last executing test programs: 1m56.340293044s ago: executing program 4 (id=4149): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x8001, 0x10}, &(0x7f0000000640)=0xc) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000010000100000000001000000085ff00003b000000000000000000000008001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06daab01a77}, 0x40) 1m55.166511837s ago: executing program 4 (id=4158): ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=',(.,\x00', 0x208080, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x100]}, {0x8001, 0x0, 0xae, 0xff}}, 0x6a1b, &(0x7f0000000080), &(0x7f00000000c0)=0x9}) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000006c0)={0x7, &(0x7f00000005c0)=[{0x67, 0xc5, &(0x7f0000000140)="c331ed9cdf3d03566fc36efb540c1e75b8297ede9b5a7eb7191c4fede54464723a2439a8132689615b1af7c54ffb84a9b1b913de51785552be8580b3c1226b3040b9704034e25d1cc9d92b403c36f7b6f1a35f0e856c14ece148dbb40fe978e5962faf343953be6cddcf5d042785d6a5e5ec5c261cd824df1594aacbdc70d2aaae601135d216d4c8bdfe7ca800717eadf1dc99a7099c565cb3d5a26d828ec13e85ec6dc86fa5838ed97c7ff5a5ea927179a6160f8e6266315c9e8525b2e585d8a28c2d4730"}, {0x4, 0x96, &(0x7f0000000240)="137c7f8b7488731f02ef45f8b2c3a41c27276daa091fa2b4481bb75a21116066c7b395fca6e616f4376e20ef2611e27d71ce8be5a6898b7509c327f1279cfcfd9a70c136ac9ebb337889d9fa0f2075c6fe56ff1a068be2684e16d75b97c8813ce43f6c59a16aa630de2ca4156551633d078630e2a38d22858927a1faa2871b25c59a2f1bf10d907f32df102c10e3058350c17f77c239", 0x1, 0x1}, {0x5, 0x31, &(0x7f0000000300)="5abe19781b554edc966abd283110c70a79656e7684937f504b22b31ba469a5b7ca98daae8c9d0a650e2b6e721abafd2939", 0x0, 0x1}, {0x6, 0x9, &(0x7f0000000340)="d36d87cef1c6032474", 0x1, 0x1}, {0xfffffffb, 0x94, &(0x7f0000000380)="0d5b4196a2018c926c5d985381819cc0b018ad9d2d0690ae20078d101e6d1a73bbbd23b14252ab61904ab52133011c3400a81cd1be8f5b535f8fd0f944512b1e6c30d00210746fd454ce29c607e21b73072be33b67a98e3764c4152b40717916c0f39bd86923e0ba9589dab2b7fb7ca5a9b42ad6763e58b485c90f391eaf6d6682ec642b8f23fa63c8f09fdf5f09e48b5055c955", 0x0, 0x1}, {0x738, 0xed, &(0x7f0000000440)="500ef2e0fcc926c52e4577a8f5527a7895a81fa9b011d7fd9c080ffe029bfde2a251fcecd782384fb0d3bb8643d8a5be03772b24df84bcf768521a4e861004a2c9ee367cf756a63a5e6d609fce48a19e3ccbaae1f84c9d639b91df9446e8ffb691a0fa0d4c77c8d95c8e046112ba4d1e30490b29e8c9106df6ee032b82ef9d9a0af6763532afe10a8f131305052c37cac852e10dc8c1a653a659b302bad84ba9ff06bf9d3f14b65e528e32f217a65d06e7a787eb53df42b13926e40ab800dea7e084d0b6a40fcd34cdf5ba94ce1a14ad38d0eb934f922fc1c8ab32eac699da3cb9f3b026406b6f99c594b9318e", 0x0, 0x1}, {0x8, 0x6e, &(0x7f0000000540)="654b64e9cb55c1f7dde88024767a7407cd97de8e6f8cf3314c566b906b5e23a34d0bb8cbdcd3b0a5da92b4651f2191369ffd3d85fdc816961cf37346e02f059b976fe889c387c7eca35747f5021a29efd94f276a8183629e47a28c26620cde09678ec96b6b6d2669fa7068f2b177", 0x1, 0x1}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r0, 0x6e575000) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r0, 0x6e575000) socketpair(0x10, 0x5, 0xc, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000740), 0x12) (async) connect$x25(r2, &(0x7f0000000740), 0x12) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x47}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x47}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000007c0)=0x6961) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x100, 0x3, 0x2048, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x4}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x100, 0x3, 0x2048, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x4}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r1, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000b40)=[{}], 0x8, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x34e, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x34e, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000e80), 0x8) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000e80), 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0xc85, 0x3, 0x8, 0x4001, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xd}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xd, 0x6, &(0x7f0000000880)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @exit, @alu={0x7, 0x0, 0xd, 0x2, 0x8, 0x21, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}], &(0x7f00000008c0)='syzkaller\x00', 0x7, 0xbc, &(0x7f0000000900)=""/188, 0x41100, 0x40, '\x00', 0x0, @sock_ops=0x3, r4, 0x8, &(0x7f0000000a00)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xa, 0xd741, 0x2}, 0x10, r5, 0xffffffffffffffff, 0x4, &(0x7f0000000f40)=[r6, r7, r8, r9], &(0x7f0000000f80)=[{0x4, 0x4, 0x9, 0xc}, {0x4, 0x5, 0x8, 0x2}, {0x1, 0x5, 0xf, 0x8}, {0x0, 0x1, 0xc, 0x8}], 0x10, 0x7}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r1) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001180)={&(0x7f0000001080), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, r11, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc891}, 0x8480) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r10, 0x0, 0x68, 0xc1, &(0x7f00000011c0)="8f59384adc61a126a2e768127cf70e1719eecabb8c3eefe6849e418c734eeb2b64e9dfcc926832389c9c58cb9c76087f6e2aaf26f951f36ad81d1da327d086c17feaf76da103767db78c67600db210f77f435545f3280c209d4bfd44393c6d0b62eeed7d48bdd58d", &(0x7f0000001240)=""/193, 0xfffffffd, 0x0, 0x6e, 0x16, &(0x7f0000001340)="199fa2951ee42be4445a90723ffa8a66a15c755c47d6c315075e14747edfe1104cbf8fc6498ce8c10a2f5d647173819b7d60c56b1cd9c4295121a24ae5ab0133bd59278f1ceab82df575e12c9d70920a284c979b6281c88acc53bae2ee3169bca9640316c693d2491c405557a77d", &(0x7f00000013c0)="b78b2fad64527b8bd725363bd1b24a672d926a320ffd", 0x0, 0x0, 0x10}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001540)={r6, &(0x7f0000001480)="15177d37d454502fe13eaedd83c67ecee039051667372235efb8d35d59e277c19bdd6736c55400b01dd7cb66360fe4c22ecbd7a2cf737caabcc0aeb84423ed4956235d83e867b215c72118e02607d54536a34c9687d8f761d9989d8c04be8e058519b73ceb930bcb9e452e2e6b390f9559d37748b7c8510cc8f769", &(0x7f0000001500)=@tcp=r2, 0x4}, 0x20) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000001580)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000001580)) write(r9, &(0x7f0000001600)="11f93928ac9d8b056148a1d687724bfb77b622551650cb86cf88c79ecf43e8ff277810f62934b72ee492407aa1efbd34226a4d0b5ef66e11a21c9d421a04a7dd4f7f6dcd7c556ee7926a110391784902beaf29fed44915f40147fbd118e96194c09dd713e9c49d700faaee54774c2c4da1dde7c155c48b7c826a457cd701a64269cf39f8e6b478", 0x87) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f00000016c0), &(0x7f0000001700)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000017c0)={r3, &(0x7f0000001740)="7d6ecaabf84a006a51792e0cd53931cff1c2", &(0x7f0000001780)=""/37, 0x4}, 0x20) ioctl$XFS_IOC_AG_GEOMETRY(r8, 0xc080583d, &(0x7f0000001800)={0x1, 0x1, 0x7, 0x2, 0xa, 0x5, 0xe3e, 0x6}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000001ec0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001900)={0x544, r12, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xcd}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_OURS={0x2f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x05\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',(.,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, '\\{+,-$]@})+.^J\xd4{#-$/&-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1723}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',(.,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39d8d58a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+\xe4\xbc{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5b, 0x4, "3eafae8a87054c31f17d6f2e87771775a776b22d17819d0261dc4b66608d4f73fe7aa9b31c6f355e3254505e39267d4490d2417e8f2ecadb7646ccf749523449e068702f2512d47f19a1ef2b18ff98791f630cf85e04ac"}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "4631854d46c9df79a86697503c4fcde4fa316a3c13305f06ef564482e9b362a71795f8f14d57b37335f5"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x204, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "9b9190ec16d6ab28cf3f2c6aa82a2f55ac6319d7bd1d6b3f0977e58cefb1a05d1252b65d4d902467fdd9ccfb0ce0e62fa89fb6af1b3f3100542645f34bf6c119f903b24e8019419a275099433b828453d7643cf3bafa077b9a9e00bafba26a1483c551cdbbe57444d5b03cf318e18657c913896c17ff7c980941d8e3d0881f8418abb134514c8893606447dc36140d2350711ac17fe232dbd04c3a3e9fa4df769082ffde34222af0281e04ece466d2bce0750327d08d9835a5c0ca05d145e55a57804d2dfbb97efc69e769217eb156d2e110798d571621a94bd10094315bc1adfed11788e9642eae60b6561f8a30"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x57, 0x4, "c02a8b47aa5bbdbdf847713512cbe79373973ddb79d4d7990e12d77dfdbef6f338d06dfbd323aa5c005141280011aeabce41fa595e58e4c5f8abdfa2cd01bc54354c8a6524f15dde837b03e02d5b3c8d944196"}, @ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "ed1269068193e7e72b74655db30ccb31f65e915da0f4c477af3b3d4ccae18a252436696cd3ff659231ca25d52fb8cbe5cf43a37ff288970749b9e1b456b5400d0d45b7dd4efd58089e1a7b8b606fad6cc488c578c82bcb288be9ed292ce5c3c1747c4e62aaa2089ec57a9e127e545ae3d7e07236ed258418bf45ae85625490b5b3a27e59f2a57aae773c62fc41849cbd86bf5a4e5f73de94b2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000001ec0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001900)={0x544, r12, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xcd}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_OURS={0x2f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x05\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',(.,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, '\\{+,-$]@})+.^J\xd4{#-$/&-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1723}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',(.,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39d8d58a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+\xe4\xbc{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5b, 0x4, "3eafae8a87054c31f17d6f2e87771775a776b22d17819d0261dc4b66608d4f73fe7aa9b31c6f355e3254505e39267d4490d2417e8f2ecadb7646ccf749523449e068702f2512d47f19a1ef2b18ff98791f630cf85e04ac"}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "4631854d46c9df79a86697503c4fcde4fa316a3c13305f06ef564482e9b362a71795f8f14d57b37335f5"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x204, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "9b9190ec16d6ab28cf3f2c6aa82a2f55ac6319d7bd1d6b3f0977e58cefb1a05d1252b65d4d902467fdd9ccfb0ce0e62fa89fb6af1b3f3100542645f34bf6c119f903b24e8019419a275099433b828453d7643cf3bafa077b9a9e00bafba26a1483c551cdbbe57444d5b03cf318e18657c913896c17ff7c980941d8e3d0881f8418abb134514c8893606447dc36140d2350711ac17fe232dbd04c3a3e9fa4df769082ffde34222af0281e04ece466d2bce0750327d08d9835a5c0ca05d145e55a57804d2dfbb97efc69e769217eb156d2e110798d571621a94bd10094315bc1adfed11788e9642eae60b6561f8a30"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x57, 0x4, "c02a8b47aa5bbdbdf847713512cbe79373973ddb79d4d7990e12d77dfdbef6f338d06dfbd323aa5c005141280011aeabce41fa595e58e4c5f8abdfa2cd01bc54354c8a6524f15dde837b03e02d5b3c8d944196"}, @ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "ed1269068193e7e72b74655db30ccb31f65e915da0f4c477af3b3d4ccae18a252436696cd3ff659231ca25d52fb8cbe5cf43a37ff288970749b9e1b456b5400d0d45b7dd4efd58089e1a7b8b606fad6cc488c578c82bcb288be9ed292ce5c3c1747c4e62aaa2089ec57a9e127e545ae3d7e07236ed258418bf45ae85625490b5b3a27e59f2a57aae773c62fc41849cbd86bf5a4e5f73de94b2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r13 = socket$igmp(0x2, 0x3, 0x2) poll(&(0x7f0000001fc0)=[{r13, 0x80}, {0xffffffffffffffff, 0x8}, {r10, 0x4200}, {0xffffffffffffffff, 0x8000}, {r2, 0x6000}], 0x5, 0x80000001) 1m54.936839209s ago: executing program 0 (id=4159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="80007f0a0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES64=r2, @ANYRESHEX=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x24008014}, 0x4040004) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m54.066309384s ago: executing program 4 (id=4163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1m54.06613965s ago: executing program 0 (id=4164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x88ca}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1m53.162696089s ago: executing program 3 (id=4165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) 1m53.144862556s ago: executing program 1 (id=4166): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x2, 0xa, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r1}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r5, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=',', 0x30}], 0x1}, 0x20008110) getpeername$packet(r4, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000027c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000028c0)={'gretap0\x00', &(0x7f0000002800)={'gre0\x00', 0x0, 0x1, 0x7, 0x2, 0x8, {{0x1d, 0x4, 0x2, 0x18, 0x74, 0x67, 0x0, 0xf, 0x4, 0x0, @private=0xa010102, @empty, {[@lsrr={0x83, 0x1b, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100, @remote, @broadcast]}, @generic={0x94, 0x5, "681813"}, @rr={0x7, 0x7, 0x84, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x21, [@loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x23, 0xd0, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @multicast2, @private=0xa010101, @empty, @multicast2, @remote]}, @end]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000005300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000052c0)={&(0x7f0000004b80)={0x730, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x66, 0x3, "61d7fe320efe40d001277c5e7fba0cc07f07978314aa458aa8a132f75ec40f7e1a43bc945a3c198b0a16eb1e0f04bd3a21653e83f4d8179a0d535c38dfe7d4accf881ee81772257fc13e9c23d4a6e7c75ac2c1fece0fe6d750443081a4f62c57403b"}, @ETHTOOL_A_WOL_MODES={0x200, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "d66e2600347257ecb33c26155447a77c69e937840ffb54ce0881f34e091e432792cb035cfb9b5552efde27c8b6e23a35eda0d591989d854db7127c1621fe1734579c75c726ce032bd0cd3c7e2cb3bdfc0b440cb2ce1b1d6859df15203d307ea017f59f7568e3ab991e18abb6905c3ee1f7722b48d414ec5aa257bd86a069a4199730c5681fa1030e01462294c633588503726211cf078cdfb9579a8284dff78946acf84454d00c174534fc8067741abd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf8, 0x4, "f8e0159a8855db6fa5524ed0a29b81acff0621bb3c123310bcc63ec729a1cd25d343f11427f1491bd25ad2c13b3d0dd2558c981f079ae8e611245abaa1178d9ef22ac08aa816940d5369c8d3de5022976e5c1769c78de9874951eda0aa181d1546cb11b9ffee43fb6e5cf830529633b49b434443e7667dac0bf3d1c9f3abc54fb79a9d5f653f7df2ca3dc593b04da6dbf7dde54bc67103eec9d8fd3e65bc5469ba3f114fd30abc99e6ac78475eab1cde8263c367aa070b12989f5ddd044e1374d77146500465c169556142585a35a64927f8f0adb86e6a146f627c6358e10ee2f5119980b7d59e377414abd817c12034307ea8d6"}, @ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "1213ff0e2af7c1119f6bd7be094ebb80cabf007cf01f6effe24fc128ca859f051f9336647308a0ca7d94"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}]}, @ETHTOOL_A_WOL_MODES={0x294, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x31, 0x5, "ca16655ef7652c68174efc53a72afc41aba9b71a514774cf0657d2283a327baf73a1a674be3319da0b88c18a43"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\-(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+\f\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe902}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']}].\xcb\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{@\'\x05\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x379}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "507d66eddef6e8b40e9b3ab482e7ca1cbb904c6cc426a388c99cb436c9a37c4c4e8147a716fe266e5e1015da9806f340c801b142f1e848038b66cc24cc360a1580b4763841a581960f2561e14d78d22a77f87df20d775888e87f7d6e7d5723d044"}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "3eb7ce05115f47c4ae21b8fba685c5960bc2db8b2befb6f8b1edfeae562926091066a6740698a490bd796e0d85a0c6b41c9cd2148393970b51604b6b9058f2cb0ac6c5c4297cd615e11ff2bde8fa6b45282b4f22afdb3c4d63dc33f1f48fd84a7dcab9e6fecfabdf9051f9d5ee21f46ca6d89b377554cdc5afa4ff1b3c93"}, @ETHTOOL_A_BITSET_MASK={0x46, 0x5, "320a6d2082e3b56a11b32156198109a13edef8dcc6245f70cfcd7c7df4155234a014283689ed3b05dab36b5392b85ac9952d5ef77aec1b8ad372f7bcadeca8595c5d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}]}, @ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x13, 0x3, "43eaf63788303dbf8d9635b48f3614"}, @ETHTOOL_A_WOL_SOPASS={0xc1, 0x3, "f0cdcf9e6c72a720415181f9f8a9ffc307dc4da2f863bcde55e8b5a090151609f930c3e7c6fcef821f3f825f73f0ae942687f82c430a904196c507472d2577b8154ea585485e751a7bb54283bde8743e57538593f62ad29f6a3203e7478e95142c145982dfd75af1ea8105846246e0d3417d6786c1c200de77c12e792b8955481150bd6b518805625ecb1e9cc071f56b85c655f9e0cfdcdaca246003bc023ad077b7989294b949f88a1d2ef7b4877971818a737e91b3f3d9d61851d999"}, @ETHTOOL_A_WOL_SOPASS={0x1d, 0x3, "1e8577e10065dbf66044ec547579ce5ea038f56fcc88355fc1"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x730}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/174, 0xae}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000003b80)=""/4050, 0xfd2}, {&(0x7f0000002b40)=""/4117, 0x1015}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000100)=""/20, 0x14}], 0x6}, 0x20) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x16, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3"}}, 0x24) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@random="ca83", 0x2, 0x1) 1m52.927485066s ago: executing program 0 (id=4168): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x8001, 0x10}, &(0x7f0000000640)=0xc) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000010000100000000001000000085ff00003b000000000000000000000008001c00c90000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06daab01a77}, 0x40) 1m52.915125425s ago: executing program 4 (id=4169): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m52.673762629s ago: executing program 3 (id=4170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x27}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) sendto$packet(r2, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) 1m51.739108422s ago: executing program 0 (id=4172): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0x83) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2404c8c5, &(0x7f0000000000)={0xa, 0x4e22, 0xffefffff, @private0}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES32=r1], 0x10b8}, 0xff00) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) 1m51.552172868s ago: executing program 3 (id=4173): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m51.438200907s ago: executing program 1 (id=4174): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket(0x40000000015, 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x44011, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0xff, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'pimreg1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x7, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}]}}]}, 0x88}}, 0x24040084) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x21, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) recvfrom(r0, 0x0, 0x0, 0x40002042, 0x0, 0x0) 1m51.251434767s ago: executing program 3 (id=4175): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="55116878cec666ce40016ac603fad0edf22b05cc9ab62e6a8c2e482e4f6e5e2d2b00"/49, 0x31}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x2b, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x30}, 0x8000) 1m51.21886016s ago: executing program 4 (id=4176): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x311) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r0, &(0x7f0000000080)=""/38, 0x26) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}}, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x311) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) read(r0, &(0x7f0000000080)=""/38, 0x26) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}}, 0x4000) (async) 1m50.936415368s ago: executing program 3 (id=4178): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfc, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2}, {0xb}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000000006"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1m50.820223001s ago: executing program 1 (id=4179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1m50.461825292s ago: executing program 2 (id=4180): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, &(0x7f0000000100)=""/89, 0x59) 1m50.443584803s ago: executing program 4 (id=4181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14, 0x41}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x1200, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 1m50.443382717s ago: executing program 0 (id=4182): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009a2f2968c0523f8d58"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd7000000000000200000008000700"], 0x1c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1m50.442870598s ago: executing program 1 (id=4183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, 0xc, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc804}, 0x400c8c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, 0xc, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc804}, 0x400c8c0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) (async) 1m50.30977987s ago: executing program 3 (id=4184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8954, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m50.109968601s ago: executing program 1 (id=4185): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m50.074182698s ago: executing program 0 (id=4186): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m49.921976162s ago: executing program 1 (id=4187): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r3, &(0x7f0000000680)="53d2179a87e5b8f218ac605d661690cd84ddfb671dd7b6d2e8341e6cf04638ab162eac5d61df8a29a91a53a12216ea80389458e12450939fbba3b11f1e44b61d108e1baa16d8cba68c648dc0ecba07a4cf34aeb8ce37588e176978997cbdb3dbf1b01e0bd97393d1685027577619c0e31f709e00c047a403fcac71bc8b43a6b3788f4f4ca313a0d14472dcdb98041939699ba24b3efcf1b0d682e34e4820c973c581de0cab099532", &(0x7f0000000740)=""/24}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000240)='\x00', 0x222400, &(0x7f0000000100)={@_ha_fsid={[0x4, 0x3]}, {0x7, 0xf, 0x20000002, 0x41}}, 0x5, &(0x7f0000000000), &(0x7f0000000140)=0x7}) r13 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r12, 0x2, r13) 1m49.902498245s ago: executing program 2 (id=4188): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="55116878cec666ce40016ac603fad0edf22b05cc9ab62e6a8c2e482e4f6e5e2d2b00"/49, 0x31}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x2b, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x30}, 0x8000) 1m49.682246387s ago: executing program 2 (id=4189): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x18) 1m49.479604528s ago: executing program 2 (id=4190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140feffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m49.238491745s ago: executing program 2 (id=4191): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m48.996076686s ago: executing program 2 (id=4192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, &(0x7f0000000100)=""/89, 0x59) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x158, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1m34.601154728s ago: executing program 32 (id=4186): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m34.062652846s ago: executing program 33 (id=4187): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r3, &(0x7f0000000680)="53d2179a87e5b8f218ac605d661690cd84ddfb671dd7b6d2e8341e6cf04638ab162eac5d61df8a29a91a53a12216ea80389458e12450939fbba3b11f1e44b61d108e1baa16d8cba68c648dc0ecba07a4cf34aeb8ce37588e176978997cbdb3dbf1b01e0bd97393d1685027577619c0e31f709e00c047a403fcac71bc8b43a6b3788f4f4ca313a0d14472dcdb98041939699ba24b3efcf1b0d682e34e4820c973c581de0cab099532", &(0x7f0000000740)=""/24}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000240)='\x00', 0x222400, &(0x7f0000000100)={@_ha_fsid={[0x4, 0x3]}, {0x7, 0xf, 0x20000002, 0x41}}, 0x5, &(0x7f0000000000), &(0x7f0000000140)=0x7}) r13 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r12, 0x2, r13) 1m33.98175158s ago: executing program 34 (id=4184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8954, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m33.836601238s ago: executing program 35 (id=4181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14, 0x41}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x1200, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 1m33.652425016s ago: executing program 36 (id=4192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, &(0x7f0000000100)=""/89, 0x59) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x158, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 38.444700247s ago: executing program 8 (id=4200): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000040)={0x4, 0x8, 0x5, 0x57080000, 0x34}) 38.220679055s ago: executing program 8 (id=4201): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140feffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 38.013180926s ago: executing program 8 (id=4202): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 37.721269884s ago: executing program 8 (id=4203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x14}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) 37.468995373s ago: executing program 8 (id=4204): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3, 0xffffffffffffffff}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd2d, 0x25cfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1e0, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0d9df28ccc9b45a53fc24432e78843ed"}]}, @NL802154_ATTR_SEC_KEY={0xf8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0ffb77b1c5b7b17e7d4ffbf3ca5ab577"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x71}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e8bab2d0d79dd57b5305769f89d9bc3fcf4c0ceda71ce3628889dd5b0b57767c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b670da8694fadb6e77c1261ca2676956"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0xa8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "95bdacc7cedd60eebcdf5770b79e3a78"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x98}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x32b}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "93ee9a95eb332affbacf5b73392e7e13"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x200, 0x98, 0x98, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0xc]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001ffffdff6cd00000000000000000", @ANYRES32=0x0, @ANYRES64=r0], 0x40}}, 0x0) 36.954176729s ago: executing program 8 (id=4205): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x1}) (async) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {0x0}], 0x3}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x3, 0xc) (async, rerun: 64) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) r5 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r6 = socket(0x5, 0x800, 0x0) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = getpid() sendmsg$unix(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7cff00000000", 0x8}, {&(0x7f0000000100)="301ed9f9a338ef", 0x7}], 0x3) (async, rerun: 32) sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0xc, 0x1, 0x2, r7, 0x8, 0x10000, 0x0, 0x1, 0x0, 0xa, 0x8181}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (rerun: 32) write(r3, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) (async) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r12, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) (async) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r13, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) 21.045090412s ago: executing program 37 (id=4205): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x1}) (async) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {0x0}], 0x3}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x3, 0xc) (async, rerun: 64) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) r5 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r6 = socket(0x5, 0x800, 0x0) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = getpid() sendmsg$unix(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7cff00000000", 0x8}, {&(0x7f0000000100)="301ed9f9a338ef", 0x7}], 0x3) (async, rerun: 32) sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0xc, 0x1, 0x2, r7, 0x8, 0x10000, 0x0, 0x1, 0x0, 0xa, 0x8181}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (rerun: 32) write(r3, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) (async) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r12, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) (async) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r13, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) 19.272828887s ago: executing program 9 (id=4214): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000001640)="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", 0x5c9}, {&(0x7f0000000300)="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", 0x149}, {&(0x7f0000000b00)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435b2156e55eb2b2b2e0300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd540810275770aa531098c572f714f6852063afc8358fb33cc7ef5c52565d586cfe6805bb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c7be309200691488d6616780cd4e9020865ef41a22175dc52d35dac1232ae1164d7fee64a50651978436207fca4a9026a8a903e7857324459b7e8a143e6fdac0823c8d1a3ac864ad2d0402344aee2511247e716436fe118e65455da74ef25627785638dfa4bf365840fe12fbf73f0d42bcc66efc8693855156f6151e49471e1b7cccbfb01344f76cca177551c73147c32615b53f74a0b7c7ac25b86a01ce3", 0x18e}, {&(0x7f00000000c0)="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", 0x110}, {&(0x7f0000000240)="917720", 0x3}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) (fail_nth: 5) 18.965015944s ago: executing program 9 (id=4215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e310000000000000000001c006970766c616e00000c00028006000200"/56], 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 18.578888688s ago: executing program 9 (id=4216): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}, 0x1}}, 0x10) connect$tipc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="180200000c0010000000000000000000850000004100000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x12, 0xf00, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000d00)) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, &(0x7f0000000100)=""/89, 0x59) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) 17.557410533s ago: executing program 9 (id=4217): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.04103021s ago: executing program 9 (id=4218): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x3, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) 15.642087513s ago: executing program 9 (id=4219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYBLOB="b54300000000f87346bf24"], 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) listen(r1, 0x800803fc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) (async) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) (async) write$nci(r4, &(0x7f0000000100)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x7, {0x6, 0x7, 0x0, 0xf7, 0x7, 0x9}}, 0xc) (async) shutdown(r1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x70, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xc31, 0x62, 0x8, 0xf, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000)=0x6, 0x4) (async) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0xa8, 0x10, 0x13a, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b, 0x6284}, [@IFLA_PORT_SELF={0x88, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xeb0000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "46efb2afa35334f5b0da45f6309806c9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0dac3fff1d8cbf6ddeb0c9f5bcf1dfdb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "de2f6405615eb5f68b3a89574f5671cd"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7e7c1214c1a8a93b59f357127476d2e7"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e036e8dd3a71c2ee9792d1aee6910333"}, @IFLA_PORT_VF={0x8, 0x1, 0x367428a8}, @IFLA_PORT_VF={0x8, 0x1, 0xc}]}]}, 0xa8}}, 0x0) 0s ago: executing program 38 (id=4219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYBLOB="b54300000000f87346bf24"], 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) listen(r1, 0x800803fc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) (async) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) (async) write$nci(r4, &(0x7f0000000100)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x7, {0x6, 0x7, 0x0, 0xf7, 0x7, 0x9}}, 0xc) (async) shutdown(r1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x70, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xc31, 0x62, 0x8, 0xf, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000)=0x6, 0x4) (async) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0xa8, 0x10, 0x13a, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b, 0x6284}, [@IFLA_PORT_SELF={0x88, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xeb0000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "46efb2afa35334f5b0da45f6309806c9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0dac3fff1d8cbf6ddeb0c9f5bcf1dfdb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "de2f6405615eb5f68b3a89574f5671cd"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7e7c1214c1a8a93b59f357127476d2e7"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e036e8dd3a71c2ee9792d1aee6910333"}, @IFLA_PORT_VF={0x8, 0x1, 0x367428a8}, @IFLA_PORT_VF={0x8, 0x1, 0xc}]}]}, 0xa8}}, 0x0) kernel console output (not intermixed with test programs): [ 365.552873][T16462] RAX: ffffffffffffffda RBX: 00007f4ed1815fa0 RCX: 00007f4ed159cdd9 [ 365.552887][T16462] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000012 [ 365.552899][T16462] RBP: 00007f4ed23c1090 R08: 0000000000000000 R09: 0000000000000000 [ 365.552911][T16462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.552922][T16462] R13: 00007f4ed1816038 R14: 00007f4ed1815fa0 R15: 00007ffe66851d98 [ 365.552953][T16462] [ 366.112257][T16490] syzkaller0: entered promiscuous mode [ 366.118132][T16490] syzkaller0: entered allmulticast mode [ 366.472858][T16516] FAULT_INJECTION: forcing a failure. [ 366.472858][T16516] name failslab, interval 1, probability 0, space 0, times 0 [ 366.519296][T16516] CPU: 1 UID: 0 PID: 16516 Comm: syz.3.3630 Not tainted syzkaller #0 PREEMPT(full) [ 366.519323][T16516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.519336][T16516] Call Trace: [ 366.519344][T16516] [ 366.519353][T16516] dump_stack_lvl+0xe8/0x150 [ 366.519380][T16516] should_fail_ex+0x412/0x560 [ 366.519409][T16516] should_failslab+0xa8/0x100 [ 366.519443][T16516] ? skb_clone+0x212/0x3a0 [ 366.519467][T16516] kmem_cache_alloc_noprof+0x87/0x650 [ 366.519493][T16516] ? __netlink_lookup+0xc6/0x8b0 [ 366.519522][T16516] skb_clone+0x212/0x3a0 [ 366.519550][T16516] __netlink_deliver_tap+0x404/0x850 [ 366.519585][T16516] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.519608][T16516] netlink_deliver_tap+0x19c/0x1b0 [ 366.519631][T16516] netlink_unicast+0x730/0x8e0 [ 366.519663][T16516] netlink_sendmsg+0x813/0xb40 [ 366.519695][T16516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.519722][T16516] ? aa_sock_msg_perm+0xf1/0x1b0 [ 366.519747][T16516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.519775][T16516] ____sys_sendmsg+0x972/0x9f0 [ 366.519798][T16516] ? __might_fault+0xaf/0x130 [ 366.519829][T16516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.519859][T16516] ? import_iovec+0x73/0xa0 [ 366.519888][T16516] ___sys_sendmsg+0x2a5/0x360 [ 366.519910][T16516] ? __lock_acquire+0x6b5/0x2cf0 [ 366.519935][T16516] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.519995][T16516] ? __fget_files+0x2a/0x420 [ 366.520017][T16516] ? __fget_files+0x3a0/0x420 [ 366.520048][T16516] __x64_sys_sendmsg+0x1bd/0x2a0 [ 366.520073][T16516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.520105][T16516] ? __pfx_ksys_write+0x10/0x10 [ 366.520139][T16516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.520159][T16516] do_syscall_64+0x15f/0xf80 [ 366.520180][T16516] ? trace_irq_disable+0x3b/0x140 [ 366.520206][T16516] ? clear_bhb_loop+0x40/0x90 [ 366.520230][T16516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.520248][T16516] RIP: 0033:0x7f42f779cdd9 [ 366.520266][T16516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.520282][T16516] RSP: 002b:00007f42f862e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.520301][T16516] RAX: ffffffffffffffda RBX: 00007f42f7a15fa0 RCX: 00007f42f779cdd9 [ 366.520315][T16516] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000012 [ 366.520327][T16516] RBP: 00007f42f862e090 R08: 0000000000000000 R09: 0000000000000000 [ 366.520339][T16516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.520350][T16516] R13: 00007f42f7a16038 R14: 00007f42f7a15fa0 R15: 00007ffe6597cf18 [ 366.520381][T16516] [ 366.813331][T16523] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 366.972341][T16529] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.980208][T16529] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.552029][T16558] __nla_validate_parse: 149 callbacks suppressed [ 367.552051][T16558] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3646'. [ 367.832490][T16562] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3646'. [ 367.832828][T16558] vlan2: entered allmulticast mode [ 367.855151][T16558] bond0: entered allmulticast mode [ 367.884729][T16558] bond_slave_0: entered allmulticast mode [ 367.902885][T16558] bond_slave_1: entered allmulticast mode [ 368.008501][T16562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.023967][T16562] bond_slave_0: left promiscuous mode [ 368.040473][T16562] bond_slave_0: left allmulticast mode [ 368.066010][T16562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.090229][T16562] bond_slave_1: left promiscuous mode [ 368.098362][T16562] bond_slave_1: left allmulticast mode [ 368.126524][T16562] bond0 (unregistering): Released all slaves [ 368.144623][T16597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3656'. [ 368.189144][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3655'. [ 368.209520][ T1155] net_ratelimit: 23 callbacks suppressed [ 368.209540][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 368.250073][T16591] syzkaller0: entered promiscuous mode [ 368.263013][T16591] syzkaller0: entered allmulticast mode [ 368.374793][T16608] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.383470][T16608] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.444956][ T7522] bond3: (slave bridge1): failed to get link speed/duplex [ 368.554969][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 368.678230][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 368.747690][T16632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3668'. [ 368.880575][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3670'. [ 368.904088][T16641] netlink: 640 bytes leftover after parsing attributes in process `syz.4.3671'. [ 368.942733][T16641] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 369.007205][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 369.032398][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3670'. [ 369.062883][T16643] syzkaller0: entered promiscuous mode [ 369.077825][T16643] syzkaller0: entered allmulticast mode [ 369.224926][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 369.346525][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 369.479025][ T7522] bond3: (slave bridge1): failed to get link speed/duplex [ 369.480221][T16666] netlink: 'syz.4.3678': attribute type 11 has an invalid length. [ 369.597186][T16666] netlink: 'syz.4.3678': attribute type 11 has an invalid length. [ 369.627111][T16666] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3678'. [ 369.644251][T16673] validate_nla: 58 callbacks suppressed [ 369.644273][T16673] netlink: 'syz.1.3680': attribute type 1 has an invalid length. [ 369.763485][T16679] netlink: 640 bytes leftover after parsing attributes in process `syz.2.3683'. [ 369.772868][T16679] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 369.782521][ T5625] IPVS: starting estimator thread 0... [ 369.895186][T16681] IPVS: using max 30 ests per chain, 72000 per kthread [ 370.006835][T16692] syzkaller1: entered promiscuous mode [ 370.032890][T16692] syzkaller1: entered allmulticast mode [ 370.211098][T16700] syzkaller0: entered promiscuous mode [ 370.263706][T16705] xt_hashlimit: size too large, truncated to 1048576 [ 370.449722][T16712] syzkaller0: entered promiscuous mode [ 370.473581][T16712] syzkaller0: entered allmulticast mode [ 371.159874][T16744] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 371.206319][T16744] syzkaller0: entered promiscuous mode [ 371.220232][T16744] syzkaller0: entered allmulticast mode [ 371.461136][T16764] netlink: 'syz.2.3714': attribute type 1 has an invalid length. [ 371.516138][T16769] xt_hashlimit: size too large, truncated to 1048576 [ 371.548998][T16772] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 373.140803][T16840] vlan2: entered promiscuous mode [ 373.166263][T16840] hsr0: entered promiscuous mode [ 373.171864][T16840] vlan2: entered allmulticast mode [ 373.177754][T16840] hsr0: entered allmulticast mode [ 373.182827][T16840] hsr_slave_0: entered allmulticast mode [ 373.189294][T16840] hsr_slave_1: entered allmulticast mode [ 373.283768][T16850] __nla_validate_parse: 11 callbacks suppressed [ 373.283786][T16850] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3740'. [ 373.287251][T16846] syzkaller1: entered promiscuous mode [ 373.318315][T16846] syzkaller1: entered allmulticast mode [ 373.365238][ T1155] net_ratelimit: 24 callbacks suppressed [ 373.365259][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 373.367243][T16846] sctp: [Deprecated]: syz.0.3739 (pid 16846) Use of int in max_burst socket option deprecated. [ 373.367243][T16846] Use struct sctp_assoc_value instead [ 373.418709][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3744'. [ 373.571643][T16860] macvtap2: entered promiscuous mode [ 373.580332][T16860] vlan0: entered promiscuous mode [ 373.596253][T16860] macvtap2: entered allmulticast mode [ 373.601744][T16860] vlan0: entered allmulticast mode [ 373.607678][T16860] veth0_vlan: entered allmulticast mode [ 373.671500][T16870] team_slave_1: Caught tx_queue_len zero misconfig [ 373.701647][ T7522] bond3: (slave bridge1): failed to get link speed/duplex [ 373.836917][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 373.872322][T16881] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3751'. [ 373.912975][T16887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3755'. [ 373.915975][T16881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3751'. [ 373.965045][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 373.981510][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 373.999720][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3757'. [ 374.010931][T16884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3753'. [ 374.041202][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 374.057551][T16884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3753'. [ 374.095411][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 374.107919][T16899] netlink: 'syz.4.3757': attribute type 1 has an invalid length. [ 374.118004][ T5634] block nbd2: Receive control failed (result -32) [ 374.236958][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 374.321304][T16906] FAULT_INJECTION: forcing a failure. [ 374.321304][T16906] name failslab, interval 1, probability 0, space 0, times 0 [ 374.346678][T16906] CPU: 0 UID: 0 PID: 16906 Comm: syz.2.3760 Not tainted syzkaller #0 PREEMPT(full) [ 374.346705][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.346716][T16906] Call Trace: [ 374.346722][T16906] [ 374.346730][T16906] dump_stack_lvl+0xe8/0x150 [ 374.346757][T16906] should_fail_ex+0x412/0x560 [ 374.346784][T16906] should_failslab+0xa8/0x100 [ 374.346815][T16906] __kmalloc_noprof+0xe8/0x760 [ 374.346839][T16906] ? cfg80211_mlme_register_mgmt+0x2bf/0x890 [ 374.346860][T16906] ? __pfx_netdev_run_todo+0x10/0x10 [ 374.346889][T16906] cfg80211_mlme_register_mgmt+0x2bf/0x890 [ 374.346924][T16906] nl80211_register_mgmt+0x41f/0x510 [ 374.346964][T16906] genl_family_rcv_msg_doit+0x22a/0x330 [ 374.347000][T16906] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 374.347040][T16906] ? bpf_lsm_capable+0x9/0x20 [ 374.347058][T16906] ? security_capable+0x7e/0x2c0 [ 374.347087][T16906] genl_rcv_msg+0x61c/0x7a0 [ 374.347121][T16906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.347146][T16906] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 374.347163][T16906] ? __pfx_nl80211_register_mgmt+0x10/0x10 [ 374.347185][T16906] ? __pfx_nl80211_post_doit+0x10/0x10 [ 374.347217][T16906] netlink_rcv_skb+0x232/0x4b0 [ 374.347241][T16906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.347268][T16906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.347303][T16906] ? down_read+0x270/0x2e0 [ 374.347321][T16906] ? genl_rcv+0xd/0x40 [ 374.347347][T16906] genl_rcv+0x28/0x40 [ 374.347371][T16906] netlink_unicast+0x75c/0x8e0 [ 374.347403][T16906] netlink_sendmsg+0x813/0xb40 [ 374.347432][T16906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.347457][T16906] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.347481][T16906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.347509][T16906] ____sys_sendmsg+0x972/0x9f0 [ 374.347532][T16906] ? __might_fault+0xaf/0x130 [ 374.347562][T16906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.347596][T16906] ? import_iovec+0x73/0xa0 [ 374.347626][T16906] ___sys_sendmsg+0x2a5/0x360 [ 374.347647][T16906] ? __lock_acquire+0x6b5/0x2cf0 [ 374.347673][T16906] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.347727][T16906] ? __fget_files+0x2a/0x420 [ 374.347749][T16906] ? __fget_files+0x3a0/0x420 [ 374.347781][T16906] __x64_sys_sendmsg+0x1bd/0x2a0 [ 374.347809][T16906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.347843][T16906] ? __pfx_ksys_write+0x10/0x10 [ 374.347878][T16906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.347899][T16906] do_syscall_64+0x15f/0xf80 [ 374.347920][T16906] ? trace_irq_disable+0x3b/0x140 [ 374.347953][T16906] ? clear_bhb_loop+0x40/0x90 [ 374.347977][T16906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.347996][T16906] RIP: 0033:0x7f9c4839cdd9 [ 374.348014][T16906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.348031][T16906] RSP: 002b:00007f9c492ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.348051][T16906] RAX: ffffffffffffffda RBX: 00007f9c48615fa0 RCX: 00007f9c4839cdd9 [ 374.348064][T16906] RDX: 0000000000004810 RSI: 00002000000001c0 RDI: 0000000000000003 [ 374.348077][T16906] RBP: 00007f9c492ea090 R08: 0000000000000000 R09: 0000000000000000 [ 374.348089][T16906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.348100][T16906] R13: 00007f9c48616038 R14: 00007f9c48615fa0 R15: 00007fff5ba95408 [ 374.348133][T16906] [ 374.706049][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 374.825101][ T7522] bond3: (slave bridge1): failed to get link speed/duplex [ 374.876508][T16918] netlink: 'syz.2.3764': attribute type 1 has an invalid length. [ 374.893054][T16920] syzkaller1: entered promiscuous mode [ 374.912350][T16920] syzkaller1: entered allmulticast mode [ 374.935516][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 375.043215][T16925] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.050746][T16925] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.094991][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 375.464718][T16949] xt_hashlimit: size too large, truncated to 1048576 [ 375.704599][T16969] netlink: 'syz.4.3783': attribute type 3 has an invalid length. [ 375.722961][T16973] netlink: 'syz.0.3777': attribute type 1 has an invalid length. [ 375.832672][T16979] netlink: 'syz.3.3785': attribute type 1 has an invalid length. [ 376.030723][T16988] bond0: (slave bond_slave_1): Device is not bonding slave [ 376.038145][T16988] bond0: option active_slave: invalid value (bond_slave_1) [ 376.432942][T17015] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 376.549183][ T1736] block nbd1: Connection timed out, retrying (0/2 alive) [ 376.557378][ T1736] block nbd1: Connection timed out, retrying (0/2 alive) [ 376.568173][ T1736] block nbd1: Connection timed out, retrying (0/2 alive) [ 376.575340][ T1736] block nbd1: Connection timed out, retrying (0/2 alive) [ 376.582912][ T25] block nbd1: Dead connection, failed to find a fallback [ 376.592393][ T25] block nbd1: shutting down sockets [ 376.602328][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.615905][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 376.624322][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.633531][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 376.641627][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.650788][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 376.659175][ T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.668280][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 376.678973][T11407] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.688740][T11407] Buffer I/O error on dev nbd1, logical block 0, async page read [ 376.697160][T11407] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.706403][T11407] Buffer I/O error on dev nbd1, logical block 1, async page read [ 376.715834][T11407] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.725237][T11407] Buffer I/O error on dev nbd1, logical block 2, async page read [ 376.733146][T11407] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.742340][T11407] Buffer I/O error on dev nbd1, logical block 3, async page read [ 376.750426][T11407] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.759569][T11407] Buffer I/O error on dev nbd1, logical block 0, async page read [ 376.767675][T11407] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.776839][T11407] Buffer I/O error on dev nbd1, logical block 1, async page read [ 376.789952][T11407] ldm_validate_partition_table(): Disk read failed. [ 376.798864][T11407] Dev nbd1: unable to read RDB block 0 [ 376.808866][T11407] nbd1: unable to read partition table [ 376.831003][T11407] ldm_validate_partition_table(): Disk read failed. [ 376.849910][T11407] Dev nbd1: unable to read RDB block 0 [ 376.868178][T11407] nbd1: unable to read partition table [ 376.896033][T17029] xt_hashlimit: size too large, truncated to 1048576 [ 377.344760][T17052] FAULT_INJECTION: forcing a failure. [ 377.344760][T17052] name failslab, interval 1, probability 0, space 0, times 0 [ 377.384998][T17052] CPU: 1 UID: 0 PID: 17052 Comm: syz.1.3814 Not tainted syzkaller #0 PREEMPT(full) [ 377.385024][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.385035][T17052] Call Trace: [ 377.385044][T17052] [ 377.385052][T17052] dump_stack_lvl+0xe8/0x150 [ 377.385080][T17052] should_fail_ex+0x412/0x560 [ 377.385109][T17052] should_failslab+0xa8/0x100 [ 377.385139][T17052] __kmalloc_noprof+0xe8/0x760 [ 377.385163][T17052] ? ethnl_default_set_doit+0x16a/0xad0 [ 377.385193][T17052] ethnl_default_set_doit+0x16a/0xad0 [ 377.385217][T17052] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 377.385242][T17052] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 377.385274][T17052] genl_family_rcv_msg_doit+0x22a/0x330 [ 377.385301][T17052] ? __asan_memcpy+0x40/0x70 [ 377.385325][T17052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 377.385364][T17052] ? bpf_lsm_capable+0x9/0x20 [ 377.385382][T17052] ? security_capable+0x7e/0x2c0 [ 377.385409][T17052] genl_rcv_msg+0x61c/0x7a0 [ 377.385441][T17052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.385475][T17052] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 377.385501][T17052] ? __pfx_ref_tracker_free+0x10/0x10 [ 377.385536][T17052] netlink_rcv_skb+0x232/0x4b0 [ 377.385558][T17052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.385585][T17052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.385623][T17052] ? down_read+0x270/0x2e0 [ 377.385643][T17052] ? genl_rcv+0xd/0x40 [ 377.385671][T17052] genl_rcv+0x28/0x40 [ 377.385694][T17052] netlink_unicast+0x75c/0x8e0 [ 377.385723][T17052] netlink_sendmsg+0x813/0xb40 [ 377.385755][T17052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.385781][T17052] ? aa_sock_msg_perm+0xf1/0x1b0 [ 377.385809][T17052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.385835][T17052] ____sys_sendmsg+0x972/0x9f0 [ 377.385857][T17052] ? __might_fault+0xaf/0x130 [ 377.385885][T17052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.385917][T17052] ? import_iovec+0x73/0xa0 [ 377.385946][T17052] ___sys_sendmsg+0x2a5/0x360 [ 377.385967][T17052] ? __lock_acquire+0x6b5/0x2cf0 [ 377.385991][T17052] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.386052][T17052] ? __fget_files+0x2a/0x420 [ 377.386073][T17052] ? __fget_files+0x3a0/0x420 [ 377.386103][T17052] __x64_sys_sendmsg+0x1bd/0x2a0 [ 377.386128][T17052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.386159][T17052] ? __pfx_ksys_write+0x10/0x10 [ 377.386193][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.386213][T17052] do_syscall_64+0x15f/0xf80 [ 377.386233][T17052] ? trace_irq_disable+0x3b/0x140 [ 377.386258][T17052] ? clear_bhb_loop+0x40/0x90 [ 377.386279][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.386298][T17052] RIP: 0033:0x7f4ed159cdd9 [ 377.386316][T17052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.386330][T17052] RSP: 002b:00007f4ed23c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.386349][T17052] RAX: ffffffffffffffda RBX: 00007f4ed1815fa0 RCX: 00007f4ed159cdd9 [ 377.386361][T17052] RDX: 0000000000008044 RSI: 0000200000000540 RDI: 000000000000001b [ 377.386372][T17052] RBP: 00007f4ed23c1090 R08: 0000000000000000 R09: 0000000000000000 [ 377.386384][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.386394][T17052] R13: 00007f4ed1816038 R14: 00007f4ed1815fa0 R15: 00007ffe66851d98 [ 377.386424][T17052] [ 377.827557][T17064] netlink: 'syz.3.3815': attribute type 3 has an invalid length. [ 377.835668][T17064] netlink: 'syz.3.3815': attribute type 1 has an invalid length. [ 377.979290][T17073] team0: Device vlan0 failed to change mtu [ 378.195375][T17084] xt_hashlimit: size too large, truncated to 1048576 [ 378.397899][ T7521] net_ratelimit: 24 callbacks suppressed [ 378.397918][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 378.433523][T17099] FAULT_INJECTION: forcing a failure. [ 378.433523][T17099] name failslab, interval 1, probability 0, space 0, times 0 [ 378.475475][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.482986][ T1312] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.483618][T17099] CPU: 1 UID: 0 PID: 17099 Comm: syz.3.3827 Not tainted syzkaller #0 PREEMPT(full) [ 378.483640][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 378.483651][T17099] Call Trace: [ 378.483659][T17099] [ 378.483667][T17099] dump_stack_lvl+0xe8/0x150 [ 378.483693][T17099] should_fail_ex+0x412/0x560 [ 378.483721][T17099] should_failslab+0xa8/0x100 [ 378.483748][T17099] __kmalloc_noprof+0xe8/0x760 [ 378.483772][T17099] ? ethnl_default_set_doit+0x16a/0xad0 [ 378.483802][T17099] ethnl_default_set_doit+0x16a/0xad0 [ 378.483828][T17099] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 378.483853][T17099] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 378.483886][T17099] genl_family_rcv_msg_doit+0x22a/0x330 [ 378.483913][T17099] ? __asan_memcpy+0x40/0x70 [ 378.483937][T17099] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 378.483974][T17099] ? bpf_lsm_capable+0x9/0x20 [ 378.483992][T17099] ? security_capable+0x7e/0x2c0 [ 378.484022][T17099] genl_rcv_msg+0x61c/0x7a0 [ 378.484053][T17099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.484077][T17099] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 378.484103][T17099] ? __pfx_ref_tracker_free+0x10/0x10 [ 378.484135][T17099] netlink_rcv_skb+0x232/0x4b0 [ 378.484157][T17099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.484184][T17099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.484220][T17099] ? down_read+0x270/0x2e0 [ 378.484241][T17099] ? genl_rcv+0xd/0x40 [ 378.484266][T17099] genl_rcv+0x28/0x40 [ 378.484295][T17099] netlink_unicast+0x75c/0x8e0 [ 378.484325][T17099] netlink_sendmsg+0x813/0xb40 [ 378.484355][T17099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.484380][T17099] ? aa_sock_msg_perm+0xf1/0x1b0 [ 378.484404][T17099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.484430][T17099] ____sys_sendmsg+0x972/0x9f0 [ 378.484453][T17099] ? __might_fault+0xaf/0x130 [ 378.484481][T17099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.484513][T17099] ? import_iovec+0x73/0xa0 [ 378.484540][T17099] ___sys_sendmsg+0x2a5/0x360 [ 378.484561][T17099] ? __lock_acquire+0x6b5/0x2cf0 [ 378.484584][T17099] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.484641][T17099] ? __fget_files+0x2a/0x420 [ 378.484661][T17099] ? __fget_files+0x3a0/0x420 [ 378.484691][T17099] __x64_sys_sendmsg+0x1bd/0x2a0 [ 378.484716][T17099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.484748][T17099] ? __pfx_ksys_write+0x10/0x10 [ 378.484780][T17099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.484800][T17099] do_syscall_64+0x15f/0xf80 [ 378.484820][T17099] ? trace_irq_disable+0x3b/0x140 [ 378.484845][T17099] ? clear_bhb_loop+0x40/0x90 [ 378.484866][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.484883][T17099] RIP: 0033:0x7f42f779cdd9 [ 378.484901][T17099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.484916][T17099] RSP: 002b:00007f42f862e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.484935][T17099] RAX: ffffffffffffffda RBX: 00007f42f7a15fa0 RCX: 00007f42f779cdd9 [ 378.484948][T17099] RDX: 0000000000008044 RSI: 0000200000000540 RDI: 000000000000001b [ 378.484959][T17099] RBP: 00007f42f862e090 R08: 0000000000000000 R09: 0000000000000000 [ 378.484969][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.484980][T17099] R13: 00007f42f7a16038 R14: 00007f42f7a15fa0 R15: 00007ffe6597cf18 [ 378.485009][T17099] [ 378.584932][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 378.953790][T17110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.967781][T17110] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.985275][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 379.105458][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 379.172441][T17126] syzkaller1: entered promiscuous mode [ 379.187949][T17126] syzkaller1: entered allmulticast mode [ 379.234993][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 379.345720][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 379.383980][T17138] netlink: 'syz.0.3838': attribute type 1 has an invalid length. [ 379.488144][T17142] netlink: 'syz.3.3839': attribute type 6 has an invalid length. [ 379.566516][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 379.683059][T17150] __nla_validate_parse: 21 callbacks suppressed [ 379.683080][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 379.698918][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 379.728346][T17154] FAULT_INJECTION: forcing a failure. [ 379.728346][T17154] name failslab, interval 1, probability 0, space 0, times 0 [ 379.733776][T17149] xt_hashlimit: size too large, truncated to 1048576 [ 379.771000][T17154] CPU: 0 UID: 0 PID: 17154 Comm: syz.4.3844 Not tainted syzkaller #0 PREEMPT(full) [ 379.771024][T17154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.771036][T17154] Call Trace: [ 379.771044][T17154] [ 379.771053][T17154] dump_stack_lvl+0xe8/0x150 [ 379.771078][T17154] should_fail_ex+0x412/0x560 [ 379.771106][T17154] should_failslab+0xa8/0x100 [ 379.771142][T17154] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 379.771169][T17154] ? ethnl_default_set_doit+0x59d/0xad0 [ 379.771192][T17154] ? __kmalloc_noprof+0x37d/0x760 [ 379.771219][T17154] kmemdup_noprof+0x2b/0x70 [ 379.771240][T17154] ethnl_default_set_doit+0x59d/0xad0 [ 379.771274][T17154] genl_family_rcv_msg_doit+0x22a/0x330 [ 379.771302][T17154] ? __asan_memcpy+0x40/0x70 [ 379.771325][T17154] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 379.771366][T17154] ? bpf_lsm_capable+0x9/0x20 [ 379.771384][T17154] ? security_capable+0x7e/0x2c0 [ 379.771407][T17154] genl_rcv_msg+0x61c/0x7a0 [ 379.771438][T17154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.771463][T17154] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 379.771489][T17154] ? __pfx_ref_tracker_free+0x10/0x10 [ 379.771523][T17154] netlink_rcv_skb+0x232/0x4b0 [ 379.771546][T17154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.771573][T17154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.771612][T17154] ? down_read+0x270/0x2e0 [ 379.771634][T17154] ? genl_rcv+0xd/0x40 [ 379.771661][T17154] genl_rcv+0x28/0x40 [ 379.771685][T17154] netlink_unicast+0x75c/0x8e0 [ 379.771716][T17154] netlink_sendmsg+0x813/0xb40 [ 379.771748][T17154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.771773][T17154] ? aa_sock_msg_perm+0xf1/0x1b0 [ 379.771799][T17154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.771826][T17154] ____sys_sendmsg+0x972/0x9f0 [ 379.771850][T17154] ? __might_fault+0xaf/0x130 [ 379.771878][T17154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.771911][T17154] ? import_iovec+0x73/0xa0 [ 379.771939][T17154] ___sys_sendmsg+0x2a5/0x360 [ 379.771960][T17154] ? __lock_acquire+0x6b5/0x2cf0 [ 379.771986][T17154] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.772049][T17154] ? __fget_files+0x2a/0x420 [ 379.772069][T17154] ? __fget_files+0x3a0/0x420 [ 379.772103][T17154] __x64_sys_sendmsg+0x1bd/0x2a0 [ 379.772135][T17154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.772167][T17154] ? __pfx_ksys_write+0x10/0x10 [ 379.772200][T17154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.772220][T17154] do_syscall_64+0x15f/0xf80 [ 379.772240][T17154] ? trace_irq_disable+0x3b/0x140 [ 379.772266][T17154] ? clear_bhb_loop+0x40/0x90 [ 379.772287][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.772305][T17154] RIP: 0033:0x7f7393f9cdd9 [ 379.772324][T17154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.772339][T17154] RSP: 002b:00007f7394e06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.772357][T17154] RAX: ffffffffffffffda RBX: 00007f7394215fa0 RCX: 00007f7393f9cdd9 [ 379.772370][T17154] RDX: 0000000000008044 RSI: 0000200000000540 RDI: 000000000000001b [ 379.772381][T17154] RBP: 00007f7394e06090 R08: 0000000000000000 R09: 0000000000000000 [ 379.772391][T17154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.772402][T17154] R13: 00007f7394216038 R14: 00007f7394215fa0 R15: 00007fff8f570408 [ 379.772436][T17154] [ 380.102259][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 380.279115][T17158] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3842'. [ 380.294793][T17164] netlink: 640 bytes leftover after parsing attributes in process `syz.1.3845'. [ 380.517047][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3849'. [ 380.546372][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3849'. [ 380.842406][T17194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3856'. [ 381.042262][T17206] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.156777][T17214] netlink: 640 bytes leftover after parsing attributes in process `syz.3.3858'. [ 381.199452][T17206] syzkaller1: entered promiscuous mode [ 381.214949][T17206] syzkaller1: entered allmulticast mode [ 381.273999][T17216] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.281224][T17216] bridge0: port 2(bridge_slave_1) entered listening state [ 381.288628][T17216] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.295809][T17216] bridge0: port 1(bridge_slave_0) entered listening state [ 381.392931][T17218] xt_hashlimit: size too large, truncated to 1048576 [ 381.448414][T17221] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3860'. [ 381.469333][T17220] syzkaller0: entered promiscuous mode [ 381.476733][T17220] syzkaller0: entered allmulticast mode [ 381.783800][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3865'. [ 381.783802][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 381.811864][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 381.829887][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3865'. [ 381.862338][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 381.892026][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 381.918809][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 381.968404][T17245] ip6gre2: entered allmulticast mode [ 381.975757][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 382.020222][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 382.073394][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 382.101072][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 382.135613][T17230] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 382.641148][T17288] team0: Device vlan0 failed to change mtu [ 383.405149][ T35] net_ratelimit: 23 callbacks suppressed [ 383.405165][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 383.535069][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 383.645007][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 383.681761][T17306] xt_hashlimit: size too large, truncated to 1048576 [ 383.756141][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 383.865559][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 383.975009][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 384.020146][T17208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.176761][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 384.296167][T17326] team0: Device vlan0 failed to change mtu [ 384.316655][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 384.438965][T17328] bond14: entered promiscuous mode [ 384.448740][T17334] xt_hashlimit: overflow, rate too high: 0 [ 384.469567][T17328] bond14: entered allmulticast mode [ 384.486911][T17328] 8021q: adding VLAN 0 to HW filter on device bond14 [ 384.497386][T17340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.515007][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 384.585395][T17334] block nbd3: server does not support multiple connections per device. [ 384.598781][T17334] block nbd3: shutting down sockets [ 385.081245][T17366] __nla_validate_parse: 71 callbacks suppressed [ 385.081265][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3896'. [ 385.167390][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 385.314525][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3900'. [ 385.526106][T17385] netlink: 'syz.4.3903': attribute type 11 has an invalid length. [ 385.600764][T17379] syzkaller0: entered promiscuous mode [ 385.626689][T17379] syzkaller0: entered allmulticast mode [ 386.203801][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3911'. [ 388.071904][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 388.470963][T17439] netlink: 640 bytes leftover after parsing attributes in process `syz.0.3917'. [ 388.513194][T17441] net_ratelimit: 8 callbacks suppressed [ 388.513236][T17441] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 388.516640][T17439] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 388.618036][T17447] validate_nla: 31 callbacks suppressed [ 388.618085][T17447] netlink: 'syz.3.3918': attribute type 2 has an invalid length. [ 388.665184][T17447] netlink: 'syz.3.3918': attribute type 8 has an invalid length. [ 388.692178][T17447] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3918'. [ 389.033214][T17462] FAULT_INJECTION: forcing a failure. [ 389.033214][T17462] name failslab, interval 1, probability 0, space 0, times 0 [ 389.056329][T17462] CPU: 1 UID: 0 PID: 17462 Comm: syz.0.3923 Not tainted syzkaller #0 PREEMPT(full) [ 389.056354][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 389.056366][T17462] Call Trace: [ 389.056373][T17462] [ 389.056381][T17462] dump_stack_lvl+0xe8/0x150 [ 389.056408][T17462] should_fail_ex+0x412/0x560 [ 389.056435][T17462] should_failslab+0xa8/0x100 [ 389.056461][T17462] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 389.056485][T17462] ? __alloc_skb+0x186/0x7d0 [ 389.056505][T17462] ? __alloc_skb+0x1d0/0x7d0 [ 389.056522][T17462] ? __local_bh_enable_ip+0xd0/0x130 [ 389.056546][T17462] __alloc_skb+0x1d0/0x7d0 [ 389.056570][T17462] netlink_sendmsg+0x5d4/0xb40 [ 389.056601][T17462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.056626][T17462] ? aa_sock_msg_perm+0xf1/0x1b0 [ 389.056651][T17462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.056679][T17462] ____sys_sendmsg+0x972/0x9f0 [ 389.056702][T17462] ? __might_fault+0xaf/0x130 [ 389.056730][T17462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.056762][T17462] ? import_iovec+0x73/0xa0 [ 389.056790][T17462] ___sys_sendmsg+0x2a5/0x360 [ 389.056812][T17462] ? __lock_acquire+0x6b5/0x2cf0 [ 389.056836][T17462] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.056893][T17462] ? __fget_files+0x2a/0x420 [ 389.056914][T17462] ? __fget_files+0x3a0/0x420 [ 389.056945][T17462] __x64_sys_sendmsg+0x1bd/0x2a0 [ 389.056970][T17462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.057002][T17462] ? __pfx_ksys_write+0x10/0x10 [ 389.057035][T17462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.057055][T17462] do_syscall_64+0x15f/0xf80 [ 389.057076][T17462] ? trace_irq_disable+0x3b/0x140 [ 389.057101][T17462] ? clear_bhb_loop+0x40/0x90 [ 389.057123][T17462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.057140][T17462] RIP: 0033:0x7fe465f9cdd9 [ 389.057159][T17462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.057175][T17462] RSP: 002b:00007fe466ee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.057194][T17462] RAX: ffffffffffffffda RBX: 00007fe466215fa0 RCX: 00007fe465f9cdd9 [ 389.057208][T17462] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000004 [ 389.057220][T17462] RBP: 00007fe466ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.057238][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.057248][T17462] R13: 00007fe466216038 R14: 00007fe466215fa0 R15: 00007ffe83a9b8e8 [ 389.057279][T17462] [ 389.331300][ T7522] bond3: (slave bridge1): failed to get link speed/duplex [ 389.477169][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 389.556455][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 389.670681][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 389.760740][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3925'. [ 389.784020][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 389.945528][T17476] bond18 (unregistering): Released all slaves [ 390.007201][T17483] Bluetooth: MGMT ver 1.23 [ 390.107499][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 390.146770][T17488] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3934'. [ 390.232443][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 390.250685][T17493] xt_hashlimit: size too large, truncated to 1048576 [ 390.308729][T17496] sctp: [Deprecated]: syz.3.3934 (pid 17496) Use of int in max_burst socket option. [ 390.308729][T17496] Use struct sctp_assoc_value instead [ 390.325191][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 390.405411][T17496] netlink: 46728 bytes leftover after parsing attributes in process `syz.3.3934'. [ 390.706065][T17513] FAULT_INJECTION: forcing a failure. [ 390.706065][T17513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.724910][T17513] CPU: 0 UID: 0 PID: 17513 Comm: syz.0.3938 Not tainted syzkaller #0 PREEMPT(full) [ 390.724936][T17513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.724947][T17513] Call Trace: [ 390.724955][T17513] [ 390.724963][T17513] dump_stack_lvl+0xe8/0x150 [ 390.724990][T17513] should_fail_ex+0x412/0x560 [ 390.725018][T17513] _copy_from_iter+0x1d3/0x1670 [ 390.725045][T17513] ? rcu_is_watching+0x15/0xb0 [ 390.725073][T17513] ? __pfx__copy_from_iter+0x10/0x10 [ 390.725103][T17513] ? netlink_sendmsg+0x650/0xb40 [ 390.725125][T17513] ? skb_put+0x11b/0x210 [ 390.725149][T17513] netlink_sendmsg+0x6c0/0xb40 [ 390.725181][T17513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.725206][T17513] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.725231][T17513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.725259][T17513] ____sys_sendmsg+0x972/0x9f0 [ 390.725282][T17513] ? __might_fault+0xaf/0x130 [ 390.725311][T17513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.725349][T17513] ? import_iovec+0x73/0xa0 [ 390.725378][T17513] ___sys_sendmsg+0x2a5/0x360 [ 390.725399][T17513] ? __lock_acquire+0x6b5/0x2cf0 [ 390.725424][T17513] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.725481][T17513] ? __fget_files+0x2a/0x420 [ 390.725501][T17513] ? __fget_files+0x3a0/0x420 [ 390.725532][T17513] __x64_sys_sendmsg+0x1bd/0x2a0 [ 390.725558][T17513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.725591][T17513] ? __pfx_ksys_write+0x10/0x10 [ 390.725625][T17513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.725645][T17513] do_syscall_64+0x15f/0xf80 [ 390.725666][T17513] ? trace_irq_disable+0x3b/0x140 [ 390.725692][T17513] ? clear_bhb_loop+0x40/0x90 [ 390.725715][T17513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.725733][T17513] RIP: 0033:0x7fe465f9cdd9 [ 390.725751][T17513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.725767][T17513] RSP: 002b:00007fe466ee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.725787][T17513] RAX: ffffffffffffffda RBX: 00007fe466215fa0 RCX: 00007fe465f9cdd9 [ 390.725800][T17513] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000004 [ 390.725812][T17513] RBP: 00007fe466ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.725824][T17513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.725835][T17513] R13: 00007fe466216038 R14: 00007fe466215fa0 R15: 00007ffe83a9b8e8 [ 390.725865][T17513] [ 391.661597][T17544] FAULT_INJECTION: forcing a failure. [ 391.661597][T17544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.675999][T17544] CPU: 0 UID: 0 PID: 17544 Comm: syz.3.3951 Not tainted syzkaller #0 PREEMPT(full) [ 391.676025][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.676037][T17544] Call Trace: [ 391.676044][T17544] [ 391.676053][T17544] dump_stack_lvl+0xe8/0x150 [ 391.676080][T17544] should_fail_ex+0x412/0x560 [ 391.676108][T17544] _copy_from_iter+0x1d3/0x1670 [ 391.676135][T17544] ? rcu_is_watching+0x15/0xb0 [ 391.676164][T17544] ? __pfx__copy_from_iter+0x10/0x10 [ 391.676195][T17544] ? netlink_sendmsg+0x650/0xb40 [ 391.676216][T17544] ? skb_put+0x11b/0x210 [ 391.676241][T17544] netlink_sendmsg+0x6c0/0xb40 [ 391.676276][T17544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.676302][T17544] ? aa_sock_msg_perm+0xf1/0x1b0 [ 391.676326][T17544] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.676355][T17544] ____sys_sendmsg+0x972/0x9f0 [ 391.676377][T17544] ? __might_fault+0xaf/0x130 [ 391.676407][T17544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.676438][T17544] ? import_iovec+0x73/0xa0 [ 391.676466][T17544] ___sys_sendmsg+0x2a5/0x360 [ 391.676488][T17544] ? __lock_acquire+0x6b5/0x2cf0 [ 391.676513][T17544] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.676571][T17544] ? __fget_files+0x2a/0x420 [ 391.676593][T17544] ? __fget_files+0x3a0/0x420 [ 391.676624][T17544] __x64_sys_sendmsg+0x1bd/0x2a0 [ 391.676651][T17544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.676684][T17544] ? __pfx_ksys_write+0x10/0x10 [ 391.676717][T17544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.676738][T17544] do_syscall_64+0x15f/0xf80 [ 391.676758][T17544] ? trace_irq_disable+0x3b/0x140 [ 391.676784][T17544] ? clear_bhb_loop+0x40/0x90 [ 391.676807][T17544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.676826][T17544] RIP: 0033:0x7f42f779cdd9 [ 391.676843][T17544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.676859][T17544] RSP: 002b:00007f42f862e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.676879][T17544] RAX: ffffffffffffffda RBX: 00007f42f7a15fa0 RCX: 00007f42f779cdd9 [ 391.676892][T17544] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000004 [ 391.676903][T17544] RBP: 00007f42f862e090 R08: 0000000000000000 R09: 0000000000000000 [ 391.676915][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.676926][T17544] R13: 00007f42f7a16038 R14: 00007f42f7a15fa0 R15: 00007ffe6597cf18 [ 391.676956][T17544] [ 392.843954][T17581] team0: Device vlan0 failed to change mtu [ 392.939014][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3963'. [ 392.955564][T17588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3963'. [ 392.968110][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3963'. [ 392.978083][T17588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3963'. [ 393.536980][T17599] netlink: 'syz.4.3968': attribute type 21 has an invalid length. [ 393.552987][T17599] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3968'. [ 393.578776][T17599] netlink: 'syz.4.3968': attribute type 4 has an invalid length. [ 393.601565][T17599] netlink: 'syz.4.3968': attribute type 5 has an invalid length. [ 393.619884][T17602] netlink: 'syz.4.3968': attribute type 21 has an invalid length. [ 393.636804][T17599] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3968'. [ 393.647157][T17602] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3968'. [ 393.657283][T17602] netlink: 'syz.4.3968': attribute type 4 has an invalid length. [ 393.693312][T17602] netlink: 'syz.4.3968': attribute type 5 has an invalid length. [ 393.720909][T17602] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3968'. [ 393.764993][ T185] net_ratelimit: 25 callbacks suppressed [ 393.765013][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 393.914999][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 394.025380][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 394.134966][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 394.247229][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 394.360213][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 394.481018][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 394.596563][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 394.776782][T17618] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.784012][T17618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.794127][T17618] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.801322][T17618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.927985][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 395.115209][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 395.179880][T17634] __nla_validate_parse: 1 callbacks suppressed [ 395.179907][T17634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3981'. [ 395.329076][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3985'. [ 395.612082][T17662] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3992'. [ 395.744497][T17670] FAULT_INJECTION: forcing a failure. [ 395.744497][T17670] name failslab, interval 1, probability 0, space 0, times 0 [ 395.818719][T17670] CPU: 1 UID: 0 PID: 17670 Comm: syz.0.3994 Not tainted syzkaller #0 PREEMPT(full) [ 395.818747][T17670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 395.818759][T17670] Call Trace: [ 395.818767][T17670] [ 395.818775][T17670] dump_stack_lvl+0xe8/0x150 [ 395.818803][T17670] should_fail_ex+0x412/0x560 [ 395.818832][T17670] should_failslab+0xa8/0x100 [ 395.818858][T17670] ? dst_alloc+0x105/0x170 [ 395.818883][T17670] kmem_cache_alloc_noprof+0x87/0x650 [ 395.818905][T17670] ? __pfx_find_exception+0x10/0x10 [ 395.818930][T17670] ? fib_lookup+0x76/0x440 [ 395.818954][T17670] dst_alloc+0x105/0x170 [ 395.818982][T17670] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 395.819016][T17670] ? ip_route_output_key_hash+0xd8/0x2a0 [ 395.819043][T17670] ip_route_output_key_hash+0x18d/0x2a0 [ 395.819069][T17670] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 395.819098][T17670] ? call_rcu+0x644/0x890 [ 395.819118][T17670] ? lockdep_hardirqs_on+0x7a/0x110 [ 395.819143][T17670] ip_route_output_flow+0x2a/0x150 [ 395.819163][T17670] ? security_sk_classify_flow+0x6d/0x150 [ 395.819191][T17670] tcp_v4_connect+0x828/0x19b0 [ 395.819228][T17670] ? __pfx_tcp_v4_connect+0x10/0x10 [ 395.819258][T17670] __inet_stream_connect+0x25a/0xdd0 [ 395.819289][T17670] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.819311][T17670] ? lock_sock_nested+0x6a/0x100 [ 395.819341][T17670] ? __pfx___inet_stream_connect+0x10/0x10 [ 395.819369][T17670] ? inet_stream_connect+0x51/0xa0 [ 395.819395][T17670] ? __local_bh_enable_ip+0xd0/0x130 [ 395.819419][T17670] inet_stream_connect+0x66/0xa0 [ 395.819446][T17670] kernel_connect+0x141/0x1c0 [ 395.819474][T17670] ? __pfx_kernel_connect+0x10/0x10 [ 395.819495][T17670] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.819530][T17670] ? smc_connect+0xbd/0xd90 [ 395.819553][T17670] ? __local_bh_enable_ip+0xd0/0x130 [ 395.819576][T17670] smc_connect+0x7a5/0xd90 [ 395.819603][T17670] __sys_connect+0x312/0x450 [ 395.819632][T17670] ? __pfx___sys_connect+0x10/0x10 [ 395.819663][T17670] ? __pfx_ksys_write+0x10/0x10 [ 395.819684][T17670] ? handle_softirqs+0x715/0x840 [ 395.819706][T17670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.819726][T17670] __x64_sys_connect+0x7a/0x90 [ 395.819746][T17670] do_syscall_64+0x15f/0xf80 [ 395.819765][T17670] ? clear_bhb_loop+0x40/0x90 [ 395.819786][T17670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.819803][T17670] RIP: 0033:0x7fe465f9cdd9 [ 395.819820][T17670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.819835][T17670] RSP: 002b:00007fe466ee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 395.819851][T17670] RAX: ffffffffffffffda RBX: 00007fe466215fa0 RCX: 00007fe465f9cdd9 [ 395.819863][T17670] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 395.819873][T17670] RBP: 00007fe466ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.819883][T17670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.819893][T17670] R13: 00007fe466216038 R14: 00007fe466215fa0 R15: 00007ffe83a9b8e8 [ 395.819924][T17670] [ 396.481537][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 396.489692][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 396.523159][T17697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4004'. [ 396.569092][T17700] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4005'. [ 396.672226][T17709] Cannot find del_set index 0 as target [ 396.779891][T17714] syzkaller1: entered promiscuous mode [ 396.795170][T17714] syzkaller1: entered allmulticast mode [ 396.948003][T17725] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4014'. [ 397.340871][T17759] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4027'. [ 397.412791][T17763] syzkaller1: entered promiscuous mode [ 397.418389][T17763] syzkaller1: entered allmulticast mode [ 397.890733][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4034'. [ 397.921858][T17777] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4033'. [ 398.002379][T17782] netlink: 'syz.2.4035': attribute type 1 has an invalid length. [ 398.013054][T17782] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4035'. [ 398.512781][T17813] netlink: 'syz.0.4049': attribute type 1 has an invalid length. [ 398.583196][T17813] bond19: entered promiscuous mode [ 398.588874][T17813] 8021q: adding VLAN 0 to HW filter on device bond19 [ 398.615919][T17813] 8021q: adding VLAN 0 to HW filter on device bond19 [ 398.623245][T17813] bond19: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 398.635723][T17813] bond19: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 398.653101][T17813] bond19: (slave ip6gre2): making interface the new active one [ 398.660682][T17813] ip6gre2: entered promiscuous mode [ 398.667765][T17813] bond19: (slave ip6gre2): Enslaving as an active interface with an up link [ 398.797017][ T185] net_ratelimit: 21 callbacks suppressed [ 398.797038][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 398.906162][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 399.006274][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 399.049955][T17835] netlink: 'syz.0.4056': attribute type 10 has an invalid length. [ 399.060280][T17835] veth1_macvtap: left promiscuous mode [ 399.072774][T17835] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 399.097047][T17845] FAULT_INJECTION: forcing a failure. [ 399.097047][T17845] name failslab, interval 1, probability 0, space 0, times 0 [ 399.113372][T17845] CPU: 1 UID: 0 PID: 17845 Comm: syz.1.4059 Not tainted syzkaller #0 PREEMPT(full) [ 399.113398][T17845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 399.113409][T17845] Call Trace: [ 399.113417][T17845] [ 399.113425][T17845] dump_stack_lvl+0xe8/0x150 [ 399.113454][T17845] should_fail_ex+0x412/0x560 [ 399.113483][T17845] should_failslab+0xa8/0x100 [ 399.113510][T17845] ? dst_alloc+0x105/0x170 [ 399.113535][T17845] kmem_cache_alloc_noprof+0x87/0x650 [ 399.113557][T17845] ? __pfx_find_exception+0x10/0x10 [ 399.113582][T17845] ? fib_lookup+0x76/0x440 [ 399.113608][T17845] dst_alloc+0x105/0x170 [ 399.113638][T17845] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 399.113674][T17845] ? ip_route_output_key_hash+0xd8/0x2a0 [ 399.113701][T17845] ip_route_output_key_hash+0x18d/0x2a0 [ 399.113730][T17845] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 399.113753][T17845] ? call_rcu+0x644/0x890 [ 399.113793][T17845] ip_route_output_flow+0x2a/0x150 [ 399.113820][T17845] tcp_v4_connect+0xe04/0x19b0 [ 399.113864][T17845] ? __pfx_tcp_v4_connect+0x10/0x10 [ 399.113893][T17845] __inet_stream_connect+0x25a/0xdd0 [ 399.113925][T17845] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.113949][T17845] ? lock_sock_nested+0x6a/0x100 [ 399.113979][T17845] ? __pfx___inet_stream_connect+0x10/0x10 [ 399.114009][T17845] ? inet_stream_connect+0x51/0xa0 [ 399.114036][T17845] ? __local_bh_enable_ip+0xd0/0x130 [ 399.114062][T17845] inet_stream_connect+0x66/0xa0 [ 399.114091][T17845] kernel_connect+0x141/0x1c0 [ 399.114121][T17845] ? __pfx_kernel_connect+0x10/0x10 [ 399.114144][T17845] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.114181][T17845] ? smc_connect+0xbd/0xd90 [ 399.114204][T17845] ? __local_bh_enable_ip+0xd0/0x130 [ 399.114228][T17845] smc_connect+0x7a5/0xd90 [ 399.114258][T17845] __sys_connect+0x312/0x450 [ 399.114282][T17845] ? __pfx___sys_connect+0x10/0x10 [ 399.114323][T17845] ? __pfx_ksys_write+0x10/0x10 [ 399.114353][T17845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.114374][T17845] __x64_sys_connect+0x7a/0x90 [ 399.114397][T17845] do_syscall_64+0x15f/0xf80 [ 399.114418][T17845] ? trace_irq_disable+0x3b/0x140 [ 399.114444][T17845] ? clear_bhb_loop+0x40/0x90 [ 399.114467][T17845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.114486][T17845] RIP: 0033:0x7f4ed159cdd9 [ 399.114504][T17845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.114522][T17845] RSP: 002b:00007f4ed23c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 399.114541][T17845] RAX: ffffffffffffffda RBX: 00007f4ed1815fa0 RCX: 00007f4ed159cdd9 [ 399.114554][T17845] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 399.114566][T17845] RBP: 00007f4ed23c1090 R08: 0000000000000000 R09: 0000000000000000 [ 399.114578][T17845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.114589][T17845] R13: 00007f4ed1816038 R14: 00007f4ed1815fa0 R15: 00007ffe66851d98 [ 399.114622][T17845] [ 399.437007][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 399.557062][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 399.595742][T17849] team0: Device vlan0 failed to change mtu [ 399.665701][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 399.775404][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 399.843480][T17868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.892420][T17868] netlink: 'syz.2.4070': attribute type 1 has an invalid length. [ 399.900844][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 401.235598][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 401.928146][T17915] xt_cgroup: xt_cgroup: no path or classid specified [ 402.021671][T17922] __nla_validate_parse: 9 callbacks suppressed [ 402.021691][T17922] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4085'. [ 402.135139][T17925] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.4086'. [ 403.127426][T17957] netlink: 'syz.2.4097': attribute type 10 has an invalid length. [ 403.187572][T17957] syz_tun: entered promiscuous mode [ 403.845549][ T185] net_ratelimit: 22 callbacks suppressed [ 403.845568][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 404.055674][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 404.175680][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 404.428225][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4107'. [ 404.465954][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4107'. [ 404.574184][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 404.671973][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 404.835459][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 404.945316][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 405.084717][T18016] netlink: 'syz.3.4115': attribute type 1 has an invalid length. [ 405.110312][T18015] syzkaller1: entered promiscuous mode [ 405.135244][T18015] syzkaller1: entered allmulticast mode [ 405.216117][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 405.335466][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 405.889811][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 407.217416][T18069] team0: Device vlan0 failed to change mtu [ 407.559183][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4138'. [ 408.883964][T18072] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 408.890493][T18072] syzkaller1: Refused to change device type [ 408.897584][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4141'. [ 408.918283][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4141'. [ 408.927883][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4138'. [ 409.419393][ T1155] net_ratelimit: 10 callbacks suppressed [ 409.419412][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 409.535183][T18110] netlink: 'syz.3.4147': attribute type 1 has an invalid length. [ 409.549972][T18110] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4147'. [ 409.565927][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 410.724664][T18139] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4155'. [ 410.776042][T18122] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 410.806166][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 410.835140][T18122] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 410.884432][T18122] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 410.925065][ T13] bond3: (slave bridge1): failed to get link speed/duplex [ 411.036128][ T7522] bond3: (slave bridge1): failed to get link speed/duplex [ 411.809075][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.816339][ C1] bridge0: topology change detected, propagating [ 411.823063][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.830296][ C1] bridge0: topology change detected, propagating [ 412.065948][T18167] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4163'. [ 412.112897][T18151] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 412.142760][T18151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.326968][T18151] bridge2: left promiscuous mode [ 412.366832][T18151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.457661][T18151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 412.497077][T18151] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.518602][T18151] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.545957][T18151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 412.561715][T18151] 8021q: adding VLAN 0 to HW filter on device bond7 [ 412.584727][T18151] 8021q: adding VLAN 0 to HW filter on device bond8 [ 412.614021][T18151] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.645910][T18151] 8021q: adding VLAN 0 to HW filter on device bond10 [ 412.668783][T18151] 8021q: adding VLAN 0 to HW filter on device bond11 [ 412.711252][T18151] 8021q: adding VLAN 0 to HW filter on device bond12 [ 412.726026][T18151] vlan2: left promiscuous mode [ 412.731447][T18151] hsr0: left promiscuous mode [ 412.752868][T18151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.772502][T18151] 8021q: adding VLAN 0 to HW filter on device bond13 [ 412.791685][T18151] 8021q: adding VLAN 0 to HW filter on device bond14 [ 412.803284][T18154] tipc: Enabling of bearer rejected, failed to enable media [ 413.034210][ T1155] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 413.154121][ T12] bond3: (slave bridge1): failed to get link speed/duplex [ 413.315457][ T7522] bond3: (slave bridge1): failed to get link speed/duplex [ 413.392408][T18184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4166'. [ 413.505919][ T48] bond3: (slave bridge1): failed to get link speed/duplex [ 413.735811][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 413.898284][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 414.325136][T18189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4166'. [ 414.389053][T18201] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 414.466467][T18201] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 414.539575][T18201] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 414.728644][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 414.945796][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 415.069161][ T7522] bond3: (slave bridge1): failed to get link speed/duplex [ 415.151406][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4177'. [ 415.189742][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4176'. [ 415.202011][T18222] netlink: 'syz.2.4177': attribute type 7 has an invalid length. [ 415.228256][ T12] bond3: (slave bridge1): failed to get link speed/duplex [ 415.240845][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4177'. [ 415.295049][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4177'. [ 415.336747][T18222] netlink: 'syz.2.4177': attribute type 7 has an invalid length. [ 415.359155][T18231] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4179'. [ 415.378450][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4177'. [ 415.468062][T18226] netlink: 'syz.3.4178': attribute type 28 has an invalid length. [ 415.486589][T18226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4178'. [ 415.609306][ T48] bond3: (slave bridge1): failed to get link speed/duplex [ 415.728658][ T7522] bond3: (slave bridge1): failed to get link speed/duplex [ 415.810110][T18238] netlink: 'syz.0.4182': attribute type 39 has an invalid length. [ 415.867896][T18239] syzkaller1: entered promiscuous mode [ 415.892676][T18239] syzkaller1: entered allmulticast mode [ 416.348873][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4184'. [ 417.215841][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 420.065161][ T7513] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.825101][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 432.334192][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 432.351469][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 432.363717][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 432.403446][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 432.413135][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 432.687491][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 432.710939][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 432.725193][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 432.737371][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 432.748476][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 433.000911][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 433.012786][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 433.020972][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 433.043654][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 433.071801][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 433.237389][ T5634] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 433.255053][ T5634] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 433.266894][ T5634] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 433.280028][ T5634] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 433.296480][ T5634] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 433.366761][ T5634] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 433.383092][ T5634] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 433.394164][ T5634] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 433.411165][ T5634] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 433.434659][ T5634] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 433.799744][T18252] __nla_validate_parse: 3 callbacks suppressed [ 433.799763][T18252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4184'. [ 433.822755][T18258] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 434.496120][ T5634] Bluetooth: hci5: command tx timeout [ 434.540895][T18259] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 434.571310][T18259] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 434.589405][T18259] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 434.776938][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 434.829750][ T5634] Bluetooth: hci6: command tx timeout [ 435.107588][ T5634] Bluetooth: hci7: command tx timeout [ 435.386802][ T5634] Bluetooth: hci8: command tx timeout [ 435.557310][ T5634] Bluetooth: hci9: command tx timeout [ 435.827813][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 435.999795][ T7515] bond3: (slave bridge1): failed to get link speed/duplex [ 436.165348][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 436.330648][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 436.495088][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 436.556301][ T5634] Bluetooth: hci5: command tx timeout [ 436.669626][ T1174] bond3: (slave bridge1): failed to get link speed/duplex [ 436.885897][ T5634] Bluetooth: hci6: command tx timeout [ 436.899082][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 437.074596][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 437.215878][ T5634] Bluetooth: hci7: command tx timeout [ 437.425348][ T5634] Bluetooth: hci8: command tx timeout [ 437.595836][ T5634] Bluetooth: hci9: command tx timeout [ 437.762706][ T13] bond3: (slave bridge1): failed to get link speed/duplex [ 438.294176][ T7513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.618957][ T7513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.652485][ T5634] Bluetooth: hci5: command tx timeout [ 438.986682][ T5634] Bluetooth: hci6: command tx timeout [ 439.214011][ T7513] bond0: (slave netdevsim1): Releasing backup interface [ 439.253226][ T7513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.305991][ T5634] Bluetooth: hci7: command tx timeout [ 439.535582][ T5634] Bluetooth: hci8: command tx timeout [ 439.672972][T18297] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.680456][T18297] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.691392][T18297] bridge_slave_0: entered allmulticast mode [ 439.698082][ T5634] Bluetooth: hci9: command tx timeout [ 439.714776][T18297] bridge_slave_0: entered promiscuous mode [ 439.907463][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.915897][ T1312] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 439.986691][ T7513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.009680][T18297] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.017102][T18297] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.024370][T18297] bridge_slave_1: entered allmulticast mode [ 440.033153][T18297] bridge_slave_1: entered promiscuous mode [ 440.044515][T18302] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.052377][T18302] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.063325][T18302] bridge_slave_0: entered allmulticast mode [ 440.072360][T18302] bridge_slave_0: entered promiscuous mode [ 440.133715][T18302] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.142671][T18302] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.153903][T18302] bridge_slave_1: entered allmulticast mode [ 440.162581][T18302] bridge_slave_1: entered promiscuous mode [ 440.202078][T18305] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.209603][T18305] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.217854][T18305] bridge_slave_0: entered allmulticast mode [ 440.227575][T18305] bridge_slave_0: entered promiscuous mode [ 440.329834][T18305] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.338321][T18305] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.346108][T18305] bridge_slave_1: entered allmulticast mode [ 440.357579][T18305] bridge_slave_1: entered promiscuous mode [ 440.388360][T18297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.413653][T18302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.423427][T18287] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.434974][T18287] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.447586][T18287] bridge_slave_0: entered allmulticast mode [ 440.462643][T18287] bridge_slave_0: entered promiscuous mode [ 440.518860][T18297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.539702][T18302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.550762][T18287] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.561792][T18287] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.569303][T18287] bridge_slave_1: entered allmulticast mode [ 440.585109][T18287] bridge_slave_1: entered promiscuous mode [ 440.619731][T18305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.632908][T18305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.642525][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.654849][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.662367][T18292] bridge_slave_0: entered allmulticast mode [ 440.670572][T18292] bridge_slave_0: entered promiscuous mode [ 440.764692][ T5634] Bluetooth: hci5: command tx timeout [ 440.808157][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.816831][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.824402][T18292] bridge_slave_1: entered allmulticast mode [ 440.833099][T18292] bridge_slave_1: entered promiscuous mode [ 440.890750][T18287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.940126][T18297] team0: Port device team_slave_0 added [ 441.002341][T18302] team0: Port device team_slave_0 added [ 441.014069][T18302] team0: Port device team_slave_1 added [ 441.034965][ T5634] Bluetooth: hci6: command tx timeout [ 441.060590][T18287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.072209][T18305] team0: Port device team_slave_0 added [ 441.100736][T18297] team0: Port device team_slave_1 added [ 441.149532][T18302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.156550][T18302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.182871][T18302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.222163][T18305] team0: Port device team_slave_1 added [ 441.235984][T18292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.302244][T18302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.319893][T18302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.346503][T18302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.358623][ T5634] Bluetooth: hci7: command tx timeout [ 441.421736][T18292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.469346][T18297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.494842][T18297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.536918][T18297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.596087][T18287] team0: Port device team_slave_0 added [ 441.621441][T18287] team0: Port device team_slave_1 added [ 441.636542][ T5634] Bluetooth: hci8: command tx timeout [ 441.644898][T18305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.659257][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.714845][T18305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.747470][ T5634] Bluetooth: hci9: command tx timeout [ 441.788007][T18297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.814837][T18297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.873280][T18297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.043668][T18305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.064852][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.114844][T18305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.140972][T18292] team0: Port device team_slave_0 added [ 442.182293][T18292] team0: Port device team_slave_1 added [ 442.198336][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 442.475493][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 442.533206][ T7513] macvlan3: left promiscuous mode [ 442.550192][ T7513] bridge0: port 3(macvlan3) entered disabled state [ 442.606459][ T7513] bridge_slave_1: left promiscuous mode [ 442.613050][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.933226][ T7513] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 443.053613][ T7513] erspan0 (unregistering): left promiscuous mode [ 443.098870][ T7513] gretap0 (unregistering): left promiscuous mode [ 452.065962][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 467.978644][ T7513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.084490][ T7513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.168122][ T7513] bond0 (unregistering): Released all slaves [ 468.234526][ T7513] bond1 (unregistering): Released all slaves [ 468.320160][ T7513] bond2 (unregistering): Released all slaves [ 468.404488][ T7513] bond3 (unregistering): Released all slaves [ 468.478868][ T7513] bond4 (unregistering): Released all slaves [ 468.567607][ T7513] bond5 (unregistering): Released all slaves [ 468.659480][ T7513] bond6 (unregistering): Released all slaves [ 468.749944][ T7513] bond7 (unregistering): Released all slaves [ 468.838603][ T7513] bond8 (unregistering): Released all slaves [ 470.085028][ T7513] bond9 (unregistering): (slave vxcan3): Releasing backup interface [ 470.165847][ T7513] bond9 (unregistering): Released all slaves [ 470.246711][ T7513] bond10 (unregistering): Released all slaves [ 470.308017][ T7513] bond11 (unregistering): Released all slaves [ 470.358393][ T7513] bond12 (unregistering): Released all slaves [ 470.388859][ T7513] bond13 (unregistering): Released all slaves [ 470.410007][ T7513] bond14 (unregistering): Released all slaves [ 470.436974][ T7513] bond15 (unregistering): Released all slaves [ 470.457344][ T7513] bond16 (unregistering): Released all slaves [ 470.478398][ T7513] bond17 (unregistering): Released all slaves [ 470.500810][ T7513] bond18 (unregistering): Released all slaves [ 470.520098][ T7513] bond19 (unregistering): Released all slaves [ 470.542534][ T7513] bond20 (unregistering): Released all slaves [ 470.578608][ T7513] bond21 (unregistering): Released all slaves [ 470.635876][ T7513] bond22 (unregistering): Released all slaves [ 470.655376][ T7513] bond23 (unregistering): Released all slaves [ 470.675916][ T7513] bond24 (unregistering): Released all slaves [ 470.696400][ T7513] bond25 (unregistering): Released all slaves [ 470.718907][ T7513] bond26 (unregistering): Released all slaves [ 470.744449][ T7513] bond27 (unregistering): Released all slaves [ 470.771911][ T7513] bond28 (unregistering): Released all slaves [ 470.796226][ T7513] bond29 (unregistering): Released all slaves [ 470.817400][ T7513] bond30 (unregistering): Released all slaves [ 470.840233][ T7513] bond31 (unregistering): Released all slaves [ 470.861863][ T7513] bond32 (unregistering): Released all slaves [ 470.885377][ T7513] bond33 (unregistering): Released all slaves [ 470.913569][ T7513] bond34 (unregistering): Released all slaves [ 470.939227][ T7513] bond35 (unregistering): Released all slaves [ 470.967411][ T7513] bond36 (unregistering): Released all slaves [ 470.998574][ T7513] bond37 (unregistering): Released all slaves [ 471.023009][ T7513] bond38 (unregistering): Released all slaves [ 471.056903][ T7513] bond39 (unregistering): Released all slaves [ 471.091176][ T7513] bond40 (unregistering): Released all slaves [ 471.114366][ T7513] bond41 (unregistering): Released all slaves [ 471.144485][ T7513] bond42 (unregistering): Released all slaves [ 471.194701][ T7513] bond43 (unregistering): Released all slaves [ 471.218819][ T7513] bond44 (unregistering): Released all slaves [ 471.238052][ T7513] bond45 (unregistering): Released all slaves [ 471.258760][ T7513] bond46 (unregistering): Released all slaves [ 471.278597][ T7513] bond47 (unregistering): Released all slaves [ 471.302300][ T7513] bond48 (unregistering): Released all slaves [ 471.326551][ T7513] bond49 (unregistering): Released all slaves [ 471.350288][ T7513] bond50 (unregistering): Released all slaves [ 471.379593][ T7513] bond51 (unregistering): Released all slaves [ 471.474358][T18302] hsr_slave_0: entered promiscuous mode [ 471.566180][T18302] hsr_slave_1: entered promiscuous mode [ 471.572738][T18302] debugfs: 'hsr0' already exists in 'hsr' [ 471.580907][T18302] Cannot create hsr debugfs directory [ 471.587444][T18287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.595289][T18287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.624751][T18287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.662050][T18292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.669053][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.695359][T18292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.713535][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 471.809860][T18287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.817081][T18287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.852413][T18287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.893586][T18292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.900601][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.929540][T18292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.989401][T18297] hsr_slave_0: entered promiscuous mode [ 471.996148][T18297] hsr_slave_1: entered promiscuous mode [ 472.002532][T18297] debugfs: 'hsr0' already exists in 'hsr' [ 472.008784][T18297] Cannot create hsr debugfs directory [ 472.061768][T18305] hsr_slave_0: entered promiscuous mode [ 472.076231][T18305] hsr_slave_1: entered promiscuous mode [ 472.082749][T18305] debugfs: 'hsr0' already exists in 'hsr' [ 472.093663][T18305] Cannot create hsr debugfs directory [ 472.343087][T18287] hsr_slave_0: entered promiscuous mode [ 472.349890][T18287] hsr_slave_1: entered promiscuous mode [ 472.377014][T18287] debugfs: 'hsr0' already exists in 'hsr' [ 472.383775][T18287] Cannot create hsr debugfs directory [ 472.414080][T18292] hsr_slave_0: entered promiscuous mode [ 472.436044][T18292] hsr_slave_1: entered promiscuous mode [ 472.446396][T18292] debugfs: 'hsr0' already exists in 'hsr' [ 472.472971][T18292] Cannot create hsr debugfs directory [ 473.723318][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 473.990630][ T7513] tipc: Left network mode [ 474.910931][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 475.329256][T18302] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 475.363330][T18302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.416242][T18302] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 475.530405][T18302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.585870][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 475.627182][T18302] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 475.670541][T18302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.767751][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 475.811451][T18302] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 475.828542][T18302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.266687][ T12] bond3: (slave bridge1): failed to get link speed/duplex [ 476.490128][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 476.615246][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 476.708585][T18305] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 476.793129][T18305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.812217][T18305] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 476.849048][T18305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.977678][ T7513] hsr_slave_0: left promiscuous mode [ 477.014336][ T7513] hsr_slave_1: left promiscuous mode [ 477.024169][ T7513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.049700][ T7513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.704624][ T7513] team0 (unregistering): Port device team_slave_1 removed [ 477.954551][ T7513] smc: removing net device team0 with user defined pnetid SYZ2 [ 478.026321][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 478.033721][T18305] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 478.054493][T18305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.074281][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 478.091550][T18305] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 478.141169][T18305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.239901][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 478.508065][T18297] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 478.591514][T18297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.616662][ T12] bond3: (slave bridge1): failed to get link speed/duplex [ 478.652327][T18297] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 478.693812][T18297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.741125][T18297] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 478.787069][T18297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.812369][T18297] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 478.850472][T18297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.953433][T18302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.195177][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 479.207446][T18302] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.284105][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.291293][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.337193][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 479.398201][T18292] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 479.459872][T18292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.470815][T18292] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 479.493132][T18292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.510180][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.517369][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.566451][T18292] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 479.573409][ T7513] IPVS: stop unused estimator thread 0... [ 479.618057][T18292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.639277][T18292] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 479.679226][T18292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.987047][T18305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.108396][T18287] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 480.121137][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.157869][T18305] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.170887][T18287] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 480.192799][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.206008][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 480.242254][T18287] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 480.260738][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.278479][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.285638][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.327180][T18287] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 480.354710][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.418025][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.425202][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.469815][T18297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.600880][T18297] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.727663][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.734859][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.799633][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 480.861276][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.868466][ T7513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.058868][T18292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.323462][T18292] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.393655][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.400834][ T7513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.497933][T18287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.550507][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.557714][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.726729][ C1] sched: DL replenish lagged too much [ 481.753292][T18287] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.859947][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.867155][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.918394][ T1174] bond3: (slave bridge1): failed to get link speed/duplex [ 482.000739][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.007944][ T7513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.319971][T18302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.577188][ T13] bond3: (slave bridge1): failed to get link speed/duplex [ 482.856370][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 483.031883][ T1174] bond3: (slave bridge1): failed to get link speed/duplex [ 483.248706][ T1174] bond3: (slave bridge1): failed to get link speed/duplex [ 483.517628][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 483.631062][T18305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.740481][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 483.938035][ T1174] bond3: (slave bridge1): failed to get link speed/duplex [ 484.076197][ T1174] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.313978][T18297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.391645][T18302] veth0_vlan: entered promiscuous mode [ 484.529980][T18302] veth1_vlan: entered promiscuous mode [ 484.859614][T18302] veth0_macvtap: entered promiscuous mode [ 484.947270][T18302] veth1_macvtap: entered promiscuous mode [ 485.107337][T18302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.211475][T18302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.249498][ T7515] net_ratelimit: 5 callbacks suppressed [ 485.249517][ T7515] bond3: (slave bridge1): failed to get link speed/duplex [ 485.314196][T18292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.358302][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.414125][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.498500][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.552299][ T35] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.697638][T18287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.978918][T18305] veth0_vlan: entered promiscuous mode [ 486.150152][ T7513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.163815][T18305] veth1_vlan: entered promiscuous mode [ 486.189985][ T7513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.388654][ T7510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.454000][ T7510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.470049][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 486.506620][T18297] veth0_vlan: entered promiscuous mode [ 486.628110][T18297] veth1_vlan: entered promiscuous mode [ 486.702060][T18305] veth0_macvtap: entered promiscuous mode [ 486.776804][T18305] veth1_macvtap: entered promiscuous mode [ 486.975614][T18305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.062529][T18305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.098886][T18297] veth0_macvtap: entered promiscuous mode [ 487.153560][T18297] veth1_macvtap: entered promiscuous mode [ 487.225917][ T113] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.246676][ T113] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.274417][T18292] veth0_vlan: entered promiscuous mode [ 487.313696][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.349317][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 487.426131][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.526384][T18297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.607922][T18297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.655084][T18292] veth1_vlan: entered promiscuous mode [ 487.805754][ T185] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.841173][ T185] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.928365][ T185] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.954754][ T185] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.019896][T18287] veth0_vlan: entered promiscuous mode [ 488.096691][ T7521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.110450][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4202'. [ 488.143820][ T7521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.158142][T18287] veth1_vlan: entered promiscuous mode [ 488.164091][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4202'. [ 488.460642][T18292] veth0_macvtap: entered promiscuous mode [ 488.521601][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.548775][T18292] veth1_macvtap: entered promiscuous mode [ 488.578115][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.764826][ T7510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.779748][T18287] veth0_macvtap: entered promiscuous mode [ 488.809797][ T7510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.822586][T18593] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4204'. [ 488.832250][ T113] bond3: (slave bridge1): failed to get link speed/duplex [ 488.912962][T18287] veth1_macvtap: entered promiscuous mode [ 488.927037][T18292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.956480][ T57] bond3: (slave bridge1): failed to get link speed/duplex [ 489.086027][T18292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.128647][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.166463][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 489.192813][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.248034][ T185] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.281648][ T185] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.436678][T18598] bond1: option min_links: invalid value (18446744073709551614) [ 489.480410][T18598] bond1: option min_links: allowed values 0 - 2147483647 [ 493.000905][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 493.016623][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 493.039424][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 493.071695][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 493.080626][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 493.222917][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 493.238531][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 493.247255][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 493.275358][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 493.284570][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 493.381876][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 493.404463][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 493.412947][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 493.423102][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 493.440654][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 493.936459][T18598] bond1 (unregistering): Released all slaves [ 494.015318][ T7513] bond3: (slave bridge1): failed to get link speed/duplex [ 494.030863][T18599] netdevsim netdevsim8 : renamed from netdevsim0 (while UP) [ 494.159287][ T185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.210781][ T1174] bond3: (slave bridge1): failed to get link speed/duplex [ 494.282254][ T185] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.405444][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 494.625651][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 494.735280][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 494.818782][T18631] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4207'. [ 495.028269][ T7510] bond3: (slave bridge1): failed to get link speed/duplex [ 495.043975][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4207'. [ 495.187008][ T5634] Bluetooth: hci0: command tx timeout [ 495.245622][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 495.348969][ T5634] Bluetooth: hci1: command tx timeout [ 495.437117][ T185] bond3: (slave bridge1): failed to get link speed/duplex [ 495.505042][ T5634] Bluetooth: hci2: command tx timeout [ 495.637308][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 495.885822][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 496.593884][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4209'. [ 496.707301][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4209'. [ 497.275237][ T5634] Bluetooth: hci0: command tx timeout [ 497.436115][ T5634] Bluetooth: hci1: command tx timeout [ 497.595376][ T5634] Bluetooth: hci2: command tx timeout [ 499.345497][ T5634] Bluetooth: hci0: command tx timeout [ 499.505277][ T5634] Bluetooth: hci1: command tx timeout [ 499.665378][ T5634] Bluetooth: hci2: command tx timeout [ 501.356081][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.362986][ T1312] net_ratelimit: 5 callbacks suppressed [ 501.363001][ T1312] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.424950][ T5634] Bluetooth: hci0: command tx timeout [ 501.584962][ T5634] Bluetooth: hci1: command tx timeout [ 501.746431][ T5634] Bluetooth: hci2: command tx timeout [ 505.319415][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.330838][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.354251][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.369773][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.377859][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 506.650303][ T113] bond3: (slave bridge1): failed to get link speed/duplex [ 506.901306][T18682] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 507.435910][ T5634] Bluetooth: hci3: command tx timeout [ 507.774845][ T7510] bond3: (slave bridge1): failed to get link speed/duplex [ 508.641639][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4217'. [ 508.689447][T18709] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4217'. [ 508.787298][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4217'. [ 508.804556][ T1174] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.835768][T18709] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4217'. [ 508.844907][ T1174] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.920759][ T1174] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.963448][ T1174] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.537237][ T5634] Bluetooth: hci3: command tx timeout [ 510.358091][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 511.607594][ T5634] Bluetooth: hci3: command tx timeout [ 511.739547][T18613] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.770651][T18613] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.795680][T18613] bridge_slave_0: entered allmulticast mode [ 511.818398][T18613] bridge_slave_0: entered promiscuous mode [ 511.837622][T18613] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.854935][T18613] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.865324][T18613] bridge_slave_1: entered allmulticast mode [ 511.894424][T18613] bridge_slave_1: entered promiscuous mode [ 512.388280][T18613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.438984][ T185] bridge_slave_1: left allmulticast mode [ 512.444814][ T185] bridge_slave_1: left promiscuous mode [ 512.450606][ T185] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.490310][ T185] bridge_slave_0: left allmulticast mode [ 512.496144][ T185] bridge_slave_0: left promiscuous mode [ 512.501934][ T185] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.416941][ T185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.437860][ T185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.463549][ T185] bond0 (unregistering): Released all slaves [ 513.483173][T18609] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.490782][T18609] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.501164][T18609] bridge_slave_0: entered allmulticast mode [ 513.520597][T18609] bridge_slave_0: entered promiscuous mode [ 513.533132][T18617] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.549770][T18617] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.557914][T18617] bridge_slave_0: entered allmulticast mode [ 513.573071][T18617] bridge_slave_0: entered promiscuous mode [ 513.585681][T18613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.624687][T18609] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.641065][T18609] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.651169][T18609] bridge_slave_1: entered allmulticast mode [ 513.659675][T18609] bridge_slave_1: entered promiscuous mode [ 513.674560][ T5634] Bluetooth: hci3: command tx timeout [ 513.705342][T18617] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.713049][T18617] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.720911][T18617] bridge_slave_1: entered allmulticast mode [ 513.729474][T18617] bridge_slave_1: entered promiscuous mode [ 513.844647][T18613] team0: Port device team_slave_0 added [ 513.868340][T18613] team0: Port device team_slave_1 added [ 513.980535][T18609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.186999][T18609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.263416][T18617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.298947][T18617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.322290][T18613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.340709][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.390240][T18613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.587643][T18613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.616065][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.686621][T18613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.730255][T18672] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.753084][T18672] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.775081][T18672] bridge_slave_0: entered allmulticast mode [ 514.807336][T18672] bridge_slave_0: entered promiscuous mode [ 514.823744][T18672] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.838730][T18672] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.856387][T18672] bridge_slave_1: entered allmulticast mode [ 514.876950][T18672] bridge_slave_1: entered promiscuous mode [ 514.890250][T18609] team0: Port device team_slave_0 added [ 514.909756][T18609] team0: Port device team_slave_1 added [ 514.949185][T18617] team0: Port device team_slave_0 added [ 514.977949][T18617] team0: Port device team_slave_1 added [ 515.188501][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 515.316530][T18613] hsr_slave_0: entered promiscuous mode [ 515.323372][T18613] hsr_slave_1: entered promiscuous mode [ 515.330373][T18613] debugfs: 'hsr0' already exists in 'hsr' [ 515.337032][T18613] Cannot create hsr debugfs directory [ 515.350568][T18672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.363058][T18609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.384187][T18609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.412498][T18609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.438328][T18617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.450552][T18617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.481545][T18617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.508850][T18617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.516298][T18617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.543423][T18617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.559880][T18672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.590044][T18609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.601195][T18609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.634199][T18609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.776387][T18672] team0: Port device team_slave_0 added [ 515.801000][T18672] team0: Port device team_slave_1 added [ 516.073990][T18609] hsr_slave_0: entered promiscuous mode [ 516.093839][ T7510] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 516.131225][T18609] hsr_slave_1: entered promiscuous mode [ 516.156123][T18609] debugfs: 'hsr0' already exists in 'hsr' [ 516.167014][T18609] Cannot create hsr debugfs directory [ 516.198829][T18617] hsr_slave_0: entered promiscuous mode [ 516.216434][T18617] hsr_slave_1: entered promiscuous mode [ 516.233066][T18617] debugfs: 'hsr0' already exists in 'hsr' [ 516.246338][T18617] Cannot create hsr debugfs directory [ 516.484137][T18672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.516959][T18672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.560522][T18672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.597030][T18672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.636791][T18672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.747362][T18672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.125673][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 517.436029][ T7521] bond3: (slave bridge1): failed to get link speed/duplex [ 517.568234][T18672] hsr_slave_0: entered promiscuous mode [ 517.586828][T18672] hsr_slave_1: entered promiscuous mode [ 517.593578][T18672] debugfs: 'hsr0' already exists in 'hsr' [ 517.613698][T18672] Cannot create hsr debugfs directory [ 526.867956][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 526.881814][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 526.889984][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.908055][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 526.919610][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.945344][ T5634] Bluetooth: hci4: command tx timeout [ 531.025054][ T5634] Bluetooth: hci4: command tx timeout [ 533.107160][ T5634] Bluetooth: hci4: command tx timeout [ 535.185167][ T5634] Bluetooth: hci4: command tx timeout [ 543.363587][T18613] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.922442][ T13] bond3: (slave bridge1): failed to get link speed/duplex [ 544.219066][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 544.413903][T18613] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.505078][ T7510] bond3: (slave bridge1): failed to get link speed/duplex [ 544.899603][T18613] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.007365][ T57] bond3: (slave bridge1): failed to get link speed/duplex [ 547.435997][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 548.073425][ T7521] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.756695][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 553.771097][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 553.783055][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 553.797637][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 553.810035][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 553.942487][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 553.957863][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 553.975149][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 553.992229][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 554.000833][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 554.090803][ T5634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 554.109327][ T5634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 554.119095][ T5634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 554.136304][ T5634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 554.151354][ T5634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 555.905636][ T5635] Bluetooth: hci5: command tx timeout [ 556.065457][ T5635] Bluetooth: hci6: command tx timeout [ 556.225720][ T5635] Bluetooth: hci7: command tx timeout [ 557.986982][ T5635] Bluetooth: hci5: command tx timeout [ 558.145165][ T5635] Bluetooth: hci6: command tx timeout [ 558.306947][ T5635] Bluetooth: hci7: command tx timeout [ 560.065258][ T5635] Bluetooth: hci5: command tx timeout [ 560.226578][ T5635] Bluetooth: hci6: command tx timeout [ 560.385309][ T5635] Bluetooth: hci7: command tx timeout [ 562.146975][ T5635] Bluetooth: hci5: command tx timeout [ 562.305325][ T5635] Bluetooth: hci6: command tx timeout [ 562.465362][ T5635] Bluetooth: hci7: command tx timeout [ 562.789078][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.796050][ T1312] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 566.043568][ T5634] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 566.063819][ T5634] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 566.080897][ T5634] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 566.092710][ T5634] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 566.101049][ T5634] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 568.147410][ T5634] Bluetooth: hci8: command tx timeout [ 570.225358][ T5634] Bluetooth: hci8: command tx timeout [ 572.164623][T18613] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.235243][ T7510] bond3: (slave bridge1): failed to get link speed/duplex [ 572.305992][ T5634] Bluetooth: hci8: command tx timeout [ 572.364910][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 572.421774][ T57] bond3: (slave bridge1): failed to get link speed/duplex [ 572.640353][ T185] hsr_slave_0: left promiscuous mode [ 572.686022][ T185] hsr_slave_1: left promiscuous mode [ 572.724305][ T185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.800125][ T185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.896726][ T185] veth1_macvtap: left promiscuous mode [ 572.903498][ T185] veth0_macvtap: left promiscuous mode [ 572.928986][ T185] veth1_vlan: left promiscuous mode [ 572.934368][ T185] veth0_vlan: left promiscuous mode [ 573.363154][ T185] team0 (unregistering): Port device team_slave_1 removed [ 573.402839][ T185] team0 (unregistering): Port device team_slave_0 removed [ 573.666925][ T35] bond3: (slave bridge1): failed to get link speed/duplex [ 573.837191][ T57] bond3: (slave bridge1): failed to get link speed/duplex [ 574.004960][ T1150] bond3: (slave bridge1): failed to get link speed/duplex [ 574.436580][ T5634] Bluetooth: hci8: command tx timeout [ 574.486238][ T7518] bond3: (slave bridge1): failed to get link speed/duplex [ 580.066831][ T1174] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 587.243128][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.278557][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 587.288514][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 587.298250][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 587.306457][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.346062][ T5635] Bluetooth: hci1: command tx timeout [ 591.425250][ T5635] Bluetooth: hci1: command tx timeout [ 593.510208][ T5635] Bluetooth: hci1: command tx timeout [ 595.585041][ T5635] Bluetooth: hci1: command tx timeout [ 605.663396][T18819] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 605.747552][ T7510] bond3: (slave bridge1): failed to get link speed/duplex [ 606.559456][ T57] bond3: (slave bridge1): failed to get link speed/duplex [ 606.686621][ T48] bond3: (slave bridge1): failed to get link speed/duplex [ 606.986512][T18863] bond3: (slave bridge1): failed to get link speed/duplex [ 608.056319][ T13] bond3: (slave bridge1): failed to get link speed/duplex [ 608.195218][ T13] bond3: (slave bridge1): failed to get link speed/duplex [ 608.986557][ T13] bond3: (slave bridge1): failed to get link speed/duplex [ 610.563032][T18617] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.067625][ T1174] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 614.510669][T19008] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 614.526820][T19008] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 614.536892][T19008] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 614.550324][T19008] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 614.558073][T19008] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 614.737539][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 614.759480][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 614.767602][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 614.778615][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 614.797311][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 614.922891][T19008] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 614.938938][T19008] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 614.953396][T19008] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 614.961424][T19008] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 614.972597][T19008] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 616.077440][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 616.625120][ T5635] Bluetooth: hci0: command tx timeout [ 616.865097][ T5635] Bluetooth: hci4: command tx timeout [ 617.025879][ T5635] Bluetooth: hci9: command tx timeout [ 618.705129][ T5635] Bluetooth: hci0: command tx timeout [ 618.945399][ T5635] Bluetooth: hci4: command tx timeout [ 619.112177][ T5635] Bluetooth: hci9: command tx timeout [ 620.785527][ T5635] Bluetooth: hci0: command tx timeout [ 621.026449][ T5634] Bluetooth: hci4: command tx timeout [ 621.185231][ T5634] Bluetooth: hci9: command tx timeout [ 622.864985][ T5634] Bluetooth: hci0: command tx timeout [ 623.105303][ T5634] Bluetooth: hci4: command tx timeout [ 623.265416][ T5634] Bluetooth: hci9: command tx timeout [ 624.234611][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.241763][ T1312] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 626.508222][ T5635] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 626.523821][ T5635] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 626.533256][ T5635] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 626.541990][ T5635] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 626.552842][ T5635] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 628.624935][ T5635] Bluetooth: hci10: command tx timeout [ 630.705545][ T5635] Bluetooth: hci10: command tx timeout [ 631.436981][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 632.785126][ T5634] Bluetooth: hci10: command tx timeout [ 634.865037][ T5634] Bluetooth: hci10: command tx timeout [ 635.644364][T18617] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.736987][ T7510] bond3: (slave bridge1): failed to get link speed/duplex [ 635.865632][ T1155] bond3: (slave bridge1): failed to get link speed/duplex [ 636.662867][T18617] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.754370][T18617] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.072906][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 644.712131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.520515][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 647.534924][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 647.546221][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 647.560932][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 647.583870][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 649.665861][ T5635] Bluetooth: hci5: command tx timeout [ 651.745138][ T5635] Bluetooth: hci5: command tx timeout [ 653.825057][ T5635] Bluetooth: hci5: command tx timeout [ 655.904765][ T5635] Bluetooth: hci5: command tx timeout [ 674.860039][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 674.884594][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 674.892791][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 674.903447][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 674.911185][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 675.739912][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 675.753662][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 675.764584][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 675.773818][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 675.787249][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 676.168714][ T5635] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 676.182149][ T5635] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 676.203871][ T5635] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 676.213836][ T5635] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 676.223423][ T5635] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 676.945012][ T5635] Bluetooth: hci6: command tx timeout [ 677.825198][ T5635] Bluetooth: hci7: command tx timeout [ 678.304886][ T5635] Bluetooth: hci8: command tx timeout [ 679.025023][ T5635] Bluetooth: hci6: command tx timeout [ 679.915180][ T5634] Bluetooth: hci7: command tx timeout [ 680.385172][ T5634] Bluetooth: hci8: command tx timeout [ 681.104900][ T5634] Bluetooth: hci6: command tx timeout [ 681.985305][ T5634] Bluetooth: hci7: command tx timeout [ 682.465410][ T5634] Bluetooth: hci8: command tx timeout [ 683.185125][ T5634] Bluetooth: hci6: command tx timeout [ 684.065005][ T5634] Bluetooth: hci7: command tx timeout [ 684.545132][ T5634] Bluetooth: hci8: command tx timeout [ 685.667475][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.676744][ T1312] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 686.874494][ T5635] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 686.890040][ T5635] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 686.902325][ T5635] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 686.912991][ T5635] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 686.940215][ T5635] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 689.026868][ T5635] Bluetooth: hci11: command tx timeout [ 689.615518][ T7518] bond3: (slave bridge1): failed to get link speed/duplex [ 690.785799][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 691.106273][ T5635] Bluetooth: hci11: command tx timeout [ 693.187580][ T5635] Bluetooth: hci11: command tx timeout [ 695.266440][ T5635] Bluetooth: hci11: command tx timeout [ 707.425239][ T30] INFO: task syz-executor:18672 blocked for more than 143 seconds. [ 707.434153][ T30] Not tainted syzkaller #0 [ 707.442950][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.464772][ T30] task:syz-executor state:D stack:22584 pid:18672 tgid:18672 ppid:1 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 707.500680][ T30] Call Trace: [ 707.517098][ T30] [ 707.528514][ T30] __schedule+0x17b4/0x5680 [ 707.542475][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 707.572293][ T30] ? __pfx___schedule+0x10/0x10 [ 707.621425][ T30] ? schedule+0x90/0x360 [ 707.666955][ T30] schedule+0x164/0x360 [ 707.706716][ T30] schedule_preempt_disabled+0x13/0x30 [ 707.734575][ T30] __mutex_lock+0x7f7/0x1550 [ 707.757462][ T30] ? __pfx_vsscanf+0x10/0x10 [ 707.779722][ T30] ? __mutex_lock+0x608/0x1550 [ 707.805089][ T30] ? del_device_store+0xd7/0x370 [ 707.829575][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 707.854182][ T30] ? sysfs_file_kobj+0x1a/0x230 [ 707.878572][ T30] ? sysfs_file_kobj+0x1a/0x230 [ 707.908270][ T30] del_device_store+0xd7/0x370 [ 707.930079][ T30] ? sysfs_file_kobj+0x1a/0x230 [ 707.944698][ T30] ? __pfx_del_device_store+0x10/0x10 [ 707.957558][ T30] ? sysfs_file_kobj+0x1e4/0x230 [ 707.967332][ T30] ? sysfs_kf_write+0x166/0x260 [ 707.992846][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 707.999093][ T30] kernfs_fop_write_iter+0x3af/0x540 [ 708.010689][ T30] vfs_write+0x61d/0xb90 [ 708.019439][ T30] ? __pfx_vfs_write+0x10/0x10 [ 708.024481][ T30] ? do_sys_openat2+0x14c/0x200 [ 708.029797][ T30] ? kmem_cache_free+0x182/0x650 [ 708.035076][ T30] ? fd_install+0x94/0x3d0 [ 708.039553][ T30] ksys_write+0x150/0x270 [ 708.043912][ T30] ? __pfx_ksys_write+0x10/0x10 [ 708.051147][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.057586][ T30] do_syscall_64+0x15f/0xf80 [ 708.062233][ T30] ? trace_irq_disable+0x3b/0x140 [ 708.073216][ T30] ? clear_bhb_loop+0x40/0x90 [ 708.079592][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.085999][ T30] RIP: 0033:0x7ffaeb75d60e [ 708.092853][ T30] RSP: 002b:00007ffc62d9e6f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 708.107953][ T30] RAX: ffffffffffffffda RBX: 0000555595420500 RCX: 00007ffaeb75d60e [ 708.117807][ T30] RDX: 0000000000000001 RSI: 00007ffc62d9e780 RDI: 0000000000000005 [ 708.126317][ T30] RBP: 00007ffaeb8335ec R08: 0000000000000000 R09: 0000000000000000 [ 708.134331][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.143125][ T30] R13: 00007ffc62d9e780 R14: 00007ffaec544620 R15: 0000000000000003 [ 708.153823][ T30] [ 708.158486][ T30] [ 708.158486][ T30] Showing all locks held in the system: [ 708.169979][ T30] 1 lock held by kworker/R-mm_pe/14: [ 708.176460][ T30] #0: ffffffff8e7fb000 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 708.188424][ T30] 1 lock held by khungtaskd/30: [ 708.196142][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 708.208459][ T30] 2 locks held by kworker/1:1/46: [ 708.214005][ T30] 3 locks held by kworker/u8:3/48: [ 708.221528][ T30] #0: ffff888031d57940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 708.237295][ T30] #1: ffffc90000b87c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 708.251378][ T30] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 708.261644][ T30] 4 locks held by kworker/u8:6/185: [ 708.268616][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 708.283193][ T30] #1: ffffc90002557c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 708.298802][ T30] #2: ffffffff8fdbfe08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 708.309791][ T30] #3: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 708.321648][ T30] 2 locks held by getty/5381: [ 708.328279][ T30] #0: ffff888035f670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 708.338539][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 708.350100][ T30] 1 lock held by kworker/1:3/5631: [ 708.367205][ T30] #0: ffffffff8e7fb000 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 708.383696][ T30] 2 locks held by kworker/1:6/5761: [ 708.390149][ T30] 3 locks held by kworker/u8:13/7518: [ 708.399294][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 708.413494][ T30] #1: ffffc90003287c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 708.431655][ T30] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 708.441881][ T30] 1 lock held by kworker/R-wg-cr/18364: [ 708.447981][ T30] #0: ffffffff8e7fb000 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 [ 708.459315][ T30] 1 lock held by kworker/R-wg-cr/18368: [ 708.465889][ T30] 1 lock held by kworker/R-wg-cr/18369: [ 708.471459][ T30] #0: ffffffff8e7fb000 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 708.482418][ T30] 1 lock held by kworker/R-wg-cr/18370: [ 708.489804][ T30] #0: ffffffff8e7fb000 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 708.503218][ T30] 1 lock held by kworker/R-wg-cr/18371: [ 708.509215][ T30] #0: ffffffff8e7fb000 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 [ 708.521486][ T30] 1 lock held by kworker/R-wg-cr/18373: [ 708.527744][ T30] #0: ffffffff8e7fb000 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 [ 708.543783][ T30] 1 lock held by kworker/R-wg-cr/18374: [ 708.550783][ T30] #0: ffffffff8e7fb000 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 708.562814][ T30] 3 locks held by kworker/0:10/18400: [ 708.569544][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 708.580885][ T30] #1: ffffc90004ed7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 708.592629][ T30] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 708.607271][ T30] 4 locks held by kworker/1:4/18491: [ 708.612590][ T30] 7 locks held by syz-executor/18617: [ 708.618623][ T30] #0: ffff88803391a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 708.631897][ T30] #1: ffff88806aba8480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 708.641979][ T30] #2: ffff8880296065a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 708.659405][ T30] #3: ffffffff8f64e7a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 708.670202][ T30] #4: ffff88802b407128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 708.682348][ T30] #5: ffff88802b402258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 708.696247][ T30] #6: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: unregister_nexthop_notifier+0x17/0x40 [ 708.711823][ T30] 4 locks held by syz-executor/18672: [ 708.718867][ T30] #0: ffff88803391a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 708.728296][ T30] #1: ffff88802aa91c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 708.740524][ T30] #2: ffff8880296065a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 708.751033][ T30] #3: ffffffff8f64e7a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 708.762846][ T30] 2 locks held by syz-executor/18869: [ 708.771991][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 708.781318][ T30] #1: ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0xc7f/0x22c0 [ 708.798644][ T30] 1 lock held by syz-executor/18919: [ 708.804148][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 708.816489][ T30] 1 lock held by syz-executor/19007: [ 708.821832][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 708.836912][ T30] 1 lock held by syz-executor/19014: [ 708.842249][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 708.853707][ T30] 1 lock held by syz-executor/19086: [ 708.859699][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 708.873434][ T30] 1 lock held by syz-executor/19100: [ 708.882004][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 708.892035][ T30] 1 lock held by syz-executor/19108: [ 708.897741][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 708.912049][ T30] 1 lock held by syz-executor/19113: [ 708.918096][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 708.927920][ T30] 1 lock held by syz-executor/19118: [ 708.933234][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 708.952066][ T30] [ 708.954430][ T30] ============================================= [ 708.954430][ T30] [ 708.968180][ T30] NMI backtrace for cpu 0 [ 708.968202][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 708.968225][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.968236][ T30] Call Trace: [ 708.968244][ T30] [ 708.968252][ T30] dump_stack_lvl+0xe8/0x150 [ 708.968278][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 708.968306][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 708.968328][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 708.968357][ T30] sys_info+0x135/0x170 [ 708.968379][ T30] watchdog+0xfd3/0x1030 [ 708.968412][ T30] ? watchdog+0x1c9/0x1030 [ 708.968443][ T30] kthread+0x388/0x470 [ 708.968467][ T30] ? __pfx_watchdog+0x10/0x10 [ 708.968490][ T30] ? __pfx_kthread+0x10/0x10 [ 708.968514][ T30] ret_from_fork+0x514/0xb70 [ 708.968536][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 708.968556][ T30] ? __switch_to+0xc79/0x1410 [ 708.968584][ T30] ? __pfx_kthread+0x10/0x10 [ 708.968608][ T30] ret_from_fork_asm+0x1a/0x30 [ 708.968645][ T30] [ 708.968652][ T30] Sending NMI from CPU 0 to CPUs 1: [ 709.081794][ C1] NMI backtrace for cpu 1 [ 709.081811][ C1] CPU: 1 UID: 0 PID: 18491 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 709.081829][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 709.081840][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 709.081864][ C1] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 709.081886][ C1] Code: 00 aa 28 8c 48 c7 c6 40 aa 28 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 b7 bf 90 07 65 8b 0d ac bf 90 07 f7 c1 ff [ 709.081900][ C1] RSP: 0018:ffffc90000a08460 EFLAGS: 00000283 [ 709.081919][ C1] RAX: 0000000000000001 RBX: ffffffff90d2cf01 RCX: 0000000080000102 [ 709.081930][ C1] RDX: ffffc90000a08601 RSI: ffffffff8c28aa40 RDI: ffffffff8c28aa00 [ 709.081942][ C1] RBP: dffffc0000000000 R08: ffffc90000a08958 R09: 0000000000000000 [ 709.081953][ C1] R10: ffffc90000a08618 R11: fffff520001410c5 R12: ffffc90000a08968 [ 709.081964][ C1] R13: ffffffff8176e256 R14: ffffffff8e95cd60 R15: ffffffff8176e256 [ 709.081976][ C1] FS: 0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 709.081989][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.082000][ C1] CR2: 00007fba55027286 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 709.082013][ C1] Call Trace: [ 709.082020][ C1] [ 709.082028][ C1] rcu_is_watching+0x15/0xb0 [ 709.082047][ C1] ? unwind_next_frame+0xa6/0x2550 [ 709.082065][ C1] lock_release+0x4b/0x3c0 [ 709.082081][ C1] ? deref_stack_reg+0x19f/0x230 [ 709.082100][ C1] ? unwind_next_frame+0xa6/0x2550 [ 709.082117][ C1] unwind_next_frame+0x1bba/0x2550 [ 709.082138][ C1] ? unwind_next_frame+0xa6/0x2550 [ 709.082156][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 709.082178][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 709.082201][ C1] arch_stack_walk+0x11b/0x150 [ 709.082222][ C1] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 709.082245][ C1] stack_trace_save+0xa9/0x100 [ 709.082265][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 709.082287][ C1] ? stack_depot_save_flags+0x33/0x810 [ 709.082306][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 709.082325][ C1] kasan_save_track+0x3e/0x80 [ 709.082344][ C1] ? kasan_save_track+0x3e/0x80 [ 709.082361][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 709.082406][ C1] __kasan_slab_alloc+0x6c/0x80 [ 709.082427][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 709.082447][ C1] ? __alloc_skb+0x27d/0x7d0 [ 709.082463][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 709.082485][ C1] __alloc_skb+0x27d/0x7d0 [ 709.082503][ C1] skb_copy+0x188/0x800 [ 709.082527][ C1] can_can_gw_rcv+0x46d/0xf70 [ 709.082545][ C1] ? lock_acquire+0x106/0x350 [ 709.082561][ C1] ? can_receive+0x16c/0x440 [ 709.082578][ C1] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 709.082596][ C1] can_rcv_filter+0x126/0x7a0 [ 709.082611][ C1] ? can_receive+0x16c/0x440 [ 709.082626][ C1] can_receive+0x2c6/0x440 [ 709.082642][ C1] can_rcv+0x1f9/0x330 [ 709.082655][ C1] ? __pfx_can_rcv+0x10/0x10 [ 709.082669][ C1] ? process_backlog+0x3eb/0x1950 [ 709.082684][ C1] process_backlog+0xc66/0x1950 [ 709.082709][ C1] __napi_poll+0xae/0x340 [ 709.082723][ C1] ? skb_defer_free_flush+0x233/0x260 [ 709.082739][ C1] net_rx_action+0x627/0xf70 [ 709.082761][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 709.082776][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 709.082802][ C1] ? net_tx_action+0x5b6/0xc30 [ 709.082819][ C1] ? net_tx_action+0xbfb/0xc30 [ 709.082837][ C1] handle_softirqs+0x22a/0x840 [ 709.082854][ C1] ? do_softirq+0x76/0xd0 [ 709.082871][ C1] ? neigh_periodic_work+0xc28/0xe50 [ 709.082887][ C1] do_softirq+0x76/0xd0 [ 709.082902][ C1] [ 709.082907][ C1] [ 709.082918][ C1] __local_bh_enable_ip+0xf8/0x130 [ 709.082934][ C1] neigh_periodic_work+0xc28/0xe50 [ 709.082953][ C1] ? process_scheduled_works+0xa70/0x1860 [ 709.082970][ C1] process_scheduled_works+0xb5d/0x1860 [ 709.083001][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 709.083020][ C1] ? assign_work+0x3d5/0x5e0 [ 709.083037][ C1] worker_thread+0xa53/0xfc0 [ 709.083066][ C1] kthread+0x388/0x470 [ 709.083085][ C1] ? __pfx_worker_thread+0x10/0x10 [ 709.083099][ C1] ? __pfx_kthread+0x10/0x10 [ 709.083118][ C1] ret_from_fork+0x514/0xb70 [ 709.083136][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 709.083151][ C1] ? __switch_to+0xc79/0x1410 [ 709.083174][ C1] ? __pfx_kthread+0x10/0x10 [ 709.083193][ C1] ret_from_fork_asm+0x1a/0x30 [ 709.083222][ C1] [ 709.584174][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 709.591062][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 709.600183][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 709.610245][ T30] Call Trace: [ 709.613523][ T30] [ 709.616456][ T30] vpanic+0x56c/0xa60 [ 709.620449][ T30] ? __pfx___schedule+0x10/0x10 [ 709.625308][ T30] ? __pfx_vpanic+0x10/0x10 [ 709.629823][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 709.635995][ T30] panic+0xc5/0xd0 [ 709.639723][ T30] ? __pfx_panic+0x10/0x10 [ 709.644145][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 709.649536][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 709.655704][ T30] watchdog+0x102c/0x1030 [ 709.660058][ T30] ? watchdog+0x1c9/0x1030 [ 709.664501][ T30] kthread+0x388/0x470 [ 709.668578][ T30] ? __pfx_watchdog+0x10/0x10 [ 709.673268][ T30] ? __pfx_kthread+0x10/0x10 [ 709.677865][ T30] ret_from_fork+0x514/0xb70 [ 709.682460][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 709.687577][ T30] ? __switch_to+0xc79/0x1410 [ 709.692272][ T30] ? __pfx_kthread+0x10/0x10 [ 709.696876][ T30] ret_from_fork_asm+0x1a/0x30 [ 709.701750][ T30] [ 709.705130][ T30] Kernel Offset: disabled [ 709.709458][ T30] Rebooting in 86400 seconds..