last executing test programs: 6.047747899s ago: executing program 1 (id=2092): socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000200000000000000000000289616c1e38c47887e199100180600002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500008085000000730000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000002c001a800800028004000100000000900400018018000a8014000700fe8000000000000000000000000000aa"], 0x54}}, 0x8024) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) socket$phonet(0x23, 0x2, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32], 0x30}}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000680008002dbd7000ffdbdf2552b84ecab665d2702b17ed83676f02000100060000e70500070020004e44721c13681fa2eebb9d4fc972d73ecf44c4e92924", @ANYBLOB], 0x80}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x1aecc000) r8 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18e40000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) 5.431564556s ago: executing program 1 (id=2100): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0400fcffffff0400f2ff1e000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x24040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001000)={'bridge_slave_0\x00', @random="e4a8b032869c"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB], 0x7c}}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001080)=r8, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x8000) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.932904081s ago: executing program 3 (id=2103): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.869738935s ago: executing program 0 (id=2104): r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x890c, &(0x7f0000000240)=@get={0x1, &(0x7f0000000680)=""/4096, 0x7}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x1e, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000300)=0x0) sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000280)=@nfc_llcp={0x27, r11, 0x1, 0x6, 0x6, 0xb, "9e99b54ec8ad18613387e4230ef7d4aa08d4d3b74eb374d67692beeff7fab748eea107d89598499293b8a0a25de911da135eb81f99efccdce6558ae75c47f7", 0x9}, 0x80, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r12, &(0x7f0000000340)="18000000010005", 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x32, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f631"}}) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673690002006e657464657673696d30000008008b000000000000", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_init_net_socket$llc(0x1a, 0x20e3ad3004527ac7, 0x0) 4.354346729s ago: executing program 3 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4d, 0x0, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01008000000005dcdf2501000000080056ce", @ANYRES32=r9, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000008000008000600", @ANYRES32=r6, @ANYBLOB], 0x60}, 0x1, 0x400000000000000}, 0x0) unshare(0x100000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0xbc, 0x4, 0x3, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0xbe, 0x7fff}}) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000000980)={0x998, r8, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7a8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xae8f, 0xfd, 0xee, 0x1000}, {0xfffe, 0x5, 0x5, 0x2}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r3}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa1b1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4f}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x4844}, 0x800) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x14, 0x4, 0x0, 0x0, 0x0, 0x6, 0x3}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_SRC={0x8, 0x2, @private=0xa010102}, @FRA_FLOW={0x8}]}, 0x34}}, 0x40010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r13) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r15, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xa01}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 4.278832916s ago: executing program 4 (id=2106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.266674782s ago: executing program 0 (id=2107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @multicast1}, {0x2, 0x20, @empty}, 0x363, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r2 = socket(0x1e, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x8}, &(0x7f0000000580)=0x8) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r8 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r8, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r9, 0x0, 0x0, 0x20000040, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 4.134813367s ago: executing program 4 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214d", 0x2b}, {0x0}, {&(0x7f0000001000)="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", 0x463}], 0x4) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001815", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYBLOB]) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340)="8e6b373c083a4aa28e5588524a41399bf5fbb0f58b843bb2980b248235f47fbd138ca6f66ab492d8720f7d", &(0x7f0000000380)="e1c265e436668d5b10d71843fca2a234a96c4ba30436", 0x80, r2}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) listen(0xffffffffffffffff, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 3.79244761s ago: executing program 3 (id=2110): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff000}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000a4fa4cb92262e07256eadfbadf8c74f114df877549a150e8afe78b845970f1f221067559b01be897da7edaa37983d3d79c108b6a8814f3476756b690d6b6aa741f10e9cb29105cf526bf15d74d1b3653d30200000000000000028eb69919a1e07513fea9b6c1e0ed", @ANYRES16=r8, @ANYBLOB="31072bbd700000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x2}, 0x20000014) 3.792015267s ago: executing program 4 (id=2111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.789543766s ago: executing program 1 (id=2120): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 3.654209158s ago: executing program 4 (id=2113): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x83}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x2}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x543bb000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00', 0x80}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x4, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xcf12, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xfff, 0x7fff, 0x81, '\x00', 'syz0\x00', {0x525}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) mmap(&(0x7f00008ba000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xfffff000) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000800)={r2, 0x0, 0x9, 0x4, 0xffffffffffff0001, 0x8, [0x6, 0x10001, 0xc51, 0x8, 0x8, 0x4]}) unshare(0x22020600) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x424, 0x11, 0x6, 0x5, 0x70bd27, 0x25dfdbfd, {0x5, 0x0, 0xa}, [@generic="e7224099aacc5fe8816e3a79d4d372f656b4ea07d42b98a4e6c551cedd705e82e0ce1075811599e3316c46fc8c29a87208a6d65c1a9ee81fada4ecaf5c0ab0e49b402c25719e554caa589ae04713921ebe37812d193cc8f51e79391bbc4cf6e79a8c51ce7ca8bf7bfb996e5ad6afd85169a3a6ac736810aaec1ff21a33d18a7835c3563b285691e2c8e3eb020b7ac39afdcab18c6b6f0c7c88b7098226a384a75f6d0646b0459db19c1f60db9a67877cfeca6f5a8851f84a3fb941a4b4f075f8b244bb0230f4cc9b373b2271c2bea3811e2d8de8dae973152044c94cd490b7bce7b9674fe2a3a2146380f2f0138a4a43ae9384", @typed={0x8, 0x121, 0x0, 0x0, @str=']^,\x00'}, @generic="1ae42fe8e6944084b986db28ef7cfd6aeaadb295acc762063951b54323dfd2fe31c3b4275f6a1da05a2485e5d4515a80a7f44bb54cac0edfa3d94983a881716d900339e6170a861453f7ba4f5fcd7d7645a2e81c2cf30efb0afd106d9bc2bbf41efa4bdc565c8e262e238a4c4290adc4dbe09e30f75c221c41cfb5125f4dbbedc9243b9d58b5db0315a7f495616c5b33aed8cfbb42c9071324d0b9b489cdef1bbdea0495552212ae1f79849f8e1cd26efd40fded136e034c8324bb192d880ad368dd023a661e19f8e1e3df66adbfb23ec12fa4b133e046015961f6a3321d0e50bb2208aeda2a37f627f5566bec2127418df3b4", @generic="5b7c3d51546ee5ee348210407392847578cd6a611e9e5bf8f0ea6059b14f2e9e4049b95de1fa8cd990ef4e7f9d7ce63b9080f5e23a13fb143fc6a04999facbc709ba011fc2aaebfe64c690b2a9059cc561b5e4e683b0", @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@remote}, @generic="1da28a05937b6076398efa6c2ab0b3f4b599549a37fb3d181609c609f12bc0c343e9fb1aee96daf3a55f349ef6ee0827802a92b4dcf20c8338e8814c3f8c06ab71677c6d8b66ac54d11dac1d79503378df857515aab366fdbd5b233e9e578ca4a5bdce29a40559cc48e6fce4e3ee5a2948bd7cf04e9a13beb069fe0bdb889928d97c7b5701d24d4b8cc657560390bef36820f2b1e87b058f139614bee10645e3dda1793e1370685f20acb3f0db24dc41dd161e7748339ac343be8412053171b249c14a579d62411ffb9f1173", @nested={0xee, 0xb4, 0x0, 0x1, [@nested={0x4, 0x87}, @generic="f992ac26cf1930dc286c9c2343e481b38f8278dd13949a8584467c2af5bb0abec00edf13e223db17d71325021cfe5f9e1cd34ebabbdbcb93dae81ff21084054f354048e6ed48e927f6ada05375d34134b179ff54d4aee479b9b32c58454ed5a5f670359df81f009133f27e5cad27c867658576b868bc09e3f74cd0a7c593c425a46056b3daaac21fda9df2f4b0b7da5f9386f365415e0fa84cfca3d9794fc6847c6c54bf09ddddc6c48ecec490116617f439665b96286f5e3ae6d1dba21edac5d71d32afd68f74925f193979fb34cdeeb00a56414dd78678198e96d041d19cf31cd84d1cfa67"]}]}, 0x424}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0xffffffe4, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r8, 0x605, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000240)={0x1, 0xb4, "87a3d44ddb07e29cfc836a15c6f3f2ec890d4adddb9323039e6fa9c85ea3ae5a1aae716f087ff8e606a4f9d756bcacb1adf0da6580cc58dd79456af16b19f218def697de6477805bb9485d793f9851f1f2c1cbe6e38e1eb573fbc35aad74893f35046eddeaf292e1a1d0f017314846cc8c15c54810cd5bca3c82cd9361c5cc08eaf98d0a575f220e1bfe603becc7e515d34ccfb69eb791069fd98abcdaae5c9a1a1f6d75fe72842a6a1a59700c26e82fb918e507"}) 3.54737698s ago: executing program 2 (id=2114): sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0xd8}}], 0x1, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01006dbd70000000000021ffffdd0c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.301525882s ago: executing program 2 (id=2115): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.001289365s ago: executing program 0 (id=2116): bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x1c, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x4}, {0x4}]}, 0x1c}}, 0x2000a804) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="000445315ca0d265245100e70f9afcfb186b20c33d63d5b96cfaaa38127ca50171dbb594ca27c6f044e85701d6904195a042b7280334a634d6f1e876b4c5527a53820a604f0988c991a074f4950d3346501169ad2c8eda0b2ff59ee6f84caf1f18a33dd896e0c2ec0ff0495afd843bcf48371fde8344fa11805d53db52da3054d838b90d4f921be3fc9d48a08bfd1ffaa33a2cddfc1014a8e8bfe6", @ANYRES16=0x0], 0x300}, 0x1, 0x0, 0x0, 0x1}, 0x80) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r1, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, 0x0, 0x840) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, 0x0, 0x0) 2.788809851s ago: executing program 1 (id=2117): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000100001082cbd7000ffffffff01000000", @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b00"], 0x28}}, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x2b, @remote, 0x4e21, 0x2, 'nq\x00', 0x0, 0x100004d2, 0x30}, {@multicast2, 0x4e22, 0x2, 0x4, 0xd3, 0x6}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f00"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r7, 0x25, 0x1d, @void}, 0x1a) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r8, 0x0, 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000100)=0x5, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2.675225487s ago: executing program 2 (id=2118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.462449756s ago: executing program 4 (id=2119): socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r3, 0x333, 0x0, 0x4}, 0x14}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0xa00}, {0x0, 0x100000000000000}]}, 0x68) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20001}, 0x44008) mmap(&(0x7f0000278000/0x2000)=nil, 0x2000, 0xb635773f04ebbee0, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xde, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r8, &(0x7f0000000500), 0x0}, 0x20) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1000000}}, 0x20) 2.406705647s ago: executing program 1 (id=2121): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151d0100000000002800128009000100766c616e00000000180002800c0002001a0000001a000000060001000100000008000500", @ANYRES32=r2, @ANYBLOB="9bef975df81f8bf34bad1e399437f4d0041052974df1faaed3a777c595323b15a2e7897d84b86ada78782a337d5545f7b5d3720235d87c09a0601acd76e73ad60245"], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r3], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="5c9af1c5267216f56945f75666867fec2f38aa07f63c2934eda4d3852446e46f8e5b42444867f915042d0d53a5067832008485befd368145670f8a8f586f6c36fa4be5c21515eaed7369cf93428eaee7830ccf850d629e2beb8130f6b6d8a1615690d36973a5433268308033931a09e3ecba7e7f6f92a4c34ea72092211916e7068d32970392a325cbf52e76a47b6660f3d5bd1b2fa4e7177b33f6783585cc1bdbdc8af9335cff66dee2361a7e458cf209e0d3eb32cd9bc3541eb5ca34ba323612092711751f7928bbd01cc37864ce689cd3", 0xd2}, {&(0x7f0000000600)="51254f547e450d009763bc2a7066ad1ce4bb1292710ff3ef25adf52b929614caa26e0cf8cd1abb16b7b72bae6aab10fc24b4a7e4fa04d00a10c6c2e2a1fd9e40d52e78a0c362f11cd489ab4b311a7f5e44f0e98d7c69b0130060d7038c56817b64ac340cc5e0ec9cf00e3834cee1d99cc712766e753e86ab10e9b8df2318481249dc43060129072e4d665bd6cd5513197cdfe9b02822bc2e239a52f62b64498eb319c3bd5814859b9e26e8827166252cecf9cc816150d0db7c10d804f19f4437f005939f9f9f7c", 0xc7}, {&(0x7f0000000700)="bd", 0x1}, {&(0x7f0000000740)="cb71ce647bd88f31d85e168bea659313918b99e223390c11b72b05e5d178748da7b5d87a9b88cb6404903c00cdb94a3322a8cbdbc013711744affdc094a093557dcf528ad603cc75da86182e4fc8e9c8f0c4a6ac8474dbe137bf096baf00e37b", 0x60}, {&(0x7f00000007c0)="722f6687e59c6f1dbf14fd8a5170c6cebe32cbc7b0832546c2bc02353426526a9fe19636c2a94aeabd1a5de5a27c21fbad4c7af84632cb148baa", 0x3a}, {&(0x7f0000000800)="9c2ffcd1b70715b81b9860d004ba017f04a7dbf97bcea72b3d83cde34552d1e93fbb283e4588fd578f8ead3a969380d54c4f42b1cc8e84ad4603129329ae3870acb187c91ef0caacba8b13d1266c072f645cad3260dc0bf0a84048b20a24eab3b45921dd78fd6e32e20a3d5f84caa88e6d2d0ff94ffc0986e7b1ff78e27a39fc8636cecb4b54ba40a5d134e9", 0x8c}], 0x6, &(0x7f0000000940)=[@iv={0x50, 0x117, 0x2, 0x39, "599bc943a85d861da623075aebe237b54cf0a7b642e7bcc0165db46a5eae8522b76a050af945aa5f5334092c52e3fc4cc30c8b67abf5607d4b"}, @assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x18}], 0xb0, 0x8000}, 0x40000) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) 2.375036512s ago: executing program 2 (id=2122): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000"], 0xe8}}, 0x0) unshare(0x20400) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @mcast2={0xff, 0x3}, 0x1}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000003010d000000000000000005000007080003410000040034000f80080009000000007b08000140000000"], 0x60}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xe, 0x6, @mcast1}}}}}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000000)=0x8ac, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="2e9b5b00ace03dd6d1", 0x9}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r6}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, r6}, 0x38) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r8, 0x30a, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010b2dbd7000fcdbdf250100000008000200020000002c0004800500030001000000050003000200000005000300070000001c4d000000000000050003000100000034000480050003000600000005000300010000000500030001000000050003000600000005000300000000000500030001000000080002000300000022e61f5a7229a90caab9a57d94b6ddb17af2b771b6c95ed4fafaca1287346527c39ba8349634d115b893d58efe98a56bc53674c0ae7ba78a3b620c64d264d37205fbbbeffde3f574abd3137acc07000000000000005fb79bb0e8"], 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x1004c000) 2.041238078s ago: executing program 0 (id=2123): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.964367313s ago: executing program 3 (id=2124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.487943611s ago: executing program 0 (id=2125): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000), 0x0, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 1.197274552s ago: executing program 3 (id=2126): r0 = socket(0x400000000010, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 864.626168ms ago: executing program 0 (id=2127): unshare(0x28000600) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2c0000000104010200000000000000000a000001080004400000000005000100010000000800034000000200"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x40050) socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x670, 0x5, 0x498, 0x100, 0x328, 0xfeffffff, 0x328, 0x328, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300, 0x300]}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x3, 0x1]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_team\x00', {0x44, 0xd6ff, 0x2, 0x8, 0x0, 0x28, 0x6, 0x40, 0x20}, {0x1}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private2, 0x4e23, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, @in=@multicast1, 0x6c, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@loopback, @in=@loopback, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x0, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000280)={0x6, {{0x2, 0x4e22, @private=0xa010100}}}, 0x88) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f80)=@newtaction={0xf90, 0x30, 0x51b, 0x0, 0x0, {}, [{0xf7c, 0x1, [@m_pedit={0xf78, 0x5, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x400, 0x5eac, 0x10000000, 0x3, 0x3a6}, 0x5, 0xff, [{0x1, 0x9, 0xfffffffd, 0xc, 0x4, 0x8}, {0x763553b1, 0x70, 0x2, 0x22, 0x8}, {0x4, 0x9, 0xffffffff, 0x1, 0x4, 0x7fff}, {0xc, 0xd90, 0x2, 0x3, 0x1, 0x400}]}, [{0x8, 0x7fffffff, 0x5, 0x10001, 0x49d7, 0x9981}, {0x7fffffff, 0xffff8001, 0x2, 0x58, 0x2, 0x123f}, {0x89, 0x9, 0x4, 0x4, 0x2, 0x7}, {0x3, 0x80000, 0xfffffe77, 0x3, 0x9, 0x1}, {0x2d, 0x6, 0x2, 0x9b, 0x92d, 0x7}, {0x26, 0x9, 0x6, 0x3, 0x2, 0x8}, {0x0, 0x0, 0x7, 0x9, 0x200, 0x9}, {0x8, 0xfffffffa, 0x1ff, 0x3, 0x2, 0x1}, {0x3, 0x5, 0x1, 0x80000000, 0x101, 0x8}, {0xfffffff8, 0x200, 0x9, 0x2, 0x5, 0xffff}, {0x80000, 0x10, 0x1, 0x5, 0xffff, 0x9}, {0xe7d5, 0x7fffffff, 0x40, 0xc, 0x3, 0xe20e}, {0x3, 0x1, 0x9, 0xfffffffd, 0x2, 0x80000001}, {0xeb, 0x15, 0x7fffffff, 0x10000, 0x9, 0x2}, {0xe9e, 0x6, 0x4, 0x2, 0x5, 0x8}, {0xd, 0x4, 0x8, 0xdd9, 0x1, 0xffffff81}, {0xfffffffa, 0x4, 0x0, 0x7, 0x2, 0x3}, {0x57, 0x2, 0x6, 0x3, 0x8, 0x9c}, {0x80000000, 0xdf5, 0x5, 0x6, 0xb3, 0x8}, {0x970, 0x200, 0x96, 0x298c, 0x3, 0x10001}, {0x80, 0x9cf1, 0xcf, 0x0, 0x2, 0x8}, {0x200, 0x3, 0x28f, 0x2, 0x7, 0x4}, {0x5, 0xfffffffb, 0x5, 0x0, 0x0, 0x4}, {0x9, 0x6, 0xd, 0xa, 0x5, 0x2}, {0x7, 0x200, 0x1, 0x4, 0x9, 0x2}, {0x1, 0x9, 0x1, 0x8, 0x100, 0x10000}, {0x4, 0xe, 0xd69, 0x1c, 0x5, 0x8}, {0x4, 0x8, 0x8, 0xb, 0x6, 0x5}, {0xfffffffb, 0xd, 0x0, 0xe, 0x100, 0x5}, {0x8, 0x80000001, 0x8, 0x1, 0x3d, 0xf}, {0x3, 0xffff, 0x3, 0x800, 0x6, 0x5}, {0x6b2, 0x1, 0x5, 0x2, 0x1000, 0x75}, {0x7, 0x80, 0x0, 0x9, 0x64f8e7cc, 0x5}, {0x9, 0x7, 0x0, 0xc9bb, 0x99, 0x1}, {0x4, 0x0, 0x6, 0x7, 0xfff, 0x54d}, {0x9, 0x172, 0x8000, 0x3, 0xc, 0x4aa}, {0x3, 0xc, 0xa, 0x7f, 0xe, 0x80000001}, {0x5eb, 0x9, 0x10000, 0xffffffff, 0xc6a, 0x3f}, {0x8, 0x81, 0xc, 0x0, 0x4, 0x8}, {0x5, 0x6, 0x8001, 0x74, 0x101, 0x1}, {0x5, 0x3, 0x38dd, 0x8000, 0x0, 0x54f4}, {0x7d000000, 0x3, 0x8, 0x6, 0x4, 0x4}, {0x80000001, 0x80, 0x9, 0x0, 0x6, 0x7}, {0x0, 0x6068, 0x6e, 0x694, 0x7, 0xe000000}, {0xfff, 0xfffffffb, 0x80000000, 0x1, 0x400, 0x200}, {0xfff, 0x2, 0x1a000000, 0x10, 0x6, 0xc0}, {0x1, 0x10000, 0xffff, 0x0, 0x0, 0x9}, {0x9b, 0xf78f, 0x62, 0xc, 0x0, 0x9}, {0xfffffff9, 0x4, 0x5, 0x67, 0x6, 0x7}, {0x10, 0xa, 0x18be, 0x80000001, 0x9, 0x3}, {0x3, 0x8, 0x0, 0x7, 0x5, 0xe3}, {0x7, 0x5, 0x1, 0xffff0001, 0xfffffff7, 0x5653}, {0x4, 0x7, 0x9, 0x1, 0x4, 0x8000}, {0x7, 0x0, 0x16b, 0x0, 0x401, 0x6}, {0x6, 0x100, 0x0, 0x3, 0x1, 0x6}, {0xce12, 0x739f, 0x401, 0x100, 0x4, 0x5}, {0xd, 0x3ff, 0x3, 0x7, 0x4, 0x6}, {0x3, 0x81, 0x25, 0x2, 0x2, 0x100}, {0xfffffff8, 0x1, 0x101, 0x2, 0x8, 0x7fffffff}, {0xa, 0x1, 0x7, 0x52, 0x8, 0x7}, {0x1, 0x8000, 0x7, 0x8, 0x608, 0x40}, {0x6, 0x0, 0x5, 0xc, 0x8, 0x7ff}, {0x28ff4eb9, 0x9, 0x1ff, 0x0, 0x8, 0x3}, {0x7, 0xc1ce, 0x17a, 0xd, 0x9, 0x5}, {0x80, 0x5, 0x7, 0x0, 0x4, 0x800}, {0x8000, 0xa, 0x101, 0x7, 0x605c, 0xffff}, {0x100, 0x2, 0x2, 0xa4f, 0x7ff, 0xf}, {0x3, 0x6, 0x3, 0x2, 0x34, 0xfffffff8}, {0x1ff, 0x80000000, 0xe8b4, 0x3ff, 0x101, 0x18}, {0x932e, 0xffff8000, 0x7f, 0xffffffff, 0x7, 0x8ea9}, {0x3bab, 0x6, 0x7, 0x9a0}, {0x1, 0x81, 0x871, 0x25a, 0x8, 0xf}, {0x3, 0x8001, 0x7, 0x1, 0x6}, {0x40, 0x9, 0xd696, 0x4, 0x2, 0x2}, {0x1, 0x3ff, 0x401, 0x6, 0x598348f2, 0xff}, {0x0, 0x5, 0x1, 0x8, 0x8bd2, 0xbb}, {0x9e, 0x7, 0x200, 0x40, 0x5, 0x5}, {0x2, 0xd, 0x18000000, 0xffff8001, 0x9, 0x4}, {0x8, 0x2, 0xadc6, 0x80000001, 0x6, 0x1}, {0x0, 0xe7b9b5f, 0x800, 0x3, 0x8, 0x1}, {0x0, 0x1000, 0x3, 0x7f0, 0x9, 0x4}, {0x0, 0x2, 0x0, 0x80, 0x0, 0x9}, {0x1, 0xbf7, 0x3d67, 0x2e, 0x7fffffff, 0x1a}, {0x2e, 0xe, 0x9, 0x4, 0x8, 0x1}, {0x84, 0xffff, 0x3, 0x1ff, 0x2ecf, 0xffffffff}, {0xa0, 0x5, 0x6810d5c, 0x5, 0x1, 0x5}, {0xe, 0x6, 0x1, 0x6, 0x7, 0x4}, {0x1, 0xff, 0x5, 0x6, 0xd, 0x2}, {0x5, 0x7, 0x6, 0x7ff, 0xc8f, 0x1}, {0xa79ee2e4, 0xffffffff, 0x5, 0x10, 0xfffff94d}, {0xfffffffe, 0x3ff, 0x2, 0x6, 0x3, 0x23a18014}, {0x3, 0xe00, 0x400, 0xfffffffb, 0x4, 0xe}, {0x3, 0x3, 0xd, 0x6, 0x6, 0x7}, {0x3, 0x3, 0x96, 0x81, 0x0, 0x9}, {0xdb, 0x3, 0x0, 0x5b3, 0x0, 0x8}, {0x8b, 0x0, 0xfffffff9, 0x1, 0x8, 0x5}, {0x0, 0x7, 0x206, 0x80000000, 0x1000, 0xdde}, {0x3, 0x0, 0x4, 0x5, 0xba0, 0x7fffffff}, {0xffffffff, 0xcf, 0x3, 0x6, 0x80000000, 0xb}, {0x2, 0x100, 0x4, 0x9, 0x0, 0x9f69}, {0x4, 0x8, 0x1, 0x6, 0xfffffc00, 0x40004}, {0x6a, 0x6, 0x3, 0x9, 0x6, 0x8}, {0x5, 0x0, 0x71c, 0xf7, 0xff, 0x2}, {0x8, 0x1a, 0x5, 0x3, 0xa59, 0x7ff}, {0x9, 0x3ff, 0x2, 0x0, 0x200, 0x1}, {0x3, 0x2, 0x1, 0xd8fa, 0x5, 0x7}, {0x29, 0x4, 0x0, 0x5, 0x4f5}, {0xb7, 0x2, 0x7, 0xe, 0x4, 0x401}, {0x8000, 0x5, 0xfffffa02, 0x5, 0xe, 0xfe75}, {0x0, 0x10, 0x8, 0xf8, 0x0, 0x3}, {0x81, 0x7, 0x81b4, 0x7, 0x9, 0x6}, {0x3, 0x8, 0x0, 0x3, 0x8000, 0x4dbe}, {0xbc, 0x1, 0x1, 0x2, 0xce7}, {0x3, 0x81, 0x3b8a, 0x6, 0x10001, 0x1}, {0x81, 0x7c7, 0x3, 0x3ff, 0x2, 0x4}, {0x5, 0x10000, 0xa, 0x1, 0x4, 0x3}, {0x0, 0xf, 0x5, 0xffff, 0x0, 0xb}, {0x0, 0xe, 0x7, 0xfffffeff, 0x5, 0x5}, {0x7, 0x9a, 0x8, 0x9, 0xffffff01, 0xff}, {0x7fffffff, 0x3, 0x10000, 0x5, 0x4, 0x8}, {0x0, 0xfff, 0xb3, 0x2, 0x1, 0xcb}, {0x0, 0x4, 0x8, 0x3e5924ab, 0x0, 0x3}, {0x5, 0x8, 0x26e7, 0x8, 0x1000, 0x9}, {0x10001, 0x1a62, 0x675e0ded, 0xb, 0x80, 0x80000001}, {0xff, 0x0, 0xb, 0x7f, 0x40}, {0xf044, 0xffff, 0xf50, 0x14, 0x9c, 0xfffffff7}, {0x5, 0x2, 0x0, 0x5, 0x3, 0x7f}, {0x7d, 0x1, 0x5, 0x2, 0x1, 0xffffffff}], [{0x2, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x10eeaebdfd45ee6a}, {0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x3}, {}, {0x5}, {0x5}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x6}, {0x1}, {0x5783f585e0569d00}, {0xd76b55381db620f2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x0, 0x24e5743a4ff49bc3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2}, {0x5}, {0x3}, {0x1}, {}, {0xfc087c22b0dc0e54}, {0x5, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x7, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {}, {}, {}, {0x0, 0x1}], 0x1}}]}, {0xca, 0x6, "b4c83d5918fe2254224d4acb7e2c8ec818f267aca3e229f07da56cee8a566f45c0b1a41a150e9bdc1b3d098cc490a069b291797ffdbfb2207fe7e6cba463af3eaa47bf282d8f0569bc522c11e475ff3d4b41914776710571abcfd37f4edd125dccdd6b16c24db21879f7dea8f9680758e9e1bf4c797dc2a592069591dd44471ce288d73027a27a1aa20f629775199b451d233a8dd09b4a1ed3f23d1c7e8d12344a860aa9ecf332e8350e6cc0f7dd0987acee67085b4cd96208b77225a371d2551419facc5389"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf90}}, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x200080c4) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) 849.909262ms ago: executing program 4 (id=2128): r0 = socket$inet6(0xa, 0x80000, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x1, {0x3a3}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6}, {0xffffffffffffffff, 0x2, 0x4}, {0x1, 0x0, 0x4}, 0x7ff, 0x1}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], [0xa6ac29d90f0230e3, 0xffffff00, 0xffffffff, 0xff], 'veth1_to_bridge\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x1, 0x8, 0x2, 0x12}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x200}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000300)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffd, @mcast2}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x4c02}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team_slave_0\x00', 0x200}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e00, @private=0xa010102}]}, &(0x7f00000000c0)=0x10) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x3d, 0x224, 0x0, 0x7, 0x2, 0x1, 0x10001, 0x1}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000580)={0x0, 0x3}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0xa, 0x3, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r9}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073257a3100000000ac000000030a01030000000000000000010000001400048008000240000000fffbffff40000000050900030073797a30000000000900010073797a860000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c0001400000"], 0x92fc}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000180)) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 834.58703ms ago: executing program 2 (id=2129): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 766.244032ms ago: executing program 1 (id=2130): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xd1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3c, 0x7ff, 0xf83, 0x2}, 0x1c) r2 = socket(0x11, 0xa, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_NH_ID={0x8, 0x1e, 0x1ff}, @RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x2c}}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4}, 0x10001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x154, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@local, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x4000}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd2d, 0x70bd2d, 0x70bd28}}]}, 0x154}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r6, 0x29, 0x9, 0x4, 0xc, 0xd, @empty, @loopback, 0x10, 0x8, 0x1, 0x100}}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00f4422f5fc7d9000000000000000000000080752b923a7f8d685bdc0dc0e862e1064642d80895aafc3aea0a45b2346f0d01941d9d7a7760939a4ea703a8146a472950ec0a5a508cd87e3dcc4f4564558a4b0f5bf8150c1de8b182db1579550f70de05f26628ff4aaecb9ea0159f1b1fed41eabf730191d2ee2487dbf6356a68d568e371ffe3cbb011b1688f16313b", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='\x00'/28], 0x50) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 570.345382ms ago: executing program 3 (id=2131): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x256c7520}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r9, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r16, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 2 (id=2132): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027840000000000000080000008000100", @ANYRES32=r6, @ANYBLOB="0c00030003000000000000000800020000000000060006000000000005000d000500"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x13, 0x20, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1a08}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x98}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfb17}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x0, 0x6, 0x4, 0x4, 0x30, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000c80)=""/4096, 0x41000, 0x7c, '\x00', r6, @fallback=0xe, r1, 0x8, &(0x7f0000001c80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001cc0)={0x1, 0x8, 0x1, 0x3}, 0x10, 0x0, r1, 0x3, &(0x7f0000001d00)=[r1], &(0x7f0000001d40)=[{0x4, 0x3, 0x0, 0xc2f8922b0f65d77c}, {0x2, 0x2, 0xb, 0xb}, {0x2, 0x3, 0x8, 0xc}], 0x10, 0x9000}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) socket(0x28, 0x5, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) bind$inet(r8, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd5effffffffffff00", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000000000000000000000005009113030000000000aa00000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) kernel console output (not intermixed with test programs): 54 phy0 wpan0: entered promiscuous mode [ 310.448555][T10796] syzkaller0: entered promiscuous mode [ 310.451384][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 310.500910][T10800] syzkaller0: entered allmulticast mode [ 310.788771][T10826] bridge5: entered promiscuous mode [ 310.792815][T10826] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 310.821787][T10827] bridge6: entered promiscuous mode [ 310.832986][T10827] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 311.107860][T10841] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 311.107900][T10841] netlink: 'syz.2.1347': attribute type 2 has an invalid length. [ 311.167990][T10842] x_tables: ip_tables: osf match: only valid for protocol 6 [ 312.894582][T10838] net_ratelimit: 4 callbacks suppressed [ 312.894607][T10838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.901692][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.906438][ T9368] bond1: (slave bridge1): failed to get link speed/duplex [ 312.913881][ T1367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.914095][ T1367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.914197][ T1367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.914295][ T1367] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 312.914399][ T1367] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 312.914505][ T1367] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.071166][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 313.179068][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 313.280753][T10849] syzkaller0: entered promiscuous mode [ 313.280780][T10849] syzkaller0: entered allmulticast mode [ 313.308699][ T5850] bond1: (slave bridge1): failed to get link speed/duplex [ 313.322186][T10849] tipc: Enabled bearer , priority 0 [ 313.342168][T10856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.390242][T10849] tipc: Resetting bearer [ 313.418825][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 313.423010][T10848] tipc: Resetting bearer [ 313.500857][T10848] tipc: Disabling bearer [ 313.568968][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 313.679266][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 313.787977][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 313.856817][T10870] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1356'. [ 314.324173][T10875] bridge7: entered promiscuous mode [ 314.344300][T10875] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 314.451099][T10872] bridge8: entered promiscuous mode [ 314.503682][T10872] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 314.836699][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 314.883211][T10894] netlink: 'syz.1.1360': attribute type 32 has an invalid length. [ 314.883238][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 314.883264][T10894] bond0: option coupled_control: mode dependency failed, not supported in mode balance-alb(6) [ 314.975115][T10903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1361'. [ 315.556109][T10921] syzkaller0: entered promiscuous mode [ 315.556134][T10921] syzkaller0: entered allmulticast mode [ 316.082754][T10943] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 316.241814][T10952] bridge7: entered promiscuous mode [ 316.505324][T10955] bridge7: entered promiscuous mode [ 316.546083][T10955] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 316.620026][T10951] bridge13: entered promiscuous mode [ 316.794630][T10961] bridge13: entered promiscuous mode [ 317.400876][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 317.400905][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 317.402621][T11000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1379'. [ 317.439634][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 317.606645][T11003] 8021q: adding VLAN 0 to HW filter on device .` [ 317.705902][T11011] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1380'. [ 317.802111][T11003] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.802142][T11003] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.035845][T11003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.051772][T11003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.077673][T11003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 318.079130][T11003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.081831][T11003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.111292][T11003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.133739][T11003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.137347][T11003] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.204741][T11003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.223582][T11003] 8021q: adding VLAN 0 to HW filter on device bond6 [ 318.261353][T11003] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.294595][T11003] 8021q: adding VLAN 0 to HW filter on device bond8 [ 318.309378][T11003] 8021q: adding VLAN 0 to HW filter on device bond9 [ 318.311430][T11003] 8021q: adding VLAN 0 to HW filter on device bond10 [ 318.315966][T11003] 8021q: adding VLAN 0 to HW filter on device bond11 [ 318.324771][T11003] 8021q: adding VLAN 0 to HW filter on device bond12 [ 318.352842][T11003] 8021q: adding VLAN 0 to HW filter on device bond13 [ 318.354705][T11003] 8021q: adding VLAN 0 to HW filter on device bond14 [ 318.375750][T11003] 8021q: adding VLAN 0 to HW filter on device bond15 [ 318.386007][T11003] 8021q: adding VLAN 0 to HW filter on device bond16 [ 318.396333][T11003] 8021q: adding VLAN 0 to HW filter on device bond17 [ 318.409638][T11003] 8021q: adding VLAN 0 to HW filter on device bond18 [ 318.412121][T11003] 8021q: adding VLAN 0 to HW filter on device bond19 [ 318.413934][T11003] 8021q: adding VLAN 0 to HW filter on device bond20 [ 318.564477][T11003] 8021q: adding VLAN 0 to HW filter on device bond21 [ 318.581298][T11003] 8021q: adding VLAN 0 to HW filter on device bond22 [ 318.583198][T11003] 8021q: adding VLAN 0 to HW filter on device bond23 [ 318.585047][T11003] 8021q: adding VLAN 0 to HW filter on device bond24 [ 318.586307][T11008] netlink: 'syz.1.1380': attribute type 3 has an invalid length. [ 318.586547][T11008] netlink: 'syz.1.1380': attribute type 3 has an invalid length. [ 318.588392][ T6548] net_ratelimit: 35 callbacks suppressed [ 318.588442][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 318.588563][ T6548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.665238][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.665354][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.726290][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.726404][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.935848][T11050] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 319.351755][T11057] bridge1: entered promiscuous mode [ 319.425485][T11059] bridge1: entered promiscuous mode [ 319.469841][T11070] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 319.552291][T11070] 8021q: adding VLAN 0 to HW filter on device bond14 [ 319.571539][T11064] syzkaller0: entered promiscuous mode [ 319.571566][T11064] syzkaller0: entered allmulticast mode [ 319.646785][T11072] tc_dump_action: action bad kind [ 319.649859][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.650011][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 319.650769][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.670097][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.720748][T11064] tipc: Enabled bearer , priority 0 [ 319.763385][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 319.905644][T11075] macvlan2: entered promiscuous mode [ 319.905670][T11075] macvlan2: entered allmulticast mode [ 319.906100][T11075] bond14: entered allmulticast mode [ 319.906471][T11075] bond14: entered promiscuous mode [ 319.914842][T11075] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 319.946971][T11075] team0: Port device macvlan2 added [ 319.984262][T11081] bond14: (slave ip6gretap1): making interface the new active one [ 319.984290][T11081] ip6gretap1: entered promiscuous mode [ 319.984448][T11081] ip6gretap1: entered allmulticast mode [ 320.008424][T11081] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 320.013196][T11063] tipc: Resetting bearer [ 320.090458][T11063] tipc: Disabling bearer [ 320.190697][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 320.297899][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 320.407603][ T5850] bond1: (slave bridge1): failed to get link speed/duplex [ 320.557982][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 320.592058][T11090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.627083][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'. [ 320.688026][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 320.735839][T11101] Cannot find add_set index 2 as target [ 320.750488][T11105] tipc: Enabling of bearer rejected, failed to enable media [ 320.817659][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 321.029350][T11116] netlink: 'syz.0.1404': attribute type 1 has an invalid length. [ 321.335698][T11116] bridge1: entered promiscuous mode [ 321.400405][T11142] netlink: 'syz.2.1409': attribute type 1 has an invalid length. [ 321.470941][T11121] syzkaller0: entered promiscuous mode [ 321.470964][T11121] syzkaller0: entered allmulticast mode [ 321.493591][T11124] bridge1: entered promiscuous mode [ 323.593912][T11142] bridge9: entered promiscuous mode [ 323.598626][T11142] bond17: (slave bridge9): making interface the new active one [ 323.599502][T11142] bond17: (slave bridge9): Enslaving as an active interface with an up link [ 323.623267][ T6548] net_ratelimit: 1 callbacks suppressed [ 323.623290][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 323.727936][ T5850] bond1: (slave bridge1): failed to get link speed/duplex [ 323.837629][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 323.948073][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 323.951035][T11162] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 324.000608][T11162] 8021q: adding VLAN 0 to HW filter on device bond25 [ 324.026848][T11162] bond2: (slave veth0_to_bond): Releasing active interface [ 324.026879][T11162] veth0_to_bond: left promiscuous mode [ 324.027057][T11162] veth0_to_bond: left allmulticast mode [ 324.041200][T11162] bond25: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 324.060802][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 324.083454][T11162] bridge13: entered promiscuous mode [ 324.091667][T11162] bond25: (slave bridge13): Enslaving as an active interface with an up link [ 324.093511][T11125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.168787][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 324.277650][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 324.310835][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 324.407728][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 324.467165][T11178] netlink: Invalid conntrack helper [ 324.467206][T11178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.567112][T11170] : renamed from sit0 (while UP) [ 324.858588][T11184] tipc: Enabled bearer , priority 0 [ 324.860962][T11184] syzkaller0: entered promiscuous mode [ 324.860985][T11184] syzkaller0: entered allmulticast mode [ 324.863135][T11185] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 325.068333][T11189] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 325.243811][T11185] bridge10: entered promiscuous mode [ 325.264908][T11205] netlink: 'syz.0.1423': attribute type 1 has an invalid length. [ 325.379703][T11188] bridge10: entered promiscuous mode [ 325.434482][T11199] tipc: Enabled bearer , priority 0 [ 325.435011][T11201] syzkaller0: entered promiscuous mode [ 325.435033][T11201] syzkaller0: entered allmulticast mode [ 325.834951][T11211] tipc: Resetting bearer [ 325.861722][T11215] bridge1: entered promiscuous mode [ 325.865619][T11215] bond8: (slave bridge1): making interface the new active one [ 325.866567][T11215] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 325.902993][T11191] tipc: Resetting bearer [ 325.940474][T11191] tipc: Disabling bearer [ 326.031798][T11222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1427'. [ 326.219051][T11236] xt_TCPMSS: Only works on TCP SYN packets [ 327.130087][T11245] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1432'. [ 327.367619][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 328.291169][ T7120] tipc: Node number set to 2841498602 [ 328.365734][T11236] syzkaller0: left promiscuous mode [ 328.365755][T11236] syzkaller0: left allmulticast mode [ 328.546188][T11251] tipc: Enabled bearer , priority 0 [ 328.556664][T11254] syzkaller0: entered promiscuous mode [ 328.556690][T11254] syzkaller0: entered allmulticast mode [ 328.569358][T11250] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 328.658135][ T12] net_ratelimit: 8 callbacks suppressed [ 328.658160][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 328.768590][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 328.846266][T11268] openvswitch: netlink: Message has 5920 unknown bytes. [ 328.846452][T11268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.877744][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 329.066674][T11276] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1440'. [ 329.097696][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 329.208794][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 329.305651][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'. [ 329.319119][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 329.607179][T11296] veth0_to_hsr: left promiscuous mode [ 329.612039][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 329.720093][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 329.814396][T11307] tipc: Enabling of bearer rejected, failed to enable media [ 330.422079][T11330] syzkaller0: entered promiscuous mode [ 330.422104][T11330] syzkaller0: entered allmulticast mode [ 330.720383][ T30] audit: type=1800 audit(1790405447.173:8): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1454" name="memory.events" dev="tmpfs" ino=1508 res=0 errno=0 [ 331.165564][T11337] dvmrp0: entered allmulticast mode [ 331.193842][T11337] dvmrp1: entered allmulticast mode [ 331.278739][T11337] dvmrp0: left allmulticast mode [ 331.278873][T11337] dvmrp1: left allmulticast mode [ 333.240057][T11322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.500178][T11367] tipc: Enabling of bearer rejected, failed to enable media [ 333.737665][T11026] net_ratelimit: 35 callbacks suppressed [ 333.737689][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 333.847999][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 333.866735][T11385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'. [ 333.957845][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 334.075979][T11392] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 334.076022][T11392] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 334.076067][T11392] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 334.077962][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 334.137200][T11392] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 334.160138][T11392] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 334.198762][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 334.350341][T11400] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1471'. [ 334.487645][T11400] macsec1: entered promiscuous mode [ 334.487781][T11400] macsec1: entered allmulticast mode [ 334.517661][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 334.638844][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 334.750860][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 334.792954][T11411] syzkaller0: left promiscuous mode [ 334.792978][T11411] syzkaller0: left allmulticast mode [ 334.813975][T11411] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 334.857640][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 334.968919][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 335.296423][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 335.875312][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 337.149197][T11483] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 337.559950][T11483] bond10 (unregistering): Released all slaves [ 338.597211][T11541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1498'. [ 338.677311][T11541] netlink: 'syz.0.1498': attribute type 4 has an invalid length. [ 338.677336][T11541] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1498'. [ 338.829314][ T12] net_ratelimit: 28 callbacks suppressed [ 338.829338][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 338.937819][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 339.049979][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 339.205814][T11547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.237270][T11552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.245224][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 339.359404][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 339.471032][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 339.589079][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 339.698025][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 339.838088][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 339.949059][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 340.245474][T11586] netlink: 'syz.4.1507': attribute type 1 has an invalid length. [ 340.350012][T11586] 8021q: adding VLAN 0 to HW filter on device bond13 [ 340.470736][T11586] bond13: (slave gretap1): making interface the new active one [ 340.472183][T11586] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 340.784517][T11596] tipc: New replicast peer: 255.255.255.255 [ 340.787021][T11596] tipc: Enabled bearer , priority 10 [ 341.385777][T11613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.884490][T11634] xt_hashlimit: size too large, truncated to 1048576 [ 341.948574][T11640] xt_hashlimit: size too large, truncated to 1048576 [ 344.179345][T11623] bridge_slave_0: default FDB implementation only supports local addresses [ 344.187835][ T6548] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.187925][ T6548] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.188000][ T6548] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 344.188077][ T6548] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 344.188281][ T6548] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.188357][ T6548] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.188430][ T6548] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 344.188496][ T6548] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 344.188595][ T6548] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.188670][ T6548] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.188740][ T6548] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 344.188805][ T6548] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 344.188901][ T6548] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.188967][ T6548] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.189040][ T6548] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 344.189120][ T6548] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 344.621688][T11664] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 344.621732][T11664] CPU: 0 UID: 0 PID: 11664 Comm: syz.1.1526 Not tainted syzkaller #0 PREEMPT(full) [ 344.621760][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 344.621783][T11664] Call Trace: [ 344.621796][T11664] [ 344.621806][T11664] dump_stack_lvl+0xe8/0x150 [ 344.621860][T11664] sysfs_warn_dup+0x8e/0xa0 [ 344.621898][T11664] sysfs_do_create_link_sd+0xc0/0x110 [ 344.621938][T11664] device_add_class_symlinks+0x1cf/0x240 [ 344.621971][T11664] device_add+0x467/0xb80 [ 344.622000][T11664] wiphy_register+0x1fc8/0x2ff0 [ 344.622048][T11664] ? __pfx_wiphy_register+0x10/0x10 [ 344.622075][T11664] ? __pfx_netdev_run_todo+0x10/0x10 [ 344.622113][T11664] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 344.622159][T11664] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 344.622198][T11664] ieee80211_register_hw+0x3d7c/0x4b40 [ 344.622257][T11664] ? ieee80211_register_hw+0x1951/0x4b40 [ 344.622324][T11664] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 344.622361][T11664] ? __asan_memset+0x22/0x50 [ 344.622383][T11664] ? __hrtimer_setup+0x1b7/0x260 [ 344.622415][T11664] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 344.622453][T11664] mac80211_hwsim_new_radio+0x3264/0x5720 [ 344.622518][T11664] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 344.622546][T11664] ? kstrndup+0xbd/0x160 [ 344.622576][T11664] ? kstrndup+0xbd/0x160 [ 344.622603][T11664] hwsim_new_radio_nl+0xd8b/0xf90 [ 344.622650][T11664] genl_family_rcv_msg_doit+0x233/0x340 [ 344.622690][T11664] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 344.622737][T11664] ? bpf_lsm_capable+0x9/0x20 [ 344.622758][T11664] ? security_capable+0x7e/0x2c0 [ 344.622795][T11664] genl_rcv_msg+0x614/0x7a0 [ 344.622832][T11664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.622861][T11664] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 344.622906][T11664] netlink_rcv_skb+0x226/0x4a0 [ 344.622930][T11664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.622962][T11664] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.623004][T11664] ? down_read+0x2be/0x330 [ 344.623044][T11664] genl_rcv+0x28/0x40 [ 344.623070][T11664] netlink_unicast+0x7bd/0x940 [ 344.623118][T11664] netlink_sendmsg+0x813/0xb40 [ 344.623161][T11664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.623196][T11664] ? apparmor_socket_sendmsg+0x98/0x360 [ 344.623235][T11664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.623257][T11664] sock_sendmsg_nosec+0x13a/0x180 [ 344.623287][T11664] ____sys_sendmsg+0x54e/0x850 [ 344.623328][T11664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.623372][T11664] ? import_iovec+0x73/0xa0 [ 344.623407][T11664] ___sys_sendmsg+0x2a5/0x360 [ 344.623439][T11664] ? __lock_acquire+0x747/0x2de0 [ 344.623469][T11664] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.623507][T11664] ? futex_wait+0x2a2/0x390 [ 344.623578][T11664] ? __fget_files+0x2a/0x420 [ 344.623610][T11664] ? __fget_files+0x3a2/0x420 [ 344.623656][T11664] __x64_sys_sendmsg+0x1b1/0x290 [ 344.623694][T11664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.623755][T11664] do_syscall_64+0x166/0x520 [ 344.623786][T11664] ? trace_irq_disable+0x3b/0x140 [ 344.623810][T11664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.623833][T11664] ? clear_bhb_loop+0x70/0xc0 [ 344.623862][T11664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.623886][T11664] RIP: 0033:0x7fdeb7d9e159 [ 344.623918][T11664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.623940][T11664] RSP: 002b:00007fdeb8cbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.623968][T11664] RAX: ffffffffffffffda RBX: 00007fdeb8025fa0 RCX: 00007fdeb7d9e159 [ 344.623986][T11664] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 344.624001][T11664] RBP: 00007fdeb7e3506b R08: 0000000000000000 R09: 0000000000000000 [ 344.624014][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.624028][T11664] R13: 00007fdeb8026038 R14: 00007fdeb8025fa0 R15: 00007ffc238875d8 [ 344.624067][T11664] [ 345.082033][T11666] macsec1: entered promiscuous mode [ 345.266003][T11677] tc_dump_action: action bad kind [ 347.298674][T11712] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 347.341467][T11715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1540'. [ 347.417330][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 347.442214][T11712] bond15: entered promiscuous mode [ 347.445765][T11712] 8021q: adding VLAN 0 to HW filter on device bond15 [ 347.462268][T11715] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1540'. [ 347.567610][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 347.601176][T11717] 8021q: adding VLAN 0 to HW filter on device bond15 [ 347.601611][T11717] bond15: (slave gre2): The slave device specified does not support setting the MAC address [ 347.601632][T11717] bond15: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 347.672186][ T5624] block nbd1: Receive control failed (result -32) [ 347.675856][ T5618] block nbd1: Receive control failed (result -32) [ 347.701532][T11717] bond15: (slave gre2): making interface the new active one [ 347.701567][T11717] gre2: entered promiscuous mode [ 347.741575][T11717] bond15: (slave gre2): Enslaving as an active interface with an up link [ 347.860551][T11720] bond15 (unregistering): (slave gre2): Releasing backup interface [ 347.860585][T11720] gre2: left promiscuous mode [ 347.892949][T11720] bond15 (unregistering): Released all slaves [ 347.906137][T11728] netlink: 'syz.2.1543': attribute type 4 has an invalid length. [ 347.906162][T11728] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1543'. [ 348.079020][T11725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1543'. [ 348.109691][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.110674][T11742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1546'. [ 349.350403][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1549'. [ 349.571406][T11758] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 349.767314][T11759] syzkaller0: entered promiscuous mode [ 349.767340][T11759] syzkaller0: entered allmulticast mode [ 349.830977][T11758] tipc: Enabling of bearer rejected, already enabled [ 350.510970][T11781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1558'. [ 350.527997][T11781] IPv6: Can't replace route, no match found [ 350.745786][T11788] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 350.790889][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 350.905324][T11788] 8021q: adding VLAN 0 to HW filter on device bond10 [ 351.063479][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 351.204591][T11809] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 351.431496][T11808] netlink: 'syz.1.1563': attribute type 2 has an invalid length. [ 352.010034][T11828] bridge0: port 1(erspan0) entered disabled state [ 352.598831][T11828] bond1: left allmulticast mode [ 352.598860][T11828] ip6gretap1: left allmulticast mode [ 352.598880][T11828] bond1: left promiscuous mode [ 352.598901][T11828] ip6gretap1: left promiscuous mode [ 352.613723][T11828] tipc: Resetting bearer [ 352.682494][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.682597][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.682640][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.682681][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.720769][T11834] syzkaller0: entered promiscuous mode [ 352.720849][T11834] syzkaller0: entered allmulticast mode [ 353.176141][T11860] Bluetooth: MGMT ver 1.23 [ 353.415426][T11876] xt_hashlimit: size too large, truncated to 1048576 [ 353.749134][T11884] __nla_validate_parse: 4 callbacks suppressed [ 353.749159][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 354.205700][T11897] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 354.205725][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1584'. [ 354.315883][T11902] tipc: Enabled bearer , priority 0 [ 354.324001][T11903] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1586'. [ 354.335398][T11902] syzkaller0: entered promiscuous mode [ 354.335428][T11902] syzkaller0: entered allmulticast mode [ 354.577556][T11911] netlink: 'syz.3.1588': attribute type 6 has an invalid length. [ 354.577580][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 354.586997][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 355.235452][T11927] bridge10: entered promiscuous mode [ 355.236990][T11933] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1593'. [ 355.260122][T11927] bond15: (slave bridge10): Enslaving as an active interface with an up link [ 355.330768][T11933] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1593'. [ 355.430321][T11941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1597'. [ 355.859898][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1599'. [ 356.020959][T11961] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1600'. [ 357.218615][ T5618] block nbd2: Receive control failed (result -32) [ 357.222258][ T5624] block nbd2: Receive control failed (result -32) [ 357.450382][T11979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.460802][T11979] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.482175][T11979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.533938][T11987] net_ratelimit: 7 callbacks suppressed [ 357.533963][T11987] openvswitch: netlink: Multiple metadata blocks provided [ 357.645096][T11979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.645128][T11979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.694185][T11979] veth1_macvtap: left promiscuous mode [ 357.704206][T11979] veth0_macvtap: left promiscuous mode [ 357.711740][T11979] veth0_macvtap: entered promiscuous mode [ 357.716625][T11979] veth1_macvtap: entered promiscuous mode [ 357.781728][T11979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.806293][T11979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.826132][T11979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.836941][T11979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 357.851903][T11979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.880157][T11979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 357.895932][ T6549] bond1: (slave bridge1): link status up again after 0 ms [ 357.908174][T10019] bond1: (slave bridge1): link status up again after 0 ms [ 357.927633][ T6549] bond1: (slave bridge1): link status up again after 0 ms [ 357.932633][T11979] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.948499][T10019] bond1: (slave bridge1): link status up again after 0 ms [ 357.964979][T11979] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 357.968120][ T6549] bond1: (slave bridge1): link status up again after 0 ms [ 357.984102][T11979] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 357.986817][T11979] bridge6: left promiscuous mode [ 357.991626][ T6549] bond1: (slave bridge1): link status up again after 0 ms [ 358.009279][T10019] bond1: (slave bridge1): link status up again after 0 ms [ 358.010709][T11979] 8021q: adding VLAN 0 to HW filter on device bond8 [ 358.013464][T11979] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.027343][T11979] 8021q: adding VLAN 0 to HW filter on device bond10 [ 358.027646][T10019] bond1: (slave bridge1): link status up again after 0 ms [ 358.048294][ T5848] bond1: (slave bridge1): link status up again after 0 ms [ 358.068275][T11979] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 358.071839][T11979] 8021q: adding VLAN 0 to HW filter on device bond11 [ 358.074243][T11979] 8021q: adding VLAN 0 to HW filter on device bond12 [ 358.102342][T11979] 8021q: adding VLAN 0 to HW filter on device bond13 [ 358.119562][T11979] 8021q: adding VLAN 0 to HW filter on device eth0 [ 358.122797][T11979] 8021q: adding VLAN 0 to HW filter on device eth1 [ 358.125222][T11979] 8021q: adding VLAN 0 to HW filter on device eth2 [ 358.150322][T11979] 8021q: adding VLAN 0 to HW filter on device eth3 [ 358.153204][T11979] 8021q: adding VLAN 0 to HW filter on device bond14 [ 358.156112][T11979] 8021q: adding VLAN 0 to HW filter on device bond15 [ 358.321184][T11984] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR [ 358.323142][ T7008] gretap1: entered promiscuous mode [ 358.323208][ T7008] bridge6: entered promiscuous mode [ 358.323268][T11983] netlink: 'syz.4.1604': attribute type 3 has an invalid length. [ 358.323460][T11983] netlink: 'syz.4.1604': attribute type 3 has an invalid length. [ 358.446682][T11986] bridge14: entered promiscuous mode [ 358.569610][T10019] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.569647][T10019] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.569671][T10019] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.569693][T10019] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 358.648658][T11026] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.648698][T11026] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.648727][T11026] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.648754][T11026] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 358.649107][T10019] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.649137][T10019] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.649164][T10019] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.649191][T10019] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 358.649227][T10019] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.649268][T10019] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.649295][T10019] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.649322][T10019] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 359.209200][T12015] __nla_validate_parse: 7 callbacks suppressed [ 359.209223][T12015] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1612'. [ 359.241739][T12023] macvlan2: left promiscuous mode [ 359.241758][T12023] macvlan2: left allmulticast mode [ 359.243027][T12023] bridge1: left promiscuous mode [ 359.243509][T12023] macsec1: left promiscuous mode [ 359.294001][T12022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1615'. [ 359.345773][T12026] syzkaller0: entered promiscuous mode [ 359.345798][T12026] syzkaller0: entered allmulticast mode [ 359.425319][T12026] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 359.497216][T12032] xt_hashlimit: size too large, truncated to 1048576 [ 359.872993][T12039] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1619'. [ 359.900225][T12039] IPVS: Error connecting to the multicast addr [ 359.945813][T10587] udevd[10587]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 359.961650][T11421] udevd[11421]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 360.392429][T12059] netlink: 660 bytes leftover after parsing attributes in process `syz.4.1623'. [ 360.416617][T12053] bridge14: entered promiscuous mode [ 360.426495][T12053] bond28: (slave bridge14): Enslaving as an active interface with an up link [ 360.738917][T12066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 360.860185][T12066] ipvlan0: entered allmulticast mode [ 360.860210][T12066] syz_tun: entered allmulticast mode [ 360.996207][T12068] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 361.026837][T12073] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 361.227720][T12071] bond23: option arp_validate: invalid value (1048579) [ 361.228090][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 361.245540][T12071] bond23 (unregistering): Released all slaves [ 361.416100][T12086] netlink: 'syz.3.1630': attribute type 4 has an invalid length. [ 361.450344][T12087] netlink: 'syz.4.1628': attribute type 4 has an invalid length. [ 361.450368][T12087] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1628'. [ 361.480835][T12088] netlink: 'syz.3.1630': attribute type 4 has an invalid length. [ 361.502636][T12073] bond23: option arp_validate: invalid value (1048579) [ 361.505362][T12073] bond23 (unregistering): Released all slaves [ 361.650775][T12076] bridge0: entered promiscuous mode [ 361.683980][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'. [ 361.777058][ T7008] syz1: Port: 1 Link ACTIVE [ 362.171441][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 362.171471][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 362.709616][ T6549] net_ratelimit: 50 callbacks suppressed [ 362.709644][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 362.732991][T12094] syzkaller0: entered promiscuous mode [ 362.733019][T12094] syzkaller0: entered allmulticast mode [ 362.940685][T12102] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.941256][T12102] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.436666][T12110] bridge11: entered promiscuous mode [ 364.466075][T12110] bond17: (slave bridge11): Enslaving as an active interface with an up link [ 364.487583][ T6549] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.487642][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 364.487678][ T6549] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.487715][ T6549] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.487751][ T6549] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.598530][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 364.600010][T12116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1638'. [ 364.708073][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 364.746255][T12120] tipc: Enabling of bearer rejected, already enabled [ 364.813879][T12120] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 364.817939][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 364.865726][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 364.927562][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 365.038387][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 365.147862][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 365.190462][T12137] xt_hashlimit: size too large, truncated to 1048576 [ 365.596080][T12142] ipvlan0: left promiscuous mode [ 365.603324][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 365.916196][T12154] bridge12: entered promiscuous mode [ 365.931097][T12154] bond19: (slave bridge12): Enslaving as an active interface with an up link [ 366.147965][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 366.245575][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'. [ 366.245619][T12168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1653'. [ 366.270729][T12168] netlink: 'syz.4.1653': attribute type 1 has an invalid length. [ 366.270757][T12168] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1653'. [ 366.329401][T12171] 8021q: adding VLAN 0 to HW filter on device .` [ 366.541795][T12171] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.541825][T12171] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.575826][T12178] Bluetooth: MGMT ver 1.23 [ 366.600197][T12171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.601518][T12171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.602744][T12171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.603666][T12171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.605584][T12171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.613110][T12171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.615418][T12171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.621087][T12171] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.636150][T12171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 366.643108][T12171] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.676510][T12189] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 366.691973][T12171] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.692908][T12171] 8021q: adding VLAN 0 to HW filter on device bond8 [ 366.696897][T12171] 8021q: adding VLAN 0 to HW filter on device bond9 [ 366.704207][T12171] 8021q: adding VLAN 0 to HW filter on device bond10 [ 366.722972][T12171] 8021q: adding VLAN 0 to HW filter on device bond11 [ 366.731882][T12171] 8021q: adding VLAN 0 to HW filter on device bond12 [ 366.745535][T12171] 8021q: adding VLAN 0 to HW filter on device bond13 [ 366.751450][T12171] 8021q: adding VLAN 0 to HW filter on device bond14 [ 366.772413][T12171] 8021q: adding VLAN 0 to HW filter on device bond15 [ 366.773611][T12171] 8021q: adding VLAN 0 to HW filter on device bond16 [ 366.776198][T12171] 8021q: adding VLAN 0 to HW filter on device bond17 [ 366.781794][T12171] 8021q: adding VLAN 0 to HW filter on device bond18 [ 366.787225][T12171] 8021q: adding VLAN 0 to HW filter on device bond19 [ 366.797004][T12171] 8021q: adding VLAN 0 to HW filter on device bond20 [ 366.827535][T12191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1657'. [ 366.865899][T12171] 8021q: adding VLAN 0 to HW filter on device bond21 [ 366.876584][T12171] 8021q: adding VLAN 0 to HW filter on device bond22 [ 366.889956][T12171] 8021q: adding VLAN 0 to HW filter on device bond23 [ 366.890921][T12171] 8021q: adding VLAN 0 to HW filter on device bond24 [ 366.892467][T12171] 8021q: adding VLAN 0 to HW filter on device bond25 [ 366.894980][T12171] virt_wifi0: entered allmulticast mode [ 366.915592][T12171] 8021q: adding VLAN 0 to HW filter on device bond26 [ 366.933774][T12171] 8021q: adding VLAN 0 to HW filter on device bond27 [ 366.936088][T12171] 8021q: adding VLAN 0 to HW filter on device bond28 [ 366.962345][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.962453][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.005734][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.005851][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.133775][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1654'. [ 367.208446][T12189] bond23: entered promiscuous mode [ 367.208847][T12189] 8021q: adding VLAN 0 to HW filter on device bond23 [ 367.214665][T12191] bond23: entered allmulticast mode [ 367.322497][T12194] bond23: (slave bridge0): making interface the new active one [ 367.322526][T12194] bridge0: entered promiscuous mode [ 367.322729][T12194] bridge0: entered allmulticast mode [ 367.367237][T12194] bond23: (slave bridge0): Enslaving as an active interface with an up link [ 367.371874][ T6548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.372162][ T6548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.372268][ T6548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.372372][ T6548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.837553][ T6548] net_ratelimit: 2 callbacks suppressed [ 367.837590][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 368.006677][T12212] syzkaller0: left promiscuous mode [ 368.006706][T12212] syzkaller0: left allmulticast mode [ 368.013669][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 368.117822][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 368.240677][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 368.371138][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 368.422759][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1666'. [ 368.498565][T12238] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 368.607573][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 368.608678][ T5618] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 368.649409][T12238] xt_CT: No such helper "netbios-ns" [ 368.839981][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 368.950118][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 369.238260][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 369.352523][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 369.446286][T12258] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1675'. [ 369.457952][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 369.586115][T12260] Unknown options in mask 6 [ 369.588786][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1674'. [ 369.642915][T12268] netlink: 'syz.4.1674': attribute type 1 has an invalid length. [ 369.642940][T12268] __nla_validate_parse: 1 callbacks suppressed [ 369.642954][T12268] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1674'. [ 370.259457][T12273] tc_dump_action: action bad kind [ 370.865229][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 370.865258][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 371.103384][T12306] netlink: 'syz.1.1685': attribute type 10 has an invalid length. [ 371.250553][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 372.399470][T12288] gretap1: left promiscuous mode [ 372.531021][T12288] tipc: Resetting bearer [ 372.697780][ T6548] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.697820][ T6548] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.697847][ T6548] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 372.697873][ T6548] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 372.697976][ T6548] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.698003][ T6548] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.698028][ T6548] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 372.698054][ T6548] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 372.698100][ T6548] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.698126][ T6548] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.698151][ T6548] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 372.698176][ T6548] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 372.698212][ T6548] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.698239][ T6548] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.698265][ T6548] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 372.698291][ T6548] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 373.216495][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1690'. [ 376.030147][T12330] lo: left promiscuous mode [ 376.052535][T12330] tunl0: left promiscuous mode [ 376.052726][T12330] gre0: left promiscuous mode [ 376.052982][T12330] erspan0: left promiscuous mode [ 376.053111][T12330] ip_vti0: left promiscuous mode [ 376.053274][T12330] ip6_vti0: left promiscuous mode [ 376.053404][T12330] sit0: left promiscuous mode [ 376.053535][T12330] ip6tnl0: left promiscuous mode [ 376.053659][T12330] ip6gre0: left promiscuous mode [ 376.053795][T12330] syz_tun: left promiscuous mode [ 376.053963][T12330] ip6gretap0: left promiscuous mode [ 376.054089][T12330] bridge0: left promiscuous mode [ 376.054232][T12330] vcan0: left promiscuous mode [ 376.056525][T12330] .`: left promiscuous mode [ 376.056947][T12330] team0: left promiscuous mode [ 376.132402][T12330] dummy0: left promiscuous mode [ 376.132634][T12330] nlmon0: left promiscuous mode [ 376.132810][T12330] batadv0: left promiscuous mode [ 376.132967][T12330] vxcan0: left promiscuous mode [ 376.133125][T12330] vxcan1: left promiscuous mode [ 376.133278][T12330] wg0: left promiscuous mode [ 376.133427][T12330] wg1: left promiscuous mode [ 376.133575][T12330] wg2: left promiscuous mode [ 376.133725][T12330] veth0_to_bridge: left promiscuous mode [ 376.133892][T12330] bridge_slave_0: left promiscuous mode [ 376.134051][T12330] veth1_to_bridge: left promiscuous mode [ 376.134208][T12330] bridge_slave_1: left promiscuous mode [ 376.134372][T12330] veth0_to_bond: left promiscuous mode [ 376.134538][T12330] bond_slave_0: left promiscuous mode [ 376.134699][T12330] veth1_to_bond: left promiscuous mode [ 376.134867][T12330] bond_slave_1: left promiscuous mode [ 376.135026][T12330] veth0_to_team: left promiscuous mode [ 376.135179][T12330] team_slave_0: left promiscuous mode [ 376.135336][T12330] veth1_to_team: left promiscuous mode [ 376.135499][T12330] team_slave_1: left promiscuous mode [ 376.135655][T12330] veth0_to_batadv: left promiscuous mode [ 376.135825][T12330] batadv_slave_0: left promiscuous mode [ 376.135979][T12330] xfrm0: left promiscuous mode [ 376.136133][T12330] veth0_to_hsr: left promiscuous mode [ 376.136432][T12330] veth1_to_hsr: left promiscuous mode [ 376.136720][T12330] hsr0: left promiscuous mode [ 376.136888][T12330] veth1_virt_wifi: left promiscuous mode [ 376.137041][T12330] veth0_virt_wifi: left promiscuous mode [ 376.137197][T12330] virt_wifi0: left promiscuous mode [ 376.250443][T12330] vlan0: left promiscuous mode [ 376.251229][T12330] macvlan0: left promiscuous mode [ 376.255000][T12330] macvlan1: left promiscuous mode [ 376.255977][T12330] ipvlan1: left promiscuous mode [ 376.268073][T12330] macvtap0: left promiscuous mode [ 376.270419][T12330] macsec0: left promiscuous mode [ 376.270806][T12330] geneve0: left promiscuous mode [ 376.274370][T12330] geneve1: left promiscuous mode [ 376.275612][T12330] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 376.276059][T12330] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 376.276442][T12330] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 376.284958][T12330] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 376.351061][T12330] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 376.351725][T12330] gtp0: left promiscuous mode [ 376.354546][T12330] bond1: left promiscuous mode [ 376.354968][T12330] bridge1: left promiscuous mode [ 376.355385][T12330] veth2: left promiscuous mode [ 376.365197][T12330] veth4: left promiscuous mode [ 376.368136][T12330] bond0: left promiscuous mode [ 376.368785][T12330] bond2: left promiscuous mode [ 376.369527][T12330] bridge2: left promiscuous mode [ 376.380341][T12330] bond3: left promiscuous mode [ 376.382453][T12330] veth6: left promiscuous mode [ 376.382631][T12330] veth7: left promiscuous mode [ 376.382647][T12330] veth7: left allmulticast mode [ 376.383990][T12330] vlan2: left promiscuous mode [ 376.384043][T12330] gretap0: left promiscuous mode [ 376.386649][T12330] bond4: left promiscuous mode [ 376.387012][T12330] bond5: left promiscuous mode [ 376.388900][T12330] ip6tnl1: left promiscuous mode [ 376.389261][T12330] bond6: left promiscuous mode [ 376.395444][T12330] bond7: left promiscuous mode [ 376.395890][T12330] bridge3: left promiscuous mode [ 376.398750][T12330] bridge4: left promiscuous mode [ 376.401100][T12330] bond8: left promiscuous mode [ 376.402312][T12330] veth0: left promiscuous mode [ 376.404615][T12330] veth1: left promiscuous mode [ 376.404671][T12330] veth1: left allmulticast mode [ 376.405575][T12330] bond9: left promiscuous mode [ 376.408738][T12330] bond10: left promiscuous mode [ 376.413955][T12330] bridge5: left promiscuous mode [ 376.414968][T12330] bridge6: left promiscuous mode [ 376.420417][T12330] bond11: left promiscuous mode [ 376.422547][T12330] gre1: left promiscuous mode [ 376.423755][T12330] sit1: left promiscuous mode [ 376.424107][T12330] bond12: left promiscuous mode [ 376.424803][T12330] geneve2: left promiscuous mode [ 376.427194][T12330] ieee802154 phy0 wpan0: left promiscuous mode [ 376.446179][T12330] bridge7: left promiscuous mode [ 376.485350][T12330] bond14: left allmulticast mode [ 376.485426][T12330] ip6gretap1: left allmulticast mode [ 376.485481][T12330] bond14: left promiscuous mode [ 376.485527][T12330] ip6gretap1: left promiscuous mode [ 376.494096][T12330] macvlan2: left promiscuous mode [ 376.494171][T12330] macvlan2: left allmulticast mode [ 376.560092][T12330] tipc: Resetting bearer [ 376.583036][T12330] syzkaller0: left promiscuous mode [ 376.583104][T12330] syzkaller0: left allmulticast mode [ 376.614652][T12335] lo: entered promiscuous mode [ 376.840882][T12335] syz_tun: entered promiscuous mode [ 376.866554][T12335] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.867068][T12335] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.128954][T12335] veth0_to_bond: entered promiscuous mode [ 377.377724][T12335] 0: entered promiscuous mode [ 377.689701][T12335] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 377.757616][T12335] bond0: entered promiscuous mode [ 377.763481][T12335] syztnl0: entered promiscuous mode [ 377.782634][T12335] bond5: entered promiscuous mode [ 377.782655][T12335] bridge2: entered promiscuous mode [ 377.800466][T12335] bond6: entered promiscuous mode [ 377.821737][T12335] bond7: entered promiscuous mode [ 377.834735][T12335] bond8: entered promiscuous mode [ 377.866860][T12335] veth2: entered promiscuous mode [ 377.887827][T12335] veth3: entered promiscuous mode [ 377.897049][T12335] bond9: entered promiscuous mode [ 377.921869][T12335] bond10: entered promiscuous mode [ 377.949306][T12335] bond11: entered promiscuous mode [ 377.972489][T12335] bond12: entered promiscuous mode [ 378.000601][T12335] bond13: entered promiscuous mode [ 378.013229][T12335] bond14: entered promiscuous mode [ 378.050360][T12335] ipvlan2: entered promiscuous mode [ 378.067921][T12335] bond15: entered promiscuous mode [ 378.075321][T12335] bond16: entered promiscuous mode [ 378.091068][T12335] bond17: entered promiscuous mode [ 378.103408][T12335] bond18: entered promiscuous mode [ 378.124584][T12335] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 378.136362][T12335] bond19: entered promiscuous mode [ 378.147362][T12335] bond20: entered promiscuous mode [ 378.182709][T12335] mac80211_hwsim hwsim19 wlan2: entered promiscuous mode [ 378.199414][T12335] sit1: entered promiscuous mode [ 378.223576][T12335] syztnl1: entered promiscuous mode [ 378.339460][T12335] veth4: entered promiscuous mode [ 378.344659][T12335] veth5: entered promiscuous mode [ 378.361601][T12335] bond21: entered promiscuous mode [ 378.390034][T12335] mac80211_hwsim hwsim21 wlan3: entered promiscuous mode [ 378.439063][T12335] mac80211_hwsim hwsim22 wlan4: entered promiscuous mode [ 378.441579][T12335] bond22: entered promiscuous mode [ 378.455251][T12335] bond23: entered promiscuous mode [ 378.469171][T12335] bond24: entered promiscuous mode [ 378.471944][T12335] bond25: entered promiscuous mode [ 378.495936][T12335] vrf0: entered promiscuous mode [ 378.504461][T12335] virt_wifi0: left allmulticast mode [ 378.519097][T12335] mac80211_hwsim hwsim26 wlan5: entered promiscuous mode [ 378.520573][T12335] bareudp0: entered promiscuous mode [ 378.524674][T12335] bond26: entered promiscuous mode [ 378.535294][T12335] bond27: entered promiscuous mode [ 378.546559][T12335] bond28: entered promiscuous mode [ 378.625899][ T6548] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.626073][ T6548] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.626172][ T6548] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.626213][ T6548] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.626701][T12348] tipc: Resetting bearer [ 378.958295][T12364] netlink: 'syz.4.1698': attribute type 10 has an invalid length. [ 378.966644][T12364] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.972185][T12364] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.025505][T12373] net_ratelimit: 8 callbacks suppressed [ 379.025531][T12373] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.449848][T12405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.449882][T12405] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 380.491234][T12405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.491264][T12405] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 380.527805][T12405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.527833][T12405] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 380.534597][T12405] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.534621][T12405] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 381.905686][T12367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.308735][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 382.308787][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 382.343002][T12460] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 382.381653][T12461] block nbd3: server does not support multiple connections per device. [ 382.382063][T12461] block nbd3: shutting down sockets [ 382.662181][T12473] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.709175][T12473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.709200][T12473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.712597][T12473] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 383.226355][T12491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1718'. [ 383.264842][T12491] netlink: 'syz.4.1718': attribute type 2 has an invalid length. [ 383.264875][T12491] netlink: 'syz.4.1718': attribute type 2 has an invalid length. [ 384.561920][T12532] PKCS7: Unknown OID: [4] (bad) [ 384.561941][T12532] PKCS7: Only support pkcs7_signedData type [ 385.066535][T12545] xt_policy: output policy not valid in PREROUTING and INPUT [ 385.815178][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 385.815207][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 385.960009][T12567] netlink: 'syz.4.1734': attribute type 4 has an invalid length. [ 386.191928][T12573] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.1735'. [ 387.183109][T12603] xt_hashlimit: size too large, truncated to 1048576 [ 387.561892][T12609] ip6gre1: entered promiscuous mode [ 387.561919][T12609] ip6gre1: entered allmulticast mode [ 387.568536][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.568855][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.591035][ T7035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.732230][T12617] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1746'. [ 388.057976][ T1227] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 388.128536][ T1227] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.036962][T12633] syzkaller0: entered promiscuous mode [ 389.036983][T12633] syzkaller0: entered allmulticast mode [ 389.063273][T12633] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 389.984665][T12592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.223716][T12637] netlink: 'syz.1.1751': attribute type 10 has an invalid length. [ 390.396312][T12640] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3315589185/3315589187 [ 390.396357][T12640] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3315589185/3315589186 [ 390.408537][T12640] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3315589185/3315589187 [ 390.408648][T12640] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3315589185/3315589186 [ 390.573434][T12651] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 390.841651][ T6548] tipc: Subscription rejected, illegal request [ 391.225768][T12668] xt_hashlimit: size too large, truncated to 1048576 [ 391.840685][T12681] syzkaller0: entered promiscuous mode [ 391.840709][T12681] syzkaller0: entered allmulticast mode [ 391.887753][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.895574][ T60] tipc: Subscription rejected, illegal request [ 391.993770][T12684] vlan0: entered promiscuous mode [ 391.993796][T12684] syz_tun: entered promiscuous mode [ 392.141578][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 392.193695][T12699] tipc: Resetting bearer [ 392.254224][T12702] netlink: 'syz.0.1771': attribute type 4 has an invalid length. [ 392.287003][T12699] tipc: Disabling bearer [ 392.307729][T12705] netlink: 'syz.0.1771': attribute type 4 has an invalid length. [ 392.595855][T12710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.608747][T12710] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.635232][T12710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.651621][T12714] xt_hashlimit: size too large, truncated to 1048576 [ 393.623567][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 393.623657][T12710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 393.623677][T12710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.668862][T12710] veth1_macvtap: left promiscuous mode [ 393.670213][T12710] veth0_macvtap: left promiscuous mode [ 393.671491][T12710] veth0_macvtap: entered promiscuous mode [ 393.672820][T12710] veth1_macvtap: entered promiscuous mode [ 393.710939][T12710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.730638][T12710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.746409][T12710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.759113][T12710] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.762305][T12710] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.788893][T12710] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.819748][T11026] bond1: (slave bridge1): link status up again after 0 ms [ 393.823960][T12710] 8021q: adding VLAN 0 to HW filter on device bond7 [ 393.842828][ T5849] bond1: (slave bridge1): link status up again after 0 ms [ 393.857856][T11026] bond1: (slave bridge1): link status up again after 0 ms [ 393.858295][T12710] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 393.865054][T12710] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 393.881376][T11026] bond1: (slave bridge1): link status up again after 0 ms [ 393.897586][ T6549] bond1: (slave bridge1): link status up again after 0 ms [ 393.898507][T12728] xt_hashlimit: size too large, truncated to 1048576 [ 393.914069][T12710] bridge6: left promiscuous mode [ 393.923179][ T6549] bond1: (slave bridge1): link status up again after 0 ms [ 393.944022][T11026] bond1: (slave bridge1): link status up again after 0 ms [ 393.963415][T11026] bond1: (slave bridge1): link status up again after 0 ms [ 393.978850][ T6549] bond1: (slave bridge1): link status up again after 0 ms [ 393.990078][T12710] 8021q: adding VLAN 0 to HW filter on device bond8 [ 393.999635][T12710] 8021q: adding VLAN 0 to HW filter on device bond9 [ 394.292280][ T7010] bridge6: entered promiscuous mode [ 394.293041][T12718] ipvlan0: left promiscuous mode [ 394.550371][T12734] syzkaller0: entered promiscuous mode [ 394.550399][T12734] syzkaller0: entered allmulticast mode [ 394.560915][T11026] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.560952][T11026] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.560978][T11026] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 394.566353][T11026] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.569973][T11026] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.570082][T11026] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 394.581733][T11026] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.581838][T11026] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.581906][T11026] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 394.609584][T11026] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.609629][T11026] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.609660][T11026] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.168929][T12755] PKCS7: Unknown OID: [4] (bad) [ 395.168950][T12755] PKCS7: Only support pkcs7_signedData type [ 395.345250][T12761] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1788'. [ 395.386758][T12761] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1788'. [ 395.476284][T12762] syzkaller0: entered promiscuous mode [ 395.476311][T12762] syzkaller0: entered allmulticast mode [ 395.612163][T12761] bond0: (slave team0): Releasing backup interface [ 395.636661][T12761] bond11: (slave ): Releasing active interface [ 395.683989][T12761] net_ratelimit: 36 callbacks suppressed [ 395.684020][T12761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.712130][T12762] gtp1: entered promiscuous mode [ 395.712157][T12762] gtp1: entered allmulticast mode [ 395.772561][ T7018] syz1: Port: 1 Link DOWN [ 396.145538][T12777] xt_hashlimit: size too large, truncated to 1048576 [ 396.228290][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 396.595713][T12773] ipvlan0: left promiscuous mode [ 396.597618][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 396.708055][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 396.758614][T12783] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1793'. [ 396.818699][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 396.928881][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 397.037596][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 397.075141][T12793] ip_tables: iptables: counters copy to user failed while replacing table [ 397.257004][T12793] ip_vti0: left promiscuous mode [ 397.271042][T12793] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 397.294136][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 397.499706][T12812] netlink: 'syz.4.1799': attribute type 16 has an invalid length. [ 397.499732][T12812] netlink: 'syz.4.1799': attribute type 17 has an invalid length. [ 397.579074][T12812] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.711581][T12812] 8021q: adding VLAN 0 to HW filter on device bond10 [ 397.716044][T12812] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 397.735545][T12812] 8021q: adding VLAN 0 to HW filter on device bond11 [ 397.747105][T12812] 8021q: adding VLAN 0 to HW filter on device bond12 [ 397.762807][T12812] 8021q: adding VLAN 0 to HW filter on device bond13 [ 397.785088][T12812] 8021q: adding VLAN 0 to HW filter on device eth0 [ 397.786737][T12812] 8021q: adding VLAN 0 to HW filter on device eth1 [ 397.807051][T12812] 8021q: adding VLAN 0 to HW filter on device eth2 [ 397.816996][T12812] 8021q: adding VLAN 0 to HW filter on device eth3 [ 397.825284][T12812] syzkaller0: left promiscuous mode [ 397.825309][T12812] syzkaller0: left allmulticast mode [ 397.826566][T12812] 8021q: adding VLAN 0 to HW filter on device bond14 [ 397.847157][T12812] 8021q: adding VLAN 0 to HW filter on device bond15 [ 397.855902][T12812] bridge10: left promiscuous mode [ 397.864430][T12812] 8021q: adding VLAN 0 to HW filter on device bond16 [ 397.875488][T12812] 8021q: adding VLAN 0 to HW filter on device bond17 [ 397.885622][T12812] bridge11: left promiscuous mode [ 397.895077][T12812] 8021q: adding VLAN 0 to HW filter on device bond18 [ 397.919381][T12812] 8021q: adding VLAN 0 to HW filter on device bond19 [ 397.921140][T12812] bridge12: left promiscuous mode [ 397.969606][ T7018] gretap1: entered promiscuous mode [ 398.088422][ T5849] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 398.088485][ T5849] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 398.088521][ T5849] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 398.088557][ T5849] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 398.317335][T12821] tipc: Enabled bearer , priority 0 [ 398.326637][T12821] syzkaller0: entered promiscuous mode [ 398.331670][T12821] syzkaller0: entered allmulticast mode [ 398.333729][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 398.356010][T12821] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 398.439111][T12821] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1801'. [ 398.483996][T12824] tipc: Resetting bearer [ 398.522397][T12820] tipc: Resetting bearer [ 398.560474][T12834] xt_hashlimit: size too large, truncated to 1048576 [ 398.644652][T12820] tipc: Disabling bearer [ 399.203725][T12849] netlink: 'syz.1.1810': attribute type 4 has an invalid length. [ 399.233394][T12849] netlink: 'syz.1.1810': attribute type 4 has an invalid length. [ 399.360082][T12853] lo: left promiscuous mode [ 399.372906][T12853] tunl0: left promiscuous mode [ 399.471678][T12853] gre0: left promiscuous mode [ 400.367677][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.484828][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 400.484862][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 401.119755][T12853] gretap0: left promiscuous mode [ 401.160321][T12853] erspan0: left promiscuous mode [ 401.334978][T12853] ip6_vti0: left promiscuous mode [ 401.392909][T12853] sit0: left promiscuous mode [ 401.412408][T12853] ip6tnl0: left promiscuous mode [ 401.423825][T12853] ip6gre0: left promiscuous mode [ 401.435054][T12853] syz_tun: left promiscuous mode [ 401.447175][T12853] ip6gretap0: left promiscuous mode [ 401.457085][T12853] vcan0: left promiscuous mode [ 401.466664][T12853] bond0: left promiscuous mode [ 401.475281][T12853] team0: left promiscuous mode [ 401.476783][T12853] dummy0: left promiscuous mode [ 401.493681][T12853] nlmon0: left promiscuous mode [ 401.495448][T12853] veth0: left promiscuous mode [ 401.513406][T12853] veth1: left promiscuous mode [ 401.546175][T12853] wg0: left promiscuous mode [ 401.558920][T12853] wg2: left promiscuous mode [ 401.563717][T12853] veth0_to_bridge: left promiscuous mode [ 401.583712][T12853] bridge_slave_0: left promiscuous mode [ 401.611864][T12853] veth1_to_bridge: left promiscuous mode [ 401.776135][T12853] bridge_slave_1: left promiscuous mode [ 401.836269][T12853] bond_slave_0: left promiscuous mode [ 401.856217][T12853] veth1_to_bond: left promiscuous mode [ 401.882359][T12853] bond_slave_1: left promiscuous mode [ 401.915851][T12853] veth0_to_team: left promiscuous mode [ 401.957648][T12853] team_slave_0: left promiscuous mode [ 401.977965][T12853] veth1_to_team: left promiscuous mode [ 402.000159][T12853] team_slave_1: left promiscuous mode [ 402.014035][T12853] veth0_to_batadv: left promiscuous mode [ 402.016289][T12853] batadv_slave_0: left promiscuous mode [ 402.036644][T12853] veth1_to_batadv: left promiscuous mode [ 402.119999][T12853] batadv_slave_1: left promiscuous mode [ 402.152117][T12853] xfrm0: left promiscuous mode [ 402.225938][T12853] veth1_to_hsr: left promiscuous mode [ 402.270919][T12853] hsr0: left promiscuous mode [ 402.273265][T12853] veth1_virt_wifi: left promiscuous mode [ 402.298489][T12853] veth0_virt_wifi: left promiscuous mode [ 402.369582][T12853] virt_wifi0: left promiscuous mode [ 402.370113][T12853] vlan0: left promiscuous mode [ 402.370442][T12853] vlan1: left promiscuous mode [ 402.370773][T12853] macvlan0: left promiscuous mode [ 402.370981][T12853] macvlan1: left promiscuous mode [ 402.371281][T12853] ipvlan1: left promiscuous mode [ 402.371789][T12853] macvtap0: left promiscuous mode [ 402.371957][T12853] macsec0: left promiscuous mode [ 402.372082][T12853] geneve0: left promiscuous mode [ 402.372232][T12853] geneve1: left promiscuous mode [ 402.372429][T12853] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 402.372571][T12853] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 402.372705][T12853] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 402.372834][T12853] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 402.372975][T12853] bond1: left promiscuous mode [ 402.373250][T12853] bond2: left promiscuous mode [ 402.373378][T12853] bond3: left promiscuous mode [ 402.373507][T12853] macvtap1: left promiscuous mode [ 402.373524][T12853] macvtap1: left allmulticast mode [ 402.373691][T12853] bond4: left promiscuous mode [ 402.373976][T12853] bond5: left promiscuous mode [ 402.374096][T12853] bridge1: left promiscuous mode [ 402.374110][T12853] bridge1: left allmulticast mode [ 402.374236][T12853] bond6: left promiscuous mode [ 402.374250][T12853] bridge2: left promiscuous mode [ 402.374747][T12853] macvtap2: left allmulticast mode [ 402.375048][T12853] bond7: left promiscuous mode [ 402.375069][T12853] bond7: left allmulticast mode [ 402.376463][T12853] veth7: left allmulticast mode [ 402.376791][T12853] bond9: left promiscuous mode [ 402.376807][T12853] bridge3: left promiscuous mode [ 402.377067][T12853] ipvlan2: left allmulticast mode [ 402.377258][T12853] ipvlan3: left allmulticast mode [ 402.377271][T12853] bond9: left allmulticast mode [ 402.377286][T12853] bridge3: left allmulticast mode [ 402.471449][T12853] bridge4: left promiscuous mode [ 402.493512][T12853] ip6gretap1: left allmulticast mode [ 402.494447][T12853] veth11: left allmulticast mode [ 402.597264][T12853] veth13: left promiscuous mode [ 402.618223][T12853] ipvlan4: left allmulticast mode [ 402.618294][T12853] macvlan1: left allmulticast mode [ 402.646819][T12853] bridge5: left promiscuous mode [ 402.654669][T12853] bridge6: left promiscuous mode [ 402.765911][T12853] bridge7: left promiscuous mode [ 402.774257][T12853] bridge8: left promiscuous mode [ 402.780530][T12853] bridge9: left promiscuous mode [ 402.789535][T12853] syzkaller0: left promiscuous mode [ 402.789561][T12853] syzkaller0: left allmulticast mode [ 402.793842][T12853] bond23: left promiscuous mode [ 402.793870][T12853] bridge0: left promiscuous mode [ 402.794080][T12853] bond23: left allmulticast mode [ 402.794095][T12853] bridge0: left allmulticast mode [ 402.912968][ T5849] net_ratelimit: 30 callbacks suppressed [ 402.912993][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 403.018708][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 403.070877][T12889] xt_hashlimit: size too large, truncated to 1048576 [ 403.127670][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 403.209856][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 403.339073][T12899] xt_hashlimit: size too large, truncated to 1048576 [ 403.393082][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1823'. [ 403.415546][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 403.418369][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 403.554556][T12903] netlink: 'syz.4.1823': attribute type 4 has an invalid length. [ 403.554585][T12903] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1823'. [ 403.639084][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 403.827560][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 403.828594][T12910] ip_tables: iptables: counters copy to user failed while replacing table [ 403.938269][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 404.047599][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 404.157589][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 404.197640][T12914] xt_policy: output policy not valid in PREROUTING and INPUT [ 404.506147][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 404.762588][T12923] netlink: 'syz.0.1830': attribute type 2 has an invalid length. [ 404.807203][T12923] : entered promiscuous mode [ 404.821260][T12926] syzkaller0: entered promiscuous mode [ 404.821288][T12926] syzkaller0: entered allmulticast mode [ 404.874267][T12926] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 404.995489][T12934] netlink: 'syz.0.1834': attribute type 4 has an invalid length. [ 405.290854][T12947] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.321154][T12947] syzkaller1: entered promiscuous mode [ 405.321182][T12947] syzkaller1: entered allmulticast mode [ 405.399955][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1838'. [ 405.399994][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1838'. [ 405.401165][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1838'. [ 405.471803][T12947] netlink: 'syz.4.1838': attribute type 5 has an invalid length. [ 405.649931][T12960] __nla_validate_parse: 1 callbacks suppressed [ 405.649956][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 405.649975][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 405.686847][T12961] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1841'. [ 405.845033][T12964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.021778][T12978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1843'. [ 406.193921][T12968] syzkaller1: entered promiscuous mode [ 406.193949][T12968] syzkaller1: entered allmulticast mode [ 406.340958][T12978] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1843'. [ 407.236644][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 407.927617][T10019] net_ratelimit: 21 callbacks suppressed [ 407.927648][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 408.037675][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 408.147649][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 408.243156][T13036] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1855'. [ 408.263160][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 408.605080][T13041] bridge14: entered promiscuous mode [ 408.610421][T13041] bond20: (slave bridge14): Enslaving as an active interface with an up link [ 408.614595][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 408.717605][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 408.840705][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 408.947731][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 409.077718][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 409.187616][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 409.196387][T11026] IPVS: starting estimator thread 0... [ 409.277659][T13060] IPVS: using max 23 ests per chain, 55200 per kthread [ 410.547689][T13014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.145276][T13085] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1877'. [ 411.185121][T13079] 8021q: adding VLAN 0 to HW filter on device .` [ 411.191362][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1877'. [ 411.232413][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.310934][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.528433][T13079] tipc: Resetting bearer [ 411.566482][T13079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.566513][T13079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.610271][T13079] veth1_vlan: left promiscuous mode [ 411.633550][T13079] veth1_vlan: entered promiscuous mode [ 411.690464][T13079] veth1_macvtap: left promiscuous mode [ 411.699190][T13079] veth0_macvtap: left promiscuous mode [ 411.717816][T13079] veth0_macvtap: entered promiscuous mode [ 411.718873][T13079] veth1_macvtap: entered promiscuous mode [ 411.725874][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.727044][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.775044][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.787913][T13079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.796139][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.813924][T13079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 411.826794][T13079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.840321][T13079] gretap0: entered promiscuous mode [ 411.845037][T13079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.864578][T13079] 8021q: adding VLAN 0 to HW filter on device bond5 [ 411.893092][T13079] 8021q: adding VLAN 0 to HW filter on device bond6 [ 411.915087][T13079] 8021q: adding VLAN 0 to HW filter on device bond7 [ 411.929814][T13079] 8021q: adding VLAN 0 to HW filter on device bond8 [ 411.934992][T13079] 8021q: adding VLAN 0 to HW filter on device bond9 [ 411.953900][T13079] 8021q: adding VLAN 0 to HW filter on device bond10 [ 411.968804][T13079] 8021q: adding VLAN 0 to HW filter on device bond11 [ 412.068809][T13079] 8021q: adding VLAN 0 to HW filter on device bond12 [ 412.074036][T13079] 8021q: adding VLAN 0 to HW filter on device bond13 [ 412.077142][T13079] 8021q: adding VLAN 0 to HW filter on device bond14 [ 412.102905][T13079] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.126497][ T5751] ip6gretap1: entered promiscuous mode [ 412.147857][ T5751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.277886][ T5751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.415798][T10019] bridge1: port 1(veth3) entered blocking state [ 412.415927][T10019] bridge1: port 1(veth3) entered forwarding state [ 412.420278][T10019] bridge1: port 2(veth5) entered blocking state [ 412.420390][T10019] bridge1: port 2(veth5) entered forwarding state [ 412.855069][T13107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1872'. [ 413.253466][T13088] bridge0: port 2(veth0) entered blocking state [ 413.253553][T13088] bridge0: port 2(veth0) entered disabled state [ 413.253694][T13088] veth0: entered allmulticast mode [ 413.256129][T13088] veth0: entered promiscuous mode [ 413.291083][ T6549] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.291121][ T6549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.291145][ T6549] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.440902][ T5849] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.440966][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.441008][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.441107][ T5849] net_ratelimit: 19 callbacks suppressed [ 413.441128][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 413.501789][ T5849] bond8: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 413.502123][ T5849] bond8: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 413.502430][ T5849] bond8: (slave veth1): making interface the new active one [ 413.505488][ T5849] bond8: active interface up! [ 413.507981][ T6549] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.508024][ T6549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.508065][ T6549] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.665005][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 413.665578][ T6548] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 413.665800][ T6548] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 413.695301][ T1219] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 414.130124][T13139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1876'. [ 414.130166][T13139] netlink: 'syz.3.1876': attribute type 7 has an invalid length. [ 414.130181][T13139] netlink: 'syz.3.1876': attribute type 8 has an invalid length. [ 414.130194][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 414.213667][T13139] team0: entered promiscuous mode [ 414.213696][T13139] bond1: entered promiscuous mode [ 414.214022][T13139] macvlan2: entered promiscuous mode [ 414.214041][T13139] bond14: entered promiscuous mode [ 414.303938][T13139] .`: entered promiscuous mode [ 414.350432][T13139] erspan0: entered promiscuous mode [ 414.365732][T13139] hsr1: Slave B (.`) is not up; please bring it up to get a fully working HSR network [ 414.366401][T13139] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 414.453906][ T7034] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 414.454215][ T7034] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 414.560111][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 414.667846][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 414.779298][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 414.889440][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 414.983635][T13150] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 414.983682][T13150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.008431][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 415.119736][ T6549] bond1: (slave bridge1): failed to get link speed/duplex [ 416.619738][T13123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.008230][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.009378][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 417.259479][T13172] gretap0: left promiscuous mode [ 417.295204][T13178] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 417.337766][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.100329][T13200] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 418.232673][T13211] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1893'. [ 418.476235][T13217] PKCS7: Unknown OID: [4] (bad) [ 418.476262][T13217] PKCS7: Only support pkcs7_signedData type [ 418.556906][T13218] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 418.647582][ T6548] net_ratelimit: 164 callbacks suppressed [ 418.647610][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 418.757738][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 418.872226][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 418.913274][T13221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.977677][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 418.979872][T13226] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1898'. [ 419.097675][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 419.207815][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 419.771999][T13252] netlink: 'syz.0.1902': attribute type 11 has an invalid length. [ 419.910486][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 420.206855][T13259] netlink: 'syz.1.1903': attribute type 4 has an invalid length. [ 420.263471][T13260] netlink: 'syz.1.1903': attribute type 4 has an invalid length. [ 420.519881][T13257] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 420.587604][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 420.707571][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 420.827782][T11026] bond1: (slave bridge1): failed to get link speed/duplex [ 421.061891][T13273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.089861][T13278] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1910'. [ 421.453818][T13286] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 421.579444][T13293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1912'. [ 421.819739][T13289] bond24: (slave geneve2): making interface the new active one [ 421.852091][T13289] bond24: (slave geneve2): Enslaving as an active interface with an up link [ 421.905530][T13283] bridge15: entered promiscuous mode [ 421.946103][T13283] bond29: (slave bridge15): Enslaving as an active interface with an up link [ 421.958404][ T1367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 421.960229][T11026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 421.960282][T11026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 421.960323][T11026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 421.965645][T13293] bond24: entered promiscuous mode [ 421.965674][T13293] geneve2: entered promiscuous mode [ 422.057131][T13293] 8021q: adding VLAN 0 to HW filter on device bond24 [ 422.505655][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 422.929942][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1919'. [ 423.164694][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 423.414495][T13342] bond25 (unregistering): Released all slaves [ 423.435017][T13340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.513825][T13341] tc_dump_action: action bad kind [ 423.768982][ T6548] net_ratelimit: 83 callbacks suppressed [ 423.769021][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 423.803955][T13357] netlink: 'syz.0.1926': attribute type 10 has an invalid length. [ 423.813357][T13357] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1926'. [ 423.888536][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 423.998522][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 424.044793][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 424.172882][T13365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1927'. [ 424.188132][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 424.297966][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 424.417267][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 424.429288][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 424.538884][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 424.544732][T13370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.653394][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 424.690520][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 424.759318][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 424.807564][T13385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1936'. [ 424.861523][T13389] tipc: Enabled bearer , priority 0 [ 424.862155][T13389] syzkaller0: entered promiscuous mode [ 424.862175][T13389] syzkaller0: entered allmulticast mode [ 424.864155][T13389] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 425.396065][T13391] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1935'. [ 425.419686][T13397] syzkaller0: mtu less than device minimum [ 425.442597][T13402] netlink: 'syz.4.1938': attribute type 2 has an invalid length. [ 425.461529][T13402] netlink: 'syz.4.1938': attribute type 2 has an invalid length. [ 425.461559][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1938'. [ 425.867757][ T7034] tipc: Node number set to 3174180593 [ 425.982555][ T5624] block nbd3: Receive control failed (result -1) [ 427.019692][T13435] smc: net device lo erased user defined pnetid SYZ0 [ 427.200125][T13451] netlink: 'syz.4.1947': attribute type 1 has an invalid length. [ 427.458216][T11421] udevd[11421]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 427.555508][T13459] bridge15: entered promiscuous mode [ 427.582815][T13459] bond22: (slave bridge15): Enslaving as an active interface with an up link [ 427.669758][T13451] bridge16: entered promiscuous mode [ 427.681760][T13451] bond22: (slave bridge16): Enslaving as an active interface with an up link [ 427.683696][T13467] tipc: Enabling of bearer rejected, already enabled [ 427.686612][T13473] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 427.700020][T13458] __nla_validate_parse: 4 callbacks suppressed [ 427.700044][T13458] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1950'. [ 427.745995][T13472] xt_hashlimit: size too large, truncated to 1048576 [ 427.769072][T13464] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1948'. [ 428.616619][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 428.851042][ T5848] net_ratelimit: 27 callbacks suppressed [ 428.851069][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 428.958697][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 429.068096][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 429.178126][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 429.287875][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 429.398674][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 429.507603][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 429.628083][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 429.737943][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 429.848609][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 430.830614][T13528] gretap1: entered promiscuous mode [ 430.872475][T13528] bond11: entered promiscuous mode [ 430.872501][T13528] bond11: entered allmulticast mode [ 431.008118][T13532] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 431.072224][T13480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.568067][T13536] hsr_slave_0: left promiscuous mode [ 431.575501][T13536] hsr_slave_1: left promiscuous mode [ 431.682077][T13548] xt_hashlimit: size too large, truncated to 1048576 [ 432.033940][T13554] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.623128][T13571] netlink: 'syz.4.1970': attribute type 4 has an invalid length. [ 432.623157][T13571] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1970'. [ 432.903866][T13552] bond31: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 432.925601][T13552] bond31 (unregistering): Released all slaves [ 433.100750][T13581] netlink: 'syz.0.1972': attribute type 10 has an invalid length. [ 433.122944][T13582] netlink: 'syz.0.1972': attribute type 10 has an invalid length. [ 433.337300][T13581] team0: Port device dummy0 added [ 433.411786][T13582] team0: Port device dummy0 removed [ 433.506791][T13601] xt_hashlimit: size too large, truncated to 1048576 [ 434.207697][ T5848] net_ratelimit: 26 callbacks suppressed [ 434.207724][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 434.334869][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 434.438955][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 434.581605][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 434.634813][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 434.687681][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 434.744276][ T5848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.744304][ T5848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.775127][ T5849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.775153][ T5849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.797756][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 434.800861][T13621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1980'. [ 434.898214][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1979'. [ 434.910468][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 435.019810][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 435.128038][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 435.237724][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 435.242815][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 435.696219][T13648] IPVS: Error connecting to the multicast addr [ 435.842098][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 435.887279][T13655] netlink: 'syz.2.1988': attribute type 9 has an invalid length. [ 436.827068][T13660] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 438.058327][T13630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.059538][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 439.161781][T13691] syzkaller1: entered promiscuous mode [ 439.161802][T13691] syzkaller1: entered allmulticast mode [ 439.165566][T13691] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 439.278129][ T5849] net_ratelimit: 36 callbacks suppressed [ 439.278149][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 439.387775][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 439.408132][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.497816][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 439.564664][T13699] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1999'. [ 439.607589][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 439.717654][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 439.827695][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 439.937603][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 440.069442][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 440.177990][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 440.288190][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 441.333543][T13668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.607113][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2000'. [ 441.633349][T13711] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 441.793947][T13720] sock: sock_timestamping_bind_phc: sock not bind to device [ 441.884348][T13723] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2000'. [ 442.214065][T13726] syzkaller0: entered promiscuous mode [ 442.214101][T13726] syzkaller0: entered allmulticast mode [ 443.527180][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'. [ 443.663540][T13744] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2009'. [ 443.683306][T13744] gretap0: entered promiscuous mode [ 443.772232][T13751] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2009'. [ 443.928092][ T5776] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.961286][ T5776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.005372][T13750] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.019831][T13751] 0{X: renamed from gretap0 [ 444.025094][T13751] 0{X: left promiscuous mode [ 444.025118][T13751] 0{X: entered allmulticast mode [ 444.110787][T13745] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 444.112982][T13745] : renamed from dummy0 (while UP) [ 444.191441][T13762] netlink: 'syz.4.2013': attribute type 1 has an invalid length. [ 444.323956][T13762] 8021q: adding VLAN 0 to HW filter on device bond24 [ 444.330972][ T5776] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.381598][T13765] bond24: (slave gretap2): Enslaving as an active interface with an up link [ 444.396417][ T5850] net_ratelimit: 20 callbacks suppressed [ 444.396439][ T5850] bond1: (slave bridge1): failed to get link speed/duplex [ 444.474331][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'. [ 444.644384][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 444.690401][ T5776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.747976][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 444.847342][T13790] syzkaller0: mtu less than device minimum [ 444.858893][ T5850] bond1: (slave bridge1): failed to get link speed/duplex [ 444.969649][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 445.079447][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 445.188730][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 445.304199][ T5850] bond1: (slave bridge1): failed to get link speed/duplex [ 445.413646][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 445.500805][T13803] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 445.500853][T13803] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 445.500910][T13803] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 445.571292][T13803] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 445.884411][T13800] smbdirect: ib_dev[syz1] renamed to [sy] [ 447.063657][T13818] veth1_to_team: Caught tx_queue_len zero misconfig [ 447.250774][T13766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.366364][T13823] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2022'. [ 447.539976][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2023'. [ 447.779715][T13837] bridge3: entered promiscuous mode [ 447.783282][T13837] bond14: (slave bridge3): Enslaving as an active interface with an up link [ 447.783500][T13838] C: renamed from veth1_to_team [ 447.789474][T13838] netlink: 'syz.1.2026': attribute type 1 has an invalid length. [ 447.789620][T13838] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2026'. [ 448.192141][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2030'. [ 448.276163][T13852] syzkaller1: entered promiscuous mode [ 448.276192][T13852] syzkaller1: entered allmulticast mode [ 448.515992][T13856] syzkaller0: left promiscuous mode [ 448.516019][T13856] syzkaller0: left allmulticast mode [ 448.807831][T13861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2033'. [ 448.925830][T13861] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 448.953262][T13861] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2033'. [ 449.080398][T13862] geneve0: entered promiscuous mode [ 449.083141][T13862] batman_adv: batadv0: Adding interface: macvlan0 [ 449.083160][T13862] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.083401][T13862] batman_adv: batadv0: Interface activated: macvlan0 [ 449.220078][T13872] syzkaller0: entered promiscuous mode [ 449.220107][T13872] syzkaller0: entered allmulticast mode [ 449.250642][ T30] audit: type=1107 audit(1790405565.703:9): pid=13873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f 7' [ 449.273909][T13867] tipc: Enabled bearer , priority 0 [ 449.301721][T13867] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 449.372722][T13861] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 449.405672][T13870] tipc: Resetting bearer [ 449.412149][ T5849] net_ratelimit: 30 callbacks suppressed [ 449.412228][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 449.436103][T13866] tipc: Resetting bearer [ 449.491765][T13881] xt_hashlimit: size too large, truncated to 1048576 [ 449.543571][T13866] tipc: Disabling bearer [ 449.577588][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 449.689688][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 449.797865][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 449.897288][T13888] tc_dump_action: action bad kind [ 449.907526][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 450.057674][ T6548] bond1: (slave bridge1): failed to get link speed/duplex [ 450.210530][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 450.320072][ T5850] bond1: (slave bridge1): failed to get link speed/duplex [ 450.427640][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 450.538685][ T5850] bond1: (slave bridge1): failed to get link speed/duplex [ 450.666179][T13901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.702061][T13900] block nbd0: reconnected socket [ 450.756766][T13903] netlink: 'syz.0.2042': attribute type 9 has an invalid length. [ 451.170054][ T5624] block nbd0: Receive control failed (result -32) [ 451.567835][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.630527][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 451.630562][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 451.630643][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 451.769507][T13928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2048'. [ 451.795375][T13928] vlan0: entered promiscuous mode [ 451.903799][T13930] tipc: Enabling of bearer rejected, already enabled [ 451.919375][T13930] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 452.984297][T13950] SET target dimension over the limit! [ 453.241500][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 453.272750][T13954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2056'. [ 453.432822][T13954] tipc: Resetting bearer [ 453.678358][ T5849] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 453.678442][ T5849] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 453.678484][ T5849] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 453.678522][ T5849] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 453.773588][T13968] netlink: 'syz.0.2058': attribute type 16 has an invalid length. [ 453.773617][T13968] netlink: 'syz.0.2058': attribute type 17 has an invalid length. [ 453.835271][T13972] netlink: 'syz.4.2059': attribute type 10 has an invalid length. [ 453.886447][T13973] netlink: 'syz.4.2059': attribute type 10 has an invalid length. [ 453.904804][T13968] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.982360][T13968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.982396][T13968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.026585][T13968] veth1_macvtap: left promiscuous mode [ 454.040033][T13968] veth0_macvtap: left promiscuous mode [ 454.042875][T13968] veth0_macvtap: entered promiscuous mode [ 454.066803][T13968] veth1_macvtap: entered promiscuous mode [ 454.090550][T13968] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 454.094426][T13968] bridge0: port 1(erspan0) entered blocking state [ 454.094559][T13968] bridge0: port 1(erspan0) entered forwarding state [ 454.096891][T13968] bridge0: left promiscuous mode [ 454.125332][T13968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.149244][T13968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.166186][T13968] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 454.202234][T13968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.227344][T13968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.247109][T13968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.259939][T13968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.292687][T13968] 8021q: adding VLAN 0 to HW filter on device bond6 [ 454.312737][T13968] 8021q: adding VLAN 0 to HW filter on device bond7 [ 454.327086][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'. [ 454.339762][T13968] 8021q: adding VLAN 0 to HW filter on device bond8 [ 454.351293][T13968] 8021q: adding VLAN 0 to HW filter on device bond9 [ 454.373856][T13968] 8021q: adding VLAN 0 to HW filter on device bond10 [ 454.381772][T13968] veth0_to_team: entered promiscuous mode [ 454.399942][T13968] 8021q: adding VLAN 0 to HW filter on device eth0 [ 454.404424][T13968] 8021q: adding VLAN 0 to HW filter on device eth1 [ 454.428346][T13968] 8021q: adding VLAN 0 to HW filter on device eth2 [ 454.446775][T13968] 8021q: adding VLAN 0 to HW filter on device eth3 [ 454.463590][T13968] gretap1: left promiscuous mode [ 454.474785][T13968] bond11: left promiscuous mode [ 454.474809][T13968] bond11: left allmulticast mode [ 454.475225][T13968] 8021q: adding VLAN 0 to HW filter on device bond11 [ 454.515811][T13968] 8021q: adding VLAN 0 to HW filter on device bond12 [ 454.540036][T13968] 8021q: adding VLAN 0 to HW filter on device bond13 [ 454.555673][T13968] 8021q: adding VLAN 0 to HW filter on device bond14 [ 454.561561][T13968] bridge3: left promiscuous mode [ 454.636262][T13972] team0: Port device  added [ 454.876104][T13973] team0: Port device  removed [ 454.913516][ T7031] ip6gretap1: entered promiscuous mode [ 454.934081][ T5850] bridge0: port 2(veth0) entered blocking state [ 454.934200][ T5850] bridge0: port 2(veth0) entered forwarding state [ 455.205971][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 455.210743][ T7031] bridge0: entered promiscuous mode [ 455.213632][ T1367] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.213666][ T1367] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.213722][ T1367] net_ratelimit: 19 callbacks suppressed [ 455.213735][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 455.213905][ T1367] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.213946][ T1367] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.215283][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 455.359854][ T1367] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.359895][ T1367] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.359959][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 455.627678][ T60] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.627787][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.627842][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 455.717819][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 456.078438][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 456.090063][T14003] netlink: 'syz.4.2068': attribute type 10 has an invalid length. [ 456.143324][ T1367] bond0: (slave syz_tun): link status definitely down, disabling slave [ 456.173579][ T1367] bond0: now running without any active interface! [ 456.202517][T14003] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.206807][T14003] bond0: (slave team0): Enslaving as an active interface with an up link [ 456.225882][T10019] bond1: (slave bridge1): failed to get link speed/duplex [ 456.329145][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 456.428082][T14011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2070'. [ 456.428115][T14011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2070'. [ 456.438023][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 456.541200][T14011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2070'. [ 456.541292][T14011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2070'. [ 456.550151][ T5848] bond1: (slave bridge1): failed to get link speed/duplex [ 456.660220][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 456.770082][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 457.056609][T14000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.774110][T14049] xt_hashlimit: size too large, truncated to 1048576 [ 458.192166][T14030] tipc: Resetting bearer [ 458.750486][T14030] bridge1: port 2(veth5) entered disabled state [ 458.750905][T14030] bridge1: port 1(veth3) entered disabled state [ 459.040305][T14030] bond14: left promiscuous mode [ 459.040337][T14030] ip6gretap1: left promiscuous mode [ 459.089687][T14030] ip6gre1: left promiscuous mode [ 459.089721][T14030] ip6gre1: left allmulticast mode [ 459.133842][T14030] gtp1: left promiscuous mode [ 459.133872][T14030] gtp1: left allmulticast mode [ 459.166421][T14029] bridge10: entered promiscuous mode [ 459.187949][T14029] bond26: (slave bridge10): Enslaving as an active interface with an up link [ 459.275374][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 459.275406][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 459.276689][T14020] bridge11: entered promiscuous mode [ 459.301271][T14020] bond26: (slave bridge11): Enslaving as an active interface with an up link [ 459.544871][T14055] netlink: 'syz.2.2077': attribute type 10 has an invalid length. [ 459.737095][T14067] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2077'. [ 459.862487][T14062] 8021q: adding VLAN 0 to HW filter on device bond25 [ 459.889193][T14062] team0: Port device bond25 added [ 459.892727][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 459.914094][ T5848] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.914132][ T5848] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.914157][ T5848] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.924725][ T5848] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.924766][ T5848] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.924793][ T5848] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.924859][ T5848] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.924885][ T5848] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.924909][ T5848] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.966239][T14066] tipc: Enabling of bearer rejected, failed to enable media [ 460.025780][T14069] xfrm0: Caught tx_queue_len zero misconfig [ 460.036377][T14071] syzkaller0: entered promiscuous mode [ 460.036409][T14071] syzkaller0: entered allmulticast mode [ 460.289317][ T5849] net_ratelimit: 498 callbacks suppressed [ 460.289344][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 460.355561][T14094] netlink: 'syz.4.2083': attribute type 10 has an invalid length. [ 460.568273][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 460.636833][T14103] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2086'. [ 460.684117][T14103] hsr_slave_0 (unregistering): left promiscuous mode [ 460.729387][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 460.840358][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 460.852446][T14093] syzkaller1: entered promiscuous mode [ 460.852520][T14093] syzkaller1: entered allmulticast mode [ 460.906401][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 460.906431][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 461.198545][T14113] bridge12: entered promiscuous mode [ 461.203602][T14113] bond28: (slave bridge12): Enslaving as an active interface with an up link [ 461.275918][T14108] bridge13: entered promiscuous mode [ 461.312843][T14108] bond28: (slave bridge13): Enslaving as an active interface with an up link [ 461.369862][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 461.607658][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 461.720848][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 461.828930][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 461.939092][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 462.006516][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 462.006547][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 462.147681][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 462.230547][T14146] netlink: 'syz.4.2101': attribute type 1 has an invalid length. [ 462.763211][T14155] bridge8: entered promiscuous mode [ 462.802557][T14155] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 462.827014][T14163] bridge9: entered promiscuous mode [ 462.838012][T14163] bond16: (slave bridge9): Enslaving as an active interface with an up link [ 462.838464][T14159] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 462.840364][T14159] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 462.841115][T14159] veth0_virt_wifi: entered allmulticast mode [ 462.879738][T14159] veth0_virt_wifi: entered promiscuous mode [ 462.880374][T14159] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 462.880447][T14159] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 463.094450][T14166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2105'. [ 463.844901][ T30] audit: type=1804 audit(1790405580.293:10): pid=14193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2113" name="/newroot/447/cgroup.controllers" dev="tmpfs" ino=2323 res=1 errno=0 [ 463.845183][ T30] audit: type=1800 audit(1790405580.293:11): pid=14193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2113" name="cgroup.controllers" dev="tmpfs" ino=2323 res=0 errno=0 [ 463.893357][T14193] No such timeout policy "syz0" [ 464.414302][T14198] bridge14: entered promiscuous mode [ 464.440137][T14198] bond30: (slave bridge14): Enslaving as an active interface with an up link [ 464.488520][T14200] bridge15: entered promiscuous mode [ 464.500844][T14200] bond30: (slave bridge15): Enslaving as an active interface with an up link [ 464.610509][T14206] __nla_validate_parse: 4 callbacks suppressed [ 464.610532][T14206] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.2116'. [ 464.801435][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 464.802812][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 464.834136][T14211] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 465.136482][T14221] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2122'. [ 465.163628][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2122'. [ 465.584916][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'. [ 465.584953][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'. [ 465.946924][T14218] vlan3: entered promiscuous mode [ 466.038714][ T12] net_ratelimit: 13 callbacks suppressed [ 466.038744][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 466.043517][T14222] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2121'. [ 466.113484][T14230] bond0: (slave syz_tun): Releasing active interface [ 466.176124][T14230] bond4: (slave .`): Releasing backup interface [ 466.196503][T14230] bridge_slave_0: left allmulticast mode [ 466.196788][T14230] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.217304][T14230] bridge_slave_1: left allmulticast mode [ 466.219553][T14230] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.243778][T14230] bond25: (slave veth0_to_bond): Releasing backup interface [ 466.243810][T14230] bond25: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 466.251789][T14230] .`: (slave bond_slave_0): Releasing backup interface [ 466.287066][T14230] .`: (slave bond_slave_1): Releasing backup interface [ 466.304285][T14230] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 466.313808][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 466.417541][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 466.530998][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 466.638669][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 467.058018][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 467.078233][T10019] bond1: (slave bridge1): link status up again after 0 ms [ 467.097744][ T5849] bond1: (slave bridge1): link status up again after 0 ms [ 467.120010][ T60] bond1: (slave bridge1): link status up again after 0 ms [ 467.196920][T14255] bridge16: entered promiscuous mode [ 467.208306][T14255] bond32: (slave bridge16): Enslaving as an active interface with an up link [ 467.221120][T14262] bridge17: entered promiscuous mode [ 467.237076][T14262] bond32: (slave bridge17): Enslaving as an active interface with an up link [ 467.278371][T14272] bridge0: port 1(wlan1) entered blocking state [ 467.278576][T14272] bridge0: port 1(wlan1) entered disabled state [ 467.279066][T14272] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 467.281731][T14272] [ 467.304202][T14272] ====================================================== [ 467.311266][T14272] WARNING: possible circular locking dependency detected [ 467.318360][T14272] syzkaller #0 Not tainted [ 467.322827][T14272] ------------------------------------------------------ [ 467.329914][T14272] syz.3.2131/14272 is trying to acquire lock: [ 467.336024][T14272] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 467.346535][T14272] [ 467.346535][T14272] but task is already holding lock: [ 467.353958][T14272] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 467.363865][T14272] [ 467.363865][T14272] which lock already depends on the new lock. [ 467.363865][T14272] [ 467.374753][T14272] [ 467.374753][T14272] the existing dependency chain (in reverse order) is: [ 467.383896][T14272] [ 467.383896][T14272] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 467.392597][T14272] down_write+0x96/0x200 [ 467.397451][T14272] kernfs_add_one+0x41/0x6f0 [ 467.402637][T14272] kernfs_create_dir_ns+0x1a1/0x230 [ 467.408519][T14272] internal_create_group+0x440/0x1180 [ 467.414470][T14272] cpuhp_invoke_callback+0x434/0x810 [ 467.420356][T14272] cpuhp_issue_call+0x3f0/0x750 [ 467.425797][T14272] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 467.432836][T14272] __cpuhp_setup_state+0x3f/0x60 [ 467.438459][T14272] do_one_initcall+0x250/0x870 [ 467.443820][T14272] do_initcall_level+0x10a/0x1a0 [ 467.449510][T14272] do_initcalls+0x59/0xa0 [ 467.454425][T14272] kernel_init_freeable+0x29d/0x3e0 [ 467.460487][T14272] kernel_init+0x22/0x1d0 [ 467.465923][T14272] ret_from_fork+0x514/0xb70 [ 467.471300][T14272] ret_from_fork_asm+0x1a/0x30 [ 467.476749][T14272] [ 467.476749][T14272] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 467.484649][T14272] [ 467.484649][T14272] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 467.492447][T14272] cpus_read_lock+0x42/0x160 [ 467.497706][T14272] static_key_slow_inc+0x12/0x30 [ 467.503913][T14272] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 467.510233][T14272] nbd_genl_foreach_sock+0x265/0x450 [ 467.516085][T14272] nbd_genl_reconfigure+0xbbb/0x1040 [ 467.521935][T14272] genl_family_rcv_msg_doit+0x233/0x340 [ 467.528165][T14272] genl_rcv_msg+0x614/0x7a0 [ 467.533247][T14272] netlink_rcv_skb+0x226/0x4a0 [ 467.538670][T14272] genl_rcv+0x28/0x40 [ 467.543238][T14272] netlink_unicast+0x7bd/0x940 [ 467.548576][T14272] netlink_sendmsg+0x813/0xb40 [ 467.553905][T14272] sock_sendmsg_nosec+0x13a/0x180 [ 467.559509][T14272] ____sys_sendmsg+0x54e/0x850 [ 467.564941][T14272] ___sys_sendmsg+0x2a5/0x360 [ 467.570374][T14272] __x64_sys_sendmsg+0x1b1/0x290 [ 467.576420][T14272] do_syscall_64+0x166/0x520 [ 467.581591][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.588411][T14272] [ 467.588411][T14272] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 467.596207][T14272] __mutex_lock+0x19d/0x1550 [ 467.601376][T14272] nbd_queue_rq+0x373/0xff0 [ 467.606635][T14272] blk_mq_dispatch_rq_list+0x499/0x1990 [ 467.612856][T14272] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 467.619950][T14272] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 467.626531][T14272] blk_mq_run_work_fn+0x16c/0x300 [ 467.632134][T14272] process_scheduled_works+0xc3d/0x1630 [ 467.638441][T14272] worker_thread+0xa47/0xfb0 [ 467.643626][T14272] kthread+0x38b/0x480 [ 467.648283][T14272] ret_from_fork+0x514/0xb70 [ 467.653459][T14272] ret_from_fork_asm+0x1a/0x30 [ 467.658889][T14272] [ 467.658889][T14272] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 467.666490][T14272] __mutex_lock+0x19d/0x1550 [ 467.671803][T14272] nbd_queue_rq+0xc1/0xff0 [ 467.676832][T14272] blk_mq_dispatch_rq_list+0x499/0x1990 [ 467.682955][T14272] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 467.689875][T14272] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 467.696460][T14272] blk_mq_run_work_fn+0x16c/0x300 [ 467.702063][T14272] process_scheduled_works+0xc3d/0x1630 [ 467.708184][T14272] worker_thread+0xa47/0xfb0 [ 467.713378][T14272] kthread+0x38b/0x480 [ 467.718009][T14272] ret_from_fork+0x514/0xb70 [ 467.723153][T14272] ret_from_fork_asm+0x1a/0x30 [ 467.728498][T14272] [ 467.728498][T14272] -> #4 (set->srcu){.+.+}-{0:0}: [ 467.735704][T14272] __synchronize_srcu+0xc9/0x2f0 [ 467.741223][T14272] elevator_switch+0x1e8/0x7b0 [ 467.746547][T14272] elevator_change+0x2fa/0x480 [ 467.751870][T14272] elevator_set_default+0x375/0x440 [ 467.757726][T14272] blk_register_queue+0x3f3/0x4e0 [ 467.763335][T14272] __add_disk+0x6b8/0xdb0 [ 467.768243][T14272] add_disk_fwnode+0x100/0x3a0 [ 467.773565][T14272] nbd_dev_add+0x733/0xb60 [ 467.778533][T14272] nbd_init+0x168/0x1f0 [ 467.783266][T14272] do_one_initcall+0x250/0x870 [ 467.788611][T14272] do_initcall_level+0x10a/0x1a0 [ 467.794112][T14272] do_initcalls+0x59/0xa0 [ 467.798997][T14272] kernel_init_freeable+0x29d/0x3e0 [ 467.804756][T14272] kernel_init+0x22/0x1d0 [ 467.809657][T14272] ret_from_fork+0x514/0xb70 [ 467.814825][T14272] ret_from_fork_asm+0x1a/0x30 [ 467.820162][T14272] [ 467.820162][T14272] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 467.828028][T14272] __mutex_lock+0x19d/0x1550 [ 467.833185][T14272] elevator_change+0x1af/0x480 [ 467.838510][T14272] elevator_set_none+0xb5/0x140 [ 467.843929][T14272] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 467.850308][T14272] nbd_start_device+0x189/0xb30 [ 467.855725][T14272] nbd_genl_connect+0x167d/0x1cd0 [ 467.861312][T14272] genl_family_rcv_msg_doit+0x233/0x340 [ 467.867428][T14272] genl_rcv_msg+0x614/0x7a0 [ 467.872538][T14272] netlink_rcv_skb+0x226/0x4a0 [ 467.877879][T14272] genl_rcv+0x28/0x40 [ 467.882457][T14272] netlink_unicast+0x7bd/0x940 [ 467.887797][T14272] netlink_sendmsg+0x813/0xb40 [ 467.893133][T14272] sock_sendmsg_nosec+0x13a/0x180 [ 467.898731][T14272] ____sys_sendmsg+0x54e/0x850 [ 467.904146][T14272] ___sys_sendmsg+0x2a5/0x360 [ 467.909432][T14272] __x64_sys_sendmsg+0x1b1/0x290 [ 467.914964][T14272] do_syscall_64+0x166/0x520 [ 467.920423][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.927267][T14272] [ 467.927267][T14272] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 467.936052][T14272] blk_alloc_queue+0x544/0x690 [ 467.941391][T14272] __blk_mq_alloc_disk+0x194/0x390 [ 467.947187][T14272] nbd_dev_add+0x494/0xb60 [ 467.952193][T14272] nbd_init+0x168/0x1f0 [ 467.956934][T14272] do_one_initcall+0x250/0x870 [ 467.962566][T14272] do_initcall_level+0x10a/0x1a0 [ 467.968109][T14272] do_initcalls+0x59/0xa0 [ 467.973102][T14272] kernel_init_freeable+0x29d/0x3e0 [ 467.978900][T14272] kernel_init+0x22/0x1d0 [ 467.984233][T14272] ret_from_fork+0x514/0xb70 [ 467.989418][T14272] ret_from_fork_asm+0x1a/0x30 [ 467.995315][T14272] [ 467.995315][T14272] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 468.002672][T14272] fs_reclaim_acquire+0x71/0x100 [ 468.008628][T14272] kmem_cache_alloc_noprof+0x5f/0x600 [ 468.014592][T14272] __kernfs_iattrs+0xdd/0x380 [ 468.019839][T14272] kernfs_iop_setattr+0xe6/0x3f0 [ 468.025350][T14272] notify_change+0xbba/0xea0 [ 468.030507][T14272] do_truncate+0x1c2/0x250 [ 468.035686][T14272] path_openat+0x15b5/0x1d60 [ 468.040867][T14272] do_file_open+0x23e/0x4a0 [ 468.045970][T14272] do_sys_openat2+0x115/0x200 [ 468.051256][T14272] __x64_sys_openat+0x138/0x170 [ 468.056850][T14272] do_syscall_64+0x166/0x520 [ 468.062025][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.068759][T14272] [ 468.068759][T14272] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 468.077326][T14272] __lock_acquire+0x164c/0x2de0 [ 468.082833][T14272] lock_acquire+0x115/0x350 [ 468.087905][T14272] down_write+0x96/0x200 [ 468.092755][T14272] kernfs_link_sibling+0x4c7/0x5a0 [ 468.098450][T14272] kernfs_add_one+0x2db/0x6f0 [ 468.103724][T14272] kernfs_create_dir_ns+0x1a1/0x230 [ 468.109611][T14272] sysfs_create_dir_ns+0x12f/0x2a0 [ 468.115296][T14272] kobject_add_internal+0x622/0xcd0 [ 468.121068][T14272] kobject_init_and_add+0x12b/0x1a0 [ 468.127123][T14272] br_add_if+0x376/0xeb0 [ 468.131958][T14272] br_ioctl_stub+0x72a/0xd60 [ 468.137132][T14272] sock_ioctl+0x4e1/0x7e0 [ 468.142026][T14272] __se_sys_ioctl+0xfc/0x170 [ 468.147431][T14272] do_syscall_64+0x166/0x520 [ 468.152630][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.159107][T14272] [ 468.159107][T14272] other info that might help us debug this: [ 468.159107][T14272] [ 468.169470][T14272] Chain exists of: [ 468.169470][T14272] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 468.169470][T14272] [ 468.184358][T14272] Possible unsafe locking scenario: [ 468.184358][T14272] [ 468.192123][T14272] CPU0 CPU1 [ 468.197586][T14272] ---- ---- [ 468.203096][T14272] lock(&root->kernfs_rwsem); [ 468.207953][T14272] lock(cpuhp_state_mutex); [ 468.215218][T14272] lock(&root->kernfs_rwsem); [ 468.222577][T14272] lock(&root->kernfs_iattr_rwsem); [ 468.227921][T14272] [ 468.227921][T14272] *** DEADLOCK *** [ 468.227921][T14272] [ 468.236109][T14272] locks held by syz.3.2131/14272: 3, last CPU#0: [ 468.242504][T14272] #0: ffffffff90235e80 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 468.251744][T14272] #1: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 468.260851][T14272] #2: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 468.270843][T14272] [ 468.270843][T14272] stack backtrace: [ 468.276806][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.3.2131 Not tainted syzkaller #0 PREEMPT(full) [ 468.286226][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 468.296378][T14272] Call Trace: [ 468.299725][T14272] [ 468.302750][T14272] dump_stack_lvl+0xe8/0x150 [ 468.307432][T14272] print_circular_bug+0x2e2/0x300 [ 468.312712][T14272] check_noncircular+0x12f/0x150 [ 468.317740][T14272] __lock_acquire+0x164c/0x2de0 [ 468.322650][T14272] ? __lock_acquire+0x747/0x2de0 [ 468.327952][T14272] lock_acquire+0x115/0x350 [ 468.332540][T14272] ? kernfs_link_sibling+0x4c7/0x5a0 [ 468.338143][T14272] down_write+0x96/0x200 [ 468.342958][T14272] ? kernfs_link_sibling+0x4c7/0x5a0 [ 468.348518][T14272] ? __pfx_down_write+0x10/0x10 [ 468.353415][T14272] ? kernfs_root+0x1c/0x230 [ 468.357976][T14272] ? kernfs_root+0x1c/0x230 [ 468.362543][T14272] ? kernfs_root+0x1c/0x230 [ 468.367421][T14272] ? kernfs_root+0x1ea/0x230 [ 468.372350][T14272] kernfs_link_sibling+0x4c7/0x5a0 [ 468.377523][T14272] kernfs_add_one+0x2db/0x6f0 [ 468.382297][T14272] kernfs_create_dir_ns+0x1a1/0x230 [ 468.387549][T14272] sysfs_create_dir_ns+0x12f/0x2a0 [ 468.392739][T14272] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 468.398524][T14272] ? __dev_notify_flags+0x3d4/0x510 [ 468.404398][T14272] ? rcu_is_watching+0x16/0xb0 [ 468.409216][T14272] ? kfree+0x4d/0x650 [ 468.413269][T14272] kobject_add_internal+0x622/0xcd0 [ 468.418542][T14272] kobject_init_and_add+0x12b/0x1a0 [ 468.423798][T14272] ? __local_bh_enable_ip+0xd6/0x140 [ 468.429174][T14272] ? lockdep_hardirqs_on+0x7b/0x110 [ 468.434448][T14272] ? __pfx_kobject_init_and_add+0x10/0x10 [ 468.440501][T14272] ? netdev_work_dequeue+0x225/0x250 [ 468.446101][T14272] ? dev_set_allmulti+0x20e/0x260 [ 468.451379][T14272] br_add_if+0x376/0xeb0 [ 468.455710][T14272] ? bpf_lsm_capable+0x9/0x20 [ 468.461053][T14272] ? security_capable+0x7e/0x2c0 [ 468.466046][T14272] br_ioctl_stub+0x72a/0xd60 [ 468.470767][T14272] ? trace_contention_end+0x3d/0x140 [ 468.476120][T14272] ? __mutex_lock+0x30b/0x1550 [ 468.480944][T14272] ? __pfx_br_ioctl_stub+0x10/0x10 [ 468.486103][T14272] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 468.491176][T14272] ? sock_ioctl+0x4b8/0x7e0 [ 468.497500][T14272] ? hook_file_ioctl+0x1f2/0x600 [ 468.505128][T14272] ? __pfx_br_ioctl_stub+0x10/0x10 [ 468.510818][T14272] sock_ioctl+0x4e1/0x7e0 [ 468.515215][T14272] ? __pfx_sock_ioctl+0x10/0x10 [ 468.520249][T14272] ? __fget_files+0x2a/0x420 [ 468.525434][T14272] ? __fget_files+0x3a2/0x420 [ 468.531051][T14272] ? __fget_files+0x2a/0x420 [ 468.535880][T14272] ? bpf_lsm_file_ioctl+0x9/0x20 [ 468.540875][T14272] ? __pfx_sock_ioctl+0x10/0x10 [ 468.545801][T14272] __se_sys_ioctl+0xfc/0x170 [ 468.550651][T14272] do_syscall_64+0x166/0x520 [ 468.555327][T14272] ? trace_irq_disable+0x3b/0x140 [ 468.560396][T14272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.566524][T14272] ? clear_bhb_loop+0x70/0xc0 [ 468.571253][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.577198][T14272] RIP: 0033:0x7f3cc4f9e159 [ 468.581663][T14272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.602128][T14272] RSP: 002b:00007f3cc5d92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.610603][T14272] RAX: ffffffffffffffda RBX: 00007f3cc5226180 RCX: 00007f3cc4f9e159 [ 468.619154][T14272] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 000000000000000b [ 468.627272][T14272] RBP: 00007f3cc503506b R08: 0000000000000000 R09: 0000000000000000 [ 468.635379][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.643485][T14272] R13: 00007f3cc5226218 R14: 00007f3cc5226180 R15: 00007ffe504f7058 [ 468.651604][T14272] [ 468.689617][T14272] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 468.713145][T14261] mac80211_hwsim hwsim6 wlan1 (unregistering): left allmulticast mode [ 468.713177][T14261] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode [ 468.713231][T14261] bridge0: port 1(wlan1) entered disabled state [ 468.863577][T14279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2132'. [ 471.127619][ T12] net_ratelimit: 109 callbacks suppressed [ 471.127646][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 471.237723][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 471.347620][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 471.457709][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 471.567625][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 471.677666][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 471.787606][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 471.897526][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 472.007599][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 472.117556][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 476.187619][ T60] net_ratelimit: 36 callbacks suppressed [ 476.187652][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 476.297555][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 476.407524][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 476.517630][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 476.627740][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 476.737670][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 476.847771][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 476.957618][ T1367] bond1: (slave bridge1): failed to get link speed/duplex [ 477.067946][ T5849] bond1: (slave bridge1): failed to get link speed/duplex [ 477.178038][ T60] bond1: (slave bridge1): failed to get link speed/duplex