last executing test programs: 1m28.926167318s ago: executing program 0 (id=2822): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x58, 0x1412, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, 0x140f, 0x801, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x41813}}, 0x20}}, 0x0) sendto$packet(r2, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r6, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x2, 0x40, 0x1, 0x7, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525059, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) 1m28.010066216s ago: executing program 0 (id=2827): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000019, 0x11, r1, 0x100000000) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0f800000000b7060000ffffffff7b6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000850000000200000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c96af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf7af8ea5b4bd9593f73c6c95dd6d59483763debf02ea36803976b6cc145338e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0x7) (async) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000019, 0x11, r1, 0x100000000) (async) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) (async) 1m27.617801183s ago: executing program 0 (id=2830): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffee4) 1m27.441589788s ago: executing program 0 (id=2831): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf250d008000b7f2947904a06f7f2ee324d07d5c966593b57c39a4da5456597d9862e5ce63"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 1m27.094441584s ago: executing program 0 (id=2834): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100), 0x2) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r0, 0x1, 0x6, @random="b50221634840"}, 0x10) (async) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000200)=0x9, 0x4) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000240)=""/23, &(0x7f0000000280)=0x17) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x22}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffbe}]}, 0x64}, 0x1, 0x0, 0x0, 0x2885}, 0x40) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), r7) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000600)={0x0, 0x1, 0x6, 0xd, 0x0}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000680)={0xbe, 0x7fff, 0x4, 0x1, 0x56e, 0x3, 0x80000000, 0x3, r8}, &(0x7f00000006c0)=0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000700)={'erspan0\x00', r0, 0x8000, 0x700, 0x1, 0xe, {{0x1c, 0x4, 0x2, 0x2, 0x70, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x1f, 0x5a, [@multicast2, @rand_addr=0x64010100, @empty, @rand_addr=0x64010101, @multicast1, @private=0xa010100, @broadcast]}, @lsrr={0x83, 0x2b, 0xea, [@rand_addr=0x64010102, @multicast1, @multicast1, @remote, @remote, @broadcast, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @remote]}, @ssrr={0x89, 0xf, 0xce, [@private=0xa010102, @multicast1, @remote]}]}}}}}) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0xb, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x3, 0x2, 0x0, 0x4, 0x4, 0x6, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}]}, &(0x7f0000000880)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x2, 0x0, &(0x7f0000000900)=[{0x3, 0x2, 0x10, 0x3}, {0x1, 0x2, 0xc, 0x5}], 0x10, 0x764}, 0x94) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000c00)={{r10, 0xfffffffffffffe00, 0x400, 0x0, 0x2, 0x6, 0x5, 0x2, 0x7, 0x376a, 0x57c2, 0x9, 0x3, 0x100, 0x5}, 0x8, [0x0]}) (async, rerun: 32) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1b, 0x4, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c801}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000dc0)={0x6, 0xf, 0x7, 0x1}, 0x8) bind$alg(r7, &(0x7f0000000e00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x158, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_NAT_DST={0x8c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x72ba}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000010c0), &(0x7f0000001100)=0xe) (async) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000001140)=0x9, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 1m26.073335416s ago: executing program 0 (id=2841): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000309fdbd5310523655f22a63d1b614381fa522a32e2b5746f7aa06e6518e24804a02c42f9500c6c7c08dbcc5589102d1f1efb98565bb24a6e0109657d0bb386f2273308a02c06cbd242756acfdd07c21464b9916d260c1ad83d0b83e3fb0882418c6f45f80cc6851e4624adf0d71890612d62acfe680a8178ab4b6acd7faeac8a71193fee80719195749447c911f159c414c2665b005c722f30cb02d25e3934c3d783a790381c56f821f33888e6e283afecf40e93946992c3629f066eac95ca91679a3d7f6bf958c1be453e4c865b", @ANYRES32, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa2ebffffffffff06020000f8ffffffb703000008000000b70400000100000085000000540000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) listen(r0, 0x5) (async) listen(r0, 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) sendmsg$sock(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4008000) (async) sendmsg$sock(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4008000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x32b2) socket$netlink(0x10, 0x3, 0x9) (async) r7 = socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x10010, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x8, 0x4, 0x4) (async) r8 = socket(0x8, 0x4, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0x400261f2, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) listen(r6, 0x20) (async) listen(r6, 0x20) shutdown(r6, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) 1m10.898296944s ago: executing program 32 (id=2841): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000309fdbd5310523655f22a63d1b614381fa522a32e2b5746f7aa06e6518e24804a02c42f9500c6c7c08dbcc5589102d1f1efb98565bb24a6e0109657d0bb386f2273308a02c06cbd242756acfdd07c21464b9916d260c1ad83d0b83e3fb0882418c6f45f80cc6851e4624adf0d71890612d62acfe680a8178ab4b6acd7faeac8a71193fee80719195749447c911f159c414c2665b005c722f30cb02d25e3934c3d783a790381c56f821f33888e6e283afecf40e93946992c3629f066eac95ca91679a3d7f6bf958c1be453e4c865b", @ANYRES32, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa2ebffffffffff06020000f8ffffffb703000008000000b70400000100000085000000540000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) listen(r0, 0x5) (async) listen(r0, 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) sendmsg$sock(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4008000) (async) sendmsg$sock(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4008000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x32b2) socket$netlink(0x10, 0x3, 0x9) (async) r7 = socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x10010, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x8, 0x4, 0x4) (async) r8 = socket(0x8, 0x4, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0x400261f2, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) listen(r6, 0x20) (async) listen(r6, 0x20) shutdown(r6, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) 18.358171344s ago: executing program 2 (id=3145): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7a0, 0x470, 0x230, 0x470, 0x328, 0x0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, &(0x7f0000000280), {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0xff, 0xff], 'syz_tun\x00', '\x00', {0xff}, {0xff}, 0x11, 0x4, 0x3, 0x4}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0xffff, 0x401], 0x7fff, 0x20, 0x3, [@remote, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @empty, @local, @loopback, @private0, @empty, @ipv4={'\x00', '\xff\xff', @remote}], 0xd}}, @common=@icmp6={{0x28}, {0xe, "c04a"}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x1, 0xe14cf463f6e240b1}}}, {{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'batadv0\x00', 'team0\x00', {}, {0xff}, 0x3a, 0xda, 0x4, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x8001], 0x9, 0x2c, 0x1}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x11, 0x33, 0xc08}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, [0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 'dummy0\x00', 'wg2\x00', {0xff}, {0xff}, 0x3b, 0x7f, 0x5, 0x1c}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[0x9, 0x66], 0x5}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb5, 0x7, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r1, r2}) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019", 0x28}], 0x1}}], 0x1, 0x40) close(r3) 18.223844782s ago: executing program 2 (id=3147): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003700010327de7000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4048}, 0x4040004) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d8a0feedfcaf7a47bc4c6a1da378065a1d22f0152b6ac3d1e8d4a640e423d6c0fd5f3b329f178f225a2d8ad738a713b9a9e10b0a425d10ff06f4225132f9d50d25c88ca02085f1784d7df2fdddbca1a1ba85fc36e062293b6b4ff6d9cc9dd98193a29a0e042a9886117261369d"], &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r7, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) connect$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x3, {0x0, 0xf}, 0x2}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008841) connect$can_bcm(r6, &(0x7f0000001ff0)={0x1d, r10}, 0x10) sendmsg$can_raw(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x44041}, 0x84841) 16.758135655s ago: executing program 2 (id=3153): r0 = socket$inet6(0xa, 0x3, 0x7a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000000414010025bd70000ddcdf250800010000000000"], 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000440)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000002c0)=[{{@align=0x7, {0xffff, 0x1, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) write(r4, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027400089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fcab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f", 0xdd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x0, 0x4}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000ffffffff000000ec95ffffff85000000aa000000950000fa2f0000ae9800"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdffffffc}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) shutdown(r6, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x80000, 0x40000000000000, 0x60a, 0xfffffffffffffff7}, {0x0, 0x80000000000fef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000004c0), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x32}, 0x0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) 16.154837665s ago: executing program 2 (id=3159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd4f, '\x00', r1, r2, 0x2, 0x1, 0x1}, 0x50) (async) r3 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) (async) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x884c}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x66, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x2e) 15.06630494s ago: executing program 2 (id=3165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x14, r2, 0x4a3, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x300, 0x0, 0xff, 0x2, 0x6, 0xe}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x814) 3.472444689s ago: executing program 4 (id=3243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) unshare(0x20000400) (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r2}, 0x4) 3.218297938s ago: executing program 4 (id=3247): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x1ff, 0x2]}, {0x8, 0xcc2a, 0xfffffff7, 0x80}}, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0xf}, {[0x0, 0x9, 0x4c5de560, 0x80]}, 0x0, 0x4a, &(0x7f00000002c0)=""/74}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x800) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000010}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x40, r3, 0x311, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x47}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$inet6(0xa, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2e}, 0x94) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [0xffffff00, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xffffff00, 0xff, 0xff000000], 'vlan0\x00', 'erspan0\x00', {}, {}, 0x67, 0x5, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x200], 0x2, 0x2b, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @mcast2, [0xff000000, 0x0, 0xff, 0xffffffff], [0x0, 0x0, 0xff, 0xffffffff], 'wg2\x00', 'batadv0\x00', {0xff}, {}, 0x2c, 0x4, 0x3, 0x70}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffffffff, 0x1, 0x0, 0x0, 0xd, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xff, 0x28, "bc82316ff79b9118143c3b3350a2f9b5b5bcfd015f1b93f4518699593966"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.17688616s ago: executing program 1 (id=3248): getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/139, 0x8b, 0x0, &(0x7f0000000200)=""/193, 0xc1}, &(0x7f0000000500)=0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.994653026s ago: executing program 1 (id=3250): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r1 = socket(0x2, 0xa, 0x300) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000000c0)={0x100000001, 0x8d, 0x4, 0x3, 0x1, 0x0, [{0x1000, 0x9, 0x401, '\x00', 0x800}]}) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x580, 0xf8, 0x1c8, 0x3c8, 0xf8, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc0}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async, rerun: 32) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 32) sendmsg$802154_raw(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="48ecf443215f0dd7bb426312665c454341b3d792e4cad541a20030bfc282ae4c7843d8273df5b2578e62d0b330af5714e287b0cb4fd9200ba00ea52259b3b06ce32fa594b141f08c5f65603fb5a79abc3937525794e71b9f3f07076dcb7944976a2096caa0a417624269798938fb96b53ddfbad7c9896c", 0x11}}, 0x10) 2.887639294s ago: executing program 3 (id=3251): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="80000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x2c, 0x2, 0x6, 0x8}, 0x0, 0xe0, 0x100, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8, {0xffc0000000}}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'bridge_slave_1\x00', {}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x10000006, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8400000000010104210000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100c7dd5a4071f84ce5c769b8eafbddde000000002400028014000180080001000000000008000200ac1414aa0c000280050001000000000008000740000000002000068008000100e00000021400038006"], 0x84}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40012020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000007c8000000000000018000000fdffffff0000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c001500", @ANYRESDEC=r4], 0xc4}, 0x1, 0x0, 0x0, 0x4008006}, 0x40014) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000500), &(0x7f0000000540)=r12}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb01001800000000000000940000009400000004000000030000000000000c0100000002000000040000060400000003000000010000800b0000000500000009000000090000000d0000000200000000000000000000030000000005000000030000000c000000000000000400000d00000000080000000200000005000000050000000b000000010000000e000000000000000d0000000000000a050000000c0000000000000902000000005f000071084c061f10282d586526cbe3381429c7d75e8b8c8f6f5d74"], &(0x7f0000000ec0)=""/162, 0xb0, 0xa2, 0x8, 0xe613}, 0x28) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0xbe, 0xb9, &(0x7f0000000700)=""/185, 0x40f00, 0x8, '\x00', r13, 0x0, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000fc0)=[{0x0, 0x1, 0x3, 0xc}], 0x10, 0x8}, 0x94) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c0000003a000100010000000800ec00084100000000000000e91200ff15584392a6efc3d03cbafb3a5b70a1c866e5f1000000a435625cd32f81428f5208768d41b6f30305da3431470cb6525dded7102c59295f299e938000fffbc6efd722a3195b2d2058746a5306591880b2f836a96e3be74757686a15f5f5299a5110b776e8b1c0a2f6650e2663fa24dd5b1b5863387c6e5eb54804a780a9277ada58ee49d5979e429de59bab6783a02d613e8abffd5632edb60beff73a3a10bd927e4412187cb93927f84ba2b830b5ed0cd0e6cdc1cc438c1e218abe852de687b3433f585c331ce39d8ddb410a90ca4928fbf313535d0246d1"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) listen(r1, 0xfffffffd) 2.882086998s ago: executing program 1 (id=3252): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendto$inet(r2, &(0x7f0000000100)="4045c4908a5633fa298e68f83ec4318d", 0x10, 0x20048084, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x76, {0x2, 0x4e20, @loopback}, 'rose0\x00'}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x4a3, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xde, "b5a0fc626aeaa6ce3a6053394c7c29f23a8c08d6525379e57ebf4fb37104102df179ca279d264f5c86e49465b4e0980377532b33b104e1e7ac8d37e14a3bb1e125f6aad0b023078637c2368159502924e6cc667f35a06483fc03919769e94c012f986a0a87e2c7dcffd4f74b4537635706cc2e5a37023a5b77452eae73cb150f904b15a161c71c601c902dc41835f935bb5e6c2644c24abc3260fb60f101f4e8d4403fee3b3c756887db9971ff0303229e1b52aef7b2d5a894a989782948b278efe27fc669c21e8cf917cdde476361fae07970ff0c224cd890c785d3d22c"}, &(0x7f0000000400)=0xe6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000440)={r3, 0x9, 0x8001}, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.773144914s ago: executing program 4 (id=3253): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x144}}, 0x0) 2.688072498s ago: executing program 3 (id=3254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) r1 = socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x3000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r8, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r9, 0x1000) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000d1b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) 2.672402645s ago: executing program 1 (id=3255): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) unshare(0x22020600) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) connect(r1, 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) (async, rerun: 32) nanosleep(0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) (async) sendto$inet(r3, 0x0, 0x0, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r2, 0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x2) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r8, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) 2.311236942s ago: executing program 1 (id=3257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100090e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa"], 0x70}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aabaaaaaaaaa0821d7126e54cf8038000402907800000000e0000002000000aa00000300500c0d0b857c1cd12ee9e9939e26156f80ed3842fffc847a031f01ce3be4d665d85b91"], 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xffff, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) sendmsg$sock(r2, &(0x7f0000000700)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x1, 0x4, 0x3}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="6dfcc215ba0408a626eacb838b0a606f8c42e6a9fc2d01bf192dcdc77efadb547a7fc9a9d0be5e4e4aa0d19304dd0949c8be539ee547f85e74cd67d1b0b98d85c9", 0x41}], 0x1, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x92e8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x90}, 0x4000000) 2.04046781s ago: executing program 5 (id=3258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf04320e1369625567656e657665300000dc00"/39], 0x2c}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000851) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x45, &(0x7f0000000640)=0xfffffffe, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_rxfh_indir={0x38}}) 1.878205893s ago: executing program 4 (id=3259): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x2, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x3, 0x3, 0x1, 0xfffffffc, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x102, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x2, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xae, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x100, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xdda, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x2, 0x3f, 0x8, 0xcb, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000821bd468000300000a580000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d103"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x60, r3, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x44, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f94b54cce6396c3599431c882366da01"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfd}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3c}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000001}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r9) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r12, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x300400c1}, 0x814) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf25300000000a0001007770616e3100000005003400f90000000500350006000000050036000100000008000200", @ANYRES32=r8, @ANYBLOB="0a0001007770616e300000000500350002000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4040018) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0xc000) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8178, 0x2000, 0x800, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "ecad80", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x40000000}, @private1}}}}}}, 0x0) 1.71867076s ago: executing program 5 (id=3260): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x48000, &(0x7f00000014c0)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) (async, rerun: 64) r1 = socket(0x28, 0x5, 0x0) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5451, 0x0, 0x0, 0x0, 0x7e9}, {}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffff}, @call={0x85, 0x0, 0x0, 0x7a}, @jmp={0x5, 0x0, 0x5, 0x2, 0x5fcdbba98485cf2, 0x4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x2, 0x3, 0x2, 0x8, 0xa, 0xffffffffffffffff, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FITHAW(r4, 0xc0045878) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x12}]}, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r5, 0x26, 0x0, 0x80, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) recvmmsg(r1, &(0x7f0000002840)=[{{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/133, 0x85}, {&(0x7f0000000580)=""/61, 0x3d}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000780)=""/154, 0x9a}], 0x6, &(0x7f00000008c0)=""/51, 0x33}, 0x80}, {{&(0x7f0000000900)=@qipcrtr, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000000ac0)=""/130, 0x82}, {&(0x7f0000000b80)=""/81, 0x51}, {&(0x7f0000000c00)=""/186, 0xba}, {&(0x7f0000000cc0)=""/235, 0xeb}, {&(0x7f0000000dc0)=""/221, 0xdd}, {&(0x7f0000000ec0)=""/251, 0xfb}, {&(0x7f0000000fc0)=""/240, 0xf0}], 0x8, &(0x7f0000001140)=""/1, 0x1}, 0x9}, {{&(0x7f00000011c0)=@qipcrtr, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/88, 0x58}, {&(0x7f00000012c0)=""/1, 0x1}, {&(0x7f0000001300)=""/121, 0x79}, {&(0x7f0000001380)=""/32, 0x20}], 0x4, &(0x7f0000001400)=""/86, 0x56}, 0x1}, {{&(0x7f0000001500)=@phonet, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001580)=""/148, 0x94}, {&(0x7f0000001640)=""/140, 0x8c}, {&(0x7f0000001700)=""/246, 0xf6}, {&(0x7f0000001800)=""/250, 0xfa}, {&(0x7f0000001900)=""/40, 0x28}, {&(0x7f0000001940)=""/182, 0xb6}, {&(0x7f0000001a00)=""/85, 0x55}, {&(0x7f0000001a80)=""/173, 0xad}], 0x8, &(0x7f0000001bc0)=""/167, 0xa7}, 0xfffffffa}, {{&(0x7f0000001c80)=@caif=@dbg, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001d00)=""/157, 0x9d}, {&(0x7f0000001dc0)=""/187, 0xbb}, {&(0x7f0000001e80)=""/71, 0x47}, {&(0x7f0000001f00)=""/44, 0x2c}, {&(0x7f0000001f40)=""/108, 0x6c}, {&(0x7f0000001fc0)=""/218, 0xda}, {&(0x7f00000020c0)=""/113, 0x71}, {&(0x7f0000002140)=""/147, 0x93}, {&(0x7f0000002200)=""/162, 0xa2}], 0x9}}, {{&(0x7f0000002380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002400)=""/63, 0x3f}, {&(0x7f0000002440)}, {&(0x7f0000002480)=""/214, 0xd6}, {&(0x7f0000002580)=""/145, 0x91}, {&(0x7f0000002640)=""/135, 0x87}, {&(0x7f0000002700)=""/182, 0xb6}], 0x6}, 0xffffffc0}], 0x6, 0x20, 0x0) 1.5798159s ago: executing program 3 (id=3261): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000008"], 0x50) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)={0x1f8, 0x12, 0x200, 0x70bd25, 0x25dfdbfe, {0x1f, 0x3, 0x0, 0x9, {0x4e24, 0x4e21, [0x3, 0xff, 0x7ff, 0x9], [0x0, 0x8, 0xa, 0x400], 0x0, [0xfffffff7, 0x4]}, 0xff, 0xcb}, [@INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "aa6d832c128f684f0b1109f23802b523a275072d20448ba529ff3f0b089b8d8c1deb418afd30b773e6fa992d2a4eab11f2ead3fa51363252d1208ddbc6a3e39a354801c7bd7bf5c95bd8d10a3b3c86d9c5b5d4898ab016c23f8e9c02f992e31741d083e9e603ecf2254d244af30774a98a6f1a9898b10efff7916755bec4d4121ad54a2b6c491e1e416bd595514c1119dfaf17b2b2f799449f081e3666682c6391ddd80dcf63f3732772ed86eaa2b28ac326f3a804a867689002f87ca9973a141fbcdf1b3dbb3f113a403a193d95b5d4f67c653ecfb78c07d2ec6e5b0e293bcef3197d8218a83cfb19e89c6054f581"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "588cde59df2903a6fe49864ad3b68f77bbc88e8008a81907c0e66c5b0d38e825d3bc25c3611f5076decd8b9c3a8ea96b85df9442f03bbd74535a67698ccd5ca857ac1949b43680f09169903d99b10a9ea7b05d2bd23064cea2e04273e93500b5574dbf883c77f167aaf29ac7c2ea6aca87d8e67ef260935340be2350153cf0b48216a369e6fb7519a644ea80cd1de01c6a669ca589ce6d6476b18f4e47227972fe3ee69451994fa0e14a4ad6411741bc61431a"}]}, 0xfffffffffffffeb7}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) r0 = socket(0x10, 0x803, 0x5d3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x8000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d87fa05ebff00ff"}, 0x28) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8050) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "8e00000400800100", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x1000000000, 0x12) sendfile(0xffffffffffffffff, r4, 0x0, 0xffffffff000) connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0xe, 0x9, 0xa, 0x8, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$802154_dgram(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) writev(r5, 0x0, 0x0) 1.42549921s ago: executing program 5 (id=3262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r2, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x112}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x2c020400) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}, 0x2}}, 0x10) write$cgroup_int(r6, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_type(r4, &(0x7f0000000280), 0x9) 1.422108411s ago: executing program 4 (id=3263): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x2, 0x6, 0x8d8, 0x550, 0x550, 0x250, 0x250, 0x0, 0x808, 0x808, 0x808, 0x808, 0x808, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x228, 0x250, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010101, [0xff000000, 0x1fe000000, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xff, 0xffffffff], 0x4d5, 0x0, 0x1, 0x1, 0x0, 0x16}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff], @ipv4=@broadcast, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 0x4d4, 0x3507, 0x89, 0x1, 0x16, 0x4}, {@ipv4=@remote, [0xffffff00], @ipv6=@mcast1, [0xff, 0xff000000, 0xffffff, 0xff000000], 0x4d2, 0x3505, 0x19, 0x0, 0x10, 0x9}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x32}, [0x0, 0x0, 0x0, 0xff], @ipv4=@rand_addr=0x64010100, [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d5, 0x3502, 0x16, 0x0, 0x10, 0xc}], 0x4, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x938) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.231767357s ago: executing program 1 (id=3264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c021000900600000004ffff1f3bee47e2ebd9933c371a4e6e97a051b2cd847a524327e291df64d6f173f209e02fe6be6e9dacea874b424973ca854239e44a748c0f599d2e3b9f1e43e59eb12110df5fa0840267480208ef80277ae6d1e65963905b5b83989efcea98140235db251ac21466abb5ea3484a175f8f70164928cd1f193ce3137a4ca22cab278b26c373ce2e03855451bd7b7647fc23a9bd5de55093b7d8731e48a5b93785551e0a28bcfb1c4132444804d43bc2ab30d8f5954"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000f00000001000300000000040700000005000000000000010500000023000000080000000000000700000000006100302e612e612e002e305f6100"], 0x0, 0x4f}, 0x28) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYRESOCT=r3], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000200000000000000000000330c00000000000008985f8c4402c61a78408a233b068db62ce077cdda4544349179e9772c6b06000000000000dd"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r7, 0x25, 0x2, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xfffffffffffffe13, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x802, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.120296075s ago: executing program 4 (id=3265): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000004000000e00000020000000000000000000000000000000000000000000000000000a1"], 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0xfc}}, 0x0) r1 = socket(0x1, 0x1, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r1, @ANYBLOB="0000018008000180", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x9, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd44a}, [@jmp={0x5, 0x0, 0xc, 0x8, 0x7, 0x50, 0xffffffffffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xbf, &(0x7f0000000940)=""/191, 0x41000, 0x22, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x7, 0x0, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000a80)=[0xffffffffffffffff], &(0x7f0000000ac0)=[{0x0, 0x2, 0xd, 0x6}, {0x0, 0x1, 0x7, 0x7}, {0x2, 0x1, 0xa, 0x9}, {0x4, 0x4, 0x2, 0x8}, {0x1, 0x3, 0x5, 0xa}, {0x5, 0x2, 0x9, 0x1}], 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0x2e, 0x10, &(0x7f0000000200)="81bf94acfb4ffe67923a41160db70e7543f19deead07463d2b306063a3467f2f74bdde096e55d59d09f1a9567491", &(0x7f00000002c0)=""/16, 0x0, 0x0, 0xce, 0xce, &(0x7f00000005c0)="2cb7aefd99cba4a990b5080b249a9f138ff73b820e864f61adc6e1dac88484b5d6bab47a634bace983f9d46c09d77e663102ac44ae0901f4fe563b4862fa5b0307a0136175f9b335326e3f2a9090896e52cb1284030218929ba925453a2a8df8a438eccf72a26fc39ab4f562d63890ac7be26fcdd0ba3cae0d2ea1749071d4378bec389eff59673286d92ca1609b3db1cb53f46bec2d35f9a4683674555b6fc7f4181cd064b1ec273a3d63bce761c366db3528482547977067b466ac758ef96509c4103111f24449d3fe955bfe67", &(0x7f00000006c0)="6cabffb763dba7e10f9efaf1d6e44200b3dff68792ca8f8034da255a73ef829e0409cbb0e2fe1fe65b5327087074d1d5f618e9fa78a49ab80546202ed7e538dea2de6a04d83a802f7127086a595aa81fddb4d29e5fa9dccf6229d210a45913bc05a4d5e03e9a0a4e606bcba8b3d43d473ebdf8604e8344ca478e3cbac869f0ad94b3bfc836184fff2d17655b2b9d678cb5a2220f667198aa5f7a184c1c9cf4ee99a67e2d969e5c2cae31267a5811bac151efe7ef502ec924669a87d12ae14230e7ea2a18e7aa1868485d75170217", 0x4, 0x0, 0x8}, 0x50) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="00042bbd7000fc9bdf250200000014000200fe8000000000000000000000000000aa050001000100000008000400e00000022e00070073797374656d5f753a6f626a6563745f723a6175646973705f72656d6f74655f657865635f743a73300000001400020000000000000000000000000000000001140006007767320000000000000000000000000008000500ac1414aacddd0b4b1cb23dca77e9fdf6b4751d7b6bdfc91a9a6c9bebaa330827b27e86f2b6a87abb6df8a5c2b53342e89846ed5107a9cbb96410aeab69335ef661d69f3aaf60c43b85bb4ac85bcc5bc0e98e0cc8f3338406bb3fc41d225768c1ed"], 0x98}, 0x1, 0x0, 0x0, 0x24000014}, 0x41) accept$inet(r1, 0x0, &(0x7f0000000300)) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8400, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001000)={0x50, r9, 0x1, 0x70bd23, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fc51843a70d294569ea04db1651d3788"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="355c0ebd0bab3ae799b6ff049a6e0600"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000fc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2e8, r9, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x13f, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x100, @val=0xb2, @void, @val="dcee62c0599004272ea0ef0bd63ec141"}}, @cf={0x4, 0x6, {0x10, 0x36, 0x7, 0xfc00}}, @random={0x81, 0xf2, "d9967a1339ff851daa9bb58755b52ee5d2799ada9b4df51d302a5565d8e17d4b0cf62b3d3ab00b1d60216095a6a1fab5eb0a89f50044c6380bbc6432f317e91c3204ed32ad2f24e74b72f5f35f968269b60c1348ddc5fbb9e13288647d73733ca60e3b179bf70644894c4002303d0892c320a7ff7e504fbf325fd5deb8fbe3ca26e4e178676596cb5d5f953ef46ee8664f9cd46b954d42345783bb991525c3db18a0df9e731f55350806c319458a37b0447edc5c1351529a27bf102ce6217bfeef2ba07d4df6dea8a0ef56a101dd6ee20d97820793354e5ba420965534f771fc2e23e6ebdb91751f7cf5ca66abb225d88344"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd7, 0x4, @broadcast, 0x9, @value, 0x3, 0x9, @device_a, 0x32d7}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x73, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0xa}, 0x6, 0x81, @broadcast, 0x57525ba0, 0x1, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x2}}, @peer_mgmt={0x75, 0x16, {0x0, 0x6, @val=0x7, @void, @val="a4156948d6f1ca39b95e676c8ae44b4b"}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x1, 0x0, {0x101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x1, 0xffffffff, 0x2}}, @ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x0, @device_a, 0x8, 0x3, 0x8}}]}, @NL80211_ATTR_IE={0xe8, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @tim={0x5, 0xc3, {0xa, 0x34, 0x9, "3069ff242db35702dbce74db4be58c5a1adf557c483590875f3b9a153e2c7c33298bb0d66418c240787511ac68f0bdf9532e8c23f633028e507e9b5b420dc9d69deaea3defd6d60af19d9e525cc6f494dd1a086cfea968012b51e43260ac8fc15e0e76cac90e543cc91a8d0dc13af045101f33e07ac03afe259f7747497d3e5530feb487908aa8731478331c5ac930fddb5ffab4f32420484ced810671aff0f95317dc0ab5877d75cd166f293625ed2274b618d8e21e6419b3c45574b0a8ebab"}}, @link_id={0x65, 0x12, {@random="90cfb64f590e"}}, @mesh_chsw={0x76, 0x6, {0xf, 0x0, 0x37, 0x401}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x16, 0x2a, [@ssid={0x0, 0x10, @random="6c9b964050ba11feb5b6b26ed548fa12"}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x24000094}, 0x20004000) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x40000040) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 863.203135ms ago: executing program 2 (id=3167): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x6, 0x4, 0x4, 0xa, 0x50c, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40018022, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x10}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x9, 0x6b, &(0x7f00000002c0)=""/107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f0000008a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0xb}, {0x0, 0x3}, {0x7, 0x1}]}]}}, 0x0, 0x46, 0x0, 0x1, 0x3}, 0x28) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a01"], 0x40}, 0xfffe) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0xc742289881583937) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r9, 0xffffffffffffffff, 0x4, r4}, 0x10) 746.235393ms ago: executing program 5 (id=3266): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f00000002c0)='.,((/\x00', 0x50000, &(0x7f00000003c0)={@align=0x1, {0x6, 0x6, 0x7}}, 0x2, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xc}, {[0x9, 0x10000, 0xa, 0xfe]}, 0x2, 0xe5, &(0x7f0000000540)=""/229}) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) connect$packet(r2, &(0x7f00000006c0)={0x11, 0xf7, r4, 0x1, 0xa, 0x6, @local}, 0x14) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f80)=ANY=[@ANYBLOB="1c00f0006800e9780000000000000000040004002938c253a3e0a84904ad27abb4b10e4a6074d94b643f1ed8c5a7ce956a2812f5656412a11ea1ff83086f94e6b6fa719acf6386ae02d62b7f55578d44a29a4af3c85d50c1c3848a0b0061109d0e6f21502f3734d22e3e9677423f021c17a528ba6e"], 0x1c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}]}, {0x0, [0x61]}}, &(0x7f0000000f40)=""/4089, 0x2f, 0xff9, 0x1, 0x80000000}, 0x28) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000f00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000002440)={0x290, 0x13, 0x2, 0x70bd25, 0x25dfdbfc, {0x2a, 0x8, 0x0, 0xfc, {0x4e21, 0x4e20, [0x6, 0x0, 0x3], [0x9, 0x5, 0x8e, 0x7], r4, [0xa, 0x5]}, 0x5, 0xc000}, [@INET_DIAG_REQ_BYTECODE={0xb, 0x1, "83f9b816e57b1f"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "2ccca415817ce5a01190e899bb6c61a51bfeb6789746c0a9896c5e9afb683ce31743e33b9dd27cf068f9434d5277a794cf41147cceffe5551c1b3509aa0f9fa4c767fdcec9a19c1e769fc433601253f3bcaaf99bde7588e1b09b49759939e7526fce47d4023c8a749b361276642ca47c911ff438135625623a2a9f66a2d16c41b5381c68c515d15dd1bdaea6711247d9e48396537a1f0653ea0104000000000000f28cfd19283ddd70eb14e33165da94501c4188dcf38f86e5a8cf30406db0ecb7e6995667c034c9db7f8b94b99d0c83e60314cd"}, @INET_DIAG_REQ_BYTECODE={0x12d, 0x1, "5fd7a8c044ea8fbed77357de9b92d0a5e157e5b16cea59aac6e4e5d3e23994c5dc791db3d81e74db1a9470d68017b1ea234c81cd5d96169296972ebadd9e5d5b03753c92e0a10d4a904cf057034c9a731b9397de01dbe46cdc4830685244def10f600174bb212f957587d2baa28887c08e4e665203b4604b30274aac7b152758f7031ece95195740ee8e15768c83112c728134f979a18ad22374fcb749b21ae5c68e994e13d89bc1b1182c5a729552d61cec320ef3a7f2d3280b2afd94af0100f8bb2f1d87cacb3c43159e5f626ffdd762f7a85a7b60a069dc456898c80598dd1090c6b8ce48a91d126a24234da486b1fa9456a39891e53b5a1daba4bfc4bfb62a035b4ec9f5221f49a9ba6a71c0a1703668e91b4ce4ff14fb48a38db2d3deab65897e427df98e71da"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "b7da76a3664a01feb432670117d550d3b7c9ea4e3ca4406aaa5e49cad87f0248d487cbd5489e9fce5e"}]}, 0x290}, 0x1, 0x0, 0x0, 0x480c0}, 0x4004) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000002380)={@ll={0x11, 0x9, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {&(0x7f0000002240)=""/209, 0xd1}, &(0x7f0000002340), 0x6}, 0xa0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1cfc0200", @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="24000000180009042000000000000000000000060000000008001e0001000000fe257add8c759f7a0607"], 0x24}}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x2, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 582.03772ms ago: executing program 3 (id=3267): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) write$bt_hci(r3, &(0x7f0000000240)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0xd}}}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0xfffffffe}, 0x8}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000200000001000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001600)={0x1, {{0xa, 0x4e24, 0x9, @mcast2, 0x2}}, 0x1, 0x5, [{{0xa, 0x4e20, 0x9, @private1, 0x1}}, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80000000}}, {{0xa, 0x4e20, 0x3, @mcast2, 0x2}}, {{0xa, 0x4e24, 0xde, @mcast1, 0x2}}]}, 0x310) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r6}, &(0x7f0000001300), &(0x7f0000001340)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r6}, &(0x7f0000001300), &(0x7f0000001340)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)=@newtaction={0xe80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7, [{0x8001, 0x11f, 0x7, 0x5c4c, 0x0, 0xf}]}, [{0x8, 0xffbff000, 0x2, 0xffff, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x6, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d76, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7, 0x9d}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x5, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xcc9, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0x3, 0x1000, 0x1ff, 0x9, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0xbd, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x8, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x3, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x9, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x2}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x1}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0xffffffff}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x2, 0xc, 0x0, 0x6}, {0x400, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x9, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0xb, 0x8, 0xd, 0x700000, 0x5, 0x4}, {0xcab, 0xf, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x1ff, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x9, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x4000b}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 448.126572ms ago: executing program 3 (id=3268): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000100)='\x10', 0x440800, &(0x7f0000000140)={@align=0x7af6, {0x80, 0x1, 0x3, 0x5}}, 0x803, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000004c0)=0x2}, 0x3, &(0x7f0000000500)=[{0x1, 0x7fff, &(0x7f0000000240)='syztnl0\x00', &(0x7f00000002c0)="90efab72c7903fb19a4f8f401e812e01754b4ae2319dfebb65f997d99f8efb35c19f3a21c76e27e83289c5ad051a584916b144425d", 0x35, 0x22}, {0x2, 0x8, &(0x7f0000000340)='\x00\xfa\x00\x00\x00\x00\x00\x00', &(0x7f0000000380)="f464ce09ff02ffc1dd276c3958b3ed901af73b66dca3318024aa03ee09ba4e89373f52cec675b674aa570b370ce10a3bbfddc233a21ac9e5756c560b8940f027a5d3e3fef1f001a05d3dd07929ac0b4bbbee97c62becb701573c9fd9a1df72", 0x5f, 0x32}, {0x3, 0x100, 0x0, &(0x7f0000000800)="93eb8eea1bdbc847d8bcec658d2a821c6b53675fc9693dc1bd93cc8264178961683fe28b", 0x24, 0x20}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000100)='\x10', 0x440800, &(0x7f0000000140)={@align=0x7af6, {0x80, 0x1, 0x3, 0x5}}, 0x803, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000004c0)=0x2}, 0x3, &(0x7f0000000500)=[{0x1, 0x7fff, &(0x7f0000000240)='syztnl0\x00', &(0x7f00000002c0)="90efab72c7903fb19a4f8f401e812e01754b4ae2319dfebb65f997d99f8efb35c19f3a21c76e27e83289c5ad051a584916b144425d", 0x35, 0x22}, {0x2, 0x8, &(0x7f0000000340)='\x00\xfa\x00\x00\x00\x00\x00\x00', &(0x7f0000000380)="f464ce09ff02ffc1dd276c3958b3ed901af73b66dca3318024aa03ee09ba4e89373f52cec675b674aa570b370ce10a3bbfddc233a21ac9e5756c560b8940f027a5d3e3fef1f001a05d3dd07929ac0b4bbbee97c62becb701573c9fd9a1df72", 0x5f, 0x32}, {0x3, 0x100, 0x0, &(0x7f0000000800)="93eb8eea1bdbc847d8bcec658d2a821c6b53675fc9693dc1bd93cc8264178961683fe28b", 0x24, 0x20}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0xf7, 0x0, 0x6, 0x6, @remote, @local, 0x8000, 0x0, 0x3, 0x1ff}}) sendmsg$nl_route(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x24098, 0x301}, [@IFLA_LINK={0x8, 0x5, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0xa, 0xd, 0x0, 0x68, @loopback, @mcast2={0xff, 0x5}, 0x40, 0x40, 0xe3e1, 0xd00}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r8, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, 0x0, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r0, 0x0, &(0x7f0000000980)=@udp6=r1, 0x4}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000dbb3298b018c39b4e6797f6b0000002400128009dd0000626f6e6400000000140002"], 0x44}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x60600) setsockopt$sock_timeval(r5, 0x1, 0x43, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$mptcp(0x0, r6) (async) syz_genetlink_get_family_id$mptcp(0x0, r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, 0x0, 0x20000004) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, 0x0, 0x20000004) 278.651569ms ago: executing program 5 (id=3269): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x10, 0x40, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x50) close(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x3, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.772671ms ago: executing program 5 (id=3271): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x28}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0x1000}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xc8, @private2, 0xffff}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="784eb1b98b2e2db095557d9d9d7e9fbf193a0cebaf4ba8162c9f004ebe600be264b3bcf6d3c3e2ba5d8c7c88f7e24706af0139493114978144e60c265d51a5cc34c26208a6b93d588554276d2954c373678b311a40031f1f229f2f6ba46941484adf711d1878ce2fc539ac1aeb665d4de0265119f5bf8b5b8aff402324d00abae73b82c94f06bed69a97e0f43208de0644c5ed4769ffa8d975f4a38fe41fabc2b21e8b09f11e07359156df94e29b7319f0cc45d6e1a84d2d89942740111ae6f9115baea53a84be0e588cc4524d241c30602643ada94ef81afa19a74e873b4acb1d1707", 0xe3}, {&(0x7f0000000280)="7f34f869a475476c8f42c1e893a6aa0a5d036aab3dbe1d6adbdccc11d813ffe96cd16f06b515454bfafa7880ca58a816631c6678c7b7fd807092d06cf9755a41597c23d925373d96764e42027548bd6a3ed253f3a290a2d17c1f364a1680dd720314f04e10a134dfcd5fbc9f37c1ecb70a1567e2d8715039f43cdb0e998abd513535d3d0367762fd55adba81bd0310a7ba695ff1a97ebbb5534d420b26899e3198b997c5ff76bf2d9acb7f1e93bde33370589c24db609b0ac3efbd74f3bd4e5b30502bc6de814e8cc15e8c2cb6e2b4ecdcc093358ba075627cab5d464987a2983bff03b3ad9a100c5fbcb03be22f9ccf44e748", 0xf3}], 0x2, &(0x7f0000000400)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0xffffff83}}], 0x30}}, {{&(0x7f0000000440)={0xa, 0x4e22, 0x80, @private1, 0xea}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000480)="9f23c449c62f01018faa2186fb3bf4d281c90e95ec1b31b584c940a87d6707089bf94b3439be00079d7c63d9aa773d7c14bf6733d4a85d7bb2cb2c8436399afe154da102c3c5aa5e1d13bc15e988248e0e8ec346ae6d58c3f01968a06ae57f76f0f0f80d76e8f948d5666861d5d41ef5d86de0ba60777890c7f36117f5dc7aa16002bb034e7b55589e36b2dc9fa3ec5dc864f9cf8ee2273977208bf6adc39105b45f7d2a7aef8e33c06d7a52ef5b3183ea8fd50b3efe4ace5b821ba1fa3f4f7707d3af5dd1af603f462ef4c5ff43d6d16b1ac746f732043235", 0xd9}, {&(0x7f0000000580)="7f2940858f2fc412def01c9a7f2629b7a2d1d84aa973674b6b9dcd6fd775d79806f3e1238adc48ef68c1cc573ff4b75b52c7bdeaf4851cd6a475d53c854eb97a13c08d41f69dfa6ebc2fc9db037de43bc124b68e44e6c4684c411de0fb1db05b434eec85e8a402281c674e07860fce963074f8b869f12a6d139bd9aa488ae42b1c9f9d6ada08883cc778c601d95436cf18329d7df66182c97a705d54892fe28b3bfa0b5b8b4fbc22bcd5bf35fa06c6b50b986c1c73dd22f24d65fc32cba14aa32baf45203d95c4b66ec6a413f18135f3d88535e13ea99b5939137a4b85f5", 0xde}, {&(0x7f0000000680)="25d39480403c908dfb025a7615ec7b93a3bd0a2c5b20f168f738ff71dfe88b8afeba", 0x22}], 0x3, &(0x7f0000000740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hopopts_2292={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0x8, 0x4, 0x1, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffc9e7}}], 0xb8}}, {{&(0x7f0000000800)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffff7}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000840)="f98b8202cdc4a9843d56b3e7407e1e91fff59158cd6d13094d97db2d3bf09d159c69546910df6710711e33e89e7557f82e4bcb1afcb337203b38774196bc877b78fbd0ed098c027876201bf38390ca1a517100278afdeea696826914dfe5b8f7c31a4588b7342b4f3e53ae00dc7224c689952d5921a0d858fb26d237b71241325c4fb1ee577822411aab0261fa9c07058cc94ed82ce1570e451e0de85e6f6dbd50d73524bc872f775b82faf8d474298bc46708f19c6005945f3e3c0c7e997115056ed8700166b1af04", 0xc9}], 0x1, &(0x7f0000000a80)=[@dstopts={{0x70, 0x29, 0x37, {0x2e, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x48}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0xbb, 0x952, [0x9, 0x8, 0x1800000]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x6, [0x400, 0x5, 0x2]}}, @ra={0x5, 0x2, 0x800}, @pad1]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0xe, 0x7, '\x00', [@generic={0xa0, 0x32, "c8af55bed8edae7f1f3baae2fda45b731981494cdbeffd5fc41d1b9ff71922d781cebdbb71e65e00739382f28091a20ca42a"}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dstopts_2292={{0x10e0, 0x29, 0x4, {0x96, 0x218, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0xfc, 0x3, [0x8, 0x7, 0x8000000000000001, 0x81, 0x0, 0x56]}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x46, 0x8, [0x5, 0xd31, 0xa, 0x8, 0x4, 0x5, 0xc25d]}}, @generic={0x98, 0x2c, "455d679cca7cdee4aa7c4f368349c1c490a0c1f57c948436c568664de12ed0bba10d5b885bd8b9dd03c21e96"}, @hao={0xc9, 0x10, @mcast1}, @generic={0x4, 0x1000, "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"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2f, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x33, 0xc, 0x1, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x0, 0x7, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x8}}}], 0x12f8}}], 0x3, 0x8004) 0s ago: executing program 3 (id=3272): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(0x3) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) splice(r1, &(0x7f0000000080)=0x6, r0, &(0x7f0000000180)=0x6, 0xfffffffffffffff9, 0xc) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000000)="4c00000011001400000000000000000000000000200000", 0x17) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000010"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r2}, &(0x7f0000000540), 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x2, 0x12) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x83, 0x9ffffc}) (async) r5 = socket$alg(0x26, 0x5, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2d}, @local, [0x1feffffff, 0xff, 0xffffffff, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xffffff00], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x2d, 0xc, 0x3, 0x50}, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@frag={{0x30}, {[0x2, 0x9], 0x33, 0xa}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0x0, 0xffffff00, 0xff], [0xff7fffff], 'pim6reg1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x62, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xd70, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaffffaa08004f0000500000000000059078ac1414000a010100441405030000000000000000ffffffff00000000890fceffffffffac141415ac1414180702000000000001000fe4bab4de48cc3e70e28b546f6969a8eb087802", @ANYRESOCT=r6, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) (async) r7 = socket(0x2b, 0x80801, 0x1) bind$bt_hci(r7, 0x0, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) getpeername$packet(r4, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="9c3d00"/20, @ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="05000000050000000400000000001000"/28], 0x50) (async, rerun: 32) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async, rerun: 32) writev(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(r3, &(0x7f0000000300)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_subtree(r9, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) kernel console output (not intermixed with test programs): ][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 336.616869][T14882] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2186'. [ 336.637455][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 336.768876][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 336.930641][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 336.962793][T14898] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 337.089658][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 337.181690][T14909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.292615][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 338.354878][T14955] netlink: 'syz.3.2206': attribute type 1 has an invalid length. [ 338.523507][T14952] bond9: (slave geneve4): making interface the new active one [ 338.548306][T14952] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 338.569254][T14482] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.594779][T14482] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.646259][T14482] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.701434][T14482] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.607496][T15017] atomic_op ffff888055e8d1e0 conn xmit_atomic 0000000000000000 [ 339.766172][T15013] __nla_validate_parse: 6 callbacks suppressed [ 339.766226][T15013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2216'. [ 339.835831][T15013] nbd: device at index 64 is going down [ 339.924184][T15031] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2223'. [ 339.978421][T15031] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2223'. [ 340.146582][ T5609] udevd[5609]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 340.216209][T15047] netlink: 'syz.2.2225': attribute type 1 has an invalid length. [ 340.318295][T15047] bond10: (slave bridge8): Enslaving as a backup interface with an up link [ 340.338193][T15047] macvlan3: entered promiscuous mode [ 340.345584][T15047] macvlan3: entered allmulticast mode [ 340.352305][T15047] bond10: entered promiscuous mode [ 340.357611][T15047] bridge8: entered promiscuous mode [ 340.368017][T15047] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 340.392907][T15047] bond10: left promiscuous mode [ 340.400463][T15047] bridge8: left promiscuous mode [ 340.512810][T15044] xt_CT: No such helper "netbios-ns" [ 340.782928][T15059] syzkaller0: entered promiscuous mode [ 340.788476][T15059] syzkaller0: entered allmulticast mode [ 340.798906][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 340.874347][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 340.932378][T15066] netlink: 'syz.1.2230': attribute type 1 has an invalid length. [ 341.063954][T15073] netlink: 'syz.0.2232': attribute type 1 has an invalid length. [ 341.271245][T15066] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.355322][T15085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.408195][T15071] bond7: (slave veth9): Enslaving as an active interface with a down link [ 341.449356][T15092] net_ratelimit: 25 callbacks suppressed [ 341.449401][T15092] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 341.454499][T15074] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 341.476590][T15074] bond7: (slave batadv1): making interface the new active one [ 341.492829][T15074] batadv1: entered promiscuous mode [ 341.503281][T15074] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 341.515179][T15075] veth0_to_bond: left allmulticast mode [ 341.564183][T15077] bond7: (slave veth11): Enslaving as an active interface with a down link [ 341.698838][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 341.767840][T15099] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 341.776994][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 341.818898][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 341.931419][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 342.058983][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 342.096869][T15112] tipc: Enabling of bearer rejected, failed to enable media [ 342.157814][T15115] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2243'. [ 342.188941][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 342.209412][T15116] ip_tables: iptables: counters copy to user failed while replacing table [ 342.223984][T15115] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2243'. [ 342.257329][T15115] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 342.385482][T15115] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.439277][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 342.672313][T15132] FAULT_INJECTION: forcing a failure. [ 342.672313][T15132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.703211][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 342.716612][T15132] CPU: 1 UID: 0 PID: 15132 Comm: syz.2.2247 Not tainted syzkaller #0 PREEMPT(full) [ 342.716652][T15132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.716665][T15132] Call Trace: [ 342.716674][T15132] [ 342.716683][T15132] dump_stack_lvl+0xe8/0x150 [ 342.716719][T15132] should_fail_ex+0x40c/0x560 [ 342.716752][T15132] _copy_from_user+0x2d/0xb0 [ 342.716785][T15132] dgram_setsockopt+0x115/0x640 [ 342.716811][T15132] ? __pfx_dgram_setsockopt+0x10/0x10 [ 342.716831][T15132] ? aa_sock_opt_perm+0xff/0x1a0 [ 342.716854][T15132] ? sock_common_setsockopt+0x36/0xc0 [ 342.716877][T15132] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 342.716900][T15132] do_sock_setsockopt+0x17c/0x1b0 [ 342.716931][T15132] __x64_sys_setsockopt+0x13d/0x1b0 [ 342.716960][T15132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.716985][T15132] do_syscall_64+0x174/0x580 [ 342.717018][T15132] ? clear_bhb_loop+0x70/0xc0 [ 342.717044][T15132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.717065][T15132] RIP: 0033:0x7f3578b9e0d9 [ 342.717085][T15132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.717103][T15132] RSP: 002b:00007f3579a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 342.717133][T15132] RAX: ffffffffffffffda RBX: 00007f3578e25fa0 RCX: 00007f3578b9e0d9 [ 342.717149][T15132] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 342.717161][T15132] RBP: 00007f3579a87090 R08: 0000000000000004 R09: 0000000000000000 [ 342.717174][T15132] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001 [ 342.717187][T15132] R13: 00007f3578e26038 R14: 00007f3578e25fa0 R15: 00007ffdc857df18 [ 342.717221][T15132] [ 343.448891][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 343.578914][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 344.257086][T15176] xt_hashlimit: size too large, truncated to 1048576 [ 345.152494][T15203] netlink: 'syz.1.2267': attribute type 1 has an invalid length. [ 345.559390][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2270'. [ 345.675086][T15218] ipvlan3: entered allmulticast mode [ 346.198098][T15237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2274'. [ 346.240984][T15239] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 346.481681][T14478] net_ratelimit: 18 callbacks suppressed [ 346.481739][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 346.538866][T15248] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 346.639165][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 346.943428][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 347.010046][T15264] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 347.068844][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 347.201333][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 347.243508][T15276] netlink: 'syz.4.2282': attribute type 1 has an invalid length. [ 347.296158][T15277] netlink: 'syz.4.2282': attribute type 1 has an invalid length. [ 347.328542][T15276] erspan0: entered promiscuous mode [ 347.459434][T14483] bond4: (slave bridge0): failed to get link speed/duplex [ 347.590071][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 347.700136][T15285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2285'. [ 347.716793][ T5739] bond_slave_0: entered promiscuous mode [ 347.724113][ T5739] batadv0: entered promiscuous mode [ 347.911593][T15290] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2284'. [ 347.927677][T15285] x_tables: duplicate underflow at hook 1 [ 347.958923][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2283'. [ 347.973854][T15290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2284'. [ 348.068648][ T5708] bond_slave_0: left promiscuous mode [ 348.077586][ T5708] batadv0: left promiscuous mode [ 348.227608][T15300] netlink: 'syz.4.2287': attribute type 61 has an invalid length. [ 348.249400][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 348.419007][T14483] bond4: (slave bridge0): failed to get link speed/duplex [ 348.549223][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 348.852951][T15312] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2289'. [ 348.892155][T15312] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2289'. [ 349.039599][T15317] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2290'. [ 349.286918][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2293'. [ 349.825686][T15343] netlink: 'syz.3.2296': attribute type 2 has an invalid length. [ 350.663529][T15379] __nla_validate_parse: 1 callbacks suppressed [ 350.663603][T15379] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2303'. [ 350.951183][T15386] vlan5: entered allmulticast mode [ 350.963018][T15385] syzkaller0: entered promiscuous mode [ 350.981846][T15385] syzkaller0: entered allmulticast mode [ 351.236081][T15403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2308'. [ 351.276766][T15403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2308'. [ 351.384243][T15414] netlink: 'syz.1.2311': attribute type 2 has an invalid length. [ 351.499697][T15402] netlink: 'syz.0.2307': attribute type 2 has an invalid length. [ 351.509674][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2312'. [ 351.537637][T15409] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2308'. [ 351.549543][T14478] net_ratelimit: 19 callbacks suppressed [ 351.549561][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 351.569619][ T5616] block nbd2: Receive control failed (result -32) [ 351.578311][ T5624] block nbd2: Receive control failed (result -32) [ 351.878952][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 351.907299][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2316'. [ 352.050144][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 352.258868][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 352.272276][T15441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2317'. [ 352.401582][T14483] bond4: (slave bridge0): failed to get link speed/duplex [ 352.554706][ T5609] udevd[5609]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 352.559359][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 352.635132][ T5609] udevd[5609]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 353.109299][T15444] sock: sock_timestamping_bind_phc: sock not bind to device [ 353.156256][T15456] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 353.212598][T15456] gtp1: left promiscuous mode [ 353.225443][T15456] gtp1: left allmulticast mode [ 353.238043][T15456] bond3: left promiscuous mode [ 353.257460][T15456] bond3: left allmulticast mode [ 353.309865][T15456] ip6gre1: left allmulticast mode [ 353.404108][T15456] veth5: left allmulticast mode [ 353.459053][T14482] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.498103][T14482] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.569344][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 353.598087][T15462] wg2 speed is unknown, defaulting to 1000 [ 353.616019][T14483] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.653726][T14483] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.687505][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2327'. [ 353.697073][T14483] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.728340][T14483] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.739187][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'. [ 353.928935][ T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.962592][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.319378][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 354.356718][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2332'. [ 354.370873][T14482] batadv1: left promiscuous mode [ 354.499818][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 354.641179][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 355.085709][T15527] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 355.766790][T15537] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.774379][T15537] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.959373][T15537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.014156][T15537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.217249][T15553] __nla_validate_parse: 3 callbacks suppressed [ 356.217270][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 356.272385][T15556] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2345'. [ 356.469521][ T36] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.496667][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.531864][ T36] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.584314][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.624764][ T36] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.666909][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 356.680054][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.719694][ T36] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.753831][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.789683][T15572] net_ratelimit: 6 callbacks suppressed [ 356.789702][T15572] openvswitch: netlink: Missing key (keys=40, expected=100) [ 356.819095][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 356.938870][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 357.059612][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 357.142463][T15584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2353'. [ 357.200047][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 357.343297][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 357.390023][T15589] syzkaller0: left promiscuous mode [ 357.469412][T15589] syzkaller0: left allmulticast mode [ 357.509333][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 357.669048][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 357.807980][T15602] netlink: 'syz.1.2361': attribute type 1 has an invalid length. [ 357.819381][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 357.923800][T15602] 8021q: adding VLAN 0 to HW filter on device bond8 [ 358.057981][T15609] macvlan2: entered promiscuous mode [ 358.111232][T15609] macvlan2: entered allmulticast mode [ 358.146322][T15609] bond8: entered allmulticast mode [ 358.162542][T15609] bond8: entered promiscuous mode [ 358.191737][T15609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.214788][T15609] team0: Port device macvlan2 added [ 358.229464][T14478] bond4: (slave bridge0): failed to get link speed/duplex [ 358.270135][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'. [ 359.798836][T15665] syzkaller0: entered promiscuous mode [ 359.816075][T15665] syzkaller0: entered allmulticast mode [ 360.113156][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2380'. [ 360.113182][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'. [ 360.135875][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2380'. [ 360.177511][T15679] syzkaller0: entered promiscuous mode [ 360.218488][T15679] syzkaller0: entered allmulticast mode [ 360.301408][T15686] netlink: 'syz.1.2382': attribute type 1 has an invalid length. [ 360.417389][T15682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 360.429312][T15682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 360.657376][T15686] 8021q: adding VLAN 0 to HW filter on device bond9 [ 360.787639][T15689] bond9: (slave gretap3): making interface the new active one [ 360.805589][T15689] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 360.972113][T15701] atomic_op ffff88807b1839e0 conn xmit_atomic 0000000000000000 [ 361.013439][T15702] netlink: 'syz.3.2386': attribute type 1 has an invalid length. [ 361.054651][T15703] netlink: 'syz.3.2386': attribute type 1 has an invalid length. [ 361.092300][T15707] netlink: 'syz.1.2387': attribute type 1 has an invalid length. [ 361.106996][T15702] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 361.138296][T15703] bond10: entered promiscuous mode [ 361.154155][T15703] 8021q: adding VLAN 0 to HW filter on device bond10 [ 361.258548][T15700] bond7: option downdelay: invalid value (18446744073709551487) [ 361.309265][T15700] bond7: option downdelay: allowed values 0 - 2147483647 [ 361.345050][T15700] bond7 (unregistering): Released all slaves [ 361.618073][T15707] 8021q: adding VLAN 0 to HW filter on device bond10 [ 361.959318][T15710] bond10: (slave veth13): Enslaving as an active interface with a down link [ 362.030503][T15712] team0: Port device dummy0 removed [ 362.097050][T15712] bond10: (slave dummy0): Enslaving as an active interface with a down link [ 362.276246][T14484] net_ratelimit: 15 callbacks suppressed [ 362.276267][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 362.449285][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 362.458163][T15749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'. [ 362.570539][T15750] syzkaller0: entered promiscuous mode [ 362.610176][T15750] syzkaller0: entered allmulticast mode [ 362.659078][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 362.703534][T15750] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.2391'. [ 362.780615][T14483] bond4: (slave bridge0): failed to get link speed/duplex [ 362.829416][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 363.018003][T15764] netlink: 'syz.4.2396': attribute type 10 has an invalid length. [ 363.026292][T14483] bond4: (slave bridge0): failed to get link speed/duplex [ 363.149536][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 363.269650][T14483] bond4: (slave bridge0): failed to get link speed/duplex [ 363.359871][T15771] batadv_slave_0: entered allmulticast mode [ 363.366089][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 363.388528][T15771] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 363.415547][T15776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2399'. [ 363.430831][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 363.442624][T15772] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 363.465021][T15777] syz_tun: entered allmulticast mode [ 363.538976][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 363.575453][T15769] wg2 speed is unknown, defaulting to 1000 [ 363.744912][T15779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2400'. [ 365.004159][T15817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2409'. [ 365.004863][T15815] Unknown options in mask 6 [ 365.024465][T15817] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 367.380385][ T1118] net_ratelimit: 30 callbacks suppressed [ 367.380405][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 367.453433][T15901] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2426'. [ 367.541865][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 367.622271][T15905] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2425'. [ 367.668903][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 367.861636][T15908] syzkaller0: entered promiscuous mode [ 367.906262][T15908] syzkaller0: entered allmulticast mode [ 367.940582][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 368.190113][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 368.278951][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2435'. [ 368.323466][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 368.448883][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 368.510014][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 368.547070][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 368.583277][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 368.636110][T15950] netlink: 'syz.1.2440': attribute type 9 has an invalid length. [ 368.644805][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 368.674446][T15950] sctp: [Deprecated]: syz.1.2440 (pid 15950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.674446][T15950] Use struct sctp_sack_info instead [ 368.839908][T15961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.293509][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 369.683633][T15994] xt_policy: output policy not valid in PREROUTING and INPUT [ 369.898204][T16004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2449'. [ 370.328086][T16017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2453'. [ 373.094909][ T5269] veth0_macvtap: left promiscuous mode [ 373.119388][ T1118] net_ratelimit: 4 callbacks suppressed [ 373.119409][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 373.250853][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 373.352703][T16044] xt_connbytes: Forcing CT accounting to be enabled [ 373.378562][T16044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.396356][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 373.476949][T16048] bridge0: port 1(vlan0) entered blocking state [ 373.502582][T16048] bridge0: port 1(vlan0) entered disabled state [ 373.529697][T16048] vlan0: entered allmulticast mode [ 373.570926][T16048] geneve0: entered allmulticast mode [ 373.642995][T16048] vlan0: entered promiscuous mode [ 373.670012][T16048] geneve0: entered promiscuous mode [ 373.699439][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 373.829236][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 373.979223][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 374.119755][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 374.261412][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 374.410841][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 374.549548][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 374.704559][T16087] ip6gre2: entered promiscuous mode [ 374.735146][T16087] ip6gre2: entered allmulticast mode [ 374.761578][T16089] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.800188][ T1118] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.833396][ T6825] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.844813][ T1118] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.865777][T16101] netlink: 'syz.1.2472': attribute type 10 has an invalid length. [ 374.901764][T16099] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2472'. [ 374.959620][ T6826] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 375.154537][T16101] team0 (unregistering): Port device team_slave_1 removed [ 375.195938][T16101] bond8: left allmulticast mode [ 375.218911][T16101] bond8: left promiscuous mode [ 375.232491][ T6826] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 375.264507][T16101] team0 (unregistering): Port device macvlan2 removed [ 375.750887][T16124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2476'. [ 376.231697][T16131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2479'. [ 376.263595][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'. [ 376.288263][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 376.331459][T16131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2479'. [ 376.466984][T16136] xt_CT: No such helper "syz1" [ 376.955347][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2482'. [ 377.261805][T16145] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2482'. [ 377.649569][T16180] netlink: 'syz.2.2489': attribute type 1 has an invalid length. [ 377.719408][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2489'. [ 377.872959][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 378.096732][T16189] wg2 speed is unknown, defaulting to 1000 [ 378.328841][T14484] net_ratelimit: 24 callbacks suppressed [ 378.328865][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 378.513496][T16200] syzkaller0: left promiscuous mode [ 378.530928][T16200] syzkaller0: left allmulticast mode [ 378.570654][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.600027][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 378.719018][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 378.850660][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 378.878959][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.998938][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 379.038504][T16223] bridge0: port 4(veth0) entered blocking state [ 379.058324][T16223] bridge0: port 4(veth0) entered disabled state [ 379.076425][T16223] veth0: entered allmulticast mode [ 379.101995][T16223] veth0: entered promiscuous mode [ 379.128634][T16223] bridge0: port 4(veth0) entered blocking state [ 379.135174][T16223] bridge0: port 4(veth0) entered forwarding state [ 379.477995][T16215] wg2 speed is unknown, defaulting to 1000 [ 379.486087][T16232] netlink: NAT attribute has 1 unknown bytes [ 379.492391][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 379.514851][T16232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.936190][T16240] __nla_validate_parse: 2 callbacks suppressed [ 379.936210][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'. [ 380.031907][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 380.087603][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'. [ 380.129076][T16242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2506'. [ 380.210302][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 380.621996][T16252] syzkaller0: entered promiscuous mode [ 380.633259][T16254] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 380.655182][T16252] syzkaller0: entered allmulticast mode [ 380.701346][T16261] tipc: Enabled bearer , priority 0 [ 380.855778][T16251] tipc: Resetting bearer [ 380.930149][T16251] tipc: Disabling bearer [ 380.994226][T16271] IPv6: Can't replace route, no match found [ 381.018041][T16271] IPv6: Can't replace route, no match found [ 381.047059][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2514'. [ 381.305590][T16282] xt_CONNSECMARK: invalid mode: 252 [ 381.520431][T16289] netlink: 'syz.2.2521': attribute type 15 has an invalid length. [ 381.831636][T16296] netlink: 'syz.1.2525': attribute type 1 has an invalid length. [ 381.903900][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'. [ 381.991850][T16305] netlink: 'syz.3.2522': attribute type 11 has an invalid length. [ 382.076469][T16296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2525'. [ 382.127031][T16296] bond0: (slave veth0_to_bond): Releasing active interface [ 382.162100][T16296] bond11: (slave veth0_to_bond): making interface the new active one [ 382.174148][T16296] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 382.507124][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.733050][T16301] veth1_vlan: left promiscuous mode [ 382.742781][T16301] veth0_vlan: left promiscuous mode [ 382.753774][T16301] veth0_vlan: entered promiscuous mode [ 382.770935][T16301] veth1_vlan: entered promiscuous mode [ 382.792337][T16301] veth1_macvtap: left promiscuous mode [ 382.804172][T16301] veth0_macvtap: entered promiscuous mode [ 382.814812][T16301] veth1_macvtap: entered promiscuous mode [ 382.863368][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.870705][ T1118] bridge0: port 2(bridge_slave_1) entered listening state [ 383.080467][ T6826] bridge0: port 1(vlan0) entered blocking state [ 383.087180][ T6826] bridge0: port 1(vlan0) entered listening state [ 383.221931][T16369] ip6gretap0: entered promiscuous mode [ 383.292155][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2529'. [ 383.317733][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2529'. [ 383.405754][T16403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2530'. [ 383.470469][ T1118] net_ratelimit: 16 callbacks suppressed [ 383.470519][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 383.508016][T16399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2529'. [ 384.153506][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 384.202775][T16411] syzkaller1: entered allmulticast mode [ 384.809017][T14481] bond4: (slave bridge0): failed to get link speed/duplex [ 384.942377][T16448] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2542'. [ 384.959562][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 385.071384][T16453] TCP: TCP_TX_DELAY enabled [ 385.135216][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 385.263318][T16462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2542'. [ 385.285834][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 385.413372][T16470] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2546'. [ 385.555946][T14481] bond4: (slave bridge0): failed to get link speed/duplex [ 385.569868][T16475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2547'. [ 385.617886][T16475] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 385.698898][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 385.757932][T16464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2544'. [ 385.830322][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 386.138577][T16490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 386.497032][ T5609] udevd[5609]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 386.574597][T16501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2552'. [ 386.878966][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 387.303218][T16520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.432100][T16534] netlink: 'syz.2.2561': attribute type 10 has an invalid length. [ 387.466433][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 387.637242][T16535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.867551][T16547] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2565'. [ 388.401118][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.539485][T14480] net_ratelimit: 17 callbacks suppressed [ 388.539506][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 388.700233][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 388.919196][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 389.060672][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 389.175783][T16589] syzkaller0: entered promiscuous mode [ 389.190267][T16589] syzkaller0: entered allmulticast mode [ 389.208935][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 389.349011][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 389.502571][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 389.696430][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2577'. [ 389.739325][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 389.778915][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 389.869127][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 390.001189][T16613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.012125][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 390.183866][T16624] netlink: 'syz.2.2582': attribute type 28 has an invalid length. [ 390.674890][T16642] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 391.166258][T16659] xt_hashlimit: size too large, truncated to 1048576 [ 391.199289][T16659] xt_hashlimit: max too large, truncated to 1048576 [ 391.251521][T16659] xt_hashlimit: overflow, rate too high: 0 [ 391.287433][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2590'. [ 392.570295][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2596'. [ 393.126201][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 393.174725][T16728] xfrm0: entered allmulticast mode [ 393.230540][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 393.568986][T14479] net_ratelimit: 27 callbacks suppressed [ 393.569037][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 393.742066][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 393.871783][T16752] sctp: [Deprecated]: syz.2.2604 (pid 16752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.871783][T16752] Use struct sctp_sack_info instead [ 393.896118][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 393.955564][T16754] syzkaller0: entered promiscuous mode [ 393.985414][T16754] syzkaller0: entered allmulticast mode [ 394.068975][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 394.166626][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'. [ 394.219140][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 394.254669][T16759] ip_tables: iptables: counters copy to user failed while replacing table [ 394.369176][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 394.492631][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'. [ 394.509211][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 394.541607][T16766] hsr_slave_0: left promiscuous mode [ 394.564701][T16766] hsr_slave_1: left promiscuous mode [ 395.055640][T16777] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2610'. [ 395.099636][T16777] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2610'. [ 397.475263][T16769] netlink: 'syz.4.2609': attribute type 2 has an invalid length. [ 398.536222][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2617'. [ 398.552487][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 398.639976][T16810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2618'. [ 398.675527][T16810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2618'. [ 398.699318][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 398.830104][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 398.992411][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 399.108574][T16810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2618'. [ 399.126844][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 399.176572][T16810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2618'. [ 399.283107][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 399.336970][T16834] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2624'. [ 399.385247][T16834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2624'. [ 399.424181][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2624'. [ 399.440845][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 399.598995][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 399.648173][T16810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2618'. [ 399.739600][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 399.765171][T16810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2618'. [ 400.076202][T16843] gre1: entered promiscuous mode [ 400.118540][T16843] gre1: entered allmulticast mode [ 400.188969][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 400.330763][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 402.003175][T16900] bond11: entered promiscuous mode [ 402.015557][T16900] bond11: entered allmulticast mode [ 402.281138][T16917] erspan0: left promiscuous mode [ 402.441751][T16917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.480945][T16917] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.523072][T16917] tipc: Resetting bearer [ 402.544709][T16917] tipc: Resetting bearer [ 402.585126][T16917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.725770][T16937] xt_CT: No such helper "netbios-ns" [ 402.879083][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 403.307884][T16917] batadv_slave_0: left allmulticast mode [ 403.415675][T16924] bridge0: port 3(batadv1) entered blocking state [ 403.449085][T16924] bridge0: port 3(batadv1) entered disabled state [ 403.477609][T16924] batadv1: entered allmulticast mode [ 403.497860][T16924] batadv1: entered promiscuous mode [ 403.659659][ T6826] wg2 speed is unknown, defaulting to 1000 [ 403.686464][ T6826] syz2: Port: 1 Link ACTIVE [ 403.728937][ T1118] net_ratelimit: 17 callbacks suppressed [ 403.728959][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 403.869605][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 403.879010][T14476] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 403.888329][T14476] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 404.018942][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 404.158948][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 404.172535][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 404.298837][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 404.353832][T16983] tipc: Enabled bearer , priority 0 [ 404.430261][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 404.557648][T16986] ªªªªª»: renamed from tunl0 [ 404.616535][T16990] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20001 [ 404.630912][T16993] __nla_validate_parse: 6 callbacks suppressed [ 404.630963][T16993] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2665'. [ 404.655717][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 404.787603][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 404.918940][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 405.011182][T17009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2671'. [ 405.048995][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 405.178112][T17009] can: request_module (can-proto-0) failed. [ 406.114224][T17050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2680'. [ 406.199523][T17053] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2680'. [ 406.661605][T17066] netlink: 'syz.4.2683': attribute type 3 has an invalid length. [ 408.839033][T14476] net_ratelimit: 33 callbacks suppressed [ 408.839059][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 408.958955][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 409.068961][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 409.188848][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 409.298964][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 409.408899][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 409.520102][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 409.629184][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 409.738974][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 409.848847][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 413.119261][ C1] bridge0: port 1(vlan0) entered learning state [ 413.125736][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 413.849076][T14480] net_ratelimit: 35 callbacks suppressed [ 413.849101][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 413.968913][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 414.088975][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 414.198983][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 414.310201][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 414.419063][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 414.528953][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 414.639005][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 414.749068][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 414.858846][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 418.879725][T14479] net_ratelimit: 35 callbacks suppressed [ 418.879749][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 418.998874][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 419.109035][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 419.218889][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 419.328975][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 419.438960][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 419.549022][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 419.659634][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 419.768979][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 419.878821][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 423.989093][T14479] net_ratelimit: 36 callbacks suppressed [ 423.989196][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 424.109084][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 424.220136][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 424.329005][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 424.438862][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 424.549035][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 424.659070][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 424.769182][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 424.878936][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 424.989104][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 429.008998][T14479] net_ratelimit: 35 callbacks suppressed [ 429.009021][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 429.129696][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 429.238825][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 429.348953][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 429.458976][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 429.568888][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 429.679044][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 429.769203][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.789106][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 429.898850][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 430.009102][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 434.049067][ T1118] net_ratelimit: 35 callbacks suppressed [ 434.049090][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 434.168940][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 434.239215][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 434.278850][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 434.388974][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 434.499017][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 434.608909][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 434.719649][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 434.828959][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 434.938997][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 435.049060][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 439.148943][T14479] net_ratelimit: 36 callbacks suppressed [ 439.148967][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 439.269011][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 439.378843][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 439.488922][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 439.598941][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 439.709020][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 439.818893][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 439.928946][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 440.001439][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.038932][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 440.148953][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 443.198882][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.206151][ C1] bridge0: topology change detected, propagating [ 443.212866][ C1] bridge0: port 1(vlan0) entered forwarding state [ 443.219348][ C1] bridge0: topology change detected, propagating [ 444.159185][T14476] net_ratelimit: 35 callbacks suppressed [ 444.159209][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 444.279049][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 444.389077][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 444.499231][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 444.608892][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 444.719597][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 444.828944][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 444.938884][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 445.058844][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 445.168893][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 448.181279][T17087] ip6erspan0: entered allmulticast mode [ 448.392892][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2685'. [ 448.906060][T17128] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2698'. [ 448.943217][T17128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2698'. [ 448.962977][T17133] netlink: 'syz.4.2695': attribute type 7 has an invalid length. [ 449.230741][T14480] net_ratelimit: 34 callbacks suppressed [ 449.230797][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 449.391594][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 449.529034][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 449.657783][T17143] block nbd0: reconnected socket [ 449.666568][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 449.684364][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2700'. [ 449.692252][T17143] nbd: socks must be embedded in a SOCK_ITEM attr [ 449.725088][ T5624] block nbd0: Receive control failed (result -32) [ 449.893171][T17149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2703'. [ 450.030731][T17149] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 450.048355][T17155] netlink: 'syz.1.2704': attribute type 1 has an invalid length. [ 450.062081][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 450.097177][T17155] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 450.191360][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 450.270100][ T5624] block nbd3: Receive control failed (result -32) [ 450.390723][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 450.519175][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 450.759312][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 450.888880][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 451.256181][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 452.602267][T17198] tipc: Enabled bearer , priority 0 [ 452.617050][T17201] netlink: 660 bytes leftover after parsing attributes in process `syz.4.2718'. [ 452.628471][T17198] syzkaller0: entered promiscuous mode [ 452.635390][T17198] syzkaller0: entered allmulticast mode [ 452.642340][T17201] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2718'. [ 453.196707][T17213] wg2 speed is unknown, defaulting to 1000 [ 453.494078][T17197] tipc: Resetting bearer [ 453.662445][T17197] tipc: Disabling bearer [ 454.564616][T17247] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 454.579159][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'. [ 454.610458][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2725'. [ 454.631692][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'. [ 454.909181][ T36] net_ratelimit: 21 callbacks suppressed [ 454.909238][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 455.060742][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 455.190304][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 455.251379][T17263] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2727'. [ 455.297912][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 455.380492][T17263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2727'. [ 455.446288][T17266] 0ªî{X¹¦: left allmulticast mode [ 455.911577][T17266] bridge0: port 4(veth0) entered disabled state [ 455.919097][T17266] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.932122][T17266] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.090858][T17284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 456.110522][T17284] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 456.546188][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.584754][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.705378][T17266] veth5: left allmulticast mode [ 456.727262][T17266] ip6gre1: left promiscuous mode [ 456.735294][T17266] ip6gre1: left allmulticast mode [ 456.768031][T17266] bond3: left promiscuous mode [ 456.773758][T17266] bond3: left allmulticast mode [ 456.890624][T17266] veth9: left allmulticast mode [ 456.903162][T17266] bond6: left promiscuous mode [ 456.909171][T17266] bond6: left allmulticast mode [ 456.944622][T17266] gre1: left promiscuous mode [ 456.950274][T17266] gre1: left allmulticast mode [ 457.149357][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 457.282338][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 457.401521][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'. [ 457.420815][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 457.454703][T17298] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 457.588932][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 457.749161][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 457.899442][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 458.509141][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'. [ 459.266995][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'. [ 459.487794][T17357] netlink: 'syz.2.2746': attribute type 3 has an invalid length. [ 459.614143][T17353] bridge0: port 3(veth1_to_bridge) entered blocking state [ 459.638857][T17353] bridge0: port 3(veth1_to_bridge) entered disabled state [ 459.652847][T17353] veth1_to_bridge: entered allmulticast mode [ 459.701744][T17353] veth1_to_bridge: entered promiscuous mode [ 459.759306][T17353] bridge0: port 3(veth1_to_bridge) entered blocking state [ 459.769443][T17353] bridge0: port 3(veth1_to_bridge) entered listening state [ 459.871223][T17370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2748'. [ 460.004463][T14477] net_ratelimit: 11 callbacks suppressed [ 460.004528][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 460.141560][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 460.272081][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 460.342633][T17378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2750'. [ 460.428951][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 460.538885][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 460.669014][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 460.805296][ C1] bridge0: port 3(veth1_to_bridge) entered blocking state [ 460.816154][T17389] lo: entered allmulticast mode [ 460.831257][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2754'. [ 460.852751][T17390] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2753'. [ 461.022790][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 461.171006][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 461.221819][T17391] lo: left allmulticast mode [ 461.312394][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 461.450034][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 463.755688][T17438] sctp: [Deprecated]: syz.4.2765 (pid 17438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.755688][T17438] Use struct sctp_sack_info instead [ 463.814805][T17438] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2765'. [ 463.954303][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 465.139128][T14482] net_ratelimit: 23 callbacks suppressed [ 465.139188][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 465.319725][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 465.336915][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'. [ 465.451092][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 465.727686][T17478] netlink: 'syz.3.2775': attribute type 2 has an invalid length. [ 465.775169][T17478] netlink: 'syz.3.2775': attribute type 1 has an invalid length. [ 465.789268][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 465.921523][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 466.059284][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 466.200380][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 466.359088][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 466.509754][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 466.619080][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 466.796255][T17501] netlink: 'syz.2.2781': attribute type 1 has an invalid length. [ 467.099594][T17501] 8021q: adding VLAN 0 to HW filter on device bond12 [ 467.780608][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2784'. [ 467.816873][T17518] No such timeout policy "syz0" [ 469.339590][T17557] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 469.427174][T17557] xt_TPROXY: Can be used only with -p tcp or -p udp [ 470.149177][T14476] net_ratelimit: 28 callbacks suppressed [ 470.149222][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 470.319245][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 470.372959][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2800'. [ 470.599882][T17575] ipvlan2: entered allmulticast mode [ 470.628298][T17575] syz_tun: entered allmulticast mode [ 470.706483][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 470.947928][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'. [ 471.207390][T17584] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 471.815577][T17600] netlink: 'syz.3.2806': attribute type 1 has an invalid length. [ 471.873807][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'. [ 475.717280][T17600] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 475.719027][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 475.852161][T17630] bridge3: entered promiscuous mode [ 475.921834][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 476.082950][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 476.230317][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 476.379052][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 476.399533][T17643] netlink: 'syz.2.2817': attribute type 7 has an invalid length. [ 476.609000][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 476.751479][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 476.814035][T17653] netlink: 'syz.3.2819': attribute type 1 has an invalid length. [ 477.017036][T17665] netlink: 'syz.1.2820': attribute type 10 has an invalid length. [ 477.049019][T17665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2820'. [ 477.150341][T17653] 8021q: adding VLAN 0 to HW filter on device bond12 [ 477.185532][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2820'. [ 477.231731][T17670] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 477.244117][T17670] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 477.269718][T17658] bond10: (slave dummy0): Releasing active interface [ 477.319456][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 477.352886][T17665] dummy0: entered promiscuous mode [ 477.389425][T17664] syzkaller0: entered promiscuous mode [ 477.395754][T17664] syzkaller0: entered allmulticast mode [ 477.416854][T17664] tipc: Enabled bearer , priority 0 [ 477.476361][T17664] bridge9: entered promiscuous mode [ 477.512960][T17662] tipc: Resetting bearer [ 477.671932][T17662] tipc: Disabling bearer [ 478.005935][T17678] bond7: option lacp_rate: invalid value (3) [ 478.028223][T17678] bond7 (unregistering): Released all slaves [ 480.406106][T17746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2845'. [ 480.970060][ T36] net_ratelimit: 23 callbacks suppressed [ 480.970116][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 481.170141][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 481.294798][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 481.441607][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 481.600761][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 481.646179][T17774] netlink: 'syz.4.2852': attribute type 1 has an invalid length. [ 481.709289][T17774] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 481.750943][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 481.939368][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 482.092562][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 482.242054][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 482.279861][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 482.378863][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 482.415276][T17798] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2855'. [ 483.014415][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 483.416221][T17815] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 484.906234][T17831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.001719][T17831] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.523538][T17831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.653495][T17831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.670767][T17831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.790332][T14476] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.798565][T14476] bridge0: port 1(bridge_slave_0) entered listening state [ 485.890153][T14476] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.898338][T14476] bridge0: port 2(bridge_slave_1) entered listening state [ 486.199269][T14484] net_ratelimit: 11 callbacks suppressed [ 486.199326][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 486.351740][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 486.509618][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 486.646401][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 486.660648][T17855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.789198][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 486.940443][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 487.079116][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 487.199018][ T30] audit: type=1804 audit(1786869080.752:3): pid=17866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2876" name="/newroot/591/memory.events" dev="tmpfs" ino=3046 res=1 errno=0 [ 487.230967][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 487.409717][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 487.478444][T17874] netlink: 'syz.2.2878': attribute type 3 has an invalid length. [ 487.631372][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2877'. [ 487.758045][T17882] bridge3: entered promiscuous mode [ 487.799476][T17882] bridge3: entered allmulticast mode [ 488.513248][T17893] SET target dimension over the limit! [ 488.816030][T17897] IPVS: length: 122 != 13088928 [ 489.331786][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 489.454366][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.496623][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.543407][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.590029][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.904546][T17910] syzkaller1: entered promiscuous mode [ 489.960329][T17910] syzkaller1: entered allmulticast mode [ 491.279961][T17926] pim6reg1: entered promiscuous mode [ 491.360113][T17926] pim6reg1: entered allmulticast mode [ 491.409080][ T1118] net_ratelimit: 12 callbacks suppressed [ 491.409135][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 491.579211][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 491.666961][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2894'. [ 491.821935][T17947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2894'. [ 491.924697][T17945] bridge10: entered promiscuous mode [ 492.037806][T17954] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 492.050436][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 492.058928][T17951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2895'. [ 492.089622][T17955] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 492.221122][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 492.358911][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 492.489301][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 492.694367][T17964] xt_HMARK: proto mask must be zero with L3 mode [ 492.871439][T17967] syzkaller1: entered promiscuous mode [ 492.890989][T17967] syzkaller1: entered allmulticast mode [ 492.938955][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 493.092023][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 493.309123][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 493.459336][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 495.435236][T18019] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.451975][T18019] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.461709][T18019] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.479999][T18019] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.494124][T18019] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.796675][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.808011][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.818562][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.832430][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.851206][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.929784][T18029] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2915'. [ 496.434489][ T30] audit: type=1800 audit(1786869089.992:4): pid=18038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2916" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3100 res=0 errno=0 [ 496.459044][ T1118] net_ratelimit: 20 callbacks suppressed [ 496.459098][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 496.530805][T18039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2917'. [ 496.573920][T14481] bond4: (slave bridge0): failed to get link speed/duplex [ 496.739699][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 496.880670][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 496.911052][T18048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2918'. [ 496.933903][T18047] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2918'. [ 497.462909][T14481] bond4: (slave bridge0): failed to get link speed/duplex [ 497.599461][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 497.739546][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 497.894258][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 497.920267][T18019] Bluetooth: hci5: command tx timeout [ 498.039087][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 498.162530][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 498.846459][T18018] wg2 speed is unknown, defaulting to 1000 [ 499.346912][T18094] netlink: 'syz.1.2931': attribute type 12 has an invalid length. [ 499.811210][T18103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2933'. [ 499.998938][T18019] Bluetooth: hci5: command tx timeout [ 500.123391][T18107] syzkaller0: entered promiscuous mode [ 500.129821][T18107] syzkaller0: entered allmulticast mode [ 500.137619][T18109] netlink: 'syz.2.2932': attribute type 12 has an invalid length. [ 500.148922][T18109] netlink: 'syz.2.2932': attribute type 29 has an invalid length. [ 500.166000][T18109] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2932'. [ 500.176756][T18109] netlink: 'syz.2.2932': attribute type 1 has an invalid length. [ 500.187194][T18109] netlink: 'syz.2.2932': attribute type 2 has an invalid length. [ 500.299797][T18115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2934'. [ 501.444242][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 501.479576][T14479] net_ratelimit: 10 callbacks suppressed [ 501.479633][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 502.082294][T18019] Bluetooth: hci5: command tx timeout [ 502.226676][T18150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2939'. [ 502.643041][T18160] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2941'. [ 504.160572][T18019] Bluetooth: hci5: command tx timeout [ 505.484204][T18165] tap0: tun_chr_ioctl cmd 1074025677 [ 505.511437][T18165] tap0: linktype set to 1 [ 505.822805][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2943'. [ 505.858323][T18176] netlink: 'syz.1.2945': attribute type 13 has an invalid length. [ 505.947821][T18179] netlink: 'syz.4.2943': attribute type 1 has an invalid length. [ 506.077684][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2944'. [ 506.087031][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2943'. [ 506.089246][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 506.402457][T18185] bond8: (slave bridge4): making interface the new active one [ 506.413762][T18185] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 506.438373][T18193] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2947'. [ 506.459543][T18188] pim6reg0: tun_chr_ioctl cmd 35111 [ 506.750231][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 506.933970][T18018] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.981163][T18018] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.997441][T18018] bridge_slave_0: entered allmulticast mode [ 507.038174][T18018] bridge_slave_0: entered promiscuous mode [ 507.066027][T18205] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 507.089264][T18205] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 507.124062][T18018] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.143657][T18018] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.158007][T18018] bridge_slave_1: entered allmulticast mode [ 507.188034][T18018] bridge_slave_1: entered promiscuous mode [ 507.395593][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 507.631297][T18018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.676061][T18018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.689553][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 507.740250][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2953'. [ 507.826626][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 507.848948][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2953'. [ 508.132203][T18216] ovs-system: left promiscuous mode [ 508.241253][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2953'. [ 508.544275][T18232] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2955'. [ 508.677474][T18232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 508.875304][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2955'. [ 509.021420][T18232] netlink: 'syz.4.2955': attribute type 10 has an invalid length. [ 509.145189][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2955'. [ 509.502796][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 509.914014][T18232] geneve4: entered promiscuous mode [ 509.982235][T18232] geneve4: entered allmulticast mode [ 510.093326][T18018] team0: Port device team_slave_0 added [ 510.117177][T18251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2957'. [ 510.636572][T18253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2958'. [ 510.695985][T18018] team0: Port device team_slave_1 added [ 510.825495][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 511.427977][T18018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.494762][T18018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.617616][T18018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.746786][T18018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.774998][T18018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.828443][T18018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.900901][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 512.289305][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 512.372351][T18295] FAULT_INJECTION: forcing a failure. [ 512.372351][T18295] name failslab, interval 1, probability 0, space 0, times 0 [ 512.404789][T18018] hsr_slave_0: entered promiscuous mode [ 512.431505][T18295] CPU: 1 UID: 0 PID: 18295 Comm: syz.1.2964 Not tainted syzkaller #0 PREEMPT(full) [ 512.431528][T18295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.431543][T18295] Call Trace: [ 512.431559][T18295] [ 512.431566][T18295] dump_stack_lvl+0xe8/0x150 [ 512.431675][T18295] should_fail_ex+0x40c/0x560 [ 512.431819][T18295] should_failslab+0xa8/0x100 [ 512.431869][T18295] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 512.431899][T18295] ? ep_insert+0x2b1/0x1ae0 [ 512.431960][T18295] ? ep_insert+0x2b1/0x1ae0 [ 512.431989][T18295] ep_insert+0x2b1/0x1ae0 [ 512.432027][T18295] ? __pfx_ep_insert+0x10/0x10 [ 512.432049][T18295] ? __pfx___mutex_lock+0x10/0x10 [ 512.432186][T18295] do_epoll_ctl_file+0x8c2/0xee0 [ 512.432219][T18295] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 512.432246][T18295] ? __fget_files+0x3a2/0x420 [ 512.432272][T18295] ? __fget_files+0x2a/0x420 [ 512.432301][T18295] __se_sys_epoll_ctl+0x162/0x230 [ 512.432328][T18295] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 512.432368][T18295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.432413][T18295] do_syscall_64+0x174/0x580 [ 512.432485][T18295] ? clear_bhb_loop+0x70/0xc0 [ 512.432507][T18295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.432523][T18295] RIP: 0033:0x7f80c6b9e0d9 [ 512.432541][T18295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.432565][T18295] RSP: 002b:00007f80c7a52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 512.432615][T18295] RAX: ffffffffffffffda RBX: 00007f80c6e25fa0 RCX: 00007f80c6b9e0d9 [ 512.432627][T18295] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 512.432637][T18295] RBP: 00007f80c7a52090 R08: 0000000000000000 R09: 0000000000000000 [ 512.432647][T18295] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 512.432657][T18295] R13: 00007f80c6e26038 R14: 00007f80c6e25fa0 R15: 00007ffc07ec1b58 [ 512.432686][T18295] [ 512.433266][T18018] hsr_slave_1: entered promiscuous mode [ 513.239155][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 513.608985][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 513.639887][T18315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.870378][T18312] __nla_validate_parse: 1 callbacks suppressed [ 513.870418][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 513.950799][T18312] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2967'. [ 513.961260][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 514.084651][T18325] netlink: 'syz.2.2970': attribute type 1 has an invalid length. [ 514.113953][T18325] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2970'. [ 514.156488][T18325] NCSI netlink: No device for ifindex 0 [ 514.468998][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 514.628977][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 514.759167][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 515.115049][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 515.283705][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 515.446581][T18350] FAULT_INJECTION: forcing a failure. [ 515.446581][T18350] name failslab, interval 1, probability 0, space 0, times 0 [ 515.546221][T18350] CPU: 1 UID: 0 PID: 18350 Comm: syz.4.2975 Not tainted syzkaller #0 PREEMPT(full) [ 515.546254][T18350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.546267][T18350] Call Trace: [ 515.546276][T18350] [ 515.546284][T18350] dump_stack_lvl+0xe8/0x150 [ 515.546320][T18350] should_fail_ex+0x40c/0x560 [ 515.546349][T18350] ? alloc_slab_obj_exts+0x4d/0x170 [ 515.546375][T18350] should_failslab+0xa8/0x100 [ 515.546416][T18350] __kmalloc_flags_noprof+0x135/0x800 [ 515.546448][T18350] ? alloc_slab_obj_exts+0x4d/0x170 [ 515.546478][T18350] alloc_slab_obj_exts+0x4d/0x170 [ 515.546504][T18350] __memcg_slab_post_alloc_hook+0x5d3/0xf10 [ 515.546551][T18350] kmem_cache_alloc_noprof+0x350/0x5f0 [ 515.546575][T18350] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 515.546597][T18350] ? ep_insert+0x2b1/0x1ae0 [ 515.546624][T18350] ? ep_insert+0x2b1/0x1ae0 [ 515.546661][T18350] ep_insert+0x2b1/0x1ae0 [ 515.546709][T18350] ? __pfx_ep_insert+0x10/0x10 [ 515.546740][T18350] ? __pfx___mutex_lock+0x10/0x10 [ 515.546794][T18350] do_epoll_ctl_file+0x8c2/0xee0 [ 515.546836][T18350] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 515.546871][T18350] ? __fget_files+0x3a2/0x420 [ 515.546898][T18350] ? __fget_files+0x2a/0x420 [ 515.546934][T18350] __se_sys_epoll_ctl+0x162/0x230 [ 515.546969][T18350] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 515.547011][T18350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.547035][T18350] do_syscall_64+0x174/0x580 [ 515.547067][T18350] ? clear_bhb_loop+0x70/0xc0 [ 515.547093][T18350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.547114][T18350] RIP: 0033:0x7fa681d9e0d9 [ 515.547136][T18350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.547154][T18350] RSP: 002b:00007fa67fff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 515.547176][T18350] RAX: ffffffffffffffda RBX: 00007fa682025fa0 RCX: 00007fa681d9e0d9 [ 515.547191][T18350] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 515.547202][T18350] RBP: 00007fa67fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 515.547214][T18350] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 515.547227][T18350] R13: 00007fa682026038 R14: 00007fa682025fa0 R15: 00007fff6d9bfff8 [ 515.547263][T18350] [ 515.880035][T18018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.083103][T18018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.095981][T18018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.112244][T18018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.146800][T18362] netlink: 'syz.3.2977': attribute type 12 has an invalid length. [ 516.159708][T18018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 516.187120][T18018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.225729][T18018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.245219][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 516.245487][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 516.334040][T18018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.476709][T18372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.553726][T18018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.647244][T18018] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.667512][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.675498][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.746064][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.754281][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.019026][T14479] net_ratelimit: 4 callbacks suppressed [ 517.019081][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 517.321378][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 517.390700][T18398] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 517.429905][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 517.589423][T14480] bond4: (slave bridge0): failed to get link speed/duplex [ 517.687748][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 517.879439][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 518.109866][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 518.389480][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 518.513160][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 518.633873][T18438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.682319][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 519.235790][T18018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.417654][T18459] netlink: 'syz.2.2993': attribute type 1 has an invalid length. [ 519.473325][T18457] netlink: 'syz.2.2993': attribute type 4 has an invalid length. [ 520.128186][T18018] veth0_vlan: entered promiscuous mode [ 520.140440][T18018] veth1_vlan: entered promiscuous mode [ 520.326380][T18018] veth0_macvtap: entered promiscuous mode [ 520.339710][T18018] veth1_macvtap: entered promiscuous mode [ 520.377457][T18018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.441602][T18018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.559146][T18493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2997'. [ 520.568156][T18493] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2997'. [ 520.611772][T18493] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2997'. [ 520.694995][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'. [ 520.872083][ T1118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.889985][T14479] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.898836][T14479] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.907573][T14479] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.098545][T14476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.106425][T14476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.262513][T14482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.270434][T14482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.797701][T18519] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 522.014035][T18533] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 522.225370][T18538] syzkaller0: entered promiscuous mode [ 522.230905][T18538] syzkaller0: entered allmulticast mode [ 522.375251][ T1118] net_ratelimit: 16 callbacks suppressed [ 522.375272][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 522.498672][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.511315][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.520193][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.545042][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 522.557705][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.579686][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.653118][T18543] netlink: 'syz.4.3005': attribute type 4 has an invalid length. [ 522.892039][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 522.995366][T18548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 523.011367][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3007'. [ 523.028814][T18548] openvswitch: netlink: Flow actions attr not present in new flow. [ 523.071020][T18552] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3007'. [ 523.249666][T18555] netlink: 'syz.5.3006': attribute type 1 has an invalid length. [ 523.269250][T14482] bond4: (slave bridge0): failed to get link speed/duplex [ 523.375742][T18558] netlink: zone id is out of range [ 523.382391][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 523.446053][T18558] netlink: zone id is out of range [ 523.451243][T18558] netlink: zone id is out of range [ 523.456465][T18558] netlink: zone id is out of range [ 523.604299][T18565] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3009'. [ 523.640884][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3009'. [ 523.719497][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 524.046073][T18588] netlink: 'syz.2.3013': attribute type 1 has an invalid length. [ 524.186295][T18588] 8021q: adding VLAN 0 to HW filter on device bond14 [ 524.237834][T18540] wg2 speed is unknown, defaulting to 1000 [ 524.581594][T18606] tipc: Failed to remove unknown binding: 66,0,0/0:4032835757/4032835759 [ 524.590504][T18606] tipc: Failed to remove unknown binding: 66,0,0/0:4032835757/4032835758 [ 524.645720][T18613] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 524.659134][T18019] Bluetooth: hci0: command tx timeout [ 524.675845][T18606] tipc: Failed to remove unknown binding: 66,0,0/0:4032835757/4032835759 [ 524.684706][T18606] tipc: Failed to remove unknown binding: 66,0,0/0:4032835757/4032835758 [ 525.387728][T18540] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.410560][T18540] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.418110][T18540] bridge_slave_0: entered allmulticast mode [ 525.426008][T18540] bridge_slave_0: entered promiscuous mode [ 525.500913][T18540] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.508120][T18540] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.515392][T18540] bridge_slave_1: entered allmulticast mode [ 525.585621][T18540] bridge_slave_1: entered promiscuous mode [ 525.783110][T18642] syzkaller0: entered allmulticast mode [ 525.966790][T18540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.021903][T18540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.233303][T18540] team0: Port device team_slave_0 added [ 526.294193][T18540] team0: Port device team_slave_1 added [ 526.404792][T18540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.411795][T18540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.483368][T18540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.502997][T18540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.511244][T18540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.551490][T18540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.739221][T18019] Bluetooth: hci0: command tx timeout [ 526.834281][T18540] hsr_slave_0: entered promiscuous mode [ 526.840951][T18540] hsr_slave_1: entered promiscuous mode [ 526.847280][T18540] debugfs: 'hsr0' already exists in 'hsr' [ 526.889171][T18672] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.972229][T18540] Cannot create hsr debugfs directory [ 527.577672][T18689] syzkaller0: entered promiscuous mode [ 527.591975][T18689] syzkaller0: entered allmulticast mode [ 527.619698][T18540] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.629677][T18540] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 527.686328][T18689] netlink: 'syz.2.3032': attribute type 21 has an invalid length. [ 527.705186][ T1118] net_ratelimit: 1700 callbacks suppressed [ 527.705244][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 527.731875][T18689] netlink: 'syz.2.3032': attribute type 1 has an invalid length. [ 527.748083][T18689] __nla_validate_parse: 5 callbacks suppressed [ 527.748138][T18689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3032'. [ 527.793527][T18695] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3035'. [ 527.872377][T18698] ip6erspan0: entered allmulticast mode [ 527.883741][T18540] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.912485][T18540] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 527.938198][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.052241][ T1118] bond4: (slave bridge0): failed to get link speed/duplex [ 528.088904][T18703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3036'. [ 528.173747][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 528.225717][T18540] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.235533][T18540] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 528.443238][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 528.516211][T18540] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.526577][T18540] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 528.587646][T18713] block nbd4: NBD_DISCONNECT [ 528.611243][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 528.734361][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 528.829224][T18019] Bluetooth: hci0: command tx timeout [ 528.851840][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 529.157397][T18731] TC_ACT_REPEAT abuse ? [ 529.169532][T14479] bond4: (slave bridge0): failed to get link speed/duplex [ 529.189974][T18540] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 529.217790][T18540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.232943][T18540] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 529.249375][T18540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.257366][T18540] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 529.272268][T18540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.272572][T18735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3047'. [ 529.325261][T18735] netlink: 'syz.4.3047': attribute type 7 has an invalid length. [ 529.333054][T18735] netlink: 'syz.4.3047': attribute type 8 has an invalid length. [ 529.340795][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3047'. [ 529.350518][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 529.470454][T18540] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 529.527958][T18540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.858662][T18540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.931636][T18540] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.977706][T14484] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.984899][T14484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.005958][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.013135][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.572596][T18769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3052'. [ 530.657147][T18774] netlink: 'syz.2.3053': attribute type 32 has an invalid length. [ 530.917068][T18019] Bluetooth: hci0: command tx timeout [ 531.024750][T18781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3055'. [ 531.042364][T18778] xt_hashlimit: size too large, truncated to 1048576 [ 531.452810][T18540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.599152][T18540] veth0_vlan: entered promiscuous mode [ 531.622171][T18540] veth1_vlan: entered promiscuous mode [ 531.800065][T18802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3059'. [ 531.864225][T18540] veth0_macvtap: entered promiscuous mode [ 531.909897][T18540] veth1_macvtap: entered promiscuous mode [ 532.029923][T18808] syzkaller0: left allmulticast mode [ 532.038966][T18808] tc action pedit offset 146 out of bounds [ 532.055685][T18540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.123140][T18540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.203724][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 532.228899][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.258772][T14479] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.274263][T18816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.360005][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3064'. [ 532.394190][T14479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.403367][T14479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.467464][T14482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.476187][T14482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.482355][T14479] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.541431][T14476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.810175][T14476] net_ratelimit: 18 callbacks suppressed [ 532.810234][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 532.987340][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 533.046747][T18832] sctp: [Deprecated]: syz.3.3068 (pid 18832) Use of int in max_burst socket option deprecated. [ 533.046747][T18832] Use struct sctp_assoc_value instead [ 533.135130][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.146456][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.163252][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.185777][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.220034][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.259819][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 533.461381][T18836] bond9 (unregistering): Released all slaves [ 533.612336][ T5608] syz_tun (unregistering): left allmulticast mode [ 533.710551][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 533.819941][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 533.930439][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 534.029143][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 534.038092][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 534.046337][T14484] bond4: (slave bridge0): failed to get link speed/duplex [ 534.254107][T14479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.309241][T18875] netlink: 'syz.3.3078': attribute type 13 has an invalid length. [ 534.415250][T18875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3078'. [ 534.425731][T18875] netlink: 'syz.3.3078': attribute type 1 has an invalid length. [ 534.538041][T18875] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3078'. [ 534.577196][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 534.681076][T14477] bond4: (slave bridge0): failed to get link speed/duplex [ 534.727379][T14479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.881624][T18885] macsec2: entered promiscuous mode [ 534.954737][T18831] wg2 speed is unknown, defaulting to 1000 [ 535.183759][T14479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.290520][ T5624] Bluetooth: hci3: command tx timeout [ 535.383695][T14476] bond4: (slave bridge0): failed to get link speed/duplex [ 535.434674][T18891] sctp: [Deprecated]: syz.2.3081 (pid 18891) Use of int in max_burst socket option deprecated. [ 535.434674][T18891] Use struct sctp_assoc_value instead [ 535.524741][T14479] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 535.559187][T14479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.663963][T18902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3084'. [ 536.065045][T18917] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 536.102696][T18911] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 536.402425][T18831] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.428214][T18831] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.438022][T18831] bridge_slave_0: entered allmulticast mode [ 536.454301][T18831] bridge_slave_0: entered promiscuous mode [ 536.551621][T18831] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.559685][T18831] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.566890][T18831] bridge_slave_1: entered allmulticast mode [ 536.574780][T18831] bridge_slave_1: entered promiscuous mode [ 536.612958][T14479] bond6: left allmulticast mode [ 536.652522][T14479] bond6: left promiscuous mode [ 536.658699][T14479] bridge0: port 3(bond6) entered disabled state [ 536.670429][T14479] bridge_slave_1: left allmulticast mode [ 536.676235][T14479] bridge_slave_1: left promiscuous mode [ 536.682020][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.721777][T14479] bridge_slave_0: left allmulticast mode [ 536.727677][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.763468][T14479] pimreg: left allmulticast mode [ 537.369570][ T5624] Bluetooth: hci3: command tx timeout [ 537.412880][T14479] gretap0 (unregistering): left promiscuous mode [ 537.761201][T14479] bond9 (unregistering): (slave gretap3): Releasing active interface [ 537.898701][T18969] netlink: 'syz.3.3090': attribute type 10 has an invalid length. [ 537.937630][T14479] bond4 (unregistering): (slave bridge0): Releasing active interface [ 538.026785][T14479] bond1 (unregistering): Released all slaves [ 538.049038][T14479] bond2 (unregistering): (slave veth3): Releasing active interface [ 538.097502][T14479] bond2 (unregistering): Released all slaves [ 538.130438][T14479] bond3 (unregistering): Released all slaves [ 538.150479][T14479] bond4 (unregistering): Released all slaves [ 538.192498][T14479] bond5 (unregistering): Released all slaves [ 538.241366][T14479] bond0 (unregistering): Released all slaves [ 538.261548][T14479] bond6 (unregistering): Released all slaves [ 538.299617][T14479] bond7 (unregistering): (slave veth9): Releasing active interface [ 538.307596][T14479] batadv1: entered promiscuous mode [ 538.318668][T14479] bond7 (unregistering): (slave batadv1): Releasing active interface [ 538.329944][T14479] bond7 (unregistering): (slave veth11): Releasing active interface [ 538.339436][T14479] bond7 (unregistering): Released all slaves [ 538.362532][T14479] bond8 (unregistering): Released all slaves [ 538.382375][T14479] bond9 (unregistering): Released all slaves [ 538.443087][T14479] bond10 (unregistering): (slave veth13): Releasing active interface [ 538.454972][T14479] bond10 (unregistering): Released all slaves [ 538.473649][T14479] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface [ 538.483855][T14479] bond11 (unregistering): Released all slaves [ 538.501704][T14479] bond12 (unregistering): Released all slaves [ 538.573442][T18939] batadv_slave_1: entered promiscuous mode [ 538.587197][T18947] batadv_slave_1: left promiscuous mode [ 538.655677][T18969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.665698][T18969] team0: Port device netdevsim1 added [ 538.672183][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 538.712600][T18831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.839303][T18975] Bluetooth: MGMT ver 1.23 [ 538.904279][T18831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.013670][T14479] ovs-system: left promiscuous mode [ 539.388777][T18831] team0: Port device team_slave_0 added [ 539.397949][T18831] team0: Port device team_slave_1 added [ 539.437329][T14479] tipc: Disabling bearer [ 539.447160][T14479] tipc: Disabling bearer [ 539.455599][T14479] tipc: Left network mode [ 539.460285][T18983] veth1: entered promiscuous mode [ 539.465529][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3094'. [ 539.475415][ T5624] Bluetooth: hci3: command tx timeout [ 539.483374][T18990] veth1: left promiscuous mode [ 539.561220][T14479] IPVS: stopping master sync thread 7942 ... [ 539.778303][T18831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.785320][T18831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.823976][T18831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.925792][T18831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.932804][T18831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.959060][T18831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.189052][T18831] hsr_slave_0: entered promiscuous mode [ 540.240952][T18831] hsr_slave_1: entered promiscuous mode [ 540.247423][T18831] debugfs: 'hsr0' already exists in 'hsr' [ 540.253194][T18831] Cannot create hsr debugfs directory [ 540.628384][T19020] block nbd5: not configured, cannot reconfigure [ 541.419603][T19039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3103'. [ 541.443423][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 541.560184][ T5624] Bluetooth: hci3: command tx timeout [ 542.150239][T19061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.517301][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 542.734411][T19083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3112'. [ 543.696005][T19106] xt_l2tp: wrong L2TP version: 0 [ 544.284653][T19108] ip6_vti0: Caught tx_queue_len zero misconfig [ 544.720619][T19144] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3126'. [ 544.731695][T19144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3126'. [ 544.746929][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 544.786799][T19144] Cannot find add_set index 3840 as target [ 545.301936][T19165] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 545.350173][T19167] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 545.607678][T19175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3134'. [ 545.617802][T19175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3134'. [ 545.749762][T19157] lo: Caught tx_queue_len zero misconfig [ 545.823131][T19167] bond15: entered promiscuous mode [ 545.828828][T19167] 8021q: adding VLAN 0 to HW filter on device bond15 [ 545.837552][T19170] tipc: Enabling of bearer rejected, failed to enable media [ 546.008382][T18831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.043167][T18831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.199556][T19183] bond9: option arp_all_targets: invalid value (3) [ 546.774328][T19183] bond9 (unregistering): Released all slaves [ 546.817651][T18831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.929035][T18831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.949358][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.949384][ C1] bridge0: topology change detected, propagating [ 546.949714][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.949731][ C1] bridge0: topology change detected, propagating [ 547.000327][T18831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 547.068693][T18831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.104418][T19204] dummy0: Caught tx_queue_len zero misconfig [ 547.122962][T19208] netlink: 'syz.3.3140': attribute type 1 has an invalid length. [ 547.133920][T18831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.145058][T18831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.351780][T18831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.361346][T19237] netlink: 'syz.3.3144': attribute type 1 has an invalid length. [ 547.432638][T18831] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.491826][T14477] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.499082][T14477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.579918][T14480] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.587149][T14480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.893150][T18831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.133405][T19267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3149'. [ 549.016689][T18831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.085402][T19301] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3152'. [ 549.148634][T19303] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3153'. [ 549.241387][T19310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3155'. [ 549.343648][T18831] veth0_vlan: entered promiscuous mode [ 549.371233][T18831] veth1_vlan: entered promiscuous mode [ 549.400251][T18831] veth0_macvtap: entered promiscuous mode [ 549.481228][T18831] veth1_macvtap: entered promiscuous mode [ 549.595287][T18831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.616917][T18831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.766792][T14480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.838799][T19321] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3157'. [ 550.006979][T19339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3162'. [ 550.155101][T14482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.163512][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.188735][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.207181][T14482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.220172][T19345] netlink: 'syz.4.3163': attribute type 1 has an invalid length. [ 550.252260][T14479] IPVS: stop unused estimator thread 0... [ 550.269182][T14482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.291298][T19345] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 550.308720][T14482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.383940][T14482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.515387][T19353] 8021q: VLANs not supported on syzkaller0 [ 550.529619][T19353] syzkaller1: entered promiscuous mode [ 550.535151][T19353] syzkaller1: entered allmulticast mode [ 551.149408][T18019] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 551.164636][T18019] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 551.174989][T18019] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 551.184985][T18019] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 551.193032][T18019] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.122552][T19412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3175'. [ 552.157758][T19412] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3175'. [ 552.313547][T19367] wg2 speed is unknown, defaulting to 1000 [ 552.582218][T19433] netlink: 'syz.1.3178': attribute type 1 has an invalid length. [ 552.715148][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3179'. [ 552.724079][T19430] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3179'. [ 553.198524][T19447] syzkaller0: entered promiscuous mode [ 553.217395][T19447] syzkaller0: entered allmulticast mode [ 553.250229][T19447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3181'. [ 553.288851][T18019] Bluetooth: hci2: command tx timeout [ 553.408472][T19459] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 553.624891][T19470] net_ratelimit: 1 callbacks suppressed [ 553.624910][T19470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.640930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.673240][T19474] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 553.683067][T19367] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.695047][T19367] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.716790][T19367] bridge_slave_0: entered allmulticast mode [ 553.723006][T19471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.731430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.744298][T19367] bridge_slave_0: entered promiscuous mode [ 553.753226][T19367] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.760920][T19367] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.771140][T19367] bridge_slave_1: entered allmulticast mode [ 553.859595][T19367] bridge_slave_1: entered promiscuous mode [ 553.951740][T19367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.963696][T19367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.973266][T19486] xt_hl: Unknown Hop Limit match mode: 4 [ 554.056832][T19474] IPVS: persistence engine module ip_vs_pe_ not found [ 554.132161][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'. [ 554.158667][T19488] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3188'. [ 554.179034][T19367] team0: Port device team_slave_0 added [ 554.209326][T19367] team0: Port device team_slave_1 added [ 554.347069][T19367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.366777][T19367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.408419][T19367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.420200][T19503] netlink: 'syz.3.3192': attribute type 4 has an invalid length. [ 554.454656][T19503] netlink: 'syz.3.3192': attribute type 4 has an invalid length. [ 554.496697][T19499] vlan2: entered promiscuous mode [ 554.516394][T19367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.523438][T19367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.598045][T19367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.733530][T19367] hsr_slave_0: entered promiscuous mode [ 554.740265][T19367] hsr_slave_1: entered promiscuous mode [ 554.746667][T19367] debugfs: 'hsr0' already exists in 'hsr' [ 554.752905][T19367] Cannot create hsr debugfs directory [ 554.986026][T19538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 555.159530][T19541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3199'. [ 555.227630][T19543] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 555.398988][T18019] Bluetooth: hci2: command tx timeout [ 555.523171][T19549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.588472][T19549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.744303][T19549] bond0 (unregistering): Released all slaves [ 555.864556][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3203'. [ 555.888898][T19570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3203'. [ 555.912828][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3203'. [ 556.173043][T19560] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3203'. [ 556.909787][T19608] netlink: 'syz.1.3207': attribute type 1 has an invalid length. [ 556.921594][T19608] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3207'. [ 557.078509][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3209'. [ 557.087443][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3209'. [ 557.147835][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3209'. [ 557.169299][T19515] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.178691][T19515] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.187744][T19515] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.226229][T19515] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.406220][T19630] Bluetooth: MGMT ver 1.23 [ 557.539450][T18019] Bluetooth: hci2: command tx timeout [ 557.585789][T19638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.953473][T19654] tipc: Resetting bearer [ 558.104348][ T6854] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 558.362661][T19654] tipc: Resetting bearer [ 558.587311][ T6827] wg2 speed is unknown, defaulting to 1000 [ 558.593200][ T6827] syz2: Port: 1 Link DOWN [ 558.908166][T19690] openvswitch: netlink: Duplicate or invalid key (type 0). [ 559.097920][T19698] netlink: 'syz.1.3224': attribute type 1 has an invalid length. [ 559.632999][T18019] Bluetooth: hci2: command tx timeout [ 560.069619][T19711] netlink: 'syz.1.3229': attribute type 1 has an invalid length. [ 560.079568][T19711] netlink: 'syz.1.3229': attribute type 2 has an invalid length. [ 560.135156][T19713] __nla_validate_parse: 4 callbacks suppressed [ 560.135174][T19713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3230'. [ 560.936093][T19666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.951114][T19367] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 560.998293][T19367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.013756][T19367] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 561.030596][T19367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.086969][T19367] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 561.138497][T19367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.169899][T19367] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 561.191564][T19367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.192833][T19721] SET target dimension over the limit! [ 561.414474][T19367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.434346][T19367] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.509931][T19515] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.517133][T19515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.533185][ T769] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.540369][ T769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.806913][T19749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.088659][T19760] lo: entered allmulticast mode [ 562.099587][T19759] lo: left allmulticast mode [ 562.201121][T19766] netlink: 'syz.1.3242': attribute type 1 has an invalid length. [ 562.770673][T19367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.902000][T19807] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 562.911243][T19807] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3251'. [ 562.930054][T19807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3251'. [ 563.022718][T19367] veth0_vlan: entered promiscuous mode [ 563.060335][T19367] veth1_vlan: entered promiscuous mode [ 563.191921][T19367] veth0_macvtap: entered promiscuous mode [ 563.257306][T19367] veth1_macvtap: entered promiscuous mode [ 563.361219][T19829] veth0_macvtap: left promiscuous mode [ 563.597543][T19367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.629871][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 563.659569][T19367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.743164][T19838] erspan0: entered promiscuous mode [ 563.748674][T19838] macvtap1: entered promiscuous mode [ 563.754135][T19838] macvtap1: entered allmulticast mode [ 563.759539][T19838] erspan0: entered allmulticast mode [ 563.821309][T19850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 563.842182][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.894561][T19852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3259'. [ 563.903942][T19852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3259'. [ 563.999716][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3259'. [ 564.010482][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3259'. [ 564.044836][T19850] erspan0: left allmulticast mode [ 564.075495][T19850] erspan0: left promiscuous mode [ 564.148936][T19850] macvtap1: left promiscuous mode [ 564.187375][T19850] macvtap1: left allmulticast mode [ 564.250850][ T1099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.259644][ T1099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.268871][ T1099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.398700][T19872] xt_policy: neither incoming nor outgoing policy selected [ 564.470025][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.491327][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.611114][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.634506][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.660540][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3264'. [ 564.889839][T18019] block nbd4: Receive control failed (result -22) [ 565.060913][ T5269] veth0_macvtap: entered promiscuous mode [ 565.142932][T19898] xfrm0: Caught tx_queue_len zero misconfig [ 565.218402][T19880] nbd4: detected capacity change from 0 to 32 [ 565.231213][ T1483] block nbd4: Dead connection, failed to find a fallback [ 565.239752][ T1483] block nbd4: shutting down sockets [ 565.246342][ T1483] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.262661][ T1483] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.274963][ T1623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.284757][ T1623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.297845][ T1623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.324632][ T1623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.332585][ T1623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.343542][ T1623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.351468][ T1623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.360970][ T1623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.369356][ T1623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.378889][ T1623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.388396][ T1623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.397920][ T1623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.405837][ T1623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.415766][ T1623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.440220][T17636] ldm_validate_partition_table(): Disk read failed. [ 565.449125][ T1623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.461068][ T1623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.469009][ T1623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.478524][ T1623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 565.486612][T17636] Dev nbd4: unable to read RDB block 0 [ 565.493726][T17636] nbd4: unable to read partition table [ 565.516513][T17636] ldm_validate_partition_table(): Disk read failed. [ 565.539268][T17636] Dev nbd4: unable to read RDB block 0 [ 565.549461][T17636] nbd4: unable to read partition table [ 565.842506][T19914] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 565.863102][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 565.901404][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 565.910644][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 565.920357][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 565.928131][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 565.943781][T18019] [ 565.946155][T18019] ====================================================== [ 565.953198][T18019] WARNING: possible circular locking dependency detected [ 565.960364][T18019] syzkaller #0 Not tainted [ 565.964808][T18019] ------------------------------------------------------ [ 565.971875][T18019] kworker/u9:0/18019 is trying to acquire lock: [ 565.978148][T18019] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 565.988701][T18019] [ 565.988701][T18019] but task is already holding lock: [ 565.996090][T18019] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 566.005551][T18019] [ 566.005551][T18019] which lock already depends on the new lock. [ 566.005551][T18019] [ 566.015974][T18019] [ 566.015974][T18019] the existing dependency chain (in reverse order) is: [ 566.025017][T18019] [ 566.025017][T18019] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 566.033032][T18019] down_write+0x96/0x200 [ 566.037827][T18019] kernfs_add_one+0x41/0x5e0 [ 566.042970][T18019] kernfs_create_dir_ns+0x1a1/0x230 [ 566.048725][T18019] internal_create_group+0x440/0x1180 [ 566.054647][T18019] cpuhp_invoke_callback+0x434/0x810 [ 566.060520][T18019] cpuhp_issue_call+0x3f0/0x750 [ 566.065910][T18019] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 566.072520][T18019] __cpuhp_setup_state+0x3f/0x60 [ 566.078004][T18019] do_one_initcall+0x250/0x870 [ 566.083315][T18019] do_initcall_level+0x10a/0x1a0 [ 566.088896][T18019] do_initcalls+0x59/0xa0 [ 566.093784][T18019] kernel_init_freeable+0x29d/0x3e0 [ 566.099529][T18019] kernel_init+0x1d/0x1d0 [ 566.104402][T18019] ret_from_fork+0x514/0xb70 [ 566.109566][T18019] ret_from_fork_asm+0x1a/0x30 [ 566.114879][T18019] [ 566.114879][T18019] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 566.122718][T18019] [ 566.122718][T18019] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 566.130475][T18019] cpus_read_lock+0x42/0x160 [ 566.135601][T18019] static_key_slow_inc+0x12/0x30 [ 566.141115][T18019] nbd_genl_reconfigure+0x1301/0x1e80 [ 566.147104][T18019] genl_family_rcv_msg_doit+0x233/0x340 [ 566.153262][T18019] genl_rcv_msg+0x614/0x7a0 [ 566.158304][T18019] netlink_rcv_skb+0x226/0x4a0 [ 566.163639][T18019] genl_rcv+0x28/0x40 [ 566.168160][T18019] netlink_unicast+0x7bb/0x940 [ 566.173471][T18019] netlink_sendmsg+0x813/0xb40 [ 566.178776][T18019] sock_sendmsg_nosec+0x13a/0x180 [ 566.184420][T18019] ____sys_sendmsg+0x54e/0x850 [ 566.189722][T18019] ___sys_sendmsg+0x2a5/0x360 [ 566.194940][T18019] __x64_sys_sendmsg+0x1b1/0x290 [ 566.200420][T18019] do_syscall_64+0x174/0x580 [ 566.205554][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.212000][T18019] [ 566.212000][T18019] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 566.219669][T18019] __mutex_lock+0x19d/0x1550 [ 566.224823][T18019] nbd_queue_rq+0x373/0x1150 [ 566.230004][T18019] blk_mq_dispatch_rq_list+0x499/0x1990 [ 566.236207][T18019] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 566.243105][T18019] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 566.249626][T18019] blk_mq_run_work_fn+0x16c/0x300 [ 566.255210][T18019] process_scheduled_works+0xa8e/0x14e0 [ 566.261312][T18019] worker_thread+0xa47/0xfb0 [ 566.266440][T18019] kthread+0x388/0x470 [ 566.271077][T18019] ret_from_fork+0x514/0xb70 [ 566.276211][T18019] ret_from_fork_asm+0x1a/0x30 [ 566.281542][T18019] [ 566.281542][T18019] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 566.288775][T18019] __mutex_lock+0x19d/0x1550 [ 566.293915][T18019] nbd_queue_rq+0xc1/0x1150 [ 566.298951][T18019] blk_mq_dispatch_rq_list+0x499/0x1990 [ 566.305071][T18019] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 566.311947][T18019] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 566.318474][T18019] blk_mq_run_work_fn+0x16c/0x300 [ 566.324045][T18019] process_scheduled_works+0xa8e/0x14e0 [ 566.330130][T18019] worker_thread+0xa47/0xfb0 [ 566.335273][T18019] kthread+0x388/0x470 [ 566.339879][T18019] ret_from_fork+0x514/0xb70 [ 566.345097][T18019] ret_from_fork_asm+0x1a/0x30 [ 566.350403][T18019] [ 566.350403][T18019] -> #4 (set->srcu){.+.+}-{0:0}: [ 566.357551][T18019] __synchronize_srcu+0xc9/0x2f0 [ 566.363058][T18019] elevator_switch+0x1e8/0x7b0 [ 566.368406][T18019] elevator_change+0x2fa/0x480 [ 566.373711][T18019] elevator_set_default+0x375/0x440 [ 566.379452][T18019] blk_register_queue+0x3f3/0x4e0 [ 566.385061][T18019] __add_disk+0x6cb/0xe30 [ 566.389968][T18019] add_disk_fwnode+0x100/0x3a0 [ 566.395288][T18019] nbd_dev_add+0x733/0xb60 [ 566.400238][T18019] nbd_init+0x15f/0x1e0 [ 566.404995][T18019] do_one_initcall+0x250/0x870 [ 566.410302][T18019] do_initcall_level+0x10a/0x1a0 [ 566.415780][T18019] do_initcalls+0x59/0xa0 [ 566.420643][T18019] kernel_init_freeable+0x29d/0x3e0 [ 566.426378][T18019] kernel_init+0x1d/0x1d0 [ 566.431277][T18019] ret_from_fork+0x514/0xb70 [ 566.436435][T18019] ret_from_fork_asm+0x1a/0x30 [ 566.441746][T18019] [ 566.441746][T18019] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 566.449587][T18019] __mutex_lock+0x19d/0x1550 [ 566.454725][T18019] elevator_change+0x1af/0x480 [ 566.460027][T18019] elevator_set_none+0xb5/0x140 [ 566.465422][T18019] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 566.471774][T18019] nbd_start_device+0x189/0xb30 [ 566.477161][T18019] nbd_genl_connect+0x1597/0x1c10 [ 566.482802][T18019] genl_family_rcv_msg_doit+0x233/0x340 [ 566.488891][T18019] genl_rcv_msg+0x614/0x7a0 [ 566.493938][T18019] netlink_rcv_skb+0x226/0x4a0 [ 566.499264][T18019] genl_rcv+0x28/0x40 [ 566.503798][T18019] netlink_unicast+0x7bb/0x940 [ 566.509105][T18019] netlink_sendmsg+0x813/0xb40 [ 566.514409][T18019] sock_sendmsg_nosec+0x13a/0x180 [ 566.519980][T18019] ____sys_sendmsg+0x54e/0x850 [ 566.525284][T18019] ___sys_sendmsg+0x2a5/0x360 [ 566.530520][T18019] __x64_sys_sendmsg+0x1b1/0x290 [ 566.536086][T18019] do_syscall_64+0x174/0x580 [ 566.541219][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.547654][T18019] [ 566.547654][T18019] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 566.556341][T18019] blk_alloc_queue+0x544/0x690 [ 566.561658][T18019] __blk_mq_alloc_disk+0x194/0x390 [ 566.567318][T18019] nbd_dev_add+0x494/0xb60 [ 566.572272][T18019] nbd_init+0x15f/0x1e0 [ 566.576990][T18019] do_one_initcall+0x250/0x870 [ 566.582304][T18019] do_initcall_level+0x10a/0x1a0 [ 566.587783][T18019] do_initcalls+0x59/0xa0 [ 566.592657][T18019] kernel_init_freeable+0x29d/0x3e0 [ 566.598403][T18019] kernel_init+0x1d/0x1d0 [ 566.603268][T18019] ret_from_fork+0x514/0xb70 [ 566.608427][T18019] ret_from_fork_asm+0x1a/0x30 [ 566.613736][T18019] [ 566.613736][T18019] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 566.620997][T18019] fs_reclaim_acquire+0x71/0x100 [ 566.626506][T18019] kmem_cache_alloc_noprof+0x64/0x5f0 [ 566.632425][T18019] __kernfs_iattrs+0xdd/0x380 [ 566.637660][T18019] kernfs_iop_setattr+0xe6/0x3f0 [ 566.643210][T18019] notify_change+0xbba/0xea0 [ 566.648341][T18019] do_truncate+0x1c2/0x250 [ 566.653319][T18019] path_openat+0x2fed/0x3830 [ 566.658449][T18019] do_file_open+0x23e/0x4a0 [ 566.663494][T18019] do_sys_openat2+0x115/0x200 [ 566.668738][T18019] __x64_sys_openat+0x138/0x170 [ 566.674139][T18019] do_syscall_64+0x174/0x580 [ 566.679291][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.685748][T18019] [ 566.685748][T18019] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 566.694290][T18019] __lock_acquire+0x1520/0x2cf0 [ 566.699833][T18019] lock_acquire+0x106/0x350 [ 566.704903][T18019] down_write+0x96/0x200 [ 566.709686][T18019] kernfs_link_sibling+0x4c7/0x5a0 [ 566.715340][T18019] kernfs_add_one+0x1d2/0x5e0 [ 566.720563][T18019] kernfs_create_dir_ns+0x1a1/0x230 [ 566.726306][T18019] sysfs_create_dir_ns+0x12f/0x2a0 [ 566.731963][T18019] kobject_add_internal+0x622/0xcd0 [ 566.737782][T18019] kobject_add+0x163/0x240 [ 566.742748][T18019] device_add+0x3fa/0xb80 [ 566.747670][T18019] hci_conn_add_sysfs+0xd5/0x210 [ 566.753285][T18019] hci_conn_complete_evt+0x8a8/0x1350 [ 566.759232][T18019] hci_event_packet+0x6cd/0xf10 [ 566.764628][T18019] hci_rx_work+0x3ee/0x1020 [ 566.769712][T18019] process_scheduled_works+0xa8e/0x14e0 [ 566.775792][T18019] worker_thread+0xa47/0xfb0 [ 566.780923][T18019] kthread+0x388/0x470 [ 566.785532][T18019] ret_from_fork+0x514/0xb70 [ 566.790663][T18019] ret_from_fork_asm+0x1a/0x30 [ 566.795967][T18019] [ 566.795967][T18019] other info that might help us debug this: [ 566.795967][T18019] [ 566.806214][T18019] Chain exists of: [ 566.806214][T18019] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 566.806214][T18019] [ 566.820672][T18019] Possible unsafe locking scenario: [ 566.820672][T18019] [ 566.828140][T18019] CPU0 CPU1 [ 566.833534][T18019] ---- ---- [ 566.838956][T18019] lock(&root->kernfs_rwsem); [ 566.843761][T18019] lock(cpuhp_state_mutex); [ 566.850892][T18019] lock(&root->kernfs_rwsem); [ 566.858350][T18019] lock(&root->kernfs_iattr_rwsem); [ 566.863653][T18019] [ 566.863653][T18019] *** DEADLOCK *** [ 566.863653][T18019] [ 566.871810][T18019] 4 locks held by kworker/u9:0/18019: [ 566.877212][T18019] #0: ffff88807a595940 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 566.888229][T18019] #1: ffffc9000fba7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 566.900259][T18019] #2: ffff88803b7000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 566.910148][T18019] #3: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 566.920183][T18019] [ 566.920183][T18019] stack backtrace: [ 566.926116][T18019] CPU: 1 UID: 0 PID: 18019 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 566.926137][T18019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.926149][T18019] Workqueue: hci4 hci_rx_work [ 566.926175][T18019] Call Trace: [ 566.926182][T18019] [ 566.926190][T18019] dump_stack_lvl+0xe8/0x150 [ 566.926215][T18019] print_circular_bug+0x2e1/0x300 [ 566.926244][T18019] check_noncircular+0x12e/0x150 [ 566.926272][T18019] __lock_acquire+0x1520/0x2cf0 [ 566.926297][T18019] ? __lock_acquire+0x683/0x2cf0 [ 566.926324][T18019] ? kernfs_link_sibling+0x4c7/0x5a0 [ 566.926348][T18019] lock_acquire+0x106/0x350 [ 566.926367][T18019] ? kernfs_link_sibling+0x4c7/0x5a0 [ 566.926410][T18019] down_write+0x96/0x200 [ 566.926425][T18019] ? kernfs_link_sibling+0x4c7/0x5a0 [ 566.926447][T18019] ? __pfx_down_write+0x10/0x10 [ 566.926461][T18019] ? kernfs_root+0x1c/0x230 [ 566.926481][T18019] ? kernfs_root+0x1c/0x230 [ 566.926501][T18019] ? kernfs_root+0x1c/0x230 [ 566.926521][T18019] ? kernfs_root+0x1ea/0x230 [ 566.926560][T18019] kernfs_link_sibling+0x4c7/0x5a0 [ 566.926588][T18019] kernfs_add_one+0x1d2/0x5e0 [ 566.926614][T18019] kernfs_create_dir_ns+0x1a1/0x230 [ 566.926641][T18019] sysfs_create_dir_ns+0x12f/0x2a0 [ 566.926665][T18019] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 566.926687][T18019] ? do_raw_spin_unlock+0xf5/0x210 [ 566.926706][T18019] kobject_add_internal+0x622/0xcd0 [ 566.926727][T18019] kobject_add+0x163/0x240 [ 566.926758][T18019] ? __pfx_kobject_add+0x10/0x10 [ 566.926776][T18019] ? get_device_parent+0x366/0x3a0 [ 566.926795][T18019] device_add+0x3fa/0xb80 [ 566.926811][T18019] hci_conn_add_sysfs+0xd5/0x210 [ 566.926833][T18019] hci_conn_complete_evt+0x8a8/0x1350 [ 566.926857][T18019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 566.926881][T18019] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 566.926911][T18019] ? skb_pull_data+0xf0/0x200 [ 566.926998][T18019] hci_event_packet+0x6cd/0xf10 [ 566.927022][T18019] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 566.927044][T18019] ? __pfx_hci_event_packet+0x10/0x10 [ 566.927067][T18019] ? audit_tree_freeing_mark+0xa00/0xb20 [ 566.927103][T18019] ? hci_send_to_monitor+0xe2/0x590 [ 566.927123][T18019] hci_rx_work+0x3ee/0x1020 [ 566.927148][T18019] ? process_scheduled_works+0xa20/0x14e0 [ 566.927166][T18019] process_scheduled_works+0xa8e/0x14e0 [ 566.927194][T18019] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.927212][T18019] ? assign_work+0x3cf/0x5d0 [ 566.927229][T18019] worker_thread+0xa47/0xfb0 [ 566.927252][T18019] ? __kthread_parkme+0x71/0x1f0 [ 566.927274][T18019] kthread+0x388/0x470 [ 566.927294][T18019] ? __pfx_worker_thread+0x10/0x10 [ 566.927309][T18019] ? __pfx_kthread+0x10/0x10 [ 566.927330][T18019] ret_from_fork+0x514/0xb70 [ 566.927352][T18019] ? __pfx_ret_from_fork+0x10/0x10 [ 566.927373][T18019] ? __switch_to+0xc89/0x1420 [ 566.927391][T18019] ? __pfx_kthread+0x10/0x10 [ 566.927413][T18019] ret_from_fork_asm+0x1a/0x30 [ 566.927443][T18019] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 568.006735][ T5624] Bluetooth: hci4: command tx timeout [ 568.102741][T19522] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.253409][T19522] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.420497][T19522] team0: Port device netdevsim1 removed [ 568.435748][T19522] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.527708][T19522] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.692746][T19522] bridge_slave_1: left allmulticast mode [ 568.698455][T19522] bridge_slave_1: left promiscuous mode [ 568.705861][T19522] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.715656][T19522] bridge_slave_0: left allmulticast mode [ 568.722581][T19522] bridge_slave_0: left promiscuous mode [ 568.728340][T19522] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.871081][T19522] bond1 (unregistering): Released all slaves [ 568.884685][T19522] bond2 (unregistering): Released all slaves [ 569.139975][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 569.447891][T19522] hsr_slave_0: left promiscuous mode [ 569.459582][T19522] hsr_slave_1: left promiscuous mode [ 569.466402][T19522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.481114][T19522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.490340][T19522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.498420][T19522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.511328][T19522] veth1_macvtap: left promiscuous mode [ 569.516849][T19522] veth0_macvtap: left promiscuous mode [ 569.522493][T19522] veth1_vlan: left promiscuous mode [ 569.527770][T19522] veth0_vlan: left promiscuous mode [ 569.687073][T19522] team0 (unregistering): Port device team_slave_1 removed [ 569.704179][T19522] team0 (unregistering): Port device team_slave_0 removed [ 569.797632][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 570.087312][T19522] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.136706][T19522] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.202794][T19522] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.277951][T19522] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.295640][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 570.393399][T19522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.406978][T19522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.535122][T19522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.545708][T19522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.641688][T19522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.654023][T19522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.690745][T19522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.702024][T19522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.764929][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 570.831079][T19522] bridge_slave_1: left allmulticast mode [ 570.837850][T19522] bridge_slave_1: left promiscuous mode [ 570.847314][T19522] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.859759][T19522] bridge_slave_0: left allmulticast mode [ 570.865553][T19522] bridge_slave_0: left promiscuous mode [ 570.871672][T19522] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.886048][T19522] bridge_slave_1: left allmulticast mode [ 570.891892][T19522] bridge_slave_1: left promiscuous mode [ 570.897619][T19522] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.906194][T19522] bridge_slave_0: left allmulticast mode [ 570.911875][T19522] bridge_slave_0: left promiscuous mode [ 570.917533][T19522] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.007133][T19522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.026987][T19522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.054567][T19522] bond0 (unregistering): Released all slaves [ 571.115790][T19522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.136216][T19522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.148407][T19522] bond0 (unregistering): Released all slaves [ 571.553918][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 571.564925][T19522] hsr_slave_0: left promiscuous mode [ 571.571293][T19522] hsr_slave_1: left promiscuous mode [ 571.577549][T19522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.587502][T19522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.599765][T19522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.607187][T19522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.618957][T19522] hsr_slave_0: left promiscuous mode [ 571.625071][T19522] hsr_slave_1: left promiscuous mode [ 571.631898][T19522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.639969][T19522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.648147][T19522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.655930][T19522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.671589][T19522] veth1_vlan: left promiscuous mode [ 571.676885][T19522] veth0_vlan: left promiscuous mode [ 571.683205][T19522] veth1_macvtap: left promiscuous mode [ 571.688861][T19522] veth0_macvtap: left promiscuous mode [ 571.694446][T19522] veth1_vlan: left promiscuous mode [ 571.699771][T19522] veth0_vlan: left promiscuous mode [ 571.921564][T19522] team0 (unregistering): Port device team_slave_1 removed [ 571.935754][T19522] team0 (unregistering): Port device team_slave_0 removed [ 572.088041][T19522] team0 (unregistering): Port device team_slave_1 removed [ 572.101875][T19522] team0 (unregistering): Port device team_slave_0 removed [ 572.690823][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 572.770048][T19522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.820153][T19522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.863274][T19522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.911438][T19522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.024548][T19522] bridge_slave_1: left allmulticast mode [ 573.033272][T19522] bridge_slave_1: left promiscuous mode [ 573.043294][T19522] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.054680][T19522] bridge_slave_0: left allmulticast mode [ 573.060864][T19522] bridge_slave_0: left promiscuous mode [ 573.066691][T19522] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.210259][T19522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.220953][T19522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.230656][T19522] bond0 (unregistering): Released all slaves [ 573.239435][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 573.585766][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 573.657193][T19522] hsr_slave_0: left promiscuous mode [ 573.669917][T19522] hsr_slave_1: left promiscuous mode [ 573.676864][T19522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.685835][T19522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.701730][T19522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.714613][T19522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.729539][T19522] veth1_macvtap: left promiscuous mode [ 573.735487][T19522] veth0_macvtap: left promiscuous mode [ 573.742336][T19522] veth1_vlan: left promiscuous mode [ 573.748118][T19522] veth0_vlan: left promiscuous mode [ 573.967503][T19522] team0 (unregistering): Port device team_slave_1 removed [ 573.985173][T19522] team0 (unregistering): Port device team_slave_0 removed [ 574.195032][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 574.559716][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 574.924249][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 575.282514][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12