last executing test programs: 1.956367997s ago: executing program 4 (id=6495): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x1) (async) ioctl$PPPIOCGNPMODE(r0, 0x4008744b, &(0x7f0000000100)={0x29, 0x2}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) 1.867800961s ago: executing program 0 (id=6496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00S', 0x2}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)="29653633f1", 0x5}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r3, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x8, 0x80}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x60, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7f}, @FRA_DST={0x14, 0x1, @private1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) 1.779334961s ago: executing program 0 (id=6497): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r1, &(0x7f0000000080)='GPL\x00', 0x2c0000, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x2d]}, {0x800, 0x6, 0x5, 0x5}}, 0x0, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="fa6baaf45c8cb49e9d2cbc0ea638", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.738956749s ago: executing program 0 (id=6499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c33cedcbd0007007f0000010a000100aa"], 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic='6']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) close(r1) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) 1.679266621s ago: executing program 4 (id=6500): socket(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff2cbd7000ffdbde2500000000", @ANYRES32=0x0, @ANYBLOB="096d050025100400140012800b0001006970766c616e00000012028008000500", @ANYRES32=r0, @ANYBLOB="08000a0064c9"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000180)=0x14, 0x4) socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000000c0)=""/83, &(0x7f0000000140)=0x53) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}]}, 0x4c}}, 0x4800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendfile(r4, r5, 0x0, 0xffffffff000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0x40002000}) 1.621309958s ago: executing program 0 (id=6502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000050001000700000004000780d2bbc6d9475b6787d27afb58638f452fad5917e6"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd1d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x898e}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x8084}, 0x24008000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x5}}, @fwd={0x9}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000001980)=""/150, 0x40, 0x96, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', 0x0, r6, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000580)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x36}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000)=0x4ca68b28, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) socket$kcm(0x2, 0xa, 0x2) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 1.488390689s ago: executing program 3 (id=6504): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvfrom$phonet(r2, &(0x7f0000000440)=""/26, 0x1a, 0x160, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r5, r4, 0x5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x20, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffeffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @generic={0x0, 0x5, 0x0, 0x3, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r7}, 0xc) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1f0, r8, 0x800, 0x70bd2c, 0x74, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x82c7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6a8401e6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x81, @rand_addr=' \x01\x00', 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private0, 0xc22}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8001}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x32}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000811) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00822f", @ANYRES16=r10, @ANYBLOB="05062dbd7000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0500530000000000080005000b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f00000001c0)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dd000000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fbdbdf25620000000600b400b10e00000600b300020000000600b400190400000600b300020000000600b300010000000600b400451000000600b30003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x67ad4f5344d37f7e) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1af8ff00010000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x5, 0xe0, &(0x7f0000000440)=""/224}, 0x94) 1.259562564s ago: executing program 1 (id=6508): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0xa, 0x4e21, 0x8, @empty, 0xffff}, 0x1c, 0x0}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2cc246b85be09cd0eb5ba07d786808fd67185aa4", 0x14) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f000000c180)=[{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000c00)="ce6d1d368531f4aa", 0x8}], 0x1, 0x0, 0x0, 0x4008080}], 0x1, 0x8045) recvmmsg(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)=""/173, 0xad}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/99, 0x63}], 0x1}, 0x2}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r4, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003b40)=""/4112, 0x1010}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=ANY=[@ANYRES64=r4, @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="04010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff01000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="000102803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES16=r2, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="740002803800010024000100616374697665706f727400000000009cc90000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004004c050000080007004000000008000100", @ANYRES32=0x0, @ANYBLOB="540202803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000009c08000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000a0000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040068ffffff08000600", @ANYRES16, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400050001ff10000000fe000309ee0f0000080008060500000008000e02070000000000020340000000ff03e5098000000010000f00020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b40002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="5002028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004009d15000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000c0000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ad07000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000f00000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000100003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400001000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000800fe04020000000700808146b400000300ce090000000001000b400800000007000605f900000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="04000280"], 0xa40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20050804) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xd, 0x1fffd, 0x0, 0x3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0d, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}], 0x2}], 0x1, 0x40800) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'veth0_macvtap\x00', @random="000500000020"}) write(r6, &(0x7f0000000040)="1b0000001e005f160214fffffffffffff807000000010000000000", 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000040)=0x2, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.058935378s ago: executing program 2 (id=6509): unshare(0x2020600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000400087012cbd7000fadbdf25037c00000400c280240001802000108014000c000000000000000000000000000000000108000b8004000000", @ANYRESOCT=r4], 0x40}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x2d4, 0x3d, 0x8, 0x70bd35, 0xfffffffc, {0x19}, [@nested={0x2bd, 0xa3, 0x0, 0x1, [@generic="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", @nested={0xb7, 0x12e, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @u32}, @generic="95d2079f0e283d4173fbd8d703d298a272b7774471702d0fc291f6c1ed763dc4a84c9f3cf39bb175e390002cc941b723c46b6a4a1e817f671c773e9e3ea3d3256516cc9bd9d5329175e7678338321c983fdbdf4fabc1158ee93e83ce0ee4d397703a2aa4e5a703b92506e328afb3b59f9ff20390c6db050bed37338fc05d9cf79934d9b301a8605def71e714b9e2b69724cb67fefe88c5823f538d40ec4350d2efd620cbeebf4056c854cf"]}, @nested={0x24, 0x8a, 0x0, 0x1, [@typed={0x8, 0xa0, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x2b}, @typed={0xc, 0x8e, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x4, 0x55}, @nested={0x4, 0x148}]}, @generic="64a2eedfcda9a48b002a702536c08c23b79c764b6e2eb63a6e3c7e3934010ba80a4a11e40bdeb33f373932e4fe74ed72981a059372253f526374cbc0ce387b47bd445d21c47a5c405161eaa69513a4a706610d311194df61298f8701e69501ddabd3459a3dbffe116ff40003fb08b1b89407d0c4173d798278b903ee2521f23c8931c63be6c47dc45ec520b3e6c8aefb013bc6d3ca0d2b6623972ce4c1597e3a1fcce58c27d71765223ce22453833bf19c5b8172c912597d30dae63b4e0aeb71918cc7858f29bed3ea024fa70f6711d0b90fb06c72d52e4b3203a3eee42322121201"]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x240448d3}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000340)={0x0, 0x5, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @multicast, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf2501000000180001801400020036657468315f746f146fdf5f7465616d000000100002800c000180080001001600000027b8324efc54ea2dbfc49e131b725c62570ddead2c54d28c01dd90abc92d1150aa2f3a01350bf0ec87a63a3b3d8dafdbffba1219ec1dfc2911846c2be0f68abfc4f1454d8afbf122562eda2e8bad416b88adae5c3dcbe0913ce8cd46420bd0d45890dd1589de5eb638c9"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.003091917s ago: executing program 3 (id=6510): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x783a0ef, [0x9d82, 0x800]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x8, 0x2, 0x200, 0x101, 0xd53, 0xf, 0xb3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24040080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'veth0_to_bridge\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 946.61187ms ago: executing program 1 (id=6511): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) (async) unshare(0x2c020400) (async) write$nci(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="62e70000000000000000"], 0x11) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, 0x0, 0x1ff) (async) r7 = openat$cgroup(r6, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000005c0)={r4, 0x7, 0x401, 0x5}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf25030000000c00040005000000000000000c000400070000000000000008000100000000000c00050000010000000000000c000600000000000000000008000100000000000c00060001000000000000000c0003000300000000000000340007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r13, @ANYBLOB="9cc160c4a57b8fad2f0a0c"], 0xa0}}, 0x20000000) (async) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001800ffff00fd090000000004000880"], 0x20}}, 0x0) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000e00)={'gretap0\x00', r5, 0x0, 0x7, 0xd8, 0xffffffff, {{0x47, 0x4, 0x3, 0x6, 0x11c, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0xad, [@private=0x8010101, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010102]}, @generic={0x7, 0x4, "1fe5"}, @timestamp_addr={0x44, 0x2c, 0x2b, 0x1, 0xc, [{@local, 0x9}, {@empty, 0x8a}, {@loopback, 0x5}, {@remote, 0xab1e}, {@loopback, 0x7}]}, @lsrr={0x83, 0xb, 0xbd, [@multicast2, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x99, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x10}, {@private=0xa010100, 0x8}, {@multicast1, 0x7}, {@rand_addr=0x64010103, 0x3ff}, {@local, 0xd1}, {@remote, 0x413bbaba}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x19}, @cipso={0x86, 0x58, 0x1, [{0x2, 0xf, "cdd814863bfea53ffc534334ae"}, {0x7, 0xf, "393c3b1fe9726fc9a04c7cfa24"}, {0x5, 0x8, "bdd261e2e6b5"}, {0x5, 0x9, "d059f6106a22d9"}, {0x6, 0xd, "f871488812f85e1fea4a02"}, {0x1, 0x5, "8a34ba"}, {0x6, 0x11, "af8846dba6d62b274ae569945f5661"}]}, @timestamp_prespec={0x44, 0x24, 0xf2, 0x3, 0x5, [{@multicast2}, {@empty, 0xae21}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010101, 0x1ff}]}]}}}}}) ioctl$XFS_IOC_GETBMAP(r14, 0xc0205826, &(0x7f00000001c0)={0x71f, 0x5, 0xffe, 0x6, 0xce4d}) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r15, r5, 0x25, 0x0, @val=@tcx={@void, @value=r15}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9200303afffe8000010000000000000000000000bbff020000000000000000000000000001020090780000000565d2241802006c00ff020000000000000000000000000001fe8000000000000000000000000000bb3035d24809ea301ac5af6976192a7ad198e836e9b974d8869d96ddb6c0962dde774063e333bfe2df6ae73db697a64332b8973ed0b27c0d7eeafb3dba87948b4f47d3626ce5501465ceb0991bad48d00d56295a18367e6058accf61e204498ee54a75754d5f143e33ce367075b65c2423f4032320188127620acecd168f720cb2181d80b8cbaf719e1869ec12"], 0x0) 945.617527ms ago: executing program 4 (id=6512): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x3}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000ae80300140000006c07010033d484"], 0x340a) 939.931952ms ago: executing program 2 (id=6513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000040000000100000014100000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 767.042991ms ago: executing program 1 (id=6514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x20044080) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) (rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000080)={0x7, 'syzkaller0\x00', {0x9}, 0x5}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x10, 0x1, 0x0, 0x5, 0x0, 0x1}, {0x8, 0x2, 0xd, 0xf, 0x8, 0x7}, 0x0, 0x2, 0xde4}}, @TCA_TBF_PBURST={0x8, 0x7, 0x13de}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 766.340519ms ago: executing program 2 (id=6515): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x464, 0x4, 0x70bd2b, 0x25dfdbfd, "bb4242a14bd90efb6f0a12e1a83ecf5232eda1311f976296bc0c7fe9ba99a9d5197400f7f44441afc253b7fa8fb1172579e7bdada040d08f1d5d58ba033d0f0aa77a01d51863550d3b8a32d9b9ea1725955d2bbb00089ffb44044ef82dfb1265faac166dbbc52ef33910e5ec74d1b663c086aeb6e6cd40a6b15f63cd05145a343af9489b46a5e7640925045012a833aac1fdd9484d95359dd192db0d235a70dd5707bc7021ca7531e704dcf0ca12568dd3cce6436a50f66e4731114bb23ddad31d6e5ba23c3991f3454aa29f9db3a9be1181e01a1dfcc10427f44d5949c8e888ba26a153ff1617bada9c", ["", "", "", ""]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0xd, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000002c0)={0x3, [0x6, 0x38d0, 0x638]}, 0xa) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000380)={0x8, 0x5, 0x8002, 0x5ecafa43, 0x7, 0x65, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0x339, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4baf}}}, 0x84) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000c80)={{r2, &(0x7f00000004c0)='\x00', 0x80000, &(0x7f0000000500)={@_ha_fsid={[0x4, 0x2]}, {0x3ff, 0x3, 0xd, 0x2}}, 0x0, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1000}, 0x5, &(0x7f0000000bc0)=[{0x3, 0x3ff, &(0x7f00000005c0)='hash:net,port\x00', &(0x7f0000000600)="501f748e78d839249f55138ebcf984f9f1771845c0c66f9020cf6c2670ccb3988c2b5fbba23bef9d288e2f85802e41adb30aaa5618b56e11fd13048313a80f8c483ccaba38671ded348c8543f335a46362326c326dd154937ab09ba6bc6ee4f1c6b1fd929e896cb4cb25640795cb380e9692b0f7eaffe321ed03c0d64d0b2af8bd49115bc7", 0x85, 0x40}, {0x1, 0x0, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="a53c567bc4a0f48cb72b45a5647bbd0189b5f16974f7fe3e6a446ade51f4b6362d00d06a8b83576b7b1c6fe2a2dce95db86dfc5e4949d2ac2f6948fb566e8458b0192c4d38c084e0a96c95cb36b61eba35821c30e68ac35ea92c084650915b68f5b9e92dc2f25bfbb614a9bf2d7c2e569bcf403d7567dbe5b242ee0b2c0945f456dc68f906c8343deaa4669c83cf2527f550d3c84ba7bbc19a6cfbf351cbf6071867bcd34c432bd2c3dbe0b0d743bb8f477738fdc2bd137167a837119f2b30ad39435ede", 0xc4, 0x22}, {0x3, 0x7, &(0x7f0000000800)='\x00', &(0x7f0000000840)="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", 0xfc, 0x1a}, {0x2, 0x1, &(0x7f0000000940)='\x00', &(0x7f0000000980)="c54e5189c0e9ffc88d182342def939d6d49077e9d9ee555636b482b6d315ccaafdc385a410b676120e234add54ea148c6cce775c70b1f682a87b5b2589fcd5ed052bbf39fe2fe798dee0a6a760ab679bce0fca5ae5a594ee0399a7cf22a3b13a156e19bfb1644ebd4195d7037eca13c3f3d9057cf60309982f999e6a3427514836b02e7b3af4783f918c1d8364a629743fb6ce90dfcb09e8aa204c645a1c8680af7241d99bf547fc08e4fd174d70433359d3e725119f6467c66fc4cca27ceb570518af6edbff2e", 0xc7, 0x20}, {0x2, 0x5, &(0x7f0000000a80)='hash:net,port\x00', &(0x7f0000000ac0)="acb9e0dcc50208bbbfecdf002c913f5204c6caa9f8033b3932db0d075cc254ecc3fd3ba3a221be754c67d8b9a91902312b9893683ed56375ff91b06886f77bb5a1fa9a8336d437b97c41daed3b170172e3b163e250c02ffd1ecf81ba82a70b25c5246fa7d3d217f79b318f57fad1827bcdadd3ea806c90c4df51027c58d80ef570c00c42ad1243479384b11a70a33ada27bcc5b0cebd53d2b5bef9e8b948784ad5d86750bd6f8c7e8b479b081129a251a4437bdbb5f84aefe7ee80c9e7e53b88095015d907b093024320ae84d942eb63", 0xd0, 0x10}]}) write$nci(r5, &(0x7f0000000d00)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x5}, 0x4) (async, rerun: 64) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d40)={0x0, @dev, @loopback}, &(0x7f0000000d80)=0xc) (rerun: 64) setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f0000000dc0)={@rand_addr=0x64010101, @private=0xa010101, r6}, 0xc) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r5) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x60, r7, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfb}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x280000}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x20040000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001000)={'tunl0\x00', &(0x7f0000000f80)={'tunl0\x00', r6, 0x8000, 0x1, 0x8, 0xd, {{0x11, 0x4, 0x3, 0x23, 0x44, 0x67, 0x1, 0x5, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@rr={0x7, 0xb, 0x8f, [@multicast1, @rand_addr=0x64010102]}, @ssrr={0x89, 0x23, 0xfa, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @rand_addr=0x64010101, @broadcast, @private=0xa010100, @loopback]}]}}}}}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001040)={r8, @remote, @multicast1}, 0xc) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000001080)=@assoc_id=r4, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000010c0), &(0x7f0000001100)=0x4) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000001140)={r4, 0x66000000}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000011c0)={r9, 0x38, "bca1c1bfdf9cac77d9e5d91551586af11bbf045a00247d42768c863eb31e810fa0cc80b54de54168ddc8b19d4687c07534dc3bf35dd384ea"}, &(0x7f0000001200)=0x40) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000001240)={0x3, 0x9, 0x10109, 0x22, 0xfb3, 0x73cd, 0x8, 0x3, r9}, 0x20) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000004000)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003fc0)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x2c48, 0xe, 0xa, 0xc80, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b0c, 0x3, 0x0, 0x1, [{0x1630, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x194, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x80, 0x1, "96f76d3f31193b7b6c756c1ff4699eeb0584fbbd624269ea7e337da023d8ceff38255d2b2437c7fbcea7782aca6a11fd644b82ecdfa185b092ac0e83ded9f6c7974e73b6437044291e2e68b90d4aef84c2a3294f8e38a7f5b924c13e4e51ac232206d0d0f9e95f49787e351acc4c8ebfe7542808755c43fe4c3cc556"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xad, 0x1, "111b3024677c46a97dc69e04d113a45e500c24d745a5cd88b18f83bfed87994afb481d85ce2285019d33776cc4303140c16eea21f549df6876cd5a74fd5153a4505453489045187481113cf409411d4f1c231e1e6e41fa1ed697758ee4c10bb149de7f809b156bb9ffeee34f52fa1d0d45d74d03bf18d37c430b0bff4269b67a61fcb7451c9833b6fd3d0c2b497a24770eff5787939eabdf953fa7f13d8e17d15589622f169748feac"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xe4, 0x6, 0x1, 0x0, "f02a18a8cfdd307d393af37084cc02e0872df97403ab892ca695985b0a2e78cf729778e7860555a99be5f964c649c813c647254b06d41c93a56379891970ff97e32a37de135eb55b8ec43639ef0b5a77ba21c36528a6bcd39e195f422161ffe5bbafd2510351f5105e857b124ea905fdf265db71117f3d985a24cf77be3056586390d626db3f61cb1bd413f955824140a2271f9941db66c1bbee95a91f36a79ed7830f63f0e4dd1ef113c02e45ab60ef64a700865624014c22c7415c27d1648958eaf7fff2c55c67890f781c358cf7354c1deb259b13c3bc9458c858ff1619bd"}, @NFTA_SET_ELEM_EXPR={0x64, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xf0}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x8d}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x23}]}}}, @NFTA_SET_ELEM_KEY={0x1330, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "05aa35f1c087dd44ff0add36053860d1c9ebbe68c5246b5580c512c7126deec504304f6707cf51777e2819393145fd6731618c981f6c4a8656420d91b2635270b0cdff26446cfc431800b8de63c0ac7aa46bb75e5adf2fdc3113d9b777e7c6411037936a91f5666948c084275a7ddbb3f1373ebad330db8b15585f495107c414bccd6cead8fc0ff13a88cda0539cff49e8b8be64934ecf62256e7af8fe36f32e2415360b"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "0a6a3825ef6e15cf275021b1677489b7beca9721dfe965e525a3bd2eab40e9a0de5de26cab078ff3d92f7a92805cc39888c2a2f550f625ccdada80ad13965996edf920bb1cd868577bbc04c7c79964721060a19069fcf8c6f078f75f4db6bd36b9e3b4d3722ae9268274fc063f257cb06244671876244b89ce365f02f6b3a36377b0db82004bffae8c3f9f2b59a029512f1168db34f2ea865ebda00c"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x50, 0x1, "3845c186c850da408f8a3c85379b866406109accee0a4359b49918c073366dabbd07a19f00ed43ac0376ed9e87ab18d4bbdc6f2b44b29b873a42b70a6e478559e2a141963ea9f7321844a90c"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "8e61491b2b627d2821c94af4d19d71e89fdb698881eb12ee0ef127dac07022b63d1ab8a085edd0143fc22c86098782e74c8a13df6ac1d1d15e9f969c3a3b69ac907315a1901e85758086e63bb4c141320bde4e260a040bf1eace50a0de7539558acbf1d5e7ad8a56e0a6083d551d4ea3fa2863b1ac74e66474d0502d9a0afef51b04c6441074c21cb0bad64f6a1b24e19f886d81cace4804fa64ebeb0c6c01f277bcafbc3e03fae952f77e4f33e7b8793b5ffc1fbfc56e9f08003217320b0271a3b89a"}, @NFTA_DATA_VALUE={0x91, 0x1, "465922c580ae42b9d4665fd4b733e45aa99011382d02263aa2fc2c1e576cbe6212252d3d4ecdfc12da97d827ef8130ea1604b1a2d079964202eb892f6a4317d2fae904db4fd1abd625bae00824833844fa32a1708ea139b0383fdc99e28ca3580aeaedcb38678204f4d7ee5a69a1a48769ab53087e8388277107c342af28ea4883ea206a709b6ca24417791940"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}]}, {0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}]}, {0x1b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "c88fbdb3850b0f82e560d0ac2597cdb03665b663a02294fd999e02313c3c6a8d1ea8b01945334b520c4029b01718af6463312dad80845f70683329cdec5f42db96681bd1c1c0573239ddff49f634898b670a7bd84db779472152535f3775e6c07af3c027908a2d0fd331479c4c3a9e769145ba1eb003e06bb60b02b41339a5c0ae58c14bbacc5c47c9457f6bc751f3893f4523271cab0c5a02e47575722715ba673b31da3851d364efb22271662a91a8a1aa9e4600d1682a206b7fbbd00089826307c13a947f507535eacc3a26273dbb54f18653acb5e142c5c62cf9"}, @NFTA_DATA_VALUE={0x90, 0x1, "0346def3dc4b8faebc453edba6789470418dbd41fa192a9fa17498866c4f6e842528266274a8c63f91e608f9c4be10adea674496443d850b9a73a852b5251df4c7c988ce60e3cb95b1ddc91463590e4e92c61df7d61ccca2822b9ca04719a77b032896845faf4214094f88cd68675eceac16046230e5d4738d3888d2cd6c170b6285c23b82b1afa457473726"}, @NFTA_DATA_VALUE={0x2e, 0x1, "d3e392ab935c58b9a4107d4d9e7b8d3e08d06d510622ae47cb8c53e6b9b6cf8cd1509450a837d22b7367"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10e4, 0x3, 0x0, 0x1, [{0x1060, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "ef96218b320f31006556113958bc9a29143e40777bdd80fb57b84add6909f6a0e3c767715ef2db84686773c18ddbc457dcce0151eee724a0070b62cc6dded820d699b142cc47b1bcdcf3d3b3234fba5b84"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff7}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9a0619e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4721c1c7}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x2cec}}, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000040c0)={'pim6reg\x00', &(0x7f0000004040)=@ethtool_link_settings={0x4d, 0x3, 0x5, 0x9, 0xf7, 0x2, 0xff, 0x93, 0xed, 0x6, [0x31c, 0xfff, 0x9, 0x8, 0x7, 0x7, 0x8000, 0xb], [0x6, 0x800, 0x10000, 0xd, 0x12, 0x4, 0x4, 0xdf, 0x2]}}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000004140)='syz1\x00', 0x1ff) 684.85681ms ago: executing program 3 (id=6516): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001740)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x81) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x7c, r6, 0x1, 0x70bd27, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x8b, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90656}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x7}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x690}, 0x40) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x240028c9}, 0x4040804) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e21, @local}, {0x1, @link_local}, 0x41, {0x2, 0x4e23, @rand_addr=0x64010102}, 'syz_tun\x00'}) 625.078522ms ago: executing program 0 (id=6517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000280), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="5ecb3030168c"}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x2e]}}, 0x0, 0x1c}, 0x28) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={0x0}}, 0xaae7eee4eca9d300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000006a002902"], 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="800000000107050000000000000000000700000a3c0000800800014000000003080002400000000008000140000002000800024000000006080002400000000608000240000003ff080002400000000509001c0073797a30000000000c000640000000000000068e0c00064000000000000008400c0206400000000000000001"], 0x80}}, 0x24040000) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00030033a6188071a383fe00", @ANYRES64=0x0, @ANYBLOB="28001280090001028014000100"/28, @ANYRES32=0x0, @ANYBLOB="00400000400600000800200004000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000c00c}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x24002, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="05c38c886b60aaaaaaaaaabb86dd6002000800783afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce5400637cf598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37a9ac15084dbaf736b41e5af18030001a200fffffff50000000000000001fe906d26efe3"], 0x0) r8 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000000400)={r6, &(0x7f0000000140)='@\x00', 0x80800, &(0x7f0000000180)={@align=0x8, {0x1, 0x2, 0x100, 0x4}}, 0x5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000003c0)=0x8}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)=0x1) 543.23088ms ago: executing program 4 (id=6518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRES32=r4], 0x58}}, 0x4000) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000200001000000000000000000030100800c00010003"], 0x114}], 0x1}, 0x0) 542.808446ms ago: executing program 2 (id=6519): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xe4ff}, {0x3, 0xfd}, {0x7000, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r3, 0x0, 0x25, &(0x7f0000000040)="1814f6baace9e0", 0x7) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x0, 0x779, 0x2}, {0x2000000000, 0x20000800000, 0x0, 0x186, 0x10000000000000, 0x0, 0x0, 0x914}, {0x3, 0x7fffffffffd, 0x0, 0xfff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffffffff, 0x1001}}, 0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb000000000000000002"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xe4ff}, {0x3, 0xfd}, {0x7000, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_buf(r3, 0x0, 0x25, &(0x7f0000000040)="1814f6baace9e0", 0x7) (async) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x0, 0x779, 0x2}, {0x2000000000, 0x20000800000, 0x0, 0x186, 0x10000000000000, 0x0, 0x0, 0x914}, {0x3, 0x7fffffffffd, 0x0, 0xfff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffffffff, 0x1001}}, 0xe8) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb000000000000000002"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) (async) 538.302719ms ago: executing program 1 (id=6520): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000000080)=0x1, 0x4d) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000400)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x16}}}}], 0x20}, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x400000, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)}}], 0x2, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000b40)={{r4}, "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"}) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x6bb}, &(0x7f0000000180)=0x10) 431.09846ms ago: executing program 0 (id=6521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x80000009}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r4, 0x9, 0x10001}, &(0x7f00000000c0)=0xc) recvfrom$inet(r1, &(0x7f00000000c0)=""/231, 0xe7, 0x2000, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000240), 0x10, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="05000000940400009e00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r7/1000+60000, @ANYBLOB="020000e001000000000000a800"/24], 0x48}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) close(r5) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newchain={0x2c, 0x64, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0x10}, {0xfff3, 0xf}, {0xfff3, 0xd}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x0, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r13, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 411.998988ms ago: executing program 2 (id=6522): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x100, 0x4070bd2c, 0x25dedbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x2a}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, r1, 0x5d456bfa1b4b8dc7, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa0c1, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x41}, 0x40010c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) 376.83652ms ago: executing program 3 (id=6523): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0xb, 0xf, 0x2}) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x2, @remote, 0xff}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="fcd00115f1d89ddbc7b58a7c8b861b4ebc76253e327450dc0d37d5810e99ee4444c0a867af42723e6ac8b95964b12e7f9ffe0234a965e63c65f867d2cd15328e777b2382c57df580dab0f9e89707a6d8f7fe7a17b1266a387d0266423de9433f4fb9e5a0152c635034d76d0c606f82b46ae7d328", 0x74}, {&(0x7f00000001c0)="f8980a8214d77af390279430bf856a9c0f8d18555d599b0458b8634a67228dffd0dc2e508a6f65afcafb2a728ad213eddd8686a5d1168be514df9c6d89f62cc8528a5b30df29f354d283a4fa77853a1a1f20867fade232105e2c46bd5a2cf6d5334fd4260d427daa1f7dcc443004f613edb8468c128c9856912c9194adcd5adb7663a1437dabb8", 0x87}, {&(0x7f0000000280)="6ec94a877531974210a019", 0xb}], 0x3, &(0x7f00000003c0)=[{0xb8, 0x29, 0x7, "aac0e6c14e78aa4454df8803cbdd4d147d8d34f02e34ec0a9f66dba768a6af00be39a85075bd854947f4642c956be25542a41950244a396bb9d7b478025d7f70ff5c5ca9ec260d7e9471c59f5b1b942dcc067409b99838dc000717388c0a07e0f3aa0bc288561a97be795b467138028c77486340b1e46b1abe2a7d58daad8676cadaeeb4ed1da5d71103a027bbe984f61d5e16c21f1e0378324c92b4fb29fc2cd6"}], 0xb8}, 0x40045) 323.30811ms ago: executing program 1 (id=6524): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f0000000180)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="050009000400000006000e0002"], 0x60}}, 0x0) (rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 263.002437ms ago: executing program 3 (id=6525): r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x4, 0x40, {{0xa, 0x4, 0x0, 0xe, 0x28, 0x68, 0x0, 0xfd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, {[@timestamp={0x44, 0x10, 0xed, 0x0, 0xe, [0x7, 0x37, 0x1]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0xb5, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x97, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pI4 \x00'}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, r1, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc10f, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000100)='GPL\x00', 0x100, 0xc4, &(0x7f0000000140)=""/196, 0x41000, 0x0, '\x00', r5, @sk_reuseport=0x27, r1, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x3, 0x934, 0x6}, 0x10, r6, r2, 0x5, &(0x7f0000000980)=[r7, r8, r2, r3, r3, r4, r3, r2, r2, r3], &(0x7f00000009c0)=[{0x0, 0x5, 0x1, 0xc}, {0x1, 0x2}, {0x2, 0x4, 0x8, 0x6}, {0x0, 0x5, 0x3, 0x7}, {0x0, 0x5, 0x10, 0x5}]}, 0x94) splice(r0, &(0x7f0000000040)=0xfffffffffffffffe, r2, 0x0, 0xb, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3aa0021a000000071101a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 220.100898ms ago: executing program 4 (id=6526): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfff], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x89f8c55f46292553}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x40, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xb0}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x1ff}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x804) 176.575923ms ago: executing program 1 (id=6527): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="090000000100000008"], 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x1200}, [@IFLA_ADDRESS={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r2, &(0x7f00000002c0), 0x44) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8000000b}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x804) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4622, 0xb57, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xb4, 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="a961d2d4c4411d87972476a77c43ccf4f51f22fc527f93b5eae72ce8bfffdc65d7f90c3cd1e77abf28471ec7b9dfb7d09c24b3b06758d742368457a17aa5b323eddfdb52e7fe4e5eeccdec5d481509efc2c3f69d2f70fd8f3d03a254815b8c3854590600d9260a0de4e14b5f6250a888d64f23036e7813831e43722be5de380b05f8fd5aebbd54279a7037d55f76fd650b11ac0105fc4e34eecb89f0418b15ef4db9f30afb53706a2ab132a1715109dd079b693cb5063267f367ff6be17db02f919725c28bbc900882e4605a6ab9aa187c3b", 0xd2}, {0x0}], 0x2}}], 0x1, 0x4001c00) 176.102779ms ago: executing program 2 (id=6528): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x3}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000091) sendto$inet6(r2, &(0x7f0000000140)="f1", 0x1, 0x8000, 0x0, 0x0) close(0x3) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 113.176374ms ago: executing program 3 (id=6529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc000000010101020000000000000000070000016c00028006000340000200000c000280050001002100000006000340000100000c00028005000100000000000c00028005000100210000002c00018014000300fe800000000000000000000000000000000000010600034000010000100004800c000280050002000e0000000c001880080002400000000608000c400000000208000c400000000114001980080002008c040000080002002a01"], 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x800) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc000000010101020000000000000000070000016c00028006000340000200000c000280050001002100000006000340000100000c00028005000100000000000c00028005000100210000002c00018014000300fe800000000000000000000000000000000000010600034000010000100004800c000280050002000e0000000c001880080002400000000608000c400000000208000c400000000114001980080002008c040000080002002a01"], 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x800) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x2}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r5) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x8c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d40aa16e0c73ae48f683baf0e1ce1fda5839da35cc0f000f15fb942556d9f67d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x8c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d40aa16e0c73ae48f683baf0e1ce1fda5839da35cc0f000f15fb942556d9f67d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x7c70ca3927fb97ad, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x7c70ca3927fb97ad, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000010180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) r14 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r15, {0xffff, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r15, {0xffff, 0x3da48c8682330ab8}, {0x6}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x64, 0x83}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000051}, 0x4880) (async) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r15, {0xffff, 0x3da48c8682330ab8}, {0x6}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x64, 0x83}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000051}, 0x4880) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)='\'', 0x1}, {&(0x7f0000000480)="19e84308dd2cfa55d3707d", 0xb}], 0x2}, 0x20004014) (async) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)='\'', 0x1}, {&(0x7f0000000480)="19e84308dd2cfa55d3707d", 0xb}], 0x2}, 0x20004014) pread64(r7, &(0x7f0000000280)=""/148, 0x94, 0xfffffffffffffbfd) 0s ago: executing program 4 (id=6530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000580)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0xb, 0x4, 0x0, 0x13, 0xf0, 0x65, 0x0, 0x8, 0x2, 0x0, @remote, @rand_addr=0x64010102, {[@cipso={0x86, 0x16, 0x3, [{0x2, 0xd, "8083cb15bab9d7610e87b5"}, {0x2, 0x3, '='}]}]}}, {0x0, 0x8, 0x0, @loopback, "bb525346bb43d571dab874d9db36725e6673bb443ea7b9a84ccaab7c986dbd54f86355d087170cca3016fac3ef1bc9b85946528839c48829230debb9c5bd2e83238215ebf133c0ce01b470b6a6de6eeebf42c46b50605cdcb8487502ff0bc40f1f73ca3b9f9427ed41b8d84da52503ffd91186ebee5cc50779b7e6a493004aed1d3036cad1031848350fad4b4dd51a756ba1390729170ddaba233df7d608f8490237a22d2cff0e42b2175439ee25b8374637d8a08cecd77f9d36b9ce"}}}}}}, 0x102) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000004206010200000000000000000a0000ba7ee72332259725000000000002000000006269746d61703a7073114c91cd906efe4b8f3b21bf2b36686f72740424000780080006400000000506000440000000055a0bfb3d40f95596404e21000005000100070000009a179180b10ae12bf415bb851cd581194a61cec7325850c384ada581064a1fb4d88e2114cbd908c2e479facf72a3c920dd9bf5bac4dc0e5579b928d8f1384ddccdfa683c0ab859f02b7545dc561a65687eb10758b8cc98681a6a454f552bb90f67a07aa7fb89ab13196ab7cf54d978ef26de84e83df87b4fb58e1487410f71"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000004206010200000000000000000a0000ba7ee72332259725000000000002000000006269746d61703a7073114c91cd906efe4b8f3b21bf2b36686f72740424000780080006400000000506000440000000055a0bfb3d40f95596404e21000005000100070000009a179180b10ae12bf415bb851cd581194a61cec7325850c384ada581064a1fb4d88e2114cbd908c2e479facf72a3c920dd9bf5bac4dc0e5579b928d8f1384ddccdfa683c0ab859f02b7545dc561a65687eb10758b8cc98681a6a454f552bb90f67a07aa7fb89ab13196ab7cf54d978ef26de84e83df87b4fb58e1487410f71"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYRES8=r3], 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000000c0)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRESDEC], 0x44}}, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xfce) ioctl$XFS_IOC_FSINUMBERS(r6, 0xc0205867, &(0x7f00000003c0)={&(0x7f0000000080)=0x94f, 0x0, &(0x7f00000002c0)=[{}], &(0x7f0000000380)}) (async) ioctl$XFS_IOC_FSINUMBERS(r6, 0xc0205867, &(0x7f00000003c0)={&(0x7f0000000080)=0x94f, 0x0, &(0x7f00000002c0)=[{}], &(0x7f0000000380)}) socket$inet(0x2b, 0x801, 0x0) (async) r9 = socket$inet(0x2b, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r10 = socket(0x2, 0x3, 0x7fffffff) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x5}, 0x22) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a00"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ummy0) entered blocking state [ 611.723483][T26964] bridge8: port 1(dummy0) entered forwarding state [ 611.807512][T26964] vlan0: left promiscuous mode [ 611.842499][T26964] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 611.873213][T26985] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 612.069247][T26987] bridge8: entered promiscuous mode [ 612.081261][T26987] bridge8: entered allmulticast mode [ 612.097561][T26987] team0: Port device bridge8 added [ 612.208967][T26995] validate_nla: 5 callbacks suppressed [ 612.209000][T26995] netlink: 'syz.0.5368': attribute type 1 has an invalid length. [ 612.210502][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.261692][T26995] 8021q: adding VLAN 0 to HW filter on device bond20 [ 612.426950][T27008] __nla_validate_parse: 18 callbacks suppressed [ 612.426984][T27008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5371'. [ 612.509271][T27010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5373'. [ 612.522513][T27010] netlink: 'syz.4.5373': attribute type 1 has an invalid length. [ 612.533484][T27010] netlink: 'syz.4.5373': attribute type 2 has an invalid length. [ 612.655254][T27020] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5376'. [ 612.925823][T27036] netlink: 'syz.4.5381': attribute type 1 has an invalid length. [ 612.967645][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5384'. [ 613.020133][T27047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5385'. [ 613.029120][T27047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5385'. [ 613.044939][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5385'. [ 613.096453][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5385'. [ 613.157868][T27057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5388'. [ 613.257664][T27065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5389'. [ 613.391258][T27070] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 613.418687][T27067] macvlan2: entered promiscuous mode [ 613.424043][T27067] macvlan2: entered allmulticast mode [ 613.430139][T27067] bond11: (slave macvlan2): Opening slave failed [ 613.460488][T27072] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 613.506243][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 613.838344][T27097] netlink: 'syz.1.5395': attribute type 1 has an invalid length. [ 614.290129][ C0] net_ratelimit: 1 callbacks suppressed [ 614.290147][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 614.389184][T27134] netlink: 'syz.2.5401': attribute type 1 has an invalid length. [ 614.418349][T27105] xfrm0 speed is unknown, defaulting to 1000 [ 614.458649][T27135] sit0: left allmulticast mode [ 614.484587][T27139] netlink: 'syz.0.5405': attribute type 1 has an invalid length. [ 614.575141][T27139] 8021q: adding VLAN 0 to HW filter on device bond22 [ 614.611880][T27145] bond22: (slave macvlan0): making interface the new active one [ 614.625776][T27145] bond22: (slave macvlan0): Enslaving as an active interface with an up link [ 614.801099][T27159] netlink: 'syz.0.5409': attribute type 1 has an invalid length. [ 615.087029][T27165] netlink: 'syz.3.5410': attribute type 1 has an invalid length. [ 615.330315][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.625423][T27161] xfrm0 speed is unknown, defaulting to 1000 [ 615.861434][T27206] netlink: 'syz.3.5421': attribute type 1 has an invalid length. [ 615.975694][T27206] 8021q: adding VLAN 0 to HW filter on device bond12 [ 616.351414][T27218] 8021q: adding VLAN 0 to HW filter on device bond21 [ 616.370216][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 616.431759][T27220] gretap1: entered allmulticast mode [ 616.443333][T27220] bond21: (slave gretap1): Enslaving as an active interface with an up link [ 616.512258][T27226] 8021q: adding VLAN 0 to HW filter on device bond13 [ 616.589993][T27228] bond13: entered promiscuous mode [ 616.607718][T27228] bond13: entered allmulticast mode [ 616.628550][T27228] 8021q: adding VLAN 0 to HW filter on device bond13 [ 616.642155][T27228] team0: Port device bond13 added [ 616.651837][T27225] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 616.666639][T27225] syzkaller0: entered promiscuous mode [ 616.674302][T27225] syzkaller0: entered allmulticast mode [ 616.682426][T27234] team_slave_1: entered promiscuous mode [ 616.691809][T27234] team0: Port device team_slave_1 removed [ 616.702180][T27234] team_slave_1: entered allmulticast mode [ 616.709655][T27234] bond13: (slave team_slave_1): Enslaving as an active interface with an up link [ 616.735603][T27233] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 616.751439][T27233] pim6reg0: persist disabled [ 617.031992][T27254] 8021q: adding VLAN 0 to HW filter on device bond14 [ 617.410160][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 617.607439][T27301] validate_nla: 4 callbacks suppressed [ 617.607456][T27301] netlink: 'syz.3.5447': attribute type 1 has an invalid length. [ 617.639060][T27301] 8021q: adding VLAN 0 to HW filter on device bond14 [ 617.729500][T27310] __nla_validate_parse: 18 callbacks suppressed [ 617.729530][T27310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5449'. [ 617.836445][T27317] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5450'. [ 617.853071][T27317] workqueue: Failed to create a rescuer kthread for wq "phy5-mac-cmds": -EINTR [ 618.005394][T27333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5455'. [ 618.144057][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5457'. [ 618.301208][T27345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5458'. [ 618.379802][T27344] xfrm0 speed is unknown, defaulting to 1000 [ 618.450143][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.480358][T27354] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5461'. [ 618.489395][T27354] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5461'. [ 618.579717][T27364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5464'. [ 618.600833][T27364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5464'. [ 618.624277][T27364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5464'. [ 619.205839][T27398] ip6t_rpfilter: unknown options [ 619.490131][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.553246][T27404] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 620.289501][ T8951] dummy0: left allmulticast mode [ 620.312570][ T8951] dummy0: left promiscuous mode [ 620.317673][ T8951] bridge6: port 1(dummy0) entered disabled state [ 620.329447][ T8951] pim6reg: left allmulticast mode [ 620.519404][ T8951] bond2 (unregistering): (slave erspan1): Releasing active interface [ 620.530142][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.579259][ T8951] bond9 (unregistering): (slave geneve3): Releasing active interface [ 620.617070][ T8951] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 620.657841][ T8951] bond13 (unregistering): (slave .`): Releasing backup interface [ 620.673530][ T8951] .` (unregistering): (slave 45ÿ): Releasing backup interface [ 620.682854][ T8951] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.693031][ T8951] .` (unregistering): Released all slaves [ 620.701604][ T8951] bond1 (unregistering): Released all slaves [ 620.712141][ T8951] bond2 (unregistering): Released all slaves [ 620.724833][ T8951] bond3 (unregistering): Released all slaves [ 620.735641][ T8951] bond4 (unregistering): Released all slaves [ 620.745741][ T8951] bond5 (unregistering): Released all slaves [ 620.757223][ T8951] bond6 (unregistering): (slave veth7): Releasing active interface [ 620.765710][ T8951] bond6 (unregistering): Released all slaves [ 620.778666][ T8951] bond7 (unregistering): Released all slaves [ 620.797873][ T8951] bond8 (unregistering): Released all slaves [ 620.815561][ T8951] bond9 (unregistering): Released all slaves [ 620.841859][ T8951] bond10 (unregistering): Released all slaves [ 620.855245][ T8951] bond11 (unregistering): Released all slaves [ 620.866963][ T8951] bond12 (unregistering): Released all slaves [ 620.879060][ T8951] bond13 (unregistering): Released all slaves [ 620.897996][ T8951] bond0 (unregistering): Released all slaves [ 620.911114][ T8951] bond14 (unregistering): Released all slaves [ 620.923042][ T8951] bond15 (unregistering): Released all slaves [ 620.937986][ T8951] bond16 (unregistering): Released all slaves [ 620.951101][T27449] sch_tbf: peakrate 3 is lower than or equals to rate 4294966145 ! [ 620.973036][T27462] lo: Caught tx_queue_len zero misconfig [ 620.986671][T27462] netlink: 'syz.2.5484': attribute type 15 has an invalid length. [ 620.997170][T27467] veth1_to_team: Caught tx_queue_len zero misconfig [ 621.013635][T27478] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 621.056234][ T8951] hmó3)ó€: left promiscuous mode [ 621.079454][T27483] bond22: entered promiscuous mode [ 621.084699][T27483] bond22: entered allmulticast mode [ 621.090245][T27483] 8021q: adding VLAN 0 to HW filter on device bond22 [ 621.145587][T27489] sctp: [Deprecated]: syz.4.5493 (pid 27489) Use of int in maxseg socket option. [ 621.145587][T27489] Use struct sctp_assoc_value instead [ 621.176255][ T8951] tipc: Left network mode [ 621.259494][ T8951] IPVS: stopping backup sync thread 11009 ... [ 621.338471][T27497] netlink: 'syz.4.5497': attribute type 1 has an invalid length. [ 621.410664][T27497] 8021q: adding VLAN 0 to HW filter on device bond23 [ 621.570162][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 621.834503][T27541] xt_hashlimit: size too large, truncated to 1048576 [ 621.873644][T27542] netlink: 'syz.4.5503': attribute type 1 has an invalid length. [ 622.201047][T27554] netlink: 'syz.3.5506': attribute type 1 has an invalid length. [ 622.441678][T27573] netlink: 'syz.3.5510': attribute type 1 has an invalid length. [ 622.522535][T27578] netlink: 'syz.4.5511': attribute type 5 has an invalid length. [ 622.594170][T27573] 8021q: adding VLAN 0 to HW filter on device bond15 [ 622.610141][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 622.627306][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.650866][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.744417][T27594] sctp: [Deprecated]: syz.0.5514 (pid 27594) Use of int in max_burst socket option. [ 622.744417][T27594] Use struct sctp_assoc_value instead [ 622.953766][ T8951] team0 (unregistering): Port device team_slave_1 removed [ 622.965852][ T8951] team0 (unregistering): Port device team_slave_0 removed [ 623.034411][T27587] gre0: entered promiscuous mode [ 623.039619][T27587] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 623.057644][T27599] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 623.297220][T27629] netlink: 'syz.0.5525': attribute type 1 has an invalid length. [ 623.320441][T27632] __nla_validate_parse: 115 callbacks suppressed [ 623.320460][T27632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5526'. [ 623.375732][T27629] 8021q: adding VLAN 0 to HW filter on device bond23 [ 623.441405][ T8951] IPVS: stop unused estimator thread 0... [ 623.650269][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.113498][T27685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5540'. [ 624.132780][T27685] 8021q: adding VLAN 0 to HW filter on device bond16 [ 624.147440][T27685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 624.254106][T27688] netlink: 'syz.2.5541': attribute type 1 has an invalid length. [ 624.277489][T27688] 8021q: adding VLAN 0 to HW filter on device bond8 [ 624.285128][T27691] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5542'. [ 624.690170][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 625.730689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.537542][T27654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.737692][T27715] tipc: Enabled bearer , priority 0 [ 626.757746][T27715] syzkaller0: entered promiscuous mode [ 626.767347][T27717] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 626.770493][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.785255][T27715] syzkaller0: entered allmulticast mode [ 626.796052][T27715] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 626.796779][T27718] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 626.826228][T27717] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 626.835512][T27722] vxcan1: Caught tx_queue_len zero misconfig [ 626.858836][T27715] tipc: Resetting bearer [ 626.880887][T27714] tipc: Resetting bearer [ 626.894890][T27714] tipc: Disabling bearer [ 627.195504][T27753] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5562'. [ 627.295638][T27755] netlink: 'syz.0.5563': attribute type 3 has an invalid length. [ 627.304118][T27755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5563'. [ 627.487138][T27761] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5565'. [ 627.810164][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 627.887889][T27783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5570'. [ 627.985787][T27787] syzkaller1: entered promiscuous mode [ 627.997712][T27790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5573'. [ 628.001716][T27787] syzkaller1: entered allmulticast mode [ 628.014122][T27790] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5573'. [ 628.056431][T27787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5572'. [ 628.083202][T27794] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 628.235064][T27803] netlink: 'syz.1.5579': attribute type 5 has an invalid length. [ 628.257877][T27803] netlink: 'syz.1.5579': attribute type 8 has an invalid length. [ 628.281313][T27803] geneve3: entered promiscuous mode [ 628.286642][T27803] geneve3: entered allmulticast mode [ 628.295398][ T64] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 34571 - 0 [ 628.316634][ T64] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 34571 - 0 [ 628.340288][T27814] netlink: 'syz.2.5580': attribute type 15 has an invalid length. [ 628.352517][ T64] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 34571 - 0 [ 628.370221][ T64] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 34571 - 0 [ 628.423390][T27822] netlink: 'syz.1.5583': attribute type 6 has an invalid length. [ 628.453032][T27814] syzkaller0: entered promiscuous mode [ 628.458545][T27814] syzkaller0: entered allmulticast mode [ 628.475969][T27819] syzkaller1: entered promiscuous mode [ 628.483629][T27819] syzkaller1: entered allmulticast mode [ 628.564746][T27832] __nla_validate_parse: 6 callbacks suppressed [ 628.564765][T27832] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5588'. [ 628.646381][T27832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.754254][T27854] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5592'. [ 628.770182][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 628.779635][T27860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5594'. [ 628.827619][T27862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5595'. [ 628.848143][T27862] netlink: 'syz.2.5595': attribute type 1 has an invalid length. [ 628.850310][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 628.858145][T27862] netlink: 'syz.2.5595': attribute type 3 has an invalid length. [ 628.871243][T27862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5595'. [ 628.884588][T27865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5594'. [ 629.075033][T12052] udevd[12052]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 629.087618][T27879] mac80211_hwsim hwsim55 wlan1: Caught tx_queue_len zero misconfig [ 629.101769][T27877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5600'. [ 629.143579][T27877] tipc: New replicast peer: 255.255.255.255 [ 629.170224][T27877] tipc: Enabled bearer , priority 5 [ 629.456846][T27902] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5604'. [ 629.504484][T27907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5608'. [ 629.584412][T27907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5608'. [ 629.890144][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 630.447898][T27929] syzkaller0: entered promiscuous mode [ 630.462194][T27929] syzkaller0: entered allmulticast mode [ 630.486605][T27931] netlink: 'syz.2.5614': attribute type 89 has an invalid length. [ 630.536308][T27935] tipc: Enabled bearer , priority 0 [ 630.547195][T27936] syzkaller0: entered promiscuous mode [ 630.553962][T27936] syzkaller0: entered allmulticast mode [ 630.568093][T27931] syzkaller0: entered allmulticast mode [ 630.575359][T27935] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 630.586892][T27946] dummy0: left allmulticast mode [ 630.599078][T27946] bridge7: port 1(dummy0) entered blocking state [ 630.607420][T27946] bridge7: port 1(dummy0) entered disabled state [ 630.615915][T27946] dummy0: entered allmulticast mode [ 630.623154][T27946] dummy0: entered promiscuous mode [ 630.632953][T27946] netlink: 'syz.1.5617': attribute type 4 has an invalid length. [ 630.656611][T27935] tipc: Resetting bearer [ 630.657087][T27948] netlink: 'syz.0.5619': attribute type 13 has an invalid length. [ 630.682313][T27946] netlink: 'syz.1.5617': attribute type 10 has an invalid length. [ 630.749669][T27955] netlink: 'syz.2.5622': attribute type 21 has an invalid length. [ 630.753659][T27956] netlink: 'syz.2.5622': attribute type 21 has an invalid length. [ 630.796073][T27934] tipc: Resetting bearer [ 630.802932][ T5740] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 630.814433][T27934] tipc: Disabling bearer [ 630.826960][T27946] bridge7: port 1(dummy0) entered blocking state [ 630.833452][T27946] bridge7: port 1(dummy0) entered forwarding state [ 630.843120][T27946] dummy0: left allmulticast mode [ 630.848412][T27946] bridge7: port 1(dummy0) entered disabled state [ 630.859220][T27957] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 630.874360][T27957] syzkaller0: entered promiscuous mode [ 630.880291][T27957] syzkaller0: entered allmulticast mode [ 630.920830][T14098] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 630.930173][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 630.965452][T27961] 8021q: adding VLAN 0 to HW filter on device bond24 [ 631.035144][T27969] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 631.265414][T27984] GUP no longer grows the stack in syz.2.5630 (27984): 200000003000-20000000a000 (200000001000) [ 631.282072][T27984] CPU: 0 UID: 0 PID: 27984 Comm: syz.2.5630 Not tainted syzkaller #0 PREEMPT(full) [ 631.282103][T27984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.282115][T27984] Call Trace: [ 631.282123][T27984] [ 631.282131][T27984] dump_stack_lvl+0xe8/0x150 [ 631.282156][T27984] __get_user_pages+0x238c/0x2720 [ 631.282180][T27984] ? __gup_longterm_locked+0xc3b/0x15c0 [ 631.282204][T27984] ? rcu_is_watching+0x15/0xb0 [ 631.282233][T27984] __gup_longterm_locked+0xd52/0x15c0 [ 631.282256][T27984] ? gup_fast_fallback+0xbc4/0x20d0 [ 631.282294][T27984] ? rcu_is_watching+0x15/0xb0 [ 631.282313][T27984] ? rcu_is_watching+0x15/0xb0 [ 631.282333][T27984] gup_fast_fallback+0x1d82/0x20d0 [ 631.282384][T27984] ? __pfx_gup_fast_fallback+0x10/0x10 [ 631.282406][T27984] ? __fget_files+0x2a/0x420 [ 631.282427][T27984] ? is_valid_gup_args+0x11f/0x200 [ 631.282449][T27984] ? get_user_pages_fast+0x4d/0xb0 [ 631.282480][T27984] __iov_iter_get_pages_alloc+0x378/0xa40 [ 631.282508][T27984] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 631.282551][T27984] iov_iter_get_pages2+0x5e/0xa0 [ 631.282577][T27984] __se_sys_vmsplice+0x7b5/0x1660 [ 631.282612][T27984] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 631.282637][T27984] ? __pfx_futex_wake+0x10/0x10 [ 631.282671][T27984] ? rcu_is_watching+0x15/0xb0 [ 631.282715][T27984] ? rcu_is_watching+0x15/0xb0 [ 631.282733][T27984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.282751][T27984] do_syscall_64+0x174/0x580 [ 631.282774][T27984] ? trace_irq_disable+0x3b/0x140 [ 631.282798][T27984] ? clear_bhb_loop+0x40/0x90 [ 631.282819][T27984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.282836][T27984] RIP: 0033:0x7f975c19ce59 [ 631.282851][T27984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.282867][T27984] RSP: 002b:00007f975d117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 631.282893][T27984] RAX: ffffffffffffffda RBX: 00007f975c415fa0 RCX: 00007f975c19ce59 [ 631.282906][T27984] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 631.282918][T27984] RBP: 00007f975c232e6f R08: 0000000000000000 R09: 0000000000000000 [ 631.282930][T27984] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 631.282940][T27984] R13: 00007f975c416038 R14: 00007f975c415fa0 R15: 00007ffcf187f878 [ 631.282963][T27984] [ 631.970129][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 632.319977][T28014] xfrm0 speed is unknown, defaulting to 1000 [ 632.351091][T28045] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 632.438661][T28054] xt_bpf: check failed: parse error [ 632.575959][T28062] tipc: Enabling of bearer rejected, failed to enable media [ 633.010159][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 633.641628][T28149] __nla_validate_parse: 90 callbacks suppressed [ 633.641647][T28149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5674'. [ 634.050160][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 634.112957][T28177] syzkaller1: entered promiscuous mode [ 634.132603][T28177] syzkaller1: entered allmulticast mode [ 634.338643][T28195] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5686'. [ 634.348655][T28195] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5686'. [ 634.473818][T28202] nbd: must specify a size in bytes for the device [ 634.483900][T28202] block nbd4: NBD_DISCONNECT [ 634.488573][T28202] block nbd4: Send disconnect failed -103 [ 634.495659][T28202] block nbd4: shutting down sockets [ 634.506789][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5689'. [ 634.516935][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5689'. [ 634.527259][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5689'. [ 634.541071][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5689'. [ 634.566652][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5689'. [ 634.589383][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5689'. [ 634.904915][T28222] validate_nla: 38 callbacks suppressed [ 634.904933][T28222] netlink: 'syz.4.5692': attribute type 9 has an invalid length. [ 634.935979][T28222] netlink: 'syz.4.5692': attribute type 6 has an invalid length. [ 634.958548][T28222] netlink: 'syz.4.5692': attribute type 7 has an invalid length. [ 634.979557][T28222] netlink: 'syz.4.5692': attribute type 8 has an invalid length. [ 635.091796][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 635.246200][T28228] netlink: 'syz.0.5696': attribute type 1 has an invalid length. [ 635.284651][T28228] 8021q: adding VLAN 0 to HW filter on device bond24 [ 636.059472][T28233] bond24: (slave veth9): Enslaving as an active interface with a down link [ 636.115255][T28228] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 636.130159][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 636.152218][T28228] bond24: (slave batadv1): making interface the new active one [ 636.178636][T28228] batadv1: entered promiscuous mode [ 636.191977][T28228] bond24: (slave batadv1): Enslaving as an active interface with an up link [ 636.258991][T28253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5700'. [ 636.642515][T28280] ipip1: entered promiscuous mode [ 636.647730][T28280] ipip1: entered allmulticast mode [ 636.947334][T28306] ip6gretap0: entered promiscuous mode [ 637.170127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 637.189413][T28325] netlink: 'syz.0.5723': attribute type 12 has an invalid length. [ 637.435894][T28343] pimreg: entered allmulticast mode [ 637.523984][T28339] pimreg: left allmulticast mode [ 637.819179][T28379] lo speed is unknown, defaulting to 1000 [ 637.829551][T28382] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 637.843739][T28379] lo speed is unknown, defaulting to 1000 [ 637.947534][T28379] lo speed is unknown, defaulting to 1000 [ 638.026902][T28393] netlink: 'syz.3.5744': attribute type 22 has an invalid length. [ 638.166360][T28399] bond17: option ad_actor_sys_prio: invalid value (0) [ 638.173651][T28399] bond17: option ad_actor_sys_prio: allowed values 1 - 65535 [ 638.185452][T28399] bond17 (unregistering): Released all slaves [ 638.210343][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 638.283390][T28379] infiniband syz1: set down [ 638.288075][T14098] lo speed is unknown, defaulting to 1000 [ 638.304800][T28379] infiniband syz1: added lo [ 638.332832][T28379] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 638.358474][T28379] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 638.384926][T28379] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 638.424501][T28379] RDS/IB: syz1: added [ 638.432950][T28379] smc: adding ib device syz1 with port count 1 [ 638.443317][T28379] smc: ib device syz1 port 1 has no pnetid [ 638.506477][T28417] 8021q: adding VLAN 0 to HW filter on device bond16 [ 638.547782][T14098] lo speed is unknown, defaulting to 1000 [ 638.564387][T28422] syzkaller0: entered promiscuous mode [ 638.592238][T28422] syzkaller0: entered allmulticast mode [ 638.629705][T28379] lo speed is unknown, defaulting to 1000 [ 638.822661][T28444] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 638.829140][T28444] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 638.852769][T28379] lo speed is unknown, defaulting to 1000 [ 638.892374][T28445] __nla_validate_parse: 23 callbacks suppressed [ 638.892393][T28445] netlink: 488 bytes leftover after parsing attributes in process `syz.1.5753'. [ 638.922448][T28445] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5753'. [ 639.008310][T28451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5758'. [ 639.095244][T28379] lo speed is unknown, defaulting to 1000 [ 639.216043][T28463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5763'. [ 639.250170][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 639.355518][T28379] lo speed is unknown, defaulting to 1000 [ 639.378299][T28473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5766'. [ 639.547374][T28379] lo speed is unknown, defaulting to 1000 [ 639.725696][T28379] lo speed is unknown, defaulting to 1000 [ 639.733788][T28496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5770'. [ 639.892158][T28499] block nbd0: server does not support multiple connections per device. [ 639.915011][T28504] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5772'. [ 639.924088][T28499] block nbd0: shutting down sockets [ 640.063815][T28513] xt_hashlimit: size too large, truncated to 1048576 [ 640.290124][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 640.356023][T14098] hid-generic 0005:046D:0440.0001: item fetching failed at offset 2/3 [ 640.418402][T14098] hid-generic 0005:046D:0440.0001: probe with driver hid-generic failed with error -22 [ 640.506756][T28520] xfrm0 speed is unknown, defaulting to 1000 [ 640.513807][T28520] lo speed is unknown, defaulting to 1000 [ 640.724720][T28505] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 640.731233][T28505] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 640.759303][T28505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 640.774793][T28505] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 640.823115][T28505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 640.835792][T28505] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 640.855677][T28505] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 640.881291][T28505] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 640.996589][T28558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5785'. [ 641.012683][T28558] openvswitch: netlink: Invalid VLAN frame [ 641.026089][T28558] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5785'. [ 641.050641][T28553] syz_tun: entered promiscuous mode [ 641.067364][T28553] syz_tun: entered allmulticast mode [ 641.206440][ T5617] block nbd0: Receive control failed (result -32) [ 641.213688][T17127] block nbd0: Receive control failed (result -32) [ 641.330389][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 641.367161][T28574] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 641.468786][T28584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5792'. [ 641.499414][T28589] netlink: 'syz.0.5794': attribute type 11 has an invalid length. [ 641.800943][T28615] netlink: 'syz.1.5800': attribute type 1 has an invalid length. [ 642.098667][T28641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 642.105986][T28641] IPv6: NLM_F_CREATE should be set when creating new route [ 642.113273][T28641] IPv6: NLM_F_CREATE should be set when creating new route [ 642.249092][T28655] netlink: 'syz.1.5808': attribute type 1 has an invalid length. [ 642.272945][T28647] gre0: entered promiscuous mode [ 642.289976][T28647] gre0: entered allmulticast mode [ 642.307463][T28647] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 642.370130][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 642.499389][T28665] nbd: must specify a size in bytes for the device [ 642.526198][T28660] block nbd2: NBD_DISCONNECT [ 642.539005][T28660] block nbd2: shutting down sockets [ 642.559649][T28673] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 643.124100][T28696] syzkaller1: entered promiscuous mode [ 643.136337][T28696] syzkaller1: entered allmulticast mode [ 643.367883][T28740] netlink: 'syz.2.5824': attribute type 18 has an invalid length. [ 643.376905][T28739] pim6reg: entered allmulticast mode [ 643.410216][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 644.016558][T28793] __nla_validate_parse: 13 callbacks suppressed [ 644.016577][T28793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5835'. [ 644.037475][T28793] geneve0: entered promiscuous mode [ 644.045993][T28793] geneve0: left promiscuous mode [ 644.450130][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 644.636561][T28842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5844'. [ 644.675514][T28843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5845'. [ 644.741551][T28843] ip6gre2: entered promiscuous mode [ 644.761160][T28843] ip6gre2: entered allmulticast mode [ 644.770347][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 645.351034][T28861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5847'. [ 645.369163][T28871] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5850'. [ 645.394075][T28866] tipc: Enabled bearer , priority 0 [ 645.428972][T28866] syzkaller0: entered promiscuous mode [ 645.436342][T28866] syzkaller0: entered allmulticast mode [ 645.450814][T28866] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 645.487670][T28866] tipc: Resetting bearer [ 645.490381][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 645.521474][T28864] tipc: Resetting bearer [ 645.545732][T28864] tipc: Disabling bearer [ 645.553265][T28878] netlink: 'syz.4.5853': attribute type 1 has an invalid length. [ 645.571006][T28878] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5853'. [ 645.809958][T28895] netlink: 'syz.0.5860': attribute type 4 has an invalid length. [ 645.883989][T28900] netlink: 'syz.0.5860': attribute type 4 has an invalid length. [ 645.932451][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 645.945108][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 645.953320][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 645.965149][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 645.974682][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.202146][T28920] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5864'. [ 646.213213][T28920] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 646.223148][T28920] netlink: 'syz.4.5864': attribute type 4 has an invalid length. [ 646.247865][T28920] netlink: 'syz.4.5864': attribute type 4 has an invalid length. [ 646.261677][ T996] lo speed is unknown, defaulting to 1000 [ 646.267565][ T996] syz1: Port: 1 Link ACTIVE [ 646.310753][ T5740] lo speed is unknown, defaulting to 1000 [ 646.359337][T28932] bond17: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 646.416992][T28932] bond17 (unregistering): Released all slaves [ 646.462816][T28948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5866'. [ 646.493116][T28943] bond25: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 646.530145][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 646.562691][T28943] bond25 (unregistering): Released all slaves [ 646.735742][T28958] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5872'. [ 646.862473][T28968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5876'. [ 646.892999][T28903] xfrm0 speed is unknown, defaulting to 1000 [ 646.900842][T28903] lo speed is unknown, defaulting to 1000 [ 647.375093][ T8945] batadv1: left promiscuous mode [ 647.386215][T28985] syzkaller1: entered promiscuous mode [ 647.392575][T28985] syzkaller1: entered allmulticast mode [ 647.570182][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 647.587463][T28903] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.598990][T29009] netlink: 'syz.1.5887': attribute type 16 has an invalid length. [ 647.604930][T28903] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.615360][T28903] bridge_slave_0: entered allmulticast mode [ 647.622959][T28903] bridge_slave_0: entered promiscuous mode [ 647.633508][T28903] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.640828][T28903] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.648073][T28903] bridge_slave_1: entered allmulticast mode [ 647.655933][T28903] bridge_slave_1: entered promiscuous mode [ 647.693520][T28903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.715699][T28903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.789647][T28903] team0: Port device team_slave_0 added [ 647.815918][T28903] team0: Port device team_slave_1 added [ 647.893396][T28903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.915968][T28903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.958815][T28903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.989748][T28903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.015430][T28903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.051258][ T5617] Bluetooth: hci2: command tx timeout [ 648.081184][T28903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.212582][T28903] hsr_slave_0: entered promiscuous mode [ 648.232311][T28903] hsr_slave_1: entered promiscuous mode [ 648.498336][T28903] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.584933][T28903] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.610210][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 648.651381][T29072] dummy0: entered promiscuous mode [ 648.696485][T28903] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.767224][T28903] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.876113][T29071] dummy0: left promiscuous mode [ 648.913663][T29086] veth15: entered allmulticast mode [ 648.976547][T28903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 649.004312][T28903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.023407][T28903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 649.044284][T28903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.066429][T28903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 649.097422][T28903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.119209][T28903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 649.142082][T28903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.306516][T28903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.347297][T28903] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.363072][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.370234][ T8946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.407052][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.414251][ T8946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.650168][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 649.848939][T29142] __nla_validate_parse: 7 callbacks suppressed [ 649.848960][T29142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5917'. [ 649.944385][T29145] : entered promiscuous mode [ 650.130834][ T5617] Bluetooth: hci2: command tx timeout [ 650.265326][T28903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.315971][T29176] bond25 (unregistering): Released all slaves [ 650.361938][T29181] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5928'. [ 650.372105][T29181] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 650.381288][T29185] x_tables: duplicate underflow at hook 3 [ 650.395950][T29177] bond25 (unregistering): Released all slaves [ 650.417525][T29181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5928'. [ 650.446956][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5929'. [ 650.471137][T28903] veth0_vlan: entered promiscuous mode [ 650.497648][T28903] veth1_vlan: entered promiscuous mode [ 650.548922][T29195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5931'. [ 650.575106][T28903] veth0_macvtap: entered promiscuous mode [ 650.602245][T28903] veth1_macvtap: entered promiscuous mode [ 650.624623][T28903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.636155][T28903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.647300][T29201] sock: sock_set_timeout: `syz.2.5932' (pid 29201) tries to set negative timeout [ 650.677251][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.690130][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 650.706591][T29200] netlink: 'syz.0.5933': attribute type 11 has an invalid length. [ 650.709639][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.776912][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.808254][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.894292][ T7653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.913079][ T7653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.938681][T29219] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5936'. [ 650.955055][T29218] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5936'. [ 650.974776][T29219] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5936'. [ 650.987188][ T8945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.995398][T29218] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 650.998617][ T8945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.126582][T29232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5857'. [ 651.185223][T29234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5940'. [ 651.233533][T29224] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 651.367906][T29238] netlink: 'syz.1.5942': attribute type 4 has an invalid length. [ 651.382001][T17127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 651.389570][T17127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 651.398419][T17127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 651.407698][T17127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 651.416016][T17127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 651.516701][T29252] netlink: 'syz.2.5945': attribute type 10 has an invalid length. [ 651.666441][ T8945] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.694170][ T8945] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.711199][T29264] netlink: 'syz.3.5948': attribute type 1 has an invalid length. [ 651.718593][ T8945] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 651.730168][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 651.866641][T29266] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.874237][T29266] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.916874][T29266] bridge_slave_0: left allmulticast mode [ 651.923535][T29266] bridge_slave_0: left promiscuous mode [ 651.929423][T29266] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.947369][T29266] bridge_slave_1: left allmulticast mode [ 651.954826][T29266] bridge_slave_1: left promiscuous mode [ 651.960866][T29266] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.979719][T29266] bond0: (slave bond_slave_0): Releasing backup interface [ 651.999919][T29266] bond0: (slave bond_slave_1): Releasing backup interface [ 652.025297][T29266] team0: Port device team_slave_0 removed [ 652.055882][T29266] team0: Port device team_slave_1 removed [ 652.069306][T29266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.079525][T29266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.092072][T29266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.103384][T29266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.117124][T29266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 652.135585][ T8945] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.156462][ T8945] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.181836][ T8945] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.213223][T17127] Bluetooth: hci2: command tx timeout [ 652.304723][ T8945] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.315884][ T8945] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.329146][ T8945] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.344600][T29293] syzkaller0: entered allmulticast mode [ 652.394481][ T8945] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.405741][ T8945] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.416137][ T8945] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.468779][T29239] xfrm0 speed is unknown, defaulting to 1000 [ 652.479509][T29239] lo speed is unknown, defaulting to 1000 [ 652.539114][ T8945] pim6reg: left allmulticast mode [ 652.556923][ T8945] bond3: left allmulticast mode [ 652.568213][ T8945] pimreg9: left allmulticast mode [ 652.725636][ T8945] bond21 (unregistering): (slave gretap1): Releasing backup interface [ 652.750492][ T8945] bond13 (unregistering): (slave geneve4): Releasing active interface [ 652.770159][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 652.807209][ T8945] bond0 (unregistering): Released all slaves [ 652.815922][ T8945] bond1 (unregistering): Released all slaves [ 652.826098][ T8945] bond2 (unregistering): Released all slaves [ 652.837621][ T8945] bond3 (unregistering): Released all slaves [ 652.853151][ T8945] bond4 (unregistering): Released all slaves [ 652.863958][ T8945] bond5 (unregistering): Released all slaves [ 652.874379][ T8945] bond6 (unregistering): Released all slaves [ 652.884769][ T8945] bond7 (unregistering): Released all slaves [ 652.896321][ T8945] bond8 (unregistering): Released all slaves [ 652.909414][ T8945] bond9 (unregistering): Released all slaves [ 652.923951][ T8945] bond10 (unregistering): (slave dummy0): Releasing backup interface [ 652.933433][ T8945] bond10 (unregistering): Released all slaves [ 652.945304][ T8945] bond11 (unregistering): Released all slaves [ 652.955403][ T8945] bond12 (unregistering): Released all slaves [ 652.968095][ T8945] bond13 (unregistering): Released all slaves [ 652.978804][ T8945] bond14 (unregistering): Released all slaves [ 652.988910][ T8945] bond15 (unregistering): Released all slaves [ 652.999107][ T8945] bond16 (unregistering): Released all slaves [ 653.009940][ T8945] bond17 (unregistering): Released all slaves [ 653.023507][ T8945] bond18 (unregistering): Released all slaves [ 653.034686][ T8945] bond19 (unregistering): Released all slaves [ 653.046172][ T8945] bond20 (unregistering): Released all slaves [ 653.056980][ T8945] bond21 (unregistering): Released all slaves [ 653.069251][ T8945] bond22 (unregistering): Released all slaves [ 653.084374][ T8945] bond23 (unregistering): Released all slaves [ 653.095498][ T8945] bond24 (unregistering): Released all slaves [ 653.187779][ T8945] hmó3)óÿ: left promiscuous mode [ 653.223135][ T8945] : left promiscuous mode [ 653.266456][ T8945] tipc: Left network mode [ 653.275023][ T8945] IPVS: stopping master sync thread 27478 ... [ 653.278747][T29239] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.284524][ T8945] IPVS: stopping backup sync thread 26985 ... [ 653.288537][T29239] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.302016][T29239] bridge_slave_0: entered allmulticast mode [ 653.308844][T29239] bridge_slave_0: entered promiscuous mode [ 653.317316][T29239] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.324928][T29239] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.332684][T29239] bridge_slave_1: entered allmulticast mode [ 653.339650][T29239] bridge_slave_1: entered promiscuous mode [ 653.365444][T29239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.377427][T29239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.405552][T29239] team0: Port device team_slave_0 added [ 653.413995][T29239] team0: Port device team_slave_1 added [ 653.490729][T17127] Bluetooth: hci0: command tx timeout [ 653.536378][T29239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.548029][T29239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.575311][T29239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.588951][T29239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.599393][T29239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.627711][T29239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.668804][T29239] hsr_slave_0: entered promiscuous mode [ 653.675439][T29239] hsr_slave_1: entered promiscuous mode [ 653.682023][T29239] debugfs: 'hsr0' already exists in 'hsr' [ 653.687765][T29239] Cannot create hsr debugfs directory [ 653.810169][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 653.893417][ T8945] veth0_macvtap: left promiscuous mode [ 654.035838][ T8951] smc: removing ib device syz1 [ 654.044429][T14110] lo speed is unknown, defaulting to 1000 [ 654.056862][ T8951] smbdirect: ib_dev[syz1] removed [ 654.081299][T14110] syz1: Port: 1 Link DOWN [ 654.291664][T17127] Bluetooth: hci2: command tx timeout [ 654.643808][ T8945] IPVS: stop unused estimator thread 0... [ 654.688560][T29265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.700829][T29293] netlink: 'syz.0.5953': attribute type 2 has an invalid length. [ 654.717913][T29239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 654.752007][T29239] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 654.782243][T29239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 654.806345][T29239] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 654.845188][T29239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 654.850382][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 654.871620][T29239] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.895583][T29239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 655.026772][T29239] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.048302][T29330] netlink: 'syz.2.5960': attribute type 13 has an invalid length. [ 655.105732][T29341] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 655.235799][T29352] __nla_validate_parse: 4 callbacks suppressed [ 655.235817][T29352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5962'. [ 655.306432][T29239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.319143][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5961'. [ 655.362869][T29239] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.389610][ T8945] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.396766][ T8945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.411858][ T8945] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.418982][ T8945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.464085][T29363] netlink: 'syz.0.5964': attribute type 1 has an invalid length. [ 655.538414][T29363] 8021q: adding VLAN 0 to HW filter on device bond25 [ 655.570745][T17127] Bluetooth: hci0: command tx timeout [ 655.732119][T29373] veth1_to_bond: entered promiscuous mode [ 655.755225][T29373] veth1_to_bond: entered allmulticast mode [ 655.773435][T29373] veth1_to_bond: left allmulticast mode [ 655.790587][T29373] veth1_to_bond: left promiscuous mode [ 655.826793][T29373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5965'. [ 655.890127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 656.135913][T29356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.347583][T29239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.413316][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5973'. [ 656.479327][T29425] IPVS: persistence engine module ip_vs_pe_À not found [ 656.546613][T29430] bond17: option updelay: invalid value (18446744073709518847) [ 656.568294][T29430] bond17: option updelay: allowed values 0 - 2147483647 [ 656.594095][T29430] bond17 (unregistering): Released all slaves [ 656.769429][T29445] sctp: [Deprecated]: syz.2.5976 (pid 29445) Use of int in max_burst socket option deprecated. [ 656.769429][T29445] Use struct sctp_assoc_value instead [ 656.811613][T29458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5982'. [ 656.873705][T29239] veth0_vlan: entered promiscuous mode [ 656.885481][T29239] veth1_vlan: entered promiscuous mode [ 656.916325][T29239] veth0_macvtap: entered promiscuous mode [ 656.928537][T29239] veth1_macvtap: entered promiscuous mode [ 656.930728][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 656.955102][T29239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.974228][T29239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.994320][ T8945] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.005367][ T8945] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.015844][ T8945] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.028722][ T8945] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.289213][T29478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5985'. [ 657.354289][T29482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5987'. [ 657.650722][T17127] Bluetooth: hci0: command tx timeout [ 657.970181][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 658.207159][T29484] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5988'. [ 658.850156][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 659.010172][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 659.565717][T29436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.634320][ T8946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.665188][ T8946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.679177][T29498] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5992'. [ 659.705001][T29497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5991'. [ 659.730610][ T8946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.730702][T17127] Bluetooth: hci0: command tx timeout [ 659.752397][ T8946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.781389][T17127] block nbd2: Receive control failed (result -22) [ 659.831138][T29498] nbd2: detected capacity change from 0 to 32 [ 659.838367][T12052] block nbd2: Dead connection, failed to find a fallback [ 659.848293][T12052] block nbd2: shutting down sockets [ 659.855283][T12052] blk_print_req_error: 136 callbacks suppressed [ 659.855299][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.872392][T12052] buffer_io_error: 138 callbacks suppressed [ 659.872406][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 659.887634][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.897331][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 659.906974][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.921453][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 659.934735][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.954677][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 659.976524][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.996069][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 660.011300][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.036072][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 660.047128][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.056336][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 660.098976][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 660.121134][T29521] gre1: entered allmulticast mode [ 660.122463][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.136496][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 660.148794][T29520] tipc: Enabling of bearer rejected, failed to enable media [ 660.168427][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 660.190681][T12052] ldm_validate_partition_table(): Disk read failed. [ 660.211840][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.231715][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 660.251450][T12052] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.263573][T29528] netlink: 'syz.2.6003': attribute type 27 has an invalid length. [ 660.272979][T12052] Buffer I/O error on dev nbd2, logical block 0, async page read [ 660.283379][T12052] Dev nbd2: unable to read RDB block 0 [ 660.289407][T12052] nbd2: unable to read partition table [ 660.304940][T12052] ldm_validate_partition_table(): Disk read failed. [ 660.318790][T12052] Dev nbd2: unable to read RDB block 0 [ 660.326534][T12052] nbd2: unable to read partition table [ 660.495677][T29498] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 660.508432][T29498] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 660.575987][T29546] netlink: 'syz.2.6008': attribute type 1 has an invalid length. [ 660.594617][T29498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 660.609337][T29498] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 660.722618][T29555] __nla_validate_parse: 4 callbacks suppressed [ 660.722637][T29555] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6010'. [ 660.767253][T29550] lo: Caught tx_queue_len zero misconfig [ 660.791044][T29546] bond10: (slave bridge7): making interface the new active one [ 660.799536][T29546] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 660.813287][T29554] tipc: Enabled bearer , priority 0 [ 660.835937][T29556] tipc: Disabling bearer [ 660.875684][T29555] netlink: 'syz.3.6010': attribute type 1 has an invalid length. [ 660.926441][T29562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6013'. [ 661.024335][T29562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6013'. [ 661.090138][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 661.125814][T29577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6017'. [ 661.149368][T29576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6017'. [ 661.240772][T29583] tipc: Started in network mode [ 661.247877][T29583] tipc: Node identity 7f000001, cluster identity 4711 [ 661.272065][T29583] tipc: Enabled bearer , priority 5 [ 661.293497][T29587] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6022'. [ 661.320644][T29587] syzkaller1: entered promiscuous mode [ 661.335224][T29587] syzkaller1: entered allmulticast mode [ 661.351419][T29583] tipc: Enabling of bearer rejected, failed to enable media [ 661.478799][T29595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6024'. [ 661.586620][T29599] erspan0: entered promiscuous mode [ 661.629624][T29598] erspan0: left promiscuous mode [ 661.844658][T29614] netlink: 'syz.0.6031': attribute type 1 has an invalid length. [ 661.853458][T29616] netlink: 'syz.2.6032': attribute type 1 has an invalid length. [ 661.862463][T29616] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6032'. [ 661.889632][T29619] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6033'. [ 661.894789][T29614] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6031'. [ 662.088257][T29629] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 662.095731][T29633] sctp: [Deprecated]: syz.2.6038 (pid 29633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 662.095731][T29633] Use struct sctp_sack_info instead [ 662.130146][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 662.269488][T29648] netlink: 'syz.4.6043': attribute type 1 has an invalid length. [ 662.316627][T29654] netlink: 'syz.0.6044': attribute type 32 has an invalid length. [ 662.348262][T29647] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 662.349606][T29654] veth0_macvtap: Caught tx_queue_len zero misconfig [ 662.401831][ T5740] tipc: Node number set to 2130706433 [ 662.869016][T29705] netlink: 'syz.2.6059': attribute type 1 has an invalid length. [ 662.944577][T29705] bond11: entered promiscuous mode [ 662.964272][T29705] 8021q: adding VLAN 0 to HW filter on device bond11 [ 662.972993][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 662.981058][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 662.988481][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 662.996983][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 663.005267][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 663.046187][T17127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 663.058653][T17127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 663.068090][T17127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 663.080859][T17127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 663.089427][T17127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 663.110721][T29705] bond11: (slave bridge0): making interface the new active one [ 663.138947][T29705] bridge0: entered promiscuous mode [ 663.152977][T29705] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 663.170116][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 663.191517][T29709] syzkaller0: entered promiscuous mode [ 663.205942][T29709] syzkaller0: entered allmulticast mode [ 663.377470][T29730] netlink: 'syz.0.6064': attribute type 3 has an invalid length. [ 663.386536][T29730] netlink: 'syz.0.6064': attribute type 212 has an invalid length. [ 663.443605][T29728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.577140][T29748] syzkaller0: entered promiscuous mode [ 663.583766][T29748] syzkaller0: entered allmulticast mode [ 663.596283][T29709] xfrm0 speed is unknown, defaulting to 1000 [ 663.767581][T29715] xfrm0 speed is unknown, defaulting to 1000 [ 664.067558][T29715] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.074804][T29715] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.084009][T29715] bridge_slave_0: entered allmulticast mode [ 664.091093][T29715] bridge_slave_0: entered promiscuous mode [ 664.098457][T29715] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.105775][T29715] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.113434][T29715] bridge_slave_1: entered allmulticast mode [ 664.120568][T29715] bridge_slave_1: entered promiscuous mode [ 664.140911][T29715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.153216][T29715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.177784][T29715] team0: Port device team_slave_0 added [ 664.185125][T29715] team0: Port device team_slave_1 added [ 664.204334][T29715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.210465][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 664.213575][T29715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.244384][T29715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.256247][T29715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.263246][T29715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.289294][T29715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.319844][T29715] hsr_slave_0: entered promiscuous mode [ 664.326064][T29715] hsr_slave_1: entered promiscuous mode [ 664.332454][T29715] debugfs: 'hsr0' already exists in 'hsr' [ 664.338742][T29715] Cannot create hsr debugfs directory [ 664.400779][T29715] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.410864][T29715] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 664.420796][T29715] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 664.430594][T29715] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 34571 - 0 [ 664.484594][T29715] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.494639][T29715] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 664.505492][T29715] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 664.516027][T29715] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 34571 - 0 [ 664.565485][T29715] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.575737][T29715] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 664.586157][T29715] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 664.596752][T29715] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 34571 - 0 [ 664.634694][T29715] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.644615][T29715] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 664.655985][T29715] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 664.666749][T29715] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 34571 - 0 [ 665.170634][ T5617] Bluetooth: hci1: command tx timeout [ 665.252680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 666.290164][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 666.327671][T29728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.343154][T29715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 666.378915][T29715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 666.412051][T29715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 666.426169][T29715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 666.437519][T29715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 666.463996][T29715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 666.492801][T29715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 666.630809][T29715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 666.742271][T29809] __nla_validate_parse: 14 callbacks suppressed [ 666.742290][T29809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6076'. [ 666.766626][T29802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6075'. [ 666.869422][T29715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.897434][T29715] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.919622][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.926775][ T7653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.936150][T29819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6079'. [ 666.954449][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.961610][ T7653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.995013][T29819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6079'. [ 667.009506][T29819] nbd: must specify at least one socket [ 667.204339][T29802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.215332][T29844] netlink: 2496 bytes leftover after parsing attributes in process `syz.4.6085'. [ 667.250959][ T5617] Bluetooth: hci1: command tx timeout [ 667.330121][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 667.377977][T29857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6088'. [ 667.525582][T29864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.602005][T29715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.655699][T29715] veth0_vlan: entered promiscuous mode [ 667.677084][T29715] veth1_vlan: entered promiscuous mode [ 667.705914][T29715] veth0_macvtap: entered promiscuous mode [ 667.722367][T29715] veth1_macvtap: entered promiscuous mode [ 667.754275][T29715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.773854][T29715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.789021][ T8956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.800616][ T8956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.826296][ T8956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.844008][ T8956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.000918][T29901] xt_hashlimit: size too large, truncated to 1048576 [ 668.053549][T29903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6097'. [ 668.066881][T29903] tunl0: Caught tx_queue_len zero misconfig [ 668.089552][T29904] xt_hashlimit: size too large, truncated to 1048576 [ 668.370152][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 668.664290][T29911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6098'. [ 668.769614][T29919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6099'. [ 669.331192][ T5617] Bluetooth: hci1: command tx timeout [ 669.410268][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 669.741491][T29935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6105'. [ 669.957204][T29943] gretap1: entered promiscuous mode [ 670.430686][T29864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.450104][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 670.555993][ T8949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.570931][T29949] netlink: 'syz.3.6111': attribute type 11 has an invalid length. [ 670.584050][ T8949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.662571][T29952] bond12: option mode: invalid value (149) [ 670.725520][ T8949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.767565][ T8949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.162453][T17127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 671.169812][T17127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 671.179420][T17127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 671.189493][T17127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 671.199145][T17127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.410207][T17127] Bluetooth: hci1: command tx timeout [ 671.490124][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 671.682874][T30011] tc_dump_action: action bad kind [ 671.876307][T30021] netlink: 'syz.2.6134': attribute type 1 has an invalid length. [ 671.907438][T30021] netlink: 'syz.2.6134': attribute type 4 has an invalid length. [ 671.940932][T30021] __nla_validate_parse: 8 callbacks suppressed [ 671.940953][T30021] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6134'. [ 672.052510][T30026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6135'. [ 672.104939][T30026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6135'. [ 672.346673][T29985] xfrm0 speed is unknown, defaulting to 1000 [ 672.380823][T30034] vlan2: entered promiscuous mode [ 672.405947][T30034] bridge0: entered promiscuous mode [ 672.445544][T30037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6139'. [ 672.461840][T30039] batman_adv: batadv0: Adding interface: dummy0 [ 672.468726][T30039] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.496025][T30039] batman_adv: batadv0: Interface activated: dummy0 [ 672.530125][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 672.659708][T30045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6141'. [ 672.909408][T30058] lo: entered promiscuous mode [ 672.917836][T30058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.063435][T29985] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.096376][T29985] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.135734][T29985] bridge_slave_0: entered allmulticast mode [ 673.158664][T29985] bridge_slave_0: entered promiscuous mode [ 673.182915][T29985] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.195902][T29985] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.207182][T29985] bridge_slave_1: entered allmulticast mode [ 673.215406][T29985] bridge_slave_1: entered promiscuous mode [ 673.224520][T30066] netlink: 'syz.2.6144': attribute type 4 has an invalid length. [ 673.245078][T30066] netlink: 'syz.2.6144': attribute type 4 has an invalid length. [ 673.261258][T17127] Bluetooth: hci4: command tx timeout [ 673.277988][T30073] syzkaller0: entered promiscuous mode [ 673.292818][T30073] syzkaller0: entered allmulticast mode [ 673.304796][T29985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.320413][T29985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.332702][T30073] tc action pedit offset 4096 out of bounds [ 673.350733][T30075] netlink: 'syz.3.6147': attribute type 1 has an invalid length. [ 673.365707][T30075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6147'. [ 673.368297][T29985] team0: Port device team_slave_0 added [ 673.383504][T29985] team0: Port device team_slave_1 added [ 673.404703][T29985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.413428][T29985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.439437][T29985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.468032][T29985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.486119][T29985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.547034][T29985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.557618][T30084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6149'. [ 673.572280][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 673.623541][T29985] hsr_slave_0: entered promiscuous mode [ 673.645286][T29985] hsr_slave_1: entered promiscuous mode [ 673.657087][T29985] debugfs: 'hsr0' already exists in 'hsr' [ 673.665324][T29985] Cannot create hsr debugfs directory [ 673.675303][T30088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6151'. [ 673.773967][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6152'. [ 673.792538][T30086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6150'. [ 673.937849][T29985] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.975135][T29985] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 53836 - 0 [ 674.043355][T30105] netlink: 'syz.3.6156': attribute type 6 has an invalid length. [ 674.061159][T29985] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.085893][T29985] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 53836 - 0 [ 674.166725][T29985] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.186489][T29985] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 53836 - 0 [ 674.265207][T29985] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.294395][T29985] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 53836 - 0 [ 674.472837][T29985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 674.486926][T29985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.501375][T29985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 674.519117][T29985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.542224][T29985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 674.556496][T29985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.610153][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 674.625399][T29985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 674.655266][T29985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.771731][T29985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.805298][T29985] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.829064][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.836232][ T7653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.851548][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.858705][ T7653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.226169][T30159] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 675.340426][T17127] Bluetooth: hci4: command tx timeout [ 675.455380][T29985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.534054][T29985] veth0_vlan: entered promiscuous mode [ 675.554366][T29985] veth1_vlan: entered promiscuous mode [ 675.626347][T29985] veth0_macvtap: entered promiscuous mode [ 675.645452][T29985] veth1_macvtap: entered promiscuous mode [ 675.651388][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 675.666270][T30188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 675.697160][T29985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.714313][T30191] gre0: Caught tx_queue_len zero misconfig [ 675.732391][T29985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.762062][ T7653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.795465][ T7653] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.826228][ T7653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.837438][ T7653] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.983357][ T8951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.005693][ T8951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.044555][T30189] xfrm0 speed is unknown, defaulting to 1000 [ 676.052362][ T8949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.069634][ T8949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.311068][ T8951] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 676.690105][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 676.844503][T30234] xfrm0 speed is unknown, defaulting to 1000 [ 676.948619][T30200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.989379][T30241] __nla_validate_parse: 9 callbacks suppressed [ 676.989397][T30241] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6188'. [ 677.172610][T30246] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 677.187683][T30259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6194'. [ 677.197765][T30256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6191'. [ 677.213188][T30261] openvswitch: netlink: IP tunnel dst address not specified [ 677.412364][T17127] Bluetooth: hci4: command tx timeout [ 677.730213][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 678.770149][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 679.490406][T17127] Bluetooth: hci4: command tx timeout [ 679.810232][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 680.084459][T30246] bond1 (unregistering): Released all slaves [ 680.279451][T30306] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 680.325989][T30306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.349830][T30306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.378699][T30306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.409769][T30306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.513002][T30321] syzkaller0: entered promiscuous mode [ 680.518659][T30321] syzkaller0: entered allmulticast mode [ 680.687668][T30336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6208'. [ 680.806979][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6210'. [ 680.816562][T30345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6210'. [ 680.826259][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6210'. [ 680.835732][T30345] netlink: 'syz.4.6210': attribute type 5 has an invalid length. [ 680.846324][T30345] syzkaller0: entered promiscuous mode [ 680.852068][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 680.861263][T30345] syzkaller0: entered allmulticast mode [ 681.094036][T30349] netlink: 'syz.0.6212': attribute type 1 has an invalid length. [ 681.104994][T30349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6212'. [ 681.116006][T30349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6212'. [ 681.237969][T30357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6216'. [ 681.284255][T30362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.359299][T30362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.413492][T30370] syzkaller0: entered promiscuous mode [ 681.419139][T30370] syzkaller0: entered allmulticast mode [ 681.433419][T30362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.447179][T30370] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 681.495528][T30362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.614182][ T8945] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.631732][ T8945] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.653141][ T8945] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.685237][ T8945] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.778656][T30390] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 681.890888][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 681.986181][T30405] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 682.010577][T30405] __nla_validate_parse: 5 callbacks suppressed [ 682.010595][T30405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6234'. [ 682.037703][T30410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6235'. [ 682.123995][T30405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 682.138570][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 682.146005][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 682.155695][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 682.164850][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 682.173691][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.339991][T30412] bond2: (slave veth3): Enslaving as an active interface with an up link [ 682.376919][T30405] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6234'. [ 682.394490][T30405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6234'. [ 682.486112][T30405] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 682.695237][T30437] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 682.759568][T30441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6241'. [ 682.772827][T30441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6241'. [ 682.795497][T30441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6241'. [ 682.926338][T30449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6244'. [ 682.930344][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 683.151117][T30463] netlink: 'syz.1.6247': attribute type 10 has an invalid length. [ 683.159676][T30413] xfrm0 speed is unknown, defaulting to 1000 [ 683.188129][T30466] nbd: device at index 0 is going down [ 683.202680][T30463] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.225179][T30469] netlink: 'syz.4.6249': attribute type 1 has an invalid length. [ 683.234304][T30463] bond0: (slave team0): Enslaving as an active interface with an up link [ 683.256318][T30469] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6249'. [ 683.328612][T30471] bridge1: entered promiscuous mode [ 683.350986][T30471] bridge1: entered allmulticast mode [ 683.358616][T30475] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6251'. [ 683.372439][T30471] team0: Port device bridge1 added [ 683.416622][T30472] netlink: 'syz.0.6250': attribute type 12 has an invalid length. [ 683.431789][T30472] netlink: 'syz.0.6250': attribute type 29 has an invalid length. [ 683.445331][T30479] netlink: 'syz.3.6252': attribute type 16 has an invalid length. [ 683.762356][T30506] macvlan2: entered promiscuous mode [ 683.767785][T30506] macvlan2: entered allmulticast mode [ 683.882937][T30413] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.901732][T30413] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.909109][T30413] bridge_slave_0: entered allmulticast mode [ 683.917506][T30413] bridge_slave_0: entered promiscuous mode [ 683.927146][T30413] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.934614][T30413] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.942226][T30413] bridge_slave_1: entered allmulticast mode [ 683.949368][T30413] bridge_slave_1: entered promiscuous mode [ 683.970118][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 684.008735][T30413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.022956][T30413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.024359][T30523] netlink: 'syz.3.6266': attribute type 1 has an invalid length. [ 684.064450][T30523] bond1: entered promiscuous mode [ 684.069673][T30523] bond1: entered allmulticast mode [ 684.075640][T30523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 684.097530][T30413] team0: Port device team_slave_0 added [ 684.105350][T30413] team0: Port device team_slave_1 added [ 684.128260][T30413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.135915][T30413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.162336][T30413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.174758][T30413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.182001][T30413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.208232][T30413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.219699][ T5617] Bluetooth: hci5: command tx timeout [ 684.264797][T30413] hsr_slave_0: entered promiscuous mode [ 684.272446][T30413] hsr_slave_1: entered promiscuous mode [ 684.278865][T30413] debugfs: 'hsr0' already exists in 'hsr' [ 684.288797][T30413] Cannot create hsr debugfs directory [ 684.353231][T30530] netlink: 'syz.3.6269': attribute type 11 has an invalid length. [ 684.485481][T30537] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 684.491992][T30537] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 684.498541][T30537] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 684.505064][T30537] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 684.511602][T30537] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 684.541284][T30537] tc_dump_action: action bad kind [ 684.715574][T30413] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 684.729065][T30413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.739861][T30413] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 684.758085][T30413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.781491][T30413] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 684.796676][T30413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.824729][T30413] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 684.847825][T30413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.968037][T30413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.007145][T30413] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.035721][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.042859][ T8946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.068820][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.076008][ T8946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.379899][T30569] xfrm0 speed is unknown, defaulting to 1000 [ 685.781825][ T8946] veth0_virt_wifi: left allmulticast mode [ 685.799278][ T8946] veth0_virt_wifi: left promiscuous mode [ 685.819586][ T8946] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 685.849492][ T8946] pim6reg: left allmulticast mode [ 686.089784][ T8946] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 686.099215][ T8946] geneve1 (unregistering): left allmulticast mode [ 686.124349][ T8946] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 686.155990][ T8946] bond0 (unregistering): Released all slaves [ 686.166807][ T8946] bond1 (unregistering): Released all slaves [ 686.185073][ T8946] bond2 (unregistering): Released all slaves [ 686.195717][ T8946] bond3 (unregistering): Released all slaves [ 686.206956][ T8946] bond4 (unregistering): Released all slaves [ 686.217845][ T8946] bond5 (unregistering): Released all slaves [ 686.235925][ T8946] bond6 (unregistering): Released all slaves [ 686.249405][ T8946] bond7 (unregistering): Released all slaves [ 686.260412][ T8946] bond8 (unregistering): Released all slaves [ 686.271534][ T8946] bond9 (unregistering): Released all slaves [ 686.282125][ T8946] bond10 (unregistering): Released all slaves [ 686.290621][ T5617] Bluetooth: hci5: command tx timeout [ 686.366272][ T8946] tipc: Disabling bearer [ 686.389400][ T8946] tipc: Left network mode [ 686.443086][T30413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.528577][T30413] veth0_vlan: entered promiscuous mode [ 686.577322][T30413] veth1_vlan: entered promiscuous mode [ 686.632326][T30629] 8021q: VLANs not supported on wg1 [ 686.648176][T30627] syzkaller1: entered promiscuous mode [ 686.657169][T30627] syzkaller1: entered allmulticast mode [ 686.668121][T30623] syzkaller0: entered promiscuous mode [ 686.673951][T30623] syzkaller0: entered allmulticast mode [ 686.705447][T30627] vlan2: entered promiscuous mode [ 686.714893][T30627] gretap0: entered promiscuous mode [ 686.744598][T30628] vlan2: entered promiscuous mode [ 686.771928][T30623] tipc: Started in network mode [ 686.779072][T30623] tipc: Node identity caf6be2d24e6, cluster identity 4711 [ 686.786656][T30623] tipc: Enabled bearer , priority 0 [ 686.797848][T30413] veth0_macvtap: entered promiscuous mode [ 686.806987][T30622] tipc: Resetting bearer [ 686.818550][T30622] tipc: Disabling bearer [ 686.863319][T30413] veth1_macvtap: entered promiscuous mode [ 686.924947][T30413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.961763][T30413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.016989][ T8945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.056670][ T8945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.076802][ T8945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.119823][ T8945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.246409][ T7653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.283504][ T7653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.299585][T30667] __nla_validate_parse: 17 callbacks suppressed [ 687.299600][T30667] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6303'. [ 687.316164][T30667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6303'. [ 687.397647][T30667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 687.426369][ T7653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.437060][T30671] gretap1: entered allmulticast mode [ 687.447708][T30671] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 687.462802][ T7653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.556156][T30667] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 687.595329][T30667] bond3 (unregistering): Released all slaves [ 687.677158][T30694] validate_nla: 2 callbacks suppressed [ 687.677178][T30694] netlink: 'syz.0.6309': attribute type 1 has an invalid length. [ 687.696778][T30685] FAULT_INJECTION: forcing a failure. [ 687.696778][T30685] name failslab, interval 1, probability 0, space 0, times 0 [ 687.730617][T30685] CPU: 1 UID: 0 PID: 30685 Comm: syz.1.6308 Not tainted syzkaller #0 PREEMPT(full) [ 687.730641][T30685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 687.730653][T30685] Call Trace: [ 687.730661][T30685] [ 687.730669][T30685] dump_stack_lvl+0xe8/0x150 [ 687.730693][T30685] should_fail_ex+0x40c/0x560 [ 687.730714][T30685] should_failslab+0xa8/0x100 [ 687.730740][T30685] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 687.730764][T30685] ? rcu_is_watching+0x15/0xb0 [ 687.730782][T30685] ? __alloc_skb+0x1d7/0x7a0 [ 687.730805][T30685] ? trace_irq_enable+0x3b/0x140 [ 687.730829][T30685] __alloc_skb+0x1d7/0x7a0 [ 687.730853][T30685] alloc_skb_with_frags+0xc6/0x760 [ 687.730879][T30685] ? rcu_is_watching+0x15/0xb0 [ 687.730899][T30685] sock_alloc_send_pskb+0x878/0x990 [ 687.730924][T30685] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 687.730940][T30685] ? is_bpf_text_address+0x26/0x2b0 [ 687.730965][T30685] ? rcu_is_watching+0x15/0xb0 [ 687.730984][T30685] ? rcu_is_watching+0x15/0xb0 [ 687.731003][T30685] ? iov_iter_advance+0x8b/0x1c0 [ 687.731025][T30685] tun_get_user+0x94f/0x4350 [ 687.731047][T30685] ? is_bpf_text_address+0x292/0x2b0 [ 687.731085][T30685] ? lock_release+0x4b/0x3c0 [ 687.731110][T30685] ? arch_stack_walk+0xfb/0x150 [ 687.731133][T30685] ? aa_file_perm+0x4ed/0x15f0 [ 687.731152][T30685] ? __pfx_tun_get_user+0x10/0x10 [ 687.731177][T30685] ? kstrtoull+0x12f/0x1d0 [ 687.731202][T30685] ? ref_tracker_alloc+0x341/0x4b0 [ 687.731221][T30685] ? get_pid_task+0x20/0x1f0 [ 687.731237][T30685] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 687.731256][T30685] ? rcu_is_watching+0x15/0xb0 [ 687.731274][T30685] ? tun_get+0x1c/0x2f0 [ 687.731294][T30685] ? tun_get+0x1c/0x2f0 [ 687.731314][T30685] ? rcu_is_watching+0x15/0xb0 [ 687.731331][T30685] ? tun_get+0x1c/0x2f0 [ 687.731351][T30685] ? lock_release+0x4b/0x3c0 [ 687.731375][T30685] ? apparmor_file_permission+0x1f4/0x300 [ 687.731399][T30685] ? tun_get+0x1c/0x2f0 [ 687.731422][T30685] tun_chr_write_iter+0x113/0x200 [ 687.731445][T30685] vfs_write+0x612/0xba0 [ 687.731472][T30685] ? __pfx_vfs_write+0x10/0x10 [ 687.731499][T30685] ? __fget_files+0x2a/0x420 [ 687.731524][T30685] ksys_write+0x150/0x270 [ 687.731548][T30685] ? __pfx_ksys_write+0x10/0x10 [ 687.731573][T30685] ? rcu_is_watching+0x15/0xb0 [ 687.731592][T30685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.731610][T30685] do_syscall_64+0x174/0x580 [ 687.731633][T30685] ? trace_irq_disable+0x3b/0x140 [ 687.731655][T30685] ? clear_bhb_loop+0x40/0x90 [ 687.731675][T30685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.731693][T30685] RIP: 0033:0x7f4549b9ce59 [ 687.731709][T30685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.731725][T30685] RSP: 002b:00007f454aa30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 687.731744][T30685] RAX: ffffffffffffffda RBX: 00007f4549e15fa0 RCX: 00007f4549b9ce59 [ 687.731758][T30685] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 687.731770][T30685] RBP: 00007f454aa30090 R08: 0000000000000000 R09: 0000000000000000 [ 687.731781][T30685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.731792][T30685] R13: 00007f4549e16038 R14: 00007f4549e15fa0 R15: 00007ffde7227368 [ 687.731814][T30685] [ 688.163209][ T8946] hsr_slave_0: left promiscuous mode [ 688.176564][ T8946] hsr_slave_1: left promiscuous mode [ 688.189953][ T8946] veth1_macvtap: left promiscuous mode [ 688.197413][ T8946] veth0_macvtap: left promiscuous mode [ 688.203757][ T8946] veth1_vlan: left promiscuous mode [ 688.213755][ T8946] veth0_vlan: left promiscuous mode [ 688.371309][ T5617] Bluetooth: hci5: command tx timeout [ 688.790492][T30715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6314'. [ 688.799147][T30717] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6316'. [ 688.831683][ T8946] IPVS: stop unused estimator thread 0... [ 688.959815][T30725] netlink: 'syz.2.6319': attribute type 10 has an invalid length. [ 689.096126][T30741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6319'. [ 689.214462][T30736] netlink: 'syz.4.6322': attribute type 1 has an invalid length. [ 689.248599][T30736] bond3: entered promiscuous mode [ 689.257432][T30736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.287923][T30736] vlan3: entered allmulticast mode [ 689.309482][T30736] bond3: entered allmulticast mode [ 689.334869][T30759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6328'. [ 689.433197][T30759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6328'. [ 689.482900][T30770] syzkaller0: entered promiscuous mode [ 689.493680][T30770] syzkaller0: entered allmulticast mode [ 689.591569][T30773] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6331'. [ 689.611215][T30779] netlink: 'syz.1.6334': attribute type 39 has an invalid length. [ 689.677930][T30784] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6335'. [ 689.772679][T30790] netlink: 'syz.0.6337': attribute type 29 has an invalid length. [ 689.906726][T30795] netlink: 'syz.2.6338': attribute type 41 has an invalid length. [ 689.928280][T30795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6338'. [ 689.959770][T30801] FAULT_INJECTION: forcing a failure. [ 689.959770][T30801] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 689.991443][T30801] CPU: 0 UID: 0 PID: 30801 Comm: syz.0.6340 Not tainted syzkaller #0 PREEMPT(full) [ 689.991469][T30801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.991481][T30801] Call Trace: [ 689.991488][T30801] [ 689.991496][T30801] dump_stack_lvl+0xe8/0x150 [ 689.991520][T30801] should_fail_ex+0x40c/0x560 [ 689.991541][T30801] _copy_from_iter+0x1d3/0x1660 [ 689.991562][T30801] ? skb_set_owner_w+0x263/0x3d0 [ 689.991594][T30801] ? __pfx__copy_from_iter+0x10/0x10 [ 689.991621][T30801] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 689.991641][T30801] skb_copy_datagram_from_iter+0xe6/0x720 [ 689.991662][T30801] ? skb_put+0x112/0x210 [ 689.991688][T30801] tun_get_user+0xc71/0x4350 [ 689.991710][T30801] ? is_bpf_text_address+0x292/0x2b0 [ 689.991744][T30801] ? lock_release+0x4b/0x3c0 [ 689.991771][T30801] ? arch_stack_walk+0xfb/0x150 [ 689.991795][T30801] ? aa_file_perm+0x4ed/0x15f0 [ 689.991815][T30801] ? __pfx_tun_get_user+0x10/0x10 [ 689.991841][T30801] ? kstrtoull+0x12f/0x1d0 [ 689.991864][T30801] ? ref_tracker_alloc+0x341/0x4b0 [ 689.991884][T30801] ? get_pid_task+0x20/0x1f0 [ 689.991901][T30801] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 689.991922][T30801] ? rcu_is_watching+0x15/0xb0 [ 689.991941][T30801] ? tun_get+0x1c/0x2f0 [ 689.991963][T30801] ? tun_get+0x1c/0x2f0 [ 689.991985][T30801] ? rcu_is_watching+0x15/0xb0 [ 689.992003][T30801] ? tun_get+0x1c/0x2f0 [ 689.992024][T30801] ? lock_release+0x4b/0x3c0 [ 689.992050][T30801] ? apparmor_file_permission+0x1f4/0x300 [ 689.992076][T30801] ? tun_get+0x1c/0x2f0 [ 689.992099][T30801] tun_chr_write_iter+0x113/0x200 [ 689.992123][T30801] vfs_write+0x612/0xba0 [ 689.992152][T30801] ? __pfx_vfs_write+0x10/0x10 [ 689.992182][T30801] ? __fget_files+0x2a/0x420 [ 689.992207][T30801] ksys_write+0x150/0x270 [ 689.992233][T30801] ? __pfx_ksys_write+0x10/0x10 [ 689.992260][T30801] ? rcu_is_watching+0x15/0xb0 [ 689.992279][T30801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.992299][T30801] do_syscall_64+0x174/0x580 [ 689.992323][T30801] ? trace_irq_disable+0x3b/0x140 [ 689.992357][T30801] ? clear_bhb_loop+0x40/0x90 [ 689.992379][T30801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.992397][T30801] RIP: 0033:0x7f9ded39ce59 [ 689.992414][T30801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.992430][T30801] RSP: 002b:00007f9dee203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 689.992460][T30801] RAX: ffffffffffffffda RBX: 00007f9ded615fa0 RCX: 00007f9ded39ce59 [ 689.992474][T30801] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 689.992485][T30801] RBP: 00007f9dee203090 R08: 0000000000000000 R09: 0000000000000000 [ 689.992496][T30801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.992506][T30801] R13: 00007f9ded616038 R14: 00007f9ded615fa0 R15: 00007ffe9dc7b9f8 [ 689.992528][T30801] [ 690.450693][ T5617] Bluetooth: hci5: command tx timeout [ 690.543269][T30828] netlink: 'syz.4.6349': attribute type 317 has an invalid length. [ 690.803564][T30848] FAULT_INJECTION: forcing a failure. [ 690.803564][T30848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.856976][T30848] CPU: 1 UID: 0 PID: 30848 Comm: syz.1.6358 Not tainted syzkaller #0 PREEMPT(full) [ 690.857004][T30848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.857017][T30848] Call Trace: [ 690.857025][T30848] [ 690.857034][T30848] dump_stack_lvl+0xe8/0x150 [ 690.857059][T30848] should_fail_ex+0x40c/0x560 [ 690.857081][T30848] _copy_from_iter+0x1d3/0x1660 [ 690.857103][T30848] ? skb_set_owner_w+0x263/0x3d0 [ 690.857137][T30848] ? __pfx__copy_from_iter+0x10/0x10 [ 690.857163][T30848] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 690.857184][T30848] skb_copy_datagram_from_iter+0xe6/0x720 [ 690.857205][T30848] ? skb_put+0x112/0x210 [ 690.857230][T30848] tun_get_user+0xc71/0x4350 [ 690.857253][T30848] ? is_bpf_text_address+0x292/0x2b0 [ 690.857288][T30848] ? lock_release+0x4b/0x3c0 [ 690.857314][T30848] ? arch_stack_walk+0xfb/0x150 [ 690.857339][T30848] ? aa_file_perm+0x4ed/0x15f0 [ 690.857359][T30848] ? __pfx_tun_get_user+0x10/0x10 [ 690.857386][T30848] ? kstrtoull+0x12f/0x1d0 [ 690.857409][T30848] ? ref_tracker_alloc+0x341/0x4b0 [ 690.857429][T30848] ? get_pid_task+0x20/0x1f0 [ 690.857446][T30848] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 690.857467][T30848] ? rcu_is_watching+0x15/0xb0 [ 690.857502][T30848] ? tun_get+0x1c/0x2f0 [ 690.857524][T30848] ? tun_get+0x1c/0x2f0 [ 690.857563][T30848] ? rcu_is_watching+0x15/0xb0 [ 690.857600][T30848] ? tun_get+0x1c/0x2f0 [ 690.857623][T30848] ? lock_release+0x4b/0x3c0 [ 690.857653][T30848] ? apparmor_file_permission+0x1f4/0x300 [ 690.857681][T30848] ? tun_get+0x1c/0x2f0 [ 690.857707][T30848] tun_chr_write_iter+0x113/0x200 [ 690.857735][T30848] vfs_write+0x612/0xba0 [ 690.857801][T30848] ? __pfx_vfs_write+0x10/0x10 [ 690.857834][T30848] ? __fget_files+0x2a/0x420 [ 690.857861][T30848] ksys_write+0x150/0x270 [ 690.857890][T30848] ? __pfx_ksys_write+0x10/0x10 [ 690.857919][T30848] ? rcu_is_watching+0x15/0xb0 [ 690.857941][T30848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.857963][T30848] do_syscall_64+0x174/0x580 [ 690.857998][T30848] ? trace_irq_disable+0x3b/0x140 [ 690.858041][T30848] ? clear_bhb_loop+0x40/0x90 [ 690.858064][T30848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.858083][T30848] RIP: 0033:0x7f4549b9ce59 [ 690.858102][T30848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.858120][T30848] RSP: 002b:00007f454aa30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 690.858141][T30848] RAX: ffffffffffffffda RBX: 00007f4549e15fa0 RCX: 00007f4549b9ce59 [ 690.858156][T30848] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 690.858169][T30848] RBP: 00007f454aa30090 R08: 0000000000000000 R09: 0000000000000000 [ 690.858180][T30848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.858192][T30848] R13: 00007f4549e16038 R14: 00007f4549e15fa0 R15: 00007ffde7227368 [ 690.858216][T30848] [ 691.253407][T30855] netlink: 'syz.2.6360': attribute type 58 has an invalid length. [ 691.736945][T30883] net_ratelimit: 21 callbacks suppressed [ 691.736965][T30883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.854638][T30883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 691.929758][T30897] FAULT_INJECTION: forcing a failure. [ 691.929758][T30897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.974002][T30897] CPU: 0 UID: 0 PID: 30897 Comm: syz.2.6372 Not tainted syzkaller #0 PREEMPT(full) [ 691.974030][T30897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.974043][T30897] Call Trace: [ 691.974051][T30897] [ 691.974059][T30897] dump_stack_lvl+0xe8/0x150 [ 691.974085][T30897] should_fail_ex+0x40c/0x560 [ 691.974109][T30897] _copy_from_iter+0x1d3/0x1660 [ 691.974131][T30897] ? __might_fault+0xaf/0x130 [ 691.974153][T30897] ? __might_fault+0xcb/0x130 [ 691.974184][T30897] ? _copy_from_iter+0x21b/0x1660 [ 691.974206][T30897] ? __pfx__copy_from_iter+0x10/0x10 [ 691.974235][T30897] ? __pfx__copy_from_iter+0x10/0x10 [ 691.974261][T30897] copy_page_from_iter+0x219/0x2d0 [ 691.974286][T30897] skb_copy_datagram_from_iter+0x2f4/0x720 [ 691.974312][T30897] tun_get_user+0xc71/0x4350 [ 691.974336][T30897] ? is_bpf_text_address+0x292/0x2b0 [ 691.974369][T30897] ? lock_release+0x4b/0x3c0 [ 691.974400][T30897] ? aa_file_perm+0x4ed/0x15f0 [ 691.974420][T30897] ? __pfx_tun_get_user+0x10/0x10 [ 691.974447][T30897] ? kstrtoull+0x12f/0x1d0 [ 691.974470][T30897] ? ref_tracker_alloc+0x341/0x4b0 [ 691.974490][T30897] ? get_pid_task+0x20/0x1f0 [ 691.974508][T30897] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 691.974528][T30897] ? rcu_is_watching+0x15/0xb0 [ 691.974548][T30897] ? tun_get+0x1c/0x2f0 [ 691.974569][T30897] ? tun_get+0x1c/0x2f0 [ 691.974590][T30897] ? rcu_is_watching+0x15/0xb0 [ 691.974608][T30897] ? tun_get+0x1c/0x2f0 [ 691.974629][T30897] ? lock_release+0x4b/0x3c0 [ 691.974656][T30897] ? apparmor_file_permission+0x1f4/0x300 [ 691.974681][T30897] ? tun_get+0x1c/0x2f0 [ 691.974706][T30897] tun_chr_write_iter+0x113/0x200 [ 691.974730][T30897] vfs_write+0x612/0xba0 [ 691.974759][T30897] ? __pfx_vfs_write+0x10/0x10 [ 691.974788][T30897] ? __fget_files+0x2a/0x420 [ 691.974814][T30897] ksys_write+0x150/0x270 [ 691.974839][T30897] ? __pfx_ksys_write+0x10/0x10 [ 691.974865][T30897] ? rcu_is_watching+0x15/0xb0 [ 691.974885][T30897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.974904][T30897] do_syscall_64+0x174/0x580 [ 691.974928][T30897] ? trace_irq_disable+0x3b/0x140 [ 691.974954][T30897] ? clear_bhb_loop+0x40/0x90 [ 691.974974][T30897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.974993][T30897] RIP: 0033:0x7fd83a19ce59 [ 691.975010][T30897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.975026][T30897] RSP: 002b:00007fd83b05a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.975047][T30897] RAX: ffffffffffffffda RBX: 00007fd83a415fa0 RCX: 00007fd83a19ce59 [ 691.975061][T30897] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 691.975073][T30897] RBP: 00007fd83b05a090 R08: 0000000000000000 R09: 0000000000000000 [ 691.975086][T30897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.975097][T30897] R13: 00007fd83a416038 R14: 00007fd83a415fa0 R15: 00007ffc34ee3e68 [ 691.975121][T30897] [ 692.470597][T30909] __nla_validate_parse: 6 callbacks suppressed [ 692.470615][T30909] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.6375'. [ 692.651389][T30917] vlan2: entered promiscuous mode [ 692.659304][T30917] bridge0: entered promiscuous mode [ 692.954428][T30924] netlink: 'syz.0.6380': attribute type 21 has an invalid length. [ 692.968723][T30924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6380'. [ 693.003639][T30918] xfrm0 speed is unknown, defaulting to 1000 [ 693.190300][T30932] syzkaller1: entered promiscuous mode [ 693.218230][T30932] syzkaller1: entered allmulticast mode [ 693.254852][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6382'. [ 693.302127][T30939] Bluetooth: MGMT ver 1.23 [ 693.441845][T30943] FAULT_INJECTION: forcing a failure. [ 693.441845][T30943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.482913][T30943] CPU: 0 UID: 0 PID: 30943 Comm: syz.3.6387 Not tainted syzkaller #0 PREEMPT(full) [ 693.482942][T30943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 693.482955][T30943] Call Trace: [ 693.482964][T30943] [ 693.482973][T30943] dump_stack_lvl+0xe8/0x150 [ 693.483009][T30943] should_fail_ex+0x40c/0x560 [ 693.483036][T30943] _copy_from_iter+0x1d3/0x1660 [ 693.483060][T30943] ? __might_fault+0xaf/0x130 [ 693.483085][T30943] ? __might_fault+0xcb/0x130 [ 693.483111][T30943] ? _copy_from_iter+0x21b/0x1660 [ 693.483137][T30943] ? __pfx__copy_from_iter+0x10/0x10 [ 693.483166][T30943] ? __pfx__copy_from_iter+0x10/0x10 [ 693.483195][T30943] copy_page_from_iter+0x219/0x2d0 [ 693.483223][T30943] skb_copy_datagram_from_iter+0x2f4/0x720 [ 693.483252][T30943] tun_get_user+0xc71/0x4350 [ 693.483278][T30943] ? is_bpf_text_address+0x292/0x2b0 [ 693.483316][T30943] ? lock_release+0x4b/0x3c0 [ 693.483345][T30943] ? arch_stack_walk+0xfb/0x150 [ 693.483373][T30943] ? aa_file_perm+0x4ed/0x15f0 [ 693.483396][T30943] ? __pfx_tun_get_user+0x10/0x10 [ 693.483426][T30943] ? kstrtoull+0x12f/0x1d0 [ 693.483452][T30943] ? ref_tracker_alloc+0x341/0x4b0 [ 693.483474][T30943] ? get_pid_task+0x20/0x1f0 [ 693.483493][T30943] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 693.483517][T30943] ? rcu_is_watching+0x15/0xb0 [ 693.483539][T30943] ? tun_get+0x1c/0x2f0 [ 693.483563][T30943] ? tun_get+0x1c/0x2f0 [ 693.483587][T30943] ? rcu_is_watching+0x15/0xb0 [ 693.483607][T30943] ? tun_get+0x1c/0x2f0 [ 693.483630][T30943] ? lock_release+0x4b/0x3c0 [ 693.483660][T30943] ? apparmor_file_permission+0x1f4/0x300 [ 693.483688][T30943] ? tun_get+0x1c/0x2f0 [ 693.483715][T30943] tun_chr_write_iter+0x113/0x200 [ 693.483742][T30943] vfs_write+0x612/0xba0 [ 693.483774][T30943] ? __pfx_vfs_write+0x10/0x10 [ 693.483807][T30943] ? __fget_files+0x2a/0x420 [ 693.483836][T30943] ksys_write+0x150/0x270 [ 693.483864][T30943] ? __pfx_ksys_write+0x10/0x10 [ 693.483897][T30943] ? rcu_is_watching+0x15/0xb0 [ 693.483929][T30943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.483949][T30943] do_syscall_64+0x174/0x580 [ 693.483975][T30943] ? clear_bhb_loop+0x40/0x90 [ 693.483997][T30943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.484022][T30943] RIP: 0033:0x7fcbd5f9ce59 [ 693.484040][T30943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.484056][T30943] RSP: 002b:00007fcbd6ddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 693.484076][T30943] RAX: ffffffffffffffda RBX: 00007fcbd6215fa0 RCX: 00007fcbd5f9ce59 [ 693.484091][T30943] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 693.484104][T30943] RBP: 00007fcbd6ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 693.484115][T30943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.484126][T30943] R13: 00007fcbd6216038 R14: 00007fcbd6215fa0 R15: 00007fff84269ce8 [ 693.484149][T30943] [ 693.879820][T30937] xfrm0 speed is unknown, defaulting to 1000 [ 694.013887][T30956] lo speed is unknown, defaulting to 1000 [ 694.159262][T30956] lo speed is unknown, defaulting to 1000 [ 694.195460][T30977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6398'. [ 694.205127][T30977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6398'. [ 694.215467][T30978] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6398'. [ 694.225257][T30978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6398'. [ 694.240580][T30978] netlink: 'syz.2.6398': attribute type 3 has an invalid length. [ 694.269082][T30978] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6398'. [ 694.285461][T30956] lo speed is unknown, defaulting to 1000 [ 694.426483][T30991] netlink: 'syz.2.6400': attribute type 14 has an invalid length. [ 694.443151][T30991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6400'. [ 694.506607][T30993] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6401'. [ 694.532835][T30956] infiniband syz0: set down [ 694.537735][T14100] lo speed is unknown, defaulting to 1000 [ 694.539644][T30956] infiniband syz0: added lo [ 694.553975][T30956] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 694.569503][T30956] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 694.587395][T30956] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 694.622127][T30956] RDS/IB: syz0: added [ 694.626268][T30956] smc: adding ib device syz0 with port count 1 [ 694.632787][T30956] smc: ib device syz0 port 1 has no pnetid [ 694.639019][ T5748] lo speed is unknown, defaulting to 1000 [ 694.645580][T30956] lo speed is unknown, defaulting to 1000 [ 694.657453][T30996] sock: sock_set_timeout: `syz.1.6402' (pid 30996) tries to set negative timeout [ 694.778042][T31004] netlink: 'syz.1.6404': attribute type 14 has an invalid length. [ 694.823250][T30956] lo speed is unknown, defaulting to 1000 [ 694.953029][T30956] lo speed is unknown, defaulting to 1000 [ 695.084061][T30956] lo speed is unknown, defaulting to 1000 [ 695.190530][T30956] lo speed is unknown, defaulting to 1000 [ 695.337518][T30956] lo speed is unknown, defaulting to 1000 [ 695.469121][T30956] lo speed is unknown, defaulting to 1000 [ 695.655856][T30956] lo speed is unknown, defaulting to 1000 [ 695.822670][T30956] lo speed is unknown, defaulting to 1000 [ 696.213000][T31049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 696.313058][T31053] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 696.324076][T31059] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 696.341858][T31059] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 696.477650][T31076] netlink: 'syz.0.6425': attribute type 11 has an invalid length. [ 696.493526][T31070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.528864][T31080] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 699.599514][T31081] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 699.669133][T31089] __nla_validate_parse: 6 callbacks suppressed [ 699.669156][T31089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6429'. [ 699.706638][T31089] xt_TCPMSS: Only works on TCP SYN packets [ 699.957591][T31089] bridge_slave_1: left allmulticast mode [ 699.971743][T31089] bridge_slave_1: left promiscuous mode [ 699.994510][T31089] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.023159][T31089] bridge_slave_0: left allmulticast mode [ 700.034720][T31089] bridge_slave_0: left promiscuous mode [ 700.050497][T31089] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.178781][T31126] netlink: 'syz.4.6441': attribute type 13 has an invalid length. [ 700.518758][T31139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6445'. [ 700.752437][T31146] Cannot find del_set index 0 as target [ 700.758986][T31147] Cannot find del_set index 0 as target [ 700.849434][T31156] veth3: entered promiscuous mode [ 700.856121][T31156] veth3: entered allmulticast mode [ 700.863495][T31156] team0: Port device veth3 added [ 700.923518][T31155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6447'. [ 700.975999][T31163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6452'. [ 701.000876][T31163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6452'. [ 701.246119][T31188] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6458'. [ 701.336369][T31193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6459'. [ 701.352782][T31202] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6461'. [ 701.366507][T31193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6459'. [ 701.374079][T31202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6461'. [ 701.384837][T31193] netlink: 'syz.0.6459': attribute type 18 has an invalid length. [ 701.443727][T31205] netlink: 'syz.3.6462': attribute type 1 has an invalid length. [ 701.538795][T31211] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 701.566990][ T5748] team_slave_0: entered promiscuous mode [ 701.572726][ T5748] team_slave_1: entered promiscuous mode [ 701.603376][T31193] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 701.692759][T31224] bridge1: entered allmulticast mode [ 701.711509][T31224] sctp: [Deprecated]: syz.1.6466 (pid 31224) Use of int in maxseg socket option. [ 701.711509][T31224] Use struct sctp_assoc_value instead [ 702.048445][T31249] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 702.356606][T31272] netlink: 'syz.2.6479': attribute type 10 has an invalid length. [ 702.365489][T31270] netlink: 'syz.2.6479': attribute type 10 has an invalid length. [ 702.546848][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.553713][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.560548][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.567360][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.574199][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.580993][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.587762][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.594591][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.601400][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.608157][T31280] tc action pedit offset must be on 32 bit boundaries [ 702.614926][T31280] 0: reclassify loop, rule prio 0, protocol 800 [ 702.701275][T31287] sctp: [Deprecated]: syz.4.6484 (pid 31287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 702.701275][T31287] Use struct sctp_sack_info instead [ 703.014976][T31310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 703.376685][T31331] openvswitch: netlink: Message has 1 unknown bytes. [ 703.392674][T31331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.602162][T31333] bond5: option tlb_dynamic_lb: invalid value (5) [ 703.938752][T31333] bond5 (unregistering): Released all slaves [ 704.011774][T31367] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 704.022724][T31367] netlink: 'syz.2.6509': attribute type 39 has an invalid length. [ 704.123381][T31369] syzkaller0: entered promiscuous mode [ 704.129345][T31369] syzkaller0: entered allmulticast mode [ 704.145047][T31369] tipc: Enabled bearer , priority 0 [ 704.182204][T31369] tipc: Resetting bearer [ 704.188064][T31369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.256226][T31368] tipc: Resetting bearer [ 704.276908][T31368] tipc: Disabling bearer [ 704.331641][T31388] sctp: [Deprecated]: syz.2.6515 (pid 31388) Use of int in max_burst socket option. [ 704.331641][T31388] Use struct sctp_assoc_value instead [ 704.348268][T31389] sctp: [Deprecated]: syz.2.6515 (pid 31389) Use of int in maxseg socket option. [ 704.348268][T31389] Use struct sctp_assoc_value instead [ 704.397019][T31382] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 704.531246][T31393] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 704.555127][T31393] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 704.569078][T31393] bond2: entered allmulticast mode [ 704.579969][T31407] netlink: 'syz.1.6520': attribute type 1 has an invalid length. [ 704.638271][T31407] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 704.644937][T31399] netlink: 'syz.4.6518': attribute type 1 has an invalid length. [ 704.717121][T31399] __nla_validate_parse: 15 callbacks suppressed [ 704.717140][T31399] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6518'. [ 704.847440][T31426] netlink: 'syz.0.6521': attribute type 1 has an invalid length. [ 704.873589][T31426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6521'. [ 704.912213][T31431] syzkaller0: entered promiscuous mode [ 704.945433][T31431] syzkaller0: entered allmulticast mode [ 704.961342][T31439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6529'. [ 704.985820][T31440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6529'. [ 705.055191][T31439] netlink: 'syz.3.6529': attribute type 15 has an invalid length. [ 705.112557][T31440] syzkaller0: entered promiscuous mode [ 705.118720][T31440] syzkaller0: entered allmulticast mode [ 769.881188][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 810.149977][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 810.156963][ C0] rcu: (detected by 0, t=10502 jiffies, g=143533, q=755 ncpus=2) [ 810.164773][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295018138-4295007636), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 810.178236][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g143533 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 810.189550][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 810.199544][ C0] rcu: RCU grace-period kthread stack dump: [ 810.205450][ C0] task:rcu_preempt state:R running task stack:27176 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 810.218973][ C0] Call Trace: [ 810.222263][ C0] [ 810.225237][ C0] __schedule+0x17d9/0x56c0 [ 810.229813][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.234611][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.239393][ C0] ? __pfx___schedule+0x10/0x10 [ 810.244277][ C0] ? schedule+0x90/0x360 [ 810.248563][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.253347][ C0] ? lock_release+0x4b/0x3c0 [ 810.257974][ C0] schedule+0x164/0x360 [ 810.262149][ C0] schedule_timeout+0x152/0x2c0 [ 810.267014][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 810.272398][ C0] ? __pfx_process_timeout+0x10/0x10 [ 810.277703][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 810.283525][ C0] ? prepare_to_swait_event+0x322/0x350 [ 810.289104][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 810.293988][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 810.299811][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 810.305130][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 810.310388][ C0] ? trace_irq_enable+0x3b/0x140 [ 810.315362][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 810.319991][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 810.325240][ C0] ? __kthread_parkme+0x71/0x1f0 [ 810.330299][ C0] ? __kthread_parkme+0x196/0x1f0 [ 810.335365][ C0] kthread+0x388/0x470 [ 810.339476][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 810.344718][ C0] ? __pfx_kthread+0x10/0x10 [ 810.349333][ C0] ret_from_fork+0x514/0xb70 [ 810.353945][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 810.359073][ C0] ? __switch_to+0xc89/0x1420 [ 810.363780][ C0] ? __pfx_kthread+0x10/0x10 [ 810.368395][ C0] ret_from_fork_asm+0x1a/0x30 [ 810.373210][ C0] [ 810.376244][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 810.382581][ C0] CPU: 0 UID: 0 PID: 31085 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 810.391541][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 810.401624][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 810.407277][ C0] Code: 0c 80 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a7 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 810.426886][ C0] RSP: 0000:ffffc900000070a8 EFLAGS: 00000246 [ 810.432988][ C0] RAX: ffffffff8175d19a RBX: 0000000000000003 RCX: ffff8880542add00 [ 810.440979][ C0] RDX: 0000000000000100 RSI: ffffffff8c291100 RDI: ffffffff8175d190 [ 810.448961][ C0] RBP: 0000000000000003 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 810.456950][ C0] R10: dffffc0000000000 R11: fffffbfff20622df R12: 0000000000000200 [ 810.464930][ C0] R13: 0000000000000000 R14: ffff888096dd0150 R15: dffffc0000000000 [ 810.472906][ C0] FS: 00007f67f9f9e880(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 810.483143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.489757][ C0] CR2: 0000556427b29f10 CR3: 000000004b0f2000 CR4: 00000000003526f0 [ 810.497739][ C0] Call Trace: [ 810.501028][ C0] [ 810.503875][ C0] kvm_wait+0x10f/0x150 [ 810.508062][ C0] __pv_queued_spin_lock_slowpath+0x74a/0xbc0 [ 810.514165][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 810.520777][ C0] do_raw_spin_lock+0x26c/0x2f0 [ 810.525643][ C0] ? lock_acquire+0x5f/0x350 [ 810.530259][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 810.535648][ C0] ? __kmalloc_noprof+0x379/0x750 [ 810.540703][ C0] ? cfg80211_inform_single_bss_data+0xc31/0x1be0 [ 810.547137][ C0] cfg80211_inform_single_bss_data+0xc31/0x1be0 [ 810.553399][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 810.560101][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 810.565329][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.570202][ C0] ? cfg80211_inform_bss_data+0x245/0x3c40 [ 810.576041][ C0] cfg80211_inform_bss_data+0x258/0x3c40 [ 810.581690][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 810.587009][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 810.592254][ C0] ? kernel_text_address+0xa5/0xe0 [ 810.597393][ C0] ? __kernel_text_address+0xd/0x30 [ 810.602618][ C0] ? unwind_get_return_address+0x4d/0x90 [ 810.608269][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 810.614439][ C0] ? arch_stack_walk+0xfb/0x150 [ 810.619408][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 810.625507][ C0] ? stack_trace_save+0xa9/0x100 [ 810.630463][ C0] ? unwind_next_frame+0x8f/0x2550 [ 810.635584][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.640377][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 810.645610][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.650397][ C0] ? unwind_next_frame+0x8f/0x2550 [ 810.655525][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.660301][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 810.665512][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.670296][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.675071][ C0] ? lock_release+0x4b/0x3c0 [ 810.679678][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 810.684892][ C0] ? kernel_text_address+0xa5/0xe0 [ 810.690012][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 810.696101][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 810.701759][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 810.707950][ C0] ? __irq_exit_rcu+0xca/0x220 [ 810.712754][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.717543][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 810.723374][ C0] ieee80211_scan_rx+0x552/0xa40 [ 810.728339][ C0] ieee80211_rx_list+0x2b1d/0x3910 [ 810.733501][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.738281][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 810.743761][ C0] ? update_load_avg+0x11a6/0x1950 [ 810.748895][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 810.754030][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.758809][ C0] ? lock_acquire+0x5f/0x350 [ 810.763429][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 810.768477][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 810.773538][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 810.778516][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 810.783997][ C0] ? trace_irq_enable+0x3b/0x140 [ 810.788963][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 810.794795][ C0] ? skb_dequeue+0x124/0x160 [ 810.799398][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 810.805419][ C0] tasklet_action_common+0x2d7/0x490 [ 810.810727][ C0] handle_softirqs+0x225/0x840 [ 810.815508][ C0] ? __irq_exit_rcu+0xca/0x220 [ 810.820293][ C0] __irq_exit_rcu+0xca/0x220 [ 810.824905][ C0] irq_exit_rcu+0x9/0x30 [ 810.829174][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 810.834834][ C0] [ 810.837788][ C0] [ 810.840725][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 810.846734][ C0] RIP: 0010:smp_call_function_many_cond+0x10b5/0x14b0 [ 810.853520][ C0] Code: 1e 89 de 83 e6 01 31 ff e8 98 02 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 44 fe 0b 00 eb 37 f3 90 41 0f b6 04 1c <84> c0 75 10 41 f7 06 01 00 00 00 74 1e e8 29 fe 0b 00 eb e5 44 89 [ 810.873129][ C0] RSP: 0000:ffffc900057c7840 EFLAGS: 00000293 [ 810.879219][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880542add00 [ 810.887304][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 810.895282][ C0] RBP: ffffc900057c7970 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 810.903257][ C0] R10: dffffc0000000000 R11: fffffbfff20622df R12: 1ffff110170e8199 [ 810.911232][ C0] R13: ffff8880b863c2c8 R14: ffff8880b8740cc8 R15: 0000000000000001 [ 810.919227][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 810.924452][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 810.929840][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 810.936187][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.940958][ C0] ? rcu_is_watching+0x15/0xb0 [ 810.945816][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 810.951208][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 810.956420][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 810.961551][ C0] flush_tlb_mm_range+0x5c4/0x1090 [ 810.966685][ C0] ? page_table_check_clear+0x124/0x4f0 [ 810.972256][ C0] ? page_table_check_clear+0x48d/0x4f0 [ 810.977831][ C0] ptep_clear_flush+0x120/0x170 [ 810.982694][ C0] do_wp_page+0x3d52/0x4c70 [ 810.987211][ C0] ? do_wp_page+0x375f/0x4c70 [ 810.991899][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.997971][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 811.002846][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 811.007884][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 811.013262][ C0] ? __pte_offset_map+0x45/0x240 [ 811.018216][ C0] handle_mm_fault+0x1490/0x3080 [ 811.023176][ C0] ? handle_mm_fault+0xec/0x3080 [ 811.028123][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 811.033421][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 811.038647][ C0] ? rcu_is_watching+0x15/0xb0 [ 811.043449][ C0] do_user_addr_fault+0xa4d/0x1340 [ 811.048574][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 811.053967][ C0] exc_page_fault+0x6a/0xc0 [ 811.058513][ C0] asm_exc_page_fault+0x26/0x30 [ 811.063385][ C0] RIP: 0033:0x7f67f98b5b3b [ 811.067816][ C0] Code: 04 07 0f 85 a9 00 00 00 f3 0f 6f 47 10 48 8b 57 18 66 48 0f 7e c0 48 3b 78 18 75 7b 48 3b 7a 10 75 75 48 8b 77 10 48 89 50 18 <66> 0f d6 42 10 48 81 f9 ff 03 00 00 76 28 48 8b 57 20 48 85 d2 74 [ 811.087434][ C0] RSP: 002b:00007ffd877688b0 EFLAGS: 00010246 [ 811.093509][ C0] RAX: 00007f67f99f21c0 RBX: 0000556427b25760 RCX: 0000000000002041 [ 811.101498][ C0] RDX: 0000556427b29f00 RSI: 00007f67f99f21c0 RDI: 0000556427b25760 [ 811.109482][ C0] RBP: 00007f67f99f1ac0 R08: 0000000000002760 R09: 0000000000000000 [ 811.117488][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000047a0 [ 811.125478][ C0] R13: 0000556427b29f00 R14: 0000000000002140 R15: 00007f67f99f1ac0 [ 811.133483][ C0] [ 812.136568][ C0] sched: DL replenish lagged too much