last executing test programs: 7m28.7479802s ago: executing program 4 (id=729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400000000bedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b6500000c00028005001700010000000000000800000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff7}]}}}]}, 0x3c}}, 0x28000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r7, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x4a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) close(r5) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0xf, 0x8, 0x41}, 0x50) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x9005}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$inet(r8, 0x0, 0x0) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x1fe4, 0x40, 0x107, 0xfffffffe, 0x2, {0xfe, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1fc0, 0x2, 0x0, 0x1, [@nested={0x1fbc, 0x14, 0x0, 0x1, [@nested={0x1fb8, 0x15, 0x0, 0x1, [@nested={0x1fb1, 0x114, 0x0, 0x1, [@generic="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", @nested={0x2c, 0x79, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0xbe}, @typed={0x14, 0x99, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x31}}, @nested={0x4, 0x34}, @nested={0x4, 0x16}]}, @nested={0x18, 0x12b, 0x0, 0x1, [@typed={0x4, 0x15}, @nested={0x4, 0xf}, @typed={0x6, 0xa1, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x1f}]}, @typed={0xf69, 0x60, 0x0, 0x0, @binary="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"}]}]}]}]}]}, 0x1fe4}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000600)={{r7}, r11, 0x12, @unused=[0x9b9d, 0x8, 0x6, 0xc05a], @subvolid=0x9}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) socket$inet6_tcp(0xa, 0x1, 0x0) 7m27.3597994s ago: executing program 4 (id=735): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1], 0x21c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x10, 0x700, 0xfffffff5, 0x3, {{0x19, 0x4, 0x0, 0x2, 0x64, 0x67, 0x0, 0x7, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3f}, {[@generic={0x94, 0xa, "2bc174e7aba85fc0"}, @timestamp_prespec={0x44, 0x44, 0x97, 0x3, 0x5, [{@remote, 0x4}, {@remote, 0x9}, {@multicast1, 0xffffff15}, {@loopback, 0x2}, {@multicast2, 0x1}, {@multicast2, 0xc1}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010102, 0x2d3c}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r4, 0x25, 0x10, @void}, 0x10) 7m24.975114055s ago: executing program 4 (id=741): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x14, 0x0, 0x0, 0x4, 0xc8}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r1}, 0xbb3c, 0x7baf, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x24, r3, 0x3141e0b2751b0f9b, 0x70bd26, 0x25dfdc02, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xcf27ce4c37336724}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth1_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x2d, 0x3, 0x8000000000000001, {0x7, @tcp_ip4_spec={@multicast2, @loopback, 0x4e22, 0x4e21, 0xa}, {0x0, @random="44425090eea3", 0xfffe, 0xd598, [0x3, 0x4]}, @udp_ip6_spec={@rand_addr=' \x01\x00', @empty, 0x4e20, 0x4e24, 0x1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x800, 0x5, [0x10000, 0xcc]}, 0x387, 0x5}, 0x3, [0x4, 0xffffffff, 0x0]}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1032}]}}}]}, 0x40}}, 0x40800) 7m24.527758731s ago: executing program 4 (id=747): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000080000008111ac00000000009500000000000000355b"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 7m23.463057105s ago: executing program 4 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1b6cc, 0x4b}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x204}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1b6cc, 0x4b}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x204}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) 7m23.001676341s ago: executing program 4 (id=757): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000180090001006c6173740000000004000280140001840c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x70}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0), 0x0) r5 = socket(0x11, 0xa, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r5}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x84) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) socket$inet6(0xa, 0x3, 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 7m7.667717471s ago: executing program 32 (id=757): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000180090001006c6173740000000004000280140001840c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x70}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0), 0x0) r5 = socket(0x11, 0xa, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r5}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x84) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) socket$inet6(0xa, 0x3, 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 5.065093406s ago: executing program 3 (id=3397): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f0000000040)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x80, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}, {0x101, 0x39, 0x1, 0x5}, {0x701, 0x72, 0x9, 0x401}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40), 0x0, 0x1) 4.942854017s ago: executing program 0 (id=3398): r0 = socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r2, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x90}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x845}, 0x4000) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x90}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x845}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x6a, 0x6, 0x3, 0x7}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x6a, 0x6, 0x3, 0x7}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.923068819s ago: executing program 5 (id=3399): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb3395cd01ae72f9140000e2fb"], 0x18}, 0xc800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x1, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000030801010000000000000000000000001c0004800800064000000000080008400000000008000000000500030006000000"], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x300, 0x0, 0x20000840}, 0x4008004) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x368) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r7, 0x80809440, &(0x7f0000001b80)={&(0x7f0000001b00)=[{&(0x7f0000000640)="81795432b2d2f5e818d8a91783e7ac2af8143d6830a474deb97422a599912aa3f535224aca0baee33cb2aec302ac840a30457eb261b24955b0f51c4feb8006fbb171807f0b23f135acbf59bd76a86abe82533e0c040a57a6d49bc859460141dae2aee497f4c0d42292251588854a28ae2efda4be09aace3d2a696fb10e4eba46eb1229fa545aa63a1c9e", 0x8a}, {&(0x7f00000018c0)="b9d138a9d6d6591a2fc856c693e28c6b1e36db180c9cb9270d04cd02deacbf8834d8d8848225900e28352224d66ea6f8dab58e2a8f4d307b7c7885e9584571691a808db86764bd20fffec83b99e315d42f672dd2b8c39bb59211efbaca833746c60e7c9493b0820fd2e9df9016f1181de6cbd737e60664a73504a2fd9293159fc49b1faba065849688602c5876c0d1eff53d2dbc1a03e16bc9ceea8ff1fab64765ea5b2d3c993c8cbffcfdda66a665d3e19b47ccd61532d7b24f7c294dc299cb", 0xc0}, {&(0x7f00000019c0)="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", 0xfe}, {&(0x7f0000001ac0)="5c2484296bc0b09b757b9f05", 0xc}], 0x4, 0x1ff, 0x0, 0xffffffffffffffc0, 0xe, 0x7fff, 0x0, 0x81}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44844) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x49880}, 0x0) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYRES8=r3], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) 4.869110496s ago: executing program 3 (id=3400): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000240)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x10, 0xf000000}}], 0x1, 0x48c5) 4.536680305s ago: executing program 0 (id=3403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001a00110028bd70000000000002202000ff000007009cb718e70002000a01010008000100ac14143308000300bdd0", @ANYRES32], 0x3c}}, 0xea5bc50b6199d76e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socket(0x400000000010, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000240), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r4, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f00000015c0)=""/151, 0x97}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f00000017c0)=""/253, 0xfd}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/189, 0xaf}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2, 0x1}, 0x10) write(r4, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r5, @ANYBLOB="020423bd424b9f1e80c92557044d0fa3117000ffdbdf251d97508f08000300", @ANYRES32=r7, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x2004808c}, 0x6004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020028bd7000fedbdf253f00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900040000004e0000001c005e80080002000600000008000700b405000008000500160000000c005e8008001a00020000000c005e8008000900a2480000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4008090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffffd2, &(0x7f0000000480)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20004800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001e40)=@newqdisc={0x9c, 0x24, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xffff, 0x7}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8c, '\x00', 0x5, 0xfffffffb, 0x5c4e, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x81, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x279}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffffb9, 0x1, {0xc687, 0x6, 0x1, 0xfffff606, 0xb14, 0x9, 0x5, 0x6}}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc1}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.296806838s ago: executing program 0 (id=3406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30f50000002c000000220a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd29, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x6044000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000911019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r4, 0x11, 0x70bd2d, 0x25dfdbfc, {0x1b}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008810}, 0x1000c810) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x80, 0x50, 0xf6, 0x2, {{0x21, 0x4, 0x2, 0x16, 0x84, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x54, 0x31, 0x1, 0xc, [{@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@empty, 0x4}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x6}, {@multicast2, 0xf14a}, {@remote, 0x4}, {@broadcast, 0x1}, {@remote, 0x7fffffff}, {@multicast1, 0x7}]}, @ssrr={0x89, 0x1b, 0x98, [@multicast1, @multicast1, @private=0xa010100, @loopback, @empty, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80001402}, 0xc, &(0x7f0000000a40)={&(0x7f00000006c0)={0x2e4, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x24}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x13c73b004fb63c1a}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x17, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000805}, 0x20000040) 4.24049712s ago: executing program 3 (id=3407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast1}, &(0x7f0000000180)=0x14) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000280)={0x10, 0x1, 0xfd9, 0x6, 0x6}) r3 = socket$inet6(0xa, 0x3, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r8, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x9}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.886785987s ago: executing program 3 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r2, 0x7) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4e22, @private=0xa010101}}) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x180, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0x35}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x7}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0xc010) 3.76956076s ago: executing program 5 (id=3412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'vxcan1\x00'}}, 0x1e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r4, 0x100000af5, 0x0) close(r3) close(r2) write$cgroup_int(r0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0xc, 0xa, 0xa, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r6, 0x8070587c, &(0x7f0000000300)) 3.700059892s ago: executing program 0 (id=3413): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8010) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r8, r6, 0x25, 0x8}, 0x14) socket$netlink(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0x4, 0x7b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @map_val={0x18, 0x4, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1000}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x5, 0x1d, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff9c2, 0x0, 0x0, 0x0, 0xfff}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x9a}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6}]}, 0x0, 0x0, 0xd2, &(0x7f0000001b40)=""/210, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001c80)={0x5, 0x2, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001cc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001d00)=[{0x4, 0x3, 0x2, 0x8}, {0x3, 0x5, 0xc, 0x1}, {0x1, 0x4, 0x6, 0xc}, {0x1, 0x5, 0x5, 0x3}, {0x1, 0x5, 0xa, 0xa}, {0x0, 0x3, 0x0, 0x8}, {0x3, 0x2, 0x2, 0x2}, {0x4, 0x5, 0x6, 0xb}, {0x2, 0x3, 0xe, 0x4}], 0x10, 0x100}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) 3.657755079s ago: executing program 3 (id=3415): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xee, 0x5, 0x5}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000140)={0x6, 'team0\x00', {0x401}, 0x400}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x4000}, @xdp={0x2c, 0x2, r1, 0x31}, @can={0x1d, r4}, 0x55cf, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)='batadv_slave_1\x00', 0x7, 0x81, 0x7f}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x84000}, 0x4000010) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x2c}}, 0x0) r9 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000002640)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)="0238c09be75c87", 0x7}, {&(0x7f0000000540)="8b70ab005b89c34702f7a2a3c6c69fbaab3c8763db620c5796239739f6f501bc6dbaec072462b4be24a1d0fb19d8b4f57085ba1fd39c56c01bdc5719328857a5c95d27869f267f2120a2e5220d48055267183cac00371f0c208d9d9aedf0725192a591baa10c711ae59c623b7a7c37c34a63b0b3ab379f9325501188db36a782bf47f0755c43cd434a456b6e6badd64064e69e37cb2d8ee4c5dd4dda5a5cded07997ca0db14937a01c6be7f802d594e276df3803da7abcd7c0b33a3e58c4767a16051d2acac4c1abd67c4d8f30b5558adef7aa98846a2687ce1259f71c2b63", 0xdf}, {&(0x7f0000000640)="88155d903a775023fb860b47c595c0a3e0ef33f4f53ff15fb56f71f8e39f37c2c5bf822af945407bd41dacda26edb6aa795d46f3729bed32ee0c91cfa2e0", 0x3e}, {&(0x7f0000000680)="b60a47fa5c07f3a3f56e9ee005fdb10fb9ddf8d92374b2bc33eea84c319fa30eb3b2db7a0464d7fb8f1319c459d6a6264bc7a8b1a0dab54fbef52f274e3237b0a3792b38", 0x44}, {&(0x7f0000000700)="8779da4c3a6b8b5e53077be2a807e22f6e7ea33cb9b66ca3fd8b364e6da2c91fb53927aa77bdc3910422eeddf854cd1d6470baa0543777d84b5aef0c1426748b6f2b3ff27ad3619d5e1f42b3db589d0c41c1ac38ae94a03c2f7453b95d7c1c8a20555b4b226c98951bd01cb828a49a5f7f5265d6ab6f2caced1ac3325181e0440852a660ef2a9f1f0706e043317f2edb17d14df43a886e2a2de9b2697cdda7c9b4976e7f377aa790fa881d5f533b4ab1b302f96bbae86d5224752f921fe902a4d1591d07", 0xc4}], 0x5, &(0x7f0000000880)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xf0, 0x117, 0x2, 0xd7, "c179fb18e80ad3cec39d467a77af00b8edeff285f8ac8528e43354bab4133ba04b3483c15cf850ca81a682d48aefb4977c59158495ead28aba9a8c058683cf8da1fe7e6edb08a8267765786a30a1cda8b32b88575831293c27c3d0288c0f897f2139e7c17e4f411aea17a4486dff19f6b24072b8c0f3bb4fb4844b920f1835b312265d1bb1440d79f357ff2bb3cdc0f5ff47bb3de4fbf8f851efdaacf24c82cd2d12fc8b02cee1b4890b7713eafc73e905cdebff3c170f55cae4b9485217165e2e1f62af853168c16a2db84f17e44eeb16d31aa6e2d7b0"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x120, 0x20000000}, {0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="7fc5bbc54dde0b29b89741e4b84ef598e018eba9e05619edfc5b9cee8581a10df5d170f0b54443cacbd2478442de7dca77aeb3d13a6fb7a05f6e5c60eb6897e348eda3b57eb4fa53b77469e05ee7", 0x4e}, {&(0x7f0000000a40)="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", 0xfa}, {&(0x7f0000000b40)="e23f744276c115d2f045056a77624c18d0b7011eb90e8095312881b8dfa7f211ddbe", 0x22}, {&(0x7f0000000b80)}], 0x4, &(0x7f0000000c00)=[@assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0xe}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0xc0, 0x20000000}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000cc0)="f6cb8cb298e18d8d5c84fa9906c3f8b9fadbb3ff4446d245650283a264641aebd5432920d78e60c605b238a21538dc6b29b8f645db7c8a5df3685425357cd1c02e487f10c3436cebb7e2de922c9ec82c75109937d2855d1fb5223a", 0x5b}, {&(0x7f0000000d40)="a1e815654d4d70c8db71c8740e43b98bd9aec2662760061bef11a9c279e96cac5722e9e2d27313ec29867a01f347362952665dc780dd6dab5ab627671934af887afd4a77502cce9223acfcd47bf4dd40722262b0da7062052f07c3a020fba8dc464f30b141b1b0cfecc79a649a832d831da76528931ed390e2d2a9bfb418748c94", 0x81}, {&(0x7f0000000e00)="d2f29a5e7dc9b71b72c1a37a5fcf43d4aac071a059b51c49241395a528755d59f4a8d1e7857c3a528e18942ce013401d40a301685233605d67855c375a65d649bcb9597a7815b7a9569822c94a341b78cdf9ed2169d572a743ac0390e9296caf901c2d1db369aaed762ef47aed07620d56a603c49b6a63825b008d6729c8d6cc2e68a39f802f008addeadcc7ff", 0x8d}, {&(0x7f0000000ec0)="00b5ea66a5019ae10925e53d", 0xc}, {&(0x7f0000000f00)="c627b9d2bfc7e967b501437aba22dfae3e56615ab311fd4cd7797fe90583b0bb871f13e38c35c92253d79b8edb5ffa509fefc71865ada56ebcc0d9bb8f77d57ce1026d55fc9b07853a22c685e0c6ed0a946f63f7", 0x54}], 0x5, 0x0, 0x0, 0x20040041}, {0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001000)="8326be58302a39ebf4bde73ff7e3036e68d12bb8802bb066b7ea34b3161acbee396918ff1d8bc1762aabaaf0a194fcd083b7994c0b870551fbff16e45ccda4ae0621d298640abafe6c6c8351f623d0d8ed629b9222b747f8a180afedc0fdff3185746b988f5bd3668634c3bbe2bed2e69b1c851dd6e4d2eebfef879151f7ef5d1c61c4862123a38acc72af75e5e632832c414ef7b3d5d0092cd7434a2caab3d3841e5ec1a81bca4b0b03365d1dba52bbdb36c04b7b50272e4f19a4c79fc8df2a6aa61db131f8c154bff29940aceaec5c3f3b1d30c4755f9eed5f90f4d776197d007a64943d3a3ca3410989450e45cafe238f72dc03b0d0dc07824f21057c9d971373be07978f2677b64080a686909a20c432ae39567ba28917c3500bebf3b87f6246119ddae2dc8ad719ef63badabaeceae2465e4f4d3c0328db7a97b83bf99653b03ab7f471b09970ce90f8b7058c58c67aae6758d2988df006cb001aad3e429a90ddfa62668cf1b8122008a3dd4724441b1a930dedb5c70f581b49381d1061ff2f48653116011292c157d9c4b15557e378991febf86d604325ec278a9c8f891c4f0b992cce4d9e031af9ac209e52f77f88af47eb15cb5b683820e9c6c8a8c8e9cfb1ad53de5e7ed452de3f31024a3a2bf70d477a08c5efbc63911a70ad75c9471c031dbda4826053d8c536f6715823a3e6b757a79201635d14c8502e75fbcb429e4a95bbb2ef263d6235601e51531716fd7841b85317468a9acdb570a9e471bb520e0e34a61b91513029feb15ab078581dd5897356c3def72c168b6b3f14ddb370c20d4c59e2ac66205a7c335c07352b09e26c16ea4a836ebc9ef92bbe940f7e85d3df9291be8c4bd845c2e31d1ca613c5495d2612cd43dbecc536226fcc808e5c1a371fcf63e073ba48bcde34ed9418987c54ec3768fc12a8a6b3a6695f5b78b611fd2aa6f6d9cdc676e34a5b757cecb7e12e5073c6ee1eb208baaa1fd0d86bea203ea2bf7c528f2cf403a798ae43e56eed889225cc1d6d5be42f372160679cf07d2f6b1e9291626bd87600a331a10b9513b6f28eaeaf389722f2e1aa45dc4201a85f7372de0c669471e60b8131d60202eac5e5e3e03e40e229d529fd7cbdbd34afa9397aa8d63824da7aa05c0523add983d283934409f1e1250074cad7b0f3bcb213c4affa04e8807124d1353e386c264cc5bd1c36e92eb5415ff9d0f31aa8e9117afc3d6201c4ef63258ac6df59422dbe295b341bd5509be331b59b9c7eec2563243f029ca45dcb4f8011dd5bb762d4bb6a855cd28cbbed5201f8d7ca4145534f70c59cd1d8cba2a15db833c126d6271e6ad0c233e6e098c79091899d0f0dc9b24394dc647e013ebbab97f24414f3857e2e2b58878baaab762c20b8f9ae722dd41e9f93385fdfc435a8e08c7844df360f6927d87ed6b74f9363138f2c4df1172f3f853f2cb1c93244439033a1c465f14893753ecd4645877e37aeb3491aa6b4b03da34361b5911e225bd77438a7b5ca7c29b2ff6a6439c93e4b2715264d3fb0f6407706f498e1b6181c72cced7b96aa1359a5c5135818b0d1a09acc0180d6b6bb0877ad42744b64165fb14ce70a18212acacd1383ed9c92a5d3ce6e379bac503bf2cf77c66c067999948b6514f59cc2afd77b02e194d17357bbc025ba0e2725e207c4670838ac156a855dff0df64a27c0665b102040956a9bcd1b4d4340aba907b0fb8e4f7fbe255baaaead30b1d45726d85562203f6bc775de1b6472d2710ebd9dfd8f38fa46f36854610d4d1246ef82c05607904a088578dc1140e8f1faf134390f1db24c9c2d33ddbe880c1905d2457fb24c2e4b64d1ecef62600c0cae852feb52f1905d723a8a26d05df62e89933d42637061cf11754d597c38dbd59732f9e7474591ccd012403eee58b732e25367e8ce25b52c2f04a8f9c6b7a92f7c3e0a86cb83d27aed8a96dc21cba20483c17ca0ec58ec82577539405d2d0aa43fc7cb644475eabc11760c452fd492e5742f23bf861480b74d2c790e5f631507b14ed573877507c915439828f0ff5e273574eaa023fa5137eeee756356511ab6df5ca2bca3bd12e52ff88f2593faa6866d6ad262e517649f1aa25610464b2c1dd7387b66dbf2067d0bbb4786bb761bd5a72d7843f9cf1cf3e898f4602c2b4e9265965f475d27e05becaae2310fd366be18195b04fc430392e463bec4675c971ae2b716da5c16cb30891f7d84e1a775ff922db45b43d97d3b08e966aadfca0b695c5db2dcd59bd04094461e2ee6f47cbb0ba79b21bfc61b481c637653ce1ba5a8491292ec28fbd77e5e7347392c677b0e21c4d27fc599ca17016bc2458f6be648b933ff20e44e0e7da179d111b596d5c06fbbf17d64afda24864fc2335a5621d2956b6f9ac57aac626e6548ebda4ddeacb1c5a87b389ace207ae6e332f4f28035def07c624d666f9d9c054e26b03e5c32d70a266fd027aaae78d4cb5e93cb9652d6a95da2d9ab836b18b436e2765a40c8df8610f668bc86d8f1627608ac768543fa89353dab0208c809521e52603a2299ba25fdba587e6775c68877fe7e531412671fc957934bc2c2b7400e6d71970e6c7109906b3c7c5636f7fffe98e85379e60e50cab1eb7bd4c32e703ec8b82cdc5258de1e08e366e5d8c60c232f6ecee677ad40e1ab3e7112b7764f4135dbdb34ab7b8e92453857463c504b62aa9a38742a9450b0247056f73d518c9192a2869a6fdbf6756291451d1ff3eed34d49916b6df369a239c2f57cab37c68eb08c12880425fc533ebf7aa7dc67165e0ea3847d5aebbc4c74fe0a14bbaa11c205fd96f603f65b9168bb39e9c612d546ac53bbe29bfaa36e6be5bbe4bb25841afb3226b00a81f968e3b75a63d19792c396468c62f217b5fa976c6f859b1b898a67080a9dbab7e5295937fc39f6b77eb674a37af001f55ce2a1776a63976d55ad0bf925d9827c3a82ae6ef8eadd640e5054b99eb4e6a4ec6f6b5d43fa61f13f86b90f042921148793c481076fbc5b23d16af407bf42e9b7267c30c3c1d183a93d3303d58cfe900844ddef4203f71b3514a89272f517629169ee5b0387cf5ccdcf44511038075748acf3feed91ff26b837715dadf0f6cd8ed24bfd6186b266111db942c64c77148f8a62ffdd3e980fad195dcc32bad116b8e97c3997f9064faf508b761e929e1fbd3b110dc92216276c565271e3dfb036f57b75b6c9b78a3fe4e7fb42287b5257eb20d21ac0e06a0be7b8745154f84675f1942e5e63bdd137df7d9de3243814b8bf3032323a900082ffbc7e59883f7cab344877bfa699d5fc05a466b200adc80b1cccb2c82218dc6c38b441d78f77b02bd9dd5c5af16303929bf0c7aff966946db5e2d828e41becc36848322f954724ab49c43ec689d0780e797531a516a07a67e6727efa9838875afaa8bc8617e7f41e5a5fd829b104bb372aa38640a1de6620f3fda56bb2397fcf5a66b798cbf6465722fa976fd2b0c0706480f09d39ff48d5eb97b5b1e23a4dbe89418b88283df9b7f63ac9d41295b5e851e3f53800dd3560a8fd21d47fd34951b25aebc4eb4826efd0e1ab68050674a3b9fff8d80b53bba6ac570cbbd4e9aa791231318cae966ebcf924e3c8966c173199984587d9581d42c92f54a8064024e896ee2021607f23d004332f3d46f63a114504ba15508c36d73c9d03b1a96cacab42b1f822959ba76b7a88b26eaddd3d618634e667879af9aa94bd94b7bdc2fb955531365312ec7d49674c4e48ae8037764ecf503dcd50ff09d4a2fb3bff8087f7c4ee19ac951796d74a87eae95e2fa5dd0706a1e1609a642fa108ced0148f68c9887e5c24f5878352905f5ae966142bbe551375bcc1ed0bcdebe67b9ede8e0ce341cf74f75d7be800fb67c77973b4bdf6fcbd44611527ce02fcd4290bd80ab1eafcfa75672d1840c7c99759255c4f301720f6acfbfcf3a06f9bc3e099fa042c2dda2a5ca6c801204978f7556e418650bc96cc74f7d925abfd465c24c1062f7cc54bf7647741ab6ed62c4668eba10c8fd43921653fb4ff9fe10b1641f8605d1ea76797759ef400c22c52b254cd6833ac90923df3219ee8f2938c4ca3734e17e9251afb853a60ce0fea3ec21cf8748ff9db13f3145b8c26a43d7a9a7f89d8ae023632cc29d87d49fb34514c62a2d5d57c8c9c2ba1195a5e23b3a4fd500c023a9cde9149dd315910c63e0cfd63bf34172103ba4f2e568a89f5383568873e0552d8930788430b04e59854922aac056f579d865973748b98d7e3ce737a625fb1fa0eb89eb9435c490a462862d5fddb0f9342db8d823a1646943933c46f030c5fdb1e8a7dd88f77f2434bc2693332b349ba7590adcac896a511d60ce02ea838a88e45dafd22549d35d2dda1380f303757bb17cda8402f6555770b17d34d1be8bfeb5d422e24e55088dbee6fc3b77e46fed400d7a6607081f1afa66f845f6d28b713adbfc2c4c9a1b70ca4ecb86f1439e0654983be5f825f937e11d91a926b223899778fc9331575dbb0f7a971a9d8c58012c0473aede27964b32038d155fd0b0f8280bf3d944e37b502ca9d3c576bfdea3f9b221278b165cb52ba5afba0b521822fad7635f1a3404208d35d8583b135be3cc8266357c5105b03ef6df68e66ac86f64e627572200aa22faf2e565d63c08f57d816bf409aa3f7ad39e73130a6116b775dca5aeaa62f9ec9e6c9921f5969208a9a749ef3945065fd1136a8e4d21142569db75f22c225128d12d274a8a71bed6685429742836ac503d5da76621b084208a614c71ea85d7d953fd5af2d737737ef027d39db1fe243284a8a33a350784b2a01db020306398212f91f66d9cdafaf08d0438b37bba3c7620aeb48dc311b695c2b947a22d7c40a02543d1f837d0d2ec86db0b12f73c9757a9102bfb2a138239eb928deb08bd67927e073eb2522663ebc1213fc31b6ec1fa89556eadfcab915d365b51e98b31133db3df81d189829b07c0bc0694a4d3067e7454df7040d89e3c172fbf38c304359573740b959313b810383eb8e168c7a68c6e3532ba76965fb2b366a609c71f4b4bdec45e594f0da298c7b181a894031b993011b321a5d5ebcf81ea1fce1fe9836fd51a36155ea4168e0ddf72bd4ad5afdf65c854cd6085916fc1f24fbdb9fcd740b2b37af733e2a9c84e434960134eef1b7c90344b239d25356798056c85311268eebb3bd65579a33c0bbafa5ca99ac4a591fd94d0f11763ef4e2cd66e0d5f176a50443fb791488d78129d3d5aa882c3c1519278b3a6b3cf88c0a9cd4977ffba463e954ba3ef9a00d237560884f317c86209764d3584dd97aec7bd5d7c6d36df8c4944dc6ff18ab1e5f562314a1f7469045b4588a893ad1c2280cd5f37fbf28e15e90b6f7d0ca8d9ca308ade8d50595f77a8f0995b76440bd01c2c17fdc4d417d33631faa96a553a5964e49e212023c466e17e8e69ab5720ad603b00abeca82398df1879fe34f1c9a841e81f9c2f1599c256a4832c7027037b74252694bde5089ac24b3e2b09797b1ee13de64967f967aadf35c675585a9a2f94f3f1e3d31d3b7d8805c229d1c595deeca1773ea19b80f37c593988f779af1d1781bd267f0ac3a5d2c9382f52bffdcc3367a10ea4a9af44b807aa5168156907d95f1f17d0806c27beac954feb2a32cfa094477f47ac323efee1df80ab745cb0ffe78638f88b48f7f3ffe3da008fde14a30060d92699bcf03afdd2af71a820749f4d146ec650149e482d3db0896699930d8bd04674835a3726150699809ed2b55cbe75e73ab7fbdd7ee", 0x1000}, {&(0x7f0000002000)="1da3fcd014bef235c86dea12894efe754fbb270b4b6de196243617846735007fc466ee15966dfa57ee316a7edae98bad6c33de0d80110d29054bb0d46623a163038373baa2d168f6c647166c004f5b4c1692c3e758737bd58a335366f2d9f15730af361d126ac85e6eeb67b9f4b37680fcd8517c90c6f972834fb560db26e982d1e07acec8a3ef80c2eea297e2796a8a4e42fbfbe73255b0b7bfa6208230eee4401edb75b12cf3266bfabd8b7e2f7b8dd105f9a57a5f0dca", 0xb8}, {&(0x7f00000020c0)="0ea2ab8350a5ea0686bea442fd3bd20eae588d0d4f1746f1c41896e7e284df41d346aa573f7ff103311dc97bce18a117620c0d0e47458ef5a4cdad548362ed988dc71b8f62391611a1b654378ff031a0543b", 0x52}, {&(0x7f0000002140)="92978f78a6ec85c6a3c1317f60504d17206e1a7d2e600ed8ddb47bccdcf2be3a50878efaeb8aecba80cf90fb35d1b9553a08d7e7ba68e613befcc640ddfbda06a3c185357b22adb638437a7a8babe5009fbc2812303b857d12d1a26b4ed974a7ca3b8639ce1c2892e1a77858409496c69d975c70fd8988ebcc20741f", 0x7c}, {&(0x7f00000021c0)="ebf30897bd2031eeced14c9ac64ac5290121ff300eda4cc9d447326c997dea86748de2182ab4cf6924fa22d33ee8a1cd97e72ef4c3bdee4a268315d817a23b3bfaea96bb7ea2910c33a975303a41da82394ef409283e2880327c782bc14decc1d896106f99220f4684d4da1d022c610cc0ea7189fee845a2ce4786dc86aac02546a80425101a19e3bf4480b0e0527962db7974e1bf7eb37fee6273c5e05c8b48689928b70e4f754c73d92698fda0b8fa54a3e9b867b8eff135ef2442f14b9e6ac243665ea3cf18dc92927bd3b4bb0cb4f8a9a0919af46e587623225604c98a2034bcc6c7747f11d2aab42a550aa1", 0xee}, {&(0x7f00000022c0)="0db8511ca7c87417c44b265341cc4103f97ba4dd810bb28e367df4db434b70f26e67c33a8e8928b515e8b99b16a5114094e5e68982552153", 0x38}, {&(0x7f0000002300)="5f736f41b623c3002a947c2ed81061dcc7f15e22c96f38aa8489b660ce763875b43e8cbe0cda646483219112ce214c0c12b3ac65d17b4af0f15b94d938f12399adf13cd001f7718621c51535b17e92669c31a8efdec6e317045ef610a86f99957f322d10cb31ae8ae4b55c171f92522e096d5fc879216b38f955669503cea3460c8bb3cac75a9d59d5d8ca436515f089a50baeff40e3988d", 0x98}], 0x7, &(0x7f0000002440)=[@assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xf0, 0x117, 0x2, 0xdb, "01a3d9540815f706a8cdc433cf0f758e884690381838867934fb3754a1b75517a141a2d644f6d58deaaf5e2ff732fc5f89a8bf9cb33ca79383f5e754465b25fb217b0cd0635f46681e718afdbdd2d71e5114b3f49c3f5c3b3f60f990634546fba6b0fcbdf717c508d23425ab06e738e7160bf2a9fdce47bd0f0f8089ba1c5b8824bf61cca8a80e12a12ceeeb571fc12d77b115722184b50f60e31bbc1357d7ddae86d0ac59ca3d2469206a5dbd169777b05ee40f9c3af02e3a30d451d04e3dff3fd60cbaa6d4f3a91c93bd47b037ba6e27fa61ec2c2c76c190c194"}, @iv={0x88, 0x117, 0x2, 0x70, "e4f099176d2b937722d698127bf96494f84c8c60d8ca367ce41e4f183f32f3b506186fe9b16d9776cab7dbbadaff0f5cca3221a9a7fe65222edbc5ec4e75132188d76a02ba71f897eb0568966efc35fe429d7f3a695ae5936b2201c3d5f72d97eaf7b42c9177046b2b99c87319294592"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x100}], 0x1d8, 0x8041}], 0x4, 0x4041) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x2c, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0xe}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002980)={'ip_vti0\x00', &(0x7f00000028c0)={'syztnl1\x00', r4, 0x8000, 0x1, 0x0, 0xff, {{0x28, 0x4, 0x2, 0x26, 0xa0, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xe5, 0x1, 0x6, [{@empty, 0xfff}, {@multicast2, 0x7fffffff}, {@multicast1, 0x40}]}, @cipso={0x86, 0x42, 0x3, [{0x2, 0x7, "f6fe72698c"}, {0x2, 0xf, "234987c3ab112e1f4f242a06d6"}, {0x2, 0xc, "edcb57c5e4ab07008ecb"}, {0x0, 0x12, "fa0363d1dd128d841f8a87e09428cfb7"}, {0x6, 0x8, "b0c10e9c5be8"}]}, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x6, [{@empty, 0x7}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x11}}]}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0xc, [0x5, 0x8, 0x5]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002a80)={'syztnl2\x00', &(0x7f00000029c0)={'ip_vti0\x00', r5, 0x8702, 0x80, 0x2, 0x4afe, {{0x1d, 0x4, 0x0, 0x1, 0x74, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x24, 0x21, 0x0, 0x6, [0x3, 0x6, 0x1, 0x80000000, 0x7, 0x3, 0x4, 0x80000000]}, @timestamp_prespec={0x44, 0x3c, 0xca, 0x3, 0x2, [{@broadcast, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@private=0xa010101, 0x1}, {@empty, 0x4}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x7f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002bc0)={'syztnl0\x00', &(0x7f0000002ac0)={'syztnl1\x00', r1, 0x700, 0x40, 0x4, 0xa, {{0x38, 0x4, 0x3, 0x3a, 0xe0, 0x68, 0x0, 0x0, 0x4, 0x0, @remote, @broadcast, {[@generic={0x94, 0xe, "55ca5a10811cb1b2a4bbd594"}, @end, @timestamp_prespec={0x44, 0x1c, 0x98, 0x3, 0x1, [{@multicast1, 0x1}, {@broadcast, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @cipso={0x86, 0x1f, 0x0, [{0x6, 0x10, "8b6e47058fb9fbf5bb662f5f2c46"}, {0x6, 0x3, ')'}, {0x0, 0x6, '\nF34'}]}, @timestamp_prespec={0x44, 0x34, 0x88, 0x3, 0x8, [{@loopback, 0x4}, {@private=0xa010102, 0x400}, {@multicast2, 0x1}, {@multicast1, 0x2}, {@loopback, 0x4}, {@broadcast}]}, @noop, @lsrr={0x83, 0xf, 0x3f, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102]}, @cipso={0x86, 0x24, 0x3, [{0x2, 0x11, "4d876764b454a4d22a0291de5c3f06"}, {0x5, 0xd, "a0c0a748522817e306d14f"}]}, @cipso={0x86, 0x18, 0x2, [{0x2, 0x5, "1a4540"}, {0x0, 0x9, "c7d19be4a065d6"}, {0x0, 0x4, "d3f6"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002c00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002c80)={'erspan0\x00', &(0x7f0000002c40)={'sit0\x00', r1, 0x7800, 0x8, 0x10001, 0xffffffff, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x65, 0x0, 0x5, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@timestamp_addr={0x44, 0xc, 0xef, 0x1, 0x0, [{@multicast1, 0x4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002dc0)={'gretap0\x00', &(0x7f0000002cc0)={'ip_vti0\x00', r1, 0x20, 0x8, 0x7, 0x1, {{0x37, 0x4, 0x0, 0x32, 0xdc, 0x66, 0x0, 0x73, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@noop, @lsrr={0x83, 0x1b, 0x48, [@rand_addr=0x64010100, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010101]}, @timestamp_prespec={0x44, 0x3c, 0x8d, 0x3, 0x2, [{@broadcast, 0x3}, {@local, 0xd7c9}, {@remote, 0x3}, {@rand_addr=0x64010100, 0xfffffffb}, {@loopback, 0x101}, {@remote, 0x2}, {@multicast2, 0x9}]}, @rr={0x7, 0x7, 0x42, [@multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xf0, 0x3, 0x9, [{@local, 0x5}, {@broadcast, 0x1}, {@loopback, 0x5}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xa}]}, @timestamp_prespec={0x44, 0x3c, 0xa9, 0x3, 0xe, [{@multicast1, 0xf4e8}, {@multicast2, 0x4}, {@loopback, 0x4}, {@remote}, {@empty, 0x58}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xfe}, {@broadcast, 0x3ff}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000003040)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003000)={&(0x7f0000002e00)={0x1d8, r10, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000003080)=0x305, 0x4) connect$phonet_pipe(r2, &(0x7f00000030c0)={0x23, 0x10, 0x8, 0xb6}, 0x10) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r17, &(0x7f0000003280)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003240)={&(0x7f0000003140)={0xc8, r7, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_IE={0x9a, 0x2a, [@mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x8, [{0x2, 0x1}, {0xb}, {0x60, 0x1}, {0x2, 0x1}, {0x48}, {0x1, 0x1}, {0x1b}, {0x9, 0x1}]}, @random_vendor={0xdd, 0x24, "25eee14bc5da62ab579fa7067fcbaba9be7f99b7820131ed51840de0106d32c2939211c4"}, @peer_mgmt={0x75, 0x14, {0x0, 0x4, @void, @void, @val="08481350d4a79cc81e418781f758029c"}}, @preq={0x82, 0x46, {{0x0, 0x1}, 0x3, 0x2, 0xf7, @device_a, 0x0, @void, 0xa, 0xe31b, 0x4, [{{}, @broadcast, 0xf4}, {{}, @device_a, 0x8}, {{0x0, 0x0, 0x1}, @device_a, 0x5}, {{0x1}, @broadcast, 0x3}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40081}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003400)={&(0x7f00000032c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x8, [@typedef={0xa}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @struct={0x8, 0x3, 0x0, 0x4, 0x0, 0x2, [{0x10, 0x2, 0x1}, {0xa, 0x0, 0x16}, {0x0, 0x5, 0x3}]}, @fwd={0x4}, @union={0x9, 0x2, 0x0, 0x5, 0x1, 0x9, [{0x8, 0x3, 0xffff}, {0x4, 0x4, 0x40}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6}, {0x8, 0x1}, {}, {0xe}, {0x0, 0x1}, {0x4}]}]}, {0x0, [0xb3, 0x61, 0xe403f4b1729ab406, 0x5f, 0x0, 0x0]}}, &(0x7f00000033c0)=""/29, 0xd4, 0x1d, 0x0, 0xffff}, 0x28) bind$can_raw(r2, &(0x7f0000003440)={0x1d, r6}, 0x10) 3.46480601s ago: executing program 5 (id=3416): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000400"], 0x0, 0x58, 0x0, 0xa}, 0x28) setsockopt(r0, 0x5633, 0x2, &(0x7f0000000200)="a36e9264dfe3f54ba449f95beb9fdaa2bf971506fd9f9f1dfbefc134ca06e9f9025785637548a2479079c371537425a873b855b542971add07ab0f1d26fa06a3a72d7937ce1b09c0f20e2fd5a42612987a0c67a17f5d736ae445ee5fcd4b7f3815724373d169f51f615af02bd1f9bcdde9f60d0f939caee199d15267f4c9f93e0537069e7de0d0571b3f75", 0x8b) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000400"], 0x0, 0x58, 0x0, 0xa}, 0x28) (async) setsockopt(r0, 0x5633, 0x2, &(0x7f0000000200)="a36e9264dfe3f54ba449f95beb9fdaa2bf971506fd9f9f1dfbefc134ca06e9f9025785637548a2479079c371537425a873b855b542971add07ab0f1d26fa06a3a72d7937ce1b09c0f20e2fd5a42612987a0c67a17f5d736ae445ee5fcd4b7f3815724373d169f51f615af02bd1f9bcdde9f60d0f939caee199d15267f4c9f93e0537069e7de0d0571b3f75", 0x8b) (async) 3.096143664s ago: executing program 1 (id=3418): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="00000000000000001c001a801800048014000a80"], 0x3c}}, 0x0) 2.880534094s ago: executing program 1 (id=3419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0, @ANYRES8], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {0x0}], 0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x80000, @empty, 0x40d4}, 0x1c) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x7, 0x3a, 0x1000, 0x3a, 0x7bf, 0xf83, 0x4}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r7, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x85, 0x6, @broadcast}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006}) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES16=r0, @ANYRES32, @ANYRESHEX=r5], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f00000001c0)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) 2.837690876s ago: executing program 2 (id=3420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) r5 = socket(0x9, 0x6, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r10 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x0, 0x0, 0xf}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r11 = socket$inet(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="8d74eb"], &(0x7f0000001500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) sendmsg$inet(r11, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='0\x00'/11], 0x30}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r9, 0x200}, 0x2b) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0x9, 0x10}, {0x8, 0x1c}, {0x6, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x20008084) 1.332393642s ago: executing program 5 (id=3421): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYBLOB="680000001900010028bd7000fbdbdf251d0109005000128083cabd681f09ef88cafcd3c3124900d58033ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aed90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580cbf57b3cb27"], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x25c, r3, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x4000, 0x42a5, 0x1ff, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x41, 0x6, 0x7, 0x7ff, 0x3ff, 0xab7, 0x899, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x6}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4c810}, 0x40) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000a80)="0cf2e153a074a59ae15c1863473bbce6798a60e9000000000000000000", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f0000000240)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000040"], 0x10}}], 0x1, 0x48c5) 1.159298653s ago: executing program 1 (id=3422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000100000000000000010000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000800)='syzkaller\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.113587255s ago: executing program 2 (id=3423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000540)=0x2, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000018181100000000000000000000000000cbac69f0e975887e594eb69a27c50add3278e6f6ac8d1a3f9ffe611498762f176dc8a04d21e53b933fd38290492dd495de1dce6c53815e8b683898c77d5beb65bb7f63e1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa2000000000000020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000000000800000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 986.157695ms ago: executing program 5 (id=3424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'wlan0\x00', {}, 0x5}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x2, 0x30}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x800, 0x28, 0x0, 0xb, 0x3e, 0xeef6, 0x2, 0x6, 0x9, 0x5, 0x401, 0x4fa0, 0x0, 0x7ff, 0x7, 0x2, 0x1ff, 0x2, 0x92e4, 0x6, 0x561, 0x0, 0x5, 0x8, 0x8, 0xa00, 0x2, 0x8, 0xfffffff8, 0x9, 0x3, 0x8000, 0x80c6, 0x3, 0x6, 0x2, 0x6, 0x9, 0x2, 0x2, 0x8a0b, 0x100, 0x10001, 0x3, 0x4, 0xf3a, 0x6, 0xf, 0x5c72, 0x9, 0x4, 0x7fff, 0x6, 0x2, 0xec89, 0x2, 0xa, 0x3, 0x80000000, 0x7fffffff, 0x5, 0x1, 0x9, 0x4, 0x293, 0x16214, 0x9, 0x1, 0x1, 0x5, 0x8, 0x5, 0x7, 0x4, 0xfffffffe, 0x437, 0x10000, 0x8001, 0x3, 0x54, 0x2, 0x2, 0x9, 0xffffffff, 0x7, 0xe, 0x5, 0x0, 0x1, 0x0, 0x5, 0x7615154, 0xfe000000, 0x0, 0x5, 0x7, 0x7, 0xa0, 0x7, 0x3, 0x8000, 0x3, 0x3, 0x6, 0xcc8, 0x6, 0x1400000, 0x9, 0xffffffff, 0x3, 0x7, 0x0, 0x8, 0x6, 0x7ff, 0x101, 0x8001, 0x1, 0x1, 0x405, 0x7, 0x0, 0xfffffbff, 0xffff0000, 0x9, 0x7fff, 0x1, 0x0, 0x9, 0x7, 0x7ff, 0x1000, 0x6, 0x3, 0xf42e, 0xba, 0x3, 0xd24, 0x40, 0x6, 0xfffffffe, 0x9, 0x9, 0x8, 0x4, 0x1, 0xffffaa35, 0x5, 0x6104df6a, 0xfffffffc, 0x5, 0x0, 0x6, 0x8, 0x1, 0x9, 0x8001, 0x8bb, 0x6, 0x4, 0x4, 0x2, 0x7, 0x0, 0x5, 0x4, 0x2, 0x7, 0x101, 0xc7, 0x7, 0x1, 0x6, 0x3, 0x4, 0x13d1, 0x2, 0x9d0, 0x3ff, 0x2, 0x6, 0x5, 0x726, 0x9522, 0x9, 0x9, 0x0, 0x401, 0x5, 0x7f, 0x2, 0xe2, 0xff, 0x19, 0x1, 0x189, 0x34, 0xc, 0xff, 0xdef, 0x3, 0x401, 0x6, 0x185e, 0xb, 0x8, 0xfff, 0x0, 0x5, 0x4, 0x4, 0x10, 0x2, 0x2, 0x7, 0x1, 0x4cbc, 0x7, 0x80000000, 0x40, 0xeb5, 0x7f, 0xdfb, 0x7ff, 0x8, 0x5, 0x4, 0x9, 0xffffffff, 0x7, 0x2, 0xc1d, 0x6, 0x96cc0000, 0x4, 0x3, 0x0, 0x1, 0x5, 0x0, 0x7f, 0x6, 0xd, 0x0, 0x9fd2, 0x6, 0xa0, 0x2ad, 0x8, 0x3ff, 0xbb, 0x800002, 0xf9, 0x400, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x1, 0x1, 0x7, 0x0, {0x6, 0x1, 0x1, 0xeaeb, 0x5, 0x7}, {0x9, 0x3, 0x1, 0xf2, 0x1, 0x1}, 0x9, 0x4, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xc2d, 0x4, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0x93, 0x3, 0x8, 0x9, 0x615d37e8, 0xe, 0x6, 0x7, 0x8, 0x0, 0x5, 0x9, 0x2, 0x568000, 0x9, 0x8, 0x5, 0x6, 0x5a, 0x0, 0x9, 0x84fe, 0xb7, 0x10001, 0x6, 0x3, 0x2000000, 0x83, 0x3, 0x4, 0xbd1, 0xffffffff, 0x9, 0x4, 0x401, 0x414b, 0x4ac5, 0xc, 0x5, 0x37, 0x2, 0x7, 0x9ee4, 0x0, 0x2, 0x81, 0x403, 0x2, 0x9, 0x9, 0x8, 0x9531, 0x1, 0x29, 0xffff0001, 0x3, 0x8000, 0xadc3, 0x10000, 0x3cf, 0x1, 0x3, 0xe, 0x7, 0x3, 0x400, 0xaa7, 0x6950, 0xfff, 0x3, 0x7, 0x6, 0x7, 0x1, 0xc0a, 0x1, 0x3, 0x70a482f2, 0xe00, 0x6, 0x1, 0x6, 0x5, 0x8, 0x7, 0x1, 0xe, 0x45, 0x10, 0x93d1, 0x10001, 0x3, 0x6, 0x3, 0x57, 0x7fff, 0x3, 0xfffffe01, 0x7b56, 0xe542, 0x7, 0x9, 0x10000, 0x4, 0x8, 0x7, 0x3, 0x685, 0x5160, 0x7, 0x3, 0xfbb, 0x8, 0xfffffff7, 0x1, 0xffffffff, 0x9, 0x80000001, 0x31, 0xc7, 0x4c, 0x400, 0x4, 0x5, 0x9, 0x1ff, 0x291, 0x4, 0xfffffff9, 0x1ff, 0x50, 0x1, 0x0, 0xfffffffb, 0x100, 0x6, 0x205, 0x7fff, 0x8, 0x9, 0xc, 0x8d3, 0x6, 0xfffffff7, 0x2, 0x9, 0x10000, 0x7a, 0x4, 0x400, 0x1, 0x6, 0x1ff, 0x200, 0xa2680000, 0xa0, 0xe6, 0x8, 0x5, 0xfffffffa, 0x2, 0x10001, 0x9, 0x66, 0x5, 0x80000001, 0xac4, 0x6, 0x6, 0x8, 0x4, 0x7f, 0x2, 0x5, 0x4, 0x9, 0x7f, 0x9, 0x3, 0x4, 0x3, 0x8, 0xf, 0x8, 0x5, 0x5, 0x6, 0x5, 0x2, 0x8, 0x8, 0xfffffffe, 0x10000, 0x800, 0x2, 0x9, 0x7, 0x2, 0x1, 0x9, 0x4, 0x9, 0x4, 0x3, 0x4, 0xd3, 0x3, 0x80, 0x8, 0x9, 0xa, 0x2, 0xab, 0x5, 0x7, 0x0, 0x9, 0x2, 0x9, 0x4, 0xb, 0x7, 0x0, 0x2, 0x3ff, 0x5, 0x5, 0x2, 0x5f8, 0x3, 0xff, 0x4bf, 0x1, 0xff, 0x4, 0x4f4, 0x6, 0x2, 0x4, 0x81, 0x9, 0x9, 0x0, 0x7fffffff, 0x8001, 0x6, 0x3, 0xfffffff8]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 985.652943ms ago: executing program 3 (id=3425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x86}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000a0000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x10) 978.749363ms ago: executing program 0 (id=3426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtaction={0x210, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x1fc, 0x1, [@m_ipt={0xe0, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x118, 0x3, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x5, 'mangle\x00', 0x8, 0xe3b}}]}, {0xc1, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5551fe5e22a68ccbe72dc6cef4f6eba13919d8b37efe0ce2e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x210}}, 0x40c1) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0x20}], 0x5}, 0xb}], 0x2, 0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x6, 0x1b}, {0x4, 0x1ffef}, {0x5, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)=r6) socket$kcm(0x29, 0x5, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6006}, @val={0x0, 0x0, 0x5, 0x7, 0x1000, 0x7}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x4c, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89}], {0x4e24, 0x4e21, 0x44, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a"}}}}}, 0x82) 894.163933ms ago: executing program 1 (id=3427): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000240)=0x80, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, &(0x7f0000000280)="cf5185f618722c16166eb35ff29490d4d0a8ae5500b64223f62456667c62d8949dfa898c38bb4ab5789e1962588ec36390f7c7e6811214bbaaa7ca6ed3feafb21a288458f11f041042599af9b753e070a48468708096e542c1d9023a39c706bbed66386d7592c012f75d300c3a0d849fcac7ee0c402a1e0c0171c799bdc710d9ff903554577fc73a14260714fd6943367b9d3c2b5897db04a250d1e7544d884dd06956215e07e15f", &(0x7f0000000380)=""/192}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200f505000000000095000000000000000000004efbffd69f00"/41], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x40) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) tee(r5, r7, 0x100000000, 0xa) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108001000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, r10, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003b40)=@newtfilter={0x8a4, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x56, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0xffffffff, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x1, 0x100, 0x7ff, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x3, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x29, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x1, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0x1, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0x0, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x5, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x2, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0xfffffffc, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x4, 0x8, 0x4, 0x0, 0xea, 0x7, 0x10001, 0x8, 0x7fff, 0x3, 0x8, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0x80, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x1ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x9, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x19, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x4, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x7, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x4, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x2, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa5}}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000160001000000000000000000ac14140d000000000000000000000000fc000000000000000000000000000001fffe00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xf8}}, 0x0) 789.091305ms ago: executing program 2 (id=3428): bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x20, 0x0, 0x2f}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f0000000400000004000000060000", @ANYRES32, @ANYBLOB="060000000000000000", @ANYRES32], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 586.886828ms ago: executing program 0 (id=3429): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) socket$inet6(0xa, 0x2, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0xa, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x4, 0x2}, @struct={0x10, 0xa, 0x0, 0x4, 0x1, 0x9, [{0x10, 0x3, 0x8}, {0xe, 0x4, 0x3}, {0x6, 0x2, 0x5}, {0xf, 0x0, 0x80000000}, {0x2, 0x1, 0xa02}, {0xc, 0x5, 0x70000000}, {0xe, 0x0, 0xfffff009}, {0xc, 0x3, 0xfff}, {0xb, 0x1, 0x594e}, {0x4, 0x0, 0x6}]}, @float={0xf, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e, 0x0, 0x30, 0x61, 0xb311641393314564, 0x61, 0x0, 0x5f]}}, &(0x7f0000000340)=""/157, 0xd2, 0x9d, 0x1, 0xe}, 0x28) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x2}]}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xffffe000) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000000)={0x2, 0x9}) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8fbc0e6f77c18ed3, 0x11, r5, 0x1000) r6 = socket(0x1, 0x803, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={&(0x7f0000000140)=@ethernet={0x1, @remote}, 0x80, 0x0}, 0x4000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x75, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 546.120454ms ago: executing program 2 (id=3430): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000020101010800000000000000030000001400108008000240000000070800034000000fff10000e800c"], 0x38}}, 0x24000881) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x98}, 0x90) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000020101010800000000000000030000001400108008000240000000070800034000000fff10000e800c"], 0x38}}, 0x24000881) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x98}, 0x90) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) 232.571476ms ago: executing program 1 (id=3431): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 231.31647ms ago: executing program 2 (id=3432): bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0x5) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) (rerun: 32) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x2}, 0xc3}) (async) shutdown(r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0xfffffffffffffee8) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006002000800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async, rerun: 32) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="15110200bb10030028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000"], 0x48}}, 0x24008000) 229.263778ms ago: executing program 5 (id=3433): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000e0000001000000000000000000000000ac"], 0x184}}, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000c0c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x8000010) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="a2", 0x1}], 0x1}, 0x20000050) write$cgroup_devices(r3, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0x1c, 0x0}}], 0x1, 0x60080004) recvmmsg(r0, &(0x7f00000003c0), 0x1, 0x40002142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x1, 0x3, 0x200000) close(0x4) unshare(0x6a040000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r7 = socket$inet(0xa, 0x80000, 0x88) listen(r7, 0xfffffffd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x6f4, 0x2c, 0xd2b, 0x30bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c0, 0x2, [@TCA_U32_ACT={0x108, 0x7, [@m_mirred={0x104, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r6}}]}, {0xb5, 0x6, "3e75ffff454932196190cafb130eae2a745b8560ec3cab3a8075096b09684633568daea2426619bd1ad4102a3713cd52f295de578a4cd0b4bf3e6c8dae393d6d071acd584c4dc93e34009be9cc32d72a4ae012185477f6b4a434060000000000000090b082904eb9346d3811d3c7f8d0bb299f502bdd9d6ff7f2248bede707009df53c6df5fc19d9790195089c95f1efa422d9530c6408d302008c20f6553c63070e1cd6b8913dfdb5a078e680f676f760"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x5b4, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4, 0x2800, 0x5}, {0xa9, 0xffff7fff, 0x1, 0x8}, {0x798, 0x5, 0x80000000, 0xffff0c76}, {0x8, 0x10001, 0x5, 0x7ff}, {0xfd, 0x57, 0x200, 0x4}, {0x7fff, 0x0, 0x7ff, 0xa}, {0x4, 0x45be, 0xcd, 0x3}, {0x10, 0xe, 0x7, 0x10001}, {0x9b, 0x4, 0x0, 0x8}, {0x2501, 0x8, 0x1, 0x7}, {0x1, 0x3, 0x4, 0x7}, {0x6, 0x200000, 0x7, 0xfffffffb}, {0x5, 0x10000, 0x1c33}, {0x1, 0x0, 0xd, 0x4}, {0x2, 0x2, 0x75, 0x4}, {0xfffffff7, 0x8, 0x159b, 0x34}, {0x6, 0x0, 0x5, 0x6}, {0x8, 0x9, 0x100, 0x47}, {0x5, 0x3, 0xe, 0xb0b6}, {0x40, 0x81, 0x80000000, 0x439}, {0x80000, 0xe1, 0x3, 0x5}, {0x5c, 0x1, 0x5, 0x5}, {0x4, 0x400, 0x2d}, {0xfffffeff, 0x1, 0x6, 0xc23}, {0x1, 0xffff44ff}, {0xc5f8, 0x8, 0x80, 0x1}, {0xfffffff8, 0x5, 0x7, 0x8}, {0xfffffc01, 0x4, 0x6, 0x9}, {0x675, 0x800, 0x7fff, 0x3}, {0x2, 0x8001, 0x5, 0x1}, {0x6, 0x1c, 0x2, 0xff}, {0x1, 0x2, 0x6, 0xfffffffc}, {0xca95, 0xd, 0x9, 0x9}, {0x0, 0x10, 0x80000000, 0x80000000}, {0xa, 0x7fffffff, 0x0, 0x9bb8}, {0x6, 0x7d6c, 0x5ed0, 0xfff}, {0x7, 0x2bb5, 0xb, 0x80000000}, {0x0, 0x10, 0x5, 0x9}, {0x9, 0x93a3, 0xdbcf, 0x45395167}, {0x5, 0x5, 0xdf7a, 0x5}, {0x9, 0xfffffffe, 0x8001, 0xcfe}, {0x81, 0x2, 0x9, 0x6}, {0xf76, 0x9, 0x7fff}, {0x7fff, 0x6, 0x4, 0xf4d}, {0x5, 0x1dd, 0x2, 0x13}, {0x9, 0x5, 0xd, 0x1}, {0x1, 0x9, 0xffffff80, 0x71}, {0xb8, 0x80000001, 0x9, 0x10000}, {0x1, 0x6, 0x9, 0x8000}, {0x10001, 0x5, 0x4, 0x3}, {0x3, 0x3ff, 0x5, 0xffffffff}, {0x4, 0x1, 0x1000, 0x1756}, {0x3, 0x7ff, 0x800, 0x8}, {0x6, 0x1ff, 0x2, 0x9}, {0xffffffff, 0x3, 0x1, 0x8}, {0xff, 0x40, 0x7fffffff, 0x80000001}, {0x0, 0x4, 0x1d34, 0x9}, {0x6, 0x5ea, 0x1, 0xbafc27a}, {0x7102423b, 0x6, 0x0, 0x9}, {0x7, 0x2, 0x5bfbaf67, 0x5}, {0x8, 0xff, 0x5, 0xb}, {0x8, 0x2, 0xad180000, 0x3}, {0x100, 0xd, 0x0, 0x4}, {0x6, 0x7fffffff, 0x4, 0xc0a}, {0x0, 0x3, 0xff, 0x80}, {0x43e10, 0x24, 0xfffffff8, 0x6}, {0x7, 0x6c83, 0x7, 0x1}, {0xc7, 0x5, 0x7, 0xffffff1f}, {0x6, 0x8, 0x0, 0xb}, {0xffffffff, 0x2, 0x7, 0x7}, {0x3b, 0x6, 0x80, 0x1}, {0x4, 0x4, 0x8, 0x4}, {0xfffffbff, 0x6, 0x0, 0x2b72}, {0x7, 0x0, 0x7f, 0x8}, {0xa7a, 0x7ff, 0x7c3, 0x7}, {0xe, 0x1b9, 0x80000001, 0x6}, {0x9, 0x849, 0x101, 0x7}, {0x6, 0x1000, 0x734fbc8f, 0x2}, {0x3, 0x6, 0x8, 0x7fff}, {0x6, 0x7f, 0xfd, 0x1}, {0x100, 0x7, 0x8, 0xb}, {0x160000, 0x8, 0x1, 0x6}, {0x8, 0x1, 0x1, 0x43}, {0x40, 0x2ad, 0xd, 0x7}, {0x0, 0x3, 0x1, 0x19}, {0xc, 0x2, 0x0, 0x2}, {0x82f, 0x3, 0x81, 0xe3}, {0x5, 0x80000001, 0x5, 0xa}, {0x6, 0x8d, 0x2, 0xf}, {0x4, 0xf417f45, 0x7, 0x222ed5b3}]}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="08000700c11414c0c7c0ea0c1a482c747411479dbec1d9314cba0829ec1eb2"], 0x20}}, 0x40000c0) 6.782273ms ago: executing program 2 (id=3434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa80011aaab3cc862df0000000000000100000800"], 0x0) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 0s ago: executing program 1 (id=3435): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x10001, 0xb8, 0x4, 0x8}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000", 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x4}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket(0xa, 0x3, 0x3) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) splice(r3, 0x0, r6, 0x0, 0x1100000000f336, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private=0xa010100}, 0x5, 0x4, 0x2}}, 0x80, 0x0}, 0x40000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a"], 0xfe33) kernel console output (not intermixed with test programs): : 6 callbacks suppressed [ 483.965975][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2283'. [ 484.014058][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2283'. [ 484.040793][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 484.101579][T15612] Cannot find add_set index 1 as target [ 484.169191][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 484.449306][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 484.674343][T15641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2290'. [ 484.778545][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 484.811850][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2283'. [ 484.939672][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 485.061231][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 485.137302][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2295'. [ 485.164453][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2293'. [ 485.173150][T15653] : entered promiscuous mode [ 485.204597][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2295'. [ 485.217528][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 485.240512][T15655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2293'. [ 485.254636][T15653] openvswitch: : Dropping previously announced user features [ 485.286376][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 485.349472][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 485.391811][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2293'. [ 486.304696][T15706] netlink: 'syz.0.2308': attribute type 10 has an invalid length. [ 487.423793][T15726] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.431618][T15726] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.749016][T15726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.766129][T15726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.406114][ T1173] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 256 - 0 [ 488.437271][ T1173] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 488.457045][ T1173] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.486342][ T1173] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 256 - 0 [ 488.518010][ T1173] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 488.572323][ T1173] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.595955][ T1173] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 256 - 0 [ 488.607772][ T1173] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 488.653207][ T1173] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.682492][ T1173] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 256 - 0 [ 488.713517][ T1173] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 488.725597][ T1173] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.952848][T15771] lo: Caught tx_queue_len zero misconfig [ 489.677012][T15795] __nla_validate_parse: 10 callbacks suppressed [ 489.677031][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'. [ 489.707076][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2331'. [ 489.733855][T15801] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_virt_wifi, syncid = 1, id = 0 [ 489.757505][T15797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2332'. [ 490.211866][T15829] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 490.317229][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 490.358570][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2340'. [ 490.388171][T15835] netlink: 'syz.3.2340': attribute type 14 has an invalid length. [ 490.401770][T15835] netlink: 'syz.3.2340': attribute type 13 has an invalid length. [ 490.649086][T15855] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2343'. [ 490.687701][T15855] net_ratelimit: 14 callbacks suppressed [ 490.687725][T15855] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 490.806495][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.824068][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.134792][T15879] netlink: 'syz.3.2351': attribute type 1 has an invalid length. [ 491.607931][T15912] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2357'. [ 491.809412][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.890065][T15922] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2359'. [ 492.049358][T15897] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.057175][T15897] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.234205][T15935] netlink: 'syz.1.2361': attribute type 39 has an invalid length. [ 492.482756][T15897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.506190][T15897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.372511][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 493.425749][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.471283][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.492763][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.526535][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.555441][T15957] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2364'. [ 493.567461][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.582081][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.653608][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.664462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.006695][T15979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.018349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.075372][T15977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 495.117801][T16037] ªªªªªª: entered allmulticast mode [ 495.447881][T16044] netlink: 'syz.5.2383': attribute type 9 has an invalid length. [ 495.534809][T16051] netlink: 'syz.1.2385': attribute type 1 has an invalid length. [ 495.552101][T16051] __nla_validate_parse: 1 callbacks suppressed [ 495.552132][T16051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2385'. [ 495.753769][T16050] netlink: 'syz.1.2385': attribute type 1 has an invalid length. [ 495.778740][T16050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2385'. [ 495.922459][T16062] bond8: Removing last ns target with arp_interval on [ 496.109318][T16070] hmó3)ó: entered promiscuous mode [ 496.153647][T16077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2389'. [ 496.453345][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2392'. [ 497.011222][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2395'. [ 497.171138][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'. [ 497.532052][T16113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.575473][T16113] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.603003][ T6369] syzkaller0: tun_net_xmit 76 [ 497.627172][ T6369] syzkaller0: tun_net_xmit 48 [ 497.640332][ T5767] syzkaller0: tun_net_xmit 76 [ 498.859711][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.868700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.061052][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.146380][T16140] vlan0: left promiscuous mode [ 502.173605][T16140] geneve3: left promiscuous mode [ 502.329871][T16140] geneve4: left promiscuous mode [ 502.335236][T16140] geneve4: left allmulticast mode [ 502.437650][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.470805][ T36] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 502.499471][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.519636][ T36] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 502.706165][T16189] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2411'. [ 502.940382][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.949977][ T36] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 502.968768][T11133] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.983849][T11133] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 503.093837][T16201] netlink: 'syz.1.2414': attribute type 2 has an invalid length. [ 503.143544][T16202] xt_policy: too many policy elements [ 503.249781][T16190] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 503.464411][T16211] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.2417'. [ 503.527809][T16211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2417'. [ 503.621884][T16211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 504.264603][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 504.299233][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2423'. [ 504.596068][T16249] syzkaller0: entered promiscuous mode [ 504.609772][T11133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.618213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.635890][T16249] syzkaller0: entered allmulticast mode [ 504.675049][T16254] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2428'. [ 504.741826][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2430'. [ 504.835578][T16263] veth1_to_bond: entered allmulticast mode [ 504.843117][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 504.877838][T16269] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2432'. [ 504.971994][T16264] veth1_to_bond (unregistering): left allmulticast mode [ 505.275541][T16281] netlink: 'syz.5.2435': attribute type 4 has an invalid length. [ 505.338998][T16282] netlink: 'syz.5.2435': attribute type 4 has an invalid length. [ 509.223308][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.234843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.258578][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2438'. [ 509.397776][T16295] bridge6: entered allmulticast mode [ 509.476804][T16293] bridge6: left allmulticast mode [ 509.562276][T16312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2444'. [ 509.715126][T16316] netlink: 'syz.0.2445': attribute type 13 has an invalid length. [ 510.371617][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.380441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.491246][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 510.892528][T16364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2456'. [ 511.003456][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2457'. [ 511.189732][T16378] netlink: 'syz.2.2458': attribute type 1 has an invalid length. [ 511.356274][T16380] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2459'. [ 511.499974][T16372] syzkaller0: entered promiscuous mode [ 511.523389][T16372] syzkaller0: entered allmulticast mode [ 511.535588][T16380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 511.543110][T16380] IPv6: NLM_F_CREATE should be set when creating new route [ 511.551050][T16380] IPv6: NLM_F_CREATE should be set when creating new route [ 511.619984][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2460'. [ 511.678362][T16401] tipc: Enabled bearer , priority 0 [ 511.847520][T16388] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 511.868657][T16388] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 511.922589][T16409] syzkaller0: mtu less than device minimum [ 512.307120][T16421] syzkaller0: entered promiscuous mode [ 512.322483][T16421] syzkaller0: entered allmulticast mode [ 512.762847][T16437] netlink: 'syz.0.2471': attribute type 10 has an invalid length. [ 512.822044][T16437] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2471'. [ 512.865297][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 512.902887][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2474'. [ 513.693921][T16481] tipc: Enabled bearer , priority 27 [ 513.716584][T16481] tunl0: Caught tx_queue_len zero misconfig [ 513.779788][T16481] sctp: [Deprecated]: syz.0.2482 (pid 16481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.779788][T16481] Use struct sctp_sack_info instead [ 514.239062][T16499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.317430][T16499] 8021q: adding VLAN 0 to HW filter on device ` [ 514.407618][T16499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.503491][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.514840][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.523164][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.531391][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.543982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.622666][T16499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.661482][T16499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.697738][T16499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.709692][T16499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.733194][T16499] veth1_macvtap: left promiscuous mode [ 514.744273][T16499] veth0_macvtap: left promiscuous mode [ 514.756002][T16499] veth0_macvtap: entered promiscuous mode [ 514.771346][T16499] veth1_macvtap: entered promiscuous mode [ 514.793576][T16499] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 514.826816][T16499] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 514.882046][T16499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.915251][T16499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.949793][T16499] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 514.986200][T16499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.014364][T16499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.086868][T16499] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.102834][T16499] 8021q: adding VLAN 0 to HW filter on device bond6 [ 515.124954][T16499] 8021q: adding VLAN 0 to HW filter on device eth0 [ 515.138370][T16499] 8021q: adding VLAN 0 to HW filter on device eth1 [ 515.152505][T16499] 8021q: adding VLAN 0 to HW filter on device eth2 [ 515.164550][T16499] 8021q: adding VLAN 0 to HW filter on device eth3 [ 515.191520][T16499] 8021q: adding VLAN 0 to HW filter on device bond7 [ 515.204582][T16499] 8021q: adding VLAN 0 to HW filter on device bond8 [ 515.218754][T16499] 8021q: adding VLAN 0 to HW filter on device bond9 [ 515.232734][T16499] 8021q: adding VLAN 0 to HW filter on device bond10 [ 515.263383][T16499] ip6gre1: left promiscuous mode [ 515.273750][T16499] 8021q: adding VLAN 0 to HW filter on device bond11 [ 515.311627][ T202] bond7: (slave bridge4): link status up again after 0 ms [ 515.334635][T16501] bridge6: entered promiscuous mode [ 515.348707][ T202] bond7: (slave bridge4): link status up again after 0 ms [ 515.349460][T16501] bridge6: entered allmulticast mode [ 515.393959][ T202] bond7: (slave bridge4): link status up again after 0 ms [ 515.461364][ T6369] bond7: (slave bridge4): link status up again after 0 ms [ 515.488953][ T202] bond7: (slave bridge4): link status up again after 0 ms [ 515.511351][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.519534][ T6371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.539309][ T6364] bond7: (slave bridge4): link status up again after 0 ms [ 515.568734][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.571674][ T12] bond7: (slave bridge4): link status up again after 0 ms [ 515.576501][ T6371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.618648][ T12] bond7: (slave bridge4): link status up again after 0 ms [ 515.632891][ T6371] bridge5: port 2(veth0_to_bond) entered blocking state [ 515.641395][ T6371] bridge5: port 2(veth0_to_bond) entered forwarding state [ 515.651360][ T12] bond7: (slave bridge4): link status up again after 0 ms [ 515.689634][ T6364] bond7: (slave bridge4): link status up again after 0 ms [ 515.709310][ T12] bond7: (slave bridge4): link status up again after 0 ms [ 515.739582][ T6364] bond7: (slave bridge4): link status up again after 0 ms [ 515.750302][T16552] FAULT_INJECTION: forcing a failure. [ 515.750302][T16552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.768973][T16552] CPU: 1 UID: 0 PID: 16552 Comm: syz.3.2491 Not tainted syzkaller #0 PREEMPT(full) [ 515.769004][T16552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.769017][T16552] Call Trace: [ 515.769026][T16552] [ 515.769034][T16552] dump_stack_lvl+0xe8/0x150 [ 515.769065][T16552] should_fail_ex+0x412/0x560 [ 515.769098][T16552] _copy_from_user+0x2d/0xb0 [ 515.769129][T16552] __sys_bpf+0x229/0x950 [ 515.769163][T16552] ? __pfx___sys_bpf+0x10/0x10 [ 515.769210][T16552] ? ksys_write+0x242/0x270 [ 515.769250][T16552] ? __pfx_ksys_write+0x10/0x10 [ 515.769284][T16552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.769305][T16552] __x64_sys_bpf+0x7c/0x90 [ 515.769334][T16552] do_syscall_64+0x15f/0xf80 [ 515.769366][T16552] ? trace_irq_disable+0x3b/0x140 [ 515.769397][T16552] ? clear_bhb_loop+0x40/0x90 [ 515.769421][T16552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.769442][T16552] RIP: 0033:0x7f127719ce59 [ 515.769461][T16552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.769479][T16552] RSP: 002b:00007f12753f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.769499][T16552] RAX: ffffffffffffffda RBX: 00007f1277415fa0 RCX: 00007f127719ce59 [ 515.769513][T16552] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 515.769525][T16552] RBP: 00007f12753f6090 R08: 0000000000000000 R09: 0000000000000000 [ 515.769537][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.769548][T16552] R13: 00007f1277416038 R14: 00007f1277415fa0 R15: 00007ffe00d31cc8 [ 515.769581][T16552] [ 515.770795][ T6371] bridge5: port 1(veth5) entered blocking state [ 515.972323][ T6371] bridge5: port 1(veth5) entered forwarding state [ 516.001756][ T6371] bridge5: port 3(veth7) entered blocking state [ 516.008917][ T6371] bridge5: port 3(veth7) entered forwarding state [ 516.033701][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 516.043603][ T36] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 516.054132][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.065749][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 516.077416][ T36] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 516.086864][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.121411][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 516.133996][ T36] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 516.162998][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.180794][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 516.202289][ T36] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 516.213731][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.267204][T16557] __nla_validate_parse: 3 callbacks suppressed [ 516.267226][T16557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2493'. [ 516.303023][ T1173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 516.575988][T16571] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2498'. [ 516.661174][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2500'. [ 516.904145][T16575] syzkaller0: entered promiscuous mode [ 516.911134][T16575] syzkaller0: entered allmulticast mode [ 516.934862][T16588] netlink: 'syz.1.2502': attribute type 1 has an invalid length. [ 516.991780][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'. [ 517.080450][T16594] FAULT_INJECTION: forcing a failure. [ 517.080450][T16594] name failslab, interval 1, probability 0, space 0, times 0 [ 517.103015][T16594] CPU: 1 UID: 0 PID: 16594 Comm: syz.2.2503 Not tainted syzkaller #0 PREEMPT(full) [ 517.103045][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.103057][T16594] Call Trace: [ 517.103066][T16594] [ 517.103075][T16594] dump_stack_lvl+0xe8/0x150 [ 517.103106][T16594] should_fail_ex+0x412/0x560 [ 517.103144][T16594] should_failslab+0xa8/0x100 [ 517.103178][T16594] __kmalloc_noprof+0xe8/0x760 [ 517.103207][T16594] ? bpf_test_init+0x9f/0x150 [ 517.103233][T16594] bpf_test_init+0x9f/0x150 [ 517.103258][T16594] bpf_prog_test_run_xdp+0x529/0x1160 [ 517.103297][T16594] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 517.103325][T16594] ? __fget_files+0x2a/0x420 [ 517.103355][T16594] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 517.103378][T16594] bpf_prog_test_run+0x2c7/0x340 [ 517.103405][T16594] __sys_bpf+0x643/0x950 [ 517.103439][T16594] ? __pfx___sys_bpf+0x10/0x10 [ 517.103488][T16594] ? ksys_write+0x242/0x270 [ 517.103519][T16594] ? __pfx_ksys_write+0x10/0x10 [ 517.103553][T16594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.103576][T16594] __x64_sys_bpf+0x7c/0x90 [ 517.103605][T16594] do_syscall_64+0x15f/0xf80 [ 517.103634][T16594] ? trace_irq_disable+0x3b/0x140 [ 517.103662][T16594] ? clear_bhb_loop+0x40/0x90 [ 517.103687][T16594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.103724][T16594] RIP: 0033:0x7f58b599ce59 [ 517.103743][T16594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.103761][T16594] RSP: 002b:00007f58b68ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.103787][T16594] RAX: ffffffffffffffda RBX: 00007f58b5c15fa0 RCX: 00007f58b599ce59 [ 517.103810][T16594] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 517.103823][T16594] RBP: 00007f58b68ad090 R08: 0000000000000000 R09: 0000000000000000 [ 517.103836][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.103847][T16594] R13: 00007f58b5c16038 R14: 00007f58b5c15fa0 R15: 00007ffd166f7798 [ 517.103882][T16594] [ 517.603962][T16612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2508'. [ 520.138741][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 521.358977][ T202] net_ratelimit: 34 callbacks suppressed [ 521.359003][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 521.542447][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 521.620229][T16633] netlink: 'syz.5.2515': attribute type 1 has an invalid length. [ 521.720415][ T5631] block nbd3: Receive control failed (result -32) [ 521.788908][T16633] bond9: entered promiscuous mode [ 521.814503][T16633] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.862455][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 521.890296][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.901990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.958021][T16643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2517'. [ 522.258238][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2518'. [ 522.307401][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2518'. [ 522.312769][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 522.413432][T16671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2524'. [ 522.498556][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 522.658641][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 522.726039][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2528'. [ 522.778762][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 522.873449][T16684] vlan3: entered promiscuous mode [ 522.975851][T16692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2533'. [ 523.042743][T16696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2533'. [ 523.072630][T16692] ip6gre1: entered promiscuous mode [ 523.088291][T16692] ip6gre1: entered allmulticast mode [ 523.096767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.437121][T16702] bond16: Removing last ns target with arp_interval on [ 524.688104][T16749] netlink: 55623 bytes leftover after parsing attributes in process `syz.3.2547'. [ 524.925447][T16754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 525.342567][T16768] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 525.725456][T16768] bond17: (slave geneve5): making interface the new active one [ 525.750513][T16768] bond17: (slave geneve5): Enslaving as an active interface with an up link [ 525.827998][ T1173] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.864923][T11133] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.983146][ T1173] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 526.010501][ T1173] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 526.035624][T16800] netlink: 'syz.2.2562': attribute type 8 has an invalid length. [ 526.046748][T16800] netlink: 'syz.2.2562': attribute type 9 has an invalid length. [ 526.078557][T16800] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 526.087186][T16800] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2562'. [ 526.259847][T16809] netlink: 'syz.2.2565': attribute type 9 has an invalid length. [ 526.429462][ T12] net_ratelimit: 30 callbacks suppressed [ 526.429480][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 526.548606][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 526.659245][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 526.769505][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 526.878674][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 526.989380][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 527.013986][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.098843][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 527.208705][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 527.319329][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 528.289754][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.508983][T11133] net_ratelimit: 49 callbacks suppressed [ 531.509008][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 531.629053][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 531.739216][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 531.848846][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 531.959420][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 532.068758][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 532.178828][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 532.299353][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 532.409008][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 532.528719][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 536.610587][ T36] net_ratelimit: 49 callbacks suppressed [ 536.610616][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 536.728954][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 536.839320][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 536.949171][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 537.058831][ T6369] bond7: (slave bridge4): failed to get link speed/duplex [ 537.169507][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 537.288872][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 537.398730][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 537.508791][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 537.618859][ T6369] bond7: (slave bridge4): failed to get link speed/duplex [ 541.698857][ T12] net_ratelimit: 49 callbacks suppressed [ 541.698886][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 541.818754][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 541.929175][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 542.038838][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 542.149330][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 542.258817][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 542.369786][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 542.478826][ T6369] bond7: (slave bridge4): failed to get link speed/duplex [ 542.588742][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 542.698756][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 544.298791][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 546.769443][ T6371] net_ratelimit: 44 callbacks suppressed [ 546.769467][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 546.849622][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.860136][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.870352][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.879625][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.890211][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 546.891633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.999127][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 547.108721][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 547.218743][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 548.842511][T16849] IPVS: Unknown mcast interface: vcan0 [ 548.924543][T16853] __nla_validate_parse: 5 callbacks suppressed [ 548.924566][T16853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2581'. [ 549.244362][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 549.277302][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 549.466751][T16874] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2591'. [ 549.596991][T16877] team0: Port device dummy0 removed [ 549.609650][T16877] batman_adv: batadv0: Adding interface: dummy0 [ 549.616133][T16877] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.652187][T16877] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 549.853490][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 549.887143][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 549.922502][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 549.934684][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 549.962702][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 549.982523][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 549.996275][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 550.007980][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 550.019623][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 550.030781][T16891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 550.468227][T16910] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2605'. [ 551.808814][ C1] net_ratelimit: 174 callbacks suppressed [ 551.808836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.831826][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 551.977445][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 552.099573][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 552.228498][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 552.360817][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 552.412672][T16999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.450250][T16999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.485829][T16999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.496211][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 552.529674][ T5631] Bluetooth: hci5: command 0x0405 tx timeout [ 552.829018][T17019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2638'. [ 552.843236][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2636'. [ 553.090524][T17033] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2642'. [ 553.287857][T17040] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2644'. [ 553.686424][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 553.975642][T17059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2650'. [ 553.986673][T17061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2649'. [ 554.033888][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 554.110095][T17063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'. [ 554.134566][T17063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2651'. [ 554.641296][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2655'. [ 554.665484][ T5631] block nbd4: Receive control failed (result -32) [ 555.095719][T17102] bond18: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 555.142507][T17102] bond18 (unregistering): Released all slaves [ 555.222178][T17120] netlink: 'syz.0.2662': attribute type 1 has an invalid length. [ 555.420155][T17108] bond18: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 555.450365][T17108] bond18 (unregistering): Released all slaves [ 555.575465][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 555.596545][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 556.034465][T17148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'. [ 556.121938][T17151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2670'. [ 556.190087][T17148] vlan5: entered promiscuous mode [ 557.068921][T11133] net_ratelimit: 42 callbacks suppressed [ 557.068946][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 557.218728][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 557.339687][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 557.494960][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 557.629051][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 557.732525][ T6369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.740947][ T6369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.751146][ T6369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.760779][ T6369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.771746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.221266][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 558.897512][T17247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.116703][T17266] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.214553][T17276] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 559.292959][T17279] --map-set only usable from mangle table [ 559.495914][T17276] 8021q: adding VLAN 0 to HW filter on device bond18 [ 559.662812][T17300] __nla_validate_parse: 13 callbacks suppressed [ 559.662835][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'. [ 559.963028][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 560.097323][T17308] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2701'. [ 560.372774][T17316] x_tables: duplicate underflow at hook 3 [ 560.617727][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2707'. [ 560.678267][T17328] netlink: 'syz.5.2707': attribute type 58 has an invalid length. [ 560.702411][T17328] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2707'. [ 561.106116][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'. [ 561.284692][T17355] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2714'. [ 561.682795][T17369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2718'. [ 561.772521][T17375] veth0_macvtap: Caught tx_queue_len zero misconfig [ 561.871005][T17379] ªªªªªª: renamed from wg2 [ 562.079608][ T202] net_ratelimit: 43 callbacks suppressed [ 562.079629][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 562.100391][T17399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2724'. [ 562.193395][T17396] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.230314][T17396] bridge_slave_0 (unregistering): left allmulticast mode [ 562.242463][T17396] bridge_slave_0 (unregistering): left promiscuous mode [ 562.251724][T17396] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.374771][T17403] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 562.376408][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 562.388201][T17403] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 562.534709][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 562.586002][T17414] openvswitch: netlink: Duplicate or invalid key (type 0). [ 562.608909][T17414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.672088][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 562.829123][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 562.950614][ T1108] bond7: (slave bridge4): failed to get link speed/duplex [ 563.092268][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 563.238965][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 563.936468][T17473] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 563.953026][T17473] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2741'. [ 563.970361][T17474] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 564.045653][T17480] netlink: 'syz.0.2743': attribute type 13 has an invalid length. [ 564.714269][T17490] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 564.775563][T17490] bond12: (slave lo): Enslaving as an active interface with an up link [ 564.926469][T17508] __nla_validate_parse: 1 callbacks suppressed [ 564.926509][T17508] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2752'. [ 564.961068][T17508] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2752'. [ 565.056995][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.091307][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2752'. [ 565.110058][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.432745][T17519] bond13: Removing last ns target with arp_interval on [ 565.866944][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2759'. [ 565.965013][T17546] tipc: Enabling of bearer rejected, failed to enable media [ 565.976123][T17545] netlink: 'syz.0.2760': attribute type 4 has an invalid length. [ 566.013520][T17545] netlink: 'syz.0.2760': attribute type 4 has an invalid length. [ 566.158006][T17550] tipc: Enabling of bearer rejected, failed to enable media [ 566.620873][T17576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2766'. [ 566.762513][T17579] bond17: Removing last ns target with arp_interval on [ 566.903750][T17586] netlink: 'syz.2.2769': attribute type 1 has an invalid length. [ 566.920324][T17586] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2769'. [ 566.982597][T17581] tipc: Enabling of bearer rejected, already enabled [ 567.004595][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2770'. [ 567.170707][ T6369] net_ratelimit: 46 callbacks suppressed [ 567.170732][ T6369] bond7: (slave bridge4): failed to get link speed/duplex [ 567.308703][ T6369] bond7: (slave bridge4): failed to get link speed/duplex [ 567.438644][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 567.579659][ T6371] bond7: (slave bridge4): failed to get link speed/duplex [ 567.698587][ T1108] bond7: (slave bridge4): failed to get link speed/duplex [ 567.716516][T17622] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2779'. [ 567.756621][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'. [ 567.809737][T17622] tipc: Resetting bearer [ 567.828078][T17622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.986765][T17622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.012714][T17622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.051341][T17622] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 568.095405][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.102913][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.134742][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.142200][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.218345][T17632] bond10: Removing last ns target with arp_interval on [ 568.249097][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 568.610289][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.618956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.795226][T17683] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2791'. [ 568.953656][T17665] syzkaller1: entered promiscuous mode [ 568.970679][T17665] syzkaller1: entered allmulticast mode [ 569.098132][T17687] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.105835][T17687] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.107386][T17694] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 569.152191][T17687] tipc: Resetting bearer [ 569.196671][T17687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.212241][T17687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.355901][T17700] bond14: entered promiscuous mode [ 569.381265][T17693] bond14: left promiscuous mode [ 569.398815][ T6369] bond7: (slave bridge4): failed to get link speed/duplex [ 569.559694][ T6369] bond7: (slave bridge4): failed to get link speed/duplex [ 569.726761][T17723] netlink: 'syz.0.2800': attribute type 1 has an invalid length. [ 569.763772][T17723] netlink: 'syz.0.2800': attribute type 1 has an invalid length. [ 569.874496][T17733] ip6gre2: entered promiscuous mode [ 569.901810][T17733] ip6gre2: entered allmulticast mode [ 569.931916][ T1108] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.967586][T17733] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.969725][ T9399] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.987366][ T1108] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.024298][T17739] __nla_validate_parse: 8 callbacks suppressed [ 570.024321][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 570.167195][T17739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2806'. [ 570.329236][ T9399] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.381221][ T9399] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.541035][T17753] bond12: Removing last ns target with arp_interval on [ 571.444408][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2820'. [ 571.548884][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'. [ 571.575222][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'. [ 571.600321][T17788] netlink: 58 bytes leftover after parsing attributes in process `syz.0.2821'. [ 571.665351][T17789] team_slave_1: left promiscuous mode [ 571.697813][T17789] team0 (unregistering): Port device team_slave_1 removed [ 571.724777][T17789] bridge8: left promiscuous mode [ 571.744645][T17789] team0 (unregistering): Port device bridge8 removed [ 571.873511][T17791] bond11: Removing last ns target with arp_interval on [ 571.997319][T17795] x_tables: duplicate underflow at hook 1 [ 572.209190][ T36] net_ratelimit: 25 callbacks suppressed [ 572.209216][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 572.371403][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 572.397473][T17810] netlink: 'syz.0.2828': attribute type 1 has an invalid length. [ 572.419838][T17810] netlink: 'syz.0.2828': attribute type 4 has an invalid length. [ 572.453918][T17810] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2828'. [ 572.499783][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 572.510368][T17811] netlink: 'syz.0.2828': attribute type 1 has an invalid length. [ 572.549591][T17811] netlink: 'syz.0.2828': attribute type 4 has an invalid length. [ 572.569631][T17811] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2828'. [ 572.619030][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 572.749646][ T1108] bond7: (slave bridge4): failed to get link speed/duplex [ 572.879454][ T1108] bond7: (slave bridge4): failed to get link speed/duplex [ 573.090804][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 573.112209][T17841] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2835'. [ 573.208859][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 573.429201][T17848] netlink: 'syz.1.2837': attribute type 49 has an invalid length. [ 573.540828][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'. [ 573.587646][T17820] netlink: 'syz.5.2831': attribute type 1 has an invalid length. [ 573.731950][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.741550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.828301][T17848] ip6gretap0: entered promiscuous mode [ 573.841265][T17848] ip6gretap0: entered allmulticast mode [ 574.048720][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 574.114414][T17861] netlink: 'syz.0.2840': attribute type 11 has an invalid length. [ 574.160817][T17860] bridge0: port 4(erspan0) entered blocking state [ 574.191258][T17860] bridge0: port 4(erspan0) entered disabled state [ 574.209060][T17860] erspan0: entered allmulticast mode [ 574.262283][T17860] erspan0: entered promiscuous mode [ 574.314778][T17860] erspan0: left allmulticast mode [ 574.344333][T17860] erspan0: left promiscuous mode [ 574.366842][T17860] bridge0: port 4(erspan0) entered disabled state [ 575.009024][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 575.380870][T17911] xt_hashlimit: size too large, truncated to 1048576 [ 575.493113][T17915] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 575.893129][T17931] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 575.934488][T17931] syzkaller1: linktype set to 805 [ 576.031562][T17935] __nla_validate_parse: 3 callbacks suppressed [ 576.031582][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2855'. [ 576.175711][T17943] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 576.860862][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2863'. [ 577.066528][T17988] netlink: 'syz.0.2867': attribute type 21 has an invalid length. [ 577.090342][T17988] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2867'. [ 577.133943][T17988] netlink: 'syz.0.2867': attribute type 5 has an invalid length. [ 577.174241][T17988] netlink: 'syz.0.2867': attribute type 6 has an invalid length. [ 577.191344][T17988] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2867'. [ 577.399953][T18006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2870'. [ 577.415162][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 577.428579][ T1173] net_ratelimit: 31 callbacks suppressed [ 577.428599][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 577.468721][T18011] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2871'. [ 577.527140][T18024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2870'. [ 577.599399][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 577.722927][T18026] netlink: 'syz.0.2871': attribute type 30 has an invalid length. [ 577.742101][ T48] bond7: (slave bridge4): failed to get link speed/duplex [ 577.815531][T18004] syzkaller1: entered promiscuous mode [ 577.859065][T18004] syzkaller1: entered allmulticast mode [ 578.049189][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 578.209787][ T1122] bond7: (slave bridge4): failed to get link speed/duplex [ 578.240533][T18046] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 578.273837][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.284601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.346505][T18046] netlink: 'syz.1.2877': attribute type 1 has an invalid length. [ 578.355475][ T6364] bond7: (slave bridge4): failed to get link speed/duplex [ 578.462058][T18046] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2877'. [ 578.608925][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 578.738680][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 578.858678][ T6364] bond7: (slave bridge4): failed to get link speed/duplex [ 579.139170][T18103] tap0: tun_chr_ioctl cmd 2147767521 [ 580.471148][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 580.491609][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 580.510540][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 580.521491][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.533371][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 581.497983][T18186] netlink: 'syz.3.2905': attribute type 16 has an invalid length. [ 581.532972][T18186] netlink: 'syz.3.2905': attribute type 3 has an invalid length. [ 581.542718][T18187] __nla_validate_parse: 1 callbacks suppressed [ 581.542737][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2906'. [ 581.558143][T18186] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2905'. [ 581.582044][T18193] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 581.591401][T18186] netlink: 'syz.3.2905': attribute type 4 has an invalid length. [ 581.605783][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2906'. [ 581.642611][T18198] netlink: 'syz.3.2905': attribute type 4 has an invalid length. [ 581.695128][T18200] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2906'. [ 581.782322][T18193] 8021q: adding VLAN 0 to HW filter on device bond14 [ 581.793091][T18193] bond13: (slave bond14): making interface the new active one [ 581.805491][T18193] bond13: (slave bond14): Enslaving as an active interface with an up link [ 581.835890][T18193] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2907'. [ 582.048776][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 582.205532][T18218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2912'. [ 582.218701][T18220] xt_hashlimit: size too large, truncated to 1048576 [ 582.251709][T18217] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 582.281669][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 582.377197][T18228] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2913'. [ 582.387764][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 582.556872][T18228] netlink: 'syz.3.2913': attribute type 1 has an invalid length. [ 582.576007][T18228] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2913'. [ 582.609445][ T5634] Bluetooth: hci4: command tx timeout [ 582.949586][ T6364] net_ratelimit: 25 callbacks suppressed [ 582.949607][ T6364] bond7: (slave bridge4): failed to get link speed/duplex [ 583.178671][ T6363] bond7: (slave bridge4): failed to get link speed/duplex [ 583.553793][T18268] netlink: 'syz.3.2916': attribute type 1 has an invalid length. [ 583.806718][T18279] veth5: entered promiscuous mode [ 583.894349][T18135] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.911824][T18135] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.932714][T18135] bridge_slave_0: entered allmulticast mode [ 583.961651][T18135] bridge_slave_0: entered promiscuous mode [ 584.009057][ T6366] bond7: (slave bridge4): failed to get link speed/duplex [ 584.098234][T18135] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.131083][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.159219][T18135] bridge_slave_1: entered allmulticast mode [ 584.177173][T18135] bridge_slave_1: entered promiscuous mode [ 584.357271][T18300] macvtap0: entered promiscuous mode [ 584.376863][T18135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.403489][T18135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.509136][T18135] team0: Port device team_slave_0 added [ 584.519556][T18135] team0: Port device team_slave_1 added [ 584.607493][T18135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.621168][ T6366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.630460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.647759][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.676419][T18135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.688721][ T5634] Bluetooth: hci4: command tx timeout [ 584.693246][T18135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.701639][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.779835][T18135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.076538][T18324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.130096][T18325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.395138][T18135] hsr_slave_0: entered promiscuous mode [ 585.402560][T18135] hsr_slave_1: entered promiscuous mode [ 585.409928][T18135] debugfs: 'hsr0' already exists in 'hsr' [ 585.415854][T18135] Cannot create hsr debugfs directory [ 585.422388][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 585.709194][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 585.958662][T18355] bond20: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 585.975182][T18355] bond20 (unregistering): Released all slaves [ 586.089845][ T6366] bond7: (slave bridge4): failed to get link speed/duplex [ 586.769311][ T5634] Bluetooth: hci4: command tx timeout [ 586.951239][T18397] __nla_validate_parse: 4 callbacks suppressed [ 586.951258][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 586.980202][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'. [ 587.140307][T18399] syzkaller0: entered promiscuous mode [ 587.171603][T18399] syzkaller0: entered allmulticast mode [ 587.283823][T18406] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2945'. [ 587.304556][T18406] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2945'. [ 587.318046][T18406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2945'. [ 588.853174][ T5634] Bluetooth: hci4: command tx timeout [ 591.593619][T18406] macsec1: entered promiscuous mode [ 591.599242][T18406] macsec1: entered allmulticast mode [ 591.609499][ T6364] net_ratelimit: 4 callbacks suppressed [ 591.609528][ T6364] bond7: (slave bridge4): failed to get link speed/duplex [ 591.862312][T18419] bond20 (unregistering): Released all slaves [ 591.946087][T18436] netlink: 'syz.5.2952': attribute type 11 has an invalid length. [ 592.020453][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2953'. [ 592.039553][ T6366] bond7: (slave bridge4): failed to get link speed/duplex [ 592.152200][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 592.271036][T18449] netlink: 'syz.2.2955': attribute type 1 has an invalid length. [ 592.279335][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 592.289770][T18449] netlink: 'syz.2.2955': attribute type 3 has an invalid length. [ 592.508674][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 592.799208][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 592.902611][T18135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 592.923598][T18135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.935404][T18135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 592.950426][T18135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.967731][T18135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 592.993152][T18135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.007929][T18135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 593.057044][T18135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.158276][T18484] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.2960'. [ 593.188683][ T6364] bond7: (slave bridge4): failed to get link speed/duplex [ 593.333453][ T6366] bond7: (slave bridge4): failed to get link speed/duplex [ 593.486239][T18135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.520274][ T6366] bond7: (slave bridge4): failed to get link speed/duplex [ 593.562357][T18135] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.619256][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.626619][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.721253][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 593.785665][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.792928][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.116030][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 594.916043][T18135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.098067][T18135] veth0_vlan: entered promiscuous mode [ 595.141214][T18135] veth1_vlan: entered promiscuous mode [ 595.261414][T18135] veth0_macvtap: entered promiscuous mode [ 595.294523][T18135] veth1_macvtap: entered promiscuous mode [ 595.386042][T18135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.428268][T18135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.463759][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.503996][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.524950][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.572246][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.442656][T18575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.471328][T18601] netlink: 'syz.5.2986': attribute type 1 has an invalid length. [ 596.488800][T18601] NCSI netlink: No device for ifindex 0 [ 596.716540][ T36] net_ratelimit: 18 callbacks suppressed [ 596.716562][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 596.896996][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.924997][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.980204][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 597.053926][T18633] bridge0: port 1(erspan0) entered blocking state [ 597.100099][T18633] bridge0: port 1(erspan0) entered disabled state [ 597.128696][T18633] erspan0: entered allmulticast mode [ 597.162207][T18633] erspan0: entered promiscuous mode [ 597.199363][T18633] bridge0: port 1(erspan0) entered blocking state [ 597.206674][T18633] bridge0: port 1(erspan0) entered forwarding state [ 597.293665][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.321253][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.339892][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 597.439127][T18650] netlink: 'syz.1.2995': attribute type 1 has an invalid length. [ 597.544616][T18650] 8021q: adding VLAN 0 to HW filter on device bond15 [ 597.569681][T18654] bond15: (slave geneve0): making interface the new active one [ 597.592006][T18654] bond15: (slave geneve0): Enslaving as an active interface with an up link [ 597.747070][T18655] bond15: Removing last ns target with arp_interval on [ 597.899473][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 598.040553][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 598.101693][T18677] netlink: 'syz.2.3001': attribute type 1 has an invalid length. [ 598.221047][T18681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3001'. [ 598.364651][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 598.382476][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 598.393976][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 598.408263][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 598.417572][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.534929][T18677] bond16: entered promiscuous mode [ 598.551069][T18677] 8021q: adding VLAN 0 to HW filter on device bond16 [ 598.688631][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 598.756666][T18695] bond16: (slave bridge5): making interface the new active one [ 598.780141][T18695] bridge5: entered promiscuous mode [ 598.822612][T18695] bond16: (slave bridge5): Enslaving as an active interface with an up link [ 598.853544][T18681] bond16: entered allmulticast mode [ 598.865181][T18681] bridge5: entered allmulticast mode [ 598.910235][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 599.145711][ T1122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.163135][ T1122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 599.228999][ T48] bond7: (slave bridge4): failed to get link speed/duplex [ 599.265997][T18704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3007'. [ 599.352762][T18709] netlink: 'syz.5.3008': attribute type 1 has an invalid length. [ 599.395976][ T1122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.438309][ T1122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 599.615990][T18709] 8021q: adding VLAN 0 to HW filter on device bond12 [ 599.642165][T18712] veth7: entered allmulticast mode [ 599.657229][T18712] bond12: (slave veth7): Enslaving as an active interface with an up link [ 599.668936][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 599.699298][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3008'. [ 599.712341][T18713] bond12 (unregistering): (slave veth7): Releasing backup interface [ 599.748037][T18713] bond12 (unregistering): Released all slaves [ 599.856478][T18726] IPv6: NLM_F_CREATE should be specified when creating new route [ 599.864628][T18726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 599.872408][T18726] IPv6: NLM_F_CREATE should be set when creating new route [ 599.879970][T18726] IPv6: NLM_F_CREATE should be set when creating new route [ 599.887278][T18726] IPv6: NLM_F_CREATE should be set when creating new route [ 599.946591][ T1122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.958701][ T1122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 600.153937][ T1122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.164841][ T1122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 600.529647][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 600.531189][ T5634] Bluetooth: hci0: command tx timeout [ 600.814154][T18761] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3020'. [ 601.094783][T18770] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 601.375017][T18786] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3025'. [ 601.581155][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3026'. [ 601.615749][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3026'. [ 601.827378][T18811] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3027'. [ 602.096535][ T1122] bond17 (unregistering): (slave geneve5): Releasing active interface [ 602.111993][ T1122] bond10 (unregistering): (slave geneve4): Releasing active interface [ 602.245338][ T1122] team0: Port device bridge2 removed [ 602.543967][ T1122] bond0 (unregistering): Released all slaves [ 602.555985][ T1122] bond1 (unregistering): Released all slaves [ 602.577410][ T1122] bond2 (unregistering): Released all slaves [ 602.597375][ T1122] bond3 (unregistering): Released all slaves [ 602.608890][ T5634] Bluetooth: hci0: command tx timeout [ 602.624129][ T1122] bond4 (unregistering): Released all slaves [ 602.651622][ T1122] bond5 (unregistering): Released all slaves [ 602.670571][ T1122] bond6 (unregistering): Released all slaves [ 602.697364][ T1122] bond7 (unregistering): Released all slaves [ 602.716957][ T1122] bond8 (unregistering): Released all slaves [ 602.742457][ T1122] bond9 (unregistering): Released all slaves [ 602.760936][ T1122] bond10 (unregistering): Released all slaves [ 602.788960][ T1122] bond11 (unregistering): Released all slaves [ 602.809134][ T1122] bond12 (unregistering): Released all slaves [ 602.831360][ T1122] bond13 (unregistering): Released all slaves [ 602.858230][ T1122] bond14 (unregistering): Released all slaves [ 602.879019][ T1122] bond15 (unregistering): Released all slaves [ 602.896474][ T1122] bond16 (unregistering): Released all slaves [ 602.924270][ T1122] bond17 (unregistering): Released all slaves [ 602.946105][ T1122] bond18 (unregistering): Released all slaves [ 602.963708][ T1122] bond19 (unregistering): Released all slaves [ 602.979951][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 603.034401][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 603.149432][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 603.316282][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 603.392687][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3030'. [ 603.765062][ T1122] hmac(sha224: left promiscuous mode [ 603.836210][T18844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.022627][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 604.155700][ T1122] : left promiscuous mode [ 604.342059][ T1122] tipc: Disabling bearer [ 604.359478][ T1122] tipc: Disabling bearer [ 604.377336][ T1122] tipc: Left network mode [ 604.420983][T18685] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.440242][T18685] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.461518][T18685] bridge_slave_0: entered allmulticast mode [ 604.490237][T18685] bridge_slave_0: entered promiscuous mode [ 604.513884][T18685] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.531159][T18685] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.553304][T18685] bridge_slave_1: entered allmulticast mode [ 604.586338][T18685] bridge_slave_1: entered promiscuous mode [ 604.694518][ T5634] Bluetooth: hci0: command tx timeout [ 605.015102][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3043'. [ 605.078773][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 605.303730][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 605.410748][T18685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.557587][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 605.585698][T18685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.770407][T18905] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 605.779544][T18905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.979186][T18913] netlink: 'syz.0.3050': attribute type 1 has an invalid length. [ 606.023195][T18685] team0: Port device team_slave_0 added [ 606.067670][T18685] team0: Port device team_slave_1 added [ 606.089009][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'. [ 606.117398][T18917] openvswitch: netlink: Unknown nsh attribute 0 [ 606.366407][T18685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.399237][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.466554][T18685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.500933][T18685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.508112][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.546494][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3054'. [ 606.572093][T18685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.770323][ T5631] Bluetooth: hci0: command tx timeout [ 607.087635][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 607.135109][T18685] hsr_slave_0: entered promiscuous mode [ 607.147671][T18685] hsr_slave_1: entered promiscuous mode [ 607.157411][T18685] debugfs: 'hsr0' already exists in 'hsr' [ 607.164386][T18685] Cannot create hsr debugfs directory [ 607.356397][T18968] netlink: 'syz.5.3061': attribute type 10 has an invalid length. [ 607.553450][T18970] syzkaller0: entered promiscuous mode [ 607.925534][ T1122] batman_adv: batadv0: Removing interface: macvtap1 [ 608.290771][T11133] net_ratelimit: 2 callbacks suppressed [ 608.290794][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 608.500778][ T6363] bond7: (slave bridge4): failed to get link speed/duplex [ 608.576707][T19006] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3066'. [ 608.703016][T19012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3067'. [ 608.849163][ T5631] Bluetooth: hci0: command tx timeout [ 609.060409][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 609.193609][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 609.220890][ T1122] veth1_to_team: left promiscuous mode [ 609.265372][ T1122] hsr_slave_0: left promiscuous mode [ 609.306968][ T1122] hsr_slave_1: left promiscuous mode [ 609.321469][ T1122] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 609.331770][ T1122] batman_adv: batadv0: Removing interface: ipvlan2 [ 609.341126][ T1122] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 609.342400][T19038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3068'. [ 609.347983][ T1122] batman_adv: batadv0: Removing interface: ipvlan3 [ 609.376760][ T1122] veth1_macvtap: left promiscuous mode [ 609.385277][ T1122] veth0_macvtap: left promiscuous mode [ 609.391337][ T1122] veth1_vlan: left promiscuous mode [ 609.396700][ T1122] veth0_vlan: left promiscuous mode [ 609.713457][ T1122] team0 (unregistering): Port device veth1_to_hsr removed [ 609.927936][T19019] syzkaller0: entered promiscuous mode [ 609.934267][T19019] syzkaller0: entered allmulticast mode [ 609.942606][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 609.972893][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 610.026821][T19038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3068'. [ 610.042328][T19038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.139989][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 610.395853][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 610.797822][ T48] bond7: (slave bridge4): failed to get link speed/duplex [ 610.948597][ T48] bond7: (slave bridge4): failed to get link speed/duplex [ 610.995048][T19067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3075'. [ 611.077936][T19067] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 611.492021][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 611.707427][ T1122] IPVS: stop unused estimator thread 0... [ 612.211786][T19096] syzkaller0: entered promiscuous mode [ 612.235763][T19096] syzkaller0: entered allmulticast mode [ 613.318526][ T6364] net_ratelimit: 2 callbacks suppressed [ 613.318549][ T6364] bond7: (slave bridge4): failed to get link speed/duplex [ 613.675442][T19145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.697062][T18685] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 613.729691][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.753239][T18685] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 613.795701][T19150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3089'. [ 613.839367][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.858670][ T6364] bond7: (slave bridge4): failed to get link speed/duplex [ 613.872860][T18685] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 613.937850][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 614.050643][T18685] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 614.136140][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 614.321716][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 614.470682][ T6363] bond7: (slave bridge4): failed to get link speed/duplex [ 614.600086][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3093'. [ 614.649268][T18685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.739553][ T1122] bond7: (slave bridge4): failed to get link speed/duplex [ 614.805373][T18685] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.858217][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.866211][ T6363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.954034][ T6363] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.962710][ T6363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.039004][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 615.101091][T19208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.179817][T19209] bridge6: entered promiscuous mode [ 615.191515][T19209] bridge6: entered allmulticast mode [ 615.204551][T19209] team0: Port device bridge6 added [ 615.227913][T19216] bridge0: port 4(team0) entered blocking state [ 615.236533][T19216] bridge0: port 4(team0) entered disabled state [ 615.245503][T19216] team0: entered allmulticast mode [ 615.253776][T19216] team_slave_0: entered allmulticast mode [ 615.264726][T19216] žÿ: entered allmulticast mode [ 615.278960][T19216] team0: entered promiscuous mode [ 615.288612][T19216] team_slave_0: entered promiscuous mode [ 615.301589][T19216] žÿ: entered promiscuous mode [ 615.347462][T19219] tipc: Enabled bearer , priority 0 [ 615.379524][T19219] tipc: Enabling of bearer rejected, already enabled [ 615.403945][T19220] syzkaller0: entered promiscuous mode [ 615.416394][T19220] syzkaller0: entered allmulticast mode [ 615.458833][ T1122] bond7: (slave bridge4): failed to get link speed/duplex [ 615.524098][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'. [ 615.597145][T19220] tipc: Resetting bearer [ 615.680066][T19220] tipc: Disabling bearer [ 615.728114][T19232] lo speed is unknown, defaulting to 1000 [ 615.737577][ T6363] bond7: (slave bridge4): failed to get link speed/duplex [ 615.822046][T19232] lo speed is unknown, defaulting to 1000 [ 615.854687][T19232] lo speed is unknown, defaulting to 1000 [ 616.144866][T19251] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3107'. [ 616.212423][T19251] IPVS: Unknown mcast interface: vcan0 [ 616.221650][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 616.914688][T19232] infiniband sqz0: set active [ 616.937960][ T9401] lo speed is unknown, defaulting to 1000 [ 616.946730][T19232] infiniband sqz0: added lo [ 617.018081][T19232] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 617.023321][T19232] infiniband sqz0: Couldn't open port 1 [ 617.039032][T19232] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 617.054698][T19232] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 617.073445][T19232] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 617.193252][T18685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.231449][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3114'. [ 617.245753][T19292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3115'. [ 617.375568][T19232] RDS/IB: sqz0: added [ 617.396947][T19232] smc: adding ib device sqz0 with port count 1 [ 617.422175][T19232] smc: ib device sqz0 port 1 has no pnetid [ 617.441030][T18685] veth0_vlan: entered promiscuous mode [ 617.470000][ T29] lo speed is unknown, defaulting to 1000 [ 617.505199][T18685] veth1_vlan: entered promiscuous mode [ 617.552556][T19232] lo speed is unknown, defaulting to 1000 [ 617.654160][T18685] veth0_macvtap: entered promiscuous mode [ 617.697783][T18685] veth1_macvtap: entered promiscuous mode [ 617.767177][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3119'. [ 617.962084][T18685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.012632][T18685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.106280][T11133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.158878][T11133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.225495][T11133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.269089][T11133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.338682][T11133] net_ratelimit: 13 callbacks suppressed [ 618.338704][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 618.511947][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 618.736900][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.751172][ T48] bond7: (slave bridge4): failed to get link speed/duplex [ 618.792841][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.912433][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 618.990492][T19232] lo speed is unknown, defaulting to 1000 [ 619.061196][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.073205][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 619.093200][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.220205][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 619.460310][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 619.581698][T19366] tipc: Started in network mode [ 619.610242][T19366] tipc: Node identity 9a3e589bf4e9, cluster identity 4711 [ 619.636539][T19366] tipc: Enabled bearer , priority 0 [ 620.244122][T19371] syzkaller0: entered promiscuous mode [ 620.251720][T19371] syzkaller0: entered allmulticast mode [ 620.259151][T19371] tipc: Resetting bearer [ 620.572353][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 620.593239][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 620.607211][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 620.623260][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 620.632927][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 620.651691][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3134'. [ 620.717469][T19393] netlink: 'syz.5.3134': attribute type 2 has an invalid length. [ 620.799138][T19393] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3134'. [ 621.052665][ T12] tipc: Resetting bearer [ 621.069934][T19232] lo speed is unknown, defaulting to 1000 [ 621.079842][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 621.291377][T19363] tipc: Resetting bearer [ 622.694576][ T5634] Bluetooth: hci3: command tx timeout [ 624.768653][ T5634] Bluetooth: hci3: command tx timeout [ 624.933230][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.802962][T19363] tipc: Disabling bearer [ 625.813592][ T9399] tipc: Node number set to 1859606683 [ 625.829444][T19232] lo speed is unknown, defaulting to 1000 [ 625.848240][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 626.038777][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 626.218963][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 626.358530][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 626.499519][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 626.638807][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 626.680617][T19232] lo speed is unknown, defaulting to 1000 [ 626.769142][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 626.814118][T19458] netlink: 'syz.5.3143': attribute type 10 has an invalid length. [ 626.850554][ T5634] Bluetooth: hci3: command tx timeout [ 626.866151][T19458] netlink: 'syz.5.3143': attribute type 10 has an invalid length. [ 626.899078][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 626.963272][T19458] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 627.017598][T19458] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3143'. [ 627.069247][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 627.133862][T19391] lo speed is unknown, defaulting to 1000 [ 627.559810][T19477] bond1: Removing last ns target with arp_interval on [ 627.642150][T19232] lo speed is unknown, defaulting to 1000 [ 628.155239][T19232] lo speed is unknown, defaulting to 1000 [ 628.705408][T19391] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.719962][T19391] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.734611][T19391] bridge_slave_0: entered allmulticast mode [ 628.752708][T19391] bridge_slave_0: entered promiscuous mode [ 628.777806][T19391] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.800852][T19391] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.821521][T19391] bridge_slave_1: entered allmulticast mode [ 628.842328][T19391] bridge_slave_1: entered promiscuous mode [ 628.925454][T19517] Unknown options in mask 6 [ 628.931985][ T5634] Bluetooth: hci3: command tx timeout [ 628.977398][T19391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.010475][T19391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.157390][T19391] team0: Port device team_slave_0 added [ 629.177581][T19391] team0: Port device team_slave_1 added [ 629.187044][T19493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.235272][T19522] netlink: 'syz.5.3155': attribute type 2 has an invalid length. [ 629.318016][T19391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.338562][T19391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.399972][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 629.421327][T19391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.457653][T19391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.475295][T19391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.532244][T19391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.651036][T19535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3160'. [ 629.654893][T19536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3160'. [ 629.750050][T19391] hsr_slave_0: entered promiscuous mode [ 629.759950][T19391] hsr_slave_1: entered promiscuous mode [ 629.776726][T19391] debugfs: 'hsr0' already exists in 'hsr' [ 629.792989][T19391] Cannot create hsr debugfs directory [ 629.858592][T19543] team0: entered promiscuous mode [ 629.863809][T19543] team_slave_0: entered promiscuous mode [ 629.870282][T19543] team_slave_1: entered promiscuous mode [ 629.938545][T11133] net_ratelimit: 14 callbacks suppressed [ 629.938568][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 630.115686][T19551] syzkaller0: entered promiscuous mode [ 630.123383][T19551] syzkaller0: entered allmulticast mode [ 630.300417][T19556] netlink: 'syz.1.3165': attribute type 4 has an invalid length. [ 630.309501][T19556] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3165'. [ 630.693746][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 634.096528][T19570] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.3168'. [ 634.109360][T19570] netlink: 'syz.5.3168': attribute type 1 has an invalid length. [ 634.141458][T19572] sctp: [Deprecated]: syz.5.3168 (pid 19572) Use of int in maxseg socket option. [ 634.141458][T19572] Use struct sctp_assoc_value instead [ 634.197015][T19575] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 634.363501][T19568] syzkaller0: entered promiscuous mode [ 634.370335][T19568] syzkaller0: entered allmulticast mode [ 634.420827][T19575] ip6tnl2: entered allmulticast mode [ 638.158594][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 638.213218][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3175'. [ 638.299260][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 638.417260][T19606] bond12: (slave lo): Releasing backup interface [ 638.465228][T19606] bond12: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 638.530204][T19606] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 638.624626][T19606] bond16: (slave lo): Enslaving as an active interface with an up link [ 638.652759][T19606] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 638.734917][T19616] ªªªªªª7ýd§ãî«2: renamed from lo (while UP) [ 638.770618][ T1122] bond7: (slave bridge4): failed to get link speed/duplex [ 638.848250][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3180'. [ 638.918610][ T6364] bond7: (slave bridge4): failed to get link speed/duplex [ 638.929030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.937626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.946416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.954976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.963595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.162348][T19606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3174'. [ 639.520859][T19640] 5nè‹Ò: entered promiscuous mode [ 639.527612][T19643] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 639.612787][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3185'. [ 639.770421][T19652] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3188'. [ 639.792203][T19391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 639.992098][T19663] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3188'. [ 640.186888][T19391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 640.196453][T19391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 640.235776][T19391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 640.254533][T19391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 640.272077][T19391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 640.293052][T19391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 640.302851][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 640.357233][T19391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 640.489003][T19677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3191'. [ 640.755670][T19391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.820828][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3193'. [ 640.857803][T19391] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.924611][T19689] netlink: 'syz.1.3197': attribute type 1 has an invalid length. [ 640.971447][T19688] bond1: Removing last ns target with arp_interval on [ 640.997302][T19693] bridge0: port 1(erspan0) entered disabled state [ 641.082289][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.089981][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.145921][T19702] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 641.166247][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.173586][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.247676][T19702] netlink: 'syz.3.3199': attribute type 2 has an invalid length. [ 641.438196][T19711] netlink: 'syz.5.3203': attribute type 13 has an invalid length. [ 641.554921][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3205'. [ 642.523730][T19756] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3211'. [ 642.597364][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3211'. [ 643.106820][T19391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.294145][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3215'. [ 643.366649][T19391] veth0_vlan: entered promiscuous mode [ 643.391212][ T202] net_ratelimit: 25 callbacks suppressed [ 643.391234][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 643.434526][T19391] veth1_vlan: entered promiscuous mode [ 643.523002][T19794] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 643.583962][T19391] veth0_macvtap: entered promiscuous mode [ 643.604666][T19391] veth1_macvtap: entered promiscuous mode [ 643.635619][T19391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.658954][T11133] bond7: (slave bridge4): failed to get link speed/duplex [ 643.673528][T19801] netlink: 'syz.3.3219': attribute type 13 has an invalid length. [ 643.684734][T19391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.710784][T19793] netlink: 'syz.0.3218': attribute type 49 has an invalid length. [ 643.719537][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.720591][T19801] netlink: 'syz.3.3219': attribute type 17 has an invalid length. [ 643.746001][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.763768][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.811429][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.909568][T19801] team0: left promiscuous mode [ 643.914550][T19801] team_slave_0: left promiscuous mode [ 643.920443][T19801] team_slave_1: left promiscuous mode [ 643.928017][T19801] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.167354][T19801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.219926][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 644.371430][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 644.529270][ T1173] bond7: (slave bridge4): failed to get link speed/duplex [ 644.555407][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.580145][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.614744][T19824] lo speed is unknown, defaulting to 1000 [ 644.658744][ T12] bond7: (slave bridge4): failed to get link speed/duplex [ 644.766408][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.790317][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 644.813253][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.821732][T19836] __nla_validate_parse: 3 callbacks suppressed [ 644.821752][T19836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'. [ 644.878238][T19834] macsec1: entered promiscuous mode [ 644.948611][ T1108] bond7: (slave bridge4): failed to get link speed/duplex [ 645.079298][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 645.218808][ T202] bond7: (slave bridge4): failed to get link speed/duplex [ 645.281606][T19846] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 645.322816][T19846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3231'. [ 645.368532][T19846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3231'. [ 645.665056][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 645.689503][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 645.705792][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 645.714234][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 645.723884][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 645.896516][T19860] syzkaller0: entered promiscuous mode [ 645.903304][T19860] syzkaller0: entered allmulticast mode [ 645.962982][T19854] bridge0: port 3(erspan0) entered blocking state [ 645.996212][T19854] bridge0: port 3(erspan0) entered disabled state [ 646.019672][T19854] erspan0: entered allmulticast mode [ 646.047604][T19854] erspan0: entered promiscuous mode [ 646.048204][T19867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3237'. [ 646.078043][T19854] bridge0: port 3(erspan0) entered blocking state [ 646.085925][T19854] bridge0: port 3(erspan0) entered forwarding state [ 646.109774][T19857] erspan0: left allmulticast mode [ 646.116915][T19857] erspan0: left promiscuous mode [ 646.123609][T19857] bridge0: port 3(erspan0) entered disabled state [ 646.243563][T19867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 646.574562][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 646.836199][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3241'. [ 646.953923][ T1108] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 646.982886][ T1108] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 646.993840][ T1108] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.085658][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805809ac00: rx timeout, send abort [ 647.369606][T19855] lo speed is unknown, defaulting to 1000 [ 647.471165][ T1108] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 647.510714][ T1108] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 647.547031][ T1108] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.584187][T19903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3243'. [ 647.779169][ T1108] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 647.798739][ T1108] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 647.809449][ T5631] Bluetooth: hci2: command tx timeout [ 647.822544][ T1108] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.941573][ T1108] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 647.951906][ T1108] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 647.963420][ T1108] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.998575][T19911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3247'. [ 648.319697][T19923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3250'. [ 648.441988][T19927] IPVS: set_ctl: invalid protocol: 22 10.1.1.0:20001 [ 648.621601][ T36] net_ratelimit: 14 callbacks suppressed [ 648.621623][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 648.782018][ T36] bond7: (slave bridge4): failed to get link speed/duplex [ 648.835981][T19939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 648.937519][ T1108] erspan0: left allmulticast mode [ 648.952123][ T1108] erspan0: left promiscuous mode [ 648.979065][ T1108] bridge0: port 1(erspan0) entered disabled state [ 649.071368][ T1108] bridge_slave_1: left promiscuous mode [ 649.111319][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.168778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.177387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.185963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.194991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.203712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.212338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.336507][ T1108] veth7: left allmulticast mode [ 649.352243][ T1108] veth7: left promiscuous mode [ 649.361538][ T1108] bridge5: port 3(veth7) entered disabled state [ 649.436046][ T1108] veth0_to_bond: left allmulticast mode [ 649.448184][ T1108] veth0_to_bond: left promiscuous mode [ 649.469365][ T1108] bridge5: port 2(veth0_to_bond) entered disabled state [ 649.512741][ T1108] veth5: left allmulticast mode [ 649.523638][ T1108] veth5: left promiscuous mode [ 649.531004][ T1108] bridge5: port 1(veth5) entered disabled state [ 649.888911][ T5631] Bluetooth: hci2: command tx timeout [ 649.904742][T19977] __nla_validate_parse: 3 callbacks suppressed [ 649.904766][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3259'. [ 650.125501][ T1108] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 650.443757][ T1108] bond15 (unregistering): (slave geneve0): Releasing active interface [ 650.665550][ T1108] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 650.765385][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.778664][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.791857][ T1108] bond0 (unregistering): Released all slaves [ 650.805899][ T1108] bond1 (unregistering): Released all slaves [ 650.825341][ T1108] bond2 (unregistering): Released all slaves [ 650.847934][ T1108] bond3 (unregistering): Released all slaves [ 650.867702][ T1108] bond4 (unregistering): Released all slaves [ 650.887921][ T1108] bond5 (unregistering): Released all slaves [ 650.914789][ T1108] bond6 (unregistering): Released all slaves [ 650.933787][ T1108] bond7 (unregistering): Released all slaves [ 650.951613][ T1108] bond8 (unregistering): Released all slaves [ 650.981897][ T1108] bond9 (unregistering): Released all slaves [ 650.999612][ T1108] bond10 (unregistering): Released all slaves [ 651.016989][ T1108] bond11 (unregistering): Released all slaves [ 651.036298][ T1108] bond12 (unregistering): Released all slaves [ 651.052678][ T1108] bond13 (unregistering): Released all slaves [ 651.071209][ T1108] bond14 (unregistering): Released all slaves [ 651.091142][ T1108] bond15 (unregistering): Released all slaves [ 651.111783][ T1108] bond16 (unregistering): (slave lo): Releasing backup interface [ 651.137659][ T1108] bond16 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 651.151653][ T1108] bond16 (unregistering): Released all slaves [ 651.229571][T19982] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 651.235914][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 651.556441][ T1108] hmó3)ó: left promiscuous mode [ 651.696298][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 651.836445][T20008] sock: sock_timestamping_bind_phc: sock not bind to device [ 651.970303][ T5631] Bluetooth: hci2: command tx timeout [ 651.979564][ T1108] tipc: Left network mode [ 652.039590][T19855] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.047002][T19855] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.055285][T19855] bridge_slave_0: entered allmulticast mode [ 652.063869][T19855] bridge_slave_0: entered promiscuous mode [ 652.074703][T19855] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.083209][T19855] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.091350][T19855] bridge_slave_1: entered allmulticast mode [ 652.102389][T19855] bridge_slave_1: entered promiscuous mode [ 652.277240][T19855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.356248][T20021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3267'. [ 652.440919][T19855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.506111][T20020] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 652.578634][T19855] team0: Port device team_slave_0 added [ 652.634373][T19855] team0: Port device team_slave_1 added [ 652.848646][T20046] netlink: 'syz.0.3275': attribute type 10 has an invalid length. [ 652.864633][T20049] netlink: 'syz.5.3272': attribute type 163 has an invalid length. [ 653.356336][T19855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.371991][T19855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.441857][T19855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.467469][T20058] tap0: tun_chr_ioctl cmd 1074025677 [ 653.484719][T20058] tap0: linktype set to 773 [ 653.523680][T19855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.532806][T19855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.560939][T19855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.666086][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 654.059937][ T5631] Bluetooth: hci2: command tx timeout [ 654.077089][T19855] hsr_slave_0: entered promiscuous mode [ 654.091512][T19855] hsr_slave_1: entered promiscuous mode [ 654.109851][T19855] debugfs: 'hsr0' already exists in 'hsr' [ 654.115686][T19855] Cannot create hsr debugfs directory [ 654.213712][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3281'. [ 654.295573][ T30] audit: type=1804 audit(1779114931.163:9): pid=20096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3281" name="/newroot/486/cgroup.controllers" dev="tmpfs" ino=2513 res=1 errno=0 [ 654.388940][ T30] audit: type=1800 audit(1779114931.163:10): pid=20096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3281" name="cgroup.controllers" dev="tmpfs" ino=2513 res=0 errno=0 [ 654.960546][T20099] lo speed is unknown, defaulting to 1000 [ 655.865981][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 656.194698][T20162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3293'. [ 656.644229][T20177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3296'. [ 656.679333][T20178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3296'. [ 656.791464][T20182] netlink: 'syz.2.3297': attribute type 1 has an invalid length. [ 657.135260][ T1108] veth1_to_team: left promiscuous mode [ 657.180061][ T1108] dummy0: left promiscuous mode [ 657.236103][ T1108] hsr_slave_0: left promiscuous mode [ 657.263604][ T1108] hsr_slave_1: left promiscuous mode [ 657.277179][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.294641][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.313136][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.325051][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.371879][ T1108] veth1_macvtap: left promiscuous mode [ 657.396746][ T1108] veth0_macvtap: left promiscuous mode [ 657.921833][ T1108] ` (unregistering): Port device »»»»»» removed [ 658.832372][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3305'. [ 658.881563][T20230] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 658.929640][ T1108] IPVS: stop unused estimator thread 0... [ 659.077574][T20243] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 659.200922][T20251] bond2: (slave bridge1): making interface the new active one [ 659.215480][T20251] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 659.271576][T20243] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 659.388924][T20260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3312'. [ 659.407387][T20243] macvlan2: entered promiscuous mode [ 659.413664][T20258] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3313'. [ 659.424523][T20243] macvlan2: entered allmulticast mode [ 659.438757][T20243] bond2: entered promiscuous mode [ 659.451934][T20243] bridge1: entered promiscuous mode [ 659.475472][T20243] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 659.495984][T20243] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 659.539817][T20243] bond2: left promiscuous mode [ 659.545080][T20243] bridge1: left promiscuous mode [ 659.572404][T20268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3314'. [ 659.591813][T20255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3311'. [ 659.625546][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3314'. [ 661.677295][T19855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 661.732767][T19855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.786874][T19855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 661.835023][T19855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.877996][T20314] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20002 [ 661.907274][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3320'. [ 661.944204][T19855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 661.995897][T19855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 662.169830][T19855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 662.201905][T19855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.239563][T20319] lo speed is unknown, defaulting to 1000 [ 662.902900][T19855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.976175][T19855] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.018212][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.025532][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.125970][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.133282][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.880691][T20389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3330'. [ 664.131511][ T5631] Bluetooth: hci2: command tx timeout [ 664.813275][T20426] FAULT_INJECTION: forcing a failure. [ 664.813275][T20426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.844315][T20426] CPU: 0 UID: 0 PID: 20426 Comm: syz.3.3339 Not tainted syzkaller #0 PREEMPT(full) [ 664.844345][T20426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.844358][T20426] Call Trace: [ 664.844367][T20426] [ 664.844376][T20426] dump_stack_lvl+0xe8/0x150 [ 664.844408][T20426] should_fail_ex+0x412/0x560 [ 664.844448][T20426] _copy_from_user+0x2d/0xb0 [ 664.844481][T20426] ___sys_sendmsg+0x1c6/0x360 [ 664.844502][T20426] ? __lock_acquire+0x6b5/0x2cf0 [ 664.844531][T20426] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.844558][T20426] ? kstrtouint+0x6e/0xe0 [ 664.844613][T20426] ? __fget_files+0x2a/0x420 [ 664.844638][T20426] ? __fget_files+0x3a0/0x420 [ 664.844675][T20426] __sys_sendmmsg+0x27c/0x4e0 [ 664.844703][T20426] ? __pfx___sys_sendmmsg+0x10/0x10 [ 664.844722][T20426] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 664.844784][T20426] ? ksys_write+0x242/0x270 [ 664.844817][T20426] ? __pfx_ksys_write+0x10/0x10 [ 664.844863][T20426] __x64_sys_sendmmsg+0xa0/0xc0 [ 664.844885][T20426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.844907][T20426] do_syscall_64+0x15f/0xf80 [ 664.844940][T20426] ? clear_bhb_loop+0x40/0x90 [ 664.844967][T20426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.844988][T20426] RIP: 0033:0x7fca2019ce59 [ 664.845009][T20426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.845027][T20426] RSP: 002b:00007fca210a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 664.845049][T20426] RAX: ffffffffffffffda RBX: 00007fca20415fa0 RCX: 00007fca2019ce59 [ 664.845062][T20426] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000003 [ 664.845075][T20426] RBP: 00007fca210a6090 R08: 0000000000000000 R09: 0000000000000000 [ 664.845088][T20426] R10: 00000000000048c5 R11: 0000000000000246 R12: 0000000000000001 [ 664.845099][T20426] R13: 00007fca20416038 R14: 00007fca20415fa0 R15: 00007ffd85f80838 [ 664.845132][T20426] [ 665.394641][T20445] syz_tun: entered allmulticast mode [ 665.644881][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3343'. [ 665.742572][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3347'. [ 665.847463][T19855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.064672][T19855] veth0_vlan: entered promiscuous mode [ 666.114086][T19855] veth1_vlan: entered promiscuous mode [ 666.196419][T20481] ip6gretap2: entered promiscuous mode [ 666.204296][T20478] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 666.294780][T20478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 666.453513][T20486] bond2: (slave erspan0): Enslaving as a backup interface with an up link [ 666.510418][ T202] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 666.554368][T19855] veth0_macvtap: entered promiscuous mode [ 666.658025][T19855] veth1_macvtap: entered promiscuous mode [ 666.666685][ T1173] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 666.689765][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3353'. [ 666.850484][T19855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.942326][T19855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.051279][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.076010][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.137138][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.156361][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3353'. [ 667.167696][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.403533][T20522] syzkaller0: create flow: hash 1309979954 index 1 [ 667.922277][T20522] syzkaller0: delete flow: hash 1309979954 index 1 [ 671.972242][T20536] tunl0: Caught tx_queue_len zero misconfig [ 672.075560][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.099266][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.230029][T11133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.264207][T11133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.567402][T20570] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 672.567402][T20570] Please contact the netfilter-devel mailing list or update your nftables rules. [ 672.791084][T20585] netlink: 'syz.0.3369': attribute type 1 has an invalid length. [ 672.834760][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3369'. [ 673.001964][T20588] bond12: Removing last ns target with arp_interval on [ 673.026180][T20600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 673.335564][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 673.381249][T20599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.407862][T20599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.444650][T20599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.462580][T20599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.527304][T20621] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3378'. [ 673.678207][T20626] : entered promiscuous mode [ 673.896791][T20637] netlink: zone id is out of range [ 674.817540][T20684] netlink: 'syz.0.3398': attribute type 4 has an invalid length. [ 674.861147][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3398'. [ 674.882473][T20686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 674.909337][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3399'. [ 674.975218][T20694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'. [ 675.053962][T20698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3402'. [ 675.063437][T20698] openvswitch: netlink: Flow key attr not present in new flow. [ 675.152430][T20704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3403'. [ 675.452755][T20712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3405'. [ 675.477600][T20715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3408'. [ 675.508933][T20718] netlink: 'syz.3.3407': attribute type 3 has an invalid length. [ 675.640274][T20718] netlink: 'syz.3.3407': attribute type 3 has an invalid length. [ 675.806826][T20725] netlink: 'syz.3.3411': attribute type 4 has an invalid length. [ 675.894209][T20725] : entered promiscuous mode [ 676.187175][T20746] netlink: 'syz.0.3413': attribute type 2 has an invalid length. [ 676.264470][ T48] bridge_slave_1: left allmulticast mode [ 676.274712][ T48] bridge_slave_1: left promiscuous mode [ 676.284317][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.306956][ T48] bridge_slave_0: left allmulticast mode [ 676.323158][ T48] bridge_slave_0: left promiscuous mode [ 676.337233][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.414826][ T48] ªªªªªª: left allmulticast mode [ 676.596080][T20729] nbd5: detected capacity change from 0 to 63 [ 676.648938][ T5634] block nbd5: Receive control failed (result -32) [ 676.658515][ T5631] block nbd5: Receive control failed (result -32) [ 676.674203][T20548] block nbd5: Dead connection, failed to find a fallback [ 676.712348][T20548] block nbd5: shutting down sockets [ 676.799504][T20548] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.834894][T20548] Buffer I/O error on dev nbd5, logical block 0, async page read [ 676.865578][T20548] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.875604][T20548] Buffer I/O error on dev nbd5, logical block 1, async page read [ 676.887310][T20548] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.918789][T20548] Buffer I/O error on dev nbd5, logical block 2, async page read [ 676.943803][T20548] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.976542][T20548] Buffer I/O error on dev nbd5, logical block 3, async page read [ 676.998026][T20548] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.029664][T20548] Buffer I/O error on dev nbd5, logical block 0, async page read [ 677.055801][T20548] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.085711][T20548] Buffer I/O error on dev nbd5, logical block 1, async page read [ 677.104439][T20548] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.124098][T20548] Buffer I/O error on dev nbd5, logical block 2, async page read [ 677.144161][T20548] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.168923][T20548] Buffer I/O error on dev nbd5, logical block 3, async page read [ 677.187944][T20548] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.198112][T20548] Buffer I/O error on dev nbd5, logical block 0, async page read [ 677.207034][T20548] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.217713][T20548] Buffer I/O error on dev nbd5, logical block 1, async page read [ 677.237515][T20548] ldm_validate_partition_table(): Disk read failed. [ 677.254511][T20548] Dev nbd5: unable to read RDB block 0 [ 677.266092][T20548] nbd5: unable to read partition table [ 677.329625][ T48] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 677.343993][T20548] ldm_validate_partition_table(): Disk read failed. [ 677.358234][T20548] Dev nbd5: unable to read RDB block 0 [ 677.378190][T20548] nbd5: unable to read partition table [ 677.419877][ T48] bond6 (unregistering): (slave bridge5): Releasing active interface [ 677.455930][ T48] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 677.726058][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.749056][ T48] bond_slave_0: left promiscuous mode [ 677.755543][ T48] bond_slave_0: left allmulticast mode [ 677.767373][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.781422][ T48] bond_slave_1: left allmulticast mode [ 677.787718][ T48] bond0 (unregistering): Released all slaves [ 677.801314][ T48] bond1 (unregistering): Released all slaves [ 677.820981][ T48] bond2 (unregistering): Released all slaves [ 677.847592][ T48] bond3 (unregistering): Released all slaves [ 677.872403][ T48] bond4 (unregistering): Released all slaves [ 677.892468][ T48] bond5 (unregistering): Released all slaves [ 677.924299][ T48] bond6 (unregistering): Released all slaves [ 677.947233][ T48] bond7 (unregistering): Released all slaves [ 677.979016][ T48] bond8 (unregistering): Released all slaves [ 678.004709][ T48] bond9 (unregistering): (slave veth3): Releasing backup interface [ 678.017806][ T48] bond9 (unregistering): Released all slaves [ 678.035672][ T48] bond10 (unregistering): Released all slaves [ 678.055683][ T48] bond11 (unregistering): Released all slaves [ 678.075534][ T48] bond12 (unregistering): Released all slaves [ 678.111237][ T48] bond13 (unregistering): (slave veth5): Releasing active interface [ 678.121476][ T48] bond13 (unregistering): Released all slaves [ 678.139567][ T48] bond14 (unregistering): Released all slaves [ 678.156923][ T48] bond15 (unregistering): Released all slaves [ 678.183016][ T48] bond16 (unregistering): Released all slaves [ 678.200594][ T48] bond17 (unregistering): Released all slaves [ 678.377344][T20769] __nla_validate_parse: 3 callbacks suppressed [ 678.377367][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3421'. [ 678.581546][ T48] hmac(sh: left promiscuous mode [ 678.727440][ T48] tipc: Disabling bearer [ 678.782489][ T48] tipc: Left network mode [ 679.248150][T20799] netlink: 758 bytes leftover after parsing attributes in process `syz.2.3430'. [ 679.308128][T20800] netlink: ct family unspecified [ 679.334609][T20800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.720815][T20818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3433'. [ 679.741172][T20779] netlink: 'syz.3.3425': attribute type 1 has an invalid length. [ 679.750366][T20818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3433'. [ 679.760495][T20812] lo speed is unknown, defaulting to 1000 [ 679.903233][T20779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 679.997830][T20823] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3435'. [ 680.029547][T20828] [ 680.031970][T20828] ====================================================== [ 680.039254][T20828] WARNING: possible circular locking dependency detected [ 680.046478][T20828] syzkaller #0 Not tainted [ 680.050955][T20828] ------------------------------------------------------ [ 680.058801][T20828] syz.1.3435/20828 is trying to acquire lock: [ 680.068562][T20828] ffffffff8ea85560 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 680.079430][T20828] [ 680.079430][T20828] but task is already holding lock: [ 680.086825][T20828] ffff888055489160 (sk_lock-AF_INET6){+.+.}-{0:0}, at: l2tp_ip6_sendmsg+0x131f/0x18d0 [ 680.096478][T20828] [ 680.096478][T20828] which lock already depends on the new lock. [ 680.096478][T20828] [ 680.107062][T20828] [ 680.107062][T20828] the existing dependency chain (in reverse order) is: [ 680.116120][T20828] [ 680.116120][T20828] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 680.124206][T20828] lock_sock_nested+0x41/0x100 [ 680.130230][T20828] inet_shutdown+0x6a/0x390 [ 680.135291][T20828] nbd_mark_nsock_dead+0x2e9/0x560 [ 680.141313][T20828] sock_shutdown+0x15e/0x260 [ 680.146471][T20828] nbd_clear_sock+0x24/0x170 [ 680.151611][T20828] nbd_config_put+0x2dd/0x580 [ 680.156850][T20828] nbd_genl_connect+0x19d5/0x1cf0 [ 680.162947][T20828] genl_family_rcv_msg_doit+0x22a/0x330 [ 680.169055][T20828] genl_rcv_msg+0x61c/0x7a0 [ 680.174111][T20828] netlink_rcv_skb+0x232/0x4b0 [ 680.179597][T20828] genl_rcv+0x28/0x40 [ 680.184660][T20828] netlink_unicast+0x75c/0x8e0 [ 680.189988][T20828] netlink_sendmsg+0x813/0xb40 [ 680.195584][T20828] ____sys_sendmsg+0x972/0x9f0 [ 680.201253][T20828] ___sys_sendmsg+0x2a5/0x360 [ 680.206912][T20828] __x64_sys_sendmsg+0x1bd/0x2a0 [ 680.212492][T20828] do_syscall_64+0x15f/0xf80 [ 680.217731][T20828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.224535][T20828] [ 680.224535][T20828] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 680.232226][T20828] __mutex_lock+0x1a3/0x1550 [ 680.237460][T20828] nbd_queue_rq+0x37b/0x1100 [ 680.242595][T20828] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 680.248706][T20828] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 680.256124][T20828] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 680.262677][T20828] blk_mq_run_hw_queue+0x348/0x4f0 [ 680.268349][T20828] blk_mq_dispatch_list+0xd16/0xe10 [ 680.274116][T20828] blk_mq_flush_plug_list+0x48d/0x570 [ 680.280052][T20828] __blk_flush_plug+0x3ed/0x4d0 [ 680.285488][T20828] __submit_bio+0x28d/0x580 [ 680.290551][T20828] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 680.296750][T20828] block_read_full_folio+0x599/0x830 [ 680.302594][T20828] filemap_read_folio+0x137/0x3b0 [ 680.308176][T20828] do_read_cache_folio+0x358/0x590 [ 680.313854][T20828] read_part_sector+0xb6/0x2b0 [ 680.319187][T20828] adfspart_check_ICS+0xb1/0x960 [ 680.324694][T20828] bdev_disk_changed+0x817/0x1770 [ 680.330385][T20828] blkdev_get_whole+0x380/0x510 [ 680.335833][T20828] bdev_open+0x31e/0xd30 [ 680.340651][T20828] blkdev_open+0x470/0x610 [ 680.345627][T20828] do_dentry_open+0x785/0x14e0 [ 680.350967][T20828] vfs_open+0x3b/0x340 [ 680.355607][T20828] path_openat+0x2e08/0x3860 [ 680.360756][T20828] do_file_open+0x23e/0x4a0 [ 680.365828][T20828] do_sys_openat2+0x113/0x200 [ 680.371070][T20828] __x64_sys_openat+0x138/0x170 [ 680.376690][T20828] do_syscall_64+0x15f/0xf80 [ 680.381958][T20828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.388531][T20828] [ 680.388531][T20828] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 680.396129][T20828] __mutex_lock+0x1a3/0x1550 [ 680.401355][T20828] nbd_queue_rq+0xc6/0x1100 [ 680.406426][T20828] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 680.412549][T20828] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 680.419445][T20828] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 680.425990][T20828] blk_mq_run_hw_queue+0x348/0x4f0 [ 680.431652][T20828] blk_mq_dispatch_list+0xd16/0xe10 [ 680.437408][T20828] blk_mq_flush_plug_list+0x48d/0x570 [ 680.443338][T20828] __blk_flush_plug+0x3ed/0x4d0 [ 680.448769][T20828] __submit_bio+0x28d/0x580 [ 680.453840][T20828] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 680.460043][T20828] block_read_full_folio+0x599/0x830 [ 680.465882][T20828] filemap_read_folio+0x137/0x3b0 [ 680.471466][T20828] do_read_cache_folio+0x358/0x590 [ 680.477231][T20828] read_part_sector+0xb6/0x2b0 [ 680.482644][T20828] adfspart_check_ICS+0xb1/0x960 [ 680.488139][T20828] bdev_disk_changed+0x817/0x1770 [ 680.493823][T20828] blkdev_get_whole+0x380/0x510 [ 680.499494][T20828] bdev_open+0x31e/0xd30 [ 680.504362][T20828] blkdev_open+0x470/0x610 [ 680.509428][T20828] do_dentry_open+0x785/0x14e0 [ 680.514785][T20828] vfs_open+0x3b/0x340 [ 680.519413][T20828] path_openat+0x2e08/0x3860 [ 680.525002][T20828] do_file_open+0x23e/0x4a0 [ 680.530059][T20828] do_sys_openat2+0x113/0x200 [ 680.535314][T20828] __x64_sys_openat+0x138/0x170 [ 680.540807][T20828] do_syscall_64+0x15f/0xf80 [ 680.546114][T20828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.552743][T20828] [ 680.552743][T20828] -> #3 (set->srcu){.+.+}-{0:0}: [ 680.559989][T20828] __synchronize_srcu+0xca/0x300 [ 680.565476][T20828] elevator_switch+0x1e8/0x7a0 [ 680.570786][T20828] elevator_change+0x2cc/0x450 [ 680.576129][T20828] elevator_set_default+0x36c/0x430 [ 680.581899][T20828] blk_register_queue+0x3e9/0x4e0 [ 680.587466][T20828] __add_disk+0x677/0xd50 [ 680.592343][T20828] add_disk_fwnode+0xfb/0x480 [ 680.598096][T20828] nbd_dev_add+0x72c/0xb50 [ 680.603162][T20828] nbd_init+0x168/0x1f0 [ 680.607866][T20828] do_one_initcall+0x250/0x870 [ 680.613188][T20828] do_initcall_level+0x104/0x190 [ 680.619118][T20828] do_initcalls+0x59/0xa0 [ 680.624003][T20828] kernel_init_freeable+0x2a6/0x3e0 [ 680.629760][T20828] kernel_init+0x1d/0x1d0 [ 680.634642][T20828] ret_from_fork+0x514/0xb70 [ 680.639873][T20828] ret_from_fork_asm+0x1a/0x30 [ 680.645234][T20828] [ 680.645234][T20828] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 680.653084][T20828] __mutex_lock+0x1a3/0x1550 [ 680.658230][T20828] elevator_change+0x1b3/0x450 [ 680.663548][T20828] elevator_set_none+0xb5/0x140 [ 680.668947][T20828] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 680.675484][T20828] nbd_start_device+0x17f/0xb10 [ 680.680912][T20828] nbd_genl_connect+0x165b/0x1cf0 [ 680.686539][T20828] genl_family_rcv_msg_doit+0x22a/0x330 [ 680.692763][T20828] genl_rcv_msg+0x61c/0x7a0 [ 680.697851][T20828] netlink_rcv_skb+0x232/0x4b0 [ 680.703194][T20828] genl_rcv+0x28/0x40 [ 680.707724][T20828] netlink_unicast+0x75c/0x8e0 [ 680.713038][T20828] netlink_sendmsg+0x813/0xb40 [ 680.718363][T20828] ____sys_sendmsg+0x972/0x9f0 [ 680.723673][T20828] ___sys_sendmsg+0x2a5/0x360 [ 680.729164][T20828] __x64_sys_sendmsg+0x1bd/0x2a0 [ 680.734667][T20828] do_syscall_64+0x15f/0xf80 [ 680.739829][T20828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.746317][T20828] [ 680.746317][T20828] -> #1 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 680.754955][T20828] blk_alloc_queue+0x546/0x680 [ 680.760465][T20828] __blk_mq_alloc_disk+0x197/0x390 [ 680.766137][T20828] nbd_dev_add+0x499/0xb50 [ 680.771099][T20828] nbd_init+0x168/0x1f0 [ 680.775804][T20828] do_one_initcall+0x250/0x870 [ 680.781128][T20828] do_initcall_level+0x104/0x190 [ 680.786629][T20828] do_initcalls+0x59/0xa0 [ 680.791687][T20828] kernel_init_freeable+0x2a6/0x3e0 [ 680.797462][T20828] kernel_init+0x1d/0x1d0 [ 680.802350][T20828] ret_from_fork+0x514/0xb70 [ 680.807486][T20828] ret_from_fork_asm+0x1a/0x30 [ 680.812891][T20828] [ 680.812891][T20828] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 680.820190][T20828] __lock_acquire+0x15a5/0x2cf0 [ 680.825689][T20828] lock_acquire+0x106/0x350 [ 680.830758][T20828] fs_reclaim_acquire+0x71/0x100 [ 680.836354][T20828] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 680.842732][T20828] __alloc_skb+0x1d0/0x7d0 [ 680.847725][T20828] alloc_skb_with_frags+0xc8/0x760 [ 680.853618][T20828] sock_alloc_send_pskb+0x878/0x990 [ 680.859369][T20828] __ip6_append_data+0x2c6c/0x3f60 [ 680.865035][T20828] ip6_append_data+0x10f/0x280 [ 680.870345][T20828] l2tp_ip6_sendmsg+0x1393/0x18d0 [ 680.875935][T20828] sock_sendmsg+0x379/0x450 [ 680.881002][T20828] splice_to_socket+0xae2/0x11f0 [ 680.886492][T20828] do_splice+0xee3/0x1910 [ 680.891398][T20828] __se_sys_splice+0x353/0x490 [ 680.896718][T20828] do_syscall_64+0x15f/0xf80 [ 680.901865][T20828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.908316][T20828] [ 680.908316][T20828] other info that might help us debug this: [ 680.908316][T20828] [ 680.918581][T20828] Chain exists of: [ 680.918581][T20828] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 680.918581][T20828] [ 680.931318][T20828] Possible unsafe locking scenario: [ 680.931318][T20828] [ 680.938806][T20828] CPU0 CPU1 [ 680.944218][T20828] ---- ---- [ 680.949603][T20828] lock(sk_lock-AF_INET6); [ 680.954172][T20828] lock(&nsock->tx_lock); [ 680.961139][T20828] lock(sk_lock-AF_INET6); [ 680.968200][T20828] lock(fs_reclaim); [ 680.972214][T20828] [ 680.972214][T20828] *** DEADLOCK *** [ 680.972214][T20828] [ 680.980640][T20828] 2 locks held by syz.1.3435/20828: [ 680.985866][T20828] #0: ffff88805d7e4c60 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0x15f/0x11f0 [ 680.995719][T20828] #1: ffff888055489160 (sk_lock-AF_INET6){+.+.}-{0:0}, at: l2tp_ip6_sendmsg+0x131f/0x18d0 [ 681.005777][T20828] [ 681.005777][T20828] stack backtrace: [ 681.011711][T20828] CPU: 0 UID: 0 PID: 20828 Comm: syz.1.3435 Not tainted syzkaller #0 PREEMPT(full) [ 681.011736][T20828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.011748][T20828] Call Trace: [ 681.011818][T20828] [ 681.011827][T20828] dump_stack_lvl+0xe8/0x150 [ 681.011853][T20828] print_circular_bug+0x2e1/0x300 [ 681.011878][T20828] check_noncircular+0x12e/0x150 [ 681.011903][T20828] __lock_acquire+0x15a5/0x2cf0 [ 681.011922][T20828] ? lockdep_unlock+0x5d/0xd0 [ 681.011936][T20828] ? __lock_acquire+0x146e/0x2cf0 [ 681.011960][T20828] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 681.011983][T20828] lock_acquire+0x106/0x350 [ 681.011999][T20828] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 681.012023][T20828] ? lock_acquire+0x106/0x350 [ 681.012044][T20828] fs_reclaim_acquire+0x71/0x100 [ 681.012068][T20828] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 681.012089][T20828] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 681.012112][T20828] ? __alloc_skb+0x1d0/0x7d0 [ 681.012134][T20828] ? __local_bh_enable_ip+0xd0/0x130 [ 681.012153][T20828] __alloc_skb+0x1d0/0x7d0 [ 681.012179][T20828] alloc_skb_with_frags+0xc8/0x760 [ 681.012205][T20828] ? ktime_get+0x45/0x220 [ 681.012229][T20828] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 681.012256][T20828] ? ktime_get+0x1f5/0x220 [ 681.012280][T20828] sock_alloc_send_pskb+0x878/0x990 [ 681.012297][T20828] ? do_raw_spin_unlock+0xf5/0x210 [ 681.012328][T20828] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 681.012353][T20828] __ip6_append_data+0x2c6c/0x3f60 [ 681.012383][T20828] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 681.012412][T20828] ? ip6_mtu+0x7d/0x490 [ 681.012433][T20828] ? __pfx___ip6_append_data+0x10/0x10 [ 681.012452][T20828] ? ip6_setup_cork+0x544/0xf30 [ 681.012471][T20828] ? ip6_append_data+0x1b7/0x280 [ 681.012491][T20828] ip6_append_data+0x10f/0x280 [ 681.012511][T20828] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 681.012534][T20828] l2tp_ip6_sendmsg+0x1393/0x18d0 [ 681.012566][T20828] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 681.012598][T20828] ? __pfx_aa_sk_perm+0x10/0x10 [ 681.012617][T20828] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 681.012644][T20828] ? __pfx_inet_sendmsg+0x10/0x10 [ 681.012667][T20828] ? inet_sendmsg+0x2f4/0x370 [ 681.012688][T20828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.012711][T20828] ? __pfx_inet_sendmsg+0x10/0x10 [ 681.012733][T20828] sock_sendmsg+0x379/0x450 [ 681.012764][T20828] ? __pfx_sock_sendmsg+0x10/0x10 [ 681.012788][T20828] ? __asan_memset+0x22/0x50 [ 681.012808][T20828] ? iov_iter_bvec+0xb8/0x180 [ 681.012833][T20828] splice_to_socket+0xae2/0x11f0 [ 681.012865][T20828] ? __pfx_splice_to_socket+0x10/0x10 [ 681.012902][T20828] ? bpf_lsm_file_permission+0x9/0x20 [ 681.012927][T20828] ? security_file_permission+0x75/0x260 [ 681.012945][T20828] ? rw_verify_area+0x255/0x4d0 [ 681.012969][T20828] ? __pfx_splice_to_socket+0x10/0x10 [ 681.012989][T20828] do_splice+0xee3/0x1910 [ 681.013021][T20828] ? __pfx_do_splice+0x10/0x10 [ 681.013046][T20828] __se_sys_splice+0x353/0x490 [ 681.013070][T20828] ? __pfx___se_sys_splice+0x10/0x10 [ 681.013094][T20828] ? __x64_sys_splice+0x21/0xf0 [ 681.013115][T20828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.013132][T20828] do_syscall_64+0x15f/0xf80 [ 681.013157][T20828] ? trace_irq_disable+0x3b/0x140 [ 681.013182][T20828] ? clear_bhb_loop+0x40/0x90 [ 681.013200][T20828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.013217][T20828] RIP: 0033:0x7fdf3e39ce59 [ 681.013234][T20828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.013249][T20828] RSP: 002b:00007fdf3f288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 681.013268][T20828] RAX: ffffffffffffffda RBX: 00007fdf3e616180 RCX: 00007fdf3e39ce59 [ 681.013280][T20828] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000006 [ 681.013290][T20828] RBP: 00007fdf3e432d6f R08: 001100000000f336 R09: 0000000000000000 [ 681.013301][T20828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.013311][T20828] R13: 00007fdf3e616218 R14: 00007fdf3e616180 R15: 00007ffe57636428 [ 681.013330][T20828] [ 681.655290][T20827] lo speed is unknown, defaulting to 1000 [ 682.071532][ T48] batadv0: left promiscuous mode [ 682.090585][ T48] hsr_slave_0: left promiscuous mode [ 682.096840][ T48] hsr_slave_1: left promiscuous mode [ 682.118664][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.150529][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.175928][ T48] pim6reg (unregistering): left allmulticast mode [ 682.975326][ T48] IPVS: stop unused estimator thread 0... [ 686.369048][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog