last executing test programs: 2m0.800423749s ago: executing program 3 (id=3023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x29, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 2m0.231400708s ago: executing program 3 (id=3026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x80, 0x9, 0x6, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x1, 0x1, 0xfd7, 0x499, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0x7, 0x3a, [@private=0xa010101]}, @end]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000500)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000000000001f2ffffff00000000000000000000000000000090797572b0048c3ab81350f842068338f5808da9a07bbf059c5ce424eaba245e89c95a99c551c605fba3bd562524f1d3441dc58d57ff6797b8933155db14296ec3653746"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4000}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2e37a568}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x401, 0xe6, &(0x7f0000000300)=""/230, 0x40f00, 0x78, '\x00', r2, @fallback=0x13, r3, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x1, 0x3, 0x401}, 0x10, 0x0, r4, 0x7, &(0x7f0000000780)=[r5, r6, r7, r8, r9], &(0x7f00000007c0)=[{0x0, 0x4, 0xf}, {0x5, 0x4, 0x10}, {0x2, 0x1, 0x5, 0x2}, {0x2, 0x5, 0x4, 0xf}, {0x1, 0x3, 0x5, 0x4}, {0x4, 0x3, 0x7, 0x1}, {0x1, 0x1, 0x10, 0x8}], 0x10, 0x3}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000020603000000000000000000000000000500010007000000090002"], 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) 1m59.85628473s ago: executing program 3 (id=3029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x30, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x9, 0x0, &(0x7f0000000280)=[0x7, 0xfffffffffffffff8, 0x2, 0xa, 0x8, 0x912, 0xbc, 0x1, 0xffffffffffffffff], 0xffffffff}}, 0x30) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) preadv(r1, &(0x7f00000000c0), 0x0, 0x6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183000000100"/24], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 1m59.700624264s ago: executing program 3 (id=3030): setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000f30548d00f140aac91ad1bef89a9852706d635332c4b80e74c399e1e0e6b7938a6b076d8a4be339582c45aec8f93af6b744b4800ba8917178c2389f1c70000000000000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000140008000000000000000000000000000000000005001400ff000000"], 0x30}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 1m58.617308449s ago: executing program 3 (id=3034): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m58.371454257s ago: executing program 3 (id=3035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) write$cgroup_freezer_state(r4, &(0x7f0000000180)='FROZEN\x00', 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="1c005a8018000180140003000012"], 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="18eca169740346b175d5d523bc29141eacd82fb666789d317e017e74b4dff4f5f4f4f5beed9033e34f2e13208dc56224efb78928d59027cebb48fe133b92d961fe60573f105f6e0ecb68ba615a9279811436b8c009f33ed37ac349bd1a098f6f9f0e1a601e277283a38130cb2be54f61a688b4d74e54584bef648206bd63ae609625754c41e9f33e20866dbfa034f1b1316542fa0fc4d4c2fe473d09d9c9eaab28beaeb2de224ad233f8c253de4032360c5e587c591b5c01fe2d356b1b86", @ANYRES16=r5, @ANYBLOB="040028bd7000fddbdf2532000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000008a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002400000000f05000300000000002800018007000100637400001c0002800800024000000003080004400000000c8afc0440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a000000"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m43.04788979s ago: executing program 32 (id=3035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) write$cgroup_freezer_state(r4, &(0x7f0000000180)='FROZEN\x00', 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="1c005a8018000180140003000012"], 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="18eca169740346b175d5d523bc29141eacd82fb666789d317e017e74b4dff4f5f4f4f5beed9033e34f2e13208dc56224efb78928d59027cebb48fe133b92d961fe60573f105f6e0ecb68ba615a9279811436b8c009f33ed37ac349bd1a098f6f9f0e1a601e277283a38130cb2be54f61a688b4d74e54584bef648206bd63ae609625754c41e9f33e20866dbfa034f1b1316542fa0fc4d4c2fe473d09d9c9eaab28beaeb2de224ad233f8c253de4032360c5e587c591b5c01fe2d356b1b86", @ANYRES16=r5, @ANYBLOB="040028bd7000fddbdf2532000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000008a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002400000000f05000300000000002800018007000100637400001c0002800800024000000003080004400000000c8afc0440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a000000"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m0.951122182s ago: executing program 5 (id=3376): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r5, &(0x7f0000000140), 0xfffffdef) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x235, 0x0, 0x4c02, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0xa}, 0x50) write$cgroup_subtree(r5, 0x0, 0x12) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0xc0000000}) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x440, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffe1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x951, 0x5, 0x0, 0x7ff, 0x8, 0x5, 0xffffff03, 0x3, 0x1, 0x101, 0x3, 0x6, 0x8882, 0x1, 0x5, 0xeb8c, 0x7, 0x1, 0x81, 0xe, 0x6a5a, 0x5, 0x6, 0x401, 0x5, 0x5, 0x8, 0x3, 0xd9, 0x30e, 0x8, 0x1b3a0459, 0x1, 0x1000, 0x7, 0x0, 0x4, 0xb, 0x1, 0xb, 0x9, 0x7fff, 0x4, 0xe6, 0x3, 0x2, 0x83, 0x6, 0x8001, 0x6, 0x1, 0x6, 0x81, 0x8, 0x7fffffff, 0x9, 0x4, 0x8001, 0x1, 0x7, 0x3b, 0x80000000, 0x9, 0xe, 0x0, 0x0, 0x4, 0xde, 0x7, 0x5, 0x4, 0x8, 0x4, 0xff, 0x7f, 0xfffffffe, 0x0, 0x5, 0x1, 0xc000000, 0x200, 0x6, 0x75, 0x54214830, 0x6, 0x736, 0xf01c, 0x3, 0x200, 0x3, 0x9, 0xff, 0x6, 0x1c, 0x5, 0xa, 0x0, 0x3ff, 0x80000001, 0x4, 0xe6, 0x636, 0x9, 0xc694, 0x2, 0xfffffffd, 0x5, 0x8c, 0x2, 0x3, 0x2, 0x5, 0x7f, 0x4, 0x2, 0xfe, 0x3, 0x50b2, 0x393, 0x6, 0xe03c, 0x80, 0x99a, 0xfffffff7, 0x1, 0x71e, 0x5, 0xe, 0x2, 0x9, 0x2, 0x8b7e, 0x7, 0x0, 0x3, 0x1, 0x9, 0x7, 0x0, 0x7, 0x401, 0x4, 0x3ff, 0x7fffffff, 0x8, 0x7f, 0x3ff, 0x3, 0x5, 0x71, 0xa, 0x10, 0x2, 0x400, 0x2, 0x1, 0x8, 0x8, 0xffffff6f, 0x8, 0x9fc, 0xb494, 0x480, 0x0, 0x7, 0x6d, 0xe6c, 0x9, 0x9d, 0x9, 0x80000001, 0x5, 0x5b, 0x1, 0x6, 0x6, 0x9e8f, 0x2e, 0x401, 0x41b, 0x6, 0x8, 0x7ad, 0x2, 0x5, 0xb, 0x401, 0x6, 0x10, 0x10001, 0x8000, 0x9, 0xb, 0x473adad4, 0x7, 0x9e75, 0xfffffffe, 0x6, 0x2, 0x6, 0x6, 0xf, 0x2, 0x7, 0xfc, 0x8001, 0x8, 0x96a, 0x9, 0x200, 0x8, 0x7ff, 0x2, 0xb7, 0x101, 0x0, 0x9515, 0x9, 0x9, 0x9, 0x1, 0x0, 0xe, 0x6, 0xd000, 0x9, 0x284, 0x6a6, 0x9, 0xffffffff, 0x1, 0x8000, 0x7fff, 0x100, 0x3, 0x8, 0x6, 0xc, 0x7, 0xffff, 0x48, 0x9, 0xfe9, 0x3, 0x1004000, 0x9, 0xfffffff6, 0xc3da, 0x2, 0x3, 0x400, 0x1, 0x1, 0x1115, 0x7]}, @TCA_TBF_RATE64={0xc, 0x4, 0xd71f3c2e6ceb9ec4}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000240)={0x2, 'veth1_macvtap\x00', {}, 0x2fd}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x800, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 59.788807012s ago: executing program 0 (id=3382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40880) (async) 59.736662932s ago: executing program 2 (id=3383): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x440b0) r4 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x140b, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}]}, 0x30}}, 0x4000001) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) sendmsg$nl_route(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@bridge_delneigh={0x40, 0x1d, 0x400, 0x70bd27, 0x25dfdbfe, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa}, [@NDA_IFINDEX={0x8, 0x8, r8}, @NDA_NH_ID={0x8, 0xd, 0xfffffeff}, @NDA_SRC_VNI={0x8, 0xb, 0xfffffffa}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c0d0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x4008810) syz_emit_ethernet(0xe2, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0400ca90781000"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x48, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_FLOW={0x8, 0xb, 0x9}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 59.511220205s ago: executing program 0 (id=3384): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000005c0)={{r0, &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', 0x515000, &(0x7f0000000140)={@align=0x100000000, {0xfff, 0x200, 0x1, 0xfffffffffffffff8}}, 0x9924, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xf8e7}, 0x3, &(0x7f0000000540)=[{0x3, 0x2, &(0x7f0000000780)='macvlan0\x00', &(0x7f0000000240)="97c491fea8320afce3e94ea8fa5a2bcec37ed4ae784372f2185a1428e4cc2c8b64bb9ccd37ce1b115e745ee9501265b511279c15e549fdf43e03d043152cdaea18d288c25642648e7a74bce994fd3dbdd5f233e116ff63b4856580c754373ad050acb41bd1b3cd566a4aef6b90defc20cab685cf6a284dbf0f0599608818", 0x7e, 0x2a}, {0x3, 0xab, &(0x7f0000000300)='macvlan\x00', &(0x7f0000000340)="7724eade7a77ff67069776128146622af35770bb3f5395aba346cf50c79981412c3546b8de452e61d6e8333afe28e26f3fbe46797461a25f2da982632feadce2164756804688ba38d868583467f436d193b86cac445d33e552247c3d10d10277ac1bfc147d956b8d6f8cd7682e133dbf89a5e46e808a4dca222030de10dcae8a4a6666a120cc0edece192c4d629a948522751221f38af9e66a1dcb22177edef337dcb902b7633b49d46e880f72d90b06", 0xb0, 0x20}, {0x3, 0x4, &(0x7f0000000400)=':%^^,\x00', &(0x7f0000000440)="83151948361a24979c4847912e1d1cb026a4eed4198222c40800328329639679c1bedc42f808703103e7fd87002c813ea65cdcb436c431f70c4dd8540160fb35941eda49fb43605421d861c8bd1916ffdadf8c6a6eb8b08ff8378da802516519ddb2c653cc6a94ad6fa8bf58d61f33aacccfcc2d8acbb8078faaab8b3753694c754703d374550f4664328b8f9697e5e6a3534b612c2e9906b1e72028d528a8ece1e728f25e30e631ee66bcf5fd684c0c49150ce3fb89e745baa4c4c1aeb461473805e5ab2dde094a9903afd51f363a695d8b727286717c6eb91fdef43e29ed596aef560ca2ba9bfaed20d404d7b439846821ecf890b6f3", 0xf7, 0x22}]}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}}, 0x8001, 0xfffffc00, 0x6, 0x0, 0x4}, &(0x7f0000000700)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000740)={r3, 0xac, 0x30}, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x503}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x48}}, 0x0) 59.403382425s ago: executing program 5 (id=3386): syz_open_procfs$namespace(0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}, 0xc}}, {{0xa, 0x4e20, 0x8a, @remote, 0x1000}}}, 0x108) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) recvmsg$kcm(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2}, 0x40010123) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000002880)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 58.539407054s ago: executing program 5 (id=3388): unshare(0x6020400) (async) r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc, 0xa) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x1}}], 0x10) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r2, &(0x7f0000000140), 0xfffffdef) (async) write$cgroup_subtree(r2, 0x0, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) sendmmsg$sock(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="906ef545621528cc2cbfabd983a392d449593d09dda4d7499f497eca3cffec7bea5dd2c2685ec06a2a17ddb6fbf40085a3ae73c1db27a87241ea883a975d0874ccb2ac26b2d0ca23d863c7ae0a4c66e0d20dba6d901dfcc7f6bc53faf705c0d551686aeae2bd069f9036bf42cecb63be8e6f0a3a9cc75c7f12aba02e38ced7187f76803dc79a7bfa83544ebb3e6d68c555f15a446336c62339fa6a7a2357c25fd0969c34bea42ff814393ee17a82c6ec7e7b655ce160ec", 0xb7}, {&(0x7f00000002c0)="6474554d38857ed17b6a92b8eeef74496978713ee06ffa68c479fd5de6ca89afdecc80451b69dd708b0fa90bb61464ff617e9d884dfc1f604dc303ce47ca9681768d10324863dabcc623d6e59e94df38f5011d63ac00482106ca3448cbe211d8417d848e", 0x64}], 0x2, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x573d3b16}}], 0x78}}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x3, @broadcast, 'syzkaller0\x00'}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000004c0)="972631f61042c4272b7ce9989ddefdd026ba6177ed48d553fe8c36682c26b8acd5d3ba46e617dc3f5fe3452414f5616fa04a3ced0a9205d392a367c093983128aaf81a32873ab6155e97cb15091b125b76c6c45060854c346366633b09b5e6dfff2f7133483335d5a7dfb412d1462966427db9d34e461c4f540b67b6dec6f803ab2c5fb9f8d982db81a394f3216efb9a789f0f1c78b6a088ace76db1cffb5ab757cd7f2a96ee76d3956e624e4968aa48037a120c3e794a0c237514216ab5906c88d1cba6b773826e6f11515de02379d958", 0xd1}, {&(0x7f00000005c0)="2f6761730ead76296206d48d03f4fc1345a9aeadd1093bb54cbdee1934d5402bbfd75599395009ab34fb081443b5e31f015c5642e220e742ab65eae8bbe31faa2b67fb7cb799722efbb307c9fce6663bfb90dbaa9c57ca4045d0fd014b1f528582e5045829bdb5088c73b6cc9ab728f3e9ff928a764117289cba41a369958055c9e4422be21143f1c8dae63534da8d725badeb2c067020d1cb26b2aed6bb826b2b4ef40b260f4a9ff48e4dc9f7793cfca219aadbddc316a252a622781656cd8ef1c6b09b5af824", 0xc7}, {&(0x7f00000006c0)="e9f61dcdedca5ae51e66dd9e42b21405c17df15237fa4eeeb1d5a42c0a970ded98a25d3db9f487c140378b9edb7103cba108e4df363ffb05ac08ed408dbcf09912694da14454386d48d06d7671ef27bfec9f16b3d2c8948ac5178a42944a5e5774027d3336bec8472551b8999dccaf0342d3abc42b7057f75d73a58f202f63b1301f3186c531826de57f0bcf3ea154f04a4d845f4951d220916a920dfccdb5908b62ff6e25a98cc74be345642e53082b25fdc72aa1640a71b08fe257", 0xbc}, {&(0x7f0000000780)="0d8cd8ca9a8b91978e0c6ea7cba9e0d0c5aa0cf096527aba3100eab93dd84cf783d2878191026883078d54ee6c335e9456feee143367478fa7ed3d7e4584a93b84cecd71308855c8a7dc0e32250d2deecd1860bce11d4e50a71a81cc41d94b67fbe5c0ad6285802e84c359b4583edcde3754db1f1711083aa3109443f254ba37fbce4d3544992e187e", 0x89}, {&(0x7f0000000840)="8234ae2aeb338a085cbdbc0bd9f5f5b8db2841ea8177446d96de69b70a5e5a86ed91deb308a0777d90407438135348c7cdbb08823f70cba4766be3e4d965cd85f6ec0152dd8b88fa0d4ef499e3e0f42c81f8a1a8297e4e4180728ffb80cd6373cec2498ba4a9bf374099e480e16085334e0f634e104068b2aa49a3c061b392afc99a2a6174f648bbe945b7f9920bc3081afaa593d78ea7f256d14d0a96db9d41837d1e1df5851ea6d316844e", 0xac}, {&(0x7f0000000900)="12a475c0d14a2298a53c2750472232647e956d20647c273862f18652390bd2be1f7517d508d4024c3b4a5479fb3cd320f1ec12a47119aabc7c2fceb0ce228fea68fff8336b2b004b545c13b322e57eed585995a7605974e5a302d28af4c9193b27d054ee6b13e25157f62718a22940d393fa8d3d46abff6897a5902c5869df028691859ecb4caafeb53684c736784adee6a23ebed3244854aadab666e891e1520e12b2dc9a6446d8293e628662e1b44e6b9e71206095c8", 0xb7}], 0x6, &(0x7f0000000a40)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xffff8001}}, @mark={{0x14, 0x1, 0x24, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)="de1ba09a1ed45822d0f8fddc919327cf811ac725de12169247bc4e96de2512063ca8a36e9c006eab3e5133aea8", 0x2d}, {&(0x7f0000000b00)="cb7da34c9a6aa51b41f77eecf748e9c247a131c1f7b114bcfd91f72ef154f1d2ee831de145797a89c956e79bb3e1f3e38dc40fabfc268d5dca390a2844a12b4d7e9851b85c777e579c5d8d896919147fbca4a25a0f22fd32dd03d02b2f27e5162c579b32d1d74c6134fe42bb84749f32754478bfbcab0c146c45f4392c6caccb1d25beb11bc2945bc46d63d6", 0x8c}], 0x2, &(0x7f0000000c00)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}, {{&(0x7f0000000c80)=@ieee802154={0x24, @long={0x3, 0xffff}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)="35e7fb6d6057d66d2993df5ba2d7da352ae07e0011781a1e4636e6cc29427623b833e337757feefae6dad99cfed85c886298c1007affec594f0ed14bdb67198d351d75b3ab06d33e988be86578142d", 0x4f}, {&(0x7f0000000d80)="cba3243cff743c6e88dcd758688ec525b0fe85ad1f9df32ba4458e2c5ffa940bea6292748a61de5627f26c24390fda18a67db0ec098295846feabf295ad44ab4dbcfa5869a6711dbe957ffae6347ff6403e6d818138922cd5d2fd8ab01bf51a60cebc48c74a193a0fe684c526789d79c7e91a6058ff7c178", 0x78}, {&(0x7f0000000e00)="bed1afe986ef40b493dd9df92711b70ee3e8e8dc9acef4", 0x17}], 0x3, &(0x7f0000000e80)=[@mark={{0x14, 0x1, 0x24, 0xdc98}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x40000}}], 0x90}}, {{&(0x7f0000000f40)=@in6={0xa, 0x4e20, 0x2, @private1, 0x4}, 0x80, &(0x7f0000001380)=[{&(0x7f00000009c0)="3dfb19b0c05ed49d2498adc0462c076319ffaa915b52fb6c01eb6cb0223f43cc97a4d79560553edd09ac48fa40a92f7bdb80e564bc95a47d558f29db7d805bfdc488dca4b8c63e6e0dea0cd672188cd9afab848067cdac32d754", 0x5a}, {&(0x7f0000001040)="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", 0xff}, {&(0x7f0000001140)="259aaf25846dc11cbb03232f6b9d8d822506a98bd22e029b27b1b74a1af64ccfd9db967b866b1b31b42e3fe6f168e5fa15c37a8dfca0e0b05a6f5eda76861b29cff1546a436dd88087c516045192b01e521ed86a4ce0a2159d30021fcf13ccfc68187d3b21d7423216518a31e85ff70e9a6a5ac49f64e1e12b2421", 0x7b}, {&(0x7f00000011c0)="683d9045b79060e5687a064152845f5580ec3ac069ad065e680ce0276384ac821433d8adca8a5437dfa767e765baee3b5c2aa55cf55afff9561a295ef6be833cbcc67e", 0x43}, {&(0x7f0000001240)="5093243597f0b96981d8474431196981e37a3948516f5acf5f59e7b6d32b669ca45ad53536a3e26cef6046518f1cd04483d7208aa6b0163a8eac7ffb768af9acbeb96650d1b1f66a30113a5e9424454181d7682d1ea770d352abe05a19cade3eeb276ddfa4d4fab28bc326c7aa59c0fa381b0f988644581b6371c4e2bf9d9f1f45c2df4fbe457b354d8f13f4d87b76d5d2101a0a58dcc99a049d9b411432ea342d50", 0xa2}, {&(0x7f0000001700)="7035cb040c74ddefc062e9e1161de99525e98a871c4f0a8ba3b9db075c93acfb776e48dac2076f3068139a060216069f9e6eab25a38ff947f42040ce8677292540cd1d7c5e3651e26e470765757247da9821616afd71c39e91e346b3be571d0b0adf38676e27f554265292cb6ef5999d9d9c13e38c70ee0021debd685ab4174840a98fd25f71a3a69f5dd4c923d2abc04b7d7e4e5edf18ec398b26fba9e5d0f995ce1770f16f4cb64fd5036c2576795b38cb34978f9e74e1e9c452d75aa55923e9db799650a75cda18d61302548dbd9ddd03848ff365a8a5264a5ecc498b7ffd923cad82ee5126116b97afe7d55edf3f409bfab1759e", 0xf6}], 0x6, &(0x7f0000001400)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}], 0x5, 0x20000000) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf2d5200000008000300", @ANYRES32=r8, @ANYBLOB="0500880009000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r9 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9ce3609d5be6614a888e59cdf99ac9162ccfadd24ab7", 0x16}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x404c8d4) (async) recvmmsg(r9, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000", @ANYRES16=r11, @ANYBLOB="050027bd7400fedbdf250600000008000300", @ANYRES32=r12, @ANYBLOB="08000500040000000500530040000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000001640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf250300000044000180080003000100000008000100", @ANYRES32=r3, @ANYBLOB="1400020073797a4f744985e5756e000000000000000000140002006272050000000000000076655f31000008", @ANYRES32=r3, @ANYBLOB="05000500040000000500050020000000"], 0x68}, 0x1, 0x0, 0x0, 0x200000c0}, 0x90) 58.430097454s ago: executing program 0 (id=3389): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x2b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 48.627375607s ago: executing program 0 (id=3392): socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 48.617266536s ago: executing program 1 (id=3393): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000005, 0x20010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 48.539491412s ago: executing program 5 (id=3394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x140f, 0x60ceaae1ef55e4c3}, 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_delrule={0x9c, 0x21, 0x800, 0x70bd27, 0x25dfdbfd, {0xa, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x1000a}, [@FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'macvlan1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000080)=0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x4, 0x6, 0x80000001}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 48.498243624s ago: executing program 2 (id=3395): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000da0fb374853e84a65b", @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x404c840) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[], 0x50) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, &(0x7f0000000000)=0x100) (async, rerun: 64) r5 = socket$inet(0x2, 0x3, 0x33) (rerun: 64) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc3c) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0xa, r9}, 0x10) (async, rerun: 32) recvmmsg(r7, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x42, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="97030000", @ANYRES8=r6, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0c00990006000000520000007600450092cc72efdbc2e1c1236c5e76473cc94c221a7e61fffcbcd3adf650259ca15c4a1465a0821903f68a68d276887fa286123a171cb509f4e3f57f2606100044037b4ecb1c7bffc999d9c65b12650b48f19221b0a486f8b496a480edef981e5f5cf8472a2ad3333c962cbd827266a246f3e5d670000086004500e812b7b1df1522aad735b99facc7592560094e49e2c13f37be9c15ad15cd58166c3b156bb522fa76dc27c7438c9ed901f2b63ed41c39cdcf4d036a0c61d0d6da99959a0f86d23b076b85af7f00be745c250d99cce8f015563835a8774bacf60391430dde19389ec28fbd0d5ff2329a093889774586722b8ab3446b9a5a51afdfc41b0000fc004500eccbcb6595edbb8e6c545a4cff9106622dabcf7ecb6e332889b016240be348e836e65a82e0d46217dddac1501fe33ff46591e64debfbdc03814634ab04a485921a88b0d3d38a5c4b6e1b156d807c3f15217f82b24557e90952a1088ca28844c668493ab11f164ebdcf2def1bbf3f32a32ac7e3f669182825d0e9210828a17ea37684a28e75e39eccee6087f6a0e17a48a52e9a43be5a786a4c2f586f71c0ee6b472bc63def0470a9b3c7818ef6bb307adaae52256dacf33d1d029e89cf6d7f06bd9102e4f1f14a3517805048489f9f94a67431bee4ccad141d530fc4d9bf9a440849ee911630a12f851786afb3e2c9b5024f70628fce3e1b930045000e2443ffcff0c15efbffebae6077bb3e119051cd9e94e18d4045e0061c029502093e1a7f65f7e2ed03dcd77331cb052d72af9b5b27932259a077c5012e203fdd505dc6cd13aab1a21beb2cae210470b720ca623a2619508683644d05739216dbefd2e2946f5e7527190c76b11750c86cd566e1e7aa39addbeafbb31f528bbc1c8a4708cb49fcfa60a291f74672a1aa003e004500ab8358d81ef2f471883ba35cc913c1a99a0d57343ec65f9564b863530f1cebb2bef285a9f197a2609fed52b478a40582856203d8b1c08f6940d00000bc0045009806da733347cf312f5d6a4a77ca5f14dd853df20e1d6b9df28619f759e01df6035e6f470d6b9b833bd2ad59a5ddca93fc0069cf31d2d611d7a8535f5b27ae0b30c19738949485bde74af6467c15004c9e5356e966527ad304f3ab594174c2f7b1a4d8f09420e4524a04a3f0026ca8ba19c5bd63d8013d47b5926b6703a132676dfb6181e007a8ec70d780b00c952d9fbb070b15efb9a85272231d3d1c7db2133acca84fa3bd8cd5223311550b4d3c698b0e10f3c7d67570"], 0x3b4}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x200, 0x70bd2b, 0x7, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x9}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.142530013s ago: executing program 1 (id=3397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 48.141066387s ago: executing program 0 (id=3398): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x6, &(0x7f00000000c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x24}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x1f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbc2, 0x0, 0x0, 0x0, 0x5331}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffe0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0xf3c, 0xc2, &(0x7f00000005c0)=""/194, 0x41000, 0x9, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000700)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x6, 0x9b7, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000007c0)=[{0x1, 0x2, 0xe}, {0x0, 0x1, 0x10, 0xc4b762c2ff14a49c}, {0x3, 0x1, 0x10, 0x7}, {0x5, 0x4, 0x10, 0x4}], 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000", @ANYRES32], 0x48) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, &(0x7f0000000140)={0x3ff, 0x876c}) 47.927459487s ago: executing program 2 (id=3399): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x40}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8000008, 0x8, 0x0, 0xffffffffffffffff, 0x100000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8000008, 0x8, 0x0, 0xffffffffffffffff, 0x100000}, 0x48) accept4(r0, 0x0, 0x0, 0x800) 47.856687873s ago: executing program 1 (id=3400): write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) 36.911759778s ago: executing program 5 (id=3402): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x99, 0x6, 0x80, 0x1, 0x4e, 0x9, 0x61, 0xff, 0x7, 0xff, 0x8, 0xa, 0x1, 0x9}, 0xe) socket$unix(0x1, 0x2, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xdcdf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x10000}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x10000, 0xfffffffa, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 36.865056823s ago: executing program 0 (id=3403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8602, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64) write$cgroup_subtree(r0, 0x0, 0xfffffc60) (rerun: 64) 36.760233449s ago: executing program 1 (id=3404): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) socket$kcm(0x29, 0x5, 0x0) (async) 36.683643091s ago: executing program 2 (id=3405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) (async) recvmsg(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/145, 0x91}], 0x1}, 0x10023) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 36.333800531s ago: executing program 1 (id=3406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xffffffff, 0xffffff9e, 0x0, 0x4085a, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0xc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0xa506}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x7, 0x40, 0xfffffffffffffff0}, @map_fd={0x18, 0xd, 0x1, 0x0, r0}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xd6}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x12, &(0x7f00000001c0)=""/18, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x1, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000280)=[{0x2, 0x4, 0xd, 0x5}, {0x3, 0x3, 0x8, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x2, 0x3, 0xc, 0xc}, {0x5, 0x5, 0x3, 0xa}, {0x5, 0x3, 0x5, 0x4}, {0x1, 0x2, 0x3, 0x7}, {0x1, 0x3, 0x3, 0x5}, {0x3, 0x1, 0x3, 0x9}], 0x10, 0xfffffffb}, 0x94) r2 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@ethernet={0x0, @remote}, &(0x7f0000000480)=0x80, 0x80400) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xfffffff7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40808) shutdown(r2, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r4, &(0x7f0000000600)="6ae7efa08edf9ce78a64b546d85693b283a06b07713d35e50911f9b00c1cda003982519d2c6f15cc5062f8ee532ac836b484b1678721c16d130fc6d9e212aadeff17b393d4e6590a35b7f83d1de1818b6c02fc4992f88192ff95e051aaed45b7371d72ab7a49c3ed043f175a21d2980f0aa2360ce97443725d7c5d15d2768fb4161d7316389156cebdc93777705150e4faa06e70f7aabb4c47ced58e9af03bd33e", 0xa1, 0x80, &(0x7f00000006c0)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000700)={0x0, 0x53, "048b099386a9e455239130fc58e4f17425d39761967249ca85e8826059015363a2000968be14772698b420025024b58d19bccfb3c5e478749b9e4d40f2a6a9a81513e6e1b0020147783335ca29591ab43a391b"}, &(0x7f0000000780)=0x5b) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x4}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000840)={r5, 0x1, 0x4, 0xc, 0x0, 0x3, 0x400, 0xe, {r6, @in={{0x2, 0x4e20, @multicast1}}, 0x3, 0x4, 0x8, 0xb44, 0x8}}, &(0x7f0000000900)=0xb0) sendmsg$tipc(r2, &(0x7f0000000a40)={&(0x7f0000000940)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000980)="01ee2866730a73d8bedd664f8837d9a6cc4d4ac37f21a02e01be1e417f807dbd7a8fd2cf24afb567996bc7ee9cae902291a4ae5484b336eca355382d94367a854407d93898dbf6c7e17173febde459ed6e840a1d30a768dc5053239f0c8e07808a01be82fccec0933e9c6e46252e223de76bfd0c432c1d0163762f", 0x7b}], 0x1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=@deltaction={0x80, 0x31, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x46}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x801) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000bc0)={0x0, 0x401}, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r1, 0xe4bfd000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000c40)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5d, 0x7, 0xb5e, 0x100, 0x7ff, 0x4, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r2, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000d40)=[0x0], &(0x7f0000000d80)=[0x0, 0x0], 0x0, 0x47, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001000)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000001280)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1f8, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1f8}}, 0x4000004) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r8) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000001580)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000001340)={0x200, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10001}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x254}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x3ff]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffc00}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6, 0x400, 0xe50, 0x4, 0x2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x42e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x40, 0x6603, 0x1, 0x6, 0x40]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15c}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x101}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd594}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xe8, 0xa, 0xbe, 0x8]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x486}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ec}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xf, 0x7fffffff, 0x90, 0x800, 0xf]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x619}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x1, 0x7, 0x80000000, 0x80000001, 0x34, 0x8001, 0x2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x24008000}, 0x4010) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000015c0)) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001640), r8) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r12, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x1c}}, 0x10) accept4$tipc(r2, &(0x7f0000001740)=@name, &(0x7f0000001780)=0x10, 0x80000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r13, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44090}, 0x20000014) 36.283693591s ago: executing program 5 (id=3407): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000001"], 0x114}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="080000002000010014000300776c616e30000000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b96bf604858bd60bb39a5b25d58b4eb02aa766081f010308ef07a9693f38245ac07ca9a0f6ed60c2d63c661b2afb79c67f671c94cb6cf244840d23ee3a272ae8e3a62408ff4a292ff27b0e5f85a4bf7d19ad5d80c38705b1f039fa976acb5a5e11c582e058a856d78a14bcb85204819070a93ae58a5fd650d49f0a69d6760e086344ddeaa1ff46897646ffd10abb78c97fc4abddecc08b9ed6a7108f6dded3e81b490ecd62964d8d14a32c3d9baaf649b3731f5e048a189d0f1c70c6c21d67d36b45a353c4aa6c2afe162e7a8330fd259d2be01178a132baa69692f1d88d684946e60071de43c389e3e4", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESDEC], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24008000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x181800, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) recvmmsg$unix(r8, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x2020}, {r1, 0x401}, {r6, 0x20}, {r1, 0x1704}], 0x4, 0x2) 36.208293137s ago: executing program 2 (id=3408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="fd58ea740900000000000001"], 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) 35.950355778s ago: executing program 1 (id=3409): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600050088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="021000000000000000000000000000aaaabb0400"], 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8800) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r4) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40004090) 35.810144807s ago: executing program 4 (id=3410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 35.807680361s ago: executing program 2 (id=3411): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) write(r1, &(0x7f0000000340), 0x11000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000600)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r7, @ANYBLOB="000126bd700083797f68e272808ce41ecba1fddbdf25150000005000018014f7010076657468315f766972745f77696669000800010012ac5623566c02268697ee71d157cfa5a31c0708807fd6744658f5f6e44147b7e87dc4c8a6c20e5de9ff3a6d48e157b1d3af628d5ebfc46c6aea6632a9cb28a115fcde47caff4d9f9e4f981742c39a4252406b7116aad2", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468305f766972745f77696669001400020076657468315f746f5f7465616d0000005c0001801400020076657468305f746f5f62726964676500080003000200000008000300000000000800030002000000080003000100000008000300000000001400020076657468315f746f5f6873720000000008000300000000000c0001800800030003000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20004010) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000005e00010000000000000000000200d131ede928b7d864275f9f2cec072ad57ca1cfe820bcc7dc0e77d9bccba847454aaed25117e9e52e533db0c6d57a2e6234d9a7861ca53d3dbe016288af3fb5c9dccc39a58f658c078260a71f0d6e2b8782ea0fbfc5a386b0778482a29876fabd1e1a5ca8a04567f0408f2e3850525c39e59735066092e5148575ee4db32fac49f9e7863272f970ec223db1f2fceee8f219a271b0c6155fe8043d00", @ANYRESHEX=r2, @ANYRES32=r3], 0x1c}}, 0x55) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e", @ANYRES16=r2, @ANYRES8=r1], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) 35.527492752s ago: executing program 4 (id=3412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xd1383000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x88, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x300008, {0x4, 0x9, 0x2, 0x2}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x14, 0x34, @random="bcbba9f6050000002ab24105881169cb"}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8bd4ed97e7"}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x30000010}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r4, &(0x7f0000000040)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xa, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 32.361502231s ago: executing program 4 (id=3413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x22e}}, @var={0xe, 0x0, 0x0, 0xe, 0x3}, @restrict={0x6}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000200)=""/89, 0x51, 0x59, 0x1, 0xf6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x5, &(0x7f0000000140)=@framed={{}, [@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffa}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x22, r3}, 0x94) 21.305911535s ago: executing program 33 (id=3403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8602, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64) write$cgroup_subtree(r0, 0x0, 0xfffffc60) (rerun: 64) 20.264129941s ago: executing program 34 (id=3409): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600050088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="021000000000000000000000000000aaaabb0400"], 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8800) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r4) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40004090) 20.170921542s ago: executing program 35 (id=3411): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) write(r1, &(0x7f0000000340), 0x11000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000600)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r7, @ANYBLOB="000126bd700083797f68e272808ce41ecba1fddbdf25150000005000018014f7010076657468315f766972745f77696669000800010012ac5623566c02268697ee71d157cfa5a31c0708807fd6744658f5f6e44147b7e87dc4c8a6c20e5de9ff3a6d48e157b1d3af628d5ebfc46c6aea6632a9cb28a115fcde47caff4d9f9e4f981742c39a4252406b7116aad2", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468305f766972745f77696669001400020076657468315f746f5f7465616d0000005c0001801400020076657468305f746f5f62726964676500080003000200000008000300000000000800030002000000080003000100000008000300000000001400020076657468315f746f5f6873720000000008000300000000000c0001800800030003000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20004010) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000005e00010000000000000000000200d131ede928b7d864275f9f2cec072ad57ca1cfe820bcc7dc0e77d9bccba847454aaed25117e9e52e533db0c6d57a2e6234d9a7861ca53d3dbe016288af3fb5c9dccc39a58f658c078260a71f0d6e2b8782ea0fbfc5a386b0778482a29876fabd1e1a5ca8a04567f0408f2e3850525c39e59735066092e5148575ee4db32fac49f9e7863272f970ec223db1f2fceee8f219a271b0c6155fe8043d00", @ANYRESHEX=r2, @ANYRES32=r3], 0x1c}}, 0x55) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e", @ANYRES16=r2, @ANYRES8=r1], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) 20.053804889s ago: executing program 36 (id=3407): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000001"], 0x114}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="080000002000010014000300776c616e30000000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b96bf604858bd60bb39a5b25d58b4eb02aa766081f010308ef07a9693f38245ac07ca9a0f6ed60c2d63c661b2afb79c67f671c94cb6cf244840d23ee3a272ae8e3a62408ff4a292ff27b0e5f85a4bf7d19ad5d80c38705b1f039fa976acb5a5e11c582e058a856d78a14bcb85204819070a93ae58a5fd650d49f0a69d6760e086344ddeaa1ff46897646ffd10abb78c97fc4abddecc08b9ed6a7108f6dded3e81b490ecd62964d8d14a32c3d9baaf649b3731f5e048a189d0f1c70c6c21d67d36b45a353c4aa6c2afe162e7a8330fd259d2be01178a132baa69692f1d88d684946e60071de43c389e3e4", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESDEC], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24008000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x181800, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) recvmmsg$unix(r8, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x2020}, {r1, 0x401}, {r6, 0x20}, {r1, 0x1704}], 0x4, 0x2) 17.89982933s ago: executing program 4 (id=3418): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000200000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x20, 0x40e28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', r4, 0x7800, 0x700, 0x1, 0x4, {{0x26, 0x4, 0x0, 0x5, 0x98, 0x68, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x7, [{@empty, 0x5}, {@broadcast, 0xa}]}, @cipso={0x86, 0x4e, 0x2, [{0x6, 0x7, "918c34bf12"}, {0x6, 0xa, "3f85519f0c83694d"}, {0x7, 0xe, "5c8d543fc6fcb03ebaaa3ffa"}, {0x2, 0xb, "72a0696085e7e19480"}, {0x6, 0x2}, {0x0, 0x4, "169a"}, {0x2, 0xd, "ac740feaf9c778e4be8734"}, {0x6, 0xb, "cd1317bc7c7a7db2a1"}]}, @rr={0x7, 0x13, 0x97, [@private=0xa010101, @private=0xa010100, @private=0xa010102, @empty]}, @rr={0x7, 0xf, 0x56, [@private=0xa010101, @remote, @local]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) socket$key(0xf, 0x3, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmmsg$inet(r7, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x4}, 0x38) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) r8 = socket(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_GETBMAPX(r10, 0xc0205838, &(0x7f0000000340)={0x3, 0x5e6, 0x4, 0x5, 0xfffffffa, 0x1, 0x4}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4b2a}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xcb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16.199555847s ago: executing program 4 (id=3419): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000006301040000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 15.066504608s ago: executing program 4 (id=3420): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xffff8548, 0x7, 0x2, 0xbd}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8657539dafb53ce1bb5ec314d92d95a14c907516047a53cfc82d8585ff193a081c93db640857f4fd60550b49cb73a72b8346", 0x32}, {&(0x7f0000000200)="d517a7bf05b16b0e3a3768b95aff1d957601e8457f9eb3e5d65338baaa35", 0x1e}, {&(0x7f0000000240)="bf23a2b57cdbd993b6263d83e5535b786ea9ba2ce3c5399fd36dec6073925aa01a41a0fb11e5256759ac9e79a5dd87f56afb97de0fb5f4a10d4c32aa4b3f1b59ea63f8211dff6a8b8d7f85ddb23172efb63be8bdbbabb0b763e4", 0x5a}, {&(0x7f00000002c0)="11b1b4e75f94e87755af2e85e10d9d15a10cde5d47536acf971fd617dde76d479086a00c4ec012b2e75e585e492c71a09aaab8ca76aa4c9eda878198160f0fc8652d4d89a387b3ebd4063da6d8d127a30de8490cb76cf18a1b0ea80bb0acf8dd6c2c526edb75547eb7dc8e51ccd8447bb8e42dde7b446a7cfffad8c71f04f354deb0cb36324b50375a45b5eaa6b89557bdb2b7fc66309ba8919958106470bb643df372eebf768aa4882614d3466d69d65b832c79abe1bce748f0eefc94075519b605e8bc09cddddff1c0ec4d06acd9d563770c2c160d05bf208a4272fae144e75a74", 0xe2}, {&(0x7f00000003c0)="8bc8b420373cf809b8f940a14f6ae4e14f7dbfe6871f5802eb526463c4708dcfc4344c1cbe58ba32dd77c67ed8a0f2e31381d8bf21e92b1d0113568bbc44f9ba147d89ab064d5c968402c8323e0e409a95f4e5cf3ef119590e83e2277bacdf29a98f7af4d101032bae47fc5313487b1d2208f311729f5d5f1502252a4be0436d665a6ee212840a169ea309d0e43e38f1723005acf567ef6327a37f9daaab30b845cc732546f736738f7baccc13b0642bad1f49e7e1", 0xb5}, {&(0x7f0000000480)="0fb2d96274cc0016fca4b5aaa3318a97bbc45914f33054a91e399f7eb5bcb620d7e380dbd5d6fb41d96641e7612bf61827e3ba220df9e51d5fd826aa646717d04c5e39f3398fb4eb1cbe71cd5bc2aa2c54e1617cd176443634297b9af78a74b3b3eeb734fb0f8e8697cb58987a3d469686d1a6c0db331947fba8fa86bc91c6a6935009201ef3e192df2467fe277b95c997a6f0de802640909824327d4d149a8f40cf41e48b297239bbb3f4505acc719f37c0b5541731e7c8e6643b2aac35e58c149158ae07fba71005995da33ff7816afd2ba33209a82897d836f18eb92961f284e5339071f18df9042517640554b11bd5c73e2956", 0xf5}, {&(0x7f0000000580)="05e3a6faa7df0e468357e0da1a9c53ecdf99f4502588c9641cb3bfc2ab81846d0887bfc353aee1378f98308566620bc9fe9cf17b0d06888e64529b6508b35240ac55653bbf294afb0b7cc16bed442c306d96326c604f0dd065a41becab36f5e486c4500a266c261ae8b81e55eebf35bac1d9b1a2aecbd1e21d8a493b6175ba6f437e13498776d24eec9f87aba8983de725da9aba720997728068b4812d4a09ef989e45f1409a76760d7e01653a72dccb584d4569b9461d53888170914e700bc1b67b9a7b6fb2cf5df19b237ac4a400acfc3380f9836668c303db", 0xda}], 0x7}, 0x4040801) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/71, 0x47}], 0x2}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7}}, 0x1c}}, 0x40000) (async, rerun: 64) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) (async, rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48000000020301030000000000bb8ad6216d9f8630fbb794a394a95f0309000005000001080084400000000409000200000000880100000008000340000000900800034000000002"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0xc040000) 0s ago: executing program 37 (id=3420): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xffff8548, 0x7, 0x2, 0xbd}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8657539dafb53ce1bb5ec314d92d95a14c907516047a53cfc82d8585ff193a081c93db640857f4fd60550b49cb73a72b8346", 0x32}, {&(0x7f0000000200)="d517a7bf05b16b0e3a3768b95aff1d957601e8457f9eb3e5d65338baaa35", 0x1e}, {&(0x7f0000000240)="bf23a2b57cdbd993b6263d83e5535b786ea9ba2ce3c5399fd36dec6073925aa01a41a0fb11e5256759ac9e79a5dd87f56afb97de0fb5f4a10d4c32aa4b3f1b59ea63f8211dff6a8b8d7f85ddb23172efb63be8bdbbabb0b763e4", 0x5a}, {&(0x7f00000002c0)="11b1b4e75f94e87755af2e85e10d9d15a10cde5d47536acf971fd617dde76d479086a00c4ec012b2e75e585e492c71a09aaab8ca76aa4c9eda878198160f0fc8652d4d89a387b3ebd4063da6d8d127a30de8490cb76cf18a1b0ea80bb0acf8dd6c2c526edb75547eb7dc8e51ccd8447bb8e42dde7b446a7cfffad8c71f04f354deb0cb36324b50375a45b5eaa6b89557bdb2b7fc66309ba8919958106470bb643df372eebf768aa4882614d3466d69d65b832c79abe1bce748f0eefc94075519b605e8bc09cddddff1c0ec4d06acd9d563770c2c160d05bf208a4272fae144e75a74", 0xe2}, {&(0x7f00000003c0)="8bc8b420373cf809b8f940a14f6ae4e14f7dbfe6871f5802eb526463c4708dcfc4344c1cbe58ba32dd77c67ed8a0f2e31381d8bf21e92b1d0113568bbc44f9ba147d89ab064d5c968402c8323e0e409a95f4e5cf3ef119590e83e2277bacdf29a98f7af4d101032bae47fc5313487b1d2208f311729f5d5f1502252a4be0436d665a6ee212840a169ea309d0e43e38f1723005acf567ef6327a37f9daaab30b845cc732546f736738f7baccc13b0642bad1f49e7e1", 0xb5}, {&(0x7f0000000480)="0fb2d96274cc0016fca4b5aaa3318a97bbc45914f33054a91e399f7eb5bcb620d7e380dbd5d6fb41d96641e7612bf61827e3ba220df9e51d5fd826aa646717d04c5e39f3398fb4eb1cbe71cd5bc2aa2c54e1617cd176443634297b9af78a74b3b3eeb734fb0f8e8697cb58987a3d469686d1a6c0db331947fba8fa86bc91c6a6935009201ef3e192df2467fe277b95c997a6f0de802640909824327d4d149a8f40cf41e48b297239bbb3f4505acc719f37c0b5541731e7c8e6643b2aac35e58c149158ae07fba71005995da33ff7816afd2ba33209a82897d836f18eb92961f284e5339071f18df9042517640554b11bd5c73e2956", 0xf5}, {&(0x7f0000000580)="05e3a6faa7df0e468357e0da1a9c53ecdf99f4502588c9641cb3bfc2ab81846d0887bfc353aee1378f98308566620bc9fe9cf17b0d06888e64529b6508b35240ac55653bbf294afb0b7cc16bed442c306d96326c604f0dd065a41becab36f5e486c4500a266c261ae8b81e55eebf35bac1d9b1a2aecbd1e21d8a493b6175ba6f437e13498776d24eec9f87aba8983de725da9aba720997728068b4812d4a09ef989e45f1409a76760d7e01653a72dccb584d4569b9461d53888170914e700bc1b67b9a7b6fb2cf5df19b237ac4a400acfc3380f9836668c303db", 0xda}], 0x7}, 0x4040801) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/71, 0x47}], 0x2}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7}}, 0x1c}}, 0x40000) (async, rerun: 64) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) (async, rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48000000020301030000000000bb8ad6216d9f8630fbb794a394a95f0309000005000001080084400000000409000200000000880100000008000340000000900800034000000002"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0xc040000) kernel console output (not intermixed with test programs): r1: entered allmulticast mode [ 428.563622][ T50] Bluetooth: hci5: command tx timeout [ 428.565131][T15936] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.606346][T15936] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.635680][T15936] bridge_slave_0: entered allmulticast mode [ 428.661392][T15936] bridge_slave_0: entered promiscuous mode [ 428.684157][T15936] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.716450][T15936] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.745349][T15936] bridge_slave_1: entered allmulticast mode [ 428.763358][T15936] bridge_slave_1: entered promiscuous mode [ 428.885880][T15936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.916772][T15936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.032082][T15936] team0: Port device team_slave_0 added [ 429.059385][T15936] team0: Port device team_slave_1 added [ 429.113243][T15936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.140284][T15936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.171395][T15936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.188141][T15936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.195363][T15936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.221686][T15936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.288251][T15936] hsr_slave_0: entered promiscuous mode [ 429.296250][T15936] hsr_slave_1: entered promiscuous mode [ 429.302611][T15936] debugfs: 'hsr0' already exists in 'hsr' [ 429.308581][T15936] Cannot create hsr debugfs directory [ 429.452312][T15936] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 429.493879][T13733] net_ratelimit: 15 callbacks suppressed [ 429.493898][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 429.536961][T15936] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 429.589994][T15936] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 429.614673][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 429.664556][T15936] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 429.823752][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 429.836699][T16105] Cannot find del_set index 4 as target [ 429.843002][T16105] __nla_validate_parse: 69 callbacks suppressed [ 429.843013][T16105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2861'. [ 429.937935][T16111] sctp: [Deprecated]: syz.0.2863 (pid 16111) Use of int in maxseg socket option. [ 429.937935][T16111] Use struct sctp_assoc_value instead [ 429.952887][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 430.063793][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 430.173583][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 430.283793][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 430.393752][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 430.503806][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 430.613618][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 430.653628][ T50] Bluetooth: hci5: command tx timeout [ 431.282835][T16047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.339257][T15936] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.377302][T15936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.441380][T15936] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.495832][T15936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.523187][T15936] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.570381][T15936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.582112][T15936] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.606035][T15936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.823152][T15936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.830149][T16144] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2870'. [ 431.887727][T15936] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.918045][T10341] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.925311][T10341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.940820][T16146] netlink: 'syz.3.2871': attribute type 1 has an invalid length. [ 431.949155][T16146] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2871'. [ 431.965275][T16146] netlink: 'syz.3.2871': attribute type 1 has an invalid length. [ 431.965532][T10341] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.973130][T16146] netlink: 'syz.3.2871': attribute type 8 has an invalid length. [ 431.980216][T10341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.034075][T16146] netlink: 582 bytes leftover after parsing attributes in process `syz.3.2871'. [ 432.063966][T16146] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2871'. [ 432.301505][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2872'. [ 432.387117][T16159] tunl0: entered promiscuous mode [ 432.407528][T16159] netlink: 'syz.2.2873': attribute type 4 has an invalid length. [ 432.426289][T16159] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2873'. [ 432.729967][ T50] Bluetooth: hci5: command tx timeout [ 432.801054][T16180] xt_bpf: check failed: parse error [ 433.077751][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'. [ 433.127604][T16195] xfrm1: entered promiscuous mode [ 433.149995][T16195] xfrm1: entered allmulticast mode [ 433.190121][T15936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.747686][T15936] veth0_vlan: entered promiscuous mode [ 433.797401][T15936] veth1_vlan: entered promiscuous mode [ 433.903495][T15936] veth0_macvtap: entered promiscuous mode [ 433.915321][T15936] veth1_macvtap: entered promiscuous mode [ 433.956191][T15936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.992389][T15936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.038857][T13741] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.061121][T13741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.101543][T13741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.118334][T13741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.242786][T13741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.261821][T13741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.295282][T13730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.303301][T13730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.424355][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2895'. [ 434.583630][T13730] net_ratelimit: 19 callbacks suppressed [ 434.583649][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 434.753893][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 434.805694][ T50] Bluetooth: hci5: command tx timeout [ 434.865901][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 434.878615][T16272] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 434.883337][T16266] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2900'. [ 434.886952][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 435.010207][T16285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2904'. [ 435.024076][T13734] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 435.112473][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'. [ 435.135753][T16278] syzkaller0: entered promiscuous mode [ 435.147367][T16278] syzkaller0: entered allmulticast mode [ 435.162863][T16278] TC_ACT_REPEAT abuse ? [ 435.203887][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 435.313807][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 435.425305][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 435.460705][T16305] tipc: Enabled bearer , priority 0 [ 435.511854][T16305] syzkaller0: entered promiscuous mode [ 435.517888][T16305] syzkaller0: entered allmulticast mode [ 435.533316][T16305] tipc: Resetting bearer [ 435.549378][T16309] veth0: entered promiscuous mode [ 435.559988][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2909'. [ 435.636405][T16304] tipc: Resetting bearer [ 436.274785][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2913'. [ 437.522147][T16304] tipc: Disabling bearer [ 437.547786][ T10] tipc: Node number set to 2886997039 [ 437.594462][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.716989][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.921168][T16342] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 437.932820][T16342] netlink: 'syz.0.2919': attribute type 2 has an invalid length. [ 438.783883][T15937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.797333][T15937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.806295][T15937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.818512][T15937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.828742][T15937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.302362][T16422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 439.604824][T13742] net_ratelimit: 15 callbacks suppressed [ 439.604842][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 439.708927][T16400] xfrm0 speed is unknown, defaulting to 1000 [ 439.727963][T16400] lo speed is unknown, defaulting to 1000 [ 439.736077][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2943'. [ 439.748792][T16445] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2944'. [ 439.780978][T16445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2944'. [ 439.806054][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 439.848532][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.029113][T16419] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 440.036666][T16419] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 440.069278][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'. [ 440.076640][T16455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.899359][ T50] Bluetooth: hci1: command tx timeout [ 442.162184][T16419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 442.168741][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 442.201346][T16419] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 442.392804][T16483] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2950'. [ 442.460011][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 442.749080][T10341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.767277][T10341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.840298][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 442.872922][T16500] netlink: 750 bytes leftover after parsing attributes in process `syz.1.2957'. [ 442.887786][T16502] netlink: 'syz.1.2957': attribute type 13 has an invalid length. [ 442.916207][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 442.927398][T16509] macvtap1: entered promiscuous mode [ 442.932733][T16509] vlan0: entered promiscuous mode [ 442.939561][T16509] macvtap1: entered allmulticast mode [ 442.945321][T16509] vlan0: entered allmulticast mode [ 442.950886][T16509] veth0_vlan: entered allmulticast mode [ 443.065119][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 443.085329][T16502] netlink: 'syz.1.2957': attribute type 13 has an invalid length. [ 443.111230][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 443.208668][T10341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.228887][T10341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.246954][T16400] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.254456][T16400] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.261740][T16400] bridge_slave_0: entered allmulticast mode [ 443.271571][T16400] bridge_slave_0: entered promiscuous mode [ 443.322087][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.329947][T16400] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.337590][T16400] bridge_slave_1: entered allmulticast mode [ 443.346737][T16400] bridge_slave_1: entered promiscuous mode [ 443.424478][T16400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.463211][T10341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.474167][T10341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.512755][T16400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.620561][T10341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.621482][T16539] netlink: 'syz.1.2964': attribute type 4 has an invalid length. [ 443.632767][T10341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.640742][T16539] netlink: 'syz.1.2964': attribute type 1 has an invalid length. [ 443.664830][T16539] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2964'. [ 443.679402][T16400] team0: Port device team_slave_0 added [ 443.692774][T16544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2965'. [ 443.715330][T16400] team0: Port device team_slave_1 added [ 443.818038][T16400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.846325][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.883147][T16400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.906705][T16400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.913950][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.953271][T16400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.194840][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 444.240291][T16400] hsr_slave_0: entered promiscuous mode [ 444.256497][T16400] hsr_slave_1: entered promiscuous mode [ 444.270531][T16400] debugfs: 'hsr0' already exists in 'hsr' [ 444.279354][T16400] Cannot create hsr debugfs directory [ 444.285595][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2972'. [ 444.346229][T16565] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 444.719300][T10341] veth5: left allmulticast mode [ 444.735403][T10341] veth5: left promiscuous mode [ 444.743075][T10341] bridge5: port 1(veth5) entered disabled state [ 444.803124][T10341] bond5: left allmulticast mode [ 444.812716][T10341] ip6gre1: left allmulticast mode [ 445.183904][T16609] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 445.548318][T10341] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 445.558045][T10341] ip6gre1 (unregistering): left promiscuous mode [ 445.657125][T16611] netlink: 'syz.3.2981': attribute type 11 has an invalid length. [ 445.667465][T16611] netlink: 'syz.3.2981': attribute type 5 has an invalid length. [ 445.678015][T16611] __nla_validate_parse: 3 callbacks suppressed [ 445.678032][T16611] netlink: 6548 bytes leftover after parsing attributes in process `syz.3.2981'. [ 445.704375][T10341] gretap0 (unregistering): left promiscuous mode [ 445.740771][T10341] bond6 (unregistering): (slave gretap1): Releasing active interface [ 445.798904][T10341] bond11 (unregistering): (slave geneve2): Releasing active interface [ 445.947174][T10341] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 445.955492][T10341] bridge3 (unregistering): left promiscuous mode [ 446.282768][T10341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.293746][T10341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.309217][T10341] bond0 (unregistering): Released all slaves [ 446.319289][T10341] bond1 (unregistering): Released all slaves [ 446.338921][T10341] bond2 (unregistering): Released all slaves [ 446.353178][T10341] bond3 (unregistering): Released all slaves [ 446.382448][T10341] bond4 (unregistering): Released all slaves [ 446.397955][T10341] bond5 (unregistering): Released all slaves [ 446.417982][T10341] bond6 (unregistering): Released all slaves [ 446.441772][T10341] bond7 (unregistering): Released all slaves [ 446.458114][T10341] bond8 (unregistering): Released all slaves [ 446.471498][T10341] bond9 (unregistering): Released all slaves [ 446.486816][T10341] bond10 (unregistering): Released all slaves [ 446.506542][T10341] bond11 (unregistering): Released all slaves [ 446.520892][T10341] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 446.531115][T10341] bond12 (unregistering): Released all slaves [ 446.549257][T10341] bond13 (unregistering): Released all slaves [ 446.595052][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 446.826297][T10341] : left promiscuous mode [ 446.948009][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'. [ 446.987441][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'. [ 447.201898][T10341] tipc: Left network mode [ 447.246755][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 447.294477][T13741] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.340682][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 447.447616][T16654] IPVS: set_ctl: invalid protocol: 47 172.20.20.19:20004 [ 447.465480][T16647] team0: Device xfrm0 is of different type [ 447.521710][T16653] tipc: Started in network mode [ 447.546842][T16653] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 447.581777][T16653] tipc: Enabled bearer , priority 0 [ 447.974661][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 448.693398][T16696] netlink: 'syz.4.2998': attribute type 2 has an invalid length. [ 448.714560][T16696] netlink: 'syz.4.2998': attribute type 2 has an invalid length. [ 448.735634][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 448.741187][T16696] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2998'. [ 448.786947][ T6167] tipc: Node number set to 11578026 [ 449.008562][T13732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 449.026661][T16701] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 449.091909][T16700] syzkaller0: entered promiscuous mode [ 449.108257][T16700] syzkaller0: entered allmulticast mode [ 449.473723][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'. [ 449.484261][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'. [ 449.614141][T16723] netlink: 'syz.4.3004': attribute type 11 has an invalid length. [ 449.642031][T16723] netlink: 'syz.4.3004': attribute type 11 has an invalid length. [ 449.664766][T16723] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3004'. [ 449.778938][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 449.809971][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'. [ 449.831139][T16400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.919745][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.032764][T16400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 450.087526][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.267932][T16400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 450.312709][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.762626][T16400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 450.792409][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.904939][T16772] bond1: option lp_interval: invalid value (0) [ 450.921121][T16772] bond1: option lp_interval: allowed values 1 - 2147483647 [ 450.949940][T16772] bond1 (unregistering): Released all slaves [ 451.093828][T13732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 451.348409][T16796] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 451.369817][T16796] syzkaller0: entered promiscuous mode [ 451.378685][T16796] syzkaller0: entered allmulticast mode [ 451.854354][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 451.908795][T16823] __nla_validate_parse: 1 callbacks suppressed [ 451.908813][T16823] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3019'. [ 452.198109][T16837] bridge_slave_0: left allmulticast mode [ 452.225202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.251783][T16837] bridge_slave_0: left promiscuous mode [ 452.271210][T16837] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.318036][T16837] bridge_slave_1: left allmulticast mode [ 452.358305][T16837] bridge_slave_1: left promiscuous mode [ 452.381521][T16837] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.427814][T16837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.533262][T10341] hsr_slave_0: left promiscuous mode [ 452.566594][T10341] hsr_slave_1: left promiscuous mode [ 452.593357][T10341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.642602][T10341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.682367][T10341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.735505][T10341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.780682][T10341] batman_adv: batadv0: Removing interface: ipvlan2 [ 452.930432][T10341] veth1_vlan: left allmulticast mode [ 452.971908][T10341] veth0_macvtap: left promiscuous mode [ 452.989652][T10341] veth1_vlan: left promiscuous mode [ 453.500967][T10341] pim6reg (unregistering): left allmulticast mode [ 453.795399][T10341] team_slave_1 (unregistering): left promiscuous mode [ 453.815770][T10341] team0 (unregistering): Port device team_slave_1 removed [ 453.830963][T10341] team_slave_0 (unregistering): left promiscuous mode [ 453.838647][T10341] team0 (unregistering): Port device team_slave_0 removed [ 453.983998][T16880] syzkaller1: entered promiscuous mode [ 453.989789][T16880] syzkaller1: entered allmulticast mode [ 454.133739][T13732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 454.192459][T16400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.226151][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'. [ 454.249513][T16889] netlink: 'syz.0.3032': attribute type 1 has an invalid length. [ 454.258002][T16400] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.294159][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 454.304560][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'. [ 454.325605][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.332814][T13744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.356892][T16898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3032'. [ 454.366649][T16899] netlink: 'syz.4.3031': attribute type 11 has an invalid length. [ 454.375985][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.383172][T13744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.579819][T16903] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 454.703567][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 454.728533][T10341] IPVS: stop unused estimator thread 0... [ 454.823676][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 455.028657][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 455.155443][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 455.284624][ T10] IPVS: starting estimator thread 0... [ 455.294016][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 455.404062][T16944] IPVS: using max 26 ests per chain, 62400 per kthread [ 455.433723][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 455.563341][T16954] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 455.583825][T16956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3049'. [ 455.809031][T16400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.933175][T16400] veth0_vlan: entered promiscuous mode [ 455.981107][T16400] veth1_vlan: entered promiscuous mode [ 456.055204][T16400] veth0_macvtap: entered promiscuous mode [ 456.076527][T16400] veth1_macvtap: entered promiscuous mode [ 456.136607][T16400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.196255][T16400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.242347][T13722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.255204][T16983] only policy match revision 0 supported [ 456.255222][T16983] unable to load match [ 456.270780][T13722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.302079][T13722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.347209][T13722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.352464][T16993] netlink: 'syz.0.3059': attribute type 1 has an invalid length. [ 456.473855][T16991] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 457.029892][ T30] audit: type=1107 audit(1781344763.655:6): pid=17018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ Ú0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 458.716717][T13725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.728755][T13725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.774254][T13745] net_ratelimit: 5 callbacks suppressed [ 458.774271][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 458.830245][T13745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.843200][T13745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.915237][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 458.995779][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 459.040143][T17028] IPVS: ip_vs_edit_dest(): server weight less than zero [ 459.048026][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.226226][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.237841][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 459.292909][T17037] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3072'. [ 459.332868][T17037] gtp3: entered allmulticast mode [ 459.366471][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.417828][T15937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 459.432500][T15937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 459.442461][T15937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 459.452759][T15937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 459.460675][T15937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 459.534776][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.571559][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 459.675139][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.811242][T17056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3076'. [ 459.924600][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.953155][T17068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'. [ 460.001362][T17067] syzkaller0: entered promiscuous mode [ 460.021033][T17067] syzkaller0: entered allmulticast mode [ 460.184057][T13725] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 460.296571][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 460.322323][T10703] udevd[10703]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 460.343492][T17044] xfrm0 speed is unknown, defaulting to 1000 [ 460.349746][T17077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3080'. [ 460.353361][T17044] lo speed is unknown, defaulting to 1000 [ 460.526311][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3081'. [ 460.561905][T17079] netlink: 'syz.4.3081': attribute type 1 has an invalid length. [ 460.710722][T17079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3081'. [ 460.863936][T17092] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3084'. [ 461.191280][ T50] block nbd4: Receive control failed (result -32) [ 461.305851][T17044] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.313944][T17044] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.322143][T17044] bridge_slave_0: entered allmulticast mode [ 461.333245][T17044] bridge_slave_0: entered promiscuous mode [ 461.351703][T17115] nbd: must specify a device to reconfigure [ 461.359804][T17044] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.384960][T17044] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.396620][T17044] bridge_slave_1: entered allmulticast mode [ 461.407407][T17044] bridge_slave_1: entered promiscuous mode [ 461.493195][T17044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.523618][ T50] Bluetooth: hci4: command tx timeout [ 461.526120][T17044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.587325][T17126] netlink: 'syz.1.3092': attribute type 1 has an invalid length. [ 461.648837][T17126] 8021q: adding VLAN 0 to HW filter on device bond11 [ 461.661494][T17044] team0: Port device team_slave_0 added [ 461.675152][T17044] team0: Port device team_slave_1 added [ 461.739870][T17044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.747797][T17044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.776969][T17044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.795350][T17044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.809308][T17044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.836996][T17044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.958871][T17044] hsr_slave_0: entered promiscuous mode [ 461.967024][T17044] hsr_slave_1: entered promiscuous mode [ 461.974397][T17044] debugfs: 'hsr0' already exists in 'hsr' [ 461.980465][T17044] Cannot create hsr debugfs directory [ 462.047715][T17133] syzkaller0: entered promiscuous mode [ 462.059734][T17133] syzkaller0: entered allmulticast mode [ 462.160051][T17135] netlink: 'syz.4.3095': attribute type 7 has an invalid length. [ 462.717566][T17044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 462.738179][T17044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 462.764852][T17044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 462.978832][T17044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 462.990184][T17044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 463.001297][T17044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 463.186504][T17044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 463.199182][T17044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 463.225125][T17044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 463.388419][T17044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 463.410705][T17044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 463.433879][T17044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 463.603585][ T50] Bluetooth: hci4: command tx timeout [ 463.717841][T17195] netlink: 'syz.4.3111': attribute type 83 has an invalid length. [ 463.743906][T17197] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 463.772805][T17197] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 463.794953][T17197] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 463.823819][T17197] netlink: 'syz.1.3112': attribute type 2 has an invalid length. [ 463.853872][T13722] net_ratelimit: 10 callbacks suppressed [ 463.853907][T13722] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 463.909843][T17044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.933402][T17044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.957663][T17044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 463.986755][T17044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.020801][T17044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 464.069821][T17044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.079545][T17044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.092231][T17044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.173981][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.377510][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.543600][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.628112][T17044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.664519][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.762490][T17044] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.784351][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.848703][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.855908][T13744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.911099][T13733] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 464.954376][T13725] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.977035][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.984238][T13744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.996661][T17245] __nla_validate_parse: 5 callbacks suppressed [ 464.996691][T17245] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3122'. [ 465.125274][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 465.244017][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 465.355864][T13725] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 465.655685][T17044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.683970][ T50] Bluetooth: hci4: command tx timeout [ 465.731423][T17044] veth0_vlan: entered promiscuous mode [ 465.750684][T17044] veth1_vlan: entered promiscuous mode [ 465.804576][T17044] veth0_macvtap: entered promiscuous mode [ 465.820505][T17044] veth1_macvtap: entered promiscuous mode [ 465.845790][T17044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.871265][T17044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.891016][T10341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.900593][T10341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.911766][T10341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.921506][T10341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.528913][T17225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.739617][T13744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.770449][ T50] Bluetooth: hci4: command tx timeout [ 467.787038][T13744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.931913][T10341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.952100][T10341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.632505][T17288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3130'. [ 468.742817][T15937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.759625][T15937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.770686][T17296] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 468.770725][T15937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.793380][T15937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.802851][T15937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.817793][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 468.832807][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 468.904959][T13722] net_ratelimit: 27 callbacks suppressed [ 468.904979][T13722] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.067782][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.333181][ T5637] .`: (slave syz_tun): Releasing backup interface [ 469.394094][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.451363][T17307] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 469.479936][T17307] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 469.490956][T17298] openvswitch: netlink: IPv6 tunnel dst address is zero [ 469.545306][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.599480][T17310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3134'. [ 469.644186][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3134'. [ 469.735714][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.878749][T13722] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.968984][T17293] xfrm0 speed is unknown, defaulting to 1000 [ 470.001951][T17293] lo speed is unknown, defaulting to 1000 [ 470.017825][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 470.255826][T17327] IPVS: set_ctl: invalid protocol: 65 255.255.255.255:20003 [ 470.368818][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 470.379714][T15937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.401605][T15937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.414711][T15937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.427628][T15937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.439678][T15937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.664586][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 470.676385][T17343] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3142'. [ 470.837350][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3140'. [ 470.887675][ T50] Bluetooth: hci0: command tx timeout [ 471.283062][T17363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3146'. [ 471.524895][T17293] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.532529][T17293] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.540296][T17293] bridge_slave_0: entered allmulticast mode [ 471.551170][T17293] bridge_slave_0: entered promiscuous mode [ 471.581560][T17293] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.590703][T17293] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.600108][T17293] bridge_slave_1: entered allmulticast mode [ 471.619659][T17293] bridge_slave_1: entered promiscuous mode [ 471.724708][T17329] xfrm0 speed is unknown, defaulting to 1000 [ 471.731351][T17293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.742588][T17374] netlink: 'syz.4.3148': attribute type 22 has an invalid length. [ 471.749191][T17329] lo speed is unknown, defaulting to 1000 [ 471.759492][T17293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.770568][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3148'. [ 471.882049][T17374] netlink: 'syz.4.3148': attribute type 22 has an invalid length. [ 471.914495][T17376] IPv6: sit1: Disabled Multicast RS [ 471.924036][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3148'. [ 472.008499][T17293] team0: Port device team_slave_0 added [ 472.031700][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3152'. [ 472.049543][T17385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3151'. [ 472.076405][T10341] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.087688][T10341] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.109792][T10341] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.147611][T17293] team0: Port device team_slave_1 added [ 472.197380][T10341] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.289691][T17389] netlink: 'syz.2.3155': attribute type 1 has an invalid length. [ 472.350223][T17293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.373553][T17293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.434016][T17293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.484470][ T50] Bluetooth: hci2: command tx timeout [ 472.535072][T17293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.553554][T17293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.587079][T17293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.859643][T17411] netlink: 'syz.2.3159': attribute type 1 has an invalid length. [ 472.915135][T17413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3158'. [ 472.949650][T17293] hsr_slave_0: entered promiscuous mode [ 472.956570][T17293] hsr_slave_1: entered promiscuous mode [ 472.963292][T17293] debugfs: 'hsr0' already exists in 'hsr' [ 472.965852][ T50] Bluetooth: hci0: command tx timeout [ 472.969616][T17293] Cannot create hsr debugfs directory [ 473.142698][T17415] syzkaller0: entered promiscuous mode [ 473.161345][T17415] syzkaller0: entered allmulticast mode [ 474.564026][ T50] Bluetooth: hci2: command tx timeout [ 475.052501][ T50] Bluetooth: hci0: command tx timeout [ 476.648794][ T50] Bluetooth: hci2: command tx timeout [ 476.824094][T17329] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.845605][T17329] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.849725][T17454] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 476.855132][T17329] bridge_slave_0: entered allmulticast mode [ 476.880666][T17329] bridge_slave_0: entered promiscuous mode [ 476.895647][T17454] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3170'. [ 476.898948][T17329] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.938488][T17329] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.949943][T17329] bridge_slave_1: entered allmulticast mode [ 476.969484][T17329] bridge_slave_1: entered promiscuous mode [ 477.127902][ T50] Bluetooth: hci0: command tx timeout [ 477.337151][T17329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.396911][T17329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.473064][T17467] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 477.706012][T17293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.718394][T17293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.786987][T13725] net_ratelimit: 7 callbacks suppressed [ 477.787009][T13725] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 477.802888][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3174'. [ 477.856099][T17329] team0: Port device team_slave_0 added [ 477.890934][T17478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.922191][T17329] team0: Port device team_slave_1 added [ 478.031806][T17293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.064010][T17293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.189748][T17498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3179'. [ 478.236514][T17329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.258513][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.285675][T17329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.314958][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 478.341938][T17329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.350404][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.377645][T17329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.428031][T17293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.438914][T17293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.719461][T17293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.745526][ T50] Bluetooth: hci2: command tx timeout [ 478.765170][T17293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.811582][T17329] hsr_slave_0: entered promiscuous mode [ 478.820984][T17329] hsr_slave_1: entered promiscuous mode [ 478.835211][T17329] debugfs: 'hsr0' already exists in 'hsr' [ 478.840975][T17329] Cannot create hsr debugfs directory [ 478.849617][T13722] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 478.883016][T17516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3182'. [ 478.906978][T17515] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3183'. [ 479.052690][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3182'. [ 479.294037][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 479.379864][T17293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 479.416204][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.428341][T17527] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.3185'. [ 479.444152][T17293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 479.471637][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.494096][T13725] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 479.543942][T17293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 479.611812][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.642255][T17293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 479.667002][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.760211][T17533] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 479.820198][T17540] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 479.974736][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 480.059328][T17329] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 480.118969][T17329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.139244][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 480.149827][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'. [ 480.163002][T17329] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 480.227690][T17329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.276424][T13732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 480.441509][T17329] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 480.491651][T17329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.526417][T17329] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 480.566810][T17329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.652004][T17572] netlink: 'syz.0.3192': attribute type 9 has an invalid length. [ 480.678176][T17572] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3192'. [ 481.268659][T17597] xt_policy: too many policy elements [ 481.345498][T17293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.582561][T17293] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.641400][T17329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.665398][ T5295] veth1_vlan: left promiscuous mode [ 481.746628][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.753838][T13725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.878860][T17329] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.952574][T13732] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.961240][T13732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.023067][T13732] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.031082][T13732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.102408][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.110626][T13730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.877424][T13742] net_ratelimit: 8 callbacks suppressed [ 482.877462][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 483.033056][T17645] __nla_validate_parse: 7 callbacks suppressed [ 483.033075][T17645] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3205'. [ 483.077086][T13741] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 483.245591][T13725] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 483.624994][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 483.773355][T13722] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 483.930538][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.165121][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.296607][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.454429][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.594100][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.630625][T17700] netlink: 'syz.0.3214': attribute type 21 has an invalid length. [ 484.662936][T17700] netlink: 'syz.0.3214': attribute type 22 has an invalid length. [ 484.703968][T17700] netlink: 'syz.0.3214': attribute type 23 has an invalid length. [ 484.757116][T17700] netlink: 'syz.0.3214': attribute type 25 has an invalid length. [ 484.777114][T17293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.796542][T17700] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3214'. [ 485.041807][T17293] veth0_vlan: entered promiscuous mode [ 485.097878][T17293] veth1_vlan: entered promiscuous mode [ 485.240134][T17293] veth0_macvtap: entered promiscuous mode [ 485.296621][T17293] veth1_macvtap: entered promiscuous mode [ 485.386786][T17713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.394078][T17713] IPv6: NLM_F_CREATE should be set when creating new route [ 485.398140][T17329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.506204][T17293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.546399][T17718] IPv6: NLM_F_CREATE should be specified when creating new route [ 485.571101][T17293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.585125][T17718] netlink: 'syz.0.3217': attribute type 1 has an invalid length. [ 485.617786][T13742] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.660067][T13742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.700924][T13742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.756701][T13742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.097375][T13725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.136884][T13725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.235889][T17733] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3221'. [ 486.273233][T13745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.286895][T13745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.619494][T17329] veth0_vlan: entered promiscuous mode [ 486.680404][T17329] veth1_vlan: entered promiscuous mode [ 486.755443][T17755] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3127'. [ 486.791511][T17329] veth0_macvtap: entered promiscuous mode [ 486.832018][T17329] veth1_macvtap: entered promiscuous mode [ 486.879927][T17757] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3226'. [ 486.919818][T17329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.952081][T17329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.998136][T10341] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.016115][ T5366] IPVS: starting estimator thread 0... [ 487.023196][T10341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.039082][T10341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.053911][T10341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.115659][T17759] IPVS: using max 34 ests per chain, 81600 per kthread [ 487.214694][T17739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.578457][T10341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.621169][T10341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.715308][T17757] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3226'. [ 487.786577][T13742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.818851][T13742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.983584][T13730] net_ratelimit: 15 callbacks suppressed [ 487.983620][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 488.133595][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 488.177456][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3232'. [ 488.291969][T17801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3233'. [ 488.322279][T17793] veth0: entered allmulticast mode [ 488.474651][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 488.616451][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 488.632111][T17810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3236'. [ 488.743540][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 488.875140][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 488.959648][T17819] netlink: 'syz.1.3239': attribute type 3 has an invalid length. [ 489.025948][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.165860][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.236068][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3244'. [ 489.281715][T17835] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 489.335443][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.465700][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.900777][T17858] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3252'. [ 489.951000][T17858] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3252'. [ 490.099306][T17867] tipc: Failed to remove unknown binding: 66,0,0/0:3199186085/3199186087 [ 490.127197][T17867] tipc: Failed to remove unknown binding: 66,0,0/0:3199186085/3199186086 [ 490.168458][T17871] tipc: Failed to remove unknown binding: 66,0,0/0:3199186085/3199186087 [ 490.189714][T17871] tipc: Failed to remove unknown binding: 66,0,0/0:3199186085/3199186086 [ 490.238304][T17875] nbd: nbd1 already in use [ 490.257507][T17875] block nbd1: NBD_DISCONNECT [ 490.276554][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3255'. [ 490.289295][T17875] block nbd1: Send disconnect failed -32 [ 490.335465][T17875] block nbd1: shutting down sockets [ 490.472621][T13744] bridge_slave_1: left allmulticast mode [ 490.494489][T13744] bridge_slave_1: left promiscuous mode [ 490.512810][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.544378][T13744] bridge_slave_0: left allmulticast mode [ 490.560764][T13744] bridge_slave_0: left promiscuous mode [ 490.579969][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.666803][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 490.951574][T13744] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 490.979667][T17779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.152190][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3259'. [ 491.302091][T13744] erspan0 (unregistering): left promiscuous mode [ 491.356163][T13744] gretap0 (unregistering): left promiscuous mode [ 491.418901][T13744] bond10 (unregistering): (slave gretap2): Releasing backup interface [ 491.892471][T13744] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 492.181397][T13744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.193593][T13744] bond0 (unregistering): Released all slaves [ 492.209022][T13744] bond1 (unregistering): (slave bond2): Releasing active interface [ 492.218477][T13744] bond1 (unregistering): Released all slaves [ 492.240730][T13744] bond2 (unregistering): Released all slaves [ 492.263012][T13744] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 492.283307][T13744] bond3 (unregistering): (slave bond4): Releasing active interface [ 492.300246][T13744] bond3 (unregistering): Released all slaves [ 492.321686][T13744] bond4 (unregistering): Released all slaves [ 492.352032][T13744] bond5 (unregistering): Released all slaves [ 492.382176][T13744] bond6 (unregistering): Released all slaves [ 492.405469][T13744] bond7 (unregistering): Released all slaves [ 492.438492][T13744] bond8 (unregistering): Released all slaves [ 492.459177][T13744] bond9 (unregistering): Released all slaves [ 492.479436][T13744] bond10 (unregistering): (slave bond11): Releasing backup interface [ 492.491461][T13744] bond10 (unregistering): Released all slaves [ 492.518591][T13744] bond11 (unregistering): Released all slaves [ 492.545746][T13744] bond12 (unregistering): Released all slaves [ 492.568097][T13744] bond13 (unregistering): (slave bond14): Releasing backup interface [ 492.579726][T13744] bond13 (unregistering): Released all slaves [ 492.621178][T13744] bond14 (unregistering): Released all slaves [ 492.643079][T13744] bond15 (unregistering): Released all slaves [ 492.664918][T13744] bond16 (unregistering): Released all slaves [ 492.687387][T13744] bond17 (unregistering): Released all slaves [ 492.710537][T13744] bond18 (unregistering): Released all slaves [ 492.757685][T17891] vlan3: entered promiscuous mode [ 492.762934][T17891] hsr0: entered promiscuous mode [ 492.772362][T17891] vlan3: entered allmulticast mode [ 492.794541][T17891] hsr0: entered allmulticast mode [ 492.809678][T17891] hsr_slave_0: entered allmulticast mode [ 492.827590][T17891] hsr_slave_1: entered allmulticast mode [ 493.064791][T13722] net_ratelimit: 9 callbacks suppressed [ 493.064813][T13722] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 493.146804][T13744] tipc: Disabling bearer [ 493.208495][T13744] tipc: Left network mode [ 493.244984][T13733] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 493.383694][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 493.520623][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 493.676343][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 493.751765][T17936] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3268'. [ 493.900476][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 493.982117][T17902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.145633][T13741] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 494.314107][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 494.461097][T17951] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 494.502738][T13744] hsr_slave_0: left promiscuous mode [ 494.532226][T13744] hsr_slave_1: left promiscuous mode [ 494.557583][T13744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.569765][T13744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.621327][T17958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.791219][T13744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.828178][T13744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.874004][T13744] team0 (unregistering): Port device team_slave_1 removed [ 495.911441][T13744] team0 (unregistering): Port device team_slave_0 removed [ 496.052502][T13744] team0 (unregistering): Port device dummy0 removed [ 496.101024][T13744] vcan0 (unregistering): left allmulticast mode [ 496.520339][T17994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3283'. [ 497.039201][T18009] Bluetooth: MGMT ver 1.23 [ 497.096586][T13744] IPVS: stop unused estimator thread 0... [ 497.179327][T18002] xt_CT: No such helper "snmp_trap" [ 497.428904][T18021] bridge: RTM_NEWNEIGH with invalid ether address [ 497.551276][T18026] FAULT_INJECTION: forcing a failure. [ 497.551276][T18026] name failslab, interval 1, probability 0, space 0, times 0 [ 497.626822][T18026] CPU: 1 UID: 0 PID: 18026 Comm: syz.4.3291 Not tainted syzkaller #0 PREEMPT(full) [ 497.626849][T18026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.626866][T18026] Call Trace: [ 497.626873][T18026] [ 497.626883][T18026] dump_stack_lvl+0xe8/0x150 [ 497.626923][T18026] should_fail_ex+0x40c/0x560 [ 497.626947][T18026] should_failslab+0xa8/0x100 [ 497.626976][T18026] __kmalloc_cache_noprof+0x88/0x660 [ 497.627001][T18026] ? nfnetlink_rcv+0x1021/0x28c0 [ 497.627029][T18026] nfnetlink_rcv+0x1021/0x28c0 [ 497.627082][T18026] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 497.627119][T18026] ? ref_tracker_free+0x689/0x830 [ 497.627159][T18026] ? skb_clone+0x246/0x3a0 [ 497.627177][T18026] ? __netlink_deliver_tap+0x811/0x860 [ 497.627206][T18026] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.627228][T18026] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.627257][T18026] netlink_unicast+0x7bb/0x940 [ 497.627289][T18026] netlink_sendmsg+0x813/0xb40 [ 497.627321][T18026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.627347][T18026] ? aa_sock_msg_perm+0xf1/0x1b0 [ 497.627371][T18026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.627391][T18026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.627415][T18026] ____sys_sendmsg+0x9b9/0xa20 [ 497.627440][T18026] ? __might_fault+0xaf/0x130 [ 497.627466][T18026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.627500][T18026] ? import_iovec+0x73/0xa0 [ 497.627525][T18026] ___sys_sendmsg+0x2a5/0x360 [ 497.627549][T18026] ? __lock_acquire+0x683/0x2cd0 [ 497.627571][T18026] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.627597][T18026] ? __lock_acquire+0x683/0x2cd0 [ 497.627645][T18026] ? __fget_files+0x2a/0x420 [ 497.627663][T18026] ? __fget_files+0x3a2/0x420 [ 497.627691][T18026] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.627719][T18026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.627755][T18026] ? handle_softirqs+0x70f/0x840 [ 497.627780][T18026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.627799][T18026] do_syscall_64+0x174/0x580 [ 497.627818][T18026] ? clear_bhb_loop+0x40/0x90 [ 497.627839][T18026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.627856][T18026] RIP: 0033:0x7f4eac79ce59 [ 497.627874][T18026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.627888][T18026] RSP: 002b:00007f4ead66b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.627907][T18026] RAX: ffffffffffffffda RBX: 00007f4eaca15fa0 RCX: 00007f4eac79ce59 [ 497.627928][T18026] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 497.627939][T18026] RBP: 00007f4ead66b090 R08: 0000000000000000 R09: 0000000000000000 [ 497.627949][T18026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.627958][T18026] R13: 00007f4eaca16038 R14: 00007f4eaca15fa0 R15: 00007ffefb807d58 [ 497.627989][T18026] [ 498.091893][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3294'. [ 498.144982][T13730] net_ratelimit: 11 callbacks suppressed [ 498.145001][T13730] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 498.275013][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 498.371845][T13741] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 498.382191][T18057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3295'. [ 498.501452][T13734] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 498.645089][T13725] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 498.757271][T18070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3300'. [ 498.828870][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 498.941603][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 498.965776][T18085] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 499.196813][T18093] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3306'. [ 499.269638][T18097] FAULT_INJECTION: forcing a failure. [ 499.269638][T18097] name failslab, interval 1, probability 0, space 0, times 0 [ 499.304515][T13734] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 499.323119][T18097] CPU: 0 UID: 0 PID: 18097 Comm: syz.1.3305 Not tainted syzkaller #0 PREEMPT(full) [ 499.323144][T18097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.323154][T18097] Call Trace: [ 499.323161][T18097] [ 499.323169][T18097] dump_stack_lvl+0xe8/0x150 [ 499.323194][T18097] should_fail_ex+0x40c/0x560 [ 499.323218][T18097] should_failslab+0xa8/0x100 [ 499.323247][T18097] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 499.323271][T18097] ? __alloc_skb+0x189/0x7a0 [ 499.323293][T18097] ? __alloc_skb+0x1d7/0x7a0 [ 499.323313][T18097] ? __local_bh_enable_ip+0xd0/0x130 [ 499.323336][T18097] __alloc_skb+0x1d7/0x7a0 [ 499.323371][T18097] netlink_ack+0x136/0xb30 [ 499.323403][T18097] ? __kmalloc_cache_noprof+0x318/0x660 [ 499.323436][T18097] nfnetlink_rcv+0x260c/0x28c0 [ 499.323488][T18097] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 499.323524][T18097] ? ref_tracker_free+0x689/0x830 [ 499.323565][T18097] ? skb_clone+0x246/0x3a0 [ 499.323586][T18097] ? __netlink_deliver_tap+0x811/0x860 [ 499.323618][T18097] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.323641][T18097] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.323669][T18097] netlink_unicast+0x7bb/0x940 [ 499.323702][T18097] netlink_sendmsg+0x813/0xb40 [ 499.323735][T18097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.323763][T18097] ? aa_sock_msg_perm+0xf1/0x1b0 [ 499.323790][T18097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.323811][T18097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.323837][T18097] ____sys_sendmsg+0x9b9/0xa20 [ 499.323862][T18097] ? __might_fault+0xaf/0x130 [ 499.323891][T18097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.323924][T18097] ? import_iovec+0x73/0xa0 [ 499.323949][T18097] ___sys_sendmsg+0x2a5/0x360 [ 499.323973][T18097] ? __lock_acquire+0x683/0x2cd0 [ 499.323997][T18097] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.324056][T18097] ? __fget_files+0x2a/0x420 [ 499.324076][T18097] ? __fget_files+0x3a2/0x420 [ 499.324106][T18097] __x64_sys_sendmsg+0x1bd/0x2a0 [ 499.324134][T18097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.324169][T18097] ? __pfx_ksys_write+0x10/0x10 [ 499.324201][T18097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.324221][T18097] do_syscall_64+0x174/0x580 [ 499.324237][T18097] ? trace_irq_disable+0x3b/0x140 [ 499.324261][T18097] ? clear_bhb_loop+0x40/0x90 [ 499.324284][T18097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.324301][T18097] RIP: 0033:0x7f06f359ce59 [ 499.324318][T18097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.324332][T18097] RSP: 002b:00007f06f43a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.324351][T18097] RAX: ffffffffffffffda RBX: 00007f06f3815fa0 RCX: 00007f06f359ce59 [ 499.324370][T18097] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 499.324382][T18097] RBP: 00007f06f43a2090 R08: 0000000000000000 R09: 0000000000000000 [ 499.324393][T18097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.324403][T18097] R13: 00007f06f3816038 R14: 00007f06f3815fa0 R15: 00007ffce083d788 [ 499.324434][T18097] [ 499.841382][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 500.457509][T18115] sctp: [Deprecated]: syz.4.3312 (pid 18115) Use of int in max_burst socket option. [ 500.457509][T18115] Use struct sctp_assoc_value instead [ 502.553135][T18174] netlink: 'syz.5.3322': attribute type 12 has an invalid length. [ 502.671382][T18176] netlink: 'syz.0.3323': attribute type 1 has an invalid length. [ 502.752656][T18174] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.3322'. [ 503.040237][T18178] netlink: 'syz.5.3322': attribute type 1 has an invalid length. [ 503.152362][T18180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3324'. [ 503.315828][T18176] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 503.325588][T18174] 8021q: VLANs not supported on ipvlan1 [ 503.449294][T18178] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3322'. [ 503.574734][T13738] net_ratelimit: 16 callbacks suppressed [ 503.574752][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 503.718846][T18192] netlink: 'syz.0.3327': attribute type 1 has an invalid length. [ 503.773058][T18193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3326'. [ 503.794449][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 503.920889][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.081593][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.248630][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.396322][T18201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 504.463120][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.745448][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.919522][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 505.146513][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 505.262465][T18221] netlink: 'syz.1.3337': attribute type 83 has an invalid length. [ 505.352961][T18225] nbd: couldn't find device at index 1484664491 [ 506.044084][T18235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 506.057916][T18248] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3342'. [ 506.279708][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3342'. [ 506.469612][T18249] macvlan2: entered allmulticast mode [ 506.571161][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 506.674595][T18249] dummy0: entered allmulticast mode [ 506.731152][T18249] dummy0: entered promiscuous mode [ 506.875721][T18269] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3347'. [ 507.018586][T18274] netlink: 'syz.1.3348': attribute type 9 has an invalid length. [ 507.062437][T18276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3349'. [ 507.625555][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3351'. [ 508.642067][T18314] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3357'. [ 508.652637][T13732] net_ratelimit: 12 callbacks suppressed [ 508.652655][T13732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 508.840286][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3357'. [ 509.006772][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.026803][T18314] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 509.179962][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.343767][T13732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.514565][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.673707][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.832767][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3364'. [ 509.845576][T13703] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.868264][T18342] netlink: 'syz.4.3365': attribute type 11 has an invalid length. [ 509.928798][T18342] netlink: 'syz.4.3365': attribute type 4 has an invalid length. [ 510.167584][T13702] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.265381][T13702] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.458570][T13702] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.581961][T13702] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.463518][T18371] __nla_validate_parse: 2 callbacks suppressed [ 511.463535][T18371] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3371'. [ 511.619168][T13703] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 511.765297][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3372'. [ 511.801207][T13720] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 511.912222][T18379] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 512.107568][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 512.769428][T18403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3378'. [ 513.246896][T18414] netlink: 'syz.2.3383': attribute type 1 has an invalid length. [ 513.393809][T18414] bond1: entered promiscuous mode [ 513.412597][T18414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.549866][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 513.635237][T18414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3383'. [ 513.871691][T18419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.938357][T18419] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 514.033023][T18419] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 514.171085][T18419] bond1: (slave vti0): making interface the new active one [ 514.198792][T18419] vti0: entered promiscuous mode [ 514.221782][T18419] bond1: (slave vti0): Enslaving as an active interface with an up link [ 514.267676][T18418] macvlan0: entered promiscuous mode [ 519.205794][ C0] net_ratelimit: 5 callbacks suppressed [ 519.205815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.716953][T18426] : entered promiscuous mode [ 523.737151][T18414] ipvlan2: entered allmulticast mode [ 523.742522][T18414] syz_tun: entered allmulticast mode [ 523.896759][T18450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3391'. [ 523.909905][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 523.978921][T18450] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 524.087346][T18443] : entered promiscuous mode [ 524.249433][T13720] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 524.424184][T13720] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 524.587146][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3394'. [ 524.604156][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 524.638514][T18464] netlink: 'syz.4.3396': attribute type 6 has an invalid length. [ 525.086998][T18484] IPv6: Can't replace route, no match found [ 525.100074][T18484] IPv6: Can't replace route, no match found [ 535.576606][T18475] lo: entered promiscuous mode [ 535.595956][T18475] tunl0: entered promiscuous mode [ 535.659337][T18475] gre0: entered promiscuous mode [ 535.736671][T18475] gretap0: entered promiscuous mode [ 535.778235][T18475] erspan0: entered promiscuous mode [ 535.792994][T18489] xt_hashlimit: size too large, truncated to 1048576 [ 535.818378][T18475] ip_vti0: entered promiscuous mode [ 535.924005][T13720] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 536.103569][T13703] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 536.405815][T13703] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 536.432035][ C1] sched: DL replenish lagged too much [ 536.816379][T18508] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3407'. [ 537.092681][T18513] openvswitch: netlink: VLAN attribute unexpected. [ 537.141864][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3409'. [ 537.425800][T13703] nci: nci_rx_work: unknown MT 0x7 [ 540.333834][T18522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.723839][T15937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 551.741297][T15937] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 551.753121][T15937] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 551.770922][T15937] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 551.797229][T15937] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 553.110144][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 553.148627][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 553.158792][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 553.167083][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 553.180155][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 553.319532][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 553.337411][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 553.357989][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 553.369232][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 553.381608][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 553.640115][T15937] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 553.658009][T15937] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 553.674598][T15937] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 553.685434][T15937] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 553.697717][T15937] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 553.844852][ T50] Bluetooth: hci6: command tx timeout [ 554.147453][T18513] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.457716][T13703] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 554.633209][T13740] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 554.849176][T13740] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 555.084650][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 555.287428][T13732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 555.334533][ T50] Bluetooth: hci7: command tx timeout [ 555.444501][ T50] Bluetooth: hci8: command tx timeout [ 555.508381][T13740] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 555.582566][T18567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.784442][ T50] Bluetooth: hci9: command tx timeout [ 555.797942][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 555.944598][ T50] Bluetooth: hci6: command tx timeout [ 556.006737][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 556.174401][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 556.403954][T13722] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 557.384222][ T50] Bluetooth: hci7: command tx timeout [ 557.555534][ T50] Bluetooth: hci8: command tx timeout [ 557.895380][ T50] Bluetooth: hci9: command tx timeout [ 558.004959][ T50] Bluetooth: hci6: command tx timeout [ 559.443660][ T50] Bluetooth: hci7: command tx timeout [ 559.603742][ T50] Bluetooth: hci8: command tx timeout [ 559.924619][ T50] Bluetooth: hci9: command tx timeout [ 560.084213][ T50] Bluetooth: hci6: command tx timeout [ 561.524110][ T50] Bluetooth: hci7: command tx timeout [ 561.683873][ T50] Bluetooth: hci8: command tx timeout [ 562.003613][ T50] Bluetooth: hci9: command tx timeout [ 573.050359][T15937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.065259][T15937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.078586][T15937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.102527][T15937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.110833][T15937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 575.206207][ T50] Bluetooth: hci0: command tx timeout [ 577.285193][ T50] Bluetooth: hci0: command tx timeout [ 579.364043][ T50] Bluetooth: hci0: command tx timeout [ 581.443539][ T50] Bluetooth: hci0: command tx timeout [ 584.444260][T13740] net_ratelimit: 5 callbacks suppressed [ 584.444283][T13740] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 584.676464][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 593.447415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.749008][T15937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 612.764972][T15937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 612.775829][T15937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 612.784397][T15937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 612.804576][T15937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 614.063097][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 614.076627][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 614.096266][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 614.111813][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 614.124795][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 614.382594][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 614.398879][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 614.415855][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 614.430141][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 614.439108][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 614.557576][T15937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.586774][T15937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.605282][T15937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.618543][T15937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.628195][T15937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.895557][ T50] Bluetooth: hci1: command tx timeout [ 616.244855][ T50] Bluetooth: hci2: command tx timeout [ 616.484384][ T50] Bluetooth: hci4: command tx timeout [ 616.724202][ T50] Bluetooth: hci5: command tx timeout [ 616.964468][ T50] Bluetooth: hci1: command tx timeout [ 618.326442][ T50] Bluetooth: hci2: command tx timeout [ 618.563658][ T50] Bluetooth: hci4: command tx timeout [ 618.803605][ T50] Bluetooth: hci5: command tx timeout [ 619.050693][ T50] Bluetooth: hci1: command tx timeout [ 620.405408][ T50] Bluetooth: hci2: command tx timeout [ 620.644208][ T50] Bluetooth: hci4: command tx timeout [ 620.884101][ T50] Bluetooth: hci5: command tx timeout [ 621.124330][ T50] Bluetooth: hci1: command tx timeout [ 622.484425][ T50] Bluetooth: hci2: command tx timeout [ 622.723675][ T50] Bluetooth: hci4: command tx timeout [ 622.964371][ T50] Bluetooth: hci5: command tx timeout [ 633.222971][T15937] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 633.238379][T15937] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 633.252010][T15937] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 633.263045][T15937] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 633.275044][T15937] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 635.363686][T15937] Bluetooth: hci10: command tx timeout [ 637.445253][T15937] Bluetooth: hci10: command tx timeout [ 639.526052][T15937] Bluetooth: hci10: command tx timeout [ 641.606070][T15937] Bluetooth: hci10: command tx timeout [ 643.479530][T13720] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.557902][T18553] xfrm0 speed is unknown, defaulting to 1000 [ 643.758559][T13734] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 644.035607][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 644.132559][T18546] xfrm0 speed is unknown, defaulting to 1000 [ 644.156155][T18553] lo speed is unknown, defaulting to 1000 [ 644.295267][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 644.349113][T18536] xfrm0 speed is unknown, defaulting to 1000 [ 644.918953][T13720] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.987680][T18546] lo speed is unknown, defaulting to 1000 [ 645.024877][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 645.104173][T18536] lo speed is unknown, defaulting to 1000 [ 645.434316][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 645.882722][T13720] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.297312][T13722] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 646.715114][T13720] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.102798][T13703] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 650.368416][T18638] xfrm0 speed is unknown, defaulting to 1000 [ 651.223578][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 651.231405][T18609] xfrm0 speed is unknown, defaulting to 1000 [ 651.262988][T18638] lo speed is unknown, defaulting to 1000 [ 651.270827][T18623] xfrm0 speed is unknown, defaulting to 1000 [ 651.349969][T18609] lo speed is unknown, defaulting to 1000 [ 651.357036][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 651.379975][T18619] xfrm0 speed is unknown, defaulting to 1000 [ 651.463229][T18625] xfrm0 speed is unknown, defaulting to 1000 [ 651.470334][T18623] lo speed is unknown, defaulting to 1000 [ 651.591271][T18619] lo speed is unknown, defaulting to 1000 [ 651.710761][T18625] lo speed is unknown, defaulting to 1000 [ 651.973119][T13720] bridge_slave_1: left allmulticast mode [ 651.997575][T13720] bridge_slave_1: left promiscuous mode [ 652.021087][T13720] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.106958][T13720] bridge_slave_0: left allmulticast mode [ 652.140448][T13720] bridge_slave_0: left promiscuous mode [ 652.164070][T13720] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.459964][T13720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.488593][T13720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.532663][T13720] bond0 (unregistering): Released all slaves [ 653.589249][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 653.754165][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 654.063934][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 654.266251][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 655.286910][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 656.612602][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 657.000167][T18638] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.012152][T18638] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.019819][T18638] bridge_slave_0: entered allmulticast mode [ 657.027971][T18638] bridge_slave_0: entered promiscuous mode [ 657.117912][T18638] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.125381][T18638] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.132619][T18638] bridge_slave_1: entered allmulticast mode [ 657.140975][T18638] bridge_slave_1: entered promiscuous mode [ 657.206365][T18609] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.243611][T18609] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.262362][T18609] bridge_slave_0: entered allmulticast mode [ 657.295119][T18609] bridge_slave_0: entered promiscuous mode [ 657.572637][T18609] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.593114][T18609] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.616567][T18609] bridge_slave_1: entered allmulticast mode [ 657.641465][T18609] bridge_slave_1: entered promiscuous mode [ 657.766487][T18638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.796543][T18638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.083227][T18619] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.102567][T18619] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.122504][T18619] bridge_slave_0: entered allmulticast mode [ 658.138649][T18619] bridge_slave_0: entered promiscuous mode [ 658.156887][T18623] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.203589][T18623] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.220455][T18623] bridge_slave_0: entered allmulticast mode [ 658.246629][T18623] bridge_slave_0: entered promiscuous mode [ 658.262841][T18623] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.303945][T18623] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.311286][T18623] bridge_slave_1: entered allmulticast mode [ 658.335436][T18623] bridge_slave_1: entered promiscuous mode [ 658.348738][T18609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.380027][T18609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.461476][T18638] team0: Port device team_slave_0 added [ 658.478299][T18619] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.531676][T18619] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.552580][T18619] bridge_slave_1: entered allmulticast mode [ 658.566163][T18619] bridge_slave_1: entered promiscuous mode [ 658.617892][T18625] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.625491][T18625] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.632760][T18625] bridge_slave_0: entered allmulticast mode [ 658.641116][T18625] bridge_slave_0: entered promiscuous mode [ 658.651328][T18638] team0: Port device team_slave_1 added [ 658.665872][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 658.854924][T18625] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.862521][T18625] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.870175][T18625] bridge_slave_1: entered allmulticast mode [ 658.879361][T18625] bridge_slave_1: entered promiscuous mode [ 658.929536][T18623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.947960][T18609] team0: Port device team_slave_0 added [ 658.992473][T18638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.003033][T18638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.029358][T18638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.056901][T18619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.070459][T18619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.082966][T18623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.134233][T18609] team0: Port device team_slave_1 added [ 659.179949][T18638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.189002][T18638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.216220][T18638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.320752][T18625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.382211][T13719] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 659.405971][T18623] team0: Port device team_slave_0 added [ 659.426745][T18623] team0: Port device team_slave_1 added [ 659.505363][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 659.575994][T18625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.642896][T18619] team0: Port device team_slave_0 added [ 659.680396][T18619] team0: Port device team_slave_1 added [ 659.765604][T18609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.782278][T18609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.864921][T18609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.907427][T18609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.925252][T18609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.994581][T18609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.077444][T18638] hsr_slave_0: entered promiscuous mode [ 660.092963][T18638] hsr_slave_1: entered promiscuous mode [ 660.469208][T18625] team0: Port device team_slave_0 added [ 660.500515][T18625] team0: Port device team_slave_1 added [ 660.534472][T18619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.555886][T18619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.613477][T18619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.643694][T18619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.678944][T18619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.790038][T18619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.802142][T18623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.809604][T18623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.856247][T18623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.931394][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 660.956114][T18623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.963749][T18623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.990086][T18623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.126484][T18609] hsr_slave_0: entered promiscuous mode [ 661.144706][T18609] hsr_slave_1: entered promiscuous mode [ 661.151217][T18609] debugfs: 'hsr0' already exists in 'hsr' [ 661.172135][T18609] Cannot create hsr debugfs directory [ 661.214262][T18625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.221261][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.247580][T18625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.334852][T18625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.341919][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.408067][T18625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.454832][T18619] hsr_slave_0: entered promiscuous mode [ 661.462606][T18619] hsr_slave_1: entered promiscuous mode [ 661.469417][T18619] debugfs: 'hsr0' already exists in 'hsr' [ 661.475433][T18619] Cannot create hsr debugfs directory [ 661.619217][T18623] hsr_slave_0: entered promiscuous mode [ 661.634730][T18623] hsr_slave_1: entered promiscuous mode [ 661.642896][T18623] debugfs: 'hsr0' already exists in 'hsr' [ 661.649144][T18623] Cannot create hsr debugfs directory [ 661.877543][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 662.028748][T18625] hsr_slave_0: entered promiscuous mode [ 662.042192][T18625] hsr_slave_1: entered promiscuous mode [ 662.068513][T18625] debugfs: 'hsr0' already exists in 'hsr' [ 662.076844][T18625] Cannot create hsr debugfs directory [ 662.220161][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 662.487328][T13703] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 662.750269][T18638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.761647][T18638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 663.254427][T13703] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 673.383927][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 673.401106][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 673.409666][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 673.419611][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 673.427419][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 673.947062][T18638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.958339][T18638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 674.075284][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 674.189451][T10341] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 674.353961][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 674.463735][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 675.174731][T15937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 675.193774][T15937] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 675.208193][T15937] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 675.224038][T15937] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 675.231650][T15937] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 675.433816][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 675.448842][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 675.465401][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 675.480341][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 675.488315][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 675.563024][ T50] Bluetooth: hci0: command tx timeout [ 675.630579][T15937] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 675.647689][T15937] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 675.657327][T15937] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 675.680323][T15937] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 675.725053][T15937] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 676.610604][T18638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.622191][T18638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 676.685529][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 676.848277][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 677.030831][T13740] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 677.284692][T15937] Bluetooth: hci6: command tx timeout [ 677.555253][T15937] Bluetooth: hci7: command tx timeout [ 677.615008][T15937] Bluetooth: hci0: command tx timeout [ 677.774434][T15937] Bluetooth: hci8: command tx timeout [ 679.363651][T15937] Bluetooth: hci6: command tx timeout [ 679.604727][T15937] Bluetooth: hci7: command tx timeout [ 679.684153][T15937] Bluetooth: hci0: command tx timeout [ 679.843745][T15937] Bluetooth: hci8: command tx timeout [ 681.444103][T15937] Bluetooth: hci6: command tx timeout [ 681.687059][T15937] Bluetooth: hci7: command tx timeout [ 681.764076][T15937] Bluetooth: hci0: command tx timeout [ 681.925169][T15937] Bluetooth: hci8: command tx timeout [ 683.524198][T15937] Bluetooth: hci6: command tx timeout [ 683.764653][T15937] Bluetooth: hci7: command tx timeout [ 684.004223][T15937] Bluetooth: hci8: command tx timeout [ 693.808804][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 693.822740][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 693.838245][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 693.849833][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 693.861833][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 695.923683][T15937] Bluetooth: hci9: command tx timeout [ 698.003684][T15937] Bluetooth: hci9: command tx timeout [ 700.084004][T15937] Bluetooth: hci9: command tx timeout [ 702.163680][T15937] Bluetooth: hci9: command tx timeout [ 714.402086][T18638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.414011][T18638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 714.453696][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 714.722757][T18784] xfrm0 speed is unknown, defaulting to 1000 [ 714.743532][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 714.803942][T18784] lo speed is unknown, defaulting to 1000 [ 715.355388][T13719] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 715.923414][T13703] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 716.464331][T13710] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 716.904422][T13719] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 717.007208][T18812] xfrm0 speed is unknown, defaulting to 1000 [ 717.464433][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 717.993023][T18812] lo speed is unknown, defaulting to 1000 [ 718.000529][T18809] xfrm0 speed is unknown, defaulting to 1000 [ 718.438044][T18804] xfrm0 speed is unknown, defaulting to 1000 [ 733.832164][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 733.850396][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 733.864269][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 733.873251][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 733.887157][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.162353][T15937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 735.187241][T15937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 735.202958][T15937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 735.213407][T15937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 735.224669][T15937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 735.350550][T15937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 735.367515][T15937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 735.386530][T15937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 735.400762][T15937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 735.412630][T15937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 735.553090][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 735.567558][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 735.588293][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.597782][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 735.607627][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 735.967158][T15937] Bluetooth: hci1: command tx timeout [ 736.807232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.283714][T15937] Bluetooth: hci2: command tx timeout [ 737.523735][T15937] Bluetooth: hci4: command tx timeout [ 737.683729][T15937] Bluetooth: hci5: command tx timeout [ 738.004128][T15937] Bluetooth: hci1: command tx timeout [ 739.363919][ T50] Bluetooth: hci2: command tx timeout [ 739.603771][ T50] Bluetooth: hci4: command tx timeout [ 739.763875][ T50] Bluetooth: hci5: command tx timeout [ 740.083678][ T50] Bluetooth: hci1: command tx timeout [ 741.443646][ T50] Bluetooth: hci2: command tx timeout [ 741.683722][ T50] Bluetooth: hci4: command tx timeout [ 741.846665][ T50] Bluetooth: hci5: command tx timeout [ 742.165455][ T50] Bluetooth: hci1: command tx timeout [ 743.524241][ T50] Bluetooth: hci2: command tx timeout [ 743.764195][ T50] Bluetooth: hci4: command tx timeout [ 743.923655][ T50] Bluetooth: hci5: command tx timeout [ 754.397997][T15937] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 754.415637][T15937] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 754.429179][T15937] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 754.444239][T15937] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 754.455404][T15937] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 756.483687][ T50] Bluetooth: hci10: command tx timeout [ 758.564393][T15937] Bluetooth: hci10: command tx timeout [ 760.644065][ T50] Bluetooth: hci10: command tx timeout [ 762.723981][ T50] Bluetooth: hci10: command tx timeout [ 770.574305][T18809] lo speed is unknown, defaulting to 1000 [ 771.170849][T18847] xfrm0 speed is unknown, defaulting to 1000 [ 771.351108][T18804] lo speed is unknown, defaulting to 1000 [ 771.376397][T13734] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 772.119033][T18847] lo speed is unknown, defaulting to 1000 [ 772.125524][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 773.246524][T13719] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 794.764989][T15937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 794.779214][T15937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 794.789790][T15937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 794.808685][T15937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 794.823784][T15937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 796.236259][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 796.254829][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 796.264294][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 796.289410][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 796.299157][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 796.751209][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 796.769182][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 796.778184][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 796.804734][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 796.821542][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 796.884486][ T50] Bluetooth: hci0: command tx timeout [ 797.156121][T15937] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 797.170350][T15937] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 797.182086][T15937] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 797.195169][T15937] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 797.226258][T15937] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 798.233666][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 799.402456][T18918] xfrm0 speed is unknown, defaulting to 1000 [ 799.417607][T13740] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 799.703553][T13734] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 799.811707][T18918] lo speed is unknown, defaulting to 1000 [ 800.490042][ T50] Bluetooth: hci11: command tx timeout [ 800.499847][ T50] Bluetooth: hci12: command tx timeout [ 800.508479][ T50] Bluetooth: hci0: command tx timeout [ 800.515135][ T50] Bluetooth: hci13: command tx timeout [ 800.725515][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 801.445352][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 802.093325][T13742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 802.245241][T18978] xfrm0 speed is unknown, defaulting to 1000 [ 802.441926][T18978] lo speed is unknown, defaulting to 1000 [ 802.455219][ T50] Bluetooth: hci7: command tx timeout [ 802.470600][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 802.494431][ T50] Bluetooth: hci6: command tx timeout [ 802.570725][T18991] xfrm0 speed is unknown, defaulting to 1000 [ 802.604918][ T50] Bluetooth: hci0: command tx timeout [ 802.610366][ T50] Bluetooth: hci12: command tx timeout [ 802.617040][ T50] Bluetooth: hci11: command tx timeout [ 802.624199][T15937] Bluetooth: hci13: command tx timeout [ 802.631118][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 802.893931][T18986] xfrm0 speed is unknown, defaulting to 1000 [ 802.907377][T18991] lo speed is unknown, defaulting to 1000 [ 803.038803][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 803.054070][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 803.265430][T18986] lo speed is unknown, defaulting to 1000 [ 803.475677][T18996] lo speed is unknown, defaulting to 1000 [ 803.555393][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 803.768830][T13722] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 804.194887][T18918] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.210181][T18918] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.217825][T18918] bridge_slave_0: entered allmulticast mode [ 804.227564][T18918] bridge_slave_0: entered promiscuous mode [ 804.238869][T18918] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.246092][T18918] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.253349][T18918] bridge_slave_1: entered allmulticast mode [ 804.262058][T18918] bridge_slave_1: entered promiscuous mode [ 804.646317][T18918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.675166][ T50] Bluetooth: hci13: command tx timeout [ 804.680718][ T50] Bluetooth: hci11: command tx timeout [ 804.686621][T15937] Bluetooth: hci12: command tx timeout [ 804.693473][ T50] Bluetooth: hci0: command tx timeout [ 804.715524][T18918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.992559][T18918] team0: Port device team_slave_0 added [ 805.014762][T18918] team0: Port device team_slave_1 added [ 805.278929][T18918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.318670][T18918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.365573][T18918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.441419][T18918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.473754][T18918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.553810][T18918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.756000][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 805.829294][T18978] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.857017][T18978] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.872239][T18978] bridge_slave_0: entered allmulticast mode [ 805.890680][T18978] bridge_slave_0: entered promiscuous mode [ 805.900954][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.908619][T18978] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.916323][T18978] bridge_slave_1: entered allmulticast mode [ 805.927094][T18978] bridge_slave_1: entered promiscuous mode [ 805.958907][T18991] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.966523][T18991] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.974466][T18991] bridge_slave_0: entered allmulticast mode [ 805.983000][T18991] bridge_slave_0: entered promiscuous mode [ 806.059737][T18918] hsr_slave_0: entered promiscuous mode [ 806.066938][T18918] hsr_slave_1: entered promiscuous mode [ 806.074578][T18918] debugfs: 'hsr0' already exists in 'hsr' [ 806.081070][T18918] Cannot create hsr debugfs directory [ 806.112141][T18991] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.121405][T18991] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.129121][T18991] bridge_slave_1: entered allmulticast mode [ 806.138169][T18991] bridge_slave_1: entered promiscuous mode [ 806.171766][T18978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.185950][T18978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.300029][T18991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.421824][T18996] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.431128][T18996] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.438840][T18996] bridge_slave_0: entered allmulticast mode [ 806.447064][T18996] bridge_slave_0: entered promiscuous mode [ 806.482706][T18991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.568241][T18978] team0: Port device team_slave_0 added [ 806.593093][T18996] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.608868][T18996] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.617659][T18996] bridge_slave_1: entered allmulticast mode [ 806.625831][T18996] bridge_slave_1: entered promiscuous mode [ 806.669038][T18986] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.676440][T18986] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.701058][T18986] bridge_slave_0: entered allmulticast mode [ 806.715322][T18986] bridge_slave_0: entered promiscuous mode [ 806.735324][ T50] Bluetooth: hci12: command tx timeout [ 806.743236][T15937] Bluetooth: hci11: command tx timeout [ 806.749847][ T50] Bluetooth: hci13: command tx timeout [ 806.813852][T18978] team0: Port device team_slave_1 added [ 806.884044][T18986] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.892180][T18986] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.899879][T18986] bridge_slave_1: entered allmulticast mode [ 806.932952][T18986] bridge_slave_1: entered promiscuous mode [ 807.009979][T18996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.042364][T18991] team0: Port device team_slave_0 added [ 807.057731][T18991] team0: Port device team_slave_1 added [ 807.122162][T18996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.285919][T18986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.321203][T18978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.328775][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.355121][T18978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.396249][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 807.485875][T18986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.525050][T18978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.543472][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.590960][T18978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.622181][T18991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.637384][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.713245][T18991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.821041][T18996] team0: Port device team_slave_0 added [ 807.828817][T18991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.837331][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.870902][T18991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.943179][T18996] team0: Port device team_slave_1 added [ 807.970750][T18986] team0: Port device team_slave_0 added [ 808.092472][T18986] team0: Port device team_slave_1 added [ 808.310588][T18978] hsr_slave_0: entered promiscuous mode [ 808.317371][T18978] hsr_slave_1: entered promiscuous mode [ 808.324366][T18978] debugfs: 'hsr0' already exists in 'hsr' [ 808.330142][T18978] Cannot create hsr debugfs directory [ 808.341038][T18996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.364036][T18996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.418278][T18996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.492706][T18986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.509001][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.541911][T18986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.557119][T18996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.564129][T18996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.590484][T18996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.637773][T18991] hsr_slave_0: entered promiscuous mode [ 808.645302][T18991] hsr_slave_1: entered promiscuous mode [ 808.651830][T18991] debugfs: 'hsr0' already exists in 'hsr' [ 808.658089][T18991] Cannot create hsr debugfs directory [ 808.666010][T18986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.683342][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.709611][T18986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.054940][T13702] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 809.122841][T18986] hsr_slave_0: entered promiscuous mode [ 809.129772][T18986] hsr_slave_1: entered promiscuous mode [ 809.136702][T18986] debugfs: 'hsr0' already exists in 'hsr' [ 809.142467][T18986] Cannot create hsr debugfs directory [ 809.221893][T18996] hsr_slave_0: entered promiscuous mode [ 809.229786][T18996] hsr_slave_1: entered promiscuous mode [ 809.241865][T18996] debugfs: 'hsr0' already exists in 'hsr' [ 809.247894][T18996] Cannot create hsr debugfs directory [ 809.495790][T18918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 809.533952][T18918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.646580][T18918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 809.708131][T18918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.721577][T18918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 809.756205][T18918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 809.785549][ T31] INFO: task kworker/0:3:5725 blocked for more than 143 seconds. [ 809.793470][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 809.806536][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 809.849739][ T31] task:kworker/0:3 state:D stack:24040 pid:5725 tgid:5725 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 809.931837][ T31] Workqueue: 0x0 (wg-crypt-wg2) [ 810.014986][ T31] Call Trace: [ 810.070151][ T31] [ 810.077786][T13738] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 810.114795][ T31] __schedule+0x1840/0x57a0 [ 810.149721][ T31] ? __lock_acquire+0x683/0x2cd0 [ 810.165464][T18918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 810.198669][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 810.218326][ T31] ? __pfx___schedule+0x10/0x10 [ 810.240129][ T31] ? schedule+0x90/0x360 [ 810.250966][ T31] schedule+0x164/0x360 [ 810.255462][ T31] schedule_preempt_disabled+0x13/0x30 [ 810.260967][ T31] __mutex_lock+0x7c5/0x1590 [ 810.265959][ T31] ? __mutex_lock+0x5c5/0x1590 [ 810.271287][ T31] ? worker_attach_to_pool+0x31/0x390 [ 810.287977][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 810.306778][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 810.313217][ T31] worker_attach_to_pool+0x31/0x390 [ 810.318861][ T31] ? kthread_bind_mask+0x134/0x1b0 [ 810.324324][ T31] create_worker+0x543/0x7b0 [ 810.328976][ T31] ? __pfx_create_worker+0x10/0x10 [ 810.334497][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 810.340391][ T31] worker_thread+0x4c9/0xfb0 [ 810.348930][ T31] kthread+0x389/0x470 [ 810.354092][ T31] ? __pfx_worker_thread+0x10/0x10 [ 810.359245][ T31] ? __pfx_kthread+0x10/0x10 [ 810.364203][ T31] ret_from_fork+0x514/0xb70 [ 810.368837][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 810.374299][ T31] ? __switch_to+0xc89/0x1420 [ 810.379021][ T31] ? __pfx_kthread+0x10/0x10 [ 810.384379][ T31] ret_from_fork_asm+0x1a/0x30 [ 810.389200][ T31] [ 810.402645][ T31] INFO: task kworker/u8:30:13720 blocked for more than 143 seconds. [ 810.417818][T18918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 810.427907][ T31] Not tainted syzkaller #0 [ 810.443710][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.480087][ T31] task:kworker/u8:30 state:D stack:23368 pid:13720 tgid:13720 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 810.504729][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 810.604056][ T31] Workqueue: netns cleanup_net [ 810.643567][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 810.661816][ T31] Call Trace: [ 810.691111][ T31] [ 810.708165][ T31] __schedule+0x1840/0x57a0 [ 810.743501][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 810.766966][ T31] ? look_up_lock_class+0x57/0x110 [ 810.781477][ T31] ? register_lock_class+0x31/0x2e0 [ 810.802765][ T31] ? __pfx___schedule+0x10/0x10 [ 810.819207][ T31] ? schedule+0x90/0x360 [ 810.830080][ T31] schedule+0x164/0x360 [ 810.850948][ T31] schedule_timeout+0xc0/0x2c0 [ 810.862272][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 810.873468][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 810.883699][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 810.903731][ T31] ? wait_for_completion+0x272/0x5e0 [ 810.916484][ T31] wait_for_completion+0x2ca/0x5e0 [ 810.927524][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 810.939722][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 810.960975][ T31] ? try_to_wake_up+0x7c5/0x1330 [ 810.972327][ T31] ? __pfx_bond_destructor+0x10/0x10 [ 810.984408][ T31] kthread_stop+0x183/0x5b0 [ 810.994124][ T31] destroy_workqueue+0x107/0xc60 [ 811.014601][T13710] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 811.024703][ T31] ? __pfx_bond_destructor+0x10/0x10 [ 811.046259][ T31] bond_destructor+0x4d/0x80 [ 811.076770][ T31] netdev_run_todo+0xc21/0xde0 [ 811.090816][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 811.103471][ T31] ? net_generic+0x1e/0x240 [ 811.113028][ T31] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 811.120018][T13745] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 811.133464][ T31] ? mutex_is_locked+0x17/0x50 [ 811.143473][ T31] ? nexthop_net_exit_rtnl+0x21f/0x260 [ 811.152108][ T31] ops_undo_list+0x396/0x8d0 [ 811.156983][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 811.162138][ T31] ? idr_destroy+0x218/0x290 [ 811.171104][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 811.183601][ T31] cleanup_net+0x572/0x810 [ 811.188084][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 811.193941][ T31] ? rcu_is_watching+0x15/0xb0 [ 811.198758][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 811.204845][ T31] process_scheduled_works+0xa8e/0x14e0 [ 811.210453][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 811.216861][ T31] ? assign_work+0x3cf/0x5d0 [ 811.221501][ T31] worker_thread+0xa47/0xfb0 [ 811.233738][T13710] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 811.241475][ T31] kthread+0x389/0x470 [ 811.251928][ T31] ? __pfx_worker_thread+0x10/0x10 [ 811.257301][ T31] ? __pfx_kthread+0x10/0x10 [ 811.261930][ T31] ret_from_fork+0x514/0xb70 [ 811.267227][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 811.273265][ T31] ? __switch_to+0xc89/0x1420 [ 811.293473][ T31] ? __pfx_kthread+0x10/0x10 [ 811.303672][ T31] ret_from_fork_asm+0x1a/0x30 [ 811.310956][ T31] [ 811.316065][ T31] INFO: task kworker/R-bond0:17341 blocked for more than 144 seconds. [ 811.357380][T13710] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 811.410303][ T31] Not tainted syzkaller #0 [ 811.442685][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 811.519524][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 811.545812][ T31] [ 811.545812][ T31] Showing all locks held in the system: [ 811.628268][T13720] : left promiscuous mode [ 811.646968][ T31] 1 lock held by kworker/R-mm_pe/14: [ 811.699414][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 811.811591][ T31] 1 lock held by kworker/R-inet_/27: [ 811.878429][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 811.984067][ T31] 1 lock held by khungtaskd/31: [ 812.021589][ T31] #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 812.092476][ T31] 2 locks held by kworker/1:2/808: [ 812.136957][ T31] 3 locks held by kworker/0:2/995: [ 812.182738][ T31] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 812.303786][ T31] #1: ffffc900052c7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 812.451056][ T31] #2: ffffffff90129360 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 812.549157][ T31] 1 lock held by kworker/R-krxrp/3216: [ 812.614667][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 812.703686][ T31] 1 lock held by kworker/u9:1/4950: [ 812.760880][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 812.869228][ T31] 3 locks held by kworker/1:3/5366: [ 812.919398][ T31] 2 locks held by getty/5388: [ 812.959746][ T31] #0: ffff8880365520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 813.058731][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380 [ 813.100912][ T31] 4 locks held by kworker/0:10/6167: [ 813.106509][ T31] #0: ffff888056e33d40 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.120485][ T31] #1: ffffc90004dbfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.157788][ T31] #2: ffff8880539553c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 813.176621][ T31] #3: ffff88807b613ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 813.198130][ T31] 3 locks held by kworker/1:16/8304: [ 813.213682][ T31] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.227411][ T31] #1: ffffc90003c9fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.256331][ T31] #2: ffffffff90129360 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 813.267302][ T31] 6 locks held by kworker/u8:30/13720: [ 813.272804][ T31] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.297590][ T31] #1: ffffc9000699fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.309091][ T31] #2: ffffffff8fdb19a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 813.318766][ T31] #3: ffffffff90129360 (ovs_mutex){+.+.}-{4:4}, at: ovs_exit_net+0xe4/0x7a0 [ 813.328722][ T31] #4: ffffffff8fdc0680 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_destroy+0xf0/0x170 [ 813.338626][ T31] #5: ffffffff8e962aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 813.350906][ T31] 4 locks held by kworker/u8:43/13742: [ 813.356650][ T31] #0: ffff88807cb76940 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.368638][ T31] #1: ffffc900055a7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.382345][ T31] #2: ffff8880539553c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 813.419031][ T31] #3: ffff88807b613ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 813.433843][ T31] 3 locks held by kworker/u8:45/13744: [ 813.439375][ T31] #0: ffff888031e9d140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.451443][ T31] #1: ffffc90005577c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.473903][ T31] #2: ffffffff8fdc0680 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 813.487539][ T31] 1 lock held by kworker/R-wg-cr/16057: [ 813.493151][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbda/0x10b0 [ 813.505031][ T31] 1 lock held by kworker/R-wg-cr/16493: [ 813.510625][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbda/0x10b0 [ 813.530311][ T31] 1 lock held by kworker/R-wg-cr/16508: [ 813.536157][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbda/0x10b0 [ 813.547068][ T31] 1 lock held by kworker/R-wg-cr/16510: [ 813.552653][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbda/0x10b0 [ 813.563183][ T31] 3 locks held by kworker/1:0/16764: [ 813.573457][ T31] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.584749][ T31] #1: ffffc90004effc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.598833][ T31] #2: ffffffff90129360 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 813.611880][ T31] 3 locks held by kworker/0:4/16996: [ 813.625988][ T31] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.638070][ T31] #1: ffffc9000208fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.652687][ T31] #2: ffffffff90129360 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 813.662625][ T31] 1 lock held by kworker/1:1/17256: [ 813.669093][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 813.679901][ T31] 3 locks held by kworker/1:4/17257: [ 813.685412][ T31] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.697428][ T31] #1: ffffc90005727c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.711508][ T31] #2: ffffffff90129360 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 813.744817][ T31] 1 lock held by kworker/R-wg-cr/17366: [ 813.751005][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbda/0x10b0 [ 813.761565][ T31] 1 lock held by kworker/R-wg-cr/17369: [ 813.767378][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 813.778220][ T31] 1 lock held by kworker/R-wg-cr/17438: [ 813.799327][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 813.822650][ T31] 1 lock held by kworker/R-wg-cr/17445: [ 813.828484][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbda/0x10b0 [ 813.848716][ T31] 1 lock held by kworker/R-wg-cr/17447: [ 813.855875][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbda/0x10b0 [ 813.869155][ T31] 3 locks held by kworker/1:5/17764: [ 813.874751][ T31] 3 locks held by kworker/1:6/18629: [ 813.880070][ T31] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.908102][ T31] #1: ffffc9000516fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.926754][ T31] #2: ffffffff90129360 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 813.939399][ T31] 3 locks held by kworker/0:5/18686: [ 813.944947][ T31] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.962792][ T31] #1: ffffc9000507fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 813.982537][ T31] #2: ffffffff90129360 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 813.992435][ T31] 1 lock held by kworker/R-bond0/18883: [ 813.998211][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0x10b0 [ 814.008590][ T31] 1 lock held by syz-executor/18918: [ 814.038694][ T31] #0: ffff8880af7d0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 814.050920][ T31] 1 lock held by syz-executor/18978: [ 814.073737][ T31] #0: ffff8880af3b0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 814.096584][ T31] 1 lock held by syz-executor/18986: [ 814.104460][ T31] #0: ffff8880887d4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 814.137692][ T31] 1 lock held by syz-executor/18991: [ 814.153465][ T31] #0: ffff8880678e8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 814.165521][ T31] 1 lock held by syz-executor/18996: [ 814.170838][ T31] #0: ffff88807909cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 814.204629][ T31] 1 lock held by kworker/R-bond0/19025: [ 814.215102][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0x10b0 [ 814.231029][ T31] 1 lock held by kworker/R-wg-cr/19029: [ 814.239677][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0x10b0 [ 814.250837][ T31] 1 lock held by kworker/R-wg-cr/19031: [ 814.256661][ T31] #0: ffffffff8e7fab60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0x10b0 [ 814.267242][ T31] [ 814.269597][ T31] ============================================= [ 814.269597][ T31] [ 814.302387][ T31] NMI backtrace for cpu 0 [ 814.302499][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 814.302534][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 814.302554][ T31] Call Trace: [ 814.302564][ T31] [ 814.302579][ T31] dump_stack_lvl+0xe8/0x150 [ 814.302623][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 814.302656][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 814.302687][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 814.302711][ T31] sys_info+0x135/0x170 [ 814.302729][ T31] watchdog+0xfd7/0x1030 [ 814.302759][ T31] ? watchdog+0x1c7/0x1030 [ 814.302787][ T31] kthread+0x389/0x470 [ 814.302810][ T31] ? __pfx_watchdog+0x10/0x10 [ 814.302829][ T31] ? __pfx_kthread+0x10/0x10 [ 814.302852][ T31] ret_from_fork+0x514/0xb70 [ 814.302872][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 814.302890][ T31] ? __switch_to+0xc89/0x1420 [ 814.302916][ T31] ? __pfx_kthread+0x10/0x10 [ 814.302939][ T31] ret_from_fork_asm+0x1a/0x30 [ 814.302974][ T31] [ 814.302983][ T31] Sending NMI from CPU 0 to CPUs 1: [ 814.415979][ C1] NMI backtrace for cpu 1 [ 814.415995][ C1] CPU: 1 UID: 0 PID: 5366 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 814.416012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 814.416023][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 814.416048][ C1] RIP: 0010:__lock_acquire+0x44b/0x2cd0 [ 814.416066][ C1] Code: 10 45 8b a6 88 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 0f 4c e9 41 ff c5 41 8d 5c 24 01 49 ff cc 89 d9 83 c1 fe <78> 40 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 [ 814.416079][ C1] RSP: 0018:ffffc90000a07f58 EFLAGS: 00000017 [ 814.416091][ C1] RAX: 0000000000022007 RBX: 0000000000000008 RCX: 0000000000000006 [ 814.416102][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000 [ 814.416111][ C1] RBP: ffff888027832ba8 R08: ffffffff81769f7f R09: 0000000000000000 [ 814.416121][ C1] R10: 0000000000000000 R11: ffffffff8e95c780 R12: 0000000000000006 [ 814.416131][ C1] R13: 0000000000000000 R14: ffff888027831f00 R15: ffff888027832a90 [ 814.416142][ C1] FS: 0000000000000000(0000) GS:ffff8881253b9000(0000) knlGS:0000000000000000 [ 814.416154][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 814.416171][ C1] CR2: 00007f4ead628ff8 CR3: 000000007e264000 CR4: 00000000003526f0 [ 814.416185][ C1] Call Trace: [ 814.416191][ C1] [ 814.416200][ C1] ? __lock_acquire+0x683/0x2cd0 [ 814.416216][ C1] ? __update_page_owner_handle+0x5a/0x570 [ 814.416237][ C1] ? __update_page_owner_handle+0x51a/0x570 [ 814.416257][ C1] ? unwind_next_frame+0x8f/0x2550 [ 814.416306][ C1] ? lock_acquire+0x106/0x350 [ 814.416323][ C1] ? unwind_next_frame+0x8f/0x2550 [ 814.416338][ C1] lock_acquire+0x106/0x350 [ 814.416352][ C1] ? unwind_next_frame+0x8f/0x2550 [ 814.416372][ C1] ? unwind_next_frame+0x8f/0x2550 [ 814.416388][ C1] ? kmem_cache_alloc_noprof+0x2b8/0x650 [ 814.416406][ C1] ? unwind_next_frame+0x8f/0x2550 [ 814.416423][ C1] unwind_next_frame+0xac/0x2550 [ 814.416439][ C1] ? unwind_next_frame+0x8f/0x2550 [ 814.416457][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 814.416476][ C1] ? unwind_next_frame+0x8f/0x2550 [ 814.416493][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 814.416514][ C1] arch_stack_walk+0x11b/0x150 [ 814.416533][ C1] ? kmem_cache_alloc_noprof+0x2b8/0x650 [ 814.416552][ C1] ? skb_clone+0x212/0x3a0 [ 814.416566][ C1] stack_trace_save+0xa9/0x100 [ 814.416586][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 814.416607][ C1] ? __lock_acquire+0x683/0x2cd0 [ 814.416623][ C1] kasan_save_track+0x3e/0x80 [ 814.416641][ C1] ? kasan_save_track+0x3e/0x80 [ 814.416657][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 814.416676][ C1] ? kmem_cache_alloc_noprof+0x2b8/0x650 [ 814.416714][ C1] __kasan_slab_alloc+0x6c/0x80 [ 814.416734][ C1] kmem_cache_alloc_noprof+0x2b8/0x650 [ 814.416752][ C1] ? skb_clone+0x212/0x3a0 [ 814.416764][ C1] ? kmem_cache_alloc_noprof+0x156/0x650 [ 814.416785][ C1] skb_clone+0x212/0x3a0 [ 814.416797][ C1] ? vxcan_xmit+0x1d3/0x780 [ 814.416816][ C1] vxcan_xmit+0x1e0/0x780 [ 814.416832][ C1] ? vxcan_xmit+0x49/0x780 [ 814.416849][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 814.416869][ C1] __dev_queue_xmit+0x1435/0x37f0 [ 814.416886][ C1] ? skb_ext_add+0x1b6/0x8e0 [ 814.416906][ C1] ? kasan_save_track+0x3e/0x80 [ 814.416923][ C1] ? skb_ext_add+0x1b6/0x8e0 [ 814.416941][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 814.416955][ C1] ? can_rcv_filter+0x126/0x7a0 [ 814.416972][ C1] ? can_receive+0x2c6/0x440 [ 814.416990][ C1] ? process_backlog+0xbf0/0x1860 [ 814.417007][ C1] ? __napi_poll+0xaa/0x330 [ 814.417022][ C1] ? net_rx_action+0x61d/0xf50 [ 814.417038][ C1] ? handle_softirqs+0x225/0x840 [ 814.417052][ C1] ? do_softirq+0x76/0xd0 [ 814.417065][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 814.417078][ C1] ? wg_packet_handshake_receive_worker+0x1012/0x10c0 [ 814.417095][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 814.417108][ C1] ? worker_thread+0xa47/0xfb0 [ 814.417123][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 814.417150][ C1] ? rcu_is_watching+0x15/0xb0 [ 814.417168][ C1] can_send+0x941/0xd30 [ 814.417188][ C1] ? __pfx_can_send+0x10/0x10 [ 814.417205][ C1] ? skb_ext_add+0x3b3/0x8e0 [ 814.417224][ C1] ? skb_clone+0x246/0x3a0 [ 814.417237][ C1] ? can_can_gw_rcv+0x48f/0xfd0 [ 814.417252][ C1] can_can_gw_rcv+0xd09/0xfd0 [ 814.417277][ C1] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 814.417291][ C1] can_rcv_filter+0x126/0x7a0 [ 814.417309][ C1] ? can_receive+0x16c/0x440 [ 814.417327][ C1] can_receive+0x2c6/0x440 [ 814.417346][ C1] canfd_rcv+0x1f9/0x330 [ 814.417362][ C1] ? __pfx_canfd_rcv+0x10/0x10 [ 814.417380][ C1] process_backlog+0xbf0/0x1860 [ 814.417399][ C1] ? process_backlog+0x3c3/0x1860 [ 814.417422][ C1] __napi_poll+0xaa/0x330 [ 814.417439][ C1] net_rx_action+0x61d/0xf50 [ 814.417463][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 814.417493][ C1] handle_softirqs+0x225/0x840 [ 814.417508][ C1] ? do_softirq+0x76/0xd0 [ 814.417523][ C1] ? wg_packet_handshake_receive_worker+0x1012/0x10c0 [ 814.417541][ C1] do_softirq+0x76/0xd0 [ 814.417554][ C1] [ 814.417559][ C1] [ 814.417565][ C1] __local_bh_enable_ip+0xf8/0x130 [ 814.417579][ C1] wg_packet_handshake_receive_worker+0x1012/0x10c0 [ 814.417596][ C1] ? __lock_acquire+0x683/0x2cd0 [ 814.417610][ C1] ? look_up_lock_class+0x57/0x110 [ 814.417638][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 814.417654][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 814.417673][ C1] ? lock_acquire+0x106/0x350 [ 814.417692][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 814.417713][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 814.417728][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 814.417744][ C1] ? rcu_is_watching+0x15/0xb0 [ 814.417762][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 814.417775][ C1] process_scheduled_works+0xa8e/0x14e0 [ 814.417801][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 814.417826][ C1] ? assign_work+0x3cf/0x5d0 [ 814.417849][ C1] worker_thread+0xa47/0xfb0 [ 814.417869][ C1] ? __kthread_parkme+0x71/0x1f0 [ 814.417889][ C1] kthread+0x389/0x470 [ 814.417906][ C1] ? __pfx_worker_thread+0x10/0x10 [ 814.417920][ C1] ? __pfx_kthread+0x10/0x10 [ 814.417937][ C1] ret_from_fork+0x514/0xb70 [ 814.417953][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 814.417967][ C1] ? __switch_to+0xc89/0x1420 [ 814.417988][ C1] ? __pfx_kthread+0x10/0x10 [ 814.418005][ C1] ret_from_fork_asm+0x1a/0x30 [ 814.418029][ C1] [ 815.285239][T13744] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 815.364089][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 815.371004][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 815.380128][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 815.390190][ T31] Call Trace: [ 815.393478][ T31] [ 815.396432][ T31] vpanic+0x56c/0xa60 [ 815.400428][ T31] ? __pfx___schedule+0x10/0x10 [ 815.405307][ T31] ? __pfx_vpanic+0x10/0x10 [ 815.409835][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 815.416012][ T31] panic+0xc5/0xd0 [ 815.419741][ T31] ? __pfx_panic+0x10/0x10 [ 815.424160][ T31] ? preempt_schedule_common+0x82/0xd0 [ 815.429627][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 815.435015][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 815.441179][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 815.447353][ T31] watchdog+0x1030/0x1030 [ 815.451708][ T31] ? watchdog+0x1c7/0x1030 [ 815.456145][ T31] kthread+0x389/0x470 [ 815.460228][ T31] ? __pfx_watchdog+0x10/0x10 [ 815.464911][ T31] ? __pfx_kthread+0x10/0x10 [ 815.469516][ T31] ret_from_fork+0x514/0xb70 [ 815.474121][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 815.479235][ T31] ? __switch_to+0xc89/0x1420 [ 815.483929][ T31] ? __pfx_kthread+0x10/0x10 [ 815.488538][ T31] ret_from_fork_asm+0x1a/0x30 [ 815.493322][ T31] [ 815.499806][ T31] Kernel Offset: disabled [ 815.504126][ T31] Rebooting in 86400 seconds..