.942394][T31001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.944563][T31007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14746'. [ 1195.958977][T31001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1195.959013][T31001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.996155][T19547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.003537][T19547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.016639][T19547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.023834][T19547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.048933][T31003] xfrm0 speed is unknown, defaulting to 1000 [ 1196.228223][T31004] block nbd9: server does not support multiple connections per device. [ 1196.236906][T31004] block nbd9: shutting down sockets [ 1196.464542][T30762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.578375][T30762] veth0_vlan: entered promiscuous mode [ 1196.613971][T30762] veth1_vlan: entered promiscuous mode [ 1196.654727][T30762] veth0_macvtap: entered promiscuous mode [ 1196.698270][T30762] veth1_macvtap: entered promiscuous mode [ 1196.739092][T31053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14756'. [ 1196.744885][T30762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.779770][T30762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.817280][T19557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.829376][T19557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.851954][T19557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.866756][T19557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.912780][T31066] validate_nla: 3 callbacks suppressed [ 1196.912797][T31066] netlink: 'syz.3.14761': attribute type 8 has an invalid length. [ 1196.948276][ T29] audit: type=1800 audit(1782139355.047:54): pid=31066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14761" name="memory.events" dev="tmpfs" ino=2828 res=0 errno=0 [ 1196.974877][ T29] audit: type=1804 audit(1782139355.047:55): pid=31066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.14761" name="/newroot/544/memory.events" dev="tmpfs" ino=2828 res=1 errno=0 [ 1197.089776][T31072] tipc: Resetting bearer [ 1197.121489][T31076] netlink: 'syz.4.14764': attribute type 1 has an invalid length. [ 1197.154617][T31072] tipc: Resetting bearer [ 1197.259426][T31076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1197.279080][T31085] bond4: (slave macvlan0): Enslaving as an active interface with a down link [ 1197.292887][T27048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.308805][T27048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.354774][T31094] netlink: 'syz.2.14767': attribute type 49 has an invalid length. [ 1197.373039][T19562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.396856][T19562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.657998][T19547] net_ratelimit: 15 callbacks suppressed [ 1197.658017][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1197.788432][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1197.871389][T14304] Bluetooth: hci1: command tx timeout [ 1197.917777][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1198.020822][T19555] tipc: Resetting bearer [ 1198.061276][T31149] netlink: 'syz.3.14785': attribute type 2 has an invalid length. [ 1198.109106][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1198.228135][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1198.290982][T31163] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1198.357808][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1198.452837][T31164] vlan2: left allmulticast mode [ 1198.458361][T31164] geneve0: left allmulticast mode [ 1198.463782][T31164] bridge0: port 1(vlan2) entered disabled state [ 1198.576701][T31189] netlink: 'syz.0.14778': attribute type 4 has an invalid length. [ 1198.607938][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1198.763971][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1198.809157][T31204] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1198.978133][T31212] __nla_validate_parse: 8 callbacks suppressed [ 1198.978153][T31212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14800'. [ 1199.030753][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1199.054997][T31164] netlink: 'syz.0.14778': attribute type 4 has an invalid length. [ 1199.252139][T31219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14805'. [ 1199.448191][T31245] x_tables: duplicate entry at hook 2 [ 1199.451914][T31243] ip6erspan0: entered allmulticast mode [ 1199.490745][T31247] netlink: 34 bytes leftover after parsing attributes in process `syz.1.14813'. [ 1199.514657][T31247] netlink: 17 bytes leftover after parsing attributes in process `syz.1.14813'. [ 1199.696970][T31253] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 1199.947922][T14304] Bluetooth: hci1: command tx timeout [ 1200.482956][T31301] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14831'. [ 1200.581222][T31308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14831'. [ 1200.613404][T31307] netlink: 912 bytes leftover after parsing attributes in process `syz.1.14833'. [ 1200.714634][T31311] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14834'. [ 1200.889623][T31316] netlink: 'syz.4.14835': attribute type 10 has an invalid length. [ 1201.046893][T31332] erspan1: entered allmulticast mode [ 1201.435090][T31349] batadv_slave_1: entered promiscuous mode [ 1201.477273][T31348] batadv_slave_1: left promiscuous mode [ 1201.755884][T31374] netlink: 'syz.2.14849': attribute type 3 has an invalid length. [ 1201.849029][T31379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14851'. [ 1201.895902][T31379] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14851'. [ 1201.957990][T31379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.993000][T10765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1202.018757][T10765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1202.050643][T10765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1202.068594][T10765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1202.079799][T10765] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1202.453957][T31384] xfrm0 speed is unknown, defaulting to 1000 [ 1202.768439][T19540] net_ratelimit: 32 callbacks suppressed [ 1202.768469][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1202.898702][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1203.068683][T31430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1203.077449][T31433] tipc: Resetting bearer [ 1203.106755][T31433] tipc: Resetting bearer [ 1203.142784][T31430] bond1: (slave batadv1): Opening slave failed [ 1203.167218][T31384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.178160][T31384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.185487][T31384] bridge_slave_0: entered allmulticast mode [ 1203.192672][T31384] bridge_slave_0: entered promiscuous mode [ 1203.200599][T31384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.208094][T31384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.215393][T31384] bridge_slave_1: entered allmulticast mode [ 1203.223302][T31384] bridge_slave_1: entered promiscuous mode [ 1203.239169][T19547] tipc: Resetting bearer [ 1203.303333][T31384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.330547][T31384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.363130][T31456] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 1203.369533][T31384] team0: Port device team_slave_0 added [ 1203.382507][T31384] team0: Port device team_slave_1 added [ 1203.433650][T31384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.441703][T31384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.469042][T31384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.489269][T31384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.497398][T31384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.546547][T31384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.628166][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1203.643856][T31384] hsr_slave_0: entered promiscuous mode [ 1203.651758][T31384] hsr_slave_1: entered promiscuous mode [ 1203.659606][T31384] debugfs: 'hsr0' already exists in 'hsr' [ 1203.665981][T31384] Cannot create hsr debugfs directory [ 1203.861345][T31384] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.888162][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1203.932270][T31384] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.993017][T31384] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1204.018326][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1204.024373][T31484] netlink: 'syz.4.14874': attribute type 15 has an invalid length. [ 1204.046042][T31384] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1204.107877][T10765] Bluetooth: hci2: command tx timeout [ 1204.133048][T31491] Cannot find del_set index 8192 as target [ 1204.158304][T19562] bond5: (slave bridge5): failed to get link speed/duplex [ 1204.181557][T31384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1204.191909][T31384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1204.205223][T31384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1204.218851][T31384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1204.235809][T31384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1204.252232][T31384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1204.261052][T31384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1204.271035][T31384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1204.319039][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1204.375293][T31510] bond0: (slave ip6tnl0): refused to change device type [ 1204.383887][T31511] bond0: (slave ip6tnl0): refused to change device type [ 1204.404490][T31510] ip6erspan0: entered allmulticast mode [ 1204.429012][T31384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.452923][T31384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.466876][T19540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.474061][T19540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.509041][T27048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.516213][T27048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.535260][T31519] xt_hashlimit: size too large, truncated to 1048576 [ 1204.620375][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1204.749946][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1204.794413][T31529] __nla_validate_parse: 5 callbacks suppressed [ 1204.794442][T31529] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.14884'. [ 1204.914669][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1205.066661][T31550] netlink: 'syz.4.14889': attribute type 12 has an invalid length. [ 1205.186181][T31384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1205.234651][T31384] veth0_vlan: entered promiscuous mode [ 1205.257555][T31384] veth1_vlan: entered promiscuous mode [ 1205.284704][T31384] veth0_macvtap: entered promiscuous mode [ 1205.294113][T31384] veth1_macvtap: entered promiscuous mode [ 1205.315166][T31384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1205.329145][T31384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.344682][T19540] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.356039][T19540] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.367052][T19540] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.378383][T19540] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.447777][T31560] tipc: Resetting bearer [ 1205.474678][T19555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.483118][T19555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.517265][T19540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.525659][T19540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.736495][T31568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14893'. [ 1205.910811][T31590] xt_ipcomp: unknown flags 1D [ 1205.918041][ T29] audit: type=1800 audit(1782139364.007:56): pid=31590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14897" name="memory.events" dev="tmpfs" ino=205 res=0 errno=0 [ 1205.953498][ T29] audit: type=1804 audit(1782139364.017:57): pid=31590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.14897" name="/newroot/36/memory.events" dev="tmpfs" ino=205 res=1 errno=0 [ 1206.129125][T31607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14901'. [ 1206.140293][T31604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14901'. [ 1206.168012][T31599] xfrm0 speed is unknown, defaulting to 1000 [ 1206.170477][T31606] syzkaller1: entered promiscuous mode [ 1206.181166][T31606] syzkaller1: entered allmulticast mode [ 1206.190423][T10765] Bluetooth: hci2: command tx timeout [ 1206.291429][T31559] tipc: Resetting bearer [ 1206.352920][T19547] tipc: Resetting bearer [ 1206.411543][T31627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14907'. [ 1206.484727][T31629] dvmrp0: left allmulticast mode [ 1206.523594][T31631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14909'. [ 1206.543262][T31632] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14908'. [ 1206.639156][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14910'. [ 1206.673233][T31636] netlink: 100 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1206.780592][T31642] xfrm0 speed is unknown, defaulting to 1000 [ 1207.043892][T31654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14917'. [ 1207.108012][T31656] macsec1: entered promiscuous mode [ 1207.837967][T19556] net_ratelimit: 22 callbacks suppressed [ 1207.837987][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1207.967738][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1208.177916][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1208.267731][T14304] Bluetooth: hci2: command tx timeout [ 1208.283126][T31729] xt_ipcomp: unknown flags 1D [ 1208.288239][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1208.325695][T31734] syzkaller0: entered promiscuous mode [ 1208.332259][T31734] syzkaller0: entered allmulticast mode [ 1208.364231][ T8095] IPVS: starting estimator thread 0... [ 1208.398110][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1208.468225][T31737] IPVS: using max 47 ests per chain, 112800 per kthread [ 1208.528849][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1208.656425][T31760] netlink: 'syz.3.14948': attribute type 1 has an invalid length. [ 1208.664575][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1208.681318][T31760] netlink: 'syz.3.14948': attribute type 1 has an invalid length. [ 1208.789274][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1209.040040][T31767] mac80211_hwsim hwsim188 wlan0: left allmulticast mode [ 1209.085420][T31767] dummy0: left promiscuous mode [ 1209.103199][T31767] tipc: Resetting bearer [ 1209.111614][T31767] syzkaller0: left allmulticast mode [ 1209.124568][T31767] team0: left allmulticast mode [ 1209.131318][T31767] team1: left allmulticast mode [ 1209.148951][T31767] erspan1: left allmulticast mode [ 1209.155980][ T5619] xfrm0 speed is unknown, defaulting to 1000 [ 1209.156008][T19555] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.170560][ T5619] syz0: Port: 1 Link DOWN [ 1209.185449][T19555] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.205978][T19555] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.216083][T19555] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.227392][T19555] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.240050][T19555] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.250155][T19555] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.259952][T19555] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.327945][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1209.438213][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1209.872003][T31812] tipc: Started in network mode [ 1209.882919][T31812] tipc: Node identity ac14140f, cluster identity 4711 [ 1209.899443][T31812] tipc: New replicast peer: 255.255.255.255 [ 1209.915442][T31812] tipc: Enabled bearer , priority 5 [ 1209.979292][T31818] __nla_validate_parse: 19 callbacks suppressed [ 1209.979311][T31818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14969'. [ 1209.997885][ T8095] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1210.015877][T31818] veth1_virt_wifi: entered promiscuous mode [ 1210.097837][ T8095] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1210.348521][T14304] Bluetooth: hci2: command 0x0419 tx timeout [ 1210.598031][T27048] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1211.027915][ T8095] tipc: Node number set to 2886997007 [ 1211.628571][T19555] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1211.636765][T19555] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1212.428033][T10765] Bluetooth: hci2: command 0x0419 tx timeout [ 1212.428466][ T8105] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1212.947835][T19556] net_ratelimit: 30 callbacks suppressed [ 1212.947865][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1213.068115][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1213.177925][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1213.287809][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1213.397797][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1213.507800][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1213.617818][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1213.727781][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1213.837719][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1213.948104][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1215.877831][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1217.987929][T19556] net_ratelimit: 35 callbacks suppressed [ 1217.987950][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1218.107839][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1218.217821][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1218.327766][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1218.438007][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1218.547778][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1218.657827][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1218.767741][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1218.877872][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1218.989552][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1223.047836][T19540] net_ratelimit: 35 callbacks suppressed [ 1223.047859][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1223.167934][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1223.277762][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1223.388176][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1223.497884][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1223.607811][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1223.717720][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1223.827974][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1223.937879][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1224.047810][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1224.747935][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1228.147851][T19557] net_ratelimit: 36 callbacks suppressed [ 1228.147871][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1228.268208][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1228.377859][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1228.487891][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1228.597762][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1228.707818][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1228.817856][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1228.927800][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1229.037815][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1229.147857][T27048] bond5: (slave bridge5): failed to get link speed/duplex [ 1230.951371][T31833] pimreg9: entered allmulticast mode [ 1231.032419][T31838] macsec0: entered promiscuous mode [ 1231.042707][T31838] erspan0: entered promiscuous mode [ 1231.058482][T31834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14972'. [ 1231.135171][T31845] syzkaller0: entered promiscuous mode [ 1231.141482][T31845] syzkaller0: entered allmulticast mode [ 1231.151476][T31845] tipc: Resetting bearer [ 1231.170249][T31845] tipc: Enabling of bearer rejected, already enabled [ 1231.233113][T31844] tipc: Resetting bearer [ 1231.389629][T31856] hmac(sha2: entered promiscuous mode [ 1231.416526][T31856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14982'. [ 1231.618920][T31876] tipc: Resetting bearer [ 1231.727548][T31882] netlink: 'syz.4.14988': attribute type 1 has an invalid length. [ 1231.861262][T31876] syzkaller0: left promiscuous mode [ 1231.866840][T31876] syzkaller0: left allmulticast mode [ 1231.876057][T31876] erspan0: left promiscuous mode [ 1231.881652][T31876] macsec0: left promiscuous mode [ 1231.928551][T31899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14988'. [ 1231.984290][T31886] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1231.995667][T31886] bond5: (slave bond6): making interface the new active one [ 1232.003747][T31886] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1232.033606][T31891] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 1232.048956][T31899] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1232.074947][T31902] syzkaller0: entered promiscuous mode [ 1232.083654][T31902] syzkaller0: entered allmulticast mode [ 1232.091606][T31902] tipc: Resetting bearer [ 1232.128369][T31904] syzkaller0: entered promiscuous mode [ 1232.146975][T31904] syzkaller0: entered allmulticast mode [ 1232.155108][T31901] tipc: Resetting bearer [ 1232.201020][T31911] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14996'. [ 1232.309450][T31918] xt_CT: No such helper "snmp_trap" [ 1232.368429][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15000'. [ 1232.595257][T31939] veth1_to_bond: entered allmulticast mode [ 1232.615407][T31939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15005'. [ 1232.639678][T31939] veth1_to_bond (unregistering): left allmulticast mode [ 1232.845136][T31954] SET target dimension over the limit! [ 1233.093112][T31969] xfrm0 speed is unknown, defaulting to 1000 [ 1233.381176][T19557] tipc: Resetting bearer [ 1233.438724][T31964] dvmrp0: entered allmulticast mode [ 1233.471440][T19547] net_ratelimit: 31 callbacks suppressed [ 1233.471459][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1233.517853][T31994] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15020'. [ 1233.560254][T31994] vlan2: entered allmulticast mode [ 1233.582626][T31994] gretap0: entered allmulticast mode [ 1233.607685][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1233.749118][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1233.838251][T32012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15024'. [ 1233.880142][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1234.068799][T19557] bond5: (slave bridge5): failed to get link speed/duplex [ 1234.166769][T32032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15030'. [ 1234.198286][T19556] bond5: (slave bridge5): failed to get link speed/duplex [ 1234.331253][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1234.470965][T19555] bond5: (slave bridge5): failed to get link speed/duplex [ 1234.478788][T14304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1234.490495][T14304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1234.505502][T14304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1234.517093][T14304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1234.525654][T14304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1234.608528][T19540] bond5: (slave bridge5): failed to get link speed/duplex [ 1234.748786][T19547] bond5: (slave bridge5): failed to get link speed/duplex [ 1234.948510][T32078] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15042'. [ 1235.022640][T32051] xfrm0 speed is unknown, defaulting to 1000 [ 1235.341162][T32051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.348608][T32051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.355925][T32051] bridge_slave_0: entered allmulticast mode [ 1235.363129][T32051] bridge_slave_0: entered promiscuous mode [ 1235.371817][T32051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.379522][T32051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.386868][T32051] bridge_slave_1: entered allmulticast mode [ 1235.394582][T32051] bridge_slave_1: entered promiscuous mode [ 1235.421135][T32051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.433404][T32051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.460198][T32051] team0: Port device team_slave_0 added [ 1235.469047][T32051] team0: Port device team_slave_1 added [ 1235.490962][T32051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.498089][T32051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.524764][T32051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.537205][T32051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.544379][T32051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.570620][T32051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.608302][T32051] hsr_slave_0: entered promiscuous mode [ 1235.614852][T32051] hsr_slave_1: entered promiscuous mode [ 1235.621718][T32051] debugfs: 'hsr0' already exists in 'hsr' [ 1235.627479][T32051] Cannot create hsr debugfs directory [ 1236.597798][T10765] Bluetooth: hci4: command tx timeout [ 1237.694382][T32062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1237.708619][T32051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1237.744436][T32051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1237.754831][T32051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1237.782650][T32051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1237.792295][T32051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1237.823893][T32051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1237.839582][T32121] __nla_validate_parse: 1 callbacks suppressed [ 1237.839598][T32121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15049'. [ 1237.850693][T32122] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 1237.855492][T32051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1237.925516][T32051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.971680][T19556] ------------[ cut here ]------------ [ 1237.977204][T19556] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 1237.991001][T19556] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#0: kworker/u8:13/19556 [ 1238.002006][T19556] Modules linked in: [ 1238.006002][T19556] CPU: 0 UID: 0 PID: 19556 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1238.015683][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1238.025794][T19556] Workqueue: events_unbound cfg80211_wiphy_work [ 1238.032096][T19556] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1238.038566][T19556] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 1238.058219][T19556] RSP: 0018:ffffc90006fef4a0 EFLAGS: 00010293 [ 1238.064304][T19556] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 1238.072336][T19556] RDX: ffff88803e0006c4 RSI: ffff88807af11998 RDI: ffffffff90430cd0 [ 1238.080368][T19556] RBP: ffffc90006fef610 R08: ffff8880949b2abf R09: 1ffff11012936557 [ 1238.088394][T19556] R10: dffffc0000000000 R11: ffffed1012936558 R12: ffff88803e0006c4 [ 1238.096380][T19556] R13: 0000000000000001 R14: ffff88807af11998 R15: dffffc0000000000 [ 1238.104406][T19556] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 1238.113385][T19556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1238.120016][T19556] CR2: 00007f91dd3b8fe8 CR3: 00000000a51d6000 CR4: 00000000003526f0 [ 1238.128039][T19556] Call Trace: [ 1238.131336][T19556] [ 1238.134278][T19556] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1238.140402][T19556] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1238.146584][T19556] invoke_tx_handlers_late+0xb5/0x1830 [ 1238.152098][T19556] ? sta_info_get+0x2ec/0x300 [ 1238.156796][T19556] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 1238.162671][T19556] ieee80211_tx+0x2d7/0x4b0 [ 1238.167189][T19556] ? __pfx_ieee80211_tx+0x10/0x10 [ 1238.172269][T19556] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 1238.177777][T19556] ? ieee80211_xmit+0x2e5/0x3c0 [ 1238.182648][T19556] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1238.188688][T19556] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1238.194518][T19556] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 1238.200903][T19556] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 1238.207092][T19556] ieee80211_scan_work+0x488/0x1ab0 [ 1238.212352][T19556] cfg80211_wiphy_work+0x29e/0x420 [ 1238.217480][T19556] ? process_scheduled_works+0xa20/0x14e0 [ 1238.223261][T19556] process_scheduled_works+0xa8e/0x14e0 [ 1238.228872][T19556] ? __pfx_process_scheduled_works+0x10/0x10 [ 1238.234873][T19556] ? do_raw_spin_lock+0x12b/0x2f0 [ 1238.240031][T19556] ? assign_work+0x3cf/0x5d0 [ 1238.244665][T19556] worker_thread+0xa47/0xfb0 [ 1238.249323][T19556] kthread+0x388/0x470 [ 1238.253420][T19556] ? __pfx_worker_thread+0x10/0x10 [ 1238.258580][T19556] ? __pfx_kthread+0x10/0x10 [ 1238.263180][T19556] ret_from_fork+0x514/0xb70 [ 1238.267819][T19556] ? __pfx_ret_from_fork+0x10/0x10 [ 1238.272939][T19556] ? __switch_to+0xc89/0x1420 [ 1238.277669][T19556] ? __pfx_kthread+0x10/0x10 [ 1238.282277][T19556] ret_from_fork_asm+0x1a/0x30 [ 1238.287066][T19556] [ 1238.290166][T19556] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1238.297462][T19556] CPU: 0 UID: 0 PID: 19556 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1238.307111][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1238.317180][T19556] Workqueue: events_unbound cfg80211_wiphy_work [ 1238.323449][T19556] Call Trace: [ 1238.326746][T19556] [ 1238.329685][T19556] vpanic+0x56c/0xa60 [ 1238.333686][T19556] ? __pfx__printk+0x10/0x10 [ 1238.338302][T19556] ? __pfx_vpanic+0x10/0x10 [ 1238.342817][T19556] ? is_bpf_text_address+0x292/0x2b0 [ 1238.348124][T19556] ? is_bpf_text_address+0x26/0x2b0 [ 1238.353349][T19556] panic+0xc5/0xd0 [ 1238.357169][T19556] ? __pfx_panic+0x10/0x10 [ 1238.361616][T19556] ? ret_from_fork_asm+0x1a/0x30 [ 1238.366573][T19556] __warn+0x315/0x4c0 [ 1238.370572][T19556] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 1238.376401][T19556] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 1238.382233][T19556] __report_bug+0x331/0x530 [ 1238.386765][T19556] ? arch_stack_walk+0x11b/0x150 [ 1238.391721][T19556] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 1238.397548][T19556] ? __pfx___report_bug+0x10/0x10 [ 1238.402595][T19556] ? stack_depot_save_flags+0x33/0x800 [ 1238.408077][T19556] report_bug_entry+0x19a/0x290 [ 1238.412948][T19556] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1238.418770][T19556] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 1238.424596][T19556] handle_bug+0xce/0x200 [ 1238.428862][T19556] exc_invalid_op+0x1a/0x50 [ 1238.433390][T19556] asm_exc_invalid_op+0x1a/0x20 [ 1238.438255][T19556] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1238.444729][T19556] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 1238.464344][T19556] RSP: 0018:ffffc90006fef4a0 EFLAGS: 00010293 [ 1238.470432][T19556] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 1238.478425][T19556] RDX: ffff88803e0006c4 RSI: ffff88807af11998 RDI: ffffffff90430cd0 [ 1238.486418][T19556] RBP: ffffc90006fef610 R08: ffff8880949b2abf R09: 1ffff11012936557 [ 1238.494507][T19556] R10: dffffc0000000000 R11: ffffed1012936558 R12: ffff88803e0006c4 [ 1238.502502][T19556] R13: 0000000000000001 R14: ffff88807af11998 R15: dffffc0000000000 [ 1238.510495][T19556] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 1238.516344][T19556] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1238.522429][T19556] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1238.528602][T19556] invoke_tx_handlers_late+0xb5/0x1830 [ 1238.534074][T19556] ? sta_info_get+0x2ec/0x300 [ 1238.538776][T19556] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 1238.544607][T19556] ieee80211_tx+0x2d7/0x4b0 [ 1238.549132][T19556] ? __pfx_ieee80211_tx+0x10/0x10 [ 1238.554186][T19556] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 1238.559777][T19556] ? ieee80211_xmit+0x2e5/0x3c0 [ 1238.564652][T19556] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1238.570649][T19556] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1238.576473][T19556] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 1238.582825][T19556] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 1238.589009][T19556] ieee80211_scan_work+0x488/0x1ab0 [ 1238.594234][T19556] cfg80211_wiphy_work+0x29e/0x420 [ 1238.599361][T19556] ? process_scheduled_works+0xa20/0x14e0 [ 1238.605095][T19556] process_scheduled_works+0xa8e/0x14e0 [ 1238.610662][T19556] ? __pfx_process_scheduled_works+0x10/0x10 [ 1238.616655][T19556] ? do_raw_spin_lock+0x12b/0x2f0 [ 1238.621735][T19556] ? assign_work+0x3cf/0x5d0 [ 1238.626345][T19556] worker_thread+0xa47/0xfb0 [ 1238.630960][T19556] kthread+0x388/0x470 [ 1238.635034][T19556] ? __pfx_worker_thread+0x10/0x10 [ 1238.640153][T19556] ? __pfx_kthread+0x10/0x10 [ 1238.644753][T19556] ret_from_fork+0x514/0xb70 [ 1238.649357][T19556] ? __pfx_ret_from_fork+0x10/0x10 [ 1238.654486][T19556] ? __switch_to+0xc89/0x1420 [ 1238.659181][T19556] ? __pfx_kthread+0x10/0x10 [ 1238.663782][T19556] ret_from_fork_asm+0x1a/0x30 [ 1238.668554][T19556] [ 1238.672054][T19556] Kernel Offset: disabled [ 1238.676371][T19556] Rebooting in 86400 seconds..