last executing test programs: 7.63437088s ago: executing program 4 (id=6530): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xc, 0xfc, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x6, 0x3a, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3], [0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}]}}]}, 0x8c}}, 0x0) 7.355470283s ago: executing program 4 (id=6532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xfffc}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000070000000100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) 7.206839873s ago: executing program 4 (id=6533): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x50) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000080)={0x1, 0x0, 0xd, 0x6bc, 0x10000, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fc01000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000000000000044000500fa33646d599c39b20000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcffffff100000001800018014000200776c616e3100000000000000000000000807000000000000080007007a1f0000"], 0x3c}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x1, 0xf7, 0xfffff008}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r10 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) 6.173964238s ago: executing program 4 (id=6539): socket$nl_route(0x10, 0x3, 0x0) 5.913262624s ago: executing program 4 (id=6543): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xffffffffffffffb4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x92f}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x4, 0x6, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x68, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@generic={0x89, 0x10, "d1cc7f6e7a290074bda0ed7e0dfb"}, @ssrr={0x89, 0xf, 0xe3, [@multicast1, @multicast1, @multicast1]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000125bd7000fbdbdf25010000003800018008000100", @ANYRESHEX=r3, @ANYBLOB="080003000100000008000100", @ANYRES32=r2, @ANYBLOB="140002006970766c616e3100000000000000000008000100", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x1f}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x38, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r11, @ANYBLOB="c304050000128008000100677470000c0002800800010013b8132fa79539b0036afcbf16e2719e57dde090fcc1d02381b2953d341a77bba885b1f509453f0b94613866a3946a2aecb138badb795408f24600dfb819c000"/107, @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 4.85247788s ago: executing program 4 (id=6556): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r2, &(0x7f00000001c0)='ecb-twofish-3way\x00', 0x200502, &(0x7f0000000240)={@align=0x9, {0x1, 0x8, 0x0, 0x6}}, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffc}) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000340)={0xa0000, 0x7fffffff, 0x1, 0x6, 0x5, 0x5}) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000000b93c19d760f8", @ANYRES16=r4, @ANYBLOB="10002bbd7000ffdbdf25130000005801138058000080060001002dd800000d000100736b63697068657200000000150001006563622d74776f666973682d3377617900000000150001006563622d74776f666973682d33776179000000000c00010096326b2b2f8a2d5c640000800700010025292500110001002dc52121212523402c275d2c2d000000150001006563622d74776f666973682d3377617900000000080001005b3a282e150001006563622d74776f666973682d33776179000000000a0001002c2d5c5d215c0000480000800d000100736b63697068657200000000090001005d4025247d0000000d000100736b63697068657200000000150001006563622d74776f666973682d33776179000000005000008004000100150001006563622d74776f666973682d3377617900000000090001002140265c2f0000000a0001003a7d252d3a5c0000150001006563622d74776f666973682d337761790000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48040) sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 3.055928098s ago: executing program 3 (id=6574): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a010400000000000000baeb0de6be1cf9f6803c0001800c0001007061796c6f6164002c00028008000440000000b7080005400000000008"], 0x94}}, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x64, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000300)=0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="18000000560001060200000000000000070000000024e300"], 0x18}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14, 0x4}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@generic={0xd0, 0x4, "ae89"}]}}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3a) write$tun(r7, &(0x7f0000000140)={@val={0x0, 0x19}, @val={0x1, 0x0, 0x37a5, 0xd, 0x3, 0x7f}, @x25={0x2, 0x9, 0x27, "716696f64c4bc3937733fe433d9b4de9039674cf403d5d63d978bdfb3d6e45640b1e16c8e57a2ec1cb52f4d8cd13d42d582c720e7e4b86c6cab6b993c01913a9c816a2287f60b183d18ee0d2a83e04f0639dee9d1374b2ecb863bbc1bfd9526ad23b2e38e5e27265740d7eaa9503b1108b424dc0a10d6d386ed12bb28aaf82127b7a32330b12215bc556d65c3d243c7fdb6f0b67d09eb6898dc40f9bca707912ff4aaa2d97e504e4344f47bd70d8bcffbc60907ac517f70ec2165b94c255f2b2d7e1777b86fa5149775c96978d1bed6cba7cb749a2553e579f3176732deda71da55b0ae9df6fef2358b17ce8eafbe052abc73fab2b0ba0106a"}}, 0x10a) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r6) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000805}, 0x20004040) 2.388374784s ago: executing program 3 (id=6577): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000480)=0x40, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288ad601b6eb8d49cf140719e73aae", 0x11) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8823566f0ae3a37eabb2f5719265d93b6ea718203a709505c5150628c1b055a363c7ce55740c0f90d4a45fb5ed8b0011e8e006835621505bc9cefe4075b1504f522b40a3b820baef454b7127f39080af776272b8e5c4f5e891900dddceb5e30b2daacec5d30e84b1899ee1efb573a2af0d4bac5d3219d6bfa30007de4d7530dc2acb5000a1d366432cf5a5c73e14effc262bd2bffc381433c120c8b158f61910d1141d1de84989a03c", @ANYRES8=0x0, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC=r1, @ANYRES16=r0], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x2000000c}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000140)=[{r8, 0x8}, {r7, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, r3, 0x25, 0x4}, 0x14) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r11, 0x84, 0x7d, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES64=r10, @ANYRES32=r2, @ANYRES32=r4, @ANYRESOCT=r9], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xddf87f85421ba81b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.756229728s ago: executing program 0 (id=6583): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x94, 0x10, 0x503, 0xfffffffc, 0x40, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8b33}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x54, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x36}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x7}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x94}, 0x1, 0x0, 0x0, 0x48890}, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r5, 0xaa0f4000) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x16e, 0x40, 0x6, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x4000010, r12, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r11, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000af9000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x29a49000) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10010, r4, 0x0) 1.714127184s ago: executing program 1 (id=6585): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x3) sendto$inet6(r2, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) 1.440264411s ago: executing program 0 (id=6587): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) connect$l2tp6(r0, &(0x7f0000000b00)={0xa, 0x0, 0x4, @mcast2, 0x8, 0x1}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b040000fcdbdf257a000000e995", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001007369740014000280050005003800000005000400ef000000"], 0x40}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) 1.388426451s ago: executing program 3 (id=6588): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x800, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_PROTOCOL={0x5, 0xc, 0x8}, @NDA_DST_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xcd9ad27008a971b6) 1.363806671s ago: executing program 2 (id=6589): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="44ed36bdae1769eb45c0d322d295f13647b584719757dbe30ea41a055ebe7a212e34e34d2f49d59a14715ea618d8c901dbc9c121f90ba25f5b58c020ddd7266230c4117c61dc11dbdc7fc8658b57b89a40a9ea391478922ddac36e53ab703b047dc302907b050e1671a13a6d5e6f23a4b407d0d25ec1b1a6f4f3ae2ecb"], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4010, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}], 0x58}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, 0xffffffffffffffff, 0x952de000) 1.248394392s ago: executing program 1 (id=6590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.247343908s ago: executing program 0 (id=6591): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b060102000000000000000006000002050001"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3b}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc000) sendto$packet(r3, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c86", 0x2d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 1.187096335s ago: executing program 1 (id=6592): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)={0xc, 0x1, 0x7, 0x0, 0x0, [{{r1}, 0xef02}, {{r3}, 0xb}, {{r0}, 0x2}, {{r2}, 0x100000001}, {{r1}, 0xffff}, {{r0}, 0x8}, {{r2}, 0x580000000000000}]}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)={0x6c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private1, 0x18d}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x810) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 1.163261239s ago: executing program 3 (id=6593): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000700)={{0xffffffffffffffff, &(0x7f00000000c0)=']*\x00', 0x28100, &(0x7f0000000600)={@_ha_fsid={[0x0, 0x50b]}, {0xff5f, 0x1ff, 0xd1ce, 0x2}}, 0x5, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)}, {[0x0, 0x9, 0x6, 0x9fe]}, 0x9, 0x2d, &(0x7f00000006c0)=""/45}) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0xc}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040004) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f00000012c0)=""/4107, 0xbc5) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0xa, &(0x7f0000000240)=@raw=[@alu={0x0, 0x0, 0x3, 0xa, 0x0, 0x2, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x0, 0x1, 0x5, 0x8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x3e}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0xc}], &(0x7f00000002c0)='GPL\x00', 0x5, 0x85, &(0x7f0000000300)=""/133, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x251f3, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x1, 0x1, 0x8}, {0x1, 0x3, 0x2, 0x1}, {0x2, 0x1, 0x8, 0x4}, {0x0, 0x3, 0xc, 0x6bffd624d208d53e}], 0x10, 0x6}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000021000107fcffffff000000001900000008000100", @ANYRES32=r5, @ANYBLOB="53bbadc9a26304baaa041ff8687dd5a8151376a42d47f2721d1c71d97605d21afc6e9a48ebb16e5d5c4d9cdf585ed9a538ce49bf0b9701e782971be557cad13e35ccdc54f655af29e35fcfe4d69cdda1fc32d8ae9b185594d9c06996ca5a71b8ba7ea103665bf0075ff68da534f044f537ff9e216b"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000500), 0x4) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000006800010000000000fddbdf2502000000040000000600070004090000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1401, 0x300, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x40080) 1.068195858s ago: executing program 2 (id=6594): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 990.698837ms ago: executing program 2 (id=6595): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000400)="051a00000e80006558", 0x9}], 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x1d8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xac2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xce, 0x3, "ea69482702a4349d6dbf167b4caf7a56f97a5fc93a74c1a9df50ce95f345ada4323670ad1bc3a1425c3e5d755adc96f0600cf6754e13c082b5e0826a76ddd0f9828e8b5af5b65a5db3e53d9cccd3df3e7c434602a3b851de1b5e4c412f225eeb99f20f827ed19f48bfedba583615b5a4f026f3a74331cbbe397950d5248b92f117f4d74703884f7ea3ebfab413031e3711e236be62cc376021a2078868357066617b274cdc0833884d9bb24f7980e7403d53d8b936abf0ec4b372d4e4a717bdad20edb009d9558993a56"}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x163b}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20040840}, 0x4008080) (async) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x1d8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xac2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xce, 0x3, "ea69482702a4349d6dbf167b4caf7a56f97a5fc93a74c1a9df50ce95f345ada4323670ad1bc3a1425c3e5d755adc96f0600cf6754e13c082b5e0826a76ddd0f9828e8b5af5b65a5db3e53d9cccd3df3e7c434602a3b851de1b5e4c412f225eeb99f20f827ed19f48bfedba583615b5a4f026f3a74331cbbe397950d5248b92f117f4d74703884f7ea3ebfab413031e3711e236be62cc376021a2078868357066617b274cdc0833884d9bb24f7980e7403d53d8b936abf0ec4b372d4e4a717bdad20edb009d9558993a56"}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x163b}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20040840}, 0x4008080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 949.986395ms ago: executing program 0 (id=6596): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) (async) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) 832.015334ms ago: executing program 1 (id=6597): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000040)='-\x00', 0x14200, &(0x7f0000000080)={@align=0x4ea, {0x5, 0x9, 0x8, 0xb}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}, 0x1, &(0x7f00000001c0)=[{0x1, 0x100, &(0x7f0000000140)='nl80211\x00', &(0x7f0000000180)="80184becc9", 0x5, 0x2}]}) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x28}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x40000) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f00000005c0)={&(0x7f00000003c0)=0x3, 0xcd, &(0x7f0000000400)=[{}, {}], &(0x7f0000000580)}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xb}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x41}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1e0, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) write$bt_hci(r1, &(0x7f0000000c40)={0x1, @host_buffer_size={{0xc33, 0x7}, {0xc, 0x7, 0x3, 0xc000}}}, 0xb) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40850) (async) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000dc0)={@empty, @private=0xa010100, 0x1, "b37533e0961799b7ae886e3bf4c2357a365d32b77bf4147254223edea035bdc6", 0x5, 0x0, 0x7, 0x3ff}, 0x3c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000e00)={0x0, 0xffff}, 0x8) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r3, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20042880}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)=r1}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x16, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd578, 0x0, 0x0, 0x0, 0x80000001}, @ldst={0x2, 0x0, 0x2, 0x3, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000010c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001100)={0x5, 0x7, 0x8, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001140)=[0x1, r1, r1, r1, r1, r1], &(0x7f0000001180)=[{0x3, 0x2, 0xf, 0x8}, {0x3, 0x3, 0x1}, {0x0, 0x2, 0x9, 0x7}], 0x10, 0x4}, 0x94) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000001280)={0x9, 0x4, 0x1, 0x8}) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000012c0)={r7, r6}, 0xc) (async, rerun: 32) r8 = socket$inet_sctp(0x2, 0x0, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001300)={0x8, 0x202, 0x8, 0x9}, 0x10) (async) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x50, 0x0, 0xb, 0x201, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_NAME={0xc, 0x1, 'nl80211\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '-\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001480)={0x0, 0xb, "e9dd29fcbb45ccd4aacd2d"}, &(0x7f00000014c0)=0x13) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r1) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000001540)={0x0, r8}, 0x8) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4014) (async, rerun: 32) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000001700)={0x0, 0x4}, 0x8) 772.599614ms ago: executing program 0 (id=6598): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1ac, r3, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0xc9, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_a, @random="766f065014db", {0x2, 0x9}, @value=@ver_80211n={0x0, 0x8, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x100, @default, 0x908, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x6, [{0x24}, {0x2c}, {0x1}, {0x36}, {0x36}, {0x5, 0x1}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x5, 0x0, {0x10, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0xa56}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x1, 0xe, 0x20}}, [{0xdd, 0x5e, "d642cadd9adb998a5e5ddfe23908ac650b217bf1513336b4ec10b3e93341df1ff7db163ba069acaba912f7e19f466fa9e7bbcb8cd5741cd605e6f73a13be02252eed361970ab699a682f9f862796da1c113bc0b0c9ebb13e3e3231213ef5"}]}}, @NL80211_ATTR_FRAME={0xc0, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x6}}, 0x0, 0x0, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x6b, 0x1}, {0xb, 0x1}, {0x60, 0x1}, {0xc, 0x1}, {0x12, 0x1}]}, @void, [{0xdd, 0x86, "32205152923313cadfab3ba167cf8feafbc2f961e766188546602952677cb6ea9d911832c7ed65e911c4cc852c9ce211aebbbe76b6f6365c333fcfaed7f5df3af7c68449f29a6d06df6a07a99fb5af64a93a1fc3fa6b350614b616a1a229b6a0f63613b4658e0a02bcbd87cbbdeb683333068248a362afbaea03f87e555b35d79f4fd8ad96a6"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) (async) socket$netlink(0x10, 0x3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESOCT=r4], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 708.017841ms ago: executing program 2 (id=6599): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r4, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f}, 0x1c) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 543.562257ms ago: executing program 3 (id=6600): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = accept4$packet(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x14, 0x80000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xfffffda7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100100}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0xfffffffffffffffd, &(0x7f0000000b00)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x54}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) accept4$packet(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x14, 0x80000) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xfffffda7) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) socket$kcm(0x23, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100100}, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0xfffffffffffffffd, &(0x7f0000000b00)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x54}}, 0x24004000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 474.802166ms ago: executing program 1 (id=6601): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffdfffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f08008b00"/50, @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r8 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f000010b300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010c300)={0x0, [{}, {}, {}, {}, {}, {}, {r10}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, r9}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x2, "f35cdffa4c22ce"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f000010d300)={0x0, 0x0, "e9ba8af4144bc01a5c8a8d3df550ebbeda075f3dfd4372771b6b2f245adcfb23808c85e0172a45bfbbc8b46901fc238e0e845df64980bf0abb90b736cdaf63f78bd8fd33cdc4b56b4069c4d9c8ad5928ddfdef95b4e46c543fa74db711ea6f53b867be4baf54437ee53bba57a216b630bec9ac23f26cdfd3d6866db830bbaea88ada2ceab51b6bbbd0f506fac96f6a77a51db1ec362e58810c5a4d3c568b402c926e4fb8d3a4a31a170d68003653102a8eb8bab6a0c707c3d831e9dc574ab7ade190712369f3c3b485d1040307489ff2a7716e579ed98753e8b06307f9306f8aa635b6f1605ea018f4d82dd3aa4a4b05eb63376d8f3eb19f98f02484b169a265", "527c464d0aec9e6a226ef1c219e7168f981546b68d0d1175e2434ab50fe7786f358f1bda04d0b2d168ade85ab6509cd05cf14dbcebe0931acb2df990f95f5f2f22cbde828a21aa9f14909ed8ae9ad06662971b8278ebef2b5a0cb3c7be60732fd630f7cfc4a6caa49e464d7b3302d659da5b22ae54f791444ca120f53ba406ec1590295ada418606470fae4603857d9f9d953d70f72185967ac385f46e246f087c7e45b3139c5f3d2c36958410a432d802ad29a1616e5a6e99a84a98eff9f2874605e3899913d57ccfecf117102b69e333a34f6a73971723a362c61017c53429bd9078dcb10411320989b2c8f1e362ad2f4d84c622b3411871829ad042339e98efd3dbe3967d045dcf8831ebab15851b1a39448a5565804fc57b02d93dcd1ed866c0d0e4d9a57f74bc2aecda8c4c371363916e1526269eb6180b21471ff537ff58e0bb772d668c1b5ed1a608834a10eefb4eb7c866e88efcd9cad9ddc16824c57aae5835df03782d21abf771a1c6bfb12c19a36eeb30d5eeff7a4170fbc088b67104a0e16a1cacfb4648c5af03bf01fc36965034166bf8bcd3f773a6d1db83b16d614aa9b061e65f5f271caed26c1304bd61ea9af2baea174e16a6e83c78627d8856f1a8869d28b210af5e7b56b8a5167ab2e4b75f1f808dac8a9b9aa2ea5754984e0f0b3a689d12ec13cc3db535762160ebe8f9e90b524e8894c9de5a60331a81d4f19fdd2f1c414ec493c45ffaee5439b6db9fbcc767e0b41940dfcc3c86a9850efcf810276983560e1bf581ae3c7577404824cc8909876dec9a7780c2032874c131870aff54726163562633832ca58e96915a0f1e8a11ccc8730c8a5edf626b429bc2b40553b06acb8df2c4d7f8bcdac165e543f0785a716b6007591a35f54147f4a73e9d013e9ce7d5f8c09891e5a7bfc18bc1fe3777283fd9bf0f62ef24c71418da55c00a0d4d72cf2240a142e64888e3c394a08c416c13efdb0e469ce935b431ae40bc5f885d9c92d9ea12d13dd9aa05459f18e1755431a59a1f5da5bba6a30cbff8e626c89d5bd09e201f8af4e9d6bf062dc0ff18d572073b61243df39fa69ffc9548487e841d19da828d3836c7ab76520d389eb5ea995d82bd5181345a1c4074b2914336cda631510a361fb94cd5786f8f284a0de51c1e33bbb5d8f906ef1cf928debc13101fb48c5be26f3376f887543b4b17c5f5fc349959d21c1b796a7a28d8147b5a9afeb31f221079fa9bafcdf1273455192c6da5cabfe2b05e7daaa53e8bc36434855e46ed53912d9986b05d1bcddd541a4abd2ff5edf897e9c56336eff24e199549cf475d091f51ea727fdd7fc3e3bce4d7264f918b6466bd94a0bdc2c70dceaeec638590a1cef8c903d8231cdf16ab5e039f0c8e9973c94341798c6f624c1327be19e1a8592159db51f7d8222bf0a2f9bf1001a27aa4d0f756347f6f6713205f40f221daa87529fb54894091b6806097952b055552e50ac18db853fcf036eaaf654815b33b6368fbe63fd3a094331ff0c16841d33c628ab7085be0b3d82d3a3720b25ad36832d738e5eee806047b2c44a7dafd0fec8efdf00767986584578d668988c19393472655d2540937ef3ff53073dbdd805ba8b9ff0898a8dd1891b8ab2748632679fc58279fc5cf72c8944ad22120d5c7af57b9a15bb838671a2150b67ea1e36378199d268057be460d7d60e65dbcdcd2bbe982bd2d0e429184179426af641913698321417efa8500b340683f194d6adeaad7c33a11f78062bae1544745d897cd262a58710203054e6d99c33c6798d8f00b494621f069d22de236feef6b8f324144bd8a188039f71410f4548c722fce2f21455f5faf8638804e1509be332804f0682422e36b92fef315d1ab3ee00ae33510e01e0f9ff3ffcc86bafbbc4c920761f3c656738dc7620d74d84610aa28eebcf8a62676de84ea7e4f4cfab162c1b4809c24c5c49b7dbaa69d220c7700e70a7fe5157b817212c9bcc83376c2d7a42ce7b67b6206d481083805639f9dc8467b1fdc51f55e16bbbef85085a75bf1d6ac30aa1f8a309ae30d73b331e745b3b33a3c3594351691fb7f965a89d7fbe411dcfee235e31d6dfaff6ac6d930c094542fd9f619e29eec243910c41875ee9e603bbe70d8714aea6f124d3f0ffc9e0475cd85c5be141dd439f2f89d872f0c0baff5e20f5d33b8a1cde995119f1ad516ba20bda6ab7a1fb93dfcbf21dfa241f0f8bf70fe190e6337d3a31896f9740c5d3fb79e633167645df801603f28f96a58c1b23c566abc6f0678152abd28b4bbcd4d348205c3beaca80d37ca2194378603cb02973122a17a001e16a1feafe490dc68160665a7e6527dee7aaadc87d171c0159a46e24e1162c046b25df0e823372b1878684941336a61b535e066409abf50231ae351b389da4dfec2c2737cc94f35eee598bfa7109298334891ca419771cd7447cd845cea076a9b326ed64fb94bd6c29138a79c35ecb515d718fc7e855808f77aa8d54f408163bb9601a50eea960e7328eb162a7acc0322d72c6f8fc67a3fe7d9459f62e59474927f0075fd6e8cc9e881b1cb911a61c7e45f6eada5c6c93a2fce8941c8ecf9193e3eb0ff8a1fbc8f5bd76a47c253205ab7355df9eb41bae4f50cddc9bba36a6763466ff90264600230b1be859d8cacd9d8a5f860bb18204b008f784090dc3ee6a02148be7621aab5d1fb23dc91815100399f64b7076d17b8e1597f2b888b52e47be18f7c88c6b17ba34aab27005db055bf123818eba56fc933796b2fa0b5c131c3c3a9b8ac5044e73fdf128a782a675e377c110f6d2e2c10ea6f82bd856cab1053d9e5b3d6b89758d8f32ce200dd5c1a3357fba24d1291f002a947b309a2096dbd4ddd7c9b1c4e9f831757f9cbad573d21b3e7864d6adc6cbaa4d20aa15a15af10958b5e57d4792d7a240edad4787690f329da894df9529ea6e663e7aeaf885cc74f2548dd655a1d6a09c5a32366d81e524f02c87478bd1dca194743b80d3e8f6d05746df589452fb17ad29cded877a35a5be3f7280f700ff812c11bb9552e7ac26eb6987a912eda6cbe3623bbaf957ce35f422761b711a27541f93debf4b924a351355e2b14cb576f80bcb192ece84ae6db21b875f31f732ee0a116e37063286beacf61cda772bdfeb67f2fee4d5dce688de43ef0325410ead710352bf22b8675d97bc1f3fd0a9527f1d42aa4d7e99a8bfdb66d844878adf31ed67bf3629ea2cd9147e3c5853ea9686bf389e77303bfa39eb31d165b6d71b967680b83a5fa55ffe32663509c9fcb5253647a1a34f248f7a160ccf6c8a2ed7547a96bc4dce311c262ff2a4398cf152fde8dff1c9a659d34df4ca4cd366e529812de14e3a4ca94b554f511b30b863145b53071be851060679a75043470c92d08f71a3481734d0a225ad1e165b5d95891a9dd53361b1d13d9301b5b5e44cc5ea9f5fffe0fb4c8d4bb935ecc461d466c79e089bc910c4f7159014b209fe5f9c0644d497854fd544b9156d4241dd6f55025ec653ea390493bce644a8b79edf2734d76f60f0b2d33fdefb04c5a5f9ae8260b0eb3a2b67cf36425d990832e0ab6ebeea61c5db5f6bc647c1b7a3f3436c31cf79f45d7d8a4b75db405aa3388354f7223d49a943ea8a5c7824d57606e5b42ac51ccf2e035eb0432d211f394917dad893ad511e9e6c6444521dd5536848d207ae1a12aa94820f61769bd044d3dd488d2be779296a1260823eb115be8c01cd5f169ef0ca9c23ae1eb479cdb427b8f7741d517c0d1cbd33421f6f2f9ccd9ad9e445217d2eeadf7034033fde31edab8537f3ef4908c02be77e462ff78f9c1b86136676f982265e8d31b24be5cd344043b1186c02442c9cf9bbd77ce6f41aae515ab3b36e92851cba1aea7754dfd338de6ee62e7081f94d10a0ca985fcc51ca8c85e31839ab2bea1a9165c32d8ad12703d5e68054b9f9670a097b65b38bc98fa61266bab58af4a9d40a33f9dd3f03253aaf2fc99b629473bcd2347846677dbfbf34d29a20388e19b760d55668b4793c26c2c8461011dd36171790b4ed2e6929c12d47a0fffb5c0cf60d043d84ad97ffd3b1399b71c1e0be7c2c4a8b0a0cad27b7df03db200790aa5e5abc19f2e72432d8e8f59d2fa8f4fbc90e0cf6e002cdf1b5aca953a92db05be1b2cc256beef947b9a138cfc8296cb9108c5a3332726b7aacd835dccf4ad26685cabc4aea3462f2f0bfa4946847cc62f7c886f1acf10decb3580c7b632e2c7da300257ecd2a3b274131da2556b6a9b9ed5c4087857b2b20de57798403a3f3ab1e4e43cc5e15a09e90672543182a967877665aabbff1ecb59ddb63ef2c1ddabe5e2fa99027bd8a191bbc673b523acac9ee9d2f914c2f0c728a3cfdf62d759ba91779c879210e064cd6e40c420b20fb5159866bea2c1ebe27be9773a3803b89ac7c697539cd201f04987017b976cb4ab7d34ddebbe177f10421932b3df8ef5c3c34477c952e4290021eea0c4d8473f21af6d67f819ff9cce86dadf5b4bb3307a54ee63f2c20392a98ca5959fa62378a14a043d09178d427db5f57cb5b6a5cbb6c2a87183a88064fa3f7c8cfaf06396d32e8b48bc1f966363052174ea55ef46b7a71bc3244a5c4ba0560d0b988887fdb5fcfb27f550b9ab5051b86534744419619fdf09c1ec97316b068c246c29cd3dfeb29647e3b5bea2136b1f6ee1ed53e8923aa29b23068f4423066a637762348aac47a259c8094426beb63cf7fc5ddd74784d4d90474712f67ead1606b7e7816c2bc49d212184582d882c2ca0c45ed271b15f2cf598964fd35c1fda517c86d79a283b5f7cf28c586afc526ff3acd346b652ec20737bbfaf4ad2bb3515cc6908d53090e78cfc30cabf24f36e1743c86128da98bdc2cd8360935f3ab25e415c698791eccefab2c4a9962ebc6020a49f5ce448021a481654f10c3fb8c98e33d2d5b1b279865122247252e07830ba3efb696d3cb8d94de7eb92d991f1947b46e5e53f024888eb3224773b66fb21a2452a638dbcd129bd7db3404e26eb654461b60b0faa6a65823ce8124edc3889eaf161d6f3a55a5d5af687fceed21e6668b4656a1a180ec211b5f3176d0f58863219a945fc65dd4afa469aacf69ad1d4df4c67c779124e1156099efac5036425ae47f127bc1e10a9dae602de61168e9e81d1470839f828c4d6b198b51b2c39d618433e63837f0b35f97f6d65fafbb718e3a9cf7ff2553cbf1a883db07672768b1477a3c2c266a72c6e1f0c112e8d93343238f6d7173d73ff7b648e6f420f48b2ed964415034e5883219684c69adfb6bddcb7105408617ce005072dd3024f59eb7c6dc1c79875f7f14fa4064d7273ce19f592853a8b1da91fd266e78861606cd0f0c7fa166093f1ac7aae35b621c80c90c04968a205d7c10f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000010e300)={0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) r26 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x5, [@ptr={0x1, 0x0, 0x0, 0x2, 0x3}, @struct={0x10, 0x3, 0x0, 0x4, 0x0, 0x2, [{0x1, 0x1, 0xd}, {0x2, 0x3, 0x7}, {0xe, 0x1, 0x2}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x5, 0x7}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x39, 0x0, 0x17, 0x2}, @struct={0x8, 0x8, 0x0, 0x4, 0x1, 0x9, [{0xe, 0x5, 0x6}, {0xf, 0x0, 0x4}, {0x10, 0x838a, 0xbf0}, {0x7, 0x4, 0xa}, {0x0, 0x3, 0x10}, {0xe, 0x0, 0x9}, {0xb, 0x2, 0x35cf}, {0xb, 0x5, 0x8}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x75, 0x1}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f0000000540)=""/4096, 0x101, 0x1000, 0x1, 0xfffffeff, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x7, 0x7, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x5, 0xa, 0x9, 0xfffffffffffffff0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x28, &(0x7f0000000380)=""/40, 0x0, 0x58, '\x00', r25, @fallback=0x9, r26, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001580)={0x2, 0xe, 0x3, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000015c0)=[{0x0, 0x5, 0xb, 0xb}, {0x0, 0x1, 0x7, 0x7}, {0x0, 0x2, 0x7, 0x8}, {0x0, 0x3, 0x5, 0x5}, {0x4, 0x4, 0x2, 0xb}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x4, 0x5, 0x6}], 0x10, 0x7ff}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000010e500)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f000010e700)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {0x0, 0x0}], 0x3, "ae65f6fdd21fa0"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f000010f700)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000110700)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22, r27}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "e81e98e4abedff"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000111700)={0x8f2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {r29}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r28}], 0x5, "dbc312f1a0d3d7"}) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1021}, 0xc, &(0x7f00000002c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="440000000e0605000000000000000000010000030007000000090003f936504de9655800022073797a3000000000f667134ebc5054e9000000000007000000050001000735e4267086ad55dd251a8bf0fcd66d2b7bb988cbf47a59d75daa7dd3694b4b19fb66a3eedbe1160a7b9b648e3e62587cfd49c6972e2aac18a2fcc858f26acde100000000000010edf1dadf8400cefd9a0cfb5ced4d612b6184ec1ee68ed1c069d0aa6edca7fcdd0c2c560bc2bb04add567f3744a64efee095adbbf2ec70d01d10cd7f94588fd2b135a60f20d22622eed3c06613f"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80004) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x1, 'ip_vti0\x00', {}, 0x80}) 336.428835ms ago: executing program 3 (id=6602): r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001800010029bd7000fddbdf251d0100001e010600020103000771ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea00000800050001f7f9fb150002000400002008010000f57de0eb74757e1d03"], 0x154}}, 0x404c004) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r10, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000880}, 0x44004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r12, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$unix(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x120) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x32, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f631"}}) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 256.388542ms ago: executing program 2 (id=6603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x34}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7f5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x9047dcfda0c237ff}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1322}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11ef}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x103c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000840}, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x7, 0x8, 0xc}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x13, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x40, 0x6d}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8818}, 0x20008810) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) 253.005179ms ago: executing program 0 (id=6604): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000380)="bba72feab6cf30f3fa04", 0xa) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "6fa73b0c05552e75", "62d838a660e59a5ae998182c78347e45", "598406e3", "be43f81bb37f45ce"}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r9, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r6, 0x3) sendmsg$inet6(r5, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) 123.167533ms ago: executing program 1 (id=6605): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x81, @mcast1, 0x64}, 0x1c) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) (async) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) recvmmsg(r1, &(0x7f0000003a00)=[{{&(0x7f00000001c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000004c0)=""/161, 0xa1}], 0x3, &(0x7f00000006c0)=""/204, 0xcc}, 0x8000}, {{&(0x7f00000007c0)=@ax25={{0x3, @bcast}, [@rose, @remote, @remote, @bcast, @null, @default, @bcast, @null]}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000840)=""/196, 0xc4}, {&(0x7f0000000940)=""/131, 0x83}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/55, 0x37}], 0x4, &(0x7f0000001b40)=""/188, 0xbc}}, {{&(0x7f0000001c00)=@pppoe, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c80)=""/82, 0x52}], 0x1}, 0x8}, {{&(0x7f0000001d40)=@alg, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/19, 0x13}, {&(0x7f0000001e00)=""/89, 0x59}, {&(0x7f0000001e80)=""/41, 0x29}], 0x3}, 0x9}, {{&(0x7f0000001f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001f80)=""/123, 0x7b}, {&(0x7f0000002000)=""/126, 0x7e}, {&(0x7f0000002080)=""/193, 0xc1}, {&(0x7f0000002180)=""/38, 0x26}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/235, 0xeb}], 0x6, &(0x7f0000002380)=""/134, 0x86}, 0xe0a}, {{&(0x7f0000002440)=@tipc, 0x80, &(0x7f0000003640)=[{&(0x7f00000024c0)=""/142, 0x8e}, {&(0x7f0000002580)=""/133, 0x85}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x3}, 0x1}, {{&(0x7f0000003680)=@llc, 0x80, &(0x7f0000003900)=[{&(0x7f0000003700)=""/200, 0xc8}, {&(0x7f0000003800)}, {&(0x7f0000003840)}, {&(0x7f0000003880)=""/125, 0x7d}], 0x4, &(0x7f0000003940)=""/182, 0xb6}, 0x7}], 0x7, 0x10000, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newsa={0xf8, 0x10, 0x1, 0xbffffffd, 0x25dfdbfe, {{@in=@multicast2, @in6=@loopback, 0x4e21, 0x794, 0x4e23, 0x20, 0x2, 0x0, 0x80, 0x21}, {@in6=@remote, 0x4d4, 0x32}, @in=@multicast1, {0xffff, 0x9, 0x2, 0x10003, 0x8251e, 0x4000, 0x83}, {0xfffffffffffffffe, 0x7fff, 0x1f, 0x1fe}, {0x2, 0xfffffffa}, 0x78bd2b, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}]}, 0xf8}}, 0x20040810) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newsa={0xf8, 0x10, 0x1, 0xbffffffd, 0x25dfdbfe, {{@in=@multicast2, @in6=@loopback, 0x4e21, 0x794, 0x4e23, 0x20, 0x2, 0x0, 0x80, 0x21}, {@in6=@remote, 0x4d4, 0x32}, @in=@multicast1, {0xffff, 0x9, 0x2, 0x10003, 0x8251e, 0x4000, 0x83}, {0xfffffffffffffffe, 0x7fff, 0x1f, 0x1fe}, {0x2, 0xfffffffa}, 0x78bd2b, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}]}, 0xf8}}, 0x20040810) 0s ago: executing program 2 (id=6606): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) r5 = socket(0x2000000000000021, 0x2, 0x2) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x80001, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xa0028000}) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x8040}, 0x8006) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@gettaction={0x3c, 0x32, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'vlan0\x00', @multicast}) (async, rerun: 64) r7 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96d", 0xe}], 0x1}, 0x59) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r8, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') read(r9, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x5}, &(0x7f0000000500)=0x8) (async) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (rerun: 64) kernel console output (not intermixed with test programs): port 6081 - 0 [ 478.618288][ T205] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.631710][ T205] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.658825][ T205] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.668041][ T205] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.677660][ T205] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.688389][ T205] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.705520][ T148] bond12: (slave bridge0): failed to get link speed/duplex [ 478.714417][T27151] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5480'. [ 478.825448][ T148] bond12: (slave bridge0): failed to get link speed/duplex [ 478.939176][T27170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5483'. [ 479.125526][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 479.523495][T27193] netlink: 'syz.3.5488': attribute type 41 has an invalid length. [ 479.847461][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5495'. [ 480.031974][T27240] netlink: 'syz.3.5496': attribute type 1 has an invalid length. [ 480.215279][T27252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5499'. [ 480.268631][T27254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5499'. [ 480.277702][T27253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5501'. [ 480.277732][T27253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5501'. [ 480.339516][T27258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5502'. [ 480.450162][T27258] 8021q: adding VLAN 0 to HW filter on device bond10 [ 481.045548][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 483.561800][T27267] ip6gre1: entered promiscuous mode [ 483.576503][T27267] ip6gre1: entered allmulticast mode [ 483.645757][ T205] net_ratelimit: 11 callbacks suppressed [ 483.645775][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 483.692697][T27281] __nla_validate_parse: 3 callbacks suppressed [ 483.692717][T27281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5508'. [ 483.718736][T27285] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 483.728402][T27293] netlink: 'syz.3.5510': attribute type 1 has an invalid length. [ 483.766759][T27281] hsr_slave_0: left promiscuous mode [ 483.777089][T27281] hsr_slave_1: left promiscuous mode [ 483.801957][T27298] bond0: (slave ip6tnl0): refused to change device type [ 483.810029][T27296] SET target dimension over the limit! [ 483.855742][ T148] bond12: (slave bridge0): failed to get link speed/duplex [ 483.910621][T27306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5515'. [ 483.996321][ T148] bond12: (slave bridge0): failed to get link speed/duplex [ 484.014797][T27317] netlink: 'syz.0.5515': attribute type 1 has an invalid length. [ 484.033065][T27318] xt_hashlimit: size too large, truncated to 1048576 [ 484.043677][T27317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5515'. [ 484.054004][T27315] xfrm0 speed is unknown, defaulting to 1000 [ 484.150505][T27326] netlink: 'syz.4.5518': attribute type 1 has an invalid length. [ 484.168236][T27326] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5518'. [ 484.177581][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 484.208154][T27322] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5518'. [ 484.286267][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 484.475743][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 484.648621][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 484.693377][T27346] gretap3: entered promiscuous mode [ 484.775576][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 484.945492][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 485.099258][T27379] netlink: 'syz.4.5527': attribute type 1 has an invalid length. [ 485.191603][T27379] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 485.232740][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 485.398782][T27404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5534'. [ 485.667258][T27407] syzkaller0: entered promiscuous mode [ 485.683122][T27407] syzkaller0: entered allmulticast mode [ 485.748773][T27422] bond13: option lacp_active: invalid value (8) [ 485.767548][T27422] bond13 (unregistering): Released all slaves [ 485.830519][T27415] xfrm0 speed is unknown, defaulting to 1000 [ 485.909903][T27434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5540'. [ 485.958242][T27434] netlink: 261 bytes leftover after parsing attributes in process `syz.1.5540'. [ 486.025628][T27437] batadv0: entered promiscuous mode [ 486.303479][T27453] veth0_to_bond: entered allmulticast mode [ 486.445593][T27415] tipc: can't start tipc receive workqueue [ 486.521334][T27461] batadv_slave_1: entered promiscuous mode [ 486.528758][T27467] tipc: Enabled bearer , priority 25 [ 486.544946][T27460] batadv_slave_1: left promiscuous mode [ 486.707135][T27478] netlink: 'syz.0.5553': attribute type 322 has an invalid length. [ 486.837365][T27480] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.918629][T27494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5555'. [ 486.954214][T27494] ip6gre3: entered promiscuous mode [ 486.968938][T27494] ip6gre3: entered allmulticast mode [ 487.301799][T27511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5556'. [ 487.505134][T27478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.718857][T27535] netlink: 'syz.3.5562': attribute type 1 has an invalid length. [ 487.798405][T27538] Cannot find del_set index 3 as target [ 487.811149][T27535] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 487.845270][T27538] netlink: 'syz.4.5561': attribute type 61 has an invalid length. [ 487.903444][T27551] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 488.480208][T27581] netlink: 'syz.4.5572': attribute type 1 has an invalid length. [ 488.526164][T27581] bond8: entered promiscuous mode [ 488.531468][T27581] bond8: entered allmulticast mode [ 488.538960][T27581] 8021q: adding VLAN 0 to HW filter on device bond8 [ 488.560455][T27581] bridge40: entered promiscuous mode [ 488.567792][T27581] bridge40: entered allmulticast mode [ 488.580776][T27581] bond8: (slave bridge40): Enslaving as a backup interface with an up link [ 488.653100][T27581] bridge41: entered promiscuous mode [ 488.664189][T27581] bridge41: entered allmulticast mode [ 488.676050][T27581] bond8: (slave bridge41): Enslaving as a backup interface with a down link [ 488.735772][ T36] net_ratelimit: 21 callbacks suppressed [ 488.735791][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 488.749472][ T205] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 488.887329][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 488.929096][T27599] xt_cgroup: invalid path, errno=-2 [ 489.005465][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 489.115483][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 489.225782][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 489.335638][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 489.445502][T10485] bond12: (slave bridge0): failed to get link speed/duplex [ 489.565613][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 489.685858][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 490.764128][T27543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.943235][T27613] netlink: 'syz.1.5581': attribute type 1 has an invalid length. [ 490.968974][T27615] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5580'. [ 490.992186][T27613] 8021q: adding VLAN 0 to HW filter on device bond12 [ 491.019119][T27615] netlink: 'syz.3.5580': attribute type 1 has an invalid length. [ 491.040807][T27613] bond12: (slave geneve3): making interface the new active one [ 491.051187][T27613] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 491.062806][T27617] syzkaller0: entered promiscuous mode [ 491.084359][T27622] netlink: 'syz.0.5584': attribute type 1 has an invalid length. [ 491.091118][T27617] syzkaller0: entered allmulticast mode [ 491.099014][ T7651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.103964][T27617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5582'. [ 491.124068][T27622] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5584'. [ 491.133773][ T7651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.136883][T27622] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5584'. [ 491.148038][ T7651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.153546][T27622] netlink: 'syz.0.5584': attribute type 1 has an invalid length. [ 491.162806][T27613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5581'. [ 491.179309][T27624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5585'. [ 491.204079][T27625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.214935][T27625] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.250080][T27625] veth1_vlan: left promiscuous mode [ 491.257979][T27625] veth0_vlan: left promiscuous mode [ 491.265211][T27625] veth0_vlan: entered promiscuous mode [ 491.278231][T27625] veth1_vlan: entered promiscuous mode [ 491.290448][T27625] veth1_macvtap: left promiscuous mode [ 491.297368][T27625] veth0_macvtap: left promiscuous mode [ 491.303944][T27625] veth0_macvtap: entered promiscuous mode [ 491.311058][T27625] veth1_macvtap: entered promiscuous mode [ 491.319280][T27625] geneve0: entered promiscuous mode [ 491.326856][T27625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.335084][T27625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.343445][T27625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.351724][T27625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.362186][T27625] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 491.371314][T27625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.382216][T27625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.391593][T27625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.400936][T27625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.409772][T27625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.420483][T27625] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.428450][T27625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 491.452087][ T7651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.463873][ T7650] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 491.481927][ T7650] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 491.489754][ T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 491.498424][T27622] macsec0: entered allmulticast mode [ 491.539629][T27631] veth1_macvtap: entered allmulticast mode [ 491.546950][T27631] macsec0: left allmulticast mode [ 491.552500][T27631] veth1_macvtap: left allmulticast mode [ 491.561744][T27624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5585'. [ 491.649097][T16052] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 491.827990][T27647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5590'. [ 491.831302][T27645] netlink: 'syz.1.5589': attribute type 4 has an invalid length. [ 491.837865][T27647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5590'. [ 491.885890][T27645] netlink: 'syz.1.5589': attribute type 4 has an invalid length. [ 491.988752][T27657] syzkaller0: entered promiscuous mode [ 491.994668][T27657] syzkaller0: entered allmulticast mode [ 492.010159][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5593'. [ 492.043280][T10504] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 492.059046][T10496] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.068973][T10496] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.088590][T10496] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.116983][T10496] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.246813][ T6387] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 492.326794][ T6387] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 492.350680][T27688] mac80211_hwsim hwsim94 wlan1: entered promiscuous mode [ 492.358520][T27688] macsec2: entered promiscuous mode [ 492.365264][T27688] mac80211_hwsim hwsim94 wlan1: left promiscuous mode [ 492.648173][ T6387] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 492.754143][T27716] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 493.046234][ T7650] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 493.079094][ T7650] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 493.426679][T27759] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 493.550998][T27763] netlink: 'syz.0.5618': attribute type 1 has an invalid length. [ 493.558981][ T5632] block nbd10: Receive control failed (result -32) [ 493.565960][ T4938] block nbd10: Receive control failed (result -32) [ 493.572525][ T5619] block nbd10: Receive control failed (result -32) [ 493.581430][T27763] netlink: 'syz.0.5618': attribute type 1 has an invalid length. [ 493.661839][T27766] xfrm0 speed is unknown, defaulting to 1000 [ 493.786677][ T7650] net_ratelimit: 26 callbacks suppressed [ 493.786698][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 493.880568][T27779] netlink: 'syz.0.5624': attribute type 1 has an invalid length. [ 493.926220][T10504] wlan1: Trigger new scan to find an IBSS to join [ 493.957969][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 494.021350][T27779] 8021q: adding VLAN 0 to HW filter on device bond12 [ 494.034184][T27779] bond11: (slave bond12): making interface the new active one [ 494.043819][T27779] bond11: (slave bond12): Enslaving as an active interface with an up link [ 494.129652][T27792] bond11: (slave gretap2): Enslaving as a backup interface with an up link [ 494.231684][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 494.292812][T27779] 8021q: adding VLAN 0 to HW filter on device bond11 [ 494.427719][T27768] dvmrp0: entered allmulticast mode [ 494.459013][T27807] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 494.475672][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 494.554292][T27803] hmac(sha224): entered promiscuous mode [ 494.575060][T27821] netlink: 'syz.0.5632': attribute type 30 has an invalid length. [ 494.635827][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 494.754155][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 494.881130][T27825] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 494.915586][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 495.025517][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 495.135704][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 495.245552][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 497.206029][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 497.206050][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 497.221704][T27805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.236318][T27830] __nla_validate_parse: 13 callbacks suppressed [ 497.236348][T27830] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5634'. [ 497.297302][T27830] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 497.423711][T27850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5638'. [ 497.478845][T27850] netlink: 'syz.0.5638': attribute type 30 has an invalid length. [ 497.483194][T27857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5638'. [ 497.506759][T27857] netlink: 'syz.0.5638': attribute type 30 has an invalid length. [ 497.518028][T27854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.531995][T27854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 497.544739][T27860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5639'. [ 497.579208][T10496] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.595691][T10496] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.625827][T10496] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.664281][T10496] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.694255][T27854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.724209][T27854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 497.823579][T27854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.842970][T27854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 497.931272][T27854] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 497.946303][T27854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.967865][T27854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 498.100492][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 498.112087][ T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 498.126243][T10504] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 498.134866][T10504] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 498.157074][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 498.168316][ T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 498.183586][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 498.192790][ T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 498.429569][T27914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5652'. [ 498.542782][T27919] ip6tnl3: entered allmulticast mode [ 498.550637][ T205] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 498.577714][ T205] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 498.586119][ T5726] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 498.779848][T27936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5662'. [ 498.792917][T27936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5662'. [ 498.807461][T27936] netlink: 'syz.4.5662': attribute type 1 has an invalid length. [ 498.825834][ T36] net_ratelimit: 28 callbacks suppressed [ 498.825864][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 498.845663][T16049] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 498.947239][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 498.955042][T27944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5665'. [ 498.967143][ T36] wlan1: Trigger new scan to find an IBSS to join [ 498.987968][T27944] hsr_slave_1 (unregistering): left promiscuous mode [ 499.065463][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 499.175659][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 499.175771][T16049] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 499.295568][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 499.313214][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5667'. [ 499.328572][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5667'. [ 499.392047][T27952] IPVS: ip_vs_edit_dest(): server weight less than zero [ 499.409884][T27953] 8021q: adding VLAN 0 to HW filter on device bond13 [ 499.425462][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 499.523492][T27962] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 499.556719][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 499.686263][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 499.805446][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 500.786797][T28010] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 500.901106][T28015] block nbd2: NBD_DISCONNECT [ 500.906895][T28015] block nbd2: Send disconnect failed -32 [ 500.913187][T28015] block nbd2: Send disconnect failed -32 [ 500.927022][T28015] block nbd2: shutting down sockets [ 500.956808][ T7650] bridge_slave_1: left allmulticast mode [ 500.969059][ T7650] bridge_slave_1: left promiscuous mode [ 500.980815][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.040996][ T7650] dvmrp0: left allmulticast mode [ 501.057987][ T7650] dvmrp8: left allmulticast mode [ 501.278971][ T7650] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 501.287646][ T7650] ip6gre1 (unregistering): left promiscuous mode [ 501.337719][ T7650] erspan0 (unregistering): left promiscuous mode [ 501.353338][ T7650] gretap0 (unregistering): left promiscuous mode [ 501.423833][ T7650] team0: Port device bridge8 removed [ 501.433422][ T7650] team0: Port device bridge9 removed [ 501.448473][ T7650] bond1 (unregistering): (slave veth3): Releasing backup interface [ 501.459689][ T7650] bond1 (unregistering): Released all slaves [ 501.471354][ T7650] bond2 (unregistering): Released all slaves [ 501.483558][ T7650] bond3 (unregistering): Released all slaves [ 501.495977][ T7650] bond4 (unregistering): Released all slaves [ 501.507735][ T7650] bond5 (unregistering): Released all slaves [ 501.526035][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 501.539048][ T7650] bond0 (unregistering): Released all slaves [ 501.550796][ T7650] bond6 (unregistering): (slave bond7): Releasing backup interface [ 501.560445][ T7650] bond6 (unregistering): Released all slaves [ 501.572930][ T7650] bond7 (unregistering): Released all slaves [ 501.587959][ T7650] bond8 (unregistering): Released all slaves [ 501.599474][ T7650] bond9 (unregistering): Released all slaves [ 501.611991][ T7650] bond10 (unregistering): (slave veth9): Releasing backup interface [ 501.620721][ T7650] veth9: left promiscuous mode [ 501.630114][ T7650] bond10 (unregistering): Released all slaves [ 501.642737][ T7650] bond11 (unregistering): Released all slaves [ 501.654580][T28018] veth0: entered promiscuous mode [ 501.672475][T28033] lo: Caught tx_queue_len zero misconfig [ 501.705788][T28022] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.722819][T28022] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.759207][ T7650] tipc: Disabling bearer [ 501.775193][ T7650] tipc: Left network mode [ 501.852154][T28022] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.886334][T28048] rdma_rxe: rxe_newlink: failed to add lo [ 501.886858][T28022] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.928609][T10504] wlan1: Creating new IBSS network, BSSID 16:e6:e3:1d:a3:76 [ 501.985168][T28022] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.997747][T28022] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.081489][T28057] bond17: (slave bridge8): Enslaving as an active interface with an up link [ 502.130876][T28022] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.143933][T28022] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.192037][T28054] macvlan2: entered promiscuous mode [ 502.199189][T28054] macvlan2: entered allmulticast mode [ 502.206411][T28054] bond17: (slave macvlan2): Error -98 calling set_mac_address [ 502.347599][T10496] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.358205][T10496] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.387018][T10496] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.400203][T10496] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.428655][T10496] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.437683][T10496] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.447388][T28071] bond0: Caught tx_queue_len zero misconfig [ 502.472731][T10496] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.492280][T10496] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.599768][T28074] syzkaller0: entered promiscuous mode [ 502.619650][T28074] syzkaller0: entered allmulticast mode [ 502.895634][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 503.283631][T28116] sctp: [Deprecated]: syz.2.5712 (pid 28116) Use of int in max_burst socket option. [ 503.283631][T28116] Use struct sctp_assoc_value instead [ 503.388624][T28126] netlink: 'syz.1.5714': attribute type 41 has an invalid length. [ 503.422288][T28116] xfrm0 speed is unknown, defaulting to 1000 [ 503.478980][T28130] __nla_validate_parse: 13 callbacks suppressed [ 503.479010][T28130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5715'. [ 503.496278][T28130] netlink: 'syz.1.5715': attribute type 5 has an invalid length. [ 503.507676][T28130] netlink: 'syz.1.5715': attribute type 8 has an invalid length. [ 503.516249][T28130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5715'. [ 503.537853][T28130] geneve4: entered promiscuous mode [ 503.543977][T28130] geneve4: entered allmulticast mode [ 503.552047][ T7651] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 60731 - 0 [ 503.583343][ T7651] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 60731 - 0 [ 503.631401][ T7651] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 60731 - 0 [ 503.661419][ T7651] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 60731 - 0 [ 503.691910][T28135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5717'. [ 504.049582][ T7650] hsr_slave_0: left promiscuous mode [ 504.069045][ T7650] hsr_slave_1: left promiscuous mode [ 504.094424][ T7650] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 504.110903][ T7650] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 504.151429][ T7650] veth1_macvtap: left promiscuous mode [ 504.163266][ T7650] veth0_macvtap: left promiscuous mode [ 504.172779][ T7650] veth1_vlan: left promiscuous mode [ 504.184548][ T7650] veth0_vlan: left promiscuous mode [ 504.319147][ T7650] team0 (unregistering): Port device batadv4 removed [ 504.350851][ T7650] team0 (unregistering): Port device batadv3 removed [ 504.482969][ T7650] team0 (unregistering): Port device team_slave_1 removed [ 504.600951][T28159] net_ratelimit: 17 callbacks suppressed [ 504.600972][T28159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.672077][T10500] bond12: (slave bridge0): failed to get link speed/duplex [ 504.726168][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 504.797725][T28182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5724'. [ 504.911915][T28189] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5728'. [ 504.995579][T10500] bond12: (slave bridge0): failed to get link speed/duplex [ 505.090649][T28202] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 505.111021][T28202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5729'. [ 505.140385][T28202] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.5729'. [ 505.193023][T28202] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 505.218188][T10500] bond12: (slave bridge0): failed to get link speed/duplex [ 505.218840][T28206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5731'. [ 505.251549][T28206] ip6gre4: entered promiscuous mode [ 505.279522][T28209] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5732'. [ 505.280968][T28206] ip6gre4: entered allmulticast mode [ 505.304338][T28211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5734'. [ 505.318160][T28211] netlink: 'syz.1.5734': attribute type 19 has an invalid length. [ 505.332126][ T7650] IPVS: stop unused estimator thread 0... [ 505.346023][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 505.465621][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 505.576066][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 505.672558][T28234] xt_SECMARK: invalid mode: 4 [ 505.679382][T28234] xt_SECMARK: invalid mode: 4 [ 505.697834][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 505.802390][T28238] syzkaller0: entered promiscuous mode [ 505.807983][T28238] syzkaller0: entered allmulticast mode [ 505.885885][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 506.005934][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 506.091936][T28250] netlink: 'syz.4.5745': attribute type 30 has an invalid length. [ 506.109874][T28250] netlink: 'syz.4.5745': attribute type 30 has an invalid length. [ 506.110054][ T205] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.119033][T28251] netlink: 'syz.4.5745': attribute type 30 has an invalid length. [ 506.128016][ T205] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.183300][ T205] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.201093][ T205] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.251000][T28258] SET target dimension over the limit! [ 506.367248][T28266] netlink: 'syz.1.5750': attribute type 1 has an invalid length. [ 506.439096][T28266] bond15: (slave bridge39): Enslaving as a backup interface with an up link [ 506.624499][T28286] lo: Caught tx_queue_len zero misconfig [ 506.634719][T28286] netlink: 'syz.0.5756': attribute type 1 has an invalid length. [ 506.939836][T28297] netlink: 'syz.1.5759': attribute type 1 has an invalid length. [ 506.961725][T28297] bond16: entered promiscuous mode [ 506.967654][T28297] bond16: entered allmulticast mode [ 506.973283][T28297] 8021q: adding VLAN 0 to HW filter on device bond16 [ 506.989287][T28297] erspan2: entered allmulticast mode [ 507.041844][T28305] syz.1.5759 (28305) used obsolete PPPIOCDETACH ioctl [ 507.203814][T28319] C: renamed from veth1_to_team (while UP) [ 507.307393][T28323] bond18: entered promiscuous mode [ 507.317890][T28323] 8021q: adding VLAN 0 to HW filter on device bond18 [ 507.414229][T28329] bond19: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 507.450791][T28329] bond19 (unregistering): Released all slaves [ 507.690899][T28343] IPVS: Unknown mcast interface: bridge_slave_0 [ 507.901575][T28354] rdma_rxe: rxe_newlink: failed to add lo [ 508.481102][T28384] xfrm0 speed is unknown, defaulting to 1000 [ 508.952658][T28414] xt_ecn: cannot match TCP bits for non-tcp packets [ 509.242627][T28427] xfrm0 speed is unknown, defaulting to 1000 [ 509.272286][T28431] __nla_validate_parse: 14 callbacks suppressed [ 509.272304][T28431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5797'. [ 509.637509][ T7650] net_ratelimit: 28 callbacks suppressed [ 509.637539][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 509.785680][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 509.789296][T28464] validate_nla: 2 callbacks suppressed [ 509.789313][T28464] netlink: 'syz.4.5808': attribute type 33 has an invalid length. [ 509.869776][T28463] gre5: entered promiscuous mode [ 509.936087][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 510.056095][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 510.189375][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 510.238983][T28481] syzkaller1: entered promiscuous mode [ 510.261923][T28481] syzkaller1: entered allmulticast mode [ 510.315561][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 510.337834][T28481] veth0_to_bond: left allmulticast mode [ 510.354129][T28481] batadv_slave_1: left promiscuous mode [ 510.393718][T28481] ipvlan2: left allmulticast mode [ 510.411419][T28481] bond3: left allmulticast mode [ 510.432603][T28481] bond4: left promiscuous mode [ 510.446140][T28481] bond4: left allmulticast mode [ 510.453357][T28481] ip6gre1: left promiscuous mode [ 510.466326][T28481] ip6gre1: left allmulticast mode [ 510.482684][T28481] bridge0: left allmulticast mode [ 510.493305][T28481] bond6: left promiscuous mode [ 510.506248][T28481] bond12: left promiscuous mode [ 510.522467][T28481] gretap3: left promiscuous mode [ 510.568598][T28481] bond18: left promiscuous mode [ 510.588107][T28481] syzkaller1: left promiscuous mode [ 510.603538][T28481] syzkaller1: left allmulticast mode [ 510.613661][T28485] ip6gre0: Caught tx_queue_len zero misconfig [ 510.636318][T28485] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 510.662661][T28490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5817'. [ 510.677189][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 510.727612][T28496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5818'. [ 510.856645][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 510.986290][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 511.012140][T28521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5826'. [ 511.136524][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 511.377510][T28549] syzkaller0: entered promiscuous mode [ 511.387707][T28549] syzkaller0: entered allmulticast mode [ 511.630396][T28565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5837'. [ 511.662487][T28565] netlink: 'syz.0.5837': attribute type 30 has an invalid length. [ 511.686817][T28565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5837'. [ 511.711186][T28565] netlink: 'syz.0.5837': attribute type 30 has an invalid length. [ 511.775588][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 512.149542][T28598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5839'. [ 512.237166][T28600] netlink: 'syz.1.5840': attribute type 4 has an invalid length. [ 512.285840][T28600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5840'. [ 512.364837][T28610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5842'. [ 512.378538][T28609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5842'. [ 512.580527][T28627] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 513.845064][ T4938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 513.854768][ T4938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 513.864816][ T4938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 513.883477][ T4938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 513.893561][ T4938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.455982][T28747] block nbd1: NBD_DISCONNECT [ 514.467528][T28747] block nbd1: Send disconnect failed -32 [ 514.475560][T28747] block nbd1: Send disconnect failed -32 [ 514.646422][ T77] net_ratelimit: 29 callbacks suppressed [ 514.646440][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 514.699251][ T30] audit: type=1804 audit(1781923756.601:23): pid=28763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5874" name="/newroot/563/cgroup.controllers" dev="tmpfs" ino=2897 res=1 errno=0 [ 514.762760][T26580] udevd[26580]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 514.792196][T28723] xfrm0 speed is unknown, defaulting to 1000 [ 514.806657][ T30] audit: type=1800 audit(1781923756.601:24): pid=28763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5874" name="cgroup.controllers" dev="tmpfs" ino=2897 res=0 errno=0 [ 514.838162][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 514.996069][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 515.262488][T28806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.405751][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 515.545401][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 515.789626][T28723] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.806951][T28723] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.815350][T28723] bridge_slave_0: entered allmulticast mode [ 515.823800][T28723] bridge_slave_0: entered promiscuous mode [ 515.837363][T28723] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.845260][T28723] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.854413][T28723] bridge_slave_1: entered allmulticast mode [ 515.863150][T28723] bridge_slave_1: entered promiscuous mode [ 515.914902][T28723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.926046][ T4938] Bluetooth: hci1: command tx timeout [ 515.931144][T28723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.082668][T28723] team0: Port device team_slave_0 added [ 516.113544][T28723] team0: Port device team_slave_1 added [ 516.145653][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 516.162327][T28859] syzkaller1: entered promiscuous mode [ 516.169485][T28859] syzkaller1: entered allmulticast mode [ 516.181415][T28856] __nla_validate_parse: 12 callbacks suppressed [ 516.181434][T28856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5891'. [ 516.232403][T28723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.256943][T28723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.290447][T28723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.310451][T28723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.318470][T28723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.351731][T28723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.408480][T28723] hsr_slave_0: entered promiscuous mode [ 516.418625][T28723] hsr_slave_1: entered promiscuous mode [ 516.426834][T28863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.436679][T28723] debugfs: 'hsr0' already exists in 'hsr' [ 516.445100][T28723] Cannot create hsr debugfs directory [ 516.658042][T28723] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.672474][T28723] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.693950][T28891] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5900'. [ 516.700068][T28888] tipc: Enabling of bearer rejected, failed to enable media [ 516.756176][T28723] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.768510][T28723] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.806728][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 516.830760][T28723] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.843149][T28723] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.867112][T28902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5901'. [ 516.906770][T28723] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.922638][T28903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5901'. [ 516.947048][T28723] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.968941][T28909] netlink: 'syz.1.5902': attribute type 1 has an invalid length. [ 516.982250][T28909] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 516.984288][T28902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5901'. [ 517.003445][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 517.139519][T28723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 517.160311][T28723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.176327][T28723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 517.186402][T28723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.194647][T28723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 517.224203][T28723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.232516][T28723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 517.242221][T28723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.285783][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 517.385082][T28938] netlink: 'syz.1.5905': attribute type 29 has an invalid length. [ 517.402088][T28938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5905'. [ 517.491481][T28723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.545847][T28723] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.586965][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.594764][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.686962][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.694858][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.928435][T28967] xfrm0 speed is unknown, defaulting to 1000 [ 518.005776][ T4938] Bluetooth: hci1: command tx timeout [ 518.780590][T29023] netlink: 'syz.1.5918': attribute type 1 has an invalid length. [ 518.842063][T29023] bond17: entered promiscuous mode [ 518.847818][T29023] 8021q: adding VLAN 0 to HW filter on device bond17 [ 518.904482][T29023] bond17: (slave bridge41): making interface the new active one [ 518.915181][T29023] bridge41: entered promiscuous mode [ 518.923228][T29023] bond17: (slave bridge41): Enslaving as an active interface with an up link [ 519.008265][T28723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.112787][T29046] netlink: 'syz.0.5921': attribute type 11 has an invalid length. [ 519.116931][T28723] veth0_vlan: entered promiscuous mode [ 519.150761][T29046] netlink: 212028 bytes leftover after parsing attributes in process `syz.0.5921'. [ 519.173471][T28723] veth1_vlan: entered promiscuous mode [ 519.188534][T29046] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5921'. [ 519.223980][T28723] veth0_macvtap: entered promiscuous mode [ 519.276991][T29056] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 519.293732][T28723] veth1_macvtap: entered promiscuous mode [ 519.313831][T28723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.343674][T28723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.375893][T29060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5927'. [ 519.389457][T29061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5927'. [ 519.402036][ T7645] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.411527][ T7645] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.428952][ T7645] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.438959][ T7645] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.528879][T29066] syzkaller0: entered promiscuous mode [ 519.539004][T29066] syzkaller0: entered allmulticast mode [ 519.597710][T29066] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 519.619867][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.632012][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.711408][ T7645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.736916][ T205] net_ratelimit: 16 callbacks suppressed [ 519.736937][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 519.754283][ T7645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.867189][T29086] xfrm0 speed is unknown, defaulting to 1000 [ 519.917069][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 520.046214][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 520.086889][ T4938] Bluetooth: hci1: command tx timeout [ 520.098163][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.106237][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.114007][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.122740][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.131443][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.271933][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 520.282992][T29100] netlink: 'syz.3.5937': attribute type 6 has an invalid length. [ 520.322428][T29100] netlink: 'syz.3.5937': attribute type 5 has an invalid length. [ 520.527997][T29108] pimreg: entered allmulticast mode [ 520.556214][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 520.685424][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 520.801708][T29126] xt_TCPMSS: Only works on TCP SYN packets [ 520.915744][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 520.994428][T29126] netlink: 'syz.4.5941': attribute type 10 has an invalid length. [ 521.265630][T29137] __nla_validate_parse: 11 callbacks suppressed [ 521.265668][T29137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5941'. [ 521.311459][T29137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5941'. [ 521.321182][T29151] TCP: TCP_TX_DELAY enabled [ 521.327178][T29149] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5945'. [ 521.425846][T29149] 0·: renamed from hsr0 [ 521.498670][T29149] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 521.512066][T29149] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.530135][T29149] 0·: entered allmulticast mode [ 521.541851][T29149] hsr_slave_0: entered allmulticast mode [ 521.556050][T29149] hsr_slave_1: entered allmulticast mode [ 521.566962][T29149] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 521.607695][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 521.645532][T29095] xfrm0 speed is unknown, defaulting to 1000 [ 521.705067][T29156] bridge0: entered allmulticast mode [ 521.744490][T29154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5947'. [ 521.762035][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 521.866950][T29159] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 521.891638][T29159] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 521.922535][T29159] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 522.157821][T29177] tunl0: Caught tx_queue_len zero misconfig [ 522.166429][ T4938] Bluetooth: hci5: command tx timeout [ 522.166720][ T5619] Bluetooth: hci1: command tx timeout [ 522.233043][T29182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5955'. [ 522.375156][T29095] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.383190][T29095] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.391231][T29095] bridge_slave_0: entered allmulticast mode [ 522.398990][T29095] bridge_slave_0: entered promiscuous mode [ 522.482820][T29095] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.498676][T29095] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.518625][T29095] bridge_slave_1: entered allmulticast mode [ 522.537668][T29095] bridge_slave_1: entered promiscuous mode [ 522.647237][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 522.661975][T29095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.689065][T29095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.731470][T29095] team0: Port device team_slave_0 added [ 522.742873][T29095] team0: Port device team_slave_1 added [ 522.775828][T29095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.783442][T29095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.814101][T29095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.829950][T29095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.842191][T29095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.870144][T29095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.898816][T29095] hsr_slave_0: entered promiscuous mode [ 522.905314][T29095] hsr_slave_1: entered promiscuous mode [ 522.911673][T29095] debugfs: 'hsr0' already exists in 'hsr' [ 522.917415][T29095] Cannot create hsr debugfs directory [ 522.991306][T29095] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.001924][T29095] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.012664][T29095] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60731 - 0 [ 523.106636][T29095] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.117216][T29095] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.129567][T29095] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60731 - 0 [ 523.202142][T29095] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.216001][T29095] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.228204][T29095] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60731 - 0 [ 523.267082][T29233] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.5963'. [ 523.285701][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 523.318396][T29095] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.330605][T29095] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.342383][T29095] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60731 - 0 [ 524.245558][ T5619] Bluetooth: hci5: command tx timeout [ 524.835567][ T1359] net_ratelimit: 21 callbacks suppressed [ 524.835589][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 524.955472][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 525.065500][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 525.175473][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 525.295635][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 525.345133][T29191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.367495][T29095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 525.416699][T29095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 525.444041][T29095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 525.475020][T29095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 525.497438][T29095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 525.545246][T29095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 525.563565][T29095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 525.595140][T29095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.687315][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 525.750296][T29270] netlink: 'syz.0.5972': attribute type 1 has an invalid length. [ 525.790487][T29271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5972'. [ 525.815821][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 525.833337][T29095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.874119][T29095] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.902269][ T1359] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.909571][ T1359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.968224][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 525.985659][T29285] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5975'. [ 525.990063][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.002067][ T7651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.026643][T29246] syzkaller1: entered promiscuous mode [ 526.032467][T29246] syzkaller1: entered allmulticast mode [ 526.164122][T29294] netlink: 'syz.0.5978': attribute type 1 has an invalid length. [ 526.177644][ T7651] bond12: (slave bridge0): failed to get link speed/duplex [ 526.276115][T29294] bond13: entered promiscuous mode [ 526.282517][T29294] 8021q: adding VLAN 0 to HW filter on device bond13 [ 526.321534][T29303] ip6t_srh: unknown srh invflags 4000 [ 526.336632][ T5619] Bluetooth: hci5: command tx timeout [ 526.381201][T29296] 8021q: adding VLAN 0 to HW filter on device bond14 [ 526.403300][T29296] bond13: (slave bond14): making interface the new active one [ 526.423001][T29296] bond14: entered promiscuous mode [ 526.444105][T29296] bond13: (slave bond14): Enslaving as an active interface with an up link [ 526.468490][T29306] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5981'. [ 526.508707][T29306] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5981'. [ 526.516656][T29309] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5981'. [ 526.542836][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 526.862150][T29329] netlink: 'syz.2.5982': attribute type 49 has an invalid length. [ 526.877410][T29322] bond19: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 526.921933][T29322] bond19 (unregistering): Released all slaves [ 527.041587][T29329] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 527.060724][T29329] ip6gretap0: entered promiscuous mode [ 527.076959][T29329] ip6gretap0: entered allmulticast mode [ 527.134245][T29340] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 527.213562][T29346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5988'. [ 527.401660][T29095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.483264][T29095] veth0_vlan: entered promiscuous mode [ 527.531509][T29095] veth1_vlan: entered promiscuous mode [ 527.634648][T29095] veth0_macvtap: entered promiscuous mode [ 527.667050][T29095] veth1_macvtap: entered promiscuous mode [ 527.721486][T29095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.777572][T29095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.816809][T10485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.851649][T10485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.879475][T10485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.926369][T10485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.119442][T10485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.153851][T10485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.262078][ T7651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.281156][T29381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5996'. [ 528.311367][ T7651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.330187][T29380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5996'. [ 528.365273][T29387] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5998'. [ 528.405963][ T5619] Bluetooth: hci5: command tx timeout [ 528.415546][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 528.589247][T29400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6000'. [ 528.682893][T29400] hsr_slave_1 (unregistering): left promiscuous mode [ 528.941285][ T4938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.950251][ T4938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.959856][ T4938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.968061][ T4938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.983515][ T4938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.186324][T29419] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6002'. [ 529.608939][T10485] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.650105][T10485] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.987420][T29411] xfrm0 speed is unknown, defaulting to 1000 [ 530.030904][ T1359] net_ratelimit: 20 callbacks suppressed [ 530.030925][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 530.079807][T10485] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.100788][T10485] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.189285][T10485] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.230452][T10485] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.306171][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 530.338234][T10485] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.371434][T10485] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.437978][T29465] bridge_slave_1: left allmulticast mode [ 530.469229][T29465] bridge_slave_1: left promiscuous mode [ 530.488503][T29465] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.507503][T29465] bridge_slave_0: left allmulticast mode [ 530.521588][T29465] bridge_slave_0: left promiscuous mode [ 530.528504][T29465] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.555376][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 530.591181][T29447] syzkaller1: entered promiscuous mode [ 530.614471][T29447] syzkaller1: entered allmulticast mode [ 530.817266][T10485] pimreg: left allmulticast mode [ 531.045848][ T4938] Bluetooth: hci4: command tx timeout [ 531.238487][T10485] bond8 (unregistering): (slave vti1): Releasing backup interface [ 531.246992][T10485] vti1 (unregistering): left promiscuous mode [ 531.264209][T10485] gretap0 (unregistering): left promiscuous mode [ 531.304904][T10485] bond11 (unregistering): (slave gretap2): Releasing backup interface [ 531.504905][T29509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6014'. [ 531.535053][T10485] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.549988][T10485] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.563423][T10485] .` (unregistering): Released all slaves [ 531.575222][T10485] bond1 (unregistering): Released all slaves [ 531.593752][T10485] bond2 (unregistering): Released all slaves [ 531.615141][T10485] bond3 (unregistering): Released all slaves [ 531.641456][T10485] bond0 (unregistering): Released all slaves [ 531.658139][T10485] bond4 (unregistering): Released all slaves [ 531.683268][T10485] bond5 (unregistering): (slave veth5): Releasing active interface [ 531.700704][T10485] bond5 (unregistering): Released all slaves [ 531.729345][T10485] bond6 (unregistering): (slave veth9): Releasing active interface [ 531.741860][T10485] bond6 (unregistering): Released all slaves [ 531.760197][T10485] bond7 (unregistering): Released all slaves [ 531.777697][T10485] bond8 (unregistering): Released all slaves [ 531.806665][T10485] bond9 (unregistering): Released all slaves [ 531.822426][T10485] bond10 (unregistering): Released all slaves [ 531.840197][T10485] bond11 (unregistering): (slave bond12): Releasing backup interface [ 531.862188][T10485] bond11 (unregistering): Released all slaves [ 531.879151][T10485] bond12 (unregistering): Released all slaves [ 531.895178][T10485] bond13 (unregistering): (slave bond14): Releasing backup interface [ 531.904558][T10485] bond14 (unregistering): left promiscuous mode [ 531.943263][T10485] bond13 (unregistering): Released all slaves [ 531.961253][T10485] bond14 (unregistering): Released all slaves [ 532.054489][T29507] 8021q: VLANs not supported on ip6_vti0 [ 532.066453][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 532.207708][T10485] tipc: Left network mode [ 532.218477][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 532.445657][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 532.556887][T29545] FAULT_INJECTION: forcing a failure. [ 532.556887][T29545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.617265][T29545] CPU: 1 UID: 0 PID: 29545 Comm: syz.4.6022 Not tainted syzkaller #0 PREEMPT(full) [ 532.617298][T29545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.617309][T29545] Call Trace: [ 532.617316][T29545] [ 532.617324][T29545] dump_stack_lvl+0xe8/0x150 [ 532.617348][T29545] should_fail_ex+0x40c/0x560 [ 532.617370][T29545] _copy_from_user+0x2d/0xb0 [ 532.617391][T29545] ___sys_sendmsg+0x1c6/0x360 [ 532.617538][T29545] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.617571][T29545] ? __fget_files+0x2a/0x420 [ 532.617587][T29545] ? __fget_files+0x3a2/0x420 [ 532.617606][T29545] __x64_sys_sendmsg+0x1b1/0x290 [ 532.617627][T29545] ? do_raw_spin_unlock+0xf5/0x210 [ 532.617647][T29545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.617672][T29545] ? handle_softirqs+0x70f/0x840 [ 532.617693][T29545] ? rcu_is_watching+0x15/0xb0 [ 532.617710][T29545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.617727][T29545] do_syscall_64+0x174/0x580 [ 532.617750][T29545] ? clear_bhb_loop+0x40/0x90 [ 532.617768][T29545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.617784][T29545] RIP: 0033:0x7f707299ce59 [ 532.617799][T29545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.617813][T29545] RSP: 002b:00007f707383e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.617830][T29545] RAX: ffffffffffffffda RBX: 00007f7072c15fa0 RCX: 00007f707299ce59 [ 532.617840][T29545] RDX: 0000000000040040 RSI: 0000200000000200 RDI: 0000000000000003 [ 532.617850][T29545] RBP: 00007f707383e090 R08: 0000000000000000 R09: 0000000000000000 [ 532.617860][T29545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.617870][T29545] R13: 00007f7072c16038 R14: 00007f7072c15fa0 R15: 00007ffde987f448 [ 532.617889][T29545] [ 532.735993][T29540] netlink: 'syz.2.6020': attribute type 10 has an invalid length. [ 532.816221][ T30] audit: type=1107 audit(1781923774.671:25): pid=29554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='D%,À–ƒá,ñßr½M!' [ 532.856414][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 532.863932][T29542] netlink: 'syz.2.6020': attribute type 1 has an invalid length. [ 532.908820][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 533.012818][T29540] netlink: 'syz.2.6020': attribute type 10 has an invalid length. [ 533.034261][T29540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6020'. [ 533.049672][T29540] dummy0: entered promiscuous mode [ 533.068970][T29540] netlink: 'syz.2.6020': attribute type 3 has an invalid length. [ 533.100464][T29567] bond10: (slave tunl0): Device is not bonding slave [ 533.107696][T29567] bond10: option active_slave: invalid value (tunl0) [ 533.118718][T29567] bond10 (unregistering): Released all slaves [ 533.125915][ T4938] Bluetooth: hci4: command tx timeout [ 533.180981][T29568] batman_adv: batadv0: Adding interface: ipvlan3 [ 533.187859][T29568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.200077][T29568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.210717][T29568] batman_adv: batadv0: Interface activated: ipvlan3 [ 533.302620][T29564] syzkaller0: entered promiscuous mode [ 533.328536][T29564] syzkaller0: entered allmulticast mode [ 533.715920][T29411] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.746004][T29411] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.777757][T29411] bridge_slave_0: entered allmulticast mode [ 533.802428][T29411] bridge_slave_0: entered promiscuous mode [ 533.911232][T29616] hsr0: entered promiscuous mode [ 533.956842][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 534.005840][T29411] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.016728][T29411] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.033087][T29411] bridge_slave_1: entered allmulticast mode [ 534.060869][T29411] bridge_slave_1: entered promiscuous mode [ 534.073115][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6033'. [ 534.104335][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6033'. [ 534.138778][T29614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6033'. [ 534.146176][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 534.207429][T29621] hsr0: left promiscuous mode [ 534.254092][T29614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6033'. [ 534.280817][T29614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6033'. [ 534.322702][T29640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6036'. [ 534.351520][T29632] syzkaller0: entered promiscuous mode [ 534.357314][T29632] syzkaller0: entered allmulticast mode [ 534.377535][T29411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.388107][T29640] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6036'. [ 534.432024][T29411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.473715][T29411] team0: Port device team_slave_0 added [ 534.496523][T29411] team0: Port device team_slave_1 added [ 534.521476][T29411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.529596][T29411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.559645][T29411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.581400][T29411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.590080][T29411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.619465][T29411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.627844][T29656] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6038'. [ 534.781130][T29664] team1: entered promiscuous mode [ 534.786478][T29664] team1: entered allmulticast mode [ 534.791986][T29664] 8021q: adding VLAN 0 to HW filter on device team1 [ 534.874003][T29411] hsr_slave_0: entered promiscuous mode [ 534.890389][T29411] hsr_slave_1: entered promiscuous mode [ 534.910789][T29411] debugfs: 'hsr0' already exists in 'hsr' [ 534.930058][T29411] Cannot create hsr debugfs directory [ 534.952196][T29664] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 534.981930][T29664] team2: entered promiscuous mode [ 534.987324][T29664] team2: entered allmulticast mode [ 534.992918][T29664] 8021q: adding VLAN 0 to HW filter on device team2 [ 535.022328][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 535.134431][T10485] hsr_slave_0: left promiscuous mode [ 535.140615][T10485] hsr_slave_1: left promiscuous mode [ 535.161405][T10485] veth1_macvtap: left promiscuous mode [ 535.167535][T10485] veth0_macvtap: left promiscuous mode [ 535.205533][ T4938] Bluetooth: hci4: command tx timeout [ 535.435863][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 535.565687][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 535.595590][T10485] IPVS: stop unused estimator thread 0... [ 535.675905][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 535.785725][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 535.895667][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 536.005558][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 536.115771][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 536.225452][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 536.335608][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 536.445703][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 537.261420][T29640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 537.286008][ T4938] Bluetooth: hci4: command tx timeout [ 537.301472][T29411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 537.328781][T29411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.368130][T29411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 537.399349][T29411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.452413][T29411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 537.473259][T29411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.520835][T29411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 537.551214][T29411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 537.573866][T29687] __nla_validate_parse: 5 callbacks suppressed [ 537.573883][T29687] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6045'. [ 537.642397][T29705] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6048'. [ 537.851144][T29411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.909834][T29411] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.952192][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.959795][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.023337][ T1359] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.030549][ T1359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.254275][T29742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6055'. [ 538.338254][T29749] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6056'. [ 538.682550][T29771] macsec0: entered promiscuous mode [ 538.703467][T29771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6061'. [ 538.720471][T29771] veth1_macvtap: left promiscuous mode [ 538.827357][T29771] macsec0 (unregistering): left promiscuous mode [ 538.944617][T29411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.081512][T29411] veth0_vlan: entered promiscuous mode [ 539.121503][T29411] veth1_vlan: entered promiscuous mode [ 539.237593][T29411] veth0_macvtap: entered promiscuous mode [ 539.289409][T29411] veth1_macvtap: entered promiscuous mode [ 539.342713][T29411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.385624][T29411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.426372][ T7651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.456035][ T7651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.485076][ T7651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.516869][ T7651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.659666][T10500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.687542][T10500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.751329][T10500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.764304][T10500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.188694][ T6387] IPVS: starting estimator thread 0... [ 540.295785][T29830] IPVS: using max 58 ests per chain, 139200 per kthread [ 540.466983][T29851] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6076'. [ 540.480078][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.523571][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.540384][ T7645] net_ratelimit: 24 callbacks suppressed [ 540.540406][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 540.555871][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 540.569195][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 540.579057][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 540.788675][T29864] netlink: 'syz.1.6077': attribute type 13 has an invalid length. [ 540.827201][T29864] netlink: 'syz.1.6077': attribute type 17 has an invalid length. [ 541.048986][T29880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6077'. [ 541.059923][T29860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.083104][T29860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.304245][T29864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.313418][T29864] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.324956][T29864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.409958][T29864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.422992][T29864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.449326][T29864] veth1_vlan: left promiscuous mode [ 541.456607][T29864] veth0_vlan: left promiscuous mode [ 541.463658][T29864] veth0_vlan: entered promiscuous mode [ 541.475811][T29864] veth1_vlan: entered promiscuous mode [ 541.487097][T29864] veth1_macvtap: left promiscuous mode [ 541.493902][T29864] veth0_macvtap: left promiscuous mode [ 541.501588][T29864] veth0_macvtap: entered promiscuous mode [ 541.519323][T29864] veth1_macvtap: entered promiscuous mode [ 541.532126][T29864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.544559][T29864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.558859][T29864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.571894][T29864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.591189][T17949] bond5: (slave syz_tun): Removing an active aggregator [ 541.598993][T17949] bond5: (slave syz_tun): Releasing backup interface [ 541.630435][T29878] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.637917][T29878] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.705270][T29878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.719234][T29878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.877342][T10485] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.898084][T10485] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.918660][T29899] tipc: Enabling of bearer rejected, failed to enable media [ 541.948221][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 541.963415][T29908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6082'. [ 542.013392][T10485] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.046856][T10485] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.150234][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 542.164319][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6085'. [ 542.188902][T29926] Cannot find del_set index 1 as target [ 542.202340][T29924] ip6tnl2: entered allmulticast mode [ 542.296654][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 542.426708][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 542.485555][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 542.547569][T29853] xfrm0 speed is unknown, defaulting to 1000 [ 542.567867][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 542.656742][ T4938] Bluetooth: hci3: command tx timeout [ 542.657325][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6093'. [ 542.705865][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 542.808690][T29959] netlink: 'syz.3.6095': attribute type 2 has an invalid length. [ 542.837605][T29959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6095'. [ 542.845665][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 543.090685][T29971] tipc: Enabling of bearer rejected, failed to enable media [ 543.126740][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 543.373214][T29983] tipc: Enabled bearer , priority 0 [ 543.406258][T29985] syzkaller0: entered promiscuous mode [ 543.418919][T29985] syzkaller0: entered allmulticast mode [ 543.432883][T29853] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.450144][T29853] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.451593][T29999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6100'. [ 543.466973][T29853] bridge_slave_0: entered allmulticast mode [ 543.468930][T29853] bridge_slave_0: entered promiscuous mode [ 543.494192][T29983] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 543.525691][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 543.539952][T29985] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 543.559932][T29853] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.573395][T29853] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.581096][T30003] netlink: 'syz.0.6100': attribute type 4 has an invalid length. [ 543.581724][T29853] bridge_slave_1: entered allmulticast mode [ 543.601435][T29853] bridge_slave_1: entered promiscuous mode [ 543.610684][T29985] tipc: Resetting bearer [ 543.621131][T29985] tipc: Disabling bearer [ 543.708161][T30010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6102'. [ 543.753377][T29853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.772674][T29999] netlink: 'syz.0.6100': attribute type 10 has an invalid length. [ 543.781375][T30007] syzkaller0: entered promiscuous mode [ 543.789804][T30007] syzkaller0: entered allmulticast mode [ 543.805712][T29999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6100'. [ 543.826915][T29853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.880533][T29999] dummy0: entered promiscuous mode [ 543.994620][T29853] team0: Port device team_slave_0 added [ 544.020520][T29853] team0: Port device team_slave_1 added [ 544.103631][T30022] syzkaller0: entered promiscuous mode [ 544.110729][T30040] netlink: 'syz.1.6105': attribute type 1 has an invalid length. [ 544.121824][T30022] syzkaller0: entered allmulticast mode [ 544.143871][ T7649] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.176111][ T7649] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.202293][T30029] veth0_macvtap: Caught tx_queue_len zero misconfig [ 544.216870][T29853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.237649][T29853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.317289][T29853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.458018][ T7649] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.492307][ T7649] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.555021][T29853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.589246][T29853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.649868][T29853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.726236][ T4938] Bluetooth: hci3: command tx timeout [ 544.838897][T30070] bond1: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 544.891978][T30070] bond1: entered promiscuous mode [ 544.963939][T30083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6116'. [ 545.068746][T29853] hsr_slave_0: entered promiscuous mode [ 545.104431][T29853] hsr_slave_1: entered promiscuous mode [ 545.122337][T29853] debugfs: 'hsr0' already exists in 'hsr' [ 545.140872][T29853] Cannot create hsr debugfs directory [ 545.210290][T30091] netlink: 'syz.0.6118': attribute type 1 has an invalid length. [ 545.625623][ T7645] net_ratelimit: 3 callbacks suppressed [ 545.625657][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 545.684938][T30083] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6116'. [ 545.713526][T29853] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.750133][T29853] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 545.796765][T29853] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.099668][T29853] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.134771][T29853] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 546.188534][T29853] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.246884][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 546.339017][T29853] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.369624][T29853] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 546.401002][T29853] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.451101][T30138] syzkaller0: entered promiscuous mode [ 546.476291][T30138] syzkaller0: entered allmulticast mode [ 546.547082][T29853] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.575038][T29853] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 546.602060][T29853] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.688338][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 546.786571][T30151] netlink: 177044 bytes leftover after parsing attributes in process `syz.0.6131'. [ 546.805487][ T4938] Bluetooth: hci3: command tx timeout [ 546.845958][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 546.933888][T30159] netlink: 'syz.3.6133': attribute type 5 has an invalid length. [ 546.980096][T29853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 547.030983][T29853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.065022][T29853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 547.102484][T29853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.167656][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 547.207811][T29853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 547.254198][T29853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.292875][T29853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 547.331105][T29853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.342551][T30172] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6136'. [ 547.377614][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 547.576224][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 547.671453][T30196] netlink: 'syz.3.6140': attribute type 1 has an invalid length. [ 547.726553][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 547.769124][T30201] netlink: 'syz.3.6140': attribute type 1 has an invalid length. [ 547.898871][T30203] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 547.935725][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 547.962564][ T6387] team_slave_0: entered promiscuous mode [ 547.969111][ T6387] team_slave_1: entered promiscuous mode [ 548.024963][T30209] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6142'. [ 548.028184][T29853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.070223][T30203] netlink: 'syz.1.6141': attribute type 1 has an invalid length. [ 548.111594][T30203] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6141'. [ 548.145836][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 548.196809][T30173] Cannot find add_set index 0 as target [ 548.291709][T30220] netlink: 'syz.1.6141': attribute type 10 has an invalid length. [ 548.339970][T30220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.417790][T30203] netlink: 'syz.1.6141': attribute type 10 has an invalid length. [ 548.423094][T30220] team0: Port device netdevsim1 added [ 548.486464][T30220] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 548.519746][T29853] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.552668][T30203] team0: Port device netdevsim1 removed [ 548.562573][T30203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.579671][T30203] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 548.590976][T30203] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 548.599426][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6147'. [ 548.692503][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.700194][ T7650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.847095][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.854684][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.886222][ T4938] Bluetooth: hci3: command tx timeout [ 548.984210][T30245] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6149'. [ 549.272210][T30258] netlink: 'syz.0.6151': attribute type 1 has an invalid length. [ 549.359649][T30258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.490618][T30266] bond2: (slave gretap1): making interface the new active one [ 549.528343][T30266] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 549.844792][T30280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6155'. [ 550.037643][T30280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6155'. [ 550.117126][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 550.191192][T30300] syzkaller1: entered promiscuous mode [ 550.208027][T30300] syzkaller1: entered allmulticast mode [ 550.387310][T30312] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6162'. [ 550.736727][ T205] net_ratelimit: 15 callbacks suppressed [ 550.736760][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 550.836892][T29853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.926621][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 551.056904][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 551.368840][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 551.577121][T10485] bond12: (slave bridge0): failed to get link speed/duplex [ 551.754506][T30327] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 551.855491][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 551.999899][T29853] veth0_vlan: entered promiscuous mode [ 552.004723][T30370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6173'. [ 552.059051][T29853] veth1_vlan: entered promiscuous mode [ 552.078843][T30371] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 552.094151][T10485] bond12: (slave bridge0): failed to get link speed/duplex [ 552.187943][T29853] veth0_macvtap: entered promiscuous mode [ 552.220384][T29853] veth1_macvtap: entered promiscuous mode [ 552.297959][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 552.400008][T29853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.447475][T29853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.466063][ T7650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.525647][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 552.568576][ T7650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.595006][ T7650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.637602][T30393] geneve1: entered promiscuous mode [ 552.654612][ T7650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.726103][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 552.839557][T30409] xt_hashlimit: size too large, truncated to 1048576 [ 552.920541][T30410] batman_adv: batadv0: Adding interface: dummy0 [ 552.941880][T30410] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.031445][T30410] batman_adv: batadv0: Interface activated: dummy0 [ 553.155120][ T7649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.198074][ T7649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.275137][ T7645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.309336][ T7645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.471103][T30433] tipc: Started in network mode [ 553.508455][T30433] tipc: Node identity f6db05619cec, cluster identity 4711 [ 553.544079][T30433] tipc: Enabled bearer , priority 0 [ 553.614506][T30440] syzkaller0: entered promiscuous mode [ 553.647501][T30440] syzkaller0: entered allmulticast mode [ 553.784007][T30440] tipc: Resetting bearer [ 553.885030][T30440] tipc: Disabling bearer [ 554.232923][T30468] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6193'. [ 554.298692][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.309199][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.318405][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.332703][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.342853][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.558853][T30486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6195'. [ 554.808872][T30494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'. [ 554.940406][T30505] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6199'. [ 555.053812][T30509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6200'. [ 555.167782][T30509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6200'. [ 555.286732][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 555.387290][T30520] xfrm0 speed is unknown, defaulting to 1000 [ 555.750482][T30540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6206'. [ 555.775431][ T7649] net_ratelimit: 20 callbacks suppressed [ 555.775472][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 555.775938][T30540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6206'. [ 555.918247][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 556.001374][T30471] xfrm0 speed is unknown, defaulting to 1000 [ 556.156921][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 556.366043][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 556.405729][ T5619] Bluetooth: hci2: command tx timeout [ 556.428590][T30566] netlink: 'syz.1.6212': attribute type 12 has an invalid length. [ 556.505745][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 556.612538][T30571] openvswitch: netlink: Flow actions attr not present in new flow. [ 556.744364][T30576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6214'. [ 556.906785][T10485] bond12: (slave bridge0): failed to get link speed/duplex [ 557.113513][T30587] syzkaller0: entered promiscuous mode [ 557.120099][T30587] syzkaller0: entered allmulticast mode [ 557.167792][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 557.316930][ T205] bond12: (slave bridge0): failed to get link speed/duplex [ 557.366881][T30601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6218'. [ 557.434970][T30601] ip6gre1: entered promiscuous mode [ 557.471760][T30601] ip6gre1: entered allmulticast mode [ 557.656957][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 557.797496][T30471] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.806793][T30471] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.813229][T30611] netlink: 'syz.1.6219': attribute type 21 has an invalid length. [ 557.814653][T30471] bridge_slave_0: entered allmulticast mode [ 557.831017][T30471] bridge_slave_0: entered promiscuous mode [ 557.840819][T30471] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.848065][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 557.859222][T30471] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.868075][T30471] bridge_slave_1: entered allmulticast mode [ 557.876694][T30471] bridge_slave_1: entered promiscuous mode [ 557.925255][T30471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.953938][T30471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.131443][T30471] team0: Port device team_slave_0 added [ 558.184953][T30471] team0: Port device team_slave_1 added [ 558.268128][T30471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.275877][T30471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.315734][T30471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.341848][T30471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.348921][T30471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.395617][T30471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.540541][T30471] hsr_slave_0: entered promiscuous mode [ 558.547230][T30471] hsr_slave_1: entered promiscuous mode [ 558.547351][ T5619] Bluetooth: hci2: command 0x041b tx timeout [ 558.553575][T30471] debugfs: 'hsr0' already exists in 'hsr' [ 558.565184][T30471] Cannot create hsr debugfs directory [ 558.837615][T30652] tipc: Started in network mode [ 558.845535][T30652] tipc: Node identity dec72c1f3da4, cluster identity 4711 [ 558.857375][T30652] tipc: Enabled bearer , priority 0 [ 558.893481][T30652] syzkaller0: entered promiscuous mode [ 558.915431][T30652] syzkaller0: entered allmulticast mode [ 558.949192][T30652] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 559.342705][T30651] tipc: Resetting bearer [ 559.382170][T30651] tipc: Disabling bearer [ 559.574201][ T7650] tipc: Subscription rejected, illegal request [ 559.575919][T30686] netlink: 'syz.3.6235': attribute type 7 has an invalid length. [ 559.591692][T30471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 559.607960][T30686] __nla_validate_parse: 17 callbacks suppressed [ 559.607988][T30686] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6235'. [ 559.629332][T30471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.644344][T30471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 559.670556][T30471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.702822][T30471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 559.730564][T30471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.750155][T30694] xfrm0 speed is unknown, defaulting to 1000 [ 559.767064][T30471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 559.786430][T30471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.421500][T30471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.519618][T30471] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.567523][ T4938] Bluetooth: hci2: command 0x041b tx timeout [ 560.586595][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.594659][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.639673][T10485] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.647527][T10485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.879703][T30739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6249'. [ 560.915934][ T7645] net_ratelimit: 11 callbacks suppressed [ 560.915966][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 561.075890][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 561.088476][T30749] x_tables: ip_tables: owner.1 match: invalid size 24 (kernel) != (user) 120 [ 561.193471][T30754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6251'. [ 561.207527][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 561.323300][T30759] xt_hashlimit: size too large, truncated to 1048576 [ 561.346497][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 561.404634][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6253'. [ 561.466015][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 561.596397][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 561.631131][T30767] netlink: 'syz.0.6254': attribute type 1 has an invalid length. [ 561.654611][T30767] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6254'. [ 561.683935][T30767] netlink: 'syz.0.6254': attribute type 1 has an invalid length. [ 561.720226][T30767] netlink: 'syz.0.6254': attribute type 8 has an invalid length. [ 561.767863][T30767] netlink: 582 bytes leftover after parsing attributes in process `syz.0.6254'. [ 561.777877][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 561.796947][T30767] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6254'. [ 561.899167][T30471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.926940][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 562.059909][T30471] veth0_vlan: entered promiscuous mode [ 562.077122][T10500] bond12: (slave bridge0): failed to get link speed/duplex [ 562.092157][T30471] veth1_vlan: entered promiscuous mode [ 562.167197][T30471] veth0_macvtap: entered promiscuous mode [ 562.186181][T30471] veth1_macvtap: entered promiscuous mode [ 562.195915][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 562.201177][T30793] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 562.203807][T30792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6260'. [ 562.266057][T30471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.287651][T30471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.293889][T30795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6262'. [ 562.307968][ T1359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.322275][ T1359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.339962][ T1359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.367601][ T1359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.506986][ T7650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.519631][ T7650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.549261][ T1359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.559329][ T1359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.645980][ T4938] Bluetooth: hci2: command 0x041b tx timeout [ 562.653954][T30807] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 562.802437][T30812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6189'. [ 562.871437][T30812] bond0: option min_links: invalid value (18446744071564623876) [ 562.881631][T30826] xt_TCPMSS: Only works on TCP SYN packets [ 562.903091][T30812] bond0: option min_links: allowed values 0 - 2147483647 [ 563.008117][T30819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.143961][T30839] xt_TPROXY: Can be used only with -p tcp or -p udp [ 563.174876][T30826] bridge_slave_1: left allmulticast mode [ 563.181983][T30826] bridge_slave_1: left promiscuous mode [ 563.189104][T30826] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.200908][T30826] bridge_slave_0: left allmulticast mode [ 563.209230][T30826] bridge_slave_0: left promiscuous mode [ 563.218737][T30826] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.338139][T30849] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 563.353647][T30839] can: request_module (can-proto-0) failed. [ 563.440967][T30849] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 563.460324][T30849] bond1 (unregistering): Released all slaves [ 563.467348][T30857] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 563.484641][T30857] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 563.494632][T30857] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 563.594809][T30858] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.602948][T30858] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.738343][T30858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.756505][T30858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.963696][ T1359] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.991597][ T1359] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.010611][ T1359] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.030537][ T1359] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.726741][ T4938] Bluetooth: hci2: command 0x041b tx timeout [ 565.696497][T30943] __nla_validate_parse: 5 callbacks suppressed [ 565.696532][T30943] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6294'. [ 566.065699][ T7645] net_ratelimit: 20 callbacks suppressed [ 566.065733][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 566.123703][T10485] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.154372][T10485] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.184457][T10485] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.215917][ T7645] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.266869][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 566.379232][T30963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6299'. [ 566.395488][T10485] bond12: (slave bridge0): failed to get link speed/duplex [ 566.525550][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 566.578852][T30970] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6297'. [ 566.916309][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 567.055861][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 567.120064][T30990] openvswitch: netlink: Missing valid actions attribute. [ 567.150782][T30990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.217331][ T7645] bond12: (slave bridge0): failed to get link speed/duplex [ 567.262412][T31004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6309'. [ 567.545465][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 567.641253][T31010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6310'. [ 569.443591][T31085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6325'. [ 569.545725][T31056] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 569.564938][T31101] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6325'. [ 570.400830][T31129] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.6335'. [ 570.410433][T31127] syzkaller0: entered promiscuous mode [ 570.410455][T31127] syzkaller0: entered allmulticast mode [ 570.706011][T31137] xfrm0 speed is unknown, defaulting to 1000 [ 570.802510][T31134] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6338'. [ 570.866439][T31134] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6338'. [ 570.872907][T31145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6339'. [ 571.646520][T31161] team_slave_0: left promiscuous mode [ 571.659879][T31161] team_slave_1: left promiscuous mode [ 571.810717][T31161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.841432][T31161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.244559][ T7649] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.263289][ T7649] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.288467][T10496] net_ratelimit: 24 callbacks suppressed [ 572.288499][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 572.307658][ T7649] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.418422][ T7649] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.465444][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 572.611131][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 572.745759][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 572.875491][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 572.976708][T31215] : option downdelay: invalid value (18446744073709547007) [ 572.984677][T31215] : option downdelay: allowed values 0 - 2147483647 [ 572.994561][T31215]  (unregistering): Released all slaves [ 573.086481][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 573.245701][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 573.344598][T31234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6358'. [ 573.395917][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 573.435999][T31239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6360'. [ 573.486888][T31239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6360'. [ 573.516634][T31239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6360'. [ 573.566577][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 573.726132][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 574.070338][T31270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6367'. [ 574.235671][T31272] bond1 (unregistering): Released all slaves [ 574.787938][T31295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6371'. [ 574.826843][T31295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6371'. [ 574.934092][T31308] netlink: 'syz.1.6376': attribute type 4 has an invalid length. [ 575.740673][T31343] syzkaller0: entered promiscuous mode [ 575.776113][T31343] syzkaller0: entered allmulticast mode [ 575.800932][T31349] tipc: Started in network mode [ 575.808987][T31349] tipc: Node identity ac14140f, cluster identity 4711 [ 575.818771][T31349] tipc: New replicast peer: 255.255.255.255 [ 575.826240][T31349] tipc: Enabled bearer , priority 10 [ 576.287465][T31370] __nla_validate_parse: 4 callbacks suppressed [ 576.287500][T31370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6395'. [ 576.518701][T31381] tipc: Can't bind to reserved service type 0 [ 576.779866][T31389] syzkaller1: entered promiscuous mode [ 576.801779][T31389] syzkaller1: entered allmulticast mode [ 576.935437][ T6387] tipc: Node number set to 2886997007 [ 577.298749][ T77] net_ratelimit: 28 callbacks suppressed [ 577.298783][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 577.372702][T31409] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6407'. [ 577.445419][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 577.548938][T31414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6408'. [ 577.605459][ T5619] Bluetooth: hci2: command 0x041b tx timeout [ 577.626530][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 577.775445][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 577.883669][T31429] netlink: 'syz.1.6410': attribute type 4 has an invalid length. [ 577.904078][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 578.076629][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 578.224303][T31439] geneve0: entered promiscuous mode [ 578.288851][T31439] geneve0: left promiscuous mode [ 578.437056][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 578.506806][T31441] xfrm0 speed is unknown, defaulting to 1000 [ 578.598272][T31466] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6420'. [ 578.655636][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 578.807240][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 578.945472][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 579.093817][T31478] gtp1: entered promiscuous mode [ 579.121048][T31478] gtp1: entered allmulticast mode [ 579.137449][T31478] team0: Device gtp1 is of different type [ 579.452282][T31482] tipc: Enabling of bearer rejected, failed to enable media [ 579.653762][T31488] IPv6: NLM_F_REPLACE set, but no existing node found! [ 580.046150][T31502] tipc: Invalid UDP bearer configuration [ 580.046225][T31502] tipc: Enabling of bearer rejected, failed to enable media [ 580.511512][ T5726] IPVS: starting estimator thread 0... [ 580.525950][T31530] xt_hashlimit: size too large, truncated to 1048576 [ 580.583928][T31533] netlink: 'syz.2.6438': attribute type 1 has an invalid length. [ 580.603426][T31533] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6438'. [ 580.613225][T31532] IPVS: using max 56 ests per chain, 134400 per kthread [ 580.854954][T31536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6439'. [ 580.871051][T31536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6439'. [ 581.059577][T31542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6441'. [ 581.072769][T31542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6441'. [ 581.280694][T31557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6443'. [ 581.434189][T31562] sctp: [Deprecated]: syz.3.6444 (pid 31562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 581.434189][T31562] Use struct sctp_sack_info instead [ 581.462833][T31574] netlink: 'syz.2.6447': attribute type 13 has an invalid length. [ 581.482709][ T5726] IPVS: starting estimator thread 0... [ 581.543529][T31573] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 581.570370][T31573] syzkaller0: entered promiscuous mode [ 581.576943][T31573] syzkaller0: entered allmulticast mode [ 581.605445][T31577] IPVS: using max 45 ests per chain, 108000 per kthread [ 582.171249][T31589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6449'. [ 582.395626][ T36] net_ratelimit: 19 callbacks suppressed [ 582.395660][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 582.516279][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 582.625937][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 582.736255][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 582.845545][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 582.956204][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 583.065529][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 583.175719][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 583.295713][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 583.405773][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 583.933337][T31555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.546498][T31622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6459'. [ 584.581079][T31622] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.6459'. [ 584.760705][T31636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6461'. [ 584.812109][T31634] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.831007][T31634] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.048110][T31644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6463'. [ 585.155037][T31644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6463'. [ 585.177920][T31644] bond3 (unregistering): Released all slaves [ 585.490334][T31655] netlink: 'syz.4.6467': attribute type 1 has an invalid length. [ 585.502729][T31655] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6467'. [ 585.668704][T31668] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6472'. [ 585.718668][T31669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6473'. [ 585.727855][T31668] xfrm0 speed is unknown, defaulting to 1000 [ 585.785352][T31669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6473'. [ 588.510796][T31691] lo speed is unknown, defaulting to 1000 [ 588.518323][ T36] net_ratelimit: 23 callbacks suppressed [ 588.518363][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 588.544472][T31691] lo speed is unknown, defaulting to 1000 [ 588.588540][T31691] lo speed is unknown, defaulting to 1000 [ 588.601160][T31691] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 588.617770][T31701] netlink: 'syz.2.6481': attribute type 4 has an invalid length. [ 588.646803][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 588.676803][T31703] netlink: 'syz.0.6482': attribute type 1 has an invalid length. [ 588.696818][T31691] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 588.744520][T31703] nbd: illegal input index -1426887320 [ 588.798010][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 588.809237][T31691] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 588.872814][T31691] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 588.936360][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 589.044194][T31691] lo speed is unknown, defaulting to 1000 [ 589.067491][ T7650] bond12: (slave bridge0): failed to get link speed/duplex [ 589.096599][T31691] lo speed is unknown, defaulting to 1000 [ 589.138411][T31691] lo speed is unknown, defaulting to 1000 [ 589.161710][T31691] lo speed is unknown, defaulting to 1000 [ 589.204500][T31691] lo speed is unknown, defaulting to 1000 [ 589.215540][T10500] bond12: (slave bridge0): failed to get link speed/duplex [ 589.258890][T31691] lo speed is unknown, defaulting to 1000 [ 589.287568][T31691] lo speed is unknown, defaulting to 1000 [ 589.311697][T31691] lo speed is unknown, defaulting to 1000 [ 589.337747][T31691] lo speed is unknown, defaulting to 1000 [ 589.366011][T10500] bond12: (slave bridge0): failed to get link speed/duplex [ 589.391773][T31691] lo speed is unknown, defaulting to 1000 [ 589.423300][T31691] lo speed is unknown, defaulting to 1000 [ 589.495927][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 589.579121][T31734] : entered promiscuous mode [ 589.611255][T31734] __nla_validate_parse: 1 callbacks suppressed [ 589.611287][T31734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6490'. [ 589.650711][T31739] syzkaller0: renamed from batadv_slave_1 (while UP) [ 589.665794][T31734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6490'. [ 589.711667][T31739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6492'. [ 589.716055][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 589.787075][T31739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6492'. [ 589.865727][T10496] bond12: (slave bridge0): failed to get link speed/duplex [ 589.921484][T31739] vlan3: entered promiscuous mode [ 589.941417][T31739] bridge0: entered promiscuous mode [ 590.079123][T31758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6496'. [ 590.133382][T31759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6496'. [ 590.166916][T31757] lo: Caught tx_queue_len zero misconfig [ 590.474347][T31766] veth1_to_bond: entered allmulticast mode [ 590.574137][T31765] veth1_to_bond: left allmulticast mode [ 591.235239][T31786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6502'. [ 591.349877][T31794] netlink: 'syz.2.6505': attribute type 8 has an invalid length. [ 591.378060][T31794] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.6505'. [ 591.420684][T31798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6505'. [ 591.600105][T31806] x_tables: duplicate underflow at hook 3 [ 591.806943][T31813] syzkaller1: entered promiscuous mode [ 591.827586][T31813] syzkaller1: entered allmulticast mode [ 591.979647][T31822] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6514'. [ 592.046582][T31822] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.054771][T31822] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.132416][T31836] netlink: 'syz.3.6517': attribute type 1 has an invalid length. [ 592.160319][T31837] netlink: 'syz.3.6517': attribute type 1 has an invalid length. [ 592.498019][T31850] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 592.585043][T31850] gretap0: entered promiscuous mode [ 592.625935][T31852] netlink: 'syz.2.6521': attribute type 4 has an invalid length. [ 592.856813][T31859] netlink: 'syz.3.6523': attribute type 2 has an invalid length. [ 593.095155][T31877] tipc: MTU too low for tipc bearer [ 593.525773][ T1359] net_ratelimit: 25 callbacks suppressed [ 593.525805][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 593.828193][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 594.000563][ T36] bond12: (slave bridge0): failed to get link speed/duplex [ 594.155465][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 594.182402][T31902] xfrm0 speed is unknown, defaulting to 1000 [ 594.190045][T31911] tipc: Enabled bearer , priority 0 [ 594.250034][T31904] tipc: Disabling bearer [ 594.306369][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 594.436609][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 594.585782][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 594.746659][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 594.871513][T31934] ip6tnl0: Caught tx_queue_len zero misconfig [ 594.915634][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 594.963227][T31902] lo speed is unknown, defaulting to 1000 [ 595.005176][T31945] __nla_validate_parse: 12 callbacks suppressed [ 595.005208][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 595.035804][T31945] netlink: 'syz.4.6543': attribute type 7 has an invalid length. [ 595.082721][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 595.135389][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 595.179375][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 595.244356][T31950] netlink: 'syz.1.6545': attribute type 32 has an invalid length. [ 595.253100][T31945] netlink: 'syz.4.6543': attribute type 7 has an invalid length. [ 595.264900][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 595.334647][T31960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6547'. [ 595.438662][T31967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6549'. [ 595.544717][T31945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6543'. [ 596.357546][T32001] hsr0: entered promiscuous mode [ 596.367084][T32002] netlink: 'syz.3.6562': attribute type 1 has an invalid length. [ 596.379561][T32001] pim6reg99999999: entered allmulticast mode [ 597.727125][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'. [ 597.812911][T32053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6574'. [ 598.047545][T32061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6575'. [ 598.665793][T10504] net_ratelimit: 24 callbacks suppressed [ 598.665826][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 598.810213][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 598.945873][ T7649] bond12: (slave bridge0): failed to get link speed/duplex [ 599.095636][ T1359] bond12: (slave bridge0): failed to get link speed/duplex [ 599.197734][ T30] audit: type=1804 audit(1781923841.111:26): pid=32091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6583" name="/newroot/105/cgroup.controllers" dev="tmpfs" ino=564 res=1 errno=0 [ 599.246775][ T30] audit: type=1800 audit(1781923841.131:27): pid=32091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6583" name="cgroup.controllers" dev="tmpfs" ino=564 res=0 errno=0 [ 599.286793][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 599.425660][T10500] bond12: (slave bridge0): failed to get link speed/duplex [ 599.550919][T32106] atomic_op ffff88802c62d998 conn xmit_atomic 0000000000000000 [ 599.560347][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 599.707116][T32111] IPv6: sit1: Disabled Multicast RS [ 599.755525][T10500] bond12: (slave bridge0): failed to get link speed/duplex [ 599.810716][T32113] tipc: Enabling of bearer rejected, failed to enable media [ 599.888466][ T77] bond12: (slave bridge0): failed to get link speed/duplex [ 600.035585][T10504] bond12: (slave bridge0): failed to get link speed/duplex [ 600.425793][T32146] __nla_validate_parse: 2 callbacks suppressed [ 600.425835][T32146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6601'. [ 600.661184][T32152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6603'. [ 600.755128][T32158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6604'. [ 600.812186][T32158] ------------[ cut here ]------------ [ 600.818972][T32158] !sock_allow_reclassification(sk) [ 600.819016][T32158] WARNING: drivers/block/nbd.c:1249 at nbd_add_socket+0xf35/0x12c0, CPU#0: syz.0.6604/32158 [ 600.836336][T32158] Modules linked in: [ 600.840666][T32158] CPU: 0 UID: 0 PID: 32158 Comm: syz.0.6604 Not tainted syzkaller #0 PREEMPT(full) [ 600.852457][T32158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 600.863784][T32158] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 600.870356][T32158] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 2e 97 05 44 89 e9 80 e1 07 fe c1 38 [ 600.892552][T32158] RSP: 0018:ffffc90004aaf160 EFLAGS: 00010283 [ 600.896284][ T1359] wlan1: Trigger new scan to find an IBSS to join [ 600.899487][T32158] RAX: ffffffff86109574 RBX: 1ffff1100f75f1e9 RCX: 0000000000080000 [ 600.914790][T32158] RDX: ffffc9000e121000 RSI: 0000000000003084 RDI: 0000000000003085 [ 600.923621][T32158] RBP: ffffc90004aaf250 R08: ffff888079af59df R09: 1ffff1100f35eb3b [ 600.932776][T32158] R10: dffffc0000000000 R11: ffffed100f35eb3c R12: ffff88807baf8d80 [ 600.941629][T32158] R13: 1ffff92000955e38 R14: dffffc0000000000 R15: 0000000000000001 [ 600.950994][T32158] FS: 00007f6d14ccb6c0(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 600.961726][T32158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.969645][T32158] CR2: 0000200000e33030 CR3: 000000008b1f2000 CR4: 00000000003526f0 [ 600.979818][T32158] Call Trace: [ 600.983853][T32158] [ 600.988480][T32158] ? __pfx_nbd_add_socket+0x10/0x10 [ 600.994520][T32158] ? __nla_parse+0x40/0x60 [ 600.999618][T32158] nbd_genl_connect+0x133d/0x1c10 [ 601.005291][T32158] ? __pfx_nbd_genl_connect+0x10/0x10 [ 601.011878][T32158] ? rcu_is_watching+0x15/0xb0 [ 601.017706][T32158] ? trace_kmalloc+0x2a/0xf0 [ 601.022789][T32158] ? __nla_parse+0x40/0x60 [ 601.027824][T32158] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 601.034950][T32158] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 601.042220][T32158] genl_family_rcv_msg_doit+0x233/0x340 [ 601.049373][T32158] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 601.057115][T32158] ? __pfx_stack_trace_save+0x10/0x10 [ 601.062996][T32158] genl_rcv_msg+0x614/0x7a0 [ 601.068154][T32158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.073956][T32158] ? irqentry_exit+0x218/0x8f0 [ 601.079545][T32158] ? __pfx_nbd_genl_connect+0x10/0x10 [ 601.085812][T32158] netlink_rcv_skb+0x226/0x4a0 [ 601.091141][T32158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.096720][T32158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.102531][T32158] ? down_read+0x2be/0x330 [ 601.107990][T32158] genl_rcv+0x28/0x40 [ 601.112390][T32158] netlink_unicast+0x7bb/0x940 [ 601.117665][T32158] netlink_sendmsg+0x813/0xb40 [ 601.122937][T32158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.129095][T32158] ? aa_sock_msg_perm+0xf1/0x1b0 [ 601.134583][T32158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.140866][T32158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.146961][T32158] ____sys_sendmsg+0x9b9/0xa20 [ 601.152225][T32158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.159004][T32158] ? lock_release+0x4b/0x3c0 [ 601.164484][T32158] ? import_iovec+0x73/0xa0 [ 601.170140][T32158] ___sys_sendmsg+0x2a5/0x360 [ 601.175376][T32158] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.181050][T32158] ? futex_wake+0x51b/0x5f0 [ 601.186230][T32158] ? __fget_files+0x2a/0x420 [ 601.192068][T32158] ? __fget_files+0x3a2/0x420 [ 601.197630][T32158] __x64_sys_sendmsg+0x1b1/0x290 [ 601.203090][T32158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.209440][T32158] ? rcu_is_watching+0x15/0xb0 [ 601.215684][T32158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.222595][T32158] do_syscall_64+0x174/0x580 [ 601.228122][T32158] ? trace_irq_disable+0x3b/0x140 [ 601.233699][T32158] ? clear_bhb_loop+0x40/0x90 [ 601.238910][T32158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.245490][T32158] RIP: 0033:0x7f6d13d9ce59 [ 601.250340][T32158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.274174][T32158] RSP: 002b:00007f6d14ccb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.283656][T32158] RAX: ffffffffffffffda RBX: 00007f6d14016090 RCX: 00007f6d13d9ce59 [ 601.292622][T32158] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000008 [ 601.301809][T32158] RBP: 00007f6d13e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 601.310688][T32158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.319494][T32158] R13: 00007f6d14016128 R14: 00007f6d14016090 R15: 00007ffda95cbdb8 [ 601.328593][T32158] [ 601.331957][T32158] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 601.339248][T32158] CPU: 0 UID: 0 PID: 32158 Comm: syz.0.6604 Not tainted syzkaller #0 PREEMPT(full) [ 601.348803][T32158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 601.358868][T32158] Call Trace: [ 601.362243][T32158] [ 601.365179][T32158] vpanic+0x56c/0xa60 [ 601.369196][T32158] ? __pfx__printk+0x10/0x10 [ 601.373804][T32158] ? __pfx_vpanic+0x10/0x10 [ 601.378322][T32158] ? is_bpf_text_address+0x292/0x2b0 [ 601.383645][T32158] ? is_bpf_text_address+0x26/0x2b0 [ 601.388878][T32158] panic+0xc5/0xd0 [ 601.392626][T32158] ? __pfx_panic+0x10/0x10 [ 601.397053][T32158] __warn+0x315/0x4c0 [ 601.401033][T32158] ? nbd_add_socket+0xf35/0x12c0 [ 601.405968][T32158] ? nbd_add_socket+0xf35/0x12c0 [ 601.410903][T32158] __report_bug+0x331/0x530 [ 601.415469][T32158] ? nbd_add_socket+0xf35/0x12c0 [ 601.420399][T32158] ? __pfx___report_bug+0x10/0x10 [ 601.425581][T32158] ? irqentry_exit+0x218/0x8f0 [ 601.430368][T32158] ? trace_irq_disable+0x3b/0x140 [ 601.435401][T32158] ? nbd_add_socket+0xf37/0x12c0 [ 601.440426][T32158] ? nbd_add_socket+0xf35/0x12c0 [ 601.445358][T32158] ? nbd_add_socket+0xf35/0x12c0 [ 601.450285][T32158] report_bug+0x16a/0x220 [ 601.454609][T32158] ? nbd_add_socket+0xf35/0x12c0 [ 601.459535][T32158] ? nbd_add_socket+0xf37/0x12c0 [ 601.464469][T32158] handle_bug+0x9c/0x200 [ 601.468717][T32158] exc_invalid_op+0x1a/0x50 [ 601.473217][T32158] asm_exc_invalid_op+0x1a/0x20 [ 601.478247][T32158] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 601.483788][T32158] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 2e 97 05 44 89 e9 80 e1 07 fe c1 38 [ 601.503387][T32158] RSP: 0018:ffffc90004aaf160 EFLAGS: 00010283 [ 601.509478][T32158] RAX: ffffffff86109574 RBX: 1ffff1100f75f1e9 RCX: 0000000000080000 [ 601.517876][T32158] RDX: ffffc9000e121000 RSI: 0000000000003084 RDI: 0000000000003085 [ 601.526114][T32158] RBP: ffffc90004aaf250 R08: ffff888079af59df R09: 1ffff1100f35eb3b [ 601.534082][T32158] R10: dffffc0000000000 R11: ffffed100f35eb3c R12: ffff88807baf8d80 [ 601.542231][T32158] R13: 1ffff92000955e38 R14: dffffc0000000000 R15: 0000000000000001 [ 601.550224][T32158] ? nbd_add_socket+0xf34/0x12c0 [ 601.555180][T32158] ? __pfx_nbd_add_socket+0x10/0x10 [ 601.560480][T32158] ? __nla_parse+0x40/0x60 [ 601.564900][T32158] nbd_genl_connect+0x133d/0x1c10 [ 601.569940][T32158] ? __pfx_nbd_genl_connect+0x10/0x10 [ 601.575331][T32158] ? rcu_is_watching+0x15/0xb0 [ 601.580095][T32158] ? trace_kmalloc+0x2a/0xf0 [ 601.584714][T32158] ? __nla_parse+0x40/0x60 [ 601.589130][T32158] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 601.595459][T32158] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 601.602325][T32158] genl_family_rcv_msg_doit+0x233/0x340 [ 601.607920][T32158] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 601.613984][T32158] ? __pfx_stack_trace_save+0x10/0x10 [ 601.619359][T32158] genl_rcv_msg+0x614/0x7a0 [ 601.623867][T32158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.628884][T32158] ? irqentry_exit+0x218/0x8f0 [ 601.633743][T32158] ? __pfx_nbd_genl_connect+0x10/0x10 [ 601.639145][T32158] netlink_rcv_skb+0x226/0x4a0 [ 601.643939][T32158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.648985][T32158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.654286][T32158] ? down_read+0x2be/0x330 [ 601.658717][T32158] genl_rcv+0x28/0x40 [ 601.662693][T32158] netlink_unicast+0x7bb/0x940 [ 601.667488][T32158] netlink_sendmsg+0x813/0xb40 [ 601.672256][T32158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.677544][T32158] ? aa_sock_msg_perm+0xf1/0x1b0 [ 601.682474][T32158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.688195][T32158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.693481][T32158] ____sys_sendmsg+0x9b9/0xa20 [ 601.698276][T32158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.703562][T32158] ? lock_release+0x4b/0x3c0 [ 601.708153][T32158] ? import_iovec+0x73/0xa0 [ 601.712765][T32158] ___sys_sendmsg+0x2a5/0x360 [ 601.717441][T32158] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.722637][T32158] ? futex_wake+0x51b/0x5f0 [ 601.727141][T32158] ? __fget_files+0x2a/0x420 [ 601.731728][T32158] ? __fget_files+0x3a2/0x420 [ 601.736417][T32158] __x64_sys_sendmsg+0x1b1/0x290 [ 601.741378][T32158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.746840][T32158] ? rcu_is_watching+0x15/0xb0 [ 601.751602][T32158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.757663][T32158] do_syscall_64+0x174/0x580 [ 601.762262][T32158] ? trace_irq_disable+0x3b/0x140 [ 601.767281][T32158] ? clear_bhb_loop+0x40/0x90 [ 601.771956][T32158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.777998][T32158] RIP: 0033:0x7f6d13d9ce59 [ 601.782426][T32158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.802032][T32158] RSP: 002b:00007f6d14ccb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.810446][T32158] RAX: ffffffffffffffda RBX: 00007f6d14016090 RCX: 00007f6d13d9ce59 [ 601.818588][T32158] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000008 [ 601.826573][T32158] RBP: 00007f6d13e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 601.834539][T32158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.842512][T32158] R13: 00007f6d14016128 R14: 00007f6d14016090 R15: 00007ffda95cbdb8 [ 601.850491][T32158] [ 601.853803][T32158] Kernel Offset: disabled [ 601.858137][T32158] Rebooting in 86400 seconds..