last executing test programs: 14.320500404s ago: executing program 3 (id=5800): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="be00800000000004000000000000007afc0000001f26", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02040003170000002cbd7000ffdbdf25050006003c0000000a004e2400000008ff010000000000000000000000000001000000e30000000002000100000000000000060c000000c005000500000000000a004e240000000900000000000000000000000000000000060000000000000009000800f00100000e64c293f4b5130bf3991077c8bb231db0550a1eae04d2cc388295ceb48f32db18d8f8f70963ca2152776c643726abca854289f006b2bce5000074c748089b280fb578006d1de86796792d615a9293b72e3df4ecaf000000000000"], 0xb8}, 0x1, 0x7}, 0x0) (async) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000140)) (async, rerun: 32) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 32) r2 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000006180100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x48004) 13.298795361s ago: executing program 3 (id=5812): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x9, 0x3, 0x2, 0xb898, 0x2f7], 0x6, &(0x7f0000000000)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/35, 0x23}], 0x1, &(0x7f00000001c0)=""/115, 0x73}, 0xfffffe00}, {{&(0x7f0000000240)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/156, 0x9c}, {&(0x7f0000001400)=""/90, 0x5a}, {&(0x7f0000001480)=""/89, 0x59}], 0x5, &(0x7f0000001580)=""/239, 0xef}}, {{&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001700)=""/30, 0x1e}, {&(0x7f0000001740)=""/155, 0x9b}, {&(0x7f0000001800)=""/2, 0x2}, {&(0x7f0000001840)=""/246, 0xf6}, {&(0x7f0000001940)=""/13, 0xd}, {&(0x7f0000001980)=""/50, 0x32}, {&(0x7f00000019c0)=""/216, 0xd8}, {&(0x7f0000001ac0)=""/159, 0x9f}], 0x8, &(0x7f0000001c00)=""/53, 0x35}, 0xffffff02}, {{&(0x7f0000001c40)=@alg, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000002d00)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003d00)=""/80, 0x50}, {&(0x7f0000003d80)=""/3, 0x3}], 0x2, &(0x7f0000003e00)=""/217, 0xd9}, 0xd2}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000003f00)=""/102, 0x66}, {&(0x7f0000003f80)=""/144, 0x90}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/132, 0x84}, {&(0x7f0000005100)=""/12, 0xc}, {&(0x7f0000005140)=""/78, 0x4e}, {&(0x7f00000051c0)=""/96, 0x60}], 0x7, &(0x7f00000052c0)=""/203, 0xcb}, 0x9}], 0x6, 0x0, &(0x7f0000005540)={0x77359400}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000055c0)=@generic={&(0x7f0000005580)='./file0\x00', 0x0, 0x14}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000005600), &(0x7f0000005640)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000056c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000005a00)={0xb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000005ac0)={0x15, 0x2e, &(0x7f0000005700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x0, 0x3, 0x3, 0x0, 0xb, 0xfffffffffffffff8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000005880)='syzkaller\x00', 0xffffff7f, 0xf2, &(0x7f00000058c0)=""/242, 0x40e00, 0x42, '\x00', r1, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000059c0)={0x4, 0x5, 0xb, 0x80000000}, 0x10, r6, 0xffffffffffffffff, 0x1, &(0x7f0000005a40), &(0x7f0000005a80)=[{0x5, 0x5, 0x0, 0x5}], 0x10, 0x7}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005b80)=r6, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005c00), r2) sendmsg$NL80211_CMD_TESTMODE(r8, &(0x7f0000007000)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006fc0)={&(0x7f0000005c40)={0x1350, r9, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xa6, 0x45, "89b279e40d6af859124bbaee53ac70f7073e55b6c6d4667c7d08b6a9780092bebc6916c266ee171818ae78c43bdbc745d2ca6b56c42a0022e39146052fc152d738d4f9bdcb542e6ccdef04d0ae7a304e1a8a8e94f8283708925fd4be8cba66a092a339b59fa5b0e99fdbe601366f8c6e450512265cad91171d409dfdf888be799876609684df8389dc0f93b8f33e8f45a7b294f8f4fcefaca40f85830fe5d223bce9"}, @NL80211_ATTR_TESTDATA={0x97, 0x45, "1b8aed575212abb5ea0112fb7b472950a72f581ea81a65534cee954c196b2bc473f958afc4bf57c5c034b5d054ad225989f509f0a1e45c18d90971cdb1ed59198ed58d93dccdf232f34f8408584c4bc1cfa3b8a774a238784181c2c437ffbca11fdf63eb9e1982c2afb81946a861e57a916894b0f00aedbf6a6dc24567e8bdfceaf12506b1eabe920f34adadc73db493635a3d"}, @NL80211_ATTR_TESTDATA={0x90, 0x45, "bb224834ea28a8701261d617a428606eb2af8861d623f5ed442725d3e4f28ccbfcda6621f202b8ac4ad8c2cf3c02b48c060e34fc0381fcf7d746c8d8739ba5679230a4b18e68501cddab5fc2e47a1c4a5990eae28a249e3f89219b5fcea5277a5cb6b3db661cc2e20d110281acdf684e84ec7a706dbc2e209aefbaf46de54552735b5ffb93f5caef0109333b"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xd0, 0x45, "5edce09723ec879f6f0d3a8cb18486a5a315412fcc4b8b2701465b934d46f926fff4d235c1ea2a0d19ca6de51766f49f40807c9c26794d33c9282694d68a358a3b9b9363afca148b80a043eda7e4f4dbb6613d6ae11daf98ff1edff3a2d64e55369178f24213b1c73eb303202d82c7d3dda54ad9f8dae30819962b933c0436f6d9cd1a61064d1c5282e57b7a059130d63ab91bcaedbe06298fe19b6f2bd9c8e47584aaa1f2b74f026991d9788b38c216b72668bed340fc71af35e3c7810145a0995cee46e283c7841c57fc8b"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "8c0e8ab4ecce82f9677373d062dcf8ca5e4d1563674bbee89c12ec41"}, @NL80211_ATTR_TESTDATA={0x76, 0x45, "275ff4c451487d1d9faf5d7c1dfd1116857b796fd69aa2a8698d7518e274e572481652fe0fe4033ecf2fc64a5ed4638633add7ff54395206be8e1c418f2436be34a67a87b32e66c8f9402ebc9cf3943d5cfbed8b8e6133ee869e296ecb77b01dfaa70d0a023e8f90dd1693a00fe28ecd6f05"}]}, 0x1350}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000070c0)={'syztnl2\x00', &(0x7f0000007040)={'syztnl2\x00', r1, 0x29, 0x1, 0xe, 0x8, 0x40, @mcast2, @local, 0x1, 0x2, 0x6, 0x3ff}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007100)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7479, '\x00', r10, r7, 0x2, 0x3}, 0x50) pread64(r8, &(0x7f0000007180)=""/235, 0xeb, 0x3) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000072c0), r8) getpeername$packet(r2, &(0x7f0000007300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000007340)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000007400)={'syztnl1\x00', &(0x7f0000007380)={'ip6gre0\x00', r1, 0x29, 0x8, 0x7, 0x9, 0x28, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x10, 0x80, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000075c0)={&(0x7f0000007280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007580)={&(0x7f0000007440)={0x130, r11, 0x100, 0x70bd2b, 0x4, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) r14 = accept$phonet_pipe(r2, 0x0, &(0x7f0000007600)) ioctl$int_in(r14, 0x5452, &(0x7f0000007640)=0x52) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007680)={'nr0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000076c0)={@loopback, r15}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000077c0)={&(0x7f0000007700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007780)={&(0x7f0000007740)={0x38, 0x140e, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000007800)={0x8, [0x5, 0x1000, 0x10, 0x0, 0x4, 0xc0, 0x245d, 0x1]}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000007840)=@bloom_filter={0x1e, 0xffffffff, 0x1, 0x4, 0x20010, 0xffffffffffffffff, 0x2, '\x00', r15, r7, 0x1, 0x0, 0x1, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000078c0)={'veth0_to_bridge\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x20, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4880) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000007a00)={0x1, @remote, 0x4e20, 0x2, 'fo\x00', 0x1, 0x3, 0x52}, 0x2c) 12.29731323s ago: executing program 3 (id=5819): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xecdf, 0xfffc, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {}, 0x0, 0x3508, 0xa, 0x4, 0x0, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x200}}]}, 0x13c}}, 0x4050) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_U32_SEL={0x54, 0x5, {0xc, 0x5, 0x2, 0x1, 0x0, 0x67, 0x9, 0x3, [{0x1000, 0x10, 0x1000000, 0x80000001}, {0xd, 0x2, 0x4, 0x5}, {0x0, 0x7e0e7394, 0x9, 0xff}, {0x7, 0x0, 0x6, 0x4}]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 11.966213833s ago: executing program 3 (id=5824): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r2, 0x0, 0x0, 0x17, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000041000709fefffffffeffffff017c0016040042800c00018006000600800a000008000280040002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14e900001000010000000000000000200500000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc08000540000000240800400000004408000f4000000002140000001100010000000000000000000100000ab7f86dfe501ed89e2acc50cdb8c41295f62887b5498973b35d5685c4ac8376c831f91f4890b9284b799cea6626ed29b138e6c813"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 11.484010719s ago: executing program 3 (id=5828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000080)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff164000000000000000000011400"], 0xa4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a00010005000000000000720800", 0x32}], 0x1) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0xc080) 10.048625288s ago: executing program 3 (id=5838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c000000000000000000000000000000fcd3c8abbaf324f813ecd40b737661b5d8750d5c45e6f3770dabc31be6d0ec98dfde732eff511da6f3e83af194ac85c928c8df40044d8b11e9e672079ffdc46865aad009be742dd0c24166fae82d2a96485018bc806019bdfeb29d02fd0c4b1c81e838fe5824163eb4702321cf82b4d4e82db4b790db45ea3f0d98508e3093716422575130ad319a8261fdce4c98cff73cd33542f9cf11f4fda0836f3dc49508e3fa2cb51d668febb87d7e83f22682974ff4e5edafc689e13dda75d61de76ea0629552b45e5605be35a8a3", 0xdb) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a80)={0x0, 0x58a88d90, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000080)={{r3}, {@val={r7}, @actul_num={@val=0x2b, 0x2, 0x70}}}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) 6.273368348s ago: executing program 0 (id=5856): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x3a, 0xa8, @random="6d2698ae99cb09e814a1c5e814b312386e93fc0a1df6ca36bbd3ef5413f6e73d2f6b1c006fb5dc066ab24e4a4363d021db7585989a24"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x20044000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)="89e5ee0c7cdacabab47380c988cacb08000000000000681b92961f187410c5099eecb2d200000064fb", 0x29}, {&(0x7f0000000440)="448b7c0acf", 0x5}], 0x2) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r7, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 6.244546363s ago: executing program 2 (id=5857): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000240)='\x00\xdc\xd5Y5\x17=u\x14\xd5\x00V\x848\x90m|\xf7\xb0\xa6\x910=\f\xb6\x13/\xbc\xf9_\x95B)\xb2\x85\x11\xd5U\xfe\x9a\x84\xa6|\x1d\x1c2\xa1\x1fHm\xfb\x18j\xff#t\xbe\xca\xc4Z/\xd3}\x87Yn/C\xd1\x8by)t\x9e\xfet_\xba!-\xa8\x19l\x90}\xecW%\x88\xe3\x80R#\xcf\x11O|T\xde\xa2`\xd7W\xea\xa7\xf2l\x9f\xa4\x92\x86\x7f\x9f\xb8\xe1u\xf1w\x10x\"\x9b\x84%}\x96L\xd4\xe5]O\xe1r<', 0x80040, &(0x7f00000000c0)={@align=0xfffffffffffffefe, {0x373, 0x8c0, 0x81, 0x5}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x81}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200003300000000000000000000008500000063000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x3, {0xa, 0x4e23, 0x7ff, @local, 0x1a20}}}, 0x32) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r3, &(0x7f0000000700)="b068aa", 0x3) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44) listen(r0, 0x100101) r4 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000240)='\x00\xdc\xd5Y5\x17=u\x14\xd5\x00V\x848\x90m|\xf7\xb0\xa6\x910=\f\xb6\x13/\xbc\xf9_\x95B)\xb2\x85\x11\xd5U\xfe\x9a\x84\xa6|\x1d\x1c2\xa1\x1fHm\xfb\x18j\xff#t\xbe\xca\xc4Z/\xd3}\x87Yn/C\xd1\x8by)t\x9e\xfet_\xba!-\xa8\x19l\x90}\xecW%\x88\xe3\x80R#\xcf\x11O|T\xde\xa2`\xd7W\xea\xa7\xf2l\x9f\xa4\x92\x86\x7f\x9f\xb8\xe1u\xf1w\x10x\"\x9b\x84%}\x96L\xd4\xe5]O\xe1r<', 0x80040, &(0x7f00000000c0)={@align=0xfffffffffffffefe, {0x373, 0x8c0, 0x81, 0x5}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x81}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200003300000000000000000000008500000063000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x3, {0xa, 0x4e23, 0x7ff, @local, 0x1a20}}}, 0x32) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) (async) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) (async) write$ppp(r3, &(0x7f0000000700)="b068aa", 0x3) (async) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44) (async) listen(r0, 0x100101) (async) accept(r0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x2}, 0x10) (async) 6.110381487s ago: executing program 2 (id=5858): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070001000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c000380380000800800034000000003"], 0xec}}, 0x0) sendfile(r4, r4, 0x0, 0x2000000000000002) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$FIOCLEX(r7, 0x5451) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250100000000000000014100000018001700000000000000047564703a73797a320000e8ffd6c2965e6e90e0721487f809dab0204dff69732bdf62cadf75eaa437caad5023accdfbda5daf68577a0a5b97fd041947a5072248dc27bb1ad7e01a1cdbd9776430cd31778dd7671751ee0c71a9"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x62caa}, [@IFLA_MTU={0x8, 0x4, 0xfff}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}}, 0x20044880) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002c40)={@map, 0xffffffffffffffff, 0x1}, 0x20) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfdef) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x12, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@generic={0xd, 0x5, 0xe, 0x7ff, 0xe}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 4.969699082s ago: executing program 0 (id=5859): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000000001d01f80005000d0001"], 0x88}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYBLOB="6b0ae095d1382b64bc23dd84351bb137e2907284d1e31e365474cbc2ec9a9074f82948a912f0afda8de4a537f241dc282acc9d709d38293cdba7d385dae1f75c5d09cf1025334fc743eaae", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000002000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.956786318s ago: executing program 2 (id=5860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2008c0d4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000002c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000300)=0x2c) 4.681735235s ago: executing program 0 (id=5863): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) read(r3, &(0x7f0000000000)=""/147, 0x93) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c0010800400058004004480040002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="c400000003010102000000000000000001000001a4000e8006000340000200002c00018014000300ff01000000000000000000003f1a9fc100000001140004002001000000000000000000000000000106000340000000000c00028005000100010000000c00028005000100060000000c000280050001002f0000001400018008000100e000000208000200e00000012c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00198008000100"], 0xc4}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f0000000380)=@ethtool_flash={0x17, 0x0, './file0\x00'}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r8 = socket$rxrpc(0x21, 0x2, 0xa) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r7, @ANYRES32=r11, @ANYBLOB="100001800400", @ANYRES8=r8], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.37115023s ago: executing program 1 (id=5866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="6bb343b15df1b5c102e351fc28b888d0949381b53540fb1fe44ef7d0a686cc8e27c06df1377656122c3442d3ee065590bd3a3b90225ea6c57d40f15c4eb2de98243967ffe21251c8615f10992b44189647a5ac40ecdb8cd03798465d5a05fdd141372ff71c4ac9e89eea788e3372bf84917fbf840000783dea27712241e8003b8a844cc0b410bdd60e0ef75216ff942c9b2ed51a7622071b52d746b3da72467b1ef4c2d14237c9b657526ea57769a01cc4c7f5b04bb5c13ecce35e45e2fd083b7116520874b317508cba9a4de7b49f65dde692c26ed2813d", 0xd8}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_to_bond\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3b) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) close(0x3) 4.202387457s ago: executing program 0 (id=5868): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) write(r3, &(0x7f0000000480)="5c7c333555dbaddad91089938c4cd00736f8c3a2dca9d2158ead521ac961ebba5be0b8e01b86e62a0a155880f015ffc4455766319a7d42a58b621a2cf32073a83a07cd986d3e4e8ef49014a3c32f0cc948b991cb0750be4372553dae3fba50e0d993f43f6494212417d70e61bc90dafc05f930e7d012163a87d3d20f9661dc9ff1db1d3dbce2259f9416008a612075c340ea9d16bd1fc103d9bd896aded05711eb663247f81efe98937ecbc032d2b142c37cb27265c103ea9f817bf06cd4a5c75fea", 0xc2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x5, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) close(0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendfile(r9, r10, 0x0, 0xffffffff000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r11, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) ioctl$SIOCGIFMTU(r10, 0x8921, &(0x7f0000000040)={'veth0_vlan\x00'}) 4.082768483s ago: executing program 4 (id=5869): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070001000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c000380380000800800034000000003"], 0xec}}, 0x0) sendfile(r4, r4, 0x0, 0x2000000000000002) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$FIOCLEX(r7, 0x5451) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250100000000000000014100000018001700000000000000047564703a73797a320000e8ffd6c2965e6e90e0721487f809dab0204dff69732bdf62cadf75eaa437caad5023accdfbda5daf68577a0a5b97fd041947a5072248dc27bb1ad7e01a1cdbd9776430cd31778dd7671751ee0c71a9"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x62caa}, [@IFLA_MTU={0x8, 0x4, 0xfff}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}}, 0x20044880) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002c40)={@map, 0xffffffffffffffff, 0x1}, 0x20) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfdef) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x12, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@generic={0xd, 0x5, 0xe, 0x7ff, 0xe}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 3.780119404s ago: executing program 2 (id=5870): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getchain={0x5c, 0x66, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x8}, {0x1e, 0x10}, {0xfff2, 0xfff2}}, [{0x8, 0xb, 0xfffffc01}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xb8}, {0x8, 0xb, 0x321400}, {0x8, 0xb, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000011}, 0x10) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0xfffffffffffffff2, 0x81, 0x2}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r0, &(0x7f0000000280)='freezer.state\x00', 0x88000, &(0x7f00000002c0)={@align=0x7, {0x4, 0x1, 0x100, 0x9}}, 0x1e9, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r1}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000400)) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x8001, 0x5c}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc045}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f00000005c0)={0x12dc, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1298, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x52, 0x5, "ee68c2024e9eb11799d2ea262d861bb98210eabc1937fdf79478c37f6def5745c1c7edc71c032dc50eb7a01b5de4fffd7f615ccd45d49674861d6ec91805c7baee0b458fd6990528b1c5d00a09f8"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38ab}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'freezer.state\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'freezer.state\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'freezer.state\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'freezer.state\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xff, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "663ddb97d8159f37d38d9f"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x12dc}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000001a40)={&(0x7f0000001940), 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, r6, 0x10, 0x70bd2a, 0x6, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x8000) socket$nl_audit(0x10, 0x3, 0x9) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r7, 0x0, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x68014) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000002540)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002500)={&(0x7f0000001c40)={{0x14}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2357363}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x740, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DESC={0x678, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa535}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x21dd12e6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca}]}]}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f87}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0xf4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x180000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x500000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x190, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c2f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa6e0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x35}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x859f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe7c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef25}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x1b4, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xea8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x731c}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x748361e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9201}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffeff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc8}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x88c}, 0x1, 0x0, 0x0, 0x1bb481126bc0cdb5}, 0x8002) ioctl$FIONCLEX(r9, 0x5450) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002580)={@fallback=r3, r1, 0x3, 0x0, r1, @void, @value=r1}, 0x20) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x24, 0xa, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}]}, 0x24}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002740)={'syztnl1\x00', &(0x7f00000026c0)={'syztnl0\x00', 0x0, 0x40, 0x20, 0xf, 0x80000001, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x66, 0x0, 0x2, 0x2f, 0x0, @empty, @private=0xa010102, {[@timestamp_prespec={0x44, 0x14, 0x29, 0x3, 0x2, [{@loopback, 0x4}, {@local, 0x2}]}]}}}}}) bind$packet(r2, &(0x7f0000002780)={0x11, 0x1b, r10, 0x1, 0x3, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r8, &(0x7f00000027c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002800)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000002840)={0x0, 0x1, 0x20, 0x8, 0x1}, &(0x7f0000002880)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000028c0)={r11, 0x740}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000002900)={r11, @in={{0x2, 0x4e23, @multicast2}}, 0x3, 0xfffffffa, 0xb2, 0x3, 0x7}, &(0x7f00000029c0)=0x98) 1.362714474s ago: executing program 2 (id=5871): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x8) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9febffff18"], 0x0, 0x41, 0x0, 0x1, 0x4b}, 0x28) socket$kcm(0x21, 0x0, 0xa) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0a02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000f80)={0x281, 0x1}) close(r0) 1.362080736s ago: executing program 1 (id=5872): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8, 0x1, 0x8, 0x1ff, {{0xd, 0x4, 0x1, 0x16, 0x34, 0x67, 0x0, 0x0, 0xa3d40d1fd2e5713, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0x23, 0x0, 0x8, [0x7, 0x8, 0x7, 0x7, 0x6]}, @rr={0x7, 0x7, 0x7, [@empty]}, @noop]}}}}}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x2c, 0x49, 0x100, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x78, 0x0, r1, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x3, 0x1, 0x2, 0xb3d, 0x937]}, &(0x7f00000001c0)=0x54) 1.290133779s ago: executing program 0 (id=5873): syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0476bc4b4c0000260cbfad990444140b01e000000100000000e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x7fef, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r1, 0xffffffffffffffff, 0x7}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19c00, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x200000, 0x2, 0x5b, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0476bc4b4c0000260cbfad990444140b01e000000100000000e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x7fef, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) (async) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r1, 0xffffffffffffffff, 0x7}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19c00, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x200000, 0x2, 0x5b, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) 1.287017692s ago: executing program 4 (id=5874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000080102000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, 0x0, 0x0, 0x11}, 0x20) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) syz_emit_ethernet(0x21e, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(0x3) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020e05061f0000002cbd7000ffdbdf251d0018000080dd006fdeb9acb400005a557785263ac9b69a8ffe4753352054d416274aa1b291f982cde1153ff678de32ced8f7abec231ae8f9261eb57c8a4a842a7a137ae1835b2fae20929359142b16a80c48fbc263763dabf7eab4ca4b615460303def333a57cb3e8fc6e95ec3912b0bfbf3214d824d3ef38a28da9473bf02722bc08aefe53c12480b3d7bbd32964a66a684caa745722701773dd7b0b730c5c602ee34c365e53ad114a874c59fcced24d9e67990c1bf3656b0bf28f01f2e56a35b11ac75112e2e3d47b939ff85b66b7417272e3e0e88f1b154ae0ed8d00da4cf88caccdd000000"], 0xf8}}, 0x40) (async) sendmmsg$unix(r11, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c1f0000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x1, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x62001000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x44}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x22}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x80}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x6}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x44}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x42}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x36}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r13, 0xe14393ba65cdfb2b, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtaction={0x9c, 0x30, 0x20, 0x0, 0x0, {0x9}, [{0x88, 0x1, [@m_sample={0x84, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x38000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x0, 0x0, 0x80000}}]}, {0x2d, 0x6, "6651f222c8749f411872f17bc78386fb803b19523f245e123f816e716831a7aadfd546a7d50d964004"}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x9c}}, 0x20040000) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff000000000000000008001200000001000000000000000000060000000000000000000000000000000000000000fc0200000000000000000000000000ff030006000000000002000000e00000010000000000000000"], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.1345434s ago: executing program 4 (id=5875): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c001000041000100fcff070004000000030000008f014880040008"], 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xfff2}, {0xfff3, 0xffff}, {0x7671693a61b9ff27, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x0, [0xb, 0xffffffffffffffff, 0xe, 0xc0000000000000, 0x8000, 0xc], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) 1.133961097s ago: executing program 1 (id=5876): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030001000080000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x2, 0x3, 0x7, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x6002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xa, 0x3, 0x5, 0x6, 0x4d, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x1d62, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(r0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r9) 991.297734ms ago: executing program 2 (id=5877): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x38, r10, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r12}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x8000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xea, &(0x7f0000000140)=""/234, 0x0, 0x8, '\x00', 0x0, 0x0, r0}, 0x94) 822.844843ms ago: executing program 1 (id=5878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a20000000000a01030000000000000000010000010900010073797a3100000000e8000000030a01010000000000000000010000000900030073797a32000000000900010073797a310000000014000480080002407c40280f080001400000000208000a4000000005"], 0x158}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) close(0x3) 730.581643ms ago: executing program 4 (id=5879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x6, 0x6, &(0x7f00000004c0)=""/6, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) (async, rerun: 64) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 64) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100000000000040000000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 719.990749ms ago: executing program 0 (id=5880): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000441080100ffff07000400000001090000"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000740)={0x54, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x121}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2b6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r6, &(0x7f00000006c0)={0x1d, r7}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r8, 0xffffffffffffffff, 0x44) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x392, &(0x7f0000000d40)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x1, 0x6, "e99f8f", 0x358, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, {[@srh={0x33, 0x2, 0x4, 0x1, 0x9, 0xb0, 0x80, [@dev={0xfe, 0x80, '\x00', 0x20}]}, @srh={0x1d, 0x6, 0x4, 0x3, 0xad, 0x20, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x87, 0x8, 0x4, 0x4, 0xc2, 0x40, 0x7, [@mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}]}, @srh={0x21, 0x2, 0x4, 0x1, 0x9, 0x0, 0x27d4, [@remote]}, @fragment={0xff, 0x0, 0x81, 0x0, 0x0, 0x3, 0x65}, @hopopts={0x62, 0x21, '\x00', [@jumbo={0xc2, 0x4, 0x10}, @calipso={0x7, 0x50, {0x2, 0x12, 0xd, 0x202, [0x0, 0x1000, 0xb9, 0xa08, 0x8, 0xa, 0x0, 0x5, 0x8]}}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x63}, @generic={0x4, 0x9c, "ddd3da5ac31d6c9e6e24fd3f369c8689833c3e0294538c68a1c6d403ce29deedf554b13ee9924aa71ea6a44513f3c1d80a8a63baa28bbdce662aa464b43f97b7ecf4358bfc9fa531d182a3c525039710bd2b818139c45052966afd44a713959231f8a01d0f01bac1f1aec1c6de96dd42163a556a2b24d35eac49e64f7c22c85af1268b8a1145187ae32ec84813f7e96e20e879c71f1b2573eddd6ba5"}]}, @dstopts={0xac, 0x20, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0x10, 0xf5, "b0544ddae5ba57f7c116e8698dfc317deb3ba9fa7ee61ce72ba7f27ddee8fde997cd2b90d3d1f4af689278ab653ca2e81d1fc0a9057169e60337cb52940ee0913cf849b475e5205ef94dd9943d9d023ae45c369f7052fdf814226427f8c4c7c6914512c0779b1508f823de73dc380ebf144209e056a2fb9b4d87492289df9344ab62d98430c90549a2bf04a23f0e42bbc13293f3f35c547a141b2557a68a8917dd6b4523e722bbff474b12999355a1a1a1b05a48e201356f7a632105b0ba7fad279c272ae0e01854699c481f5d7c67d3d8cea1d6877f4f4bca2ac83a21bbcfbbe0b14784d09023bc6620889df9ec31a079dfc62fc3"}, @enc_lim, @enc_lim={0x4, 0x1, 0x7f}]}], {0x4e21, 0x4e21, 0x80, 0x0, @opaque="5b31dd91406d4f7028fbf8924308dc4fb9dfba768e332d0f61679dbbc39c50a8a414110290eeb6963df5d8ed6bb729f3e8d49a9fab730fbbccdf282e940235a0c9f0710e6948ddc03cf20f74efa9746fde7d32175e8ba132eb4f535bfc5be8df8333689043d5e41f61c0563acac60b15a7e2db89c8f0d29d"}}}}}}, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r10, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0xd, 0xdc, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, 0x1, 0x7800, 0x7, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8, 0x30, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b7040000010000008500000015000000850000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 590.215974ms ago: executing program 4 (id=5881): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a0d6}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf5, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000001d0000000000000000000000000000000000000000000000000000000000000000feffffef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000a9a7ce2e059c184e56b400000000000000000000000000000000000000ffffffff0000"]}, 0x108) (async) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="cc010000827315c4326f9744e0cbb4c597e844", @ANYRES16=r2, @ANYBLOB="00082bbd7000fedbdf25180000005c0006800400020045000300ee2b5287439ece028b1324d6286fe51edd6829cb970afc2c6166b600262ff8274744745ebf2d3442da4e2d5a62280a4bc9938c90f495c3243e8a82ec466341d400000000040005000800060008000000100007800c0003000700000000000000440003800800010006000000080002000200000008000300001000000800010000000000080001000101000008000100fb000000080001000040000008000300040000009800018038000400200001000a004e2180000001ff010000000000000000000000000001010001001400020002004e247f00000100000000000000000d0001007564703a73797a320000000008000300000001000e0001006574683a7866726d30000000340002800800030008000000080001001100000008000400060000000800030008000000080001000500000008000200de000000040001805400038008000200bd000000080002000600000008000200040000000800030004000000080003000800000008000100b999000008000100f3890c10080001000400000008000100090000000800030005000000180006800400020008000600ff000000080001003e000000"], 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x24040001) r4 = socket$packet(0x11, 0x2, 0x300) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82b7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae3e}, 0x1c) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2eaa00000000000071108d000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 437.812399ms ago: executing program 1 (id=5882): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='wi', 0x2}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(r2) 11.684834ms ago: executing program 1 (id=5883): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070001000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c000380380000800800034000000003"], 0xec}}, 0x0) sendfile(r4, r4, 0x0, 0x2000000000000002) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$FIOCLEX(r7, 0x5451) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250100000000000000014100000018001700000000000000047564703a73797a320000e8ffd6c2965e6e90e0721487f809dab0204dff69732bdf62cadf75eaa437caad5023accdfbda5daf68577a0a5b97fd041947a5072248dc27bb1ad7e01a1cdbd9776430cd31778dd7671751ee0c71a9"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x62caa}, [@IFLA_MTU={0x8, 0x4, 0xfff}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}}, 0x20044880) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002c40)={@map, 0xffffffffffffffff, 0x1}, 0x20) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfdef) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x12, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@generic={0xd, 0x5, 0xe, 0x7ff, 0xe}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 0s ago: executing program 4 (id=5884): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x34}}, 0x0) socket$inet(0x2, 0x3, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0000001}) kernel console output (not intermixed with test programs): n, defaulting to 1000 [ 753.193242][T24575] erspan0: entered promiscuous mode [ 753.582447][T24594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4633'. [ 754.405706][T24618] pim6reg: entered allmulticast mode [ 754.415307][T24618] pim6reg: left allmulticast mode [ 754.424081][T24620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4639'. [ 754.434884][T24619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4639'. [ 754.606448][ T6186] net_ratelimit: 26 callbacks suppressed [ 754.606467][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 754.751638][T24638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4646'. [ 754.765804][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 754.897358][ T581] bond2: (slave bridge3): failed to get link speed/duplex [ 755.043772][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 755.173765][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 755.323031][T24670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4653'. [ 755.334741][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 755.415063][T24668] tipc: Resetting bearer [ 755.524204][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 755.566031][T24678] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4654'. [ 755.656113][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 755.784293][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 755.913903][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 756.335474][T24714] ipt_REJECT: TCP_RESET invalid for non-tcp [ 757.710833][T24761] __nla_validate_parse: 2 callbacks suppressed [ 757.710854][T24761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 757.919741][T24759] syzkaller0: entered promiscuous mode [ 757.960755][T24759] syzkaller0: entered allmulticast mode [ 758.104958][T24785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4680'. [ 758.162721][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 758.339287][T24792] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4678'. [ 758.990072][T24796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4681'. [ 760.930641][T24789] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4678'. [ 761.118599][T24798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4681'. [ 761.164181][ T1172] net_ratelimit: 8 callbacks suppressed [ 761.164201][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 761.316791][T24819] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4686'. [ 761.329858][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 761.380040][T24819] netlink: 115 bytes leftover after parsing attributes in process `syz.4.4686'. [ 761.437907][T24819] netlink: 115 bytes leftover after parsing attributes in process `syz.4.4686'. [ 761.457046][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 761.585825][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 761.723752][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 761.924106][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 762.053997][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 762.185001][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 762.261723][T24854] bond0: (slave ip6tnl0): refused to change device type [ 762.315764][T24854] ip6erspan1: entered allmulticast mode [ 762.383737][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 762.504243][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 762.542604][T24872] netlink: 'syz.4.4700': attribute type 1 has an invalid length. [ 762.575463][T24872] netlink: 'syz.4.4700': attribute type 1 has an invalid length. [ 763.459143][T24909] syzkaller0: entered promiscuous mode [ 763.484144][T24909] syzkaller0: entered allmulticast mode [ 763.525719][T24916] __nla_validate_parse: 5 callbacks suppressed [ 763.525738][T24916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4710'. [ 764.430138][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4714'. [ 764.802645][T24957] lo speed is unknown, defaulting to 1000 [ 764.832438][T24957] wlan0 speed is unknown, defaulting to 1000 [ 764.893489][T24965] syzkaller0: tun_chr_ioctl cmd 35108 [ 765.411443][T24988] lo speed is unknown, defaulting to 1000 [ 765.440183][T24976] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4720'. [ 765.594808][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4726'. [ 765.644702][T24988] wlan0 speed is unknown, defaulting to 1000 [ 765.652450][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4726'. [ 766.111567][T25008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4728'. [ 766.543769][ T9219] net_ratelimit: 14 callbacks suppressed [ 766.543790][ T9219] bond2: (slave bridge3): failed to get link speed/duplex [ 766.714429][ T9219] bond2: (slave bridge3): failed to get link speed/duplex [ 766.913789][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 767.056551][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 767.174895][ T9219] bond2: (slave bridge3): failed to get link speed/duplex [ 767.228390][T25046] lo: Caught tx_queue_len zero misconfig [ 767.234960][T25045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4738'. [ 767.260638][T25050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4741'. [ 767.303786][ T9219] bond2: (slave bridge3): failed to get link speed/duplex [ 767.434172][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 767.555924][ T9219] bond2: (slave bridge3): failed to get link speed/duplex [ 767.575297][T25064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4746'. [ 767.618203][T25064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4746'. [ 767.676787][T25070] tipc: Enabled bearer , priority 0 [ 767.736270][ T9219] bond2: (slave bridge3): failed to get link speed/duplex [ 767.863802][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 767.892255][T25079] netlink: 'syz.3.4750': attribute type 5 has an invalid length. [ 768.101143][T25090] sctp: [Deprecated]: syz.0.4753 (pid 25090) Use of int in max_burst socket option. [ 768.101143][T25090] Use struct sctp_assoc_value instead [ 768.889768][T25120] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.949754][T25120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.359140][T25120] batman_adv: batadv0: Interface activated: veth0_to_bond [ 769.400838][T25120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.417484][T25120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.445532][T25120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 769.474090][T25120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 769.514233][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.521531][ T6184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.548683][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.556047][ T6184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.590789][ T6184] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 769.598172][ T6184] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 769.626614][T25134] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.826510][T25147] __nla_validate_parse: 6 callbacks suppressed [ 769.826549][T25147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4766'. [ 772.054408][ C0] net_ratelimit: 7 callbacks suppressed [ 772.054425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.104592][ T9219] bond2: (slave bridge3): failed to get link speed/duplex [ 772.242721][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 772.286905][T25154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4769'. [ 772.309797][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4770'. [ 772.417182][T25154] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 772.449275][T25154] bond8 (unregistering): Released all slaves [ 772.526445][T25171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4773'. [ 772.544795][T25161] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 772.552047][T25161] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 772.573082][ C0] IPv6: veth0_to_bridge: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 772.625274][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 772.806220][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 772.813938][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 772.824596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.858221][T25179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4777'. [ 772.886638][T25177] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 772.977990][T25177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4775'. [ 773.004138][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 773.125791][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 773.255707][T25194] ±ÿ: renamed from lo (while UP) [ 773.714752][T25218] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20000 [ 773.747062][T25181] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4776'. [ 773.822362][T25221] lo speed is unknown, defaulting to 1000 [ 773.843179][T25221] wlan0 speed is unknown, defaulting to 1000 [ 773.922057][T25226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4788'. [ 774.164117][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4790'. [ 774.207029][T25235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4790'. [ 774.327442][T25232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.346268][T25232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.482335][T25249] syz_tun: left promiscuous mode [ 775.037793][T25271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4800'. [ 775.084202][T25271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4800'. [ 775.192031][ T8896] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.224459][ T8896] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.243160][ T8896] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.267407][ T8896] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.439207][T25280] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4803'. [ 775.479972][T25280] 0·: renamed from hsr0 (while UP) [ 775.488197][T25288] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4805'. [ 775.517901][T25280] 0·: failed to rename [ 775.532577][T25280] 0·: entered allmulticast mode [ 775.557174][T25280] hsr_slave_0: entered allmulticast mode [ 775.585064][T25280] hsr_slave_1: entered allmulticast mode [ 776.062187][T25313] netlink: 'syz.3.4812': attribute type 58 has an invalid length. [ 776.083533][T25313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4812'. [ 776.437921][T25330] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4815'. [ 776.718010][T25340] sock: sock_timestamping_bind_phc: sock not bind to device [ 776.750845][T25347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4819'. [ 776.906626][T25347] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.914443][T25347] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.951792][T25347] dummy0: left promiscuous mode [ 776.966583][T25356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4820'. [ 776.979602][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4820'. [ 776.992444][T25361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4822'. [ 777.114187][ T6184] net_ratelimit: 25 callbacks suppressed [ 777.114208][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 777.234697][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 777.344040][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 777.454186][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 777.564188][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 777.674181][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 777.783854][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 777.894390][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 778.023787][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 778.144851][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 778.736067][T25406] lo speed is unknown, defaulting to 1000 [ 778.743934][T25406] wlan0 speed is unknown, defaulting to 1000 [ 778.995816][T25406] dvmrp0: entered allmulticast mode [ 779.011835][T25406] netlink: 'syz.0.4836': attribute type 15 has an invalid length. [ 779.615342][ T8907] dvmrp0: left allmulticast mode [ 779.872860][T25418] dummy0: left promiscuous mode [ 780.100760][T25427] __nla_validate_parse: 2 callbacks suppressed [ 780.100779][T25427] netlink: 480 bytes leftover after parsing attributes in process `syz.4.4839'. [ 780.121738][T25427] netlink: 480 bytes leftover after parsing attributes in process `syz.4.4839'. [ 780.183332][T25369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.329676][T25432] tipc: Failed to remove unknown binding: 66,1,1/2886997007:148339871/148339873 [ 780.346586][T25431] bond0: Caught tx_queue_len zero misconfig [ 780.438127][T25435] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4842'. [ 783.291932][ T6184] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.304399][ T6184] net_ratelimit: 22 callbacks suppressed [ 783.304417][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 783.319951][ T1172] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.332742][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4845'. [ 783.336362][ T1172] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.357415][ T1172] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.409043][T25446] netlink: 71 bytes leftover after parsing attributes in process `syz.3.4845'. [ 783.437698][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 783.511026][T25452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4848'. [ 783.554987][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 783.674163][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 783.794374][ T8896] bond2: (slave bridge3): failed to get link speed/duplex [ 783.805404][T25468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4852'. [ 783.915527][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 783.985546][T25478] bond10 (unregistering): Released all slaves [ 784.047382][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 784.164284][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 784.325627][ T9219] bond2: (slave bridge3): failed to get link speed/duplex [ 784.434340][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 784.956439][T25507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4860'. [ 786.779997][T25475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 786.789439][T25486] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4855'. [ 787.082455][T25515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4863'. [ 787.115705][T25518] lo speed is unknown, defaulting to 1000 [ 787.147753][T25523] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4864'. [ 787.178512][T25518] wlan0 speed is unknown, defaulting to 1000 [ 787.300276][T25532] netlink: 'syz.2.4866': attribute type 1 has an invalid length. [ 787.315983][T25517] ip6gre2: entered allmulticast mode [ 787.379783][ T6184] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 787.528276][T25532] bond10: option mode: invalid value (253) [ 787.537865][T25532] bond10 (unregistering): Released all slaves [ 787.568831][T25530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4868'. [ 787.751739][T25518] dvmrp0: entered allmulticast mode [ 787.794962][T25551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4871'. [ 787.861411][T25555] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4872'. [ 787.907156][ T8896] dvmrp0: left allmulticast mode [ 788.304661][T25566] netlink: 'syz.2.4874': attribute type 2 has an invalid length. [ 788.325895][ T8907] net_ratelimit: 27 callbacks suppressed [ 788.325916][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 788.360330][T25567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4875'. [ 788.435600][T25562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4873'. [ 788.519328][T25569] tipc: Enabled bearer , priority 0 [ 788.540549][T25562] syzkaller0: entered promiscuous mode [ 788.553218][T25562] syzkaller0: entered allmulticast mode [ 788.586085][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 788.702398][T25561] tipc: Resetting bearer [ 788.903049][T25561] tipc: Disabling bearer [ 789.020204][T25602] netlink: 'syz.2.4881': attribute type 1 has an invalid length. [ 789.066300][T25602] gretap2: entered allmulticast mode [ 789.164838][T25597] vlan4: entered promiscuous mode [ 789.199016][T25609] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 789.199016][T25609] Please contact the netfilter-devel mailing list or update your nftables rules. [ 789.245561][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 789.329661][T25611] netlink: 'syz.2.4885': attribute type 1 has an invalid length. [ 789.363777][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 789.475867][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 789.561883][T25620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4886'. [ 789.574348][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4888'. [ 789.777636][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 790.054583][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 790.175771][ T6184] bond2: (slave bridge3): failed to get link speed/duplex [ 790.333055][ T6184] tipc: Subscription rejected, illegal request [ 790.393731][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 790.413370][T25654] bridge0: entered allmulticast mode [ 790.470584][T25650] ip6gretap0: left allmulticast mode [ 790.476657][T25650] ip6gretap0: left promiscuous mode [ 790.483918][T25650] bridge0: port 3(ip6gretap0) entered disabled state [ 790.512111][T25650] syz_tun: left promiscuous mode [ 790.517722][T25650] bridge0: port 2(syz_tun) entered disabled state [ 790.532352][T25650] bridge_slave_0: left allmulticast mode [ 790.538797][T25650] bridge_slave_0: left promiscuous mode [ 790.548598][T25650] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.680444][T25667] tap0: tun_chr_ioctl cmd 1074025692 [ 790.698108][T25669] vxcan0: entered allmulticast mode [ 790.743086][T25669] vxcan2: entered allmulticast mode [ 790.784154][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 791.330347][T25701] sctp: [Deprecated]: syz.2.4910 (pid 25701) Use of int in maxseg socket option. [ 791.330347][T25701] Use struct sctp_assoc_value instead [ 791.675112][T25711] netlink: 'syz.3.4913': attribute type 13 has an invalid length. [ 791.682883][T25716] nbd: socks must be embedded in a SOCK_ITEM attr [ 791.774585][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 791.948142][T25726] __nla_validate_parse: 7 callbacks suppressed [ 791.948165][T25726] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4913'. [ 792.282167][T25735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4917'. [ 792.911118][T25766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4924'. [ 793.141786][T25770] netlink: 'syz.1.4927': attribute type 1 has an invalid length. [ 793.293850][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 793.319168][T25770] 8021q: adding VLAN 0 to HW filter on device bond8 [ 793.355669][T25770] netlink: 'syz.1.4927': attribute type 10 has an invalid length. [ 793.368828][T25788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4930'. [ 793.383261][T25770] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4927'. [ 793.411440][T25774] bond8: (slave veth5): Enslaving as an active interface with a down link [ 793.462819][T25781] dummy0: left promiscuous mode [ 793.500754][T25781] bond8: (slave dummy0): making interface the new active one [ 793.512314][T25781] dummy0: entered promiscuous mode [ 793.522148][T25781] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 793.667429][T25770] bond8: (slave dummy0): Releasing active interface [ 793.766033][ T1172] net_ratelimit: 16 callbacks suppressed [ 793.766053][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 793.906394][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 794.000918][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4935'. [ 794.012278][T25819] netlink: 'syz.0.4936': attribute type 83 has an invalid length. [ 794.039202][T25816] netlink: 'syz.4.4934': attribute type 4 has an invalid length. [ 794.051441][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 794.060434][T25816] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4934'. [ 794.075436][T25818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'. [ 794.092435][T25816] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 794.163993][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 794.287295][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 794.409782][T25816] xt_CT: No such helper "netbios-ns" [ 794.417239][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 794.770061][T25838] 8021q: adding VLAN 0 to HW filter on device bond10 [ 794.800885][ T1172] bond2: (slave bridge3): failed to get link speed/duplex [ 794.944393][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 794.949396][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4944'. [ 795.063446][T25858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4945'. [ 795.094799][ T6186] bond2: (slave bridge3): failed to get link speed/duplex [ 795.725712][T25893] block nbd1: Unsupported socket: should be TCP or UNIX. [ 797.023220][T25936] __nla_validate_parse: 9 callbacks suppressed [ 797.023239][T25936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4966'. [ 797.508919][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4974'. [ 797.600897][T25976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4976'. [ 797.873194][T25983] lo speed is unknown, defaulting to 1000 [ 797.914807][T25983] wlan0 speed is unknown, defaulting to 1000 [ 798.034739][T25981] netlink: 'syz.4.4978': attribute type 11 has an invalid length. [ 798.196422][T26003] tipc: Resetting bearer [ 798.283055][T26005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4984'. [ 798.301742][T26003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4983'. [ 798.389681][T26003] ip6tnl2: entered promiscuous mode [ 798.699545][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4990'. [ 798.768510][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 798.857756][T26031] lo speed is unknown, defaulting to 1000 [ 798.880193][T26031] wlan0 speed is unknown, defaulting to 1000 [ 798.928208][T26045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4992'. [ 799.048910][T26047] ip6tnl3: entered allmulticast mode [ 799.115696][ T12] net_ratelimit: 26 callbacks suppressed [ 799.115714][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 799.218431][ T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 799.238869][ T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 799.248233][T21613] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 799.273218][T26061] tipc: Enabling of bearer rejected, already enabled [ 799.305855][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 799.315662][T26061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4996'. [ 799.342080][T26061] openvswitch: netlink: Flow actions attr not present in new flow. [ 799.392266][T26065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.435740][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 799.480526][T26070] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1514) ! [ 799.499629][T26068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.509044][T26070] tipc: Resetting bearer [ 799.510593][T26070] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4996'. [ 799.564075][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 799.673679][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 799.690306][T26085] netlink: 'syz.1.5002': attribute type 2 has an invalid length. [ 799.768241][T26085] batadv0: entered promiscuous mode [ 799.782524][T26085] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 799.846069][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 799.974739][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 800.013962][T21613] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 800.096223][ T9635] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 800.114526][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 800.133900][T26094] lo speed is unknown, defaulting to 1000 [ 800.202339][T26094] wlan0 speed is unknown, defaulting to 1000 [ 800.318021][T26105] netlink: 'syz.0.5008': attribute type 62 has an invalid length. [ 800.546926][T26111] netlink: 'syz.4.5009': attribute type 1 has an invalid length. [ 800.719203][T26111] 8021q: adding VLAN 0 to HW filter on device bond6 [ 800.973815][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 801.278090][T26091] dvmrp0: entered allmulticast mode [ 803.534791][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 803.613799][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 804.213793][ T12] net_ratelimit: 33 callbacks suppressed [ 804.213817][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 804.334410][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 804.444218][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 804.553893][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 804.663872][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 804.774244][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 804.884437][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 804.994061][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 805.104149][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 805.215084][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 809.294634][T19054] net_ratelimit: 36 callbacks suppressed [ 809.294656][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 809.414251][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 809.523890][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 809.633952][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 809.744348][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 809.853926][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 809.964101][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 810.073998][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 810.183845][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 810.294066][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 812.494071][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 813.774188][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 814.364271][ T13] net_ratelimit: 36 callbacks suppressed [ 814.364291][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 814.483859][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 814.594015][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 814.703930][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 814.813961][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 814.924064][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 815.033712][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 815.143743][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 815.254023][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 815.364071][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 818.253842][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 819.434180][T19054] net_ratelimit: 36 callbacks suppressed [ 819.434204][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 819.554055][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 819.663766][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 819.774852][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 819.884320][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 819.993782][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 820.103711][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 820.214114][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 820.323849][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 820.433731][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 824.513724][ T49] net_ratelimit: 36 callbacks suppressed [ 824.513747][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 824.633775][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 824.744402][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 824.853873][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 824.964213][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 825.074099][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 825.184091][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 825.294430][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 825.404337][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 825.513795][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 826.619547][T26151] __nla_validate_parse: 6 callbacks suppressed [ 826.619569][T26151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5019'. [ 826.626211][T26144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5017'. [ 826.692768][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5021'. [ 826.775824][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.787275][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5021'. [ 826.812575][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.837060][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.864396][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.720056][T26208] 8021q: VLANs not supported on sit0 [ 828.091103][T26218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5035'. [ 828.131263][T26210] syzkaller0: entered allmulticast mode [ 828.274659][T26220] netlink: 'syz.2.5036': attribute type 15 has an invalid length. [ 828.303653][T26220] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5036'. [ 829.006273][T26244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5042'. [ 829.138654][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 829.156385][T26242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5043'. [ 829.452806][T26254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5044'. [ 829.610234][T26258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5046'. [ 830.388865][ T5621] block nbd1: Receive control failed (result -32) [ 831.683659][ T49] net_ratelimit: 28 callbacks suppressed [ 831.683678][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 831.710198][T26254] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 831.822736][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 831.982085][T26279] nbd: socks must be embedded in a SOCK_ITEM attr [ 832.025433][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 832.116283][T26283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.164379][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 832.189470][T26283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.252635][T26283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.282834][T26293] __nla_validate_parse: 1 callbacks suppressed [ 832.282933][T26293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5056'. [ 832.300971][T26283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.313179][T26283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.325345][T26293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5056'. [ 832.337780][T26283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.422894][T26293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5056'. [ 832.514640][T26303] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5060'. [ 832.709959][T26313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5062'. [ 832.731060][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5064'. [ 832.863442][T26325] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5066'. [ 832.914944][T26320] smbdirect: ib_dev[syz2] removed [ 833.410136][T26349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5072'. [ 833.696226][T26360] netlink: 'syz.1.5074': attribute type 1 has an invalid length. [ 833.723715][T26360] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5074'. [ 833.751054][T26360] netlink: 'syz.1.5074': attribute type 1 has an invalid length. [ 833.770504][T26360] netlink: 29 bytes leftover after parsing attributes in process `syz.1.5074'. [ 834.508125][T26387] netlink: 'syz.0.5080': attribute type 2 has an invalid length. [ 834.570881][T26387] : entered promiscuous mode [ 834.584836][T26385] wlan0 speed is unknown, defaulting to 1000 [ 834.845748][T26402] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 834.968456][T26414] netlink: 'syz.0.5086': attribute type 1 has an invalid length. [ 835.148900][T26419] batman_adv: batadv0: Interface deactivated: veth0_to_bond [ 835.186588][T26419] batman_adv: batadv0: Removing interface: veth0_to_bond [ 835.203188][T26419] bond4: (slave veth0_to_bond): making interface the new active one [ 835.217995][T26419] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 835.288849][T26404] bond4: entered promiscuous mode [ 835.294930][T26404] veth0_to_bond: entered promiscuous mode [ 835.301002][T26404] bond4: entered allmulticast mode [ 835.307478][T26404] veth0_to_bond: entered allmulticast mode [ 835.539841][T26436] netlink: 'syz.1.5093': attribute type 1 has an invalid length. [ 835.663830][T26436] 8021q: adding VLAN 0 to HW filter on device bond9 [ 835.709903][T26449] tipc: Enabling of bearer rejected, failed to enable media [ 835.821899][T26449] netlink: 'syz.1.5093': attribute type 10 has an invalid length. [ 836.161934][T26436] syzkaller1: entered promiscuous mode [ 836.183112][T26436] syzkaller1: entered allmulticast mode [ 836.407347][T26469] block nbd3: Unsupported socket: should be TCP or UNIX. [ 836.627188][T26483] wlan0 speed is unknown, defaulting to 1000 [ 837.135747][ T6191] net_ratelimit: 29 callbacks suppressed [ 837.135764][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 837.506374][T26530] __nla_validate_parse: 17 callbacks suppressed [ 837.506391][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5110'. [ 837.510393][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 837.652598][T26530] 8021q: adding VLAN 0 to HW filter on device bond12 [ 837.696566][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 837.804409][T26535] netlink: 'syz.0.5111': attribute type 1 has an invalid length. [ 837.815427][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 837.925408][T26535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 837.937455][T26543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 837.963409][T26544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 837.970699][T26544] bond5: (slave nlmon0): The slave device specified does not support setting the MAC address [ 837.981866][T26544] bond5: (slave nlmon0): Error -95 calling set_mac_address [ 837.992171][T26524] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5109'. [ 838.002907][T26543] netlink: 'syz.3.5113': attribute type 21 has an invalid length. [ 838.024385][T26550] netlink: 'syz.1.5114': attribute type 49 has an invalid length. [ 838.038727][T26543] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5113'. [ 838.052610][T26543] netlink: 'syz.3.5113': attribute type 4 has an invalid length. [ 838.060596][T26543] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5113'. [ 838.070219][T26525] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5109'. [ 838.079811][T26535] bond5: entered promiscuous mode [ 838.085593][T26535] bond5: entered allmulticast mode [ 838.104377][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 838.235114][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 838.344188][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 838.453987][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 838.523509][T26566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5119'. [ 838.574396][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 838.592901][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5120'. [ 838.932448][ T30] audit: type=1800 audit(1785015132.738:8): pid=26589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5126" name="memory.events" dev="tmpfs" ino=1954 res=0 errno=0 [ 838.997653][T26593] IPv6: NLM_F_CREATE should be specified when creating new route [ 839.045100][T26593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5125'. [ 839.074819][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5125'. [ 839.102010][T26593] validate_nla: 2 callbacks suppressed [ 839.102028][T26593] netlink: 'syz.3.5125': attribute type 2 has an invalid length. [ 839.139671][T26593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5125'. [ 839.376437][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.507300][T26613] netlink: 'syz.4.5130': attribute type 10 has an invalid length. [ 839.611310][T26618] nbd: socks must be embedded in a SOCK_ITEM attr [ 840.002314][T26639] wlan0 speed is unknown, defaulting to 1000 [ 840.131476][T26642] dvmrp0: entered allmulticast mode [ 840.283319][T26642] netlink: 'syz.4.5137': attribute type 13 has an invalid length. [ 840.898828][T26681] FAULT_INJECTION: forcing a failure. [ 840.898828][T26681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.923265][T26681] CPU: 1 UID: 0 PID: 26681 Comm: syz.4.5147 Not tainted syzkaller #0 PREEMPT(full) [ 840.923303][T26681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 840.923318][T26681] Call Trace: [ 840.923328][T26681] [ 840.923337][T26681] dump_stack_lvl+0xe8/0x150 [ 840.923379][T26681] should_fail_ex+0x40c/0x560 [ 840.923509][T26681] _copy_from_user+0x2d/0xb0 [ 840.923567][T26681] ___sys_sendmsg+0x1c6/0x360 [ 840.923632][T26681] ? __lock_acquire+0x683/0x2cf0 [ 840.923672][T26681] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.923747][T26681] ? __fget_files+0x2a/0x420 [ 840.923779][T26681] ? __fget_files+0x3a2/0x420 [ 840.923824][T26681] __x64_sys_sendmsg+0x1b1/0x290 [ 840.923857][T26681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.923910][T26681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.923937][T26681] do_syscall_64+0x174/0x580 [ 840.924003][T26681] ? clear_bhb_loop+0x40/0x90 [ 840.924033][T26681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.924058][T26681] RIP: 0033:0x7fbf0ad9de99 [ 840.924080][T26681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.924100][T26681] RSP: 002b:00007fbf0bb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.924125][T26681] RAX: ffffffffffffffda RBX: 00007fbf0b025fa0 RCX: 00007fbf0ad9de99 [ 840.924143][T26681] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 840.924158][T26681] RBP: 00007fbf0bb86090 R08: 0000000000000000 R09: 0000000000000000 [ 840.924189][T26681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.924204][T26681] R13: 00007fbf0b026038 R14: 00007fbf0b025fa0 R15: 00007ffc92491858 [ 840.924245][T26681] [ 841.143329][T26676] netlink: 'syz.0.5145': attribute type 4 has an invalid length. [ 842.146996][ T13] net_ratelimit: 24 callbacks suppressed [ 842.147019][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 842.304444][T19054] bond2: (slave bridge3): failed to get link speed/duplex [ 842.476468][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 842.649791][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 842.689780][T26745] FAULT_INJECTION: forcing a failure. [ 842.689780][T26745] name failslab, interval 1, probability 0, space 0, times 0 [ 842.729680][T26745] CPU: 1 UID: 0 PID: 26745 Comm: syz.0.5159 Not tainted syzkaller #0 PREEMPT(full) [ 842.729717][T26745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 842.729731][T26745] Call Trace: [ 842.729739][T26745] [ 842.729748][T26745] dump_stack_lvl+0xe8/0x150 [ 842.729785][T26745] should_fail_ex+0x40c/0x560 [ 842.729817][T26745] should_failslab+0xa8/0x100 [ 842.729851][T26745] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 842.729878][T26745] ? local_lock_release+0x9c/0x160 [ 842.729983][T26745] ? __alloc_skb+0x1d7/0x7a0 [ 842.730002][T26745] ? __alloc_skb+0x1d7/0x7a0 [ 842.730030][T26745] __alloc_skb+0x1d7/0x7a0 [ 842.730057][T26745] netlink_sendmsg+0x5d4/0xb40 [ 842.730122][T26745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.730153][T26745] ? aa_sock_msg_perm+0xf1/0x1b0 [ 842.730212][T26745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.730236][T26745] sock_sendmsg_nosec+0x13a/0x180 [ 842.730269][T26745] ____sys_sendmsg+0x54e/0x850 [ 842.730312][T26745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.730343][T26745] ? import_iovec+0x73/0xa0 [ 842.730406][T26745] ___sys_sendmsg+0x2a5/0x360 [ 842.730428][T26745] ? __lock_acquire+0x683/0x2cf0 [ 842.730459][T26745] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.730517][T26745] ? __fget_files+0x2a/0x420 [ 842.730543][T26745] ? __fget_files+0x3a2/0x420 [ 842.730581][T26745] __x64_sys_sendmsg+0x1b1/0x290 [ 842.730607][T26745] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 842.730649][T26745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.730671][T26745] do_syscall_64+0x174/0x580 [ 842.730702][T26745] ? trace_irq_disable+0x3b/0x140 [ 842.730729][T26745] ? clear_bhb_loop+0x40/0x90 [ 842.730753][T26745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.730773][T26745] RIP: 0033:0x7ffb06f9de99 [ 842.730791][T26745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.730808][T26745] RSP: 002b:00007ffb07e82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.730829][T26745] RAX: ffffffffffffffda RBX: 00007ffb07225fa0 RCX: 00007ffb06f9de99 [ 842.730844][T26745] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 842.730856][T26745] RBP: 00007ffb07e82090 R08: 0000000000000000 R09: 0000000000000000 [ 842.730868][T26745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.730879][T26745] R13: 00007ffb07226038 R14: 00007ffb07225fa0 R15: 00007ffde40e4cd8 [ 842.730910][T26745] [ 843.007543][T26746] wlan0 speed is unknown, defaulting to 1000 [ 843.138854][T26742] __nla_validate_parse: 11 callbacks suppressed [ 843.138873][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5158'. [ 843.154921][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 843.172775][T26742] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5158'. [ 843.188300][T26742] geneve0: entered promiscuous mode [ 843.206723][T26742] geneve0: entered allmulticast mode [ 843.266163][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 843.298696][T26760] xt_hashlimit: size too large, truncated to 1048576 [ 843.383379][T26765] netlink: 'syz.0.5163': attribute type 1 has an invalid length. [ 843.457549][T26770] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5163'. [ 843.731629][T26765] 8021q: adding VLAN 0 to HW filter on device bond7 [ 843.825155][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 843.964634][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 844.184118][ T8907] bond2: (slave bridge3): failed to get link speed/duplex [ 844.190198][T26800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5167'. [ 844.251624][T26801] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode [ 844.285177][T26801] mac80211_hwsim hwsim48 syzkaller0: left allmulticast mode [ 844.320633][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 844.464193][T26811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5172'. [ 844.823253][T26825] syzkaller0: entered promiscuous mode [ 844.868540][T26825] syzkaller0: entered allmulticast mode [ 845.922316][T26865] tipc: Enabling of bearer rejected, failed to enable media [ 846.631266][T26886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5185'. [ 846.847431][T26854] scsi_nl_rcv_msg: discarding partial skb [ 848.865712][T26875] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 849.123012][T26904] bond10: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 849.135465][T26904] bond10: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 849.159444][T26904] bond10: entered allmulticast mode [ 849.230425][T26914] netlink: 'syz.0.5192': attribute type 5 has an invalid length. [ 849.323678][ T49] net_ratelimit: 10 callbacks suppressed [ 849.323697][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 849.481539][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 849.511113][T26922] netlink: 'syz.4.5194': attribute type 3 has an invalid length. [ 849.627020][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 849.715901][T26938] FAULT_INJECTION: forcing a failure. [ 849.715901][T26938] name failslab, interval 1, probability 0, space 0, times 0 [ 849.754149][T26938] CPU: 0 UID: 0 PID: 26938 Comm: syz.1.5197 Not tainted syzkaller #0 PREEMPT(full) [ 849.754183][T26938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 849.754197][T26938] Call Trace: [ 849.754207][T26938] [ 849.754218][T26938] dump_stack_lvl+0xe8/0x150 [ 849.754260][T26938] should_fail_ex+0x40c/0x560 [ 849.754297][T26938] should_failslab+0xa8/0x100 [ 849.754338][T26938] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 849.754367][T26938] ? local_lock_release+0x9c/0x160 [ 849.754395][T26938] ? __alloc_skb+0x1d7/0x7a0 [ 849.754416][T26938] ? __alloc_skb+0x1d7/0x7a0 [ 849.754448][T26938] __alloc_skb+0x1d7/0x7a0 [ 849.754488][T26938] netlink_ack+0x136/0xb30 [ 849.754526][T26938] ? __pfx___up_read+0x10/0x10 [ 849.754566][T26938] rdma_nl_rcv+0x40a/0xa40 [ 849.754695][T26938] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 849.754750][T26938] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.754778][T26938] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.754815][T26938] netlink_unicast+0x7bb/0x940 [ 849.754854][T26938] netlink_sendmsg+0x813/0xb40 [ 849.754897][T26938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.754932][T26938] ? aa_sock_msg_perm+0xf1/0x1b0 [ 849.754966][T26938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.754996][T26938] sock_sendmsg_nosec+0x13a/0x180 [ 849.755035][T26938] ____sys_sendmsg+0x54e/0x850 [ 849.755069][T26938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.755110][T26938] ? import_iovec+0x73/0xa0 [ 849.755151][T26938] ___sys_sendmsg+0x2a5/0x360 [ 849.755177][T26938] ? __lock_acquire+0x683/0x2cf0 [ 849.755215][T26938] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.755289][T26938] ? __fget_files+0x2a/0x420 [ 849.755321][T26938] ? __fget_files+0x3a2/0x420 [ 849.755367][T26938] __x64_sys_sendmsg+0x1b1/0x290 [ 849.755399][T26938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.755451][T26938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.755485][T26938] do_syscall_64+0x174/0x580 [ 849.755513][T26938] ? trace_irq_disable+0x3b/0x140 [ 849.755545][T26938] ? clear_bhb_loop+0x40/0x90 [ 849.755575][T26938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.755599][T26938] RIP: 0033:0x7fa2b439de99 [ 849.755621][T26938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.755643][T26938] RSP: 002b:00007fa2b51e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.755669][T26938] RAX: ffffffffffffffda RBX: 00007fa2b4625fa0 RCX: 00007fa2b439de99 [ 849.755686][T26938] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 849.755702][T26938] RBP: 00007fa2b51e9090 R08: 0000000000000000 R09: 0000000000000000 [ 849.755717][T26938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.755731][T26938] R13: 00007fa2b4626038 R14: 00007fa2b4625fa0 R15: 00007ffdb23cdcf8 [ 849.755771][T26938] [ 850.040736][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 850.064764][T26941] netlink: 'syz.4.5200': attribute type 3 has an invalid length. [ 850.158113][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 850.284174][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 850.675268][T26983] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5210'. [ 850.713742][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 850.794479][T26967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 850.844454][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 851.039556][T26967] syzkaller0: entered promiscuous mode [ 851.051930][T26967] syzkaller0: entered allmulticast mode [ 851.063806][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 851.393832][T27007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5218'. [ 851.599834][T27021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'. [ 851.599851][T27017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'. [ 851.853004][T27024] netlink: 'syz.3.5222': attribute type 58 has an invalid length. [ 851.862196][T27024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5222'. [ 853.947807][T27032] netlink: 'syz.4.5224': attribute type 1 has an invalid length. [ 854.134291][T27043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5228'. [ 854.332207][T27038] syzkaller0: entered promiscuous mode [ 854.347410][T27038] syzkaller0: entered allmulticast mode [ 854.374402][ T49] net_ratelimit: 12 callbacks suppressed [ 854.374422][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 856.964289][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 857.155296][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 857.206423][T27087] ip6gre3: entered promiscuous mode [ 857.230831][T27087] ip6gre3: entered allmulticast mode [ 857.258829][T19052] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 857.311167][T19052] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 857.321939][T21613] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 857.421229][T21613] IPVS: starting estimator thread 0... [ 857.545814][T27093] bond11: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 857.565883][T27108] IPVS: using max 27 ests per chain, 64800 per kthread [ 857.611752][T27093] bond11 (unregistering): Released all slaves [ 857.765190][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 857.895069][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 858.039944][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 858.094737][T21613] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 858.226859][T27145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5246'. [ 858.236273][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 858.254777][T21613] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 858.564824][T27158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5249'. [ 858.625536][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 858.767047][T27172] xt_hashlimit: max too large, truncated to 1048576 [ 858.784671][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 858.844472][T27175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5252'. [ 858.914179][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 859.069969][T27187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5255'. [ 859.273115][ T30] audit: type=1107 audit(1785015153.078:9): pid=27193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!K½2šúÿkZºÑÝ, priority 0 [ 861.201625][T27266] tipc: Disabling bearer [ 861.213736][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 861.352261][T27280] netlink: 'syz.2.5273': attribute type 1 has an invalid length. [ 861.405977][T27280] 8021q: adding VLAN 0 to HW filter on device bond11 [ 861.444999][T27281] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5273'. [ 861.533443][T27280] bond11: (slave veth0_to_bond): making interface the new active one [ 861.559441][T27280] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 861.626840][T27287] macvlan1: entered promiscuous mode [ 861.632488][T27287] macvlan1: entered allmulticast mode [ 861.639979][T27287] bond11: entered promiscuous mode [ 861.646238][T27287] veth0_to_bond: entered promiscuous mode [ 861.659186][T27287] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 861.674409][T27289] netlink: 'syz.1.5275': attribute type 1 has an invalid length. [ 861.684607][T27287] bond11: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 861.785385][T27287] bond11: left promiscuous mode [ 861.801986][T27287] veth0_to_bond: left promiscuous mode [ 861.883531][T27281] macvlan1: entered promiscuous mode [ 861.899902][T27281] macvlan1: entered allmulticast mode [ 861.912485][T27281] bond11: entered promiscuous mode [ 861.926794][T27281] veth0_to_bond: entered promiscuous mode [ 861.942035][T27281] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 861.959823][T27281] bond11: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 861.999795][T27281] bond11: left promiscuous mode [ 862.028802][T27281] veth0_to_bond: left promiscuous mode [ 863.144638][T27342] gretap0: entered promiscuous mode [ 863.205176][T27342] 0ªî{X¹¦: renamed from gretap0 [ 863.264802][T27342] 0ªî{X¹¦: left promiscuous mode [ 863.302573][T27342] 0ªî{X¹¦: entered allmulticast mode [ 863.346107][T27348] __nla_validate_parse: 4 callbacks suppressed [ 863.346126][T27348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5286'. [ 863.543486][T27344] syzkaller0: entered promiscuous mode [ 863.559097][T27344] syzkaller0: entered allmulticast mode [ 863.580657][T27347] netlink: 'syz.0.5285': attribute type 2 has an invalid length. [ 863.645692][T27354] wlan0 speed is unknown, defaulting to 1000 [ 865.053046][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5292'. [ 865.109498][T27388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5292'. [ 867.048607][T27387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.105301][T19052] bond0: (slave veth5): link status definitely down, disabling slave [ 867.141049][T19052] bond0: now running without any active interface! [ 867.195535][T19052] net_ratelimit: 19 callbacks suppressed [ 867.195554][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 867.344019][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 867.476489][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 867.603806][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 867.725628][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 867.755837][T27412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5296'. [ 867.804045][T27412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5296'. [ 867.893983][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 868.025075][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 868.143712][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 868.456890][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 868.581939][T27436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5304'. [ 868.601598][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 868.752811][T27447] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5303'. [ 868.977503][T27454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5309'. [ 869.000434][T27452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5308'. [ 869.076921][T27452] bond0: (slave bond_slave_1): Releasing backup interface [ 869.090210][T27452] bond_slave_1 (unregistering): left promiscuous mode [ 869.261988][T27464] netlink: 'syz.2.5313': attribute type 12 has an invalid length. [ 869.320988][T27462] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.402456][T27469] netlink: 'syz.1.5315': attribute type 1 has an invalid length. [ 869.419408][T27469] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5315'. [ 869.429600][T27469] netlink: 'syz.1.5315': attribute type 1 has an invalid length. [ 869.453829][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 869.480535][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.501452][T27470] batadv_slave_1: entered promiscuous mode [ 869.558457][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5313'. [ 869.585294][T27467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.610928][T27474] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 869.796572][T27476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5316'. [ 869.808556][T27476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5316'. [ 869.819812][T27476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5316'. [ 869.832248][T27467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.944501][T27463] batadv_slave_1: left promiscuous mode [ 870.022705][T27467] bond0: (slave netdevsim1): Releasing backup interface [ 870.052731][T27467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.069759][T27490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5319'. [ 870.201313][T27496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 870.249246][T27467] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.325773][T27504] netlink: 'syz.1.5323': attribute type 1 has an invalid length. [ 870.338445][T27494] wlan0 speed is unknown, defaulting to 1000 [ 870.370058][T27500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 870.519161][T27504] bridge20: entered promiscuous mode [ 870.536889][T27504] bond12: (slave bridge20): making interface the new active one [ 870.545770][T27504] bond12: (slave bridge20): Enslaving as an active interface with an up link [ 870.550947][T27507] IPv6: Can't replace route, no match found [ 870.637127][T27504] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 871.327929][ T8901] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.390479][ T8901] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.435917][T27513] wlan0 speed is unknown, defaulting to 1000 [ 871.592594][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.000705][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.253826][ T6191] net_ratelimit: 16 callbacks suppressed [ 872.253849][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 872.558685][T27571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.621958][T27571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 872.661989][T27571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.791631][T27593] netlink: 'syz.2.5336': attribute type 39 has an invalid length. [ 872.818651][T27588] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 872.960852][T27571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.972678][T27571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 872.985997][T27571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.236599][T27571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.271756][T27571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 873.284890][T27571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.343879][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 873.448655][T27571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.470116][T27571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 873.502692][T27571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.554707][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 873.574748][T27605] netlink: 'syz.0.5341': attribute type 1 has an invalid length. [ 873.639071][T27605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 873.686733][T27614] bond8: (slave veth11): Enslaving as an active interface with a down link [ 873.712155][T27605] __nla_validate_parse: 4 callbacks suppressed [ 873.712174][T27605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5341'. [ 873.728900][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 873.839508][ T6191] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.857023][ T6191] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 873.880879][ T6191] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.917402][T27619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5344'. [ 873.939852][ T8908] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.948961][ T8908] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 873.955611][T27621] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5345'. [ 873.961175][ T8908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.991672][T27621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5345'. [ 874.012368][ T8901] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.020763][ T8901] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 874.034062][ T8901] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.064004][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 874.093139][ T6191] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.105209][ T6191] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 874.113453][ T6191] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.185156][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 874.352891][T27635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.559380][T27627] tipc: Resetting bearer [ 874.650481][ T49] netdevsim netdevsim3 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.660511][ T49] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.671951][ T49] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.682805][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.692756][ T49] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.702345][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.711837][ T49] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.721510][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.734261][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 874.844078][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 874.911539][T27648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5353'. [ 874.954539][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 875.353168][T27667] syzkaller0: entered promiscuous mode [ 875.359171][T27667] syzkaller0: entered allmulticast mode [ 875.365550][T27669] netlink: 'syz.1.5358': attribute type 1 has an invalid length. [ 875.447956][T27669] 8021q: adding VLAN 0 to HW filter on device bond14 [ 875.476341][T27674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5358'. [ 875.499117][T27674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5358'. [ 875.597105][T27669] tipc: Enabling of bearer rejected, failed to enable media [ 875.610340][T27669] netlink: 'syz.1.5358': attribute type 10 has an invalid length. [ 875.621322][T27669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5358'. [ 875.675384][T27669] syzkaller1: entered promiscuous mode [ 875.693294][T27669] syzkaller1: entered allmulticast mode [ 876.033942][T27689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5363'. [ 876.060437][T27689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5363'. [ 877.150637][T27700] tipc: Enabling of bearer rejected, already enabled [ 877.185648][T27701] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 877.218703][T27701] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 877.277784][T27713] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.433696][ T8901] net_ratelimit: 19 callbacks suppressed [ 877.433716][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 877.480430][T27725] netlink: 'syz.1.5374': attribute type 21 has an invalid length. [ 877.499943][T27713] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.614803][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 877.678966][T27713] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.714995][T27732] tipc: Enabled bearer , priority 0 [ 877.842909][T27732] tipc: Resetting bearer [ 877.864187][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 877.887782][T27733] lo: Caught tx_queue_len zero misconfig [ 877.911131][T27713] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.929624][T27731] tipc: Resetting bearer [ 877.999136][T27750] netlink: 'syz.3.5379': attribute type 10 has an invalid length. [ 880.383362][T27731] tipc: Disabling bearer [ 880.394120][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 880.401716][T27750] dummy0: entered promiscuous mode [ 880.419409][T21613] tipc: Node number set to 1321871457 [ 880.487503][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.504051][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 880.520382][ T8901] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.538363][ T8901] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.555870][ T8901] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.567480][T27765] netlink: 'syz.4.5381': attribute type 3 has an invalid length. [ 880.577491][T27765] netlink: 'syz.4.5381': attribute type 1 has an invalid length. [ 880.587444][T27765] netlink: 'syz.4.5381': attribute type 2 has an invalid length. [ 880.624084][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 880.701683][T27769] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 880.711038][T27769] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.718701][T27769] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.731209][T27769] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 880.738553][T27769] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 880.746233][T27769] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.753403][T27769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.760956][T27769] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.768192][T27769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.782197][T27769] team0: Port device bridge0 added [ 880.793008][T27736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.806069][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 880.944681][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 881.054064][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 881.096811][T27780] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 881.175687][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 881.350085][T27796] __nla_validate_parse: 9 callbacks suppressed [ 881.350104][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5392'. [ 881.425597][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5394'. [ 881.439170][T27802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5394'. [ 881.636476][T27809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5395'. [ 881.841458][T27812] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 881.848901][T27812] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.856220][T27812] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.263077][T27812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.352388][T27812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.509371][T27839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5400'. [ 882.895093][ T8908] net_ratelimit: 11 callbacks suppressed [ 882.895115][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 882.935358][T27830] mac80211_hwsim hwsim48 syzkaller0: Caught tx_queue_len zero misconfig [ 882.979727][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.018714][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.077319][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.096927][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.231147][T27853] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5404'. [ 883.294146][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 883.407178][T27860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5406'. [ 883.416417][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 883.583266][T27867] syzkaller0: entered promiscuous mode [ 883.590692][T27867] syzkaller0: entered allmulticast mode [ 883.643819][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 884.521330][T27880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5410'. [ 884.562581][T27880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5410'. [ 885.454166][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 887.701549][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5409'. [ 887.731655][T27880] macsec1: entered promiscuous mode [ 887.743018][T27880] batadv0: entered promiscuous mode [ 887.762111][T27880] macsec1: entered allmulticast mode [ 887.767782][T27880] batadv0: entered allmulticast mode [ 887.778827][T27880] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 887.819552][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 887.860764][T27913] syzkaller0: entered promiscuous mode [ 887.876109][T27913] syzkaller0: entered allmulticast mode [ 887.920413][T27913] tipc: Resetting bearer [ 887.996045][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 888.019532][T27918] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5417'. [ 888.175065][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 888.297029][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 888.386941][T27942] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5425'. [ 888.414802][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 888.448360][T27945] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5426'. [ 888.472721][T27945] netlink: 'syz.0.5426': attribute type 9 has an invalid length. [ 888.488367][T27945] netlink: 'syz.0.5426': attribute type 1 has an invalid length. [ 888.523998][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 888.540974][T27952] netlink: 'syz.2.5427': attribute type 13 has an invalid length. [ 888.743875][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 888.765280][ T810] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 888.808302][ T810] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 888.875429][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 888.963181][T27966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5430'. [ 889.014298][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 889.074791][T27973] mac80211_hwsim hwsim48 syzkaller0: Caught tx_queue_len zero misconfig [ 889.105171][T27971] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5429'. [ 889.158826][T27984] netlink: 444 bytes leftover after parsing attributes in process `syz.0.5428'. [ 889.168889][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 889.172453][T27982] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5433'. [ 889.207846][T27982] netlink: 'syz.1.5433': attribute type 10 has an invalid length. [ 889.232292][T27982] dummy0: left promiscuous mode [ 889.262341][T27982] dummy0: entered allmulticast mode [ 889.284281][T27982] team0: Port device dummy0 added [ 889.306146][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 889.373026][T27994] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5436'. [ 889.545989][ T810] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 889.696632][ T810] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 890.785049][T28051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5448'. [ 890.952938][ T49] team0: left allmulticast mode [ 890.967290][ T49] veth3: left allmulticast mode [ 890.982483][ T49] veth5: left allmulticast mode [ 890.994110][ T49] bridge19: left allmulticast mode [ 891.005085][ T49] team0: left promiscuous mode [ 891.018291][ T49] veth3: left promiscuous mode [ 891.036453][ T49] veth5: left promiscuous mode [ 891.060848][ T49] bridge0: port 1(team0) entered disabled state [ 891.296484][ T49] pim6reg99999999: left allmulticast mode [ 891.303827][ T49] dvmrp0: left allmulticast mode [ 891.486977][ T49] batman_adv: batadv0: Removing interface: ip6gretap2 [ 891.669014][ T49] gretap0 (unregistering): left promiscuous mode [ 891.761318][ T49] bond1 (unregistering): (slave gretap1): Releasing active interface [ 891.955276][ T49] bond3 (unregistering): (slave bridge9): Releasing backup interface [ 892.112383][ T49] team0: Port device bridge19 removed [ 892.167047][ T49] bond0 (unregistering): Released all slaves [ 892.187245][ T49] bond1 (unregistering): Released all slaves [ 892.238738][ T49] bond2 (unregistering): Released all slaves [ 892.266047][ T49] bond3 (unregistering): Released all slaves [ 892.285222][ T49] bond4 (unregistering): Released all slaves [ 892.303493][ T49] bond5 (unregistering): Released all slaves [ 892.320096][ T49] bond6 (unregistering): Released all slaves [ 892.348996][T28065] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 892.373136][T28065] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 892.396842][T28065] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 892.540977][ T49] ¿: left promiscuous mode [ 892.768619][ T49] þ: left promiscuous mode [ 895.764261][T28110] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 895.788494][T28110] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 895.804316][T19052] net_ratelimit: 14 callbacks suppressed [ 895.804343][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 895.972433][ T49] tipc: Disabling bearer [ 896.020697][ T49] tipc: Left network mode [ 896.026034][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 896.038036][T28128] __nla_validate_parse: 7 callbacks suppressed [ 896.038055][T28128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5465'. [ 896.175091][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 896.184488][T28131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5464'. [ 896.243431][T28140] netlink: 'syz.0.5468': attribute type 6 has an invalid length. [ 896.391080][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 896.583880][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 896.714930][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 896.923861][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 896.990770][T28163] vlan3: entered promiscuous mode [ 897.035275][T28169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5475'. [ 897.079038][T28169] netlink: 'syz.4.5475': attribute type 1 has an invalid length. [ 897.399316][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 897.429991][T28181] tipc: Enabling of bearer rejected, already enabled [ 897.509894][T28181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5478'. [ 897.550728][T28181] openvswitch: netlink: Flow actions attr not present in new flow. [ 897.656691][T28185] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode [ 897.766371][T28178] wlan0 speed is unknown, defaulting to 1000 [ 897.785939][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 897.981756][ T49] hsr_slave_0: left promiscuous mode [ 897.999808][ T49] hsr_slave_1: left promiscuous mode [ 898.127788][ T49] team0 (unregistering): Port device veth5 removed [ 898.164032][ T49] team0 (unregistering): Port device veth3 removed [ 898.279813][T28225] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5488'. [ 898.669956][T28215] tipc: Started in network mode [ 898.676991][T28215] tipc: Node identity 2e6f24ba426c, cluster identity 4711 [ 898.685295][T28215] tipc: Enabled bearer , priority 0 [ 898.692528][T28219] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 898.922072][T28235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5490'. [ 898.970508][T28238] netlink: 'syz.2.5491': attribute type 1 has an invalid length. [ 899.205655][T28248] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5493'. [ 899.602047][T28262] netlink: 'syz.2.5498': attribute type 1 has an invalid length. [ 899.664837][T28262] 8021q: adding VLAN 0 to HW filter on device bond12 [ 899.697452][ T49] IPVS: stop unused estimator thread 0... [ 899.813910][ T1226] tipc: Node number set to 1812145338 [ 899.840760][T28270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5500'. [ 900.083205][T28287] netlink: 'syz.2.5501': attribute type 10 has an invalid length. [ 900.331797][T28285] tipc: New replicast peer: 255.255.255.255 [ 900.364624][T28285] tipc: Enabled bearer , priority 10 [ 900.390282][T28297] x_tables: ip_tables: osf match: only valid for protocol 6 [ 900.398581][T28286] tipc: Resetting bearer [ 900.426533][T28287] team0: Device veth1_virt_wifi failed to register rx_handler [ 900.602404][T28297] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5504'. [ 900.843777][ T8908] net_ratelimit: 30 callbacks suppressed [ 900.843798][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 900.951682][T28307] netlink: 'syz.0.5507': attribute type 10 has an invalid length. [ 900.975508][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 901.094961][T28312] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 901.104144][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 901.186178][T28317] netlink: 'syz.0.5510': attribute type 5 has an invalid length. [ 901.223940][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 901.240808][T28321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5509'. [ 901.261707][T28321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5509'. [ 901.292576][T28321] netlink: 'syz.4.5509': attribute type 12 has an invalid length. [ 901.334707][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 901.342971][T28321] netlink: 'syz.4.5509': attribute type 13 has an invalid length. [ 901.456478][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 901.584012][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 901.703660][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 901.923347][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5521'. [ 902.057217][T28338] syzkaller1: entered promiscuous mode [ 902.071388][T28338] syzkaller1: entered allmulticast mode [ 902.134164][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 902.233243][T28362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5523'. [ 902.435788][T28369] netlink: 'syz.0.5525': attribute type 6 has an invalid length. [ 902.461795][T28371] netlink: 'syz.2.5526': attribute type 7 has an invalid length. [ 902.510821][T28367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'. [ 902.689705][T28382] netlink: 'syz.4.5530': attribute type 9 has an invalid length. [ 902.704577][T28378] x_tables: ip_tables: osf match: only valid for protocol 6 [ 902.763367][T28388] pim6reg1: entered promiscuous mode [ 902.771835][T28387] netlink: 'syz.2.5531': attribute type 1 has an invalid length. [ 902.775507][T28388] pim6reg1: entered allmulticast mode [ 902.781878][T28387] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5531'. [ 902.795723][T28387] netlink: 'syz.2.5531': attribute type 1 has an invalid length. [ 902.806452][T28387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5531'. [ 903.110266][T28395] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 903.159879][T28403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5535'. [ 903.245888][T28406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5536'. [ 903.289825][T28403] bond13: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 903.325310][T28403] bond13 (unregistering): Released all slaves [ 903.427490][T28417] bond0: (slave ip6tnl0): refused to change device type [ 903.445908][T28412] tipc: Enabling of bearer rejected, already enabled [ 903.479176][T28409] tipc: Enabling of bearer rejected, already enabled [ 903.524237][T28417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5541'. [ 903.581914][T28417] ip6erspan1: entered allmulticast mode [ 903.717418][T28433] netlink: 'syz.0.5544': attribute type 11 has an invalid length. [ 903.995235][T28447] netlink: 'syz.2.5549': attribute type 3 has an invalid length. [ 904.014684][T28447] netlink: 'syz.2.5549': attribute type 1 has an invalid length. [ 904.434577][T28476] macsec0: entered promiscuous mode [ 904.440328][T28476] macsec0: entered allmulticast mode [ 904.446850][T28476] dummy0: entered allmulticast mode [ 904.456062][T28476] dummy0: left allmulticast mode [ 904.952710][T28495] wlan0 speed is unknown, defaulting to 1000 [ 905.244582][T28503] syzkaller1: entered promiscuous mode [ 905.258207][T28503] syzkaller1: entered allmulticast mode [ 905.269764][T28503] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 905.460353][T28512] tipc: New replicast peer: 255.255.255.255 [ 905.467770][T28512] tipc: Enabled bearer , priority 10 [ 905.477213][T28512] netlink: 'syz.3.5566': attribute type 1 has an invalid length. [ 905.633045][T28512] bond13: entered promiscuous mode [ 905.662203][T28512] 8021q: adding VLAN 0 to HW filter on device bond13 [ 905.702866][T28519] bond13: entered allmulticast mode [ 905.733874][T28512] tunl0: Caught tx_queue_len zero misconfig [ 905.821844][T28519] bond13: (slave bridge17): making interface the new active one [ 905.840882][T28519] bridge17: entered promiscuous mode [ 905.858887][T28519] bridge17: entered allmulticast mode [ 905.876186][T28519] bond13: (slave bridge17): Enslaving as an active interface with an up link [ 906.036922][T28528] tipc: Enabled bearer , priority 0 [ 906.047504][T28533] syzkaller0: entered promiscuous mode [ 906.053085][T28533] syzkaller0: entered allmulticast mode [ 906.104132][ T36] net_ratelimit: 29 callbacks suppressed [ 906.104153][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 906.162877][T28528] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 906.198706][T28541] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 906.215893][T28533] tipc: Resetting bearer [ 906.242445][T28526] tipc: Resetting bearer [ 906.248837][T28541] __nla_validate_parse: 13 callbacks suppressed [ 906.248853][T28541] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5572'. [ 906.299581][T28526] tipc: Disabling bearer [ 906.404894][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 906.527657][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 906.656416][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 906.738812][T28561] validate_nla: 1 callbacks suppressed [ 906.738825][T28561] netlink: 'syz.2.5579': attribute type 1 has an invalid length. [ 906.761210][T28563] tap0: tun_chr_ioctl cmd 2147767507 [ 906.836248][T28561] 8021q: adding VLAN 0 to HW filter on device bond13 [ 906.935412][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 907.033090][T28579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5583'. [ 907.070328][T28561] bond13: (slave veth7): Enslaving as a backup interface with a down link [ 907.090378][T28572] netlink: 'syz.2.5579': attribute type 10 has an invalid length. [ 907.099153][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 907.107043][T28572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5579'. [ 907.121646][T28568] dummy0: left promiscuous mode [ 907.184013][ T36] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 907.202441][T28568] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 907.313779][ T36] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 908.063399][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 908.194352][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 908.211044][T28618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5589'. [ 908.330601][T28616] xt_hashlimit: size too large, truncated to 1048576 [ 908.595835][ T30] audit: type=1800 audit(1785015202.398:10): pid=28628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5590" name="memory.events" dev="tmpfs" ino=2403 res=0 errno=0 [ 909.336016][T28675] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5603'. [ 909.362016][T28669] netlink: 'syz.2.5602': attribute type 12 has an invalid length. [ 909.405068][T28675] 0ªX¹¦À: renamed from batadv0 [ 909.418910][T28675] 0ªX¹¦À: entered allmulticast mode [ 909.440005][T28675] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 909.664915][T28682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5608'. [ 909.700186][T28680] ip6gretap0: entered promiscuous mode [ 909.783788][T28682] ip6gre4: entered promiscuous mode [ 909.807533][T28682] ip6gre4: entered allmulticast mode [ 909.878469][T28693] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5607'. [ 910.092743][T28696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5611'. [ 910.121748][T28696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5611'. [ 910.275551][T28711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5616'. [ 910.405633][T28719] netlink: 'syz.3.5618': attribute type 21 has an invalid length. [ 910.441192][T28719] netlink: 'syz.3.5618': attribute type 5 has an invalid length. [ 910.572666][T28729] ip6tnl0: Caught tx_queue_len zero misconfig [ 910.724515][T28741] x_tables: duplicate entry at hook 1 [ 910.796576][T28744] bridge0: entered allmulticast mode [ 911.022442][T28757] xt_addrtype: ipv6 does not support BROADCAST matching [ 911.174502][ T49] net_ratelimit: 33 callbacks suppressed [ 911.174521][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 911.323872][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 911.454034][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 911.587395][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 911.654999][T28795] __nla_validate_parse: 4 callbacks suppressed [ 911.655022][T28795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5637'. [ 911.696807][T28795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5637'. [ 911.714122][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 911.834644][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 911.876944][T28808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5642'. [ 911.897617][T28806] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5641'. [ 911.963680][ T8908] bond2: (slave bridge3): failed to get link speed/duplex [ 912.098636][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 912.164862][T28821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.228712][T19052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.243327][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.338976][T28821] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 912.381260][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.388530][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.640546][T28835] syzkaller0: entered promiscuous mode [ 912.652992][T28835] syzkaller0: entered allmulticast mode [ 913.033838][T28845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5650'. [ 913.142682][T28845] netlink: 'syz.4.5650': attribute type 5 has an invalid length. [ 913.159123][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5652'. [ 913.169258][T28845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5650'. [ 913.180147][T28851] block nbd0: reconnected socket [ 913.194583][ T5621] block nbd0: Receive control failed (result -32) [ 913.259069][T19052] vlan4: left allmulticast mode [ 913.271088][T19052] geneve0: left allmulticast mode [ 913.290561][T19052] vlan4: left promiscuous mode [ 913.300803][T19052] geneve0: left promiscuous mode [ 913.306767][T19052] bridge0: port 3(vlan4) entered disabled state [ 913.343937][T19052] bridge_slave_1: left allmulticast mode [ 913.353003][T19052] bridge_slave_1: left promiscuous mode [ 913.367132][T19052] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.402832][T19052] bridge_slave_0: left allmulticast mode [ 913.409114][T19052] bridge_slave_0: left promiscuous mode [ 913.420734][T19052] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.481688][T28854] netlink: 'syz.1.5653': attribute type 20 has an invalid length. [ 913.511033][T28854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'. [ 913.687363][T19052] bond_slave_0: left promiscuous mode [ 913.706804][T19052] bond_slave_1: left promiscuous mode [ 913.713192][T28862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5656'. [ 913.812147][T28867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5656'. [ 913.997560][T19052] erspan0 (unregistering): left promiscuous mode [ 914.278715][T19052] team0: Port device bridge11 removed [ 914.466177][T19052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.485711][T19052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.496486][T19052] bond0 (unregistering): Released all slaves [ 914.513221][T19052] bond1 (unregistering): (slave bond2): Releasing backup interface [ 914.522077][T19052] bond1 (unregistering): Released all slaves [ 914.548998][T19052] bond2 (unregistering): Released all slaves [ 914.569575][T19052] bond3 (unregistering): Released all slaves [ 914.591581][T19052] bond4 (unregistering): Released all slaves [ 914.608264][T19052] bond5 (unregistering): Released all slaves [ 914.626436][T19052] bond6 (unregistering): Released all slaves [ 914.651370][T19052] bond7 (unregistering): Released all slaves [ 914.669473][T19052] bond8 (unregistering): (slave veth7): Releasing backup interface [ 914.683313][T19052] bond8 (unregistering): Released all slaves [ 914.818967][T28854] netlink: 'syz.1.5653': attribute type 20 has an invalid length. [ 915.100994][T19052] tipc: Left network mode [ 915.161589][T19052] IPVS: stopping backup sync thread 9536 ... [ 915.492828][T28909] FAULT_INJECTION: forcing a failure. [ 915.492828][T28909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.513097][T28909] CPU: 1 UID: 0 PID: 28909 Comm: syz.0.5667 Not tainted syzkaller #0 PREEMPT(full) [ 915.513121][T28909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 915.513134][T28909] Call Trace: [ 915.513142][T28909] [ 915.513150][T28909] dump_stack_lvl+0xe8/0x150 [ 915.513183][T28909] should_fail_ex+0x40c/0x560 [ 915.513213][T28909] _copy_to_user+0x31/0xb0 [ 915.513234][T28909] simple_read_from_buffer+0xe1/0x170 [ 915.513267][T28909] proc_fail_nth_read+0x1bb/0x230 [ 915.513299][T28909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.513328][T28909] ? rw_verify_area+0x24a/0x4c0 [ 915.513358][T28909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.513384][T28909] vfs_read+0x213/0xa80 [ 915.513408][T28909] ? __pfx___mutex_lock+0x10/0x10 [ 915.513519][T28909] ? __pfx_vfs_read+0x10/0x10 [ 915.513539][T28909] ? __fget_files+0x2a/0x420 [ 915.513569][T28909] ? __fget_files+0x3a2/0x420 [ 915.513593][T28909] ? __fget_files+0x2a/0x420 [ 915.513628][T28909] ksys_read+0x150/0x270 [ 915.513649][T28909] ? __pfx_ksys_read+0x10/0x10 [ 915.513676][T28909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.513697][T28909] do_syscall_64+0x174/0x580 [ 915.513719][T28909] ? trace_irq_disable+0x3b/0x140 [ 915.513743][T28909] ? clear_bhb_loop+0x40/0x90 [ 915.513767][T28909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.513787][T28909] RIP: 0033:0x7ffb06f5e6ce [ 915.513805][T28909] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 915.513821][T28909] RSP: 002b:00007ffb07e81fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 915.513841][T28909] RAX: ffffffffffffffda RBX: 00007ffb07e826c0 RCX: 00007ffb06f5e6ce [ 915.513862][T28909] RDX: 000000000000000f RSI: 00007ffb07e820a0 RDI: 0000000000000004 [ 915.513874][T28909] RBP: 00007ffb07e82090 R08: 0000000000000000 R09: 0000000000000000 [ 915.513886][T28909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.513897][T28909] R13: 00007ffb07226038 R14: 00007ffb07225fa0 R15: 00007ffde40e4cd8 [ 915.513929][T28909] [ 915.969492][T28914] netlink: 'syz.2.5670': attribute type 1 has an invalid length. [ 916.169849][T28933] netlink: 'syz.1.5673': attribute type 1 has an invalid length. [ 916.177849][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 916.414716][ T9640] net_ratelimit: 28 callbacks suppressed [ 916.414737][ T9640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.774051][T28914] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 916.779999][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 916.928013][T28930] bond15: invalid NS target :: specified for addition [ 916.967505][T28930] bond15: option ns_ip6_target: invalid value (18446744073709551615) [ 917.012646][T28930] bond15 (unregistering): Released all slaves [ 917.048006][T28933] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 917.070014][T28951] netlink: 'syz.4.5678': attribute type 10 has an invalid length. [ 917.099587][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 917.268859][T28955] __nla_validate_parse: 7 callbacks suppressed [ 917.268880][T28955] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5679'. [ 917.283815][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 917.320009][T28958] netlink: 'syz.2.5680': attribute type 9 has an invalid length. [ 917.374423][ T6191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.383260][ T9640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.400397][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.412084][T19052] veth0_to_team: left promiscuous mode [ 917.441053][T19052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.450086][T19052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.462681][T19052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.473139][T19052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.524216][T19052] veth1_vlan: left promiscuous mode [ 917.544270][T19052] veth0_vlan: left promiscuous mode [ 918.093737][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 918.117206][T19052] team0 (unregistering): Port device team_slave_0 removed [ 918.346094][ T9653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.428456][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.461052][T28968] geneve0: Caught tx_queue_len zero misconfig [ 918.470013][T28971] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5685'. [ 918.481017][T28972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5684'. [ 918.512249][T28975] bridge_slave_1: left allmulticast mode [ 918.534037][T28975] bridge_slave_1: left promiscuous mode [ 918.545697][T28975] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.583098][T28975] bridge_slave_0: left allmulticast mode [ 918.601554][T28975] bridge_slave_0: left promiscuous mode [ 918.629063][T28975] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.724104][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 918.848545][T28994] wlan0 speed is unknown, defaulting to 1000 [ 918.985143][T29005] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5689'. [ 919.034794][T29005] netlink: 'syz.2.5689': attribute type 1 has an invalid length. [ 919.078919][T29005] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5689'. [ 919.241832][T19052] IPVS: stop unused estimator thread 0... [ 919.376496][T29015] wlan0 speed is unknown, defaulting to 1000 [ 919.557916][T28994] dvmrp0: entered allmulticast mode [ 919.578880][T28994] netlink: 'syz.4.5686': attribute type 13 has an invalid length. [ 919.603794][T29033] pim6reg1: entered promiscuous mode [ 919.623704][T29033] pim6reg1: entered allmulticast mode [ 919.644524][T29033] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 919.658542][T29041] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5694'. [ 919.691609][T29041] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5694'. [ 919.779628][T29037] 8021q: adding VLAN 0 to HW filter on device bond14 [ 919.901985][T29037] netlink: 'syz.2.5694': attribute type 10 has an invalid length. [ 919.933395][T29037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5694'. [ 919.973699][T29044] tipc: Enabling of bearer rejected, already enabled [ 920.229641][T29037] dummy0: entered promiscuous mode [ 920.285027][T29037] bond13: (slave dummy0): Removing an active aggregator [ 920.304669][T29037] bond13: (slave dummy0): Releasing backup interface [ 920.450224][T29053] syzkaller1: entered promiscuous mode [ 920.479840][T29053] syzkaller1: entered allmulticast mode [ 920.669500][T29075] syzkaller0: entered promiscuous mode [ 920.677827][T29075] syzkaller0: entered allmulticast mode [ 920.732864][T29076] ip6gre3: entered allmulticast mode [ 920.748600][ T36] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 920.905046][T19052] dvmrp0: left allmulticast mode [ 921.226702][T29086] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5702'. [ 921.293782][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 921.540732][ T9640] net_ratelimit: 15 callbacks suppressed [ 921.540753][ T9640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.954842][T29124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5709'. [ 921.994064][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 922.163672][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 922.294029][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 922.414794][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 922.442939][T29145] netlink: 'syz.0.5715': attribute type 21 has an invalid length. [ 922.470263][T29145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5715'. [ 922.498964][T29145] netlink: 'syz.0.5715': attribute type 21 has an invalid length. [ 922.518796][T29148] IPVS: set_ctl: invalid protocol: 139 172.20.20.63:20004 [ 922.522411][T29145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5715'. [ 922.539948][T29146] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 922.577345][ T9640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.591262][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.607130][T21613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.616408][ T9640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.700101][T29153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5717'. [ 922.728907][T29159] syzkaller0: entered promiscuous mode [ 922.756160][T29159] syzkaller0: entered allmulticast mode [ 923.186051][T29180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5724'. [ 923.457808][T29193] tap0: tun_chr_ioctl cmd 2148553947 [ 923.560355][T29199] netlink: 'syz.2.5729': attribute type 1 has an invalid length. [ 923.637088][T29199] bond15: entered promiscuous mode [ 923.643028][T29199] 8021q: adding VLAN 0 to HW filter on device bond15 [ 923.738384][T29205] bond15: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 923.824817][T29205] bond15: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 923.863277][T29205] bond15: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 923.930910][T29199] xt_l2tp: v2 sid > 0xffff: 262144 [ 924.040254][T29226] netlink: 320 bytes leftover after parsing attributes in process `syz.1.5735'. [ 924.755395][T29245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5736'. [ 925.053794][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 925.077411][T29254] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5737'. [ 925.291514][T29275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 925.378320][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5744'. [ 925.406941][T29276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5743'. [ 925.443697][T29276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5743'. [ 925.729741][T29292] netlink: 'syz.0.5746': attribute type 10 has an invalid length. [ 925.746015][T29290] netlink: 'syz.0.5746': attribute type 10 has an invalid length. [ 925.869196][T29294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.881674][T29294] dummy0: left promiscuous mode [ 925.888945][T29294] batadv0: left promiscuous mode [ 925.895489][T29294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.141236][T29314] netlink: 'syz.0.5750': attribute type 11 has an invalid length. [ 926.278773][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.287770][T29314] netlink: 'syz.0.5750': attribute type 11 has an invalid length. [ 926.312199][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.332762][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.362386][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.636919][ T12] net_ratelimit: 22 callbacks suppressed [ 926.636941][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 926.767973][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 926.820589][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.883624][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 927.004469][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 927.114057][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 927.446520][T29356] netlink: 'syz.3.5758': attribute type 1 has an invalid length. [ 927.456022][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.573678][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 927.704032][ T36] bond2: (slave bridge3): failed to get link speed/duplex [ 927.824022][ T6191] bond2: (slave bridge3): failed to get link speed/duplex [ 927.930171][T29381] __nla_validate_parse: 13 callbacks suppressed [ 927.930191][T29381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5765'. [ 928.083471][T29388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5766'. [ 928.126012][T29388] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5766'. [ 928.171360][T29394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5768'. [ 928.199127][T29388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5766'. [ 928.300649][T29397] wlan0 speed is unknown, defaulting to 1000 [ 928.456538][T29407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5770'. [ 928.469824][T29407] netlink: 'syz.0.5770': attribute type 10 has an invalid length. [ 928.478393][T29407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5770'. [ 928.719775][T29416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5774'. [ 928.791483][T29418] netlink: 'syz.3.5775': attribute type 1 has an invalid length. [ 928.804515][T29419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5775'. [ 928.817041][T29416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5774'. [ 928.956109][T29418] 8021q: adding VLAN 0 to HW filter on device bond15 [ 928.971229][T29419] bond15: entered promiscuous mode [ 929.018685][T29420] dummy0: left promiscuous mode [ 929.074995][T29420] bond15: (slave dummy0): making interface the new active one [ 929.108867][T29420] dummy0: entered promiscuous mode [ 929.131298][T29420] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 929.219320][T29430] syzkaller1: entered promiscuous mode [ 929.259450][T29430] syzkaller1: entered allmulticast mode [ 929.454119][T26548] Bluetooth: hci2: command 0x0406 tx timeout [ 931.714442][ T12] net_ratelimit: 31 callbacks suppressed [ 931.714463][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 931.767013][T29565] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20000 [ 931.843920][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 931.892688][T29569] ipip1: entered promiscuous mode [ 931.954032][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 932.063949][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 932.175254][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 932.197349][T29571] x_tables: duplicate underflow at hook 1 [ 932.294047][ T8901] bond2: (slave bridge3): failed to get link speed/duplex [ 932.403943][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 932.508022][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.534366][T19052] bond2: (slave bridge3): failed to get link speed/duplex [ 932.664216][ T49] bond2: (slave bridge3): failed to get link speed/duplex [ 932.860128][T29600] netlink: 'syz.0.5823': attribute type 1 has an invalid length. [ 932.922594][T29600] geneve4: entered promiscuous mode [ 932.967177][T29601] syzkaller0: entered promiscuous mode [ 932.986801][T29601] syzkaller0: entered allmulticast mode [ 933.409555][T29623] __nla_validate_parse: 13 callbacks suppressed [ 933.409580][T29623] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5828'. [ 933.443781][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5828'. [ 933.586901][T29630] netlink: 'syz.2.5829': attribute type 2 has an invalid length. [ 933.900152][T29648] netlink: 'syz.1.5834': attribute type 30 has an invalid length. [ 933.919154][T29647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5834'. [ 934.009832][T29650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5833'. [ 934.093674][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 934.335732][T29638] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.471016][T29638] 0ªX¹¦À: left allmulticast mode [ 934.896434][T29638] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 935.111407][T29638] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 935.139528][T29638] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 935.150930][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 935.165336][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 935.181099][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 935.191230][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 935.199191][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 935.465549][T29638] ip6gre3: left allmulticast mode [ 935.492655][T29650] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 935.492920][T29658] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode [ 935.511963][T29658] mac80211_hwsim hwsim48 syzkaller0: left allmulticast mode [ 935.532218][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.562087][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.610402][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.668854][ T36] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.120323][T29711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5847'. [ 936.481888][T29713] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.489445][T29713] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.627226][T29688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 936.855847][T29721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5849'. [ 937.056517][T29713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.120338][T29713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.294733][ T5621] Bluetooth: hci0: command tx timeout [ 938.140464][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.178199][ T36] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 938.206557][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.236284][ T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.270082][ T36] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 938.300412][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.327619][ T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.359105][ T36] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 938.379180][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.398108][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.420935][ T36] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 938.433175][T29747] netlink: 'syz.2.5854': attribute type 4 has an invalid length. [ 938.441962][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.473591][T29747] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5854'. [ 938.502410][T29674] wlan0 speed is unknown, defaulting to 1000 [ 938.518598][T29747] net_ratelimit: 18 callbacks suppressed [ 938.518619][T29747] wlan1: mtu less than device minimum [ 938.726251][T29764] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5858'. [ 938.738693][T29764] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5858'. [ 938.775748][T29766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5856'. [ 938.786828][T29766] bond0: ARP target 0.0.0.2 is already present [ 938.793116][T29766] bond0: option arp_ip_target: invalid value (33554432) [ 938.812732][T29767] netlink: 'syz.2.5858': attribute type 10 has an invalid length. [ 938.822147][T29767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5858'. [ 938.832760][T29767] dummy0: entered promiscuous mode [ 938.907996][T29771] syzkaller1: entered promiscuous mode [ 938.919143][T29771] syzkaller1: entered allmulticast mode [ 939.003462][T29674] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.011035][T29674] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.018727][T29674] bridge_slave_0: entered allmulticast mode [ 939.026459][T29674] bridge_slave_0: entered promiscuous mode [ 939.035998][T29674] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.043182][T29674] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.051249][T29674] bridge_slave_1: entered allmulticast mode [ 939.059057][T29674] bridge_slave_1: entered promiscuous mode [ 939.090123][T29674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.101848][T29674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.135185][T29674] team0: Port device team_slave_0 added [ 939.143068][T29674] team0: Port device team_slave_1 added [ 939.171960][T29674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.179747][T29674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.206450][T29674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.219680][T29674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.226724][T29674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.253211][T29674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.302267][T29674] hsr_slave_0: entered promiscuous mode [ 939.309398][T29674] hsr_slave_1: entered promiscuous mode [ 939.315919][T29674] debugfs: 'hsr0' already exists in 'hsr' [ 939.321792][T29674] Cannot create hsr debugfs directory [ 939.374118][ T5621] Bluetooth: hci0: command tx timeout [ 939.787180][T29721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 939.848017][T29674] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 939.893027][T29674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 939.909873][T29674] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 939.947046][T29674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 939.969314][T29674] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 940.021474][T29674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 940.055686][T29777] netlink: 'syz.4.5862': attribute type 142 has an invalid length. [ 940.068374][T29674] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 940.089155][T29674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 940.099849][T29779] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5859'. [ 940.305160][T29794] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5864'. [ 940.359878][T29674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.437093][T29674] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.493323][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.500634][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.555315][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.562542][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.810200][T29814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5869'. [ 940.859495][T29814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5869'. [ 941.014717][T29817] netlink: 'syz.4.5869': attribute type 10 has an invalid length. [ 941.025836][T29817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5869'. [ 941.455057][ T5621] Bluetooth: hci0: command tx timeout [ 943.381697][T29814] tipc: Enabling of bearer rejected, already enabled [ 943.390908][T29817] dummy0: entered promiscuous mode [ 943.534405][ T5621] Bluetooth: hci0: command tx timeout [ 943.829539][T29849] netlink: 420 bytes leftover after parsing attributes in process `syz.4.5875'. [ 944.176101][T29861] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5878'. [ 944.656492][T29674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.666692][T26548] block nbd3: Receive control failed (result -22) [ 944.679030][ T5621] block nbd3: Receive control failed (result -22) [ 944.704713][T29870] nbd3: detected capacity change from 0 to 32 [ 944.736171][ T2110] block nbd3: Dead connection, failed to find a fallback [ 944.800468][T29674] veth0_vlan: entered promiscuous mode [ 944.819342][T29674] veth1_vlan: entered promiscuous mode [ 944.873351][T29674] veth0_macvtap: entered promiscuous mode [ 944.898577][T29674] veth1_macvtap: entered promiscuous mode [ 944.922198][T29674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.949819][T29896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5883'. [ 944.959722][T29896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5883'. [ 944.961796][T29674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.988628][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.002123][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.015021][T29896] tipc: Enabling of bearer rejected, failed to enable media [ 945.024374][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.034097][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.046748][T29896] netlink: 'syz.1.5883': attribute type 10 has an invalid length. [ 945.056083][T29882] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 945.056357][T29896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5883'. [ 945.068949][T29882] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 945.085950][T29896] dummy0: entered promiscuous mode [ 945.103052][T29896] dummy0: left allmulticast mode [ 945.119776][T29882] [ 945.122136][T29882] ====================================================== [ 945.129177][T29882] WARNING: possible circular locking dependency detected [ 945.134959][T29896] team0: Port device dummy0 removed [ 945.136323][T29882] syzkaller #0 Not tainted [ 945.136338][T29882] ------------------------------------------------------ [ 945.153019][T29882] syz.0.5880/29882 is trying to acquire lock: [ 945.159119][T29882] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 945.169427][T29882] [ 945.169427][T29882] but task is already holding lock: [ 945.176810][T29882] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 945.187730][T29882] [ 945.187730][T29882] which lock already depends on the new lock. [ 945.187730][T29882] [ 945.198132][T29882] [ 945.198132][T29882] the existing dependency chain (in reverse order) is: [ 945.207150][T29882] [ 945.207150][T29882] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 945.215854][T29882] down_read+0x4a/0x330 [ 945.220540][T29882] kernfs_remove_by_name_ns+0x3f/0x140 [ 945.226561][T29882] internal_create_group+0x58e/0x1180 [ 945.232498][T29882] sysfs_update_groups+0x60/0x130 [ 945.238251][T29882] pmu_dev_alloc+0x29b/0x300 [ 945.243380][T29882] perf_event_sysfs_init+0x76/0x100 [ 945.249209][T29882] do_one_initcall+0x250/0x870 [ 945.254534][T29882] do_initcall_level+0x10a/0x1a0 [ 945.260013][T29882] do_initcalls+0x59/0xa0 [ 945.264883][T29882] kernel_init_freeable+0x29d/0x3e0 [ 945.270622][T29882] kernel_init+0x1d/0x1d0 [ 945.275577][T29882] ret_from_fork+0x514/0xb70 [ 945.280710][T29882] ret_from_fork_asm+0x1a/0x30 [ 945.286011][T29882] [ 945.286011][T29882] -> #9 (pmus_lock){+.+.}-{4:4}: [ 945.293160][T29882] __mutex_lock+0x19d/0x1550 [ 945.298298][T29882] perf_event_init_cpu+0x1d1/0x7a0 [ 945.303954][T29882] cpuhp_invoke_callback+0x434/0x810 [ 945.309789][T29882] cpuhp_thread_fun+0x362/0x780 [ 945.315179][T29882] smpboot_thread_fn+0x57c/0xa80 [ 945.320669][T29882] kthread+0x388/0x470 [ 945.325279][T29882] ret_from_fork+0x514/0xb70 [ 945.330418][T29882] ret_from_fork_asm+0x1a/0x30 [ 945.335723][T29882] [ 945.335723][T29882] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 945.343317][T29882] cpuhp_thread_fun+0x127/0x780 [ 945.348734][T29882] smpboot_thread_fn+0x57c/0xa80 [ 945.354214][T29882] kthread+0x388/0x470 [ 945.358827][T29882] ret_from_fork+0x514/0xb70 [ 945.363958][T29882] ret_from_fork_asm+0x1a/0x30 [ 945.369253][T29882] [ 945.369253][T29882] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 945.377004][T29882] cpus_read_lock+0x42/0x160 [ 945.382137][T29882] static_key_slow_inc+0x12/0x30 [ 945.387617][T29882] nbd_genl_reconfigure+0x1301/0x1e80 [ 945.393598][T29882] genl_family_rcv_msg_doit+0x233/0x340 [ 945.399696][T29882] genl_rcv_msg+0x614/0x7a0 [ 945.404736][T29882] netlink_rcv_skb+0x226/0x4a0 [ 945.410035][T29882] genl_rcv+0x28/0x40 [ 945.414568][T29882] netlink_unicast+0x7bb/0x940 [ 945.419883][T29882] netlink_sendmsg+0x813/0xb40 [ 945.425231][T29882] sock_sendmsg_nosec+0x13a/0x180 [ 945.430820][T29882] ____sys_sendmsg+0x54e/0x850 [ 945.436156][T29882] ___sys_sendmsg+0x2a5/0x360 [ 945.441374][T29882] __x64_sys_sendmsg+0x1b1/0x290 [ 945.446869][T29882] do_syscall_64+0x174/0x580 [ 945.452032][T29882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.458469][T29882] [ 945.458469][T29882] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 945.466156][T29882] __mutex_lock+0x19d/0x1550 [ 945.471316][T29882] nbd_queue_rq+0x373/0x1150 [ 945.476494][T29882] blk_mq_dispatch_rq_list+0x499/0x1990 [ 945.482686][T29882] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 945.489588][T29882] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 945.496117][T29882] blk_mq_run_work_fn+0x16c/0x300 [ 945.501680][T29882] process_scheduled_works+0xa8e/0x14e0 [ 945.507772][T29882] worker_thread+0xa47/0xfb0 [ 945.512906][T29882] kthread+0x388/0x470 [ 945.517551][T29882] ret_from_fork+0x514/0xb70 [ 945.522694][T29882] ret_from_fork_asm+0x1a/0x30 [ 945.528005][T29882] [ 945.528005][T29882] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 945.535249][T29882] __mutex_lock+0x19d/0x1550 [ 945.540378][T29882] nbd_queue_rq+0xc1/0x1150 [ 945.545412][T29882] blk_mq_dispatch_rq_list+0x499/0x1990 [ 945.551514][T29882] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 945.558425][T29882] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 945.564974][T29882] blk_mq_run_work_fn+0x16c/0x300 [ 945.570547][T29882] process_scheduled_works+0xa8e/0x14e0 [ 945.576635][T29882] worker_thread+0xa47/0xfb0 [ 945.581784][T29882] kthread+0x388/0x470 [ 945.586400][T29882] ret_from_fork+0x514/0xb70 [ 945.591550][T29882] ret_from_fork_asm+0x1a/0x30 [ 945.596850][T29882] [ 945.596850][T29882] -> #4 (set->srcu){.+.+}-{0:0}: [ 945.603996][T29882] __synchronize_srcu+0xc9/0x2f0 [ 945.609486][T29882] elevator_switch+0x1e8/0x7b0 [ 945.614910][T29882] elevator_change+0x2fa/0x480 [ 945.620217][T29882] elevator_set_default+0x375/0x440 [ 945.625979][T29882] blk_register_queue+0x3f3/0x4e0 [ 945.631591][T29882] __add_disk+0x6cb/0xe30 [ 945.636455][T29882] add_disk_fwnode+0x100/0x3a0 [ 945.641754][T29882] nbd_dev_add+0x733/0xb60 [ 945.646707][T29882] nbd_init+0x15f/0x1e0 [ 945.651414][T29882] do_one_initcall+0x250/0x870 [ 945.656736][T29882] do_initcall_level+0x10a/0x1a0 [ 945.662234][T29882] do_initcalls+0x59/0xa0 [ 945.667122][T29882] kernel_init_freeable+0x29d/0x3e0 [ 945.673016][T29882] kernel_init+0x1d/0x1d0 [ 945.677929][T29882] ret_from_fork+0x514/0xb70 [ 945.683098][T29882] ret_from_fork_asm+0x1a/0x30 [ 945.688457][T29882] [ 945.688457][T29882] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 945.696316][T29882] __mutex_lock+0x19d/0x1550 [ 945.701455][T29882] elevator_change+0x1af/0x480 [ 945.706769][T29882] elevator_set_none+0xb5/0x140 [ 945.712181][T29882] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 945.718581][T29882] nbd_start_device+0x189/0xb30 [ 945.723984][T29882] nbd_genl_connect+0x1597/0x1c10 [ 945.729552][T29882] genl_family_rcv_msg_doit+0x233/0x340 [ 945.735653][T29882] genl_rcv_msg+0x614/0x7a0 [ 945.740715][T29882] netlink_rcv_skb+0x226/0x4a0 [ 945.746016][T29882] genl_rcv+0x28/0x40 [ 945.750547][T29882] netlink_unicast+0x7bb/0x940 [ 945.755863][T29882] netlink_sendmsg+0x813/0xb40 [ 945.761179][T29882] sock_sendmsg_nosec+0x13a/0x180 [ 945.766747][T29882] ____sys_sendmsg+0x54e/0x850 [ 945.772050][T29882] ___sys_sendmsg+0x2a5/0x360 [ 945.777284][T29882] __x64_sys_sendmsg+0x1b1/0x290 [ 945.782767][T29882] do_syscall_64+0x174/0x580 [ 945.787902][T29882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.794335][T29882] [ 945.794335][T29882] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 945.802961][T29882] blk_alloc_queue+0x544/0x690 [ 945.808269][T29882] __blk_mq_alloc_disk+0x194/0x390 [ 945.813919][T29882] nbd_dev_add+0x494/0xb60 [ 945.818881][T29882] nbd_init+0x15f/0x1e0 [ 945.823573][T29882] do_one_initcall+0x250/0x870 [ 945.828884][T29882] do_initcall_level+0x10a/0x1a0 [ 945.834361][T29882] do_initcalls+0x59/0xa0 [ 945.839229][T29882] kernel_init_freeable+0x29d/0x3e0 [ 945.844968][T29882] kernel_init+0x1d/0x1d0 [ 945.849834][T29882] ret_from_fork+0x514/0xb70 [ 945.854960][T29882] ret_from_fork_asm+0x1a/0x30 [ 945.860255][T29882] [ 945.860255][T29882] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 945.867484][T29882] fs_reclaim_acquire+0x71/0x100 [ 945.872959][T29882] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 945.879222][T29882] alloc_inode+0xb8/0x1b0 [ 945.884092][T29882] iget_locked+0x131/0x6a0 [ 945.889059][T29882] kernfs_get_inode+0x4f/0x770 [ 945.894356][T29882] kernfs_get_tree+0x5cd/0x980 [ 945.899658][T29882] vfs_get_tree+0x92/0x2a0 [ 945.904601][T29882] do_new_mount+0x319/0xdc0 [ 945.909636][T29882] __se_sys_mount+0x31d/0x420 [ 945.914858][T29882] do_syscall_64+0x174/0x580 [ 945.920010][T29882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.926444][T29882] [ 945.926444][T29882] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 945.934482][T29882] __lock_acquire+0x1520/0x2cf0 [ 945.939889][T29882] lock_acquire+0x106/0x350 [ 945.944934][T29882] down_write+0x96/0x200 [ 945.949722][T29882] kernfs_remove_by_name_ns+0x4e/0x140 [ 945.955713][T29882] sysfs_unmerge_group+0xd3/0x140 [ 945.961281][T29882] dpm_sysfs_remove+0x5f/0xd0 [ 945.966599][T29882] device_del+0x250/0x8f0 [ 945.972826][T29882] device_unregister+0x21/0xf0 [ 945.978126][T29882] hci_conn_del+0xc3d/0x1200 [ 945.983379][T29882] hci_conn_hash_flush+0x189/0x260 [ 945.989035][T29882] hci_dev_close_sync+0x7fc/0x10a0 [ 945.994779][T29882] hci_dev_do_close+0x30/0xc0 [ 946.000029][T29882] hci_rfkill_set_block+0x1f4/0x290 [ 946.005773][T29882] rfkill_set_block+0x19f/0x4d0 [ 946.011215][T29882] rfkill_fop_write+0x43b/0x560 [ 946.016608][T29882] vfs_write+0x296/0xba0 [ 946.021387][T29882] ksys_write+0x150/0x270 [ 946.026254][T29882] do_syscall_64+0x174/0x580 [ 946.031400][T29882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.037837][T29882] [ 946.037837][T29882] other info that might help us debug this: [ 946.037837][T29882] [ 946.048076][T29882] Chain exists of: [ 946.048076][T29882] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 946.048076][T29882] [ 946.061917][T29882] Possible unsafe locking scenario: [ 946.061917][T29882] [ 946.069391][T29882] CPU0 CPU1 [ 946.074906][T29882] ---- ---- [ 946.080293][T29882] rlock(&root->kernfs_supers_rwsem); [ 946.085769][T29882] lock(pmus_lock); [ 946.092206][T29882] lock(&root->kernfs_supers_rwsem); [ 946.100118][T29882] lock(&root->kernfs_rwsem); [ 946.104983][T29882] [ 946.104983][T29882] *** DEADLOCK *** [ 946.104983][T29882] [ 946.113142][T29882] 4 locks held by syz.0.5880/29882: [ 946.118361][T29882] #0: ffffffff9033fa00 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x196/0x560 [ 946.128500][T29882] #1: ffff8880385a4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x28/0xc0 [ 946.138116][T29882] #2: ffff8880385a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 946.147809][T29882] #3: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 946.159155][T29882] [ 946.159155][T29882] stack backtrace: [ 946.165146][T29882] CPU: 0 UID: 0 PID: 29882 Comm: syz.0.5880 Not tainted syzkaller #0 PREEMPT(full) [ 946.165169][T29882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 946.165180][T29882] Call Trace: [ 946.165189][T29882] [ 946.165199][T29882] dump_stack_lvl+0xe8/0x150 [ 946.165229][T29882] print_circular_bug+0x2e1/0x300 [ 946.165250][T29882] check_noncircular+0x12e/0x150 [ 946.165272][T29882] __lock_acquire+0x1520/0x2cf0 [ 946.165300][T29882] ? __lock_acquire+0x13e8/0x2cf0 [ 946.165333][T29882] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 946.165351][T29882] lock_acquire+0x106/0x350 [ 946.165381][T29882] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 946.165406][T29882] down_write+0x96/0x200 [ 946.165430][T29882] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 946.165448][T29882] ? __pfx_down_write+0x10/0x10 [ 946.165476][T29882] kernfs_remove_by_name_ns+0x4e/0x140 [ 946.165496][T29882] sysfs_unmerge_group+0xd3/0x140 [ 946.165524][T29882] dpm_sysfs_remove+0x5f/0xd0 [ 946.165548][T29882] device_del+0x250/0x8f0 [ 946.165566][T29882] ? klist_iter_exit+0xc1/0x100 [ 946.165699][T29882] ? work_grab_pending+0x3d1/0x930 [ 946.165729][T29882] ? __pfx_device_del+0x10/0x10 [ 946.165750][T29882] ? lockdep_hardirqs_on+0x7a/0x110 [ 946.165773][T29882] device_unregister+0x21/0xf0 [ 946.165792][T29882] hci_conn_del+0xc3d/0x1200 [ 946.165820][T29882] ? hci_conn_hash_flush+0x105/0x260 [ 946.165842][T29882] hci_conn_hash_flush+0x189/0x260 [ 946.165863][T29882] hci_dev_close_sync+0x7fc/0x10a0 [ 946.165892][T29882] ? __pfx___mutex_lock+0x10/0x10 [ 946.165917][T29882] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 946.165944][T29882] ? do_raw_spin_lock+0x12b/0x2f0 [ 946.165969][T29882] hci_dev_do_close+0x30/0xc0 [ 946.165997][T29882] hci_rfkill_set_block+0x1f4/0x290 [ 946.166022][T29882] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 946.166048][T29882] rfkill_set_block+0x19f/0x4d0 [ 946.166070][T29882] rfkill_fop_write+0x43b/0x560 [ 946.166092][T29882] ? apparmor_file_permission+0x1f4/0x300 [ 946.166149][T29882] ? __pfx_rfkill_fop_write+0x10/0x10 [ 946.166172][T29882] ? security_kernfs_init_security+0x240/0x270 [ 946.166242][T29882] ? rw_verify_area+0x203/0x4c0 [ 946.166270][T29882] ? tun_chr_write_iter+0xe0/0x200 [ 946.166321][T29882] ? __pfx_rfkill_fop_write+0x10/0x10 [ 946.166343][T29882] vfs_write+0x296/0xba0 [ 946.166369][T29882] ? __pfx_vfs_write+0x10/0x10 [ 946.166386][T29882] ? __fget_files+0x2a/0x420 [ 946.166413][T29882] ? __fget_files+0x2a/0x420 [ 946.166436][T29882] ? __fget_files+0x3a2/0x420 [ 946.166460][T29882] ? __fget_files+0x2a/0x420 [ 946.166489][T29882] ksys_write+0x150/0x270 [ 946.166507][T29882] ? __pfx_ksys_write+0x10/0x10 [ 946.166528][T29882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.166547][T29882] do_syscall_64+0x174/0x580 [ 946.166568][T29882] ? trace_irq_disable+0x3b/0x140 [ 946.166592][T29882] ? clear_bhb_loop+0x40/0x90 [ 946.166612][T29882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.166631][T29882] RIP: 0033:0x7ffb06f9de99 [ 946.166649][T29882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.166666][T29882] RSP: 002b:00007ffb07e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 946.166684][T29882] RAX: ffffffffffffffda RBX: 00007ffb07226270 RCX: 00007ffb06f9de99 [ 946.166698][T29882] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 946.166709][T29882] RBP: 00007ffb07033eaf R08: 0000000000000000 R09: 0000000000000000 [ 946.166721][T29882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.166732][T29882] R13: 00007ffb07226308 R14: 00007ffb07226270 R15: 00007ffde40e4cd8 [ 946.166755][T29882] [ 946.578806][T29882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 946.596050][T29882] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 946.620464][T29882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 946.627087][T29882] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 946.656245][T29882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 946.662242][T29882] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 946.672800][T29882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 946.679552][T29882] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 946.701897][T29674] ieee80211 phy71: Selected rate control algorithm 'minstrel_ht' [ 946.827816][ T8901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.841086][T29674] ieee80211 phy72: Selected rate control algorithm 'minstrel_ht' [ 946.857477][ T8901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.917393][ T8901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.927920][ T8901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50