last executing test programs: 2m44.020444934s ago: executing program 1 (id=1867): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x4b, 0x3, {{0xf, 0x4, 0x2, 0x16, 0x3c, 0x65, 0x0, 0xa, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0xb0, 0x3, 0xc, [{@empty}]}, @lsrr={0x83, 0x17, 0x8e, [@rand_addr=0x64010100, @private=0xa010102, @private=0x3, @broadcast, @multicast1]}, @noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80000001}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x800}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r4}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r4, r3, 0x25, 0x0, @void}, 0x10) 2m43.91235363s ago: executing program 1 (id=1869): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x3c, 0x1}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x24, 0x2d, 0x107, 0x70bd25, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 2m43.786461097s ago: executing program 1 (id=1871): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)='o', 0x1}], 0x1}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 2m42.843918933s ago: executing program 1 (id=1880): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4c, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x1, 0x70bd25, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x20}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m42.259051113s ago: executing program 1 (id=1885): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x4000080) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r8, 0x0, 0x0, 0x200dc009, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c) sendto$inet6(r8, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000380)="bd5e35da6b", 0x5, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240)=']@@\x00', 0x8000, &(0x7f0000000280)={@_ha_fsid={[0x4, 0x5]}, {0x7, 0x7ff, 0x1, 0x8000000000000000}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x3}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk, @call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x1c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2a, '\x00', r4, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r11], 0x0, 0x10, 0x3}, 0x94) 2m41.612933369s ago: executing program 1 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f00000000c0)={{0x3a, @multicast2, 0x4e23, 0x0, 'dh\x00', 0x16, 0x1, 0x1b}, {@remote, 0x4e21, 0x4, 0x6dd, 0x5, 0x7}}, 0x44) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) 2m38.632589022s ago: executing program 4 (id=1931): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e6", 0x1}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}], 0x20, 0x4000000}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0xfffffd8e, 0x0}, 0x2002) 2m38.465534334s ago: executing program 4 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a40)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 2m38.292406926s ago: executing program 4 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) unshare(0x20000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x44241, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) accept(r0, &(0x7f0000000400)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000500)=0x80) (rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0x104, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x3, 0x0, 0x4}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x3c}, 0xf30fd7563b6c5571, @in=@multicast2, 0x0, 0x1, 0x2, 0x0, 0x10000}]}]}, 0x1bc}}, 0x80c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r5}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r7}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) close(0x3) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x91) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xa, 0xb, &(0x7f00000006c0)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @generic={0x52, 0x1, 0x4, 0x7c8, 0x3}, @generic={0x7, 0x6, 0x3, 0x4, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000740)='syzkaller\x00', 0x6, 0xa3, &(0x7f0000000780)=""/163, 0x41000, 0x1, '\x00', r7, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0x9, 0xcb924f9, 0x7ff}, 0x10, 0x0, r5, 0x8, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r9, r10], &(0x7f0000000e40)=[{0x5, 0x5, 0xe}, {0x4, 0x2, 0x10, 0x5}, {0x3, 0x2, 0x2, 0xb}, {0x5, 0x5, 0xc, 0x1}, {0x0, 0x3, 0xa, 0x2}, {0x3, 0x1, 0x7, 0x7}, {0x0, 0x3, 0xf, 0xb}, {0x1, 0x2, 0x7, 0xc}], 0x10, 0xfffffff8}, 0x94) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="0000600667b21358006411ff2001000000000000000000000000000000000000000000000000000000008a008902000000000000c910000000000000000000000000000000010000000000004e244e21004490785c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a"], 0x90) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x25dfdbf9, {0x0, 0x0, 0x74, r11, {0x1, 0xfff1}, {0xafabc05531515610, 0xc}, {0xa, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x5c004}, 0x24048004) 2m38.095918676s ago: executing program 4 (id=1937): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61128b00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d60800000000000000c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f995a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bec62bcb2bc91ddcdfac2e6d442105ee6c0742b5e9584543b72f762d21c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe10, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="1800000026001b061dbd7002fbdbfd250800000004006300"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYRES64=r9, @ANYRES16=r0, @ANYBLOB="8042000000000000140003006272696467655f736c6176655f31"], 0x3c}}, 0x0) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r10, 0x29, 0x1d, &(0x7f0000002e80)={@private0}, 0x14) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3000000000000000290000000400000084020000ff0000000402000304"], 0x30}, 0x0) 2m38.017042803s ago: executing program 4 (id=1939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) close(0x3) 2m37.964133541s ago: executing program 4 (id=1940): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) (fail_nth: 7) 2m26.542311623s ago: executing program 32 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f00000000c0)={{0x3a, @multicast2, 0x4e23, 0x0, 'dh\x00', 0x16, 0x1, 0x1b}, {@remote, 0x4e21, 0x4, 0x6dd, 0x5, 0x7}}, 0x44) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) 2m22.822834816s ago: executing program 33 (id=1940): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) (fail_nth: 7) 2m11.580574902s ago: executing program 3 (id=2169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x8, r3}, 0x38) r4 = socket$kcm(0x18, 0x8, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x80047437, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2m11.376882902s ago: executing program 3 (id=2171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000084) 2m11.174626345s ago: executing program 3 (id=2175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1d, 0x0, 0x3c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x5, @private1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000003a020201"], 0x28}, 0x922bac8576bda5ce) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="985c4f1c6543224b1d5dd266a8c4d92fce7c75a1ce395299b0ad537bb8067838262b0881754c6751bed4a87c15587f2cfa5c2a76aae8c555ee3c3bc9606fd8dbcecd093e5a833e3524b21e76755fe279015c1bddac24c6f0e50f49e274bf565862029929a69c", 0x66, 0x4c000, &(0x7f0000000240)={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m8.123625765s ago: executing program 3 (id=2185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m7.983249217s ago: executing program 3 (id=2187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c00060001"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) 2m7.797813454s ago: executing program 3 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x3a6851ce86d8184c) 1m52.745999747s ago: executing program 34 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x3a6851ce86d8184c) 5.365435596s ago: executing program 5 (id=3250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x729, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0xc00c044}, 0x40000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x228, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xfc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xf8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000891}, 0x20044004) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4534}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x840) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7ff, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000811) bind$netlink(r3, &(0x7f00000009c0)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0xb29b6c5d6d2351cf}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x17, 0xa, 0x46573aa53e4e1f45, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x68400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000b40)={'pimreg\x00', 0x2}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xa4, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3d6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb72}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5f5d}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbed2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x72}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040000}, 0x48080) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d00), r0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000d40)) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000001b00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000dc0)={0xcf0, 0xd, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x960, 0x3, 0x0, 0x1, [{0x418, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "ae1e2bb68dfe4b"}, @NFTA_DATA_VALUE={0xb3, 0x1, "a635cca9bc024ab9601e9cc832978ca83cf45d4bc6d0105cc845fc290f55d826fb455f2b53797ef1f6804b7f3215205b489efb1cd1152f398d5ef6a5c25dc5d5f68f6dc01960ee5af5ffa5ad6edeebb3b0bfc7f1cfceeaeca65d204c71510551011b961c65b7e7b1e881d7db0f9de5d47ddf20aae1e820013abe60f19d276631139feab9ef25822e4bce27e3775cd77e76607c5a1806ed39c7b66145c54f4b2409e742a6b1390aed61bb8089deac93"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "bdc45b63d378f53de0e1b71387e0b55f17949f77b1ea22c60e565e003d547bff2c2dbca236b07d63fe242c05d1e60480e132ce70198884bad4981c36dcae82e6261d537db0b55bfc6a39b4cfa0957ebc2c544c857d31be3836c1c87db161dd476438ac23e0807da9a24ee7c1492c1a207a92cfaf41c27e"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x98, 0x1, "ba6623a8455bc67747f339ca957bae56b9b123ca3fc475487255af7a91fcd80f79f2d14b9dd13224ff5549c112424a492597d6e2f8339da534d6d2447cabd15c550d23ffb365b2138db5bab58699969c3b8e170bfee2a35bc9a824b8f659d239c6d6a84d088a95afd6d48e1533890890105309e05a058f9365d6f0bb704ea710b90f08df2388d5f46d7c0ec577f9f0dead2491c9"}, @NFTA_DATA_VALUE={0x49, 0x1, "eb117e975ccc0be610901d612ff1a3665e415b8cef9fa3e62d6ffb2cb55d61575fa92fec74a18ba80e60d3972173d1324b263abf56669507579b6f502a732a5071f45f458f"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x20, 0x1, "e2e2b28abf72a310f743a3c9a6db849d69ac8db25a5fa800c61c8127"}, @NFTA_DATA_VALUE={0x4e, 0x1, "32ade76c6515d1c76ba803932d5e4f0658a2fb70b9dcc876063da6fc1cc3bc73773b695b46160ece0695f10e19e3e7a60e7e1328585ba8bd0f49f1b104b6bfac54ac922d9fb5cda2dabd"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "60e3f19a5fdbe2ef2e406a67efc8f2558041412a6c96c395d084a5f178e6d3f99e27a51747d6fdb42bb977b3b22775988f7bdb80261e956c4da11be94b88f05571d58b070152fe641ee6552f014221f22de13dfcb9cbf4a590cee92e92af93fc579dbf5d8afa861c29e3c0bfc5a3b514a240bdfa7671929871132d285e349b0b8c56405c456ba016bcf71f014f5fc62a8dcdbc6592b3c3470108d1ec827425"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x134, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xe4, 0x6, 0x1, 0x0, "c09756c806533ecef31334520cfc4962712909ab331d729122afe3d2ac780ea370743688a42fd2bc76c3101fb2438f651268c4729fd9c63d7570e7ca4c8d641bdac0c84352bf4cd4144cf33b397965862aaa0000d5eea1b910da5c9ff5a0879c14cbe478369f26999fa73e6060600e19da439c9e0f270f5ad9562c2e0e7639ada0d2da16960de9758b58b667da37223a352d27f01779abbd82ea8c6e840bae839d9c12e27b614868ebe4e2955a1ba6d4cad9380db12acbc7d6c86f3b0b1ced66f8f812148468f594856c70071af497c5410d1b736aaaef82c9680110a88c9556"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x120, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "305a5272590f26f30edc1624166d55205a7ab0f1fe0dc1155c02d795ff643277d7e1385769222aee021e35219e74bb6df8dc75e22db59096eb2303351da57ab7194cf6754d76835b3fc783ec6aba5456d558b20734cbf628211a0434895ac3dfb6900fdefe8c1a46c3917105bd9989cee42683007d2fe539428f2a9d62c4d5568784a000540bc2505938c37d2a974f2eed8e325ef29e192fd43968532c7bce5a615e0c9608e39f956e847fdd0bf698aea208973099e09e0289895be397912dc0902e2cf708239f2a5d9df83545af70ac6ae48e886489fb664d9a2653f36d7336b17103f8d9"}, @NFTA_DATA_VALUE={0x30, 0x1, "60cf4bd0651ce50be7e156af100460358cd89a17c2bc392a7adff36535f9e4b0bc45d9a5e5eb537b053f545d"}]}, @NFTA_SET_ELEM_USERDATA={0xc2, 0x6, 0x1, 0x0, "ba6412d5afe75a67b6a3cef47bafdb17fae576cbac0d51f1a5e173af9b23a17cd8b16d0696ea4b0670f8cd9d9ead240f9b742f810736f72e879a0c792f1e3fecf9b4b5368dbf65213c86c5cce022ca33f45f03f133de26420cf3e32fc744bdec57b7a6af610191b251329b12994d7a865a4016c3642a7493e99ed5e6ef0aee07b3cba8cfd96865bd38554314f5bf2119ae3320e3fc1fd90fd30aa9870cf76d9c44c2a70af58094a311266faf7b09645fb7c7cc9f4683008a6cb6d279e14d"}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x304, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "dc0fee1a86067caedeccbcb5dd86fc67f83ea1a3740f2cad387e73f5b806a6a8821884de7f620ecd3fa8fa44d345abb079cf4f79b99cebb3c2f8a21c68f8d2862afe57f9ac6b4bc8251b21e145782d9257ea343d996139e55c40f8ecb5b5864f418c5067c67dcf8e8d47c06a3c16d509903a45df47babb0073c5028a80c16ddf9dd8d575b1288d32adfe42e26b80d9c84211dbdc93204440d6f02fc323cdaf883485d291e9ffb71bd76196dd394de9e169c90f3a0d06d83107f8c08c4445da7442f328e5685032ef72f025ee1b5527485826a4def076f73c6f71714ebd77967b6556aa0dc0"}]}, @NFTA_SET_ELEM_USERDATA={0x57, 0x6, 0x1, 0x0, "fe2a0729503a9e4080dbc915dc028bab5da7e10ddcbb01a529023be5de057b5f4b31ac750b0091ee5e048edcc1161312d4010f015edd9e890ba09eb36dd968c3eb8127fe7032fa674d219cf0644815bb70c83e"}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x72, 0x1, "f391e11674336d128626ebdd2e7b8cb1154bcf407b468cfe5dad8324eeeeb160023aac5095c33feff1d7234f38af7a31d9fb6ff28d332a23c6078739bfbfa3086a102b7e658b2585ef5f63099086cec7344bc7f4a2d881e1145669c12181ff58eb29167b8002d62ac6d723cfd073"}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_ELEM_KEY_END={0xe4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "22b31d0232ef05145fe4e746f66fba0ac4881d9cf0bdff7552131b50df7886fdca7a071f1193d4f1634b52d02c2aeb5178a290f6b982d1bc2941dded426c9454d3"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x401}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xbe37}]}}}]}]}]}]}, 0xcf0}, 0x1, 0x0, 0x0, 0x4010}, 0x4044001) syz_genetlink_get_family_id$nbd(&(0x7f0000001b40), r0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8091}, 0x4c050) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001d00)={'vxcan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x1c, 0x7, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x44000) 3.677439784s ago: executing program 5 (id=3261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000080)=0x84) 3.388099443s ago: executing program 2 (id=3263): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x8050) 3.386873715s ago: executing program 0 (id=3264): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'team_slave_1\x00', @random="020000c6fa00"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="f54f1e16effd336c542b49000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe2) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000000c0)=0x29) close(r3) r6 = socket$inet(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f00000000c0)) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req={0x7, 0x7, 0x9, 0x6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) write(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000003000000000000001100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000002c0)="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", 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x1000, r8}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001c80)={0x5, 0x2, {0x7fffffff, @struct={0xffff, 0xe5}, 0x0, 0x5, 0x8000000000000022, 0x51, 0xa, 0x5421, 0x4, @struct={0x1d5e11f8, 0x6}, 0x2, 0x3, [0xeb8, 0xfff, 0x1, 0x1ff, 0x8, 0x2]}, {0x5, @struct={0x2, 0x1}, 0x0, 0x8, 0x6, 0x7fff, 0xffffffff, 0x7, 0xd0, @usage=0x400, 0x9, 0x83, [0x8, 0x4, 0x7ff, 0x2, 0x3, 0x9d03]}, {0x82ce, @usage=0x4, 0x0, 0x8e1a, 0x8, 0x6, 0xba5c, 0x3, 0x8c, @usage=0xffffffffffffffff, 0x10, 0x16, [0x1, 0x0, 0x1, 0x7, 0xffffffffffff0001, 0x80]}, {0x21, 0x7fffffffffffffff, 0x6}}) socket(0x10, 0x3, 0x0) 3.275356491s ago: executing program 6 (id=3266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x101}, @NL80211_ATTR_VENDOR_DATA={0x4d, 0xc5, "da9827d2495ed301f7c55dcd0c8f89bdab57d7e843bf2c8722e0bdebfabef0ad08eb4c4f78f46b921ef8d70de3cb9f2a8a10276d153e1c997bdae35dfdbfcc3b00e8a7316747308a4e"}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4002040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x408800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'rose0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68c1}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003d00010325bd7000fddbdf250d0000001f11c784c6b3d4d4d8673cf9ad98443120fdc569f84a91e8ab7bd8c3684ba45992e9a74e8c43781c4376d22cd234a7a894f168ce2f834db82fc8fce7e8bbba281dfedbbda6ea81288a345a033fb291c815ec77bb6f499402fee5080723ce25870657c5a1a3f9000cf8425d7f2139a6ba92455bc14adce8f7f3c118e78457f30025f51c932684cff3d04b904204fc62677a2a75aa7fc6901cac83614e9484ce208734c1d9c2575dee0dd9852e159f7aa9d1f68f55e5e5df9095ca7dc3ed3f59da138e7867"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x2, @private1, 0x7f8}}, [0x8000000000000000, 0x8000, 0x9, 0x7, 0x3, 0x6e5, 0x7, 0x8, 0xfffffffffffffcb3, 0x2, 0x400, 0x9, 0x0, 0x2]}, &(0x7f0000000180)=0x100) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f00000001c0)=r11, 0x4) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r12, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) ioctl$TUNGETIFF(r12, 0x800454d2, &(0x7f0000000200)={'nicvf0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000001500)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @multicast1, 0x8, 0x1}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0xff000000, 0xffffffff, 0x4, 0x10, {@mac=@random="874a5b0864cd", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x5799fe53a64e1c6, 0xff]}}, 0x5, 0x9, 0x2, 0x7, 0x7fff, 0x4, 'netdevsim0\x00', 'wg0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0xffffffff}}}, {{@arp={@remote, @broadcast, 0xffffffff, 0xff, 0x3, 0xc, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xfff, 0x4, 0x6, 0x8001, 0x76c, 'ip6erspan0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x245}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.855930477s ago: executing program 2 (id=3268): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000040)="76ea09", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x6, 0x11, 0x0, 0x0, @str='\x92\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x6c}}, 0x20048800) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x6c}}, 0x20048800) 2.570629886s ago: executing program 7 (id=3270): socket$kcm(0x10, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) 2.395070485s ago: executing program 2 (id=3271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x20000014}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbd8abc89b6f59ec", 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.389023916s ago: executing program 6 (id=3272): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000580), 0x58}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40880) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=@getsa={0x2c8, 0x12, 0x200, 0x70bd2a, 0x25dfdbfc, {@in=@multicast2, 0x4d6, 0x2, 0x3c}, [@user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x20}, @in6=@mcast1, 0x0, 0xa}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @address_filter={0x28, 0x1a, {@in6=@private1, @in=@empty, 0x0, 0x1, 0x1}}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@remote, 0x4e23, 0xff00, 0x4e22, 0x0, 0xa, 0x20, 0x20, 0x2b}, {0x7, 0x322, 0x4, 0xff, 0x8, 0x6869, 0xe5fa, 0x2}, {0x1400000, 0x8, 0x794, 0x41}, 0x95, 0x0, 0x1, 0x0, 0x2, 0x1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x35075b, 0x7fff}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2004}, @etimer_thresh={0x8, 0xc, 0x200}, @algo_comp={0x131, 0x3, {{'lzs\x00'}, 0x748, "71e4f6b7957d886935a35e21b4fb19a6b868c44536e1d7e2bf9b61dcb95cc346e26b69028767df91a0484c6695cc3d9bfe25dfcf139bc5d25e706e6e31f88b04803e033b240d81bb951c4dda7d70568ead6772a97095d3cfe23bed2d1ff680fee52ffce7bd438b89d780cf84dc1b1668b9bf59b673561d16a2b187e799c7fbdc9f1e267ae160059cd4fe60545621ad3385ac0520f75f67a238e8abef47266b8adc34e0cf06fc85dd20955eed1ff35375a8e3f6199ecdac04dc9b39a6fe7b26b3a6ef81fc929d55292baf16ad6e402e2ca8f926c74e166fe90b67eb93e23ebed680c50b0c25bb893128"}}]}, 0x2c8}}, 0x20000844) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @empty, 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0, 0xc500000}}, {{0xa, 0x4e22, 0x9, @loopback, 0xd6}}]}, 0x290) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 2.388468546s ago: executing program 0 (id=3273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xfe79, 0xe40, &(0x7f00000002c0)="000000000000fffe", &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 2.112171586s ago: executing program 5 (id=3274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f00000002c0)={0x4bc, 0x1, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x7}, 0x4, 0x7, 0x2, 0x10, 0x1d, 'syz0\x00', "4fcab7e42bb846163a7fc20db0bbecad4d8cf34e9e081059ad3566fb5fdfb418", "da62725c941ce3269f3e6c7cb1c7cf29f90913745408268958b5bc7f8f567f82", [{0xc779, 0x8, {0x2, 0x5}}, {0x81, 0x401, {0x3, 0xa80}}, {0x2, 0x2, {0x1, 0x1000}}, {0x73, 0xcad, {0x3, 0x7}}, {0xf41e, 0x1, {0x1, 0x2}}, {0x0, 0x2, {0x0, 0x9}}, {0x6, 0x5, {0x3, 0x38}}, {0x3, 0x1ff, {0x0, 0x2}}, {0x8000, 0x7f, {0x2, 0x1}}, {0x4, 0x4, {0x1, 0xff}}, {0x6000, 0x9, {0x2, 0xffffffff}}, {0x2, 0x4}, {0x6, 0x6, {0x2, 0x4}}, {0x3, 0x6, {0x0, 0x48}}, {0x8000, 0xb873, {0x2, 0xffff}}, {0x800, 0x400, {0x1, 0x2}}, {0x29, 0x9, {0x1, 0xb8}}, {0x101, 0x6, {0x2, 0x6}}, {0x2, 0x400, {0x1, 0x6}}, {0xff, 0xfff7, {0x1, 0x2}}, {0xd, 0x4, {0x1, 0x4}}, {0x6, 0x4, {0x2, 0x7}}, {0x2, 0x7, {0x3}}, {0x8ed8, 0x6, {0x0, 0x26}}, {0xeb, 0x8, {0x1, 0x7}}, {0xffff, 0x3ff, {0x3, 0x6}}, {0x0, 0x3, {0x1, 0xfffffffd}}, {0x4, 0x7, {0x1, 0x6}}, {0x5, 0x0, {0x0, 0x5}}, {0x9, 0x8, {0x0, 0x80000000}}, {0x19f, 0x36b, {0x3, 0x400000}}, {0x2, 0x9, {0x0, 0xf1b7}}, {0xfffb, 0x1, {0x1, 0x9}}, {0x7da, 0x3, {0x0, 0x4}}, {0xff01, 0x8, {0x1, 0x4}}, {0x1, 0x6, {0x3, 0x6}}, {0xffff, 0xc45, {0x1, 0x5f53}}, {0xb9, 0x6, {0x1, 0x6}}, {0x2, 0x9, {0x0, 0x7}}, {0x0, 0x4, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x80, 0xba, 0x65, 0x3, 0xf, 'syz0\x00', "11a4de91b4006ef2b616d8e8612363d20c4be992e6bd7578f073bf29c1ca55e7", "a6b9b4da4c3ca72348d95b381d57faf0fe9f5fad71193df84b47533cf5f6911b", [{0xa8e4, 0x3, {0x1, 0x80000000}}, {0x8, 0x2, {0x3, 0x8}}, {0x2, 0x1000, {0x1, 0x9}}, {0x7, 0x9, {0x0, 0x4}}, {0x8822, 0xfffe, {0x1, 0x6}}, {0x8, 0x5, {0x1, 0x8}}, {0x4a67, 0x5, {0x0, 0x121}}, {0x1827, 0x12, {0x2, 0x4}}, {0x88e, 0x6, {0x3, 0x8}}, {0xfff9, 0x2, {0x1, 0x6}}, {0x7, 0x0, {0x2, 0x7}}, {0x4, 0x0, {0x0, 0x8}}, {0x3, 0x7fff, {0x3, 0x1}}, {0x329, 0x7, {0x0, 0x7fffffff}}, {0xc7, 0xc1f9, {0x0, 0x6798aaca}}, {0x6, 0x7, {0x2, 0x7}}, {0x5, 0x10, {0x0, 0x8}}, {0xbb84, 0x401, {0x0, 0xff}}, {0xe237, 0x3, {0x0, 0x9}}, {0xfff8, 0x2, {0x1, 0x5}}, {0x554, 0x401, {0x1, 0x7fff}}, {0x0, 0x3, {0x1, 0x1ea0}}, {0xbbf1, 0x400, {0x0, 0x7fff}}, {0x8, 0x8, {0x3, 0x401}}, {0x1, 0xebe, {0x2, 0x272}}, {0x800f, 0x100, {0x0, 0x8}}, {0x7, 0x7fff, {0x1, 0xfffffffb}}, {0xffff, 0x4, {0x1, 0x5}}, {0x3, 0x3dec, {0x0, 0xe36c}}, {0x2, 0xe0f, {0x2, 0x5}}, {0x2, 0x0, {0x3, 0x6}}, {0x101, 0x7ad, {0x3}}, {0x81, 0x8}, {0xffff, 0x4, {0x0, 0xff}}, {0xd, 0x6a, {0x3, 0xa}}, {0xffff, 0x8, {0x0, 0x80000001}}, {0x0, 0x81, {0x1, 0x7ff}}, {0x5, 0x7737, {0x2, 0x2}}, {0x6, 0x8000, {0x3, 0x40}}, {0xa, 0x0, {0x2, 0xc6c}}]}}}]}, 0x4bc}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070080000900010073797a300000000070000000090a010400000000000000000700000008000a40000000008900020073797a30000000000900010073797a30000000000800054000be519e2df300000d2c001280280001800e000100636f6e6e6c696d697400000014000280080002400000000108000140840000000800034000000110140000001000010000000000000000000084000a"], 0xb8}, 0x1, 0x0, 0x0, 0x1804}, 0x20050800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040000}, 0x8000) 2.100402972s ago: executing program 0 (id=3275): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 1.986949354s ago: executing program 0 (id=3276): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000102) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4008, r3}, 0x18) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, r5, 0x25, 0x0, @void}, 0x10) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) close(r1) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x8901, &(0x7f0000000100)) (async, rerun: 64) sendmsg$inet(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="92", 0x1}], 0x1}, 0x4815) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20040}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 1.98288369s ago: executing program 5 (id=3277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xd, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@loopback, 0x29, r4}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xb, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x0, 0x2, 0x3}) write$tun(r0, &(0x7f00000002c0)=ANY=[], 0xff04) 1.724088918s ago: executing program 0 (id=3278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000101c0012800b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000101c0012800b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 1.722876101s ago: executing program 7 (id=3279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x879995ce39cd0a74, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x40480f0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x3e4, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xc}, {0xb, 0xffe0}, {0x2, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0xffb}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_matchall={{0xd}, {0x390, 0x2, [@TCA_MATCHALL_ACT={0x384, 0x2, [@m_mirred={0x138, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x3a000000, 0x5, 0x5, 0x6}, 0x2, r4}}]}, {0xea, 0x6, "b830e183b8a8854c184d9d36e7fc811083f0b30d2fe2a5cbae6f00ebf10bf83aba3e69283cd42118c263d829260b6e2faa86b702667b45ee3ad662b096adac198864ed97088d7f79dde09183b2aa93272ca1674e136bf7b36a4c92ac66ed8ae779da23973e90346b1bc17c336ac35ca48772bee527fae673024654236d04584510e63e44789680cffdacdf6c8baf24009d46e9f395a97b5d58cb18be5d789480fb1db796a03f6117bade25a1588e51ed117a50b249ecb498ce51cb4e9de020c7655aeca9f23fee476d8963003f59ff3194894b169144330eeb4ebf38547804de1ef83d15eb4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x124, 0x4, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xbcde}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd148}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x63}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x687}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb3e}]}, {0xc5, 0x6, "7855fe9643f3a6e4a5283dcbae70119f2a71b68101186bf4f1c1b475391b8d74c022fbe91e4b040898420a1aae1391642963cfe437b4ce8ad58746d3e558ef6c788b7247bb67a6007c3938e9cb78691e2b4edf77cb413a89fd76e3c7d108edf20bb875c327bb468f6ffcbc3ca468026fb896a13fef27be418cce7f125be952574cef20bce758179353f55296efbe2f8008f91b7f8d617bda8c4ccee0e5827379c38be952b0b12d21d77621b0646aa9127080bd5b2d8d40b078dcaab108fc831b41"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x124, 0x18, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0xc5, 0x6, "1c158fd753633a3295cd617aa45dec336beee66ee5556b03cb6d123a27a9dba038dfe361d2969b7123322ec4717650075f0f98225d267af2f7917fa334f66e7b22cc63e9e2badcf6635d2c16869cb4be56d380d227499bff2973073b94f03b3c898468aade60c5343debd90f5b876a857685c2d5917d6a0ef4093f7e0ee9f17263ae565eab3fd188aacb6e6078dd37975bfb3b7162af99b55d073fb7fe6b857fff8a057633639e6a190af34484e2d4d35add97e6d4e0dcebd847b29639bc8354ab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x3e4}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x879995ce39cd0a74, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x40480f0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x3e4, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xc}, {0xb, 0xffe0}, {0x2, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0xffb}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_matchall={{0xd}, {0x390, 0x2, [@TCA_MATCHALL_ACT={0x384, 0x2, [@m_mirred={0x138, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x3a000000, 0x5, 0x5, 0x6}, 0x2, r4}}]}, {0xea, 0x6, "b830e183b8a8854c184d9d36e7fc811083f0b30d2fe2a5cbae6f00ebf10bf83aba3e69283cd42118c263d829260b6e2faa86b702667b45ee3ad662b096adac198864ed97088d7f79dde09183b2aa93272ca1674e136bf7b36a4c92ac66ed8ae779da23973e90346b1bc17c336ac35ca48772bee527fae673024654236d04584510e63e44789680cffdacdf6c8baf24009d46e9f395a97b5d58cb18be5d789480fb1db796a03f6117bade25a1588e51ed117a50b249ecb498ce51cb4e9de020c7655aeca9f23fee476d8963003f59ff3194894b169144330eeb4ebf38547804de1ef83d15eb4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x124, 0x4, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xbcde}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd148}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x63}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x687}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb3e}]}, {0xc5, 0x6, "7855fe9643f3a6e4a5283dcbae70119f2a71b68101186bf4f1c1b475391b8d74c022fbe91e4b040898420a1aae1391642963cfe437b4ce8ad58746d3e558ef6c788b7247bb67a6007c3938e9cb78691e2b4edf77cb413a89fd76e3c7d108edf20bb875c327bb468f6ffcbc3ca468026fb896a13fef27be418cce7f125be952574cef20bce758179353f55296efbe2f8008f91b7f8d617bda8c4ccee0e5827379c38be952b0b12d21d77621b0646aa9127080bd5b2d8d40b078dcaab108fc831b41"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x124, 0x18, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0xc5, 0x6, "1c158fd753633a3295cd617aa45dec336beee66ee5556b03cb6d123a27a9dba038dfe361d2969b7123322ec4717650075f0f98225d267af2f7917fa334f66e7b22cc63e9e2badcf6635d2c16869cb4be56d380d227499bff2973073b94f03b3c898468aade60c5343debd90f5b876a857685c2d5917d6a0ef4093f7e0ee9f17263ae565eab3fd188aacb6e6078dd37975bfb3b7162af99b55d073fb7fe6b857fff8a057633639e6a190af34484e2d4d35add97e6d4e0dcebd847b29639bc8354ab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x3e4}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) 1.342870232s ago: executing program 2 (id=3280): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4040085) 1.278442119s ago: executing program 2 (id=3281): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) shutdown(r3, 0x1) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="457b28e1939f13dec3b75c53ce39e336fb362b049644147cdf31bc1372c3b280e54f3151521c8ff2bec96bd1345237389fc2e1a4beabf580afea53bcfd05341005cd9efec9102be44de93fcb564fc844eddbb31bddc4d8ec6c150eb811edc9ed6eea47c4112e1c0137842ff2f0d0b8654046414abcb62a1df42f874eae0de8def7e778d0b37bc8cbca6d2751019bbe46400608ae25d232c8536cbbde18e069b458214170d37c5239f92b3b3adcf4f3db09b74c286c628024625fbe3a82f58a06e8c94da3d8d9e154868b", @ANYRES8=r1, @ANYRES8], 0x28}}], 0x1, 0x80) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000000000000000000025715f01000000000000001952b8a36f57f998580923825d398fade95ac8425d8ddc4341f1bf7f4282243f23c859d1b92c337aadbd6b58e0d0d12edd6719c6566158a99e683b8d522e3b8f23008f34b358693a970a065496f5d2f930cf98d42b0000000000000000c5f7c6253abc", @ANYRES64=r4, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESDEC], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000010000001000000000000000f38f1441bdcea0929155726efb2eaa241a8ac64b2f572a81655839d84ef1ee2ec66b34bd362839a962e1d858abbef75718613bef08000000e9f3156c720c1fc0911dd0e35b72501605147d301d401da5e40894764de52575a66309a989", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c006020000001bd300058edb7c"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x840) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x3953c2, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000051402072abd7000fedbdf05080001000200000008000300031000000800010001000000080003000300000008000100020000000800030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x9, 0x0, 0x2, 0x6, 0x1bd1, 0x8}, &(0x7f0000000100)=0x20) r10 = socket(0x1, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x2b) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r10, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x90, 0x6], 0x8}, 0x10) 1.142199242s ago: executing program 0 (id=3282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x67038, 0x882ab}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.126640943s ago: executing program 7 (id=3283): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000080)={0x122c, 0x15, 0x2, 0x70bd2c, 0x25dfdbff, {0x3d, 0xf7}, [@INET_DIAG_REQ_BYTECODE={0xac, 0x1, "54bc3a9b2289a032dde7d03f4db592c1f21f1e6b9bbd272953fc3b6517c887452de80a73ab5051fb292cf758aa7ac9c055b1c1f57e7883df9703cb0fbfd257a9cb3c8ac8d7d49fe5b2eab1a868f4d35d274401d755f185c88e6f36530907664349a1583625aed6ef9105be68093e9844212fa1997db4d830a7ba5f4aaf5ba5091d18a794410e262552af820ea9def1668adecf585c4996d34874a45c0dc8b5cafaf31eac93350938"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "ce256ba69c277f19073639b04ee9d4a254cfac2c04ed1246de3d1fcadd79597f7ecb26c81ca5ed7e824c92050877eaa174a651f0fa27e333e4ac4106ad669397851b7804240541bedf10286fbe4163a492856eeae890ff5ecfaf94daa5e481a60a7fc0e76c0af084339a42454404f67e5f2307bb43092680a089e2e4aba09715d1a0ae2f3d4645ef994e485fdada6d54919d4f108094aee70511f5240b3914d7c6d21eab45ca6f4e434d9e"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "8d87d40aaed311c7d98bc4376a50f5e279f70c4d56f0838a9742cdc9b6c47c0b230234c25a60e9a1405178713287e8ba21118abb762945a47def37f4eba60141b7ce9841000e1a832346ff6e13713e0a70aca478b1f984a6b070efc9903dd8c0574eca99a5cc1e7e3e3fced6379f94ab1dfac2ed9f3f144518926f724b36ba12a5e335c93fd43ca95380ba905bee31cceaef9bc04870695c732e961faba2c096a8493805716b7084a3ee4bdb352caf64e9241d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x122c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0) 999.317056ms ago: executing program 7 (id=3284): syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="461a97e48febaaaaaaaaaa0008004600002c00000000020690780a210104ac1414aa443b040100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00009058fe0a"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 903.105236ms ago: executing program 5 (id=3285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xfe79, 0xe40, &(0x7f00000002c0)="000000000000feff", &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 788.201297ms ago: executing program 6 (id=3286): unshare(0x20000400) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x74df82ae, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000500)='pids.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x8e, &(0x7f0000000100)=""/142, 0x41000, 0xa}, 0x94) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x198, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x138, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000004}, 0xc1) 750.629029ms ago: executing program 5 (id=3287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000002f907864011702ac1414aa4001880b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01062cbd7000fcdbdf258200000008000300", @ANYRES32=r9, @ANYBLOB="34741b23a8685d584aca8965c8905436cfec5c606744188ac8e1b702e61a43a5d0f20846de7fe5ce66c9d9e09a37b122cfca620ffb541c0b48d1b5eb758c7edaa204e8959d28b4d82843fae8a1b32611a2c04a1fc887"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040844) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000006c0)={r2, 0x353}, &(0x7f0000000700)=0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(0x0, r11) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140002", @ANYRES16=r12, @ANYBLOB="010700000000fcdbdf2541000000"], 0x14}}, 0x24000040) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r7) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r13, @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000854}, 0xc0448c4) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000"], 0xb8}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='/&\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf250700000008000c000200000014000500ff0200000000000000000000000000010800020007000000"], 0x38}, 0x1, 0x0, 0x0, 0x40080c5}, 0xa9aeb87e44f7e6f1) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000100)) 454.082541ms ago: executing program 7 (id=3288): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) (async, rerun: 32) write$nbd(0xffffffffffffffff, &(0x7f0000000200)={0x67446698, 0x0, 0x1, 0x2, 0x2, "ae99b4655cdc0838e9402b58594941cd6f4029069a9decc96d57961a34eb361178c6ad42ca6afbb3ba690dda73d9ae40d2c5"}, 0x42) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x6, &(0x7f0000000340)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r3}], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) 248.415302ms ago: executing program 6 (id=3289): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x77dffc91ab83bd44, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x64, &(0x7f0000000180)}, 0x10) 247.698539ms ago: executing program 7 (id=3290): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="bf958cafc96fa985e0ce08160da0b77a", 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0xffffffff000) 199.861865ms ago: executing program 6 (id=3291): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x24000040) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 90.091191ms ago: executing program 6 (id=3292): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0xfff3}, {0x0, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x68, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x3, 0x2], 0xfc, [0x2, 0x2, 0xfffe, 0x2000, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8, 0x0, 0x0, 0x3dc], [0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x98}}, 0x20000800) (async) close(0x3) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 0s ago: executing program 2 (id=3293): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x33c4}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x67}, 0x94) kernel console output (not intermixed with test programs): 38][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 355.374265][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 355.445432][T14002] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 355.510166][T14002] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 355.542274][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 355.566666][T14002] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 355.584459][ T1122] bond4: (slave bridge5): failed to get link speed/duplex [ 355.673649][T14002] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 355.769697][T13838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.814417][ T1122] bond3: (slave bridge2): failed to get link speed/duplex [ 355.854343][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 355.922431][T13838] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.964204][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 355.991075][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.999397][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.072075][T14013] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2389'. [ 356.138658][ T5784] smbdirect: ib_dev[syz2] removed [ 356.146549][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2391'. [ 356.169072][T14013] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2389'. [ 356.232105][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.240145][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.302973][T14018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2390'. [ 357.208154][ T5622] Bluetooth: hci7: command tx timeout [ 357.267252][T14053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2401'. [ 357.376880][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 357.616037][T14066] x_tables: duplicate underflow at hook 3 [ 357.908680][T14086] sctp: [Deprecated]: syz.2.2410 (pid 14086) Use of int in maxseg socket option. [ 357.908680][T14086] Use struct sctp_assoc_value instead [ 357.999245][T14087] x_tables: duplicate underflow at hook 2 [ 358.011576][T14086] x_tables: duplicate underflow at hook 2 [ 358.352512][T14106] macvlan1: entered promiscuous mode [ 358.364981][T14106] macvlan1: entered allmulticast mode [ 358.380721][T14106] veth1_vlan: entered allmulticast mode [ 358.453446][T14112] SET target dimension over the limit! [ 358.658214][T13838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.694909][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'. [ 358.754851][T14121] x_tables: duplicate entry at hook 1 [ 358.920585][T14121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2419'. [ 359.327054][ T8237] net_ratelimit: 47 callbacks suppressed [ 359.327073][ T8237] bond4: (slave bridge5): failed to get link speed/duplex [ 359.403275][T14144] __nla_validate_parse: 1 callbacks suppressed [ 359.403295][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 359.405963][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 359.504996][ T5784] bond4: (slave bridge5): failed to get link speed/duplex [ 359.738908][T13838] veth0_vlan: entered promiscuous mode [ 359.757734][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 359.793188][T13838] veth1_vlan: entered promiscuous mode [ 359.841541][T13838] veth0_macvtap: entered promiscuous mode [ 359.858893][T13838] veth1_macvtap: entered promiscuous mode [ 359.887285][T13838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.905109][ T5784] bond4: (slave bridge5): failed to get link speed/duplex [ 359.971682][T13838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.041665][ T5784] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.073295][ T5784] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.083334][ T5784] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.134402][ T5784] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.264810][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 360.326228][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 360.395557][ T12] bond3: (slave bridge2): failed to get link speed/duplex [ 360.504372][ T1122] bond4: (slave bridge5): failed to get link speed/duplex [ 360.556789][T14177] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 360.600058][ T8231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.613591][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 360.641345][ T8231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.858195][ T8237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.879856][ T8237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.038009][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052332800: rx timeout, send abort [ 361.120364][T14186] lo speed is unknown, defaulting to 1000 [ 361.540367][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052330000: rx timeout, send abort [ 361.550384][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052332800: abort rx timeout. Force session deactivation [ 362.048662][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052330000: abort rx timeout. Force session deactivation [ 362.091081][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056755800: rx timeout, send abort [ 362.099777][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056755800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 363.207705][T14253] netlink: 'syz.7.2458': attribute type 178 has an invalid length. [ 363.461033][T14270] netlink: 'syz.7.2464': attribute type 21 has an invalid length. [ 363.473821][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 363.486240][T14270] netlink: 'syz.7.2464': attribute type 6 has an invalid length. [ 363.509778][T14270] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2464'. [ 363.582938][T14275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2462'. [ 363.739657][T14279] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2465'. [ 364.247246][T14296] batadv_slave_1: entered promiscuous mode [ 364.477287][T14305] Bluetooth: MGMT ver 1.23 [ 364.505063][ T12] net_ratelimit: 44 callbacks suppressed [ 364.505083][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 364.706673][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 364.780991][T14298] lo speed is unknown, defaulting to 1000 [ 364.806088][ T8226] bond3: (slave bridge2): failed to get link speed/duplex [ 364.857002][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 364.945822][ T8226] bond3: (slave bridge2): failed to get link speed/duplex [ 365.005065][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 365.083473][T14295] batadv_slave_1: left promiscuous mode [ 365.106934][ T8226] bond3: (slave bridge2): failed to get link speed/duplex [ 365.127869][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 365.136655][T14323] Unsupported ieee802154 address type: 0 [ 365.225150][ T8226] bond3: (slave bridge2): failed to get link speed/duplex [ 365.285695][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 365.371020][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 365.468277][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2478'. [ 365.574915][T14332] syzkaller0: entered promiscuous mode [ 365.588429][T14332] syzkaller0: entered allmulticast mode [ 365.620465][T14336] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 366.027736][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2482'. [ 366.085058][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2483'. [ 367.232194][T14390] FAULT_INJECTION: forcing a failure. [ 367.232194][T14390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.281928][ T6995] IPVS: starting estimator thread 0... [ 367.296105][T14390] CPU: 0 UID: 0 PID: 14390 Comm: syz.0.2494 Not tainted syzkaller #0 PREEMPT(full) [ 367.296130][T14390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.296148][T14390] Call Trace: [ 367.296155][T14390] [ 367.296162][T14390] dump_stack_lvl+0xe8/0x150 [ 367.296194][T14390] should_fail_ex+0x40c/0x560 [ 367.296218][T14390] _copy_from_user+0x2d/0xb0 [ 367.296244][T14390] bpf_test_init+0xd8/0x150 [ 367.296284][T14390] bpf_prog_test_run_skb+0x31e/0x2230 [ 367.296329][T14390] ? __fget_files+0x3a2/0x420 [ 367.296352][T14390] ? __fget_files+0x2a/0x420 [ 367.296380][T14390] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 367.296418][T14390] bpf_prog_test_run+0x2c5/0x340 [ 367.296445][T14390] __sys_bpf+0xa22/0xd90 [ 367.296476][T14390] ? __pfx___sys_bpf+0x10/0x10 [ 367.296511][T14390] ? __fget_files+0x2a/0x420 [ 367.296547][T14390] ? ksys_write+0x242/0x270 [ 367.296574][T14390] ? __pfx_ksys_write+0x10/0x10 [ 367.296603][T14390] __x64_sys_bpf+0xba/0xd0 [ 367.296623][T14390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.296643][T14390] do_syscall_64+0x174/0x580 [ 367.296668][T14390] ? trace_irq_disable+0x3b/0x140 [ 367.296689][T14390] ? clear_bhb_loop+0x40/0x90 [ 367.296711][T14390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.296729][T14390] RIP: 0033:0x7ff7b879de59 [ 367.296747][T14390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.296763][T14390] RSP: 002b:00007ff7b9710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.296783][T14390] RAX: ffffffffffffffda RBX: 00007ff7b8a25fa0 RCX: 00007ff7b879de59 [ 367.296796][T14390] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 367.296808][T14390] RBP: 00007ff7b9710090 R08: 0000000000000000 R09: 0000000000000000 [ 367.296820][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.296831][T14390] R13: 00007ff7b8a26038 R14: 00007ff7b8a25fa0 R15: 00007ffd766dc808 [ 367.296862][T14390] [ 367.585133][T14391] IPVS: using max 28 ests per chain, 67200 per kthread [ 367.894306][T14405] netlink: 'syz.6.2500': attribute type 25 has an invalid length. [ 367.902169][T14405] netlink: 'syz.6.2500': attribute type 3 has an invalid length. [ 367.920447][T14405] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2500'. [ 367.988758][T14405] veth1_to_batadv: entered promiscuous mode [ 368.149784][T14412] netlink: 444 bytes leftover after parsing attributes in process `syz.7.2503'. [ 368.325217][T14414] xt_hashlimit: size too large, truncated to 1048576 [ 368.464296][T14422] netlink: 'syz.7.2506': attribute type 1 has an invalid length. [ 368.524475][T14427] netlink: 'syz.6.2504': attribute type 11 has an invalid length. [ 368.532499][T14427] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2504'. [ 368.557973][T14421] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.598242][T14421] bridge_slave_0 (unregistering): left allmulticast mode [ 368.605316][T14421] bridge_slave_0 (unregistering): left promiscuous mode [ 368.612341][T14421] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.657582][T14422] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2506'. [ 368.830939][T14430] FAULT_INJECTION: forcing a failure. [ 368.830939][T14430] name failslab, interval 1, probability 0, space 0, times 0 [ 368.862942][T14430] CPU: 1 UID: 0 PID: 14430 Comm: syz.6.2507 Not tainted syzkaller #0 PREEMPT(full) [ 368.862968][T14430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.862979][T14430] Call Trace: [ 368.862986][T14430] [ 368.862993][T14430] dump_stack_lvl+0xe8/0x150 [ 368.863027][T14430] should_fail_ex+0x40c/0x560 [ 368.863053][T14430] should_failslab+0xa8/0x100 [ 368.863082][T14430] __kmalloc_noprof+0xfe/0x720 [ 368.863103][T14430] ? sk_prot_alloc+0xe7/0x210 [ 368.863127][T14430] ? sk_prot_alloc+0xe7/0x210 [ 368.863156][T14430] sk_prot_alloc+0xe7/0x210 [ 368.863178][T14430] ? sk_alloc+0x27/0x390 [ 368.863221][T14430] sk_alloc+0x3a/0x390 [ 368.863250][T14430] bpf_prog_test_run_skb+0x3a6/0x2230 [ 368.863295][T14430] ? __fget_files+0x3a2/0x420 [ 368.863316][T14430] ? __fget_files+0x2a/0x420 [ 368.863342][T14430] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 368.863369][T14430] bpf_prog_test_run+0x2c5/0x340 [ 368.863397][T14430] __sys_bpf+0xa22/0xd90 [ 368.863427][T14430] ? __pfx___sys_bpf+0x10/0x10 [ 368.863460][T14430] ? __fget_files+0x2a/0x420 [ 368.863499][T14430] ? ksys_write+0x242/0x270 [ 368.863528][T14430] ? __pfx_ksys_write+0x10/0x10 [ 368.863558][T14430] __x64_sys_bpf+0xba/0xd0 [ 368.863580][T14430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.863598][T14430] do_syscall_64+0x174/0x580 [ 368.863620][T14430] ? trace_irq_disable+0x3b/0x140 [ 368.863640][T14430] ? clear_bhb_loop+0x40/0x90 [ 368.863659][T14430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.863674][T14430] RIP: 0033:0x7f8864f9de59 [ 368.863691][T14430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.863706][T14430] RSP: 002b:00007f8865f15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.863724][T14430] RAX: ffffffffffffffda RBX: 00007f8865225fa0 RCX: 00007f8864f9de59 [ 368.863744][T14430] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 368.863756][T14430] RBP: 00007f8865f15090 R08: 0000000000000000 R09: 0000000000000000 [ 368.863766][T14430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.863776][T14430] R13: 00007f8865226038 R14: 00007f8865225fa0 R15: 00007ffc5ec29238 [ 368.863800][T14430] [ 369.192349][T14434] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2509'. [ 369.434464][T14438] xt_hashlimit: size too large, truncated to 1048576 [ 369.484274][T14440] netlink: 'syz.7.2512': attribute type 1 has an invalid length. [ 369.500542][T14441] netlink: 'syz.6.2511': attribute type 11 has an invalid length. [ 369.546592][T14440] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2512'. [ 369.574391][ T5784] net_ratelimit: 33 callbacks suppressed [ 369.574443][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 369.610570][T14447] netlink: 'syz.0.2515': attribute type 3 has an invalid length. [ 369.625171][ T5784] bond4: (slave bridge5): failed to get link speed/duplex [ 369.762314][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 369.892967][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 369.938130][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 369.993593][ T5784] bond4: (slave bridge5): failed to get link speed/duplex [ 370.044746][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 370.108179][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 370.216566][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 370.330506][ T5633] Bluetooth: hci7: command 0x0405 tx timeout [ 370.362281][T14484] macvtap0: entered promiscuous mode [ 370.411440][T14496] FAULT_INJECTION: forcing a failure. [ 370.411440][T14496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.427795][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 370.481356][T14496] CPU: 0 UID: 0 PID: 14496 Comm: syz.0.2525 Not tainted syzkaller #0 PREEMPT(full) [ 370.481383][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.481394][T14496] Call Trace: [ 370.481401][T14496] [ 370.481410][T14496] dump_stack_lvl+0xe8/0x150 [ 370.481443][T14496] should_fail_ex+0x40c/0x560 [ 370.481470][T14496] _copy_from_user+0x2d/0xb0 [ 370.481497][T14496] ___sys_sendmsg+0x1c6/0x360 [ 370.481525][T14496] ? __lock_acquire+0x683/0x2cf0 [ 370.481555][T14496] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.481619][T14496] ? __fget_files+0x2a/0x420 [ 370.481642][T14496] ? __fget_files+0x3a2/0x420 [ 370.481685][T14496] __x64_sys_sendmsg+0x1b1/0x290 [ 370.481716][T14496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.481763][T14496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.481784][T14496] do_syscall_64+0x174/0x580 [ 370.481812][T14496] ? clear_bhb_loop+0x40/0x90 [ 370.481836][T14496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.481856][T14496] RIP: 0033:0x7ff7b879de59 [ 370.481873][T14496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.481890][T14496] RSP: 002b:00007ff7b9710028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.481910][T14496] RAX: ffffffffffffffda RBX: 00007ff7b8a25fa0 RCX: 00007ff7b879de59 [ 370.481924][T14496] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 370.481937][T14496] RBP: 00007ff7b9710090 R08: 0000000000000000 R09: 0000000000000000 [ 370.481948][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.481960][T14496] R13: 00007ff7b8a26038 R14: 00007ff7b8a25fa0 R15: 00007ffd766dc808 [ 370.481991][T14496] [ 370.889177][ T1723] block nbd1: Possible stuck request ffff888027810000: control (read@0,1024B). Runtime 270 seconds [ 370.903138][ T1723] block nbd1: Possible stuck request ffff8880278101c0: control (read@1024,1024B). Runtime 270 seconds [ 370.914644][ T1723] block nbd1: Possible stuck request ffff888027810380: control (read@2048,1024B). Runtime 270 seconds [ 370.925923][ T1723] block nbd1: Possible stuck request ffff888027810540: control (read@3072,1024B). Runtime 270 seconds [ 370.988037][T14513] netlink: 'syz.6.2532': attribute type 11 has an invalid length. [ 371.063194][T14522] __nla_validate_parse: 4 callbacks suppressed [ 371.063215][T14522] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2528'. [ 371.078351][T14522] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2528'. [ 371.087299][T14522] netlink: 'syz.5.2528': attribute type 5 has an invalid length. [ 371.095030][T14522] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2528'. [ 371.199764][T14528] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2535'. [ 371.566095][T14537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2539'. [ 371.580704][T14537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2539'. [ 371.603349][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2541'. [ 371.681111][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2541'. [ 372.338865][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2549'. [ 372.535364][T14574] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2550'. [ 373.056137][T14601] xt_hashlimit: size too large, truncated to 1048576 [ 373.107834][T14602] netlink: 'syz.2.2559': attribute type 11 has an invalid length. [ 373.278853][T14595] netlink: 'syz.7.2556': attribute type 2 has an invalid length. [ 373.329542][T14595] vlan0: entered promiscuous mode [ 374.284580][T14654] lo speed is unknown, defaulting to 1000 [ 374.610596][ T5622] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 374.652819][T14678] netlink: 'syz.0.2582': attribute type 1 has an invalid length. [ 374.688775][T14678] 8021q: adding VLAN 0 to HW filter on device bond10 [ 374.710905][T14678] bond10: (slave dummy0): making interface the new active one [ 374.720809][T14678] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 374.739716][T14678] : renamed from dummy0 (while UP) [ 374.927570][ T47] net_ratelimit: 57 callbacks suppressed [ 374.927592][ T47] bond3: (slave bridge2): failed to get link speed/duplex [ 374.983874][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 375.329833][ T47] bond4: (slave bridge5): failed to get link speed/duplex [ 375.337228][ T47] bond3: (slave bridge2): failed to get link speed/duplex [ 375.467398][T14711] netlink: 'syz.5.2592': attribute type 10 has an invalid length. [ 375.475720][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 375.475769][ T8233] bond4: (slave bridge5): failed to get link speed/duplex [ 375.553530][T14711] team0: Port device vlan0 added [ 375.632286][T14716] netlink: 'syz.5.2595': attribute type 1 has an invalid length. [ 375.749803][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 375.773057][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 375.879768][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 375.905149][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 376.194381][T14729] netlink: 'syz.0.2597': attribute type 9 has an invalid length. [ 376.484217][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 376.510536][T14735] netlink: 'syz.7.2599': attribute type 1 has an invalid length. [ 376.588813][T14740] __nla_validate_parse: 11 callbacks suppressed [ 376.588848][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2599'. [ 376.616727][T14730] netlink: 'syz.0.2597': attribute type 16 has an invalid length. [ 376.640653][T14730] netlink: 'syz.0.2597': attribute type 17 has an invalid length. [ 376.697428][T14730] bridge0: left allmulticast mode [ 376.753541][T14729] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.839313][T14729] tipc: Resetting bearer [ 376.845613][T14729] tipc: Resetting bearer [ 376.971488][T14735] bond1: entered promiscuous mode [ 376.982036][T14735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.023182][ T8233] tipc: Resetting bearer [ 377.229539][T14753] IPv6: Can't replace route, no match found [ 377.818862][T14769] netlink: 'syz.0.2609': attribute type 2 has an invalid length. [ 377.918910][T14772] gtp3: entered promiscuous mode [ 377.933251][T14772] gtp3: entered allmulticast mode [ 378.114453][T14781] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 378.193112][T14781] bond11: entered promiscuous mode [ 378.201205][T14781] 8021q: adding VLAN 0 to HW filter on device bond11 [ 378.271761][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 378.285107][T14781] 8021q: adding VLAN 0 to HW filter on device bond11 [ 378.311301][T14781] bond11: (slave gre1): The slave device specified does not support setting the MAC address [ 378.321515][T14781] bond11: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 378.337190][T14781] bond11: (slave gre1): making interface the new active one [ 378.344744][T14781] gre1: entered promiscuous mode [ 378.351051][T14781] bond11: (slave gre1): Enslaving as an active interface with an up link [ 378.430404][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.495665][T14792] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2615'. [ 378.520755][T14789] bond11 (unregistering): (slave gre1): Releasing backup interface [ 378.531821][T14789] gre1: left promiscuous mode [ 378.547870][T14789] bond11 (unregistering): Released all slaves [ 378.642450][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2615'. [ 378.666525][T14792] netlink: 'syz.6.2615': attribute type 5 has an invalid length. [ 378.917928][T14813] vlan2: entered allmulticast mode [ 378.923206][T14813] geneve0: entered allmulticast mode [ 378.939957][T14813] bridge0: port 3(vlan2) entered blocking state [ 378.946583][T14806] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2621'. [ 378.947249][T14813] bridge0: port 3(vlan2) entered disabled state [ 378.964563][T14813] vlan2: entered promiscuous mode [ 378.969752][T14813] geneve0: entered promiscuous mode [ 379.240237][T14822] kthread_run failed with err -4 [ 379.319664][T14827] xt_hashlimit: size too large, truncated to 1048576 [ 379.980677][T14856] lo speed is unknown, defaulting to 1000 [ 380.029780][ T8237] net_ratelimit: 48 callbacks suppressed [ 380.029799][ T8237] bond3: (slave bridge2): failed to get link speed/duplex [ 380.042613][ T8237] bond4: (slave bridge5): failed to get link speed/duplex [ 380.102420][T14866] Cannot find add_set index 2 as target [ 380.150792][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 380.194379][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 380.265478][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 380.281783][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'. [ 380.358963][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 380.370166][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 380.471670][ T8237] bond3: (slave bridge2): failed to get link speed/duplex [ 380.525188][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 380.613048][ T1122] bond3: (slave bridge2): failed to get link speed/duplex [ 380.664752][T14884] dvmrp0: entered promiscuous mode [ 381.303913][T14908] FAULT_INJECTION: forcing a failure. [ 381.303913][T14908] name failslab, interval 1, probability 0, space 0, times 0 [ 381.319298][T14908] CPU: 1 UID: 0 PID: 14908 Comm: syz.7.2653 Not tainted syzkaller #0 PREEMPT(full) [ 381.319322][T14908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.319333][T14908] Call Trace: [ 381.319341][T14908] [ 381.319348][T14908] dump_stack_lvl+0xe8/0x150 [ 381.319382][T14908] should_fail_ex+0x40c/0x560 [ 381.319409][T14908] should_failslab+0xa8/0x100 [ 381.319440][T14908] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 381.319464][T14908] ? dst_alloc+0x105/0x170 [ 381.319483][T14908] ? dst_alloc+0x105/0x170 [ 381.319503][T14908] ? fib_lookup+0x76/0x440 [ 381.319530][T14908] dst_alloc+0x105/0x170 [ 381.319555][T14908] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 381.319600][T14908] ? ip_route_output_key_hash+0xd8/0x2a0 [ 381.319628][T14908] ip_route_output_key_hash+0x18d/0x2a0 [ 381.319657][T14908] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 381.319685][T14908] ? call_rcu+0x64b/0x8b0 [ 381.319702][T14908] ? lockdep_hardirqs_on+0x7a/0x110 [ 381.319735][T14908] ip_route_output_flow+0x2a/0x150 [ 381.319757][T14908] ? security_sk_classify_flow+0x6d/0x150 [ 381.319785][T14908] tcp_v4_connect+0x7b4/0x1950 [ 381.319822][T14908] ? __pfx_tcp_v4_connect+0x10/0x10 [ 381.319850][T14908] mptcp_connect+0x4d3/0x7a0 [ 381.319884][T14908] __inet_stream_connect+0x258/0xe00 [ 381.319920][T14908] ? __pfx___inet_stream_connect+0x10/0x10 [ 381.319945][T14908] ? __kasan_kmalloc+0x93/0xb0 [ 381.319972][T14908] ? __kmalloc_cache_noprof+0x32d/0x660 [ 381.319995][T14908] ? __kmalloc_cache_noprof+0x150/0x660 [ 381.320018][T14908] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 381.320044][T14908] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 381.320077][T14908] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 381.320111][T14908] mptcp_sendmsg_fastopen+0x17b/0x540 [ 381.320136][T14908] mptcp_sendmsg+0x1a69/0x1d10 [ 381.320185][T14908] ? aa_sk_perm+0x6d5/0x900 [ 381.320218][T14908] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 381.320250][T14908] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.320280][T14908] ? inet_sendmsg+0x298/0x320 [ 381.320307][T14908] ? __pfx_inet_sendmsg+0x10/0x10 [ 381.320332][T14908] sock_sendmsg_nosec+0x10e/0x180 [ 381.320358][T14908] ____sys_sendmsg+0x54e/0x850 [ 381.320393][T14908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.320433][T14908] ? import_iovec+0x73/0xa0 [ 381.320464][T14908] ___sys_sendmsg+0x2a5/0x360 [ 381.320489][T14908] ? __lock_acquire+0x683/0x2cf0 [ 381.320518][T14908] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.320552][T14908] ? kstrtouint+0x6e/0xe0 [ 381.320606][T14908] ? __fget_files+0x2a/0x420 [ 381.320630][T14908] ? __fget_files+0x3a2/0x420 [ 381.320665][T14908] __sys_sendmmsg+0x273/0x4d0 [ 381.320698][T14908] ? __pfx___sys_sendmmsg+0x10/0x10 [ 381.320733][T14908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 381.320776][T14908] ? ksys_write+0x242/0x270 [ 381.320804][T14908] ? __pfx_ksys_write+0x10/0x10 [ 381.320837][T14908] __x64_sys_sendmmsg+0xa0/0xc0 [ 381.320865][T14908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.320885][T14908] do_syscall_64+0x174/0x580 [ 381.320910][T14908] ? trace_irq_disable+0x3b/0x140 [ 381.320933][T14908] ? clear_bhb_loop+0x40/0x90 [ 381.320956][T14908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.320975][T14908] RIP: 0033:0x7f016639de59 [ 381.320993][T14908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.321009][T14908] RSP: 002b:00007f01671c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 381.321029][T14908] RAX: ffffffffffffffda RBX: 00007f0166625fa0 RCX: 00007f016639de59 [ 381.321043][T14908] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000003 [ 381.321055][T14908] RBP: 00007f01671c1090 R08: 0000000000000000 R09: 0000000000000000 [ 381.321067][T14908] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 381.321079][T14908] R13: 00007f0166626038 R14: 00007f0166625fa0 R15: 00007ffdd3342068 [ 381.321111][T14908] [ 381.714880][T14899] bond0: (slave bond_slave_1): Releasing backup interface [ 382.054529][T14919] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2655'. [ 382.270735][T14923] team0: Device ipvlan2 failed to register rx_handler [ 382.966550][T14964] lo speed is unknown, defaulting to 1000 [ 383.070873][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 383.081634][T14973] netlink: 'syz.0.2668': attribute type 1 has an invalid length. [ 383.302979][T14981] Bluetooth: MGMT ver 1.23 [ 383.437531][T14987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.507222][T14987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.906994][T15004] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2676'. [ 384.276842][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 385.010637][T15027] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.627213][T15027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.727699][T15027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.742480][T15064] netlink: 'syz.2.2691': attribute type 1 has an invalid length. [ 385.908168][T15027] veth1_vlan: left allmulticast mode [ 386.203748][T15069] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2692'. [ 386.224227][T15064] 8021q: adding VLAN 0 to HW filter on device bond18 [ 386.249825][ T1122] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.339453][ T1122] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.374025][ T1122] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.393577][ T1122] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.441687][T15072] lo speed is unknown, defaulting to 1000 [ 386.463398][ T8233] net_ratelimit: 37 callbacks suppressed [ 386.463416][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 386.572566][ T8233] bond4: (slave bridge5): failed to get link speed/duplex [ 386.581844][ T1122] bond3: (slave bridge2): failed to get link speed/duplex [ 386.767405][T15081] bond19 (unregistering): Released all slaves [ 386.845196][ T8237] bond4: (slave bridge5): failed to get link speed/duplex [ 386.892435][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 387.134538][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 387.196110][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 387.276819][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 387.597519][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 387.604737][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 387.630670][T15114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2706'. [ 387.752804][T15120] batadv_slave_1: entered promiscuous mode [ 387.900229][T15119] batadv_slave_1: left promiscuous mode [ 387.906398][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2712'. [ 387.965227][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2712'. [ 388.059269][T15133] FAULT_INJECTION: forcing a failure. [ 388.059269][T15133] name failslab, interval 1, probability 0, space 0, times 0 [ 388.072314][T15133] CPU: 0 UID: 0 PID: 15133 Comm: syz.2.2714 Not tainted syzkaller #0 PREEMPT(full) [ 388.072338][T15133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.072349][T15133] Call Trace: [ 388.072357][T15133] [ 388.072363][T15133] dump_stack_lvl+0xe8/0x150 [ 388.072394][T15133] should_fail_ex+0x40c/0x560 [ 388.072418][T15133] should_failslab+0xa8/0x100 [ 388.072445][T15133] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 388.072482][T15133] ? tcp_fastopen_cache_get+0x2f/0x4c0 [ 388.072499][T15133] ? __alloc_skb+0x1d7/0x7a0 [ 388.072520][T15133] ? __alloc_skb+0x1d7/0x7a0 [ 388.072551][T15133] __alloc_skb+0x1d7/0x7a0 [ 388.072581][T15133] tcp_stream_alloc_skb+0x3f/0x580 [ 388.072609][T15133] ? skb_page_frag_refill+0x119/0x460 [ 388.072632][T15133] tcp_connect+0x24d4/0x53e0 [ 388.072691][T15133] ? __pfx_tcp_connect+0x10/0x10 [ 388.072731][T15133] ? __asan_memset+0x22/0x50 [ 388.072757][T15133] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 388.072777][T15133] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 388.072812][T15133] ? sk_setup_caps+0x94f/0xbc0 [ 388.072851][T15133] ? sk_setup_caps+0x29/0xbc0 [ 388.072881][T15133] tcp_v4_connect+0x1051/0x1950 [ 388.072916][T15133] ? __pfx_tcp_v4_connect+0x10/0x10 [ 388.072946][T15133] mptcp_connect+0x4d3/0x7a0 [ 388.072978][T15133] __inet_stream_connect+0x258/0xe00 [ 388.073018][T15133] ? __pfx___inet_stream_connect+0x10/0x10 [ 388.073042][T15133] ? __kasan_kmalloc+0x93/0xb0 [ 388.073069][T15133] ? __kmalloc_cache_noprof+0x32d/0x660 [ 388.073092][T15133] ? __kmalloc_cache_noprof+0x150/0x660 [ 388.073120][T15133] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 388.073147][T15133] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 388.073182][T15133] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 388.073216][T15133] mptcp_sendmsg_fastopen+0x17b/0x540 [ 388.073243][T15133] mptcp_sendmsg+0x1a69/0x1d10 [ 388.073295][T15133] ? aa_sk_perm+0x6d5/0x900 [ 388.073330][T15133] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 388.073357][T15133] ? __pfx_aa_sk_perm+0x10/0x10 [ 388.073388][T15133] ? inet_sendmsg+0x298/0x320 [ 388.073416][T15133] ? __pfx_inet_sendmsg+0x10/0x10 [ 388.073440][T15133] sock_sendmsg_nosec+0x10e/0x180 [ 388.073466][T15133] ____sys_sendmsg+0x54e/0x850 [ 388.073508][T15133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.073546][T15133] ? import_iovec+0x73/0xa0 [ 388.073577][T15133] ___sys_sendmsg+0x2a5/0x360 [ 388.073604][T15133] ? __lock_acquire+0x683/0x2cf0 [ 388.073634][T15133] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.073668][T15133] ? kstrtouint+0x6e/0xe0 [ 388.073718][T15133] ? __fget_files+0x2a/0x420 [ 388.073742][T15133] ? __fget_files+0x3a2/0x420 [ 388.073777][T15133] __sys_sendmmsg+0x273/0x4d0 [ 388.073812][T15133] ? __pfx___sys_sendmmsg+0x10/0x10 [ 388.073850][T15133] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 388.073893][T15133] ? ksys_write+0x242/0x270 [ 388.073923][T15133] ? __pfx_ksys_write+0x10/0x10 [ 388.073953][T15133] __x64_sys_sendmmsg+0xa0/0xc0 [ 388.073980][T15133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.073999][T15133] do_syscall_64+0x174/0x580 [ 388.074025][T15133] ? trace_irq_disable+0x3b/0x140 [ 388.074048][T15133] ? clear_bhb_loop+0x40/0x90 [ 388.074071][T15133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.074087][T15133] RIP: 0033:0x7f234a99de59 [ 388.074104][T15133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.074119][T15133] RSP: 002b:00007f234b7a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 388.074138][T15133] RAX: ffffffffffffffda RBX: 00007f234ac25fa0 RCX: 00007f234a99de59 [ 388.074151][T15133] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000003 [ 388.074162][T15133] RBP: 00007f234b7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 388.074173][T15133] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000002 [ 388.074185][T15133] R13: 00007f234ac26038 R14: 00007f234ac25fa0 R15: 00007ffd0a016ca8 [ 388.074215][T15133] [ 388.606406][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2718'. [ 388.706811][T15154] netlink: 'syz.7.2719': attribute type 1 has an invalid length. [ 388.790159][T15154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.853491][T15162] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 388.866403][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2722'. [ 388.992306][T15168] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2724'. [ 389.194982][ T5633] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 389.227157][ T5633] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 389.235685][ T5633] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 389.246211][ T5633] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 389.253878][ T5633] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 389.376542][T15183] netlink: 'syz.7.2728': attribute type 1 has an invalid length. [ 389.520336][T15189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2729'. [ 389.831050][T15207] netlink: 'syz.2.2734': attribute type 1 has an invalid length. [ 389.963057][T15207] 8021q: adding VLAN 0 to HW filter on device bond19 [ 389.977520][T15192] lo speed is unknown, defaulting to 1000 [ 390.059117][T15207] syzkaller0: entered promiscuous mode [ 390.074290][T15207] syzkaller0: entered allmulticast mode [ 390.397562][T15217] netlink: 280 bytes leftover after parsing attributes in process `syz.5.2738'. [ 390.420321][T15172] lo speed is unknown, defaulting to 1000 [ 391.060010][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2744'. [ 391.080259][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2743'. [ 391.342912][ T5633] Bluetooth: hci8: command tx timeout [ 391.386800][T15260] FAULT_INJECTION: forcing a failure. [ 391.386800][T15260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.416217][T15260] CPU: 1 UID: 0 PID: 15260 Comm: syz.5.2746 Not tainted syzkaller #0 PREEMPT(full) [ 391.416240][T15260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.416249][T15260] Call Trace: [ 391.416255][T15260] [ 391.416261][T15260] dump_stack_lvl+0xe8/0x150 [ 391.416286][T15260] should_fail_ex+0x40c/0x560 [ 391.416306][T15260] _copy_from_iter+0x1d3/0x1660 [ 391.416323][T15260] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 391.416352][T15260] ? rcu_is_watching+0x15/0xb0 [ 391.416374][T15260] ? trace_kmem_cache_alloc+0x29/0xe0 [ 391.416391][T15260] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 391.416407][T15260] ? __pfx__copy_from_iter+0x10/0x10 [ 391.416423][T15260] ? __alloc_skb+0x276/0x7a0 [ 391.416440][T15260] ? __alloc_skb+0x276/0x7a0 [ 391.416463][T15260] ? netlink_sendmsg+0x650/0xb40 [ 391.416477][T15260] ? skb_put+0x112/0x210 [ 391.416499][T15260] netlink_sendmsg+0x6c0/0xb40 [ 391.416521][T15260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.416539][T15260] ? aa_sock_msg_perm+0xf1/0x1b0 [ 391.416557][T15260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.416570][T15260] sock_sendmsg_nosec+0x13a/0x180 [ 391.416593][T15260] ____sys_sendmsg+0x54e/0x850 [ 391.416621][T15260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.416647][T15260] ? import_iovec+0x73/0xa0 [ 391.416668][T15260] ___sys_sendmsg+0x2a5/0x360 [ 391.416687][T15260] ? __lock_acquire+0x683/0x2cf0 [ 391.416708][T15260] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.416753][T15260] ? __fget_files+0x2a/0x420 [ 391.416771][T15260] ? __fget_files+0x3a2/0x420 [ 391.416795][T15260] __x64_sys_sendmsg+0x1b1/0x290 [ 391.416819][T15260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.416854][T15260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.416871][T15260] do_syscall_64+0x174/0x580 [ 391.416891][T15260] ? trace_irq_disable+0x3b/0x140 [ 391.416909][T15260] ? clear_bhb_loop+0x40/0x90 [ 391.416927][T15260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.416940][T15260] RIP: 0033:0x7f1a58f9de59 [ 391.416955][T15260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.416969][T15260] RSP: 002b:00007f1a59eaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.416985][T15260] RAX: ffffffffffffffda RBX: 00007f1a59226090 RCX: 00007f1a58f9de59 [ 391.416996][T15260] RDX: 0000000024000800 RSI: 0000200000000140 RDI: 0000000000000004 [ 391.417005][T15260] RBP: 00007f1a59eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 391.417014][T15260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.417022][T15260] R13: 00007f1a59226128 R14: 00007f1a59226090 R15: 00007ffe1f2a3af8 [ 391.417045][T15260] [ 391.701782][ T8237] net_ratelimit: 31 callbacks suppressed [ 391.701802][ T8237] bond3: (slave bridge2): failed to get link speed/duplex [ 391.795828][ T1122] bond4: (slave bridge5): failed to get link speed/duplex [ 391.803462][ T1122] bond3: (slave bridge2): failed to get link speed/duplex [ 391.825765][T15241] openvswitch: netlink: Missing key (keys=40, expected=100) [ 392.129301][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 392.136504][ T8233] bond4: (slave bridge5): failed to get link speed/duplex [ 392.230084][ T8233] bond4: (slave bridge5): failed to get link speed/duplex [ 392.237293][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 392.346194][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 392.353377][ T5784] bond4: (slave bridge5): failed to get link speed/duplex [ 392.413176][T15293] FAULT_INJECTION: forcing a failure. [ 392.413176][T15293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.458418][T15293] CPU: 1 UID: 0 PID: 15293 Comm: syz.2.2752 Not tainted syzkaller #0 PREEMPT(full) [ 392.458446][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.458456][T15293] Call Trace: [ 392.458464][T15293] [ 392.458471][T15293] dump_stack_lvl+0xe8/0x150 [ 392.458504][T15293] should_fail_ex+0x40c/0x560 [ 392.458531][T15293] _copy_from_user+0x2d/0xb0 [ 392.458560][T15293] bpf_test_init+0xd8/0x150 [ 392.458600][T15293] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 392.458632][T15293] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 392.458659][T15293] ? __fget_files+0x2a/0x420 [ 392.458684][T15293] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 392.458704][T15293] bpf_prog_test_run+0x2c5/0x340 [ 392.458733][T15293] __sys_bpf+0xa22/0xd90 [ 392.458765][T15293] ? __pfx___sys_bpf+0x10/0x10 [ 392.458799][T15293] ? __fget_files+0x2a/0x420 [ 392.458837][T15293] ? ksys_write+0x242/0x270 [ 392.458866][T15293] ? __pfx_ksys_write+0x10/0x10 [ 392.458897][T15293] __x64_sys_bpf+0xba/0xd0 [ 392.458920][T15293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.458939][T15293] do_syscall_64+0x174/0x580 [ 392.458965][T15293] ? trace_irq_disable+0x3b/0x140 [ 392.458988][T15293] ? clear_bhb_loop+0x40/0x90 [ 392.459011][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.459030][T15293] RIP: 0033:0x7f234a99de59 [ 392.459047][T15293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.459062][T15293] RSP: 002b:00007f234b7a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.459080][T15293] RAX: ffffffffffffffda RBX: 00007f234ac25fa0 RCX: 00007f234a99de59 [ 392.459091][T15293] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 392.459103][T15293] RBP: 00007f234b7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 392.459114][T15293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.459125][T15293] R13: 00007f234ac26038 R14: 00007f234ac25fa0 R15: 00007ffd0a016ca8 [ 392.459154][T15293] [ 392.890242][T15172] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.897535][T15172] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.905142][T15172] bridge_slave_0: entered allmulticast mode [ 392.955416][T15172] bridge_slave_0: entered promiscuous mode [ 392.964497][T15172] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.972118][T15172] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.979525][T15172] bridge_slave_1: entered allmulticast mode [ 392.987500][T15172] bridge_slave_1: entered promiscuous mode [ 393.007844][T15312] FAULT_INJECTION: forcing a failure. [ 393.007844][T15312] name failslab, interval 1, probability 0, space 0, times 0 [ 393.024740][T15172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.037865][T15172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.056274][T15312] CPU: 1 UID: 0 PID: 15312 Comm: syz.6.2758 Not tainted syzkaller #0 PREEMPT(full) [ 393.056299][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.056310][T15312] Call Trace: [ 393.056317][T15312] [ 393.056324][T15312] dump_stack_lvl+0xe8/0x150 [ 393.056357][T15312] should_fail_ex+0x40c/0x560 [ 393.056384][T15312] should_failslab+0xa8/0x100 [ 393.056414][T15312] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 393.056436][T15312] ? local_lock_release+0x9c/0x160 [ 393.056461][T15312] ? __alloc_skb+0x1d7/0x7a0 [ 393.056485][T15312] ? __alloc_skb+0x1d7/0x7a0 [ 393.056516][T15312] __alloc_skb+0x1d7/0x7a0 [ 393.056545][T15312] netlink_ack+0x136/0xb30 [ 393.056571][T15312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.056610][T15312] netlink_rcv_skb+0x2a4/0x4a0 [ 393.056640][T15312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.056664][T15312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.056705][T15312] ? down_read+0x2be/0x330 [ 393.056729][T15312] genl_rcv+0x28/0x40 [ 393.056758][T15312] netlink_unicast+0x7bb/0x940 [ 393.056796][T15312] netlink_sendmsg+0x813/0xb40 [ 393.056825][T15312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.056848][T15312] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.056873][T15312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.056891][T15312] sock_sendmsg_nosec+0x13a/0x180 [ 393.056914][T15312] ____sys_sendmsg+0x54e/0x850 [ 393.056947][T15312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.056984][T15312] ? import_iovec+0x73/0xa0 [ 393.057012][T15312] ___sys_sendmsg+0x2a5/0x360 [ 393.057038][T15312] ? __lock_acquire+0x683/0x2cf0 [ 393.057067][T15312] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.057128][T15312] ? __fget_files+0x2a/0x420 [ 393.057152][T15312] ? __fget_files+0x3a2/0x420 [ 393.057185][T15312] __x64_sys_sendmsg+0x1b1/0x290 [ 393.057214][T15312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.057258][T15312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.057278][T15312] do_syscall_64+0x174/0x580 [ 393.057304][T15312] ? clear_bhb_loop+0x40/0x90 [ 393.057326][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.057344][T15312] RIP: 0033:0x7f8864f9de59 [ 393.057362][T15312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.057379][T15312] RSP: 002b:00007f8865ef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.057397][T15312] RAX: ffffffffffffffda RBX: 00007f8865226090 RCX: 00007f8864f9de59 [ 393.057410][T15312] RDX: 0000000024000800 RSI: 0000200000000140 RDI: 0000000000000004 [ 393.057421][T15312] RBP: 00007f8865ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 393.057431][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.057441][T15312] R13: 00007f8865226128 R14: 00007f8865226090 R15: 00007ffc5ec29238 [ 393.057471][T15312] [ 393.387482][T15172] team0: Port device team_slave_0 added [ 393.396845][ T5633] Bluetooth: hci8: command tx timeout [ 393.397112][T15172] team0: Port device team_slave_1 added [ 393.436409][T15172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.443402][T15172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.469915][T15172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.482472][T15172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.489696][T15172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.516147][T15172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.616704][T15172] hsr_slave_0: entered promiscuous mode [ 393.623410][T15172] hsr_slave_1: entered promiscuous mode [ 393.629813][T15172] debugfs: 'hsr0' already exists in 'hsr' [ 393.635989][T15172] Cannot create hsr debugfs directory [ 394.081634][T15319] erspan0: entered promiscuous mode [ 394.088404][T15319] erspan0: entered allmulticast mode [ 395.242557][T15172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.268825][T15172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.410479][T15360] __nla_validate_parse: 1 callbacks suppressed [ 395.410499][T15360] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2767'. [ 395.433472][T15172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.443891][T15172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.490021][ T5633] Bluetooth: hci8: command tx timeout [ 395.637819][T15172] team0: Port device netdevsim1 removed [ 395.647782][T15172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.675107][T15172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.956328][T15331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.060417][T15172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.074044][T15172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.090966][T15172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.125053][T15172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.185720][T15172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.211212][T15172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.219459][T15172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.234125][T15172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.452057][T15392] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2777'. [ 396.511555][T15172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.568890][T15172] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.603069][T15390] syzkaller0: entered promiscuous mode [ 396.608584][T15390] syzkaller0: entered allmulticast mode [ 396.689176][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.696412][ T8231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.760587][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.767917][ T8231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.024937][ T8231] net_ratelimit: 22 callbacks suppressed [ 397.024958][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 397.149854][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2782'. [ 397.212670][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2781'. [ 397.244604][ T8233] bond4: (slave bridge5): failed to get link speed/duplex [ 397.306468][ T8237] bond3: (slave bridge2): failed to get link speed/duplex [ 397.369525][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 397.416526][ T8237] bond3: (slave bridge2): failed to get link speed/duplex [ 397.525339][ T8233] bond4: (slave bridge5): failed to get link speed/duplex [ 397.579206][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 397.598543][ T5633] Bluetooth: hci8: command tx timeout [ 397.690650][ T57] bond4: (slave bridge5): failed to get link speed/duplex [ 397.812135][ T57] bond3: (slave bridge2): failed to get link speed/duplex [ 397.839978][T15452] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2787'. [ 397.916382][ T5784] bond4: (slave bridge5): failed to get link speed/duplex [ 398.007298][T15172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.168075][T15172] veth0_vlan: entered promiscuous mode [ 398.306432][T15172] veth1_vlan: entered promiscuous mode [ 398.350596][T15172] veth0_macvtap: entered promiscuous mode [ 398.363624][T15172] veth1_macvtap: entered promiscuous mode [ 398.402859][T15172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.448887][T15172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.492471][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.501330][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.541804][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.551171][T15467] netlink: 'syz.7.2792': attribute type 1 has an invalid length. [ 398.557048][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.643063][T15471] bond3: (slave geneve2): making interface the new active one [ 398.651582][T15471] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 398.663328][ T57] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 398.696675][ T57] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 398.713398][T15467] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2792'. [ 398.730085][T15467] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.738217][ T57] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 398.870562][ T57] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 399.085664][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'. [ 399.132741][T15487] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2797'. [ 399.191011][ T5784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.206524][ T5784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.383775][ T5784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.402975][ T5784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.426294][T15495] netlink: 'syz.5.2799': attribute type 13 has an invalid length. [ 399.445615][T15495] netlink: 'syz.5.2799': attribute type 12 has an invalid length. [ 399.884506][T15517] lo speed is unknown, defaulting to 1000 [ 399.911498][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2802'. [ 399.927557][T15516] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2802'. [ 399.941958][T15507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.247529][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 400.549673][T15537] netlink: 'syz.6.2809': attribute type 1 has an invalid length. [ 400.570176][T15537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.629792][T15537] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 400.884567][T15537] macvlan2: entered promiscuous mode [ 400.890595][T15537] macvlan2: entered allmulticast mode [ 400.896855][T15537] bond2: entered promiscuous mode [ 400.950427][T15537] veth0_to_bond: entered promiscuous mode [ 400.962655][T15537] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 400.987635][T15542] netlink: 'syz.7.2810': attribute type 11 has an invalid length. [ 401.005709][T15559] netlink: 'syz.2.2815': attribute type 13 has an invalid length. [ 401.012708][T15537] bond2: left promiscuous mode [ 401.036882][T15537] veth0_to_bond: left promiscuous mode [ 401.060098][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020746800: rx timeout, send abort [ 401.106237][T15562] __nla_validate_parse: 2 callbacks suppressed [ 401.106257][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2816'. [ 401.159869][T15564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2815'. [ 401.331511][T15564] bond0: (slave bond_slave_0): Releasing backup interface [ 401.470352][T15575] netlink: 300 bytes leftover after parsing attributes in process `syz.7.2817'. [ 401.514400][ T1723] block nbd1: Possible stuck request ffff888027810000: control (read@0,1024B). Runtime 300 seconds [ 401.528444][ T1723] block nbd1: Possible stuck request ffff8880278101c0: control (read@1024,1024B). Runtime 300 seconds [ 401.540276][ T1723] block nbd1: Possible stuck request ffff888027810380: control (read@2048,1024B). Runtime 300 seconds [ 401.551828][ T1723] block nbd1: Possible stuck request ffff888027810540: control (read@3072,1024B). Runtime 300 seconds [ 401.562935][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020746400: rx timeout, send abort [ 401.571681][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020746800: abort rx timeout. Force session deactivation [ 401.762129][T15564] bond_slave_0: entered promiscuous mode [ 401.769048][T15564] bond_slave_0: entered allmulticast mode [ 401.836386][T15572] veth5: entered allmulticast mode [ 401.868563][T15580] tipc: Enabled bearer , priority 0 [ 402.063033][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020746400: abort rx timeout. Force session deactivation [ 402.132167][ T8233] net_ratelimit: 30 callbacks suppressed [ 402.132189][ T8233] bond4: (slave bridge5): link status up again after 0 ms [ 402.146791][ T12] bond3: (slave bridge2): link status up again after 0 ms [ 402.186038][ T12] bond4: (slave bridge5): link status up again after 0 ms [ 402.194944][ T8233] bond3: (slave bridge2): link status up again after 0 ms [ 402.235410][ T8226] bond3: (slave bridge2): link status up again after 0 ms [ 402.242793][ T8226] bond4: (slave bridge5): link status up again after 0 ms [ 402.295514][ T8226] bond4: (slave bridge5): link status up again after 0 ms [ 402.302805][ T12] bond3: (slave bridge2): link status up again after 0 ms [ 402.350504][ T8226] bond4: (slave bridge5): link status up again after 0 ms [ 402.358413][ T12] bond3: (slave bridge2): link status up again after 0 ms [ 402.385208][T15584] syzkaller0: entered promiscuous mode [ 402.415505][T15584] syzkaller0: entered allmulticast mode [ 402.435656][T15584] tipc: Resetting bearer [ 402.540242][ T8231] tipc: Resetting bearer [ 402.554212][T15596] lo: Caught tx_queue_len zero misconfig [ 402.599056][T15568] tipc: Resetting bearer [ 403.131302][T15628] IPVS: set_ctl: invalid protocol: 92 172.30.1.8:20002 [ 403.386612][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2838'. [ 406.325792][T15568] tipc: Disabling bearer [ 406.338792][ T5748] tipc: Node number set to 3063226373 [ 406.667585][T15663] netlink: 'syz.5.2844': attribute type 21 has an invalid length. [ 406.675501][T15663] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2844'. [ 406.842920][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2845'. [ 407.183580][ T8233] net_ratelimit: 219 callbacks suppressed [ 407.183599][ T8233] bond4: (slave bridge5): failed to get link speed/duplex [ 407.293140][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 407.325068][ T8233] bond4: (slave bridge5): failed to get link speed/duplex [ 407.393039][ T47] bond3: (slave bridge2): failed to get link speed/duplex [ 407.436091][ T47] bond4: (slave bridge5): failed to get link speed/duplex [ 407.505879][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 407.615891][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 407.874764][T15727] netlink: 'syz.2.2859': attribute type 21 has an invalid length. [ 408.264800][ T5784] bond4: (slave bridge5): failed to get link speed/duplex [ 408.327003][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 408.390788][ T1122] bond4: (slave bridge5): failed to get link speed/duplex [ 408.541132][T15756] syzkaller0: entered promiscuous mode [ 408.546891][T15756] syzkaller0: entered allmulticast mode [ 409.005198][T15771] netlink: 'syz.7.2870': attribute type 1 has an invalid length. [ 409.020480][T15771] netlink: 'syz.7.2870': attribute type 3 has an invalid length. [ 409.039781][T15771] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2870'. [ 409.122733][T15773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.301344][T15780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.936760][T15780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.065010][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2882'. [ 410.310498][T15821] FAULT_INJECTION: forcing a failure. [ 410.310498][T15821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.325304][T15821] CPU: 1 UID: 0 PID: 15821 Comm: syz.5.2885 Not tainted syzkaller #0 PREEMPT(full) [ 410.325333][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.325344][T15821] Call Trace: [ 410.325351][T15821] [ 410.325359][T15821] dump_stack_lvl+0xe8/0x150 [ 410.325395][T15821] should_fail_ex+0x40c/0x560 [ 410.325423][T15821] _copy_from_user+0x2d/0xb0 [ 410.325452][T15821] do_sys_poll+0x258/0x1110 [ 410.325482][T15821] ? __lock_acquire+0x683/0x2cf0 [ 410.325513][T15821] ? __pfx_do_sys_poll+0x10/0x10 [ 410.325536][T15821] ? aa_file_perm+0x18b/0x15f0 [ 410.325636][T15821] ? ktime_get_ts64+0xa9/0x410 [ 410.325686][T15821] ? __pfx_timespec64_add_safe+0x10/0x10 [ 410.325724][T15821] __x64_sys_poll+0x190/0x360 [ 410.325748][T15821] ? __pfx___x64_sys_poll+0x10/0x10 [ 410.325779][T15821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.325800][T15821] do_syscall_64+0x174/0x580 [ 410.325826][T15821] ? trace_irq_disable+0x3b/0x140 [ 410.325850][T15821] ? clear_bhb_loop+0x40/0x90 [ 410.325873][T15821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.325892][T15821] RIP: 0033:0x7f1a58f9de59 [ 410.325911][T15821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.325927][T15821] RSP: 002b:00007f1a59ed0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 410.325948][T15821] RAX: ffffffffffffffda RBX: 00007f1a59225fa0 RCX: 00007f1a58f9de59 [ 410.325962][T15821] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 410.325975][T15821] RBP: 00007f1a59ed0090 R08: 0000000000000000 R09: 0000000000000000 [ 410.325986][T15821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.325998][T15821] R13: 00007f1a59226038 R14: 00007f1a59225fa0 R15: 00007ffe1f2a3af8 [ 410.326028][T15821] [ 410.871521][T15843] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2895'. [ 410.991759][T15853] netlink: 'syz.0.2897': attribute type 1 has an invalid length. [ 411.277424][T15859] syzkaller0: entered promiscuous mode [ 411.283256][T15859] syzkaller0: entered allmulticast mode [ 411.365802][T15862] FAULT_INJECTION: forcing a failure. [ 411.365802][T15862] name failslab, interval 1, probability 0, space 0, times 0 [ 411.391992][T15862] CPU: 1 UID: 0 PID: 15862 Comm: syz.5.2900 Not tainted syzkaller #0 PREEMPT(full) [ 411.392024][T15862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.392035][T15862] Call Trace: [ 411.392043][T15862] [ 411.392052][T15862] dump_stack_lvl+0xe8/0x150 [ 411.392085][T15862] should_fail_ex+0x40c/0x560 [ 411.392113][T15862] should_failslab+0xa8/0x100 [ 411.392141][T15862] __kmalloc_cache_noprof+0xa8/0x660 [ 411.392168][T15862] ? __pollwait+0x27f/0x430 [ 411.392188][T15862] ? __pollwait+0x27f/0x430 [ 411.392207][T15862] ? __fget_files+0x2a/0x420 [ 411.392235][T15862] __pollwait+0x27f/0x430 [ 411.392256][T15862] ? __pfx___pollwait+0x10/0x10 [ 411.392277][T15862] pipe_poll+0x17b/0x4b0 [ 411.392298][T15862] ? __pfx_pipe_poll+0x10/0x10 [ 411.392317][T15862] do_sys_poll+0x990/0x1110 [ 411.392354][T15862] ? __pfx_do_sys_poll+0x10/0x10 [ 411.392384][T15862] ? __pfx___pollwait+0x10/0x10 [ 411.392409][T15862] ? __pfx_pollwake+0x10/0x10 [ 411.392433][T15862] ? __pfx_pollwake+0x10/0x10 [ 411.392458][T15862] ? __pfx_pollwake+0x10/0x10 [ 411.392483][T15862] ? __pfx_pollwake+0x10/0x10 [ 411.392508][T15862] ? __pfx_pollwake+0x10/0x10 [ 411.392533][T15862] ? __pfx_pollwake+0x10/0x10 [ 411.392557][T15862] ? __pfx_pollwake+0x10/0x10 [ 411.392583][T15862] ? __pfx_pollwake+0x10/0x10 [ 411.392608][T15862] ? __pfx_pollwake+0x10/0x10 [ 411.392640][T15862] ? ktime_get_ts64+0xa9/0x410 [ 411.392689][T15862] ? __pfx_timespec64_add_safe+0x10/0x10 [ 411.392726][T15862] __x64_sys_poll+0x190/0x360 [ 411.392751][T15862] ? __pfx___x64_sys_poll+0x10/0x10 [ 411.392781][T15862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.392802][T15862] do_syscall_64+0x174/0x580 [ 411.392829][T15862] ? trace_irq_disable+0x3b/0x140 [ 411.392852][T15862] ? clear_bhb_loop+0x40/0x90 [ 411.392875][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.392894][T15862] RIP: 0033:0x7f1a58f9de59 [ 411.392912][T15862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.392929][T15862] RSP: 002b:00007f1a59eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 411.392957][T15862] RAX: ffffffffffffffda RBX: 00007f1a59226090 RCX: 00007f1a58f9de59 [ 411.392971][T15862] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 411.392984][T15862] RBP: 00007f1a59eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 411.392995][T15862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.393006][T15862] R13: 00007f1a59226128 R14: 00007f1a59226090 R15: 00007ffe1f2a3af8 [ 411.393036][T15862] [ 412.200299][ T8231] net_ratelimit: 49 callbacks suppressed [ 412.200321][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 412.427111][ T1122] bond3: (slave bridge2): failed to get link speed/duplex [ 412.440614][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 412.536698][ T1122] bond4: (slave bridge5): failed to get link speed/duplex [ 412.548734][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 412.598655][T15896] syz.5.2914 (15896) used obsolete PPPIOCDETACH ioctl [ 412.644664][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2915'. [ 412.683299][T15901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2913'. [ 412.709617][T15901] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2913'. [ 412.718695][T15901] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 412.726536][T15901] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 412.735175][T15901] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 412.786885][T15901] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 412.797794][T15901] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 412.806358][T15901] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2913'. [ 412.815482][ T8226] bond3: (slave bridge2): failed to get link speed/duplex [ 412.815527][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 412.924758][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 412.984046][ T8233] bond3: (slave bridge2): failed to get link speed/duplex [ 413.034795][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 413.062909][T15912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2919'. [ 413.172928][T15918] netlink: 'syz.6.2921': attribute type 23 has an invalid length. [ 413.506688][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.570648][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.585330][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'. [ 413.594524][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.603295][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.611914][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.667167][T15940] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 413.674284][T15940] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 413.897201][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2930'. [ 413.915210][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2930'. [ 414.192239][T15964] FAULT_INJECTION: forcing a failure. [ 414.192239][T15964] name failslab, interval 1, probability 0, space 0, times 0 [ 414.204886][T15964] CPU: 0 UID: 0 PID: 15964 Comm: syz.6.2932 Not tainted syzkaller #0 PREEMPT(full) [ 414.204913][T15964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.204924][T15964] Call Trace: [ 414.204931][T15964] [ 414.204938][T15964] dump_stack_lvl+0xe8/0x150 [ 414.204971][T15964] should_fail_ex+0x40c/0x560 [ 414.204995][T15964] should_failslab+0xa8/0x100 [ 414.205020][T15964] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 414.205044][T15964] ? alloc_inode+0xb8/0x1b0 [ 414.205061][T15964] ? alloc_inode+0xb8/0x1b0 [ 414.205087][T15964] alloc_inode+0xb8/0x1b0 [ 414.205110][T15964] path_from_stashed+0x205/0x580 [ 414.205139][T15964] ? bpf_map_offload_info_fill_ns+0x183/0x1f0 [ 414.205165][T15964] bpf_map_offload_info_fill+0xb8/0x280 [ 414.205184][T15964] ? __pfx_bpf_map_offload_info_fill+0x10/0x10 [ 414.205209][T15964] ? bpf_obj_get_info_by_fd+0xbcc/0x3340 [ 414.205239][T15964] bpf_obj_get_info_by_fd+0x10dc/0x3340 [ 414.205274][T15964] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 414.205301][T15964] ? __lock_acquire+0x683/0x2cf0 [ 414.205342][T15964] ? kstrtouint+0x6e/0xe0 [ 414.205365][T15964] ? __might_fault+0xaf/0x130 [ 414.205385][T15964] ? __might_fault+0xaf/0x130 [ 414.205419][T15964] ? bpf_lsm_bpf+0x9/0x20 [ 414.205438][T15964] ? security_bpf+0x7e/0x2d0 [ 414.205469][T15964] __sys_bpf+0xa50/0xd90 [ 414.205501][T15964] ? __pfx___sys_bpf+0x10/0x10 [ 414.205531][T15964] ? __fget_files+0x2a/0x420 [ 414.205570][T15964] ? ksys_write+0x242/0x270 [ 414.205601][T15964] ? __pfx_ksys_write+0x10/0x10 [ 414.205633][T15964] __x64_sys_bpf+0xba/0xd0 [ 414.205665][T15964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.205686][T15964] do_syscall_64+0x174/0x580 [ 414.205713][T15964] ? trace_irq_disable+0x3b/0x140 [ 414.205736][T15964] ? clear_bhb_loop+0x40/0x90 [ 414.205759][T15964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.205777][T15964] RIP: 0033:0x7f8864f9de59 [ 414.205796][T15964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.205811][T15964] RSP: 002b:00007f8865f15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.205829][T15964] RAX: ffffffffffffffda RBX: 00007f8865225fa0 RCX: 00007f8864f9de59 [ 414.205840][T15964] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000f [ 414.205851][T15964] RBP: 00007f8865f15090 R08: 0000000000000000 R09: 0000000000000000 [ 414.205860][T15964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.205869][T15964] R13: 00007f8865226038 R14: 00007f8865225fa0 R15: 00007ffc5ec29238 [ 414.205895][T15964] [ 414.210584][T15965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2933'. [ 414.595619][T15969] netlink: 'syz.0.2933': attribute type 10 has an invalid length. [ 414.603016][T15965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.616935][T15969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2933'. [ 414.642121][T15969] dummy0: entered promiscuous mode [ 414.779424][T15981] netlink: 'syz.0.2939': attribute type 1 has an invalid length. [ 414.827404][T15937] lo speed is unknown, defaulting to 1000 [ 415.037203][T15996] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 415.276688][T16010] FAULT_INJECTION: forcing a failure. [ 415.276688][T16010] name failslab, interval 1, probability 0, space 0, times 0 [ 415.342908][T16010] CPU: 1 UID: 0 PID: 16010 Comm: syz.7.2945 Not tainted syzkaller #0 PREEMPT(full) [ 415.342935][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.342947][T16010] Call Trace: [ 415.342955][T16010] [ 415.342963][T16010] dump_stack_lvl+0xe8/0x150 [ 415.342996][T16010] should_fail_ex+0x40c/0x560 [ 415.343023][T16010] should_failslab+0xa8/0x100 [ 415.343052][T16010] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 415.343074][T16010] ? security_inode_alloc+0x39/0x310 [ 415.343093][T16010] ? security_inode_alloc+0x39/0x310 [ 415.343119][T16010] security_inode_alloc+0x39/0x310 [ 415.343141][T16010] inode_init_always_gfp+0x97e/0xd30 [ 415.343171][T16010] alloc_inode+0x82/0x1b0 [ 415.343195][T16010] path_from_stashed+0x205/0x580 [ 415.343223][T16010] ? bpf_map_offload_info_fill_ns+0x183/0x1f0 [ 415.343251][T16010] bpf_map_offload_info_fill+0xb8/0x280 [ 415.343272][T16010] ? __pfx_bpf_map_offload_info_fill+0x10/0x10 [ 415.343299][T16010] ? bpf_obj_get_info_by_fd+0xbcc/0x3340 [ 415.343330][T16010] bpf_obj_get_info_by_fd+0x10dc/0x3340 [ 415.343371][T16010] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 415.343402][T16010] ? __lock_acquire+0x683/0x2cf0 [ 415.343444][T16010] ? kstrtouint+0x6e/0xe0 [ 415.343468][T16010] ? __might_fault+0xaf/0x130 [ 415.343490][T16010] ? __might_fault+0xaf/0x130 [ 415.343525][T16010] ? bpf_lsm_bpf+0x9/0x20 [ 415.343546][T16010] ? security_bpf+0x7e/0x2d0 [ 415.343584][T16010] __sys_bpf+0xa50/0xd90 [ 415.343617][T16010] ? __pfx___sys_bpf+0x10/0x10 [ 415.343651][T16010] ? __fget_files+0x2a/0x420 [ 415.343691][T16010] ? ksys_write+0x242/0x270 [ 415.343721][T16010] ? __pfx_ksys_write+0x10/0x10 [ 415.343753][T16010] __x64_sys_bpf+0xba/0xd0 [ 415.343775][T16010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.343796][T16010] do_syscall_64+0x174/0x580 [ 415.343823][T16010] ? trace_irq_disable+0x3b/0x140 [ 415.343846][T16010] ? clear_bhb_loop+0x40/0x90 [ 415.343870][T16010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.343888][T16010] RIP: 0033:0x7f016639de59 [ 415.343907][T16010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.343927][T16010] RSP: 002b:00007f01671c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.343946][T16010] RAX: ffffffffffffffda RBX: 00007f0166625fa0 RCX: 00007f016639de59 [ 415.343960][T16010] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000f [ 415.343973][T16010] RBP: 00007f01671c1090 R08: 0000000000000000 R09: 0000000000000000 [ 415.343984][T16010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.343995][T16010] R13: 00007f0166626038 R14: 00007f0166625fa0 R15: 00007ffdd3342068 [ 415.344026][T16010] [ 415.736184][ T5622] Bluetooth: hci0: command tx timeout [ 415.791852][T16005] lo speed is unknown, defaulting to 1000 [ 416.341394][T16033] bridge_slave_0: left allmulticast mode [ 416.354386][T16033] bridge_slave_0: left promiscuous mode [ 416.363565][T16033] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.493850][T16033] bridge_slave_1: left allmulticast mode [ 416.541078][T16033] bridge_slave_1: left promiscuous mode [ 416.583505][T16033] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.630151][T16033] bond0: (slave bond_slave_0): Releasing backup interface [ 416.676187][T16033] bond0: (slave bond_slave_1): Releasing backup interface [ 416.703001][T16033] team0: Port device team_slave_0 removed [ 416.738354][T16033] team0: Port device team_slave_1 removed [ 416.752889][T16033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.761031][T16033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.776156][T16033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.790230][T16033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.830729][T16035] team0: Port device xfrm0 added [ 417.343390][T15937] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.377675][T15937] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.412434][T15937] bridge_slave_0: entered allmulticast mode [ 417.437389][T15937] bridge_slave_0: entered promiscuous mode [ 417.480728][T15937] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.514127][T15937] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.561585][T15937] bridge_slave_1: entered allmulticast mode [ 417.603612][T15937] bridge_slave_1: entered promiscuous mode [ 417.700891][T15937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.716319][T15937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.747060][T16064] netlink: 'syz.7.2956': attribute type 1 has an invalid length. [ 417.767730][T16064] __nla_validate_parse: 8 callbacks suppressed [ 417.767751][T16064] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2956'. [ 417.784998][ T5622] Bluetooth: hci0: command tx timeout [ 417.810115][T15937] team0: Port device team_slave_0 added [ 417.836056][T16065] dvmrp0: entered allmulticast mode [ 417.861071][T15937] team0: Port device team_slave_1 added [ 417.915513][T16061] lo speed is unknown, defaulting to 1000 [ 417.964510][T15937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.987130][T15937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.036679][T15937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.074357][T15937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.087957][T15937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.167719][T15937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.301464][T15937] hsr_slave_0: entered promiscuous mode [ 418.315907][T15937] hsr_slave_1: entered promiscuous mode [ 418.328106][T15937] debugfs: 'hsr0' already exists in 'hsr' [ 418.339772][T15937] Cannot create hsr debugfs directory [ 418.793464][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'. [ 418.802570][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'. [ 418.895997][T16084] syzkaller0: entered promiscuous mode [ 418.909735][T16084] syzkaller0: entered allmulticast mode [ 418.916016][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'. [ 418.935025][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'. [ 419.058585][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'. [ 419.068033][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'. [ 419.207314][ T8229] net_ratelimit: 27 callbacks suppressed [ 419.207335][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 419.510688][T15937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.522850][T15937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.604670][ T8235] bond4: (slave bridge5): failed to get link speed/duplex [ 419.614131][ T8235] bond3: (slave bridge2): failed to get link speed/duplex [ 419.719985][ T8237] bond3: (slave bridge2): failed to get link speed/duplex [ 419.727213][ T8237] bond4: (slave bridge5): failed to get link speed/duplex [ 419.822692][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 419.886264][ T5622] Bluetooth: hci0: command tx timeout [ 419.952005][ T8226] bond3: (slave bridge2): failed to get link speed/duplex [ 419.997282][T16128] FAULT_INJECTION: forcing a failure. [ 419.997282][T16128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.010682][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.6.2968 Not tainted syzkaller #0 PREEMPT(full) [ 420.010709][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.010719][T16128] Call Trace: [ 420.010736][T16128] [ 420.010745][T16128] dump_stack_lvl+0xe8/0x150 [ 420.010778][T16128] should_fail_ex+0x40c/0x560 [ 420.010805][T16128] _copy_from_iter+0x1d3/0x1660 [ 420.010828][T16128] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 420.010852][T16128] ? rcu_is_watching+0x15/0xb0 [ 420.010880][T16128] ? trace_kmem_cache_alloc+0x29/0xe0 [ 420.010903][T16128] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 420.010925][T16128] ? __pfx__copy_from_iter+0x10/0x10 [ 420.010948][T16128] ? __alloc_skb+0x276/0x7a0 [ 420.010971][T16128] ? __alloc_skb+0x276/0x7a0 [ 420.011000][T16128] ? netlink_sendmsg+0x650/0xb40 [ 420.011019][T16128] ? skb_put+0x112/0x210 [ 420.011047][T16128] netlink_sendmsg+0x6c0/0xb40 [ 420.011074][T16128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.011097][T16128] ? aa_sock_msg_perm+0xf1/0x1b0 [ 420.011122][T16128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.011139][T16128] sock_sendmsg_nosec+0x13a/0x180 [ 420.011164][T16128] ____sys_sendmsg+0x54e/0x850 [ 420.011198][T16128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.011233][T16128] ? import_iovec+0x73/0xa0 [ 420.011262][T16128] ___sys_sendmsg+0x2a5/0x360 [ 420.011288][T16128] ? __lock_acquire+0x683/0x2cf0 [ 420.011317][T16128] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.011378][T16128] ? __fget_files+0x2a/0x420 [ 420.011401][T16128] ? __fget_files+0x3a2/0x420 [ 420.011434][T16128] __x64_sys_sendmsg+0x1b1/0x290 [ 420.011464][T16128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.011509][T16128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.011530][T16128] do_syscall_64+0x174/0x580 [ 420.011556][T16128] ? trace_irq_disable+0x3b/0x140 [ 420.011579][T16128] ? clear_bhb_loop+0x40/0x90 [ 420.011602][T16128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.011621][T16128] RIP: 0033:0x7f8864f9de59 [ 420.011639][T16128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.011658][T16128] RSP: 002b:00007f8865f15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.011678][T16128] RAX: ffffffffffffffda RBX: 00007f8865225fa0 RCX: 00007f8864f9de59 [ 420.011692][T16128] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 420.011704][T16128] RBP: 00007f8865f15090 R08: 0000000000000000 R09: 0000000000000000 [ 420.011716][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.011733][T16128] R13: 00007f8865226038 R14: 00007f8865225fa0 R15: 00007ffc5ec29238 [ 420.011763][T16128] [ 420.351621][T15937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.358566][T16133] xt_policy: too many policy elements [ 420.362109][T15937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.406706][T16130] netlink: 'syz.0.2969': attribute type 12 has an invalid length. [ 420.419262][T16133] lo: entered allmulticast mode [ 420.435325][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 420.442555][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 420.532095][T15937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.547244][T15937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.598935][ T8235] bond3: (slave bridge2): failed to get link speed/duplex [ 420.784855][T15937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.790331][T16148] FAULT_INJECTION: forcing a failure. [ 420.790331][T16148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.800270][T15937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.851560][T16148] CPU: 0 UID: 0 PID: 16148 Comm: syz.6.2975 Not tainted syzkaller #0 PREEMPT(full) [ 420.851584][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.851593][T16148] Call Trace: [ 420.851599][T16148] [ 420.851605][T16148] dump_stack_lvl+0xe8/0x150 [ 420.851630][T16148] should_fail_ex+0x40c/0x560 [ 420.851650][T16148] _copy_to_user+0x31/0xb0 [ 420.851672][T16148] bpf_test_finish+0x52e/0x690 [ 420.851694][T16148] ? __pfx_bpf_test_finish+0x10/0x10 [ 420.851717][T16148] bpf_prog_test_run_skb+0x11fe/0x2230 [ 420.851753][T16148] ? __fget_files+0x3a2/0x420 [ 420.851771][T16148] ? __fget_files+0x2a/0x420 [ 420.851791][T16148] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 420.851813][T16148] bpf_prog_test_run+0x2c5/0x340 [ 420.851835][T16148] __sys_bpf+0xa22/0xd90 [ 420.851859][T16148] ? __pfx___sys_bpf+0x10/0x10 [ 420.851886][T16148] ? __fget_files+0x2a/0x420 [ 420.851916][T16148] ? ksys_write+0x242/0x270 [ 420.851939][T16148] ? __pfx_ksys_write+0x10/0x10 [ 420.851964][T16148] __x64_sys_bpf+0xba/0xd0 [ 420.851981][T16148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.851997][T16148] do_syscall_64+0x174/0x580 [ 420.852016][T16148] ? trace_irq_disable+0x3b/0x140 [ 420.852034][T16148] ? clear_bhb_loop+0x40/0x90 [ 420.852052][T16148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.852067][T16148] RIP: 0033:0x7f8864f9de59 [ 420.852082][T16148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.852096][T16148] RSP: 002b:00007f8865f15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.852112][T16148] RAX: ffffffffffffffda RBX: 00007f8865225fa0 RCX: 00007f8864f9de59 [ 420.852122][T16148] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 420.852131][T16148] RBP: 00007f8865f15090 R08: 0000000000000000 R09: 0000000000000000 [ 420.852140][T16148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.852148][T16148] R13: 00007f8865226038 R14: 00007f8865225fa0 R15: 00007ffc5ec29238 [ 420.852171][T16148] [ 420.892355][T16156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2977'. [ 421.225419][T16170] FAULT_INJECTION: forcing a failure. [ 421.225419][T16170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.236734][T16156] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 421.238591][T16170] CPU: 0 UID: 0 PID: 16170 Comm: syz.6.2980 Not tainted syzkaller #0 PREEMPT(full) [ 421.238610][T16170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.238620][T16170] Call Trace: [ 421.238628][T16170] [ 421.238635][T16170] dump_stack_lvl+0xe8/0x150 [ 421.238669][T16170] should_fail_ex+0x40c/0x560 [ 421.238695][T16170] _copy_to_user+0x31/0xb0 [ 421.238724][T16170] simple_read_from_buffer+0xe1/0x170 [ 421.238753][T16170] proc_fail_nth_read+0x1bb/0x230 [ 421.238781][T16170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.238809][T16170] ? rw_verify_area+0x24a/0x4c0 [ 421.238838][T16170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.238861][T16170] vfs_read+0x213/0xa80 [ 421.238892][T16170] ? __pfx___mutex_lock+0x10/0x10 [ 421.238921][T16170] ? __pfx_vfs_read+0x10/0x10 [ 421.238949][T16170] ? __fget_files+0x2a/0x420 [ 421.238976][T16170] ? __fget_files+0x3a2/0x420 [ 421.238997][T16170] ? __fget_files+0x2a/0x420 [ 421.239029][T16170] ksys_read+0x150/0x270 [ 421.239058][T16170] ? __pfx_ksys_read+0x10/0x10 [ 421.239100][T16170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.239121][T16170] do_syscall_64+0x174/0x580 [ 421.239147][T16170] ? trace_irq_disable+0x3b/0x140 [ 421.239169][T16170] ? clear_bhb_loop+0x40/0x90 [ 421.239192][T16170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.239210][T16170] RIP: 0033:0x7f8864f5e68e [ 421.239228][T16170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.239244][T16170] RSP: 002b:00007f8865f14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.239263][T16170] RAX: ffffffffffffffda RBX: 00007f8865f156c0 RCX: 00007f8864f5e68e [ 421.239276][T16170] RDX: 000000000000000f RSI: 00007f8865f150a0 RDI: 0000000000000005 [ 421.239288][T16170] RBP: 00007f8865f15090 R08: 0000000000000000 R09: 0000000000000000 [ 421.239299][T16170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.239310][T16170] R13: 00007f8865226038 R14: 00007f8865225fa0 R15: 00007ffc5ec29238 [ 421.239340][T16170] [ 421.296938][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2981'. [ 421.322657][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2979'. [ 421.328534][T16172] netlink: 'syz.6.2981': attribute type 30 has an invalid length. [ 421.503763][T16168] veth5: entered promiscuous mode [ 421.529850][T16177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.542058][T16172] vxlan0: entered promiscuous mode [ 421.547245][T16172] vxlan0: entered allmulticast mode [ 421.559325][ T5784] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.568701][ T5784] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.578803][ T5784] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.587980][ T5784] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.685801][T15937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.698763][T15937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.711095][T15937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.746803][T15937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.754794][T15937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.770821][T15937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.789950][T15937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.801019][T15937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.934874][ T5622] Bluetooth: hci0: command tx timeout [ 421.961020][T16200] netlink: 'syz.6.2985': attribute type 2 has an invalid length. [ 421.995143][T15937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.014889][T15937] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.071907][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.079087][ T8229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.088191][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.095364][ T8229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.130698][T16202] FAULT_INJECTION: forcing a failure. [ 422.130698][T16202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.191861][T16202] CPU: 0 UID: 0 PID: 16202 Comm: syz.6.2987 Not tainted syzkaller #0 PREEMPT(full) [ 422.191888][T16202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.191899][T16202] Call Trace: [ 422.191907][T16202] [ 422.191913][T16202] dump_stack_lvl+0xe8/0x150 [ 422.191944][T16202] should_fail_ex+0x40c/0x560 [ 422.191969][T16202] _copy_to_user+0x31/0xb0 [ 422.191998][T16202] simple_read_from_buffer+0xe1/0x170 [ 422.192026][T16202] proc_fail_nth_read+0x1bb/0x230 [ 422.192053][T16202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.192080][T16202] ? rw_verify_area+0x24a/0x4c0 [ 422.192109][T16202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.192132][T16202] vfs_read+0x213/0xa80 [ 422.192163][T16202] ? __pfx___mutex_lock+0x10/0x10 [ 422.192191][T16202] ? __pfx_vfs_read+0x10/0x10 [ 422.192218][T16202] ? __fget_files+0x2a/0x420 [ 422.192243][T16202] ? __fget_files+0x3a2/0x420 [ 422.192263][T16202] ? __fget_files+0x2a/0x420 [ 422.192294][T16202] ksys_read+0x150/0x270 [ 422.192321][T16202] ? __pfx_ksys_read+0x10/0x10 [ 422.192354][T16202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.192373][T16202] do_syscall_64+0x174/0x580 [ 422.192398][T16202] ? trace_irq_disable+0x3b/0x140 [ 422.192420][T16202] ? clear_bhb_loop+0x40/0x90 [ 422.192452][T16202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.192470][T16202] RIP: 0033:0x7f8864f5e68e [ 422.192485][T16202] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 422.192502][T16202] RSP: 002b:00007f8865f14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.192521][T16202] RAX: ffffffffffffffda RBX: 00007f8865f156c0 RCX: 00007f8864f5e68e [ 422.192534][T16202] RDX: 000000000000000f RSI: 00007f8865f150a0 RDI: 0000000000000005 [ 422.192546][T16202] RBP: 00007f8865f15090 R08: 0000000000000000 R09: 0000000000000000 [ 422.192557][T16202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.192566][T16202] R13: 00007f8865226038 R14: 00007f8865225fa0 R15: 00007ffc5ec29238 [ 422.192595][T16202] [ 422.202995][T16206] Bluetooth: MGMT ver 1.23 [ 422.318066][T16209] netlink: 'syz.7.2988': attribute type 1 has an invalid length. [ 422.960164][T16230] ip6tnl1: entered promiscuous mode [ 423.149088][T16249] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 423.187189][T15937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.227477][T16253] syzkaller0: entered promiscuous mode [ 423.234680][T16253] syzkaller0: entered allmulticast mode [ 423.349955][T15937] veth0_vlan: entered promiscuous mode [ 423.560270][T16260] netlink: 'syz.6.3002': attribute type 1 has an invalid length. [ 423.561164][T16262] __nla_validate_parse: 3 callbacks suppressed [ 423.561180][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3003'. [ 423.626264][T15937] veth1_vlan: entered promiscuous mode [ 423.716137][T15937] veth0_macvtap: entered promiscuous mode [ 423.735151][T15937] veth1_macvtap: entered promiscuous mode [ 423.773953][T15937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.799308][T15937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.818926][ T8229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.832138][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.841149][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.855961][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.865669][T16266] tipc: Started in network mode [ 423.870558][T16266] tipc: Node identity 36de65cfda02, cluster identity 4711 [ 423.884475][T16266] tipc: Enabled bearer , priority 0 [ 423.964761][T16266] syzkaller0: entered promiscuous mode [ 423.970310][T16266] syzkaller0: entered allmulticast mode [ 424.068840][T16266] tipc: Resetting bearer [ 424.196901][T16265] tipc: Resetting bearer [ 424.225405][T16265] tipc: Disabling bearer [ 424.294689][ T8226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.306565][ T8226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.372695][ T8226] net_ratelimit: 25 callbacks suppressed [ 424.372720][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 424.379954][ T8229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.379994][ T8229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.427522][ T8226] bond3: (slave bridge2): failed to get link speed/duplex [ 424.488231][ T47] bond4: (slave bridge5): failed to get link speed/duplex [ 424.592406][ T47] bond3: (slave bridge2): failed to get link speed/duplex [ 424.645630][ T5784] bond4: (slave bridge5): failed to get link speed/duplex [ 424.758144][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 424.766246][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 424.825508][T16295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3013'. [ 424.867688][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 424.895853][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3015'. [ 424.921007][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 425.041014][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 425.174954][T16316] x_tables: duplicate underflow at hook 3 [ 425.263727][T16314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2926'. [ 425.312033][T16319] syzkaller0: entered promiscuous mode [ 425.319792][T16319] syzkaller0: entered allmulticast mode [ 425.507673][ T8231] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.533160][ T8231] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.600598][ T8231] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.610690][ T8231] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.628421][T16325] macvtap1: entered promiscuous mode [ 425.633915][T16325] vlan0: entered promiscuous mode [ 425.644861][T16325] vlan0: left promiscuous mode [ 425.701824][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 425.934165][T16350] lo speed is unknown, defaulting to 1000 [ 426.153053][T16358] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 426.465691][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'. [ 426.698645][T16368] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3032'. [ 426.724566][T16368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3032'. [ 426.830604][T16353] syzkaller1: entered promiscuous mode [ 426.836201][T16353] syzkaller1: entered allmulticast mode [ 426.925511][T16371] lo speed is unknown, defaulting to 1000 [ 427.167612][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'. [ 427.216141][T16392] geneve0: entered promiscuous mode [ 427.268236][T16392] geneve0: left promiscuous mode [ 427.482022][T16375] lo speed is unknown, defaulting to 1000 [ 429.044223][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'. [ 429.191923][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3043'. [ 429.222033][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3045'. [ 429.225470][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3043'. [ 429.620263][T16467] syzkaller0: entered promiscuous mode [ 429.641095][T16467] syzkaller0: entered allmulticast mode [ 429.795310][ T8229] net_ratelimit: 28 callbacks suppressed [ 429.795330][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 432.179824][ T1723] block nbd1: Possible stuck request ffff888027810000: control (read@0,1024B). Runtime 330 seconds [ 432.191079][ T1723] block nbd1: Possible stuck request ffff8880278101c0: control (read@1024,1024B). Runtime 330 seconds [ 432.202678][ T1723] block nbd1: Possible stuck request ffff888027810380: control (read@2048,1024B). Runtime 330 seconds [ 432.215023][ T1723] block nbd1: Possible stuck request ffff888027810540: control (read@3072,1024B). Runtime 330 seconds [ 433.184285][ T4985] udevd[4985]: worker [5621] /devices/virtual/block/nbd1 timeout; kill it [ 433.193236][ T4985] udevd[4985]: seq 11309 '/devices/virtual/block/nbd1' killed [ 433.504132][T16481] syzkaller0: entered promiscuous mode [ 433.509642][T16481] syzkaller0: entered allmulticast mode [ 433.529723][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 433.541604][T16494] tipc: Enabled bearer , priority 0 [ 433.624177][T16494] tipc: Resetting bearer [ 433.655353][T16494] tipc: Disabling bearer [ 433.676022][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 433.725515][ T1122] bond4: (slave bridge5): failed to get link speed/duplex [ 433.787463][ T1122] bond3: (slave bridge2): failed to get link speed/duplex [ 433.808669][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3056'. [ 433.855682][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 433.896370][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 433.949367][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 434.006350][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 434.056817][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 434.109155][T16522] netlink: 'syz.6.3061': attribute type 1 has an invalid length. [ 434.117529][T16522] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3061'. [ 434.127986][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3061'. [ 434.195434][T16525] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3062'. [ 434.325959][T16530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3064'. [ 434.334959][T16530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3064'. [ 434.343918][T16530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3064'. [ 434.650414][T16540] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3067'. [ 434.929748][T16542] dummy0: left promiscuous mode [ 435.294715][T16559] net_ratelimit: 9 callbacks suppressed [ 435.294734][T16559] IPv6: addrconf: prefix option has invalid lifetime [ 435.355788][T16562] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3074'. [ 435.411537][T16542] mac80211_hwsim hwsim39 wlan0: left promiscuous mode [ 435.418987][T16542] mac80211_hwsim hwsim39 wlan0: left allmulticast mode [ 435.463398][T16559] netlink: 'syz.7.3073': attribute type 1 has an invalid length. [ 435.471176][T16559] netlink: 'syz.7.3073': attribute type 2 has an invalid length. [ 435.550014][ T8226] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.602318][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 435.624703][ T8229] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.626762][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3074'. [ 435.633642][ T8229] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.633683][ T8229] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.661960][ T1122] bond3: (slave bridge2): failed to get link speed/duplex [ 435.819325][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 435.933586][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 436.057429][ T8229] bond4: (slave bridge5): failed to get link speed/duplex [ 436.066634][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 436.151677][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 436.324283][T16597] syzkaller0: entered promiscuous mode [ 436.329807][T16597] syzkaller0: entered allmulticast mode [ 438.895496][T16619] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 438.906237][T16619] bridge4: entered allmulticast mode [ 439.052624][T16642] netlink: 'syz.5.3091': attribute type 3 has an invalid length. [ 439.060389][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3091'. [ 439.131835][ T47] bond4: (slave bridge5): failed to get link speed/duplex [ 439.139051][ T47] bond3: (slave bridge2): failed to get link speed/duplex [ 439.147182][T16645] xt_hashlimit: size too large, truncated to 1048576 [ 439.305702][T16657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3097'. [ 439.345394][T16657] netlink: 'syz.5.3097': attribute type 1 has an invalid length. [ 439.373597][ T8229] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 439.380432][T16647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.488022][T16663] netlink: 536 bytes leftover after parsing attributes in process `syz.7.3098'. [ 439.501788][T16663] netlink: 536 bytes leftover after parsing attributes in process `syz.7.3098'. [ 439.518741][T16663] netlink: 536 bytes leftover after parsing attributes in process `syz.7.3098'. [ 439.528018][T16663] netlink: 536 bytes leftover after parsing attributes in process `syz.7.3098'. [ 439.547063][T16660] lo: left allmulticast mode [ 439.610302][T16663] netlink: 536 bytes leftover after parsing attributes in process `syz.7.3098'. [ 439.631138][T16660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.717156][T16660] bridge0: port 3(vlan2) entered blocking state [ 439.723553][T16660] bridge0: port 3(vlan2) entered forwarding state [ 439.727069][T16667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3100'. [ 439.732498][T16660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.748393][T16657] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3097'. [ 439.846608][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.876927][T16675] netlink: 'syz.7.3101': attribute type 1 has an invalid length. [ 440.085760][ T5838] IPVS: starting estimator thread 0... [ 440.294603][T16694] IPVS: using max 28 ests per chain, 67200 per kthread [ 440.305281][T16699] xt_hl: Unknown Hop Limit match mode: 206 [ 440.372199][T16700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3107'. [ 440.397103][T16697] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 440.456633][ T8231] net_ratelimit: 7 callbacks suppressed [ 440.456652][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 440.472028][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 440.644018][T16714] atomic_op ffff8880344f8998 conn xmit_atomic 0000000000000000 [ 440.681163][T16704] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 440.748725][T16704] bond3 (unregistering): Released all slaves [ 440.833542][ T6999] IPVS: starting estimator thread 0... [ 440.863199][T16711] syzkaller0: entered promiscuous mode [ 440.868705][T16711] syzkaller0: entered allmulticast mode [ 441.012978][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 441.020174][ T12] bond3: (slave bridge2): failed to get link speed/duplex [ 441.084128][T16720] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3112'. [ 441.124165][T16717] IPVS: using max 29 ests per chain, 69600 per kthread [ 441.146279][ T12] bond3: (slave bridge2): failed to get link speed/duplex [ 441.153619][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 441.286176][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 441.334582][ T8240] bond3: (slave bridge2): failed to get link speed/duplex [ 441.664681][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 441.785908][ T47] wlan1: Trigger new scan to find an IBSS to join [ 441.786064][ T8240] bond3: (slave bridge2): failed to get link speed/duplex [ 442.135315][T16738] xt_CT: No such helper "syz1" [ 442.165491][T16747] tipc: Enabling of bearer rejected, failed to enable media [ 442.191140][T16745] lo speed is unknown, defaulting to 1000 [ 442.398690][T16754] netlink: 'syz.0.3123': attribute type 2 has an invalid length. [ 442.965310][T16763] syzkaller0: entered promiscuous mode [ 442.997368][T16763] syzkaller0: entered allmulticast mode [ 444.965477][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 445.688907][ T57] wlan1: Trigger new scan to find an IBSS to join [ 445.924386][ T8231] net_ratelimit: 13 callbacks suppressed [ 445.924405][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 446.135552][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 446.148529][T16798] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 446.183578][ T12] bond3: (slave bridge2): failed to get link speed/duplex [ 446.250890][ T57] bond4: (slave bridge5): failed to get link speed/duplex [ 446.300227][T16808] x_tables: duplicate underflow at hook 3 [ 446.307466][T16808] __nla_validate_parse: 4 callbacks suppressed [ 446.307483][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3135'. [ 446.355498][T16813] nbd: nbd0 already in use [ 446.396267][T16813] nbd: must specify an index to disconnect [ 446.404220][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3136'. [ 446.424071][ T12] bond3: (slave bridge2): failed to get link speed/duplex [ 446.448059][T16811] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3136'. [ 446.520235][ T57] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.530334][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3136'. [ 446.550839][ T57] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.560032][T16811] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3136'. [ 446.613741][ T57] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.639567][T16817] syzkaller0: entered promiscuous mode [ 446.680324][T16817] syzkaller0: entered allmulticast mode [ 446.688002][ T57] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.916418][ T57] bond4: (slave bridge5): failed to get link speed/duplex [ 446.956162][ T8229] wlan1: Creating new IBSS network, BSSID 12:ec:03:42:57:03 [ 447.039950][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 447.187950][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 447.198775][ T8229] bond3: (slave bridge2): failed to get link speed/duplex [ 447.491494][T16876] syzkaller1: entered promiscuous mode [ 447.503648][T16876] syzkaller1: entered allmulticast mode [ 447.772471][T16893] sctp: Trying to GSO but underlying device doesn't support it. [ 448.009666][T16903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3158'. [ 448.271381][ T10] IPVS: starting estimator thread 0... [ 448.577854][T16923] IPVS: using max 32 ests per chain, 76800 per kthread [ 448.877319][T16951] netlink: 'syz.2.3167': attribute type 5 has an invalid length. [ 449.057768][T16961] IPv6: sit1: Disabled Multicast RS [ 449.106394][T16961] netlink: 'syz.7.3169': attribute type 1 has an invalid length. [ 449.114834][T16961] netlink: 'syz.7.3169': attribute type 2 has an invalid length. [ 449.195791][T16969] netlink: 'syz.6.3172': attribute type 1 has an invalid length. [ 449.216189][T16969] bond3: entered promiscuous mode [ 449.221633][T16969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.285856][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3173'. [ 449.295594][T16976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3173'. [ 449.305995][T16976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3173'. [ 449.315236][T16976] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3173'. [ 449.389268][T16979] netlink: 'syz.6.3174': attribute type 3 has an invalid length. [ 449.808196][T17004] tipc: Enabling of bearer rejected, failed to enable media [ 449.825116][T17004] veth0: entered promiscuous mode [ 449.885671][T17003] veth0: left promiscuous mode [ 450.194227][T17018] netlink: 'syz.0.3186': attribute type 1 has an invalid length. [ 450.214678][T17018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 450.238053][T17018] bond3: (slave gretap1): making interface the new active one [ 450.248504][T17018] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 450.426901][T17025] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 450.561811][T17031] x_tables: duplicate underflow at hook 1 [ 450.800637][T17044] xt_hashlimit: max too large, truncated to 1048576 [ 450.815814][T17044] xt_ecn: cannot match TCP bits for non-tcp packets [ 450.974154][ T57] net_ratelimit: 60 callbacks suppressed [ 450.974205][ T57] bond3: (slave bridge2): failed to get link speed/duplex [ 451.014358][ T57] bond4: (slave bridge5): failed to get link speed/duplex [ 451.086509][T17050] bond0: entered promiscuous mode [ 451.107677][T17050] bond0: left promiscuous mode [ 451.208391][T17054] bond0: entered promiscuous mode [ 451.225651][T17054] bond0: left promiscuous mode [ 451.325047][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 451.385171][T17077] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 451.393623][T17077] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 451.406008][T17077] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 451.499637][ T57] bond4: (slave bridge5): failed to get link speed/duplex [ 451.560934][T17036] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 451.579403][T17086] __nla_validate_parse: 1 callbacks suppressed [ 451.579450][T17086] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3202'. [ 451.624510][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 451.648911][T17081] netlink: 'syz.7.3203': attribute type 25 has an invalid length. [ 451.680423][T17086] xt_hashlimit: size too large, truncated to 1048576 [ 451.694027][T17086] xt_hashlimit: max too large, truncated to 1048576 [ 451.711099][T17091] netlink: 36764 bytes leftover after parsing attributes in process `syz.2.3205'. [ 451.732123][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3205'. [ 451.751603][T17086] syzkaller0: entered promiscuous mode [ 451.757602][T17086] syzkaller0: entered allmulticast mode [ 452.024207][ T8226] bond3: (slave bridge2): failed to get link speed/duplex [ 452.087408][ T57] bond4: (slave bridge5): failed to get link speed/duplex [ 452.118122][T17115] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3210'. [ 452.133697][T17108] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3210'. [ 452.227669][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3212'. [ 452.229602][ T57] bond3: (slave bridge2): failed to get link speed/duplex [ 452.246981][ T8231] bond4: (slave bridge5): failed to get link speed/duplex [ 452.502686][T17115] syzkaller1: entered promiscuous mode [ 452.522759][T17115] syzkaller1: entered allmulticast mode [ 452.606721][T17132] macvlan1: left promiscuous mode [ 452.613959][T17132] macvlan1: left allmulticast mode [ 452.626069][T17132] bridge2: left allmulticast mode [ 452.633398][T17132] ip6gre1: left promiscuous mode [ 452.657251][T17132] ip6gre1: left allmulticast mode [ 452.663803][T17132] vxlan0: left promiscuous mode [ 452.668682][T17132] vxlan0: left allmulticast mode [ 452.673146][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 452.682304][T17132] bridge4: left allmulticast mode [ 452.694529][T17132] bond3: left promiscuous mode [ 452.801937][T17139] 8021q: VLANs not supported on ip_vti0 [ 452.808123][ T57] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.824283][ T57] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.848205][ T5622] Bluetooth: hci0: command 0x0401 tx timeout [ 452.862672][ T57] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.881941][ T57] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.904885][ T8240] bond4: (slave bridge5): failed to get link speed/duplex [ 452.928272][T17144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3218'. [ 452.944713][T17150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3221'. [ 453.035605][T17155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3223'. [ 453.053337][T17155] macsec1: entered promiscuous mode [ 453.105242][T17155] erspan0: entered promiscuous mode [ 453.123367][T17155] erspan0: left promiscuous mode [ 453.245689][T17158] bond0: entered promiscuous mode [ 453.352884][T17158] bond_slave_0: entered promiscuous mode [ 453.529710][T17158] bond0: left promiscuous mode [ 453.576627][T17158] bond_slave_0: left promiscuous mode [ 453.713873][T17186] ip6tnl2: entered allmulticast mode [ 453.751520][ T57] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 453.793584][ T5630] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 453.819716][ T57] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 454.000004][T17193] pim6reg99999999: entered allmulticast mode [ 454.205495][ T5749] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 454.283195][ T5749] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 454.618256][T17223] vlan2: entered promiscuous mode [ 454.637806][T17223] bridge0: entered promiscuous mode [ 455.057694][ T5784] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.092019][ T5784] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.126951][ T5784] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.260577][ T5784] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.339705][T17259] syzkaller0: entered promiscuous mode [ 455.374557][T17259] syzkaller0: entered allmulticast mode [ 455.597433][T17268] syzkaller0: entered promiscuous mode [ 455.629560][T17268] syzkaller0: entered allmulticast mode [ 456.081227][ T12] net_ratelimit: 30 callbacks suppressed [ 456.081244][ T12] bond4: (slave bridge5): failed to get link speed/duplex [ 456.235846][T17289] tipc: Started in network mode [ 456.240755][T17289] tipc: Node identity 4246, cluster identity 4711 [ 456.247181][T17289] tipc: Node number set to 16966 [ 456.308384][T17301] x_tables: duplicate underflow at hook 2 [ 456.324325][ T8240] bond4: (slave bridge5): failed to get link speed/duplex [ 456.331514][ T8240] bond3: (slave bridge2): failed to get link speed/duplex [ 456.365692][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.412205][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.417316][T17296] lo speed is unknown, defaulting to 1000 [ 456.419382][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.430732][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.437478][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.454130][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.460501][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.466843][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.473187][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.479536][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.506666][ T12] bond3: (slave bridge2): failed to get link speed/duplex [ 456.555138][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.561540][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.567896][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.574238][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.580568][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.586901][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.593239][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.639878][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.646345][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.652773][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.659124][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.665455][ T8240] bond4: (slave bridge5): failed to get link speed/duplex [ 456.684596][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.690977][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.697351][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.703706][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.746837][ T1122] bond3: (slave bridge2): failed to get link speed/duplex [ 456.759221][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.765695][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.772163][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.781350][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.787727][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.808288][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.814693][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.821053][T17306] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.864155][ T8240] bond4: (slave bridge5): failed to get link speed/duplex [ 456.873415][ T8240] bond3: (slave bridge2): failed to get link speed/duplex [ 457.091002][T17323] geneve2: entered allmulticast mode [ 457.132179][T17323] __nla_validate_parse: 10 callbacks suppressed [ 457.132197][T17323] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3256'. [ 457.274620][ T1122] bond4: (slave bridge5): failed to get link speed/duplex [ 457.282043][ T1122] bond3: (slave bridge2): failed to get link speed/duplex [ 457.661040][T17344] lo speed is unknown, defaulting to 1000 [ 457.784889][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 458.013819][T17365] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3266'. [ 458.343856][T17373] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3266'. [ 458.401173][T17377] netlink: 'syz.6.3266': attribute type 6 has an invalid length. [ 458.480302][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3269'. [ 458.743363][T17389] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.029647][T17399] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3274'. [ 459.125979][T17402] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3272'. [ 459.155910][T17405] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3277'. [ 459.350071][T17397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.368699][T17397] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.433571][T17397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.441655][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3278'. [ 459.450589][T17415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3278'. [ 459.460782][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3278'. [ 459.498430][T17397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.509356][T17397] veth1_to_batadv: left promiscuous mode [ 459.532330][T17397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.553592][T17397] veth1_vlan: left promiscuous mode [ 459.560793][T17397] veth0_vlan: left promiscuous mode [ 459.582393][T17397] veth0_vlan: entered promiscuous mode [ 459.593376][T17397] veth1_vlan: entered promiscuous mode [ 459.602907][T17397] veth1_macvtap: left promiscuous mode [ 459.609223][T17397] veth0_macvtap: left promiscuous mode [ 459.630011][T17397] veth0_macvtap: entered promiscuous mode [ 459.637216][T17397] veth1_macvtap: entered promiscuous mode [ 459.647014][T17397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.654890][T17397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.662861][T17397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.670777][T17397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.687816][T17397] veth1_to_batadv: entered promiscuous mode [ 459.694828][T17397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.702598][T17397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.761919][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.769073][ T8226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.884110][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.901387][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.919568][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.936820][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.010363][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.027687][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.045909][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.066191][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.089517][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.131653][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.148774][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.165668][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.566872][T17447] bond2 (unregistering): Released all slaves [ 461.062475][ T30] INFO: task syz.4.1940:12432 blocked for more than 143 seconds. [ 461.070241][ T30] Not tainted syzkaller #0 [ 461.075183][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.100984][ T30] task:syz.4.1940 state:D stack:25904 pid:12432 tgid:12431 ppid:5625 task_flags:0x400140 flags:0x00080002 [ 461.113568][ T30] Call Trace: [ 461.117908][ T30] [ 461.120868][ T30] __schedule+0x17d9/0x56c0 [ 461.125393][ T30] ? __lock_acquire+0x683/0x2cf0 [ 461.130643][ T30] ? __pfx___schedule+0x10/0x10 [ 461.135536][ T30] ? schedule+0x90/0x2b0 [ 461.139808][ T30] schedule+0x164/0x2b0 [ 461.143984][ T30] schedule_preempt_disabled+0x13/0x30 [ 461.149463][ T30] __mutex_lock+0x7bf/0x1550 [ 461.154082][ T30] ? __mutex_lock+0x5d4/0x1550 [ 461.158864][ T30] ? nfsd_nl_listener_set_doit+0x135/0x1750 [ 461.177626][ T8233] net_ratelimit: 34 callbacks suppressed [ 461.177643][ T8233] bond4: (slave bridge5): failed to get link speed/duplex [ 461.195163][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 461.200233][ T30] ? __asan_memset+0x22/0x50 [ 461.204844][ T30] ? __nla_validate_parse+0x2429/0x2d50 [ 461.210436][ T30] nfsd_nl_listener_set_doit+0x135/0x1750 [ 461.216224][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 461.221975][ T30] ? rcu_is_watching+0x15/0xb0 [ 461.226767][ T30] ? trace_kmalloc+0x2a/0xf0 [ 461.231430][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 461.264585][ T30] ? __nla_parse+0x40/0x60 [ 461.269060][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 461.275415][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 461.285567][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 461.312225][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 461.317849][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.323958][ T30] ? bpf_lsm_capable+0x9/0x20 [ 461.329307][ T30] ? security_capable+0x7e/0x2c0 [ 461.334395][ T30] genl_rcv_msg+0x614/0x7a0 [ 461.338934][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.343981][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 461.344952][ T8239] bond4: (slave bridge5): failed to get link speed/duplex [ 461.350156][ T30] netlink_rcv_skb+0x226/0x4a0 [ 461.350194][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.367047][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.372367][ T30] ? down_read+0x2be/0x330 [ 461.376800][ T30] genl_rcv+0x28/0x40 [ 461.380876][ T30] netlink_unicast+0x7bb/0x940 [ 461.385681][ T30] netlink_sendmsg+0x813/0xb40 [ 461.390476][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.412500][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 461.417940][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.423380][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 461.428927][ T30] ____sys_sendmsg+0x54e/0x850 [ 461.433847][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.440179][ T30] ? import_iovec+0x73/0xa0 [ 461.445069][ T30] ___sys_sendmsg+0x2a5/0x360 [ 461.449937][ T30] ? __lock_acquire+0x683/0x2cf0 [ 461.455401][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.460837][ T30] ? __fget_files+0x2a/0x420 [ 461.466147][ T5784] bond3: (slave bridge2): failed to get link speed/duplex [ 461.475418][ T30] ? __fget_files+0x3a2/0x420 [ 461.489301][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 461.500212][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.508457][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.516137][ T8239] bond4: (slave bridge5): failed to get link speed/duplex [ 461.524743][ T30] do_syscall_64+0x174/0x580 [ 461.537153][ T30] ? trace_irq_disable+0x3b/0x140 [ 461.551886][ T30] ? clear_bhb_loop+0x40/0x90 [ 461.561907][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.573157][ T30] RIP: 0033:0x7fdfae79de59 [ 461.583343][ T30] RSP: 002b:00007fdfaf60a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.601222][ T30] RAX: ffffffffffffffda RBX: 00007fdfaea25fa0 RCX: 00007fdfae79de59 [ 461.614052][ T8231] bond3: (slave bridge2): failed to get link speed/duplex [ 461.621147][ T30] RDX: 0000000024000004 RSI: 0000200000000640 RDI: 0000000000000003 [ 461.639138][ T30] RBP: 00007fdfaf60a090 R08: 0000000000000000 R09: 0000000000000000 [ 461.651235][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.668809][ T30] R13: 00007fdfaea26038 R14: 00007fdfaea25fa0 R15: 00007ffeb46ecc48 [ 461.693983][ T30] [ 461.700916][ T30] [ 461.700916][ T30] Showing all locks held in the system: [ 461.732234][ T30] 3 locks held by kworker/0:1/10: [ 461.747416][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 461.761612][ T8226] bond4: (slave bridge5): failed to get link speed/duplex [ 461.763775][ T30] #1: [ 461.768767][ T8226] bond3: (slave bridge2): failed to get link speed/duplex [ 461.805742][ T30] ffffc900000f7c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 461.829544][ T30] #2: ffffffff8eb5fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 461.888145][ T30] 1 lock held by khungtaskd/30: [ 461.893143][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 461.903651][ T30] 4 locks held by kworker/u8:7/1122: [ 461.909811][ T30] #0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 461.921301][ T30] #1: ffffc90005ab7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 461.932288][ T30] #2: ffffffff9001d6a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 461.941934][ T30] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 461.953646][ T30] 2 locks held by getty/5372: [ 461.959541][ T30] #0: ffff888036a980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 461.969794][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 461.981070][ T30] 1 lock held by udevd/5621: [ 461.985982][ T30] #0: ffff8880276e4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 461.995632][ T30] 3 locks held by kworker/1:5/5713: [ 462.000914][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 462.012449][ T30] #1: ffffc900050cfc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 462.024486][ T30] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 462.035279][ T30] 3 locks held by kworker/u8:8/5784: [ 462.040647][ T30] #0: ffff888031c8a140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 462.056513][ T30] #1: ffffc9000546fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 462.079950][ T30] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 462.089498][ T30] 3 locks held by kworker/0:14/6999: [ 462.094785][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 462.105779][ T30] #1: ffffc900038cfc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 462.118422][ T30] #2: ffff888079022250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 462.128464][ T30] 2 locks held by syz.1.1890/12271: [ 462.133660][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 462.141905][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 462.152111][ T30] 2 locks held by syz.4.1940/12432: [ 462.157293][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 462.165458][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 462.175625][ T30] 2 locks held by syz.3.2191/13344: [ 462.191425][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 462.199668][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 462.209627][ T30] 2 locks held by syz.0.3282/17434: [ 462.214828][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 462.223040][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 462.233165][ T30] 2 locks held by syz.6.3292/17460: [ 462.238359][ T30] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 462.247439][ T30] #1: [ 462.247441][ T1723] block nbd1: Possible stuck request ffff888027810000: control (read@0,1024B). Runtime 360 seconds [ 462.247452][ T30] ffffffff8eb5ff68 [ 462.247480][ T1723] block nbd1: Possible stuck request ffff8880278101c0: control (read@1024,1024B). Runtime 360 seconds [ 462.250205][ T30] (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 462.261378][ T1723] block nbd1: Possible stuck request ffff888027810380: control (read@2048,1024B). Runtime 360 seconds [ 462.264641][ T30] [ 462.264650][ T30] ============================================= [ 462.264650][ T30] [ 462.264674][ T30] NMI backtrace for cpu 0 [ 462.264687][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 462.264706][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.264717][ T30] Call Trace: [ 462.264725][ T30] [ 462.264734][ T30] dump_stack_lvl+0xe8/0x150 [ 462.264764][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 462.264787][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 462.264815][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 462.264848][ T30] sys_info+0x135/0x170 [ 462.264867][ T30] watchdog+0xfd7/0x1030 [ 462.264896][ T30] ? watchdog+0x1c7/0x1030 [ 462.264923][ T30] kthread+0x388/0x470 [ 462.264949][ T30] ? __pfx_watchdog+0x10/0x10 [ 462.264968][ T30] ? __pfx_kthread+0x10/0x10 [ 462.264994][ T30] ret_from_fork+0x514/0xb70 [ 462.265028][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 462.265054][ T30] ? __switch_to+0xc89/0x1420 [ 462.265079][ T30] ? __pfx_kthread+0x10/0x10 [ 462.265104][ T30] ret_from_fork_asm+0x1a/0x30 [ 462.265136][ T30] [ 462.265143][ T30] Sending NMI from CPU 0 to CPUs 1: [ 462.275793][ T1723] block nbd1: Possible stuck request ffff888027810540: control (read@3072,1024B). Runtime 360 seconds [ 462.284584][ C1] NMI backtrace for cpu 1 [ 462.284599][ C1] CPU: 1 UID: 0 PID: 1723 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 462.284618][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.284629][ C1] Workqueue: kblockd blk_mq_timeout_work [ 462.284658][ C1] RIP: 0010:lock_release+0x26d/0x3c0 [ 462.284683][ C1] Code: e8 28 2f 00 00 48 8b 5c 24 08 48 c7 c7 8c 06 4b 8e e8 27 bc 2c 0a b8 ff ff ff ff 65 0f c1 05 ea 0d ca 11 83 f8 01 75 2e 9c 58 00 02 00 00 75 42 f7 c3 00 02 00 00 75 47 65 48 8b 05 fc c8 c9 [ 462.284698][ C1] RSP: 0018:ffffc90000a08cc0 EFLAGS: 00000046 [ 462.284712][ C1] RAX: 0000000000000046 RBX: 0000000000000087 RCX: 0000000000010003 [ 462.284723][ C1] RDX: 0000000000000004 RSI: ffffffff8e4b068c RDI: ffffffff8c4bd380 [ 462.284735][ C1] RBP: ffff88802a774a40 R08: ffff8880b873b14b R09: 1ffff110170e7629 [ 462.284747][ C1] R10: dffffc0000000000 R11: ffffed10170e762a R12: 0000000000000004 [ 462.284758][ C1] R13: 0000000000000004 R14: ffff888076b2a990 R15: ffff88802a773e00 [ 462.284770][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 462.284784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.284796][ C1] CR2: 00007f5a55c95e9c CR3: 0000000079d9c000 CR4: 00000000003526f0 [ 462.284811][ C1] Call Trace: [ 462.284818][ C1] [ 462.284827][ C1] ? try_to_wake_up+0x896/0x14d0 [ 462.284855][ C1] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 462.284879][ C1] try_to_wake_up+0x896/0x14d0 [ 462.284909][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 462.284929][ C1] hrtimer_wakeup+0x4e/0x60 [ 462.284948][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 462.284975][ C1] hrtimer_interrupt+0x448/0x910 [ 462.285008][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 462.285027][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 462.285051][ C1] [ 462.285056][ C1] [ 462.285063][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.285081][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 462.285098][ C1] Code: 0f 84 44 ff ff ff e8 b2 6a 21 00 fb eb 44 e8 aa 6a 21 00 e8 85 ed 29 0a 4d 85 f6 74 94 e8 9b 6a 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 462.285112][ C1] RSP: 0018:ffffc900067b7160 EFLAGS: 00000293 [ 462.285125][ C1] RAX: ffffffff81a507a5 RBX: ffffffff81a5061f RCX: ffff88802a773e00 [ 462.285138][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 462.285149][ C1] RBP: ffffc900067b7210 R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 462.285161][ C1] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: 0000000000000000 [ 462.285173][ C1] R13: 0000000000000063 R14: 0000000000000200 R15: 1ffff92000cf6e30 [ 462.285187][ C1] ? vprintk_emit+0x2cf/0x560 [ 462.285203][ C1] ? vprintk_emit+0x455/0x560 [ 462.285225][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 462.285247][ C1] dev_vprintk_emit+0x338/0x400 [ 462.285265][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 462.285289][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 462.285317][ C1] dev_printk_emit+0xee/0x140 [ 462.285340][ C1] ? __lock_acquire+0x683/0x2cf0 [ 462.285364][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 462.285384][ C1] ? __dev_printk+0x131/0x190 [ 462.285404][ C1] _dev_info+0x11e/0x180 [ 462.285432][ C1] ? __pfx__dev_info+0x10/0x10 [ 462.285461][ C1] ? nbd_config_put+0x18c/0x660 [ 462.285490][ C1] nbd_xmit_timeout+0x948/0xca0 [ 462.285516][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 462.285540][ C1] ? __pfx_nbd_xmit_timeout+0x10/0x10 [ 462.285568][ C1] ? blk_add_timer+0x19f/0x2d0 [ 462.285585][ C1] blk_mq_handle_expired+0x15d/0x290 [ 462.285604][ C1] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 462.285621][ C1] bt_iter+0x2c9/0x390 [ 462.285642][ C1] sbitmap_for_each_set+0x2f8/0x5f0 [ 462.285668][ C1] ? __pfx_bt_iter+0x10/0x10 [ 462.285686][ C1] ? __pfx_sbitmap_for_each_set+0x10/0x10 [ 462.285708][ C1] ? blk_mq_queue_tag_busy_iter+0xde/0xc40 [ 462.285729][ C1] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 462.285746][ C1] blk_mq_queue_tag_busy_iter+0x795/0xc40 [ 462.285767][ C1] ? blk_mq_queue_tag_busy_iter+0xde/0xc40 [ 462.285786][ C1] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 462.285808][ C1] ? __pfx_blk_mq_queue_tag_busy_iter+0x10/0x10 [ 462.285828][ C1] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 462.285848][ C1] ? __synchronize_srcu+0x243/0x2f0 [ 462.285872][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 462.285894][ C1] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 462.285917][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 462.285938][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 462.285960][ C1] ? synchronize_srcu+0x20a/0x260 [ 462.285984][ C1] blk_mq_timeout_work+0x1b2/0x3e0 [ 462.286011][ C1] ? __pfx_blk_mq_timeout_work+0x10/0x10 [ 462.286039][ C1] ? rcu_is_watching+0x15/0xb0 [ 462.286065][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 462.286084][ C1] process_scheduled_works+0xa8e/0x14e0 [ 462.286118][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 462.286141][ C1] ? assign_work+0x3cf/0x5d0 [ 462.286161][ C1] worker_thread+0xa47/0xfb0 [ 462.286189][ C1] ? __kthread_parkme+0x71/0x1f0 [ 462.286215][ C1] kthread+0x388/0x470 [ 462.286238][ C1] ? __pfx_worker_thread+0x10/0x10 [ 462.286256][ C1] ? __pfx_kthread+0x10/0x10 [ 462.286279][ C1] ret_from_fork+0x514/0xb70 [ 462.286305][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 462.286332][ C1] ? __switch_to+0xc89/0x1420 [ 462.286354][ C1] ? __pfx_kthread+0x10/0x10 [ 462.286377][ C1] ret_from_fork_asm+0x1a/0x30 [ 462.286403][ C1] [ 462.286592][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 462.286607][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 462.286626][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.286636][ T30] Call Trace: [ 462.286645][ T30] [ 462.286652][ T30] vpanic+0x56c/0xa60 [ 462.286681][ T30] ? __pfx_vpanic+0x10/0x10 [ 462.286710][ T30] ? __down_trylock_console_sem+0x6b/0x110 [ 462.286736][ T30] panic+0xc5/0xd0 [ 462.286762][ T30] ? __pfx_panic+0x10/0x10 [ 462.286792][ T30] ? wq_watchdog_touch+0xf9/0x160 [ 462.286812][ T30] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 462.286846][ T30] watchdog+0x1030/0x1030 [ 462.286876][ T30] ? watchdog+0x1c7/0x1030 [ 462.286905][ T30] kthread+0x388/0x470 [ 462.286930][ T30] ? __pfx_watchdog+0x10/0x10 [ 462.286950][ T30] ? __pfx_kthread+0x10/0x10 [ 462.286977][ T30] ret_from_fork+0x514/0xb70 [ 462.287006][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 462.287032][ T30] ? __switch_to+0xc89/0x1420 [ 462.287057][ T30] ? __pfx_kthread+0x10/0x10 [ 462.287085][ T30] ret_from_fork_asm+0x1a/0x30 [ 462.287118][ T30] [ 462.287270][ T30] Kernel Offset: disabled