last executing test programs: 2.744544828s ago: executing program 3 (id=5454): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r2, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000240)=0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'pim6reg0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x5c, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xe}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 2.54043007s ago: executing program 3 (id=5459): r0 = socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b27, &(0x7f0000000040)) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendto$inet(r0, &(0x7f0000000100)="f4", 0x1, 0x2000c8d4, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) 2.295639407s ago: executing program 3 (id=5464): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000e00)={0x0, 0x4}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x18, &(0x7f00000004c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x3, 0x8e}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf6e}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600010000000000000000000308000000000000080001"], 0x20}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast1}}]}, 0x30}}, 0x0) r7 = accept(r5, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x40895, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x3, '\x00', 0x0, r8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x1cb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000380)={0x5, 0x1, 0xdf76, 0xbc34, 0x1ff}) 1.388705003s ago: executing program 3 (id=5479): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x40000000, @empty, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r1, &(0x7f0000000740)="50fbdf", 0x3, 0x4008044, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1.330547152s ago: executing program 1 (id=5481): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r0) 1.252555415s ago: executing program 4 (id=5482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r6, &(0x7f0000000000)=@proc, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x131, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000000780), 0x30, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020029bd7000fedbdf2516000000050004000100000005000300010000000500040000000000340001801400020076657468305f766c616e00000000000008000100", @ANYRES32=r7, @ANYBLOB="140002d309000068305f766972745f77696669000500040000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r9, @ANYBLOB="05012dbd70000a0000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a003400020202020202000039001501"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r9, 0x40b, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x40008c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{}, 0x10000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x64}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540217"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.186334664s ago: executing program 1 (id=5484): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=ANY=[@ANYBLOB="240000001a00010000000000000000000a00000000000056f8000000000005001b000100"], 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0x0, 0x0}, 0x10) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) read(r6, &(0x7f0000000100)=""/19, 0x13) recvmsg$can_raw(r5, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x60) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @remote, 0xa7, 0x0, [0x40, 0x132]}, @ether_spec={@remote, @random="787ac0791d6b", 0x3}, {0x0, @empty, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 1.016663273s ago: executing program 4 (id=5486): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) listen(r1, 0x5) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 993.925007ms ago: executing program 1 (id=5487): r0 = socket$kcm(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth0_virt_wifi\x00', 0x10) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x80040005, 0x0, 0x0, 0x41100, 0x18}, 0x94) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x37, 0x16, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3"}}, 0x24) (async) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "eb9ed0d8136d2e99", "9c610ce42805f75dd84d05e80fc3f935", "8de4911f", "29d61c3e0a7dff54"}, 0x28) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) 989.588283ms ago: executing program 0 (id=5488): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x20}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00010000000000000000009a00000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000400"/28], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000300)={r7, 0xffff, 0x2, 0x401, 0x0, 0x236c, 0x1000, 0x5, {r7, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x3, 0x9, 0x3, 0xffd7f8d, 0x80}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000180)={r7, 0x8}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000100)) r8 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r2, r1, 0x0, 0xbdc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1811000088f1e2f7cdc0036116c523f075d89eb12775b03b12846f6d0f45054ac6f4fbd8c921ab19783f46e78d629fbac0072870fd3c451e177b710fcc4f7bd341215f419a054bafb59c782cba3b90dc0c7b1053e222c979f79ee2a6508166a1b8fd1402e494699876062205c5dd234019c4c123edb998433c1511cfb06456f3c87099e5796390bea358f49bc7e608a49faea475f9b2859e97585f352e8beee392", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000f0287b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000010e9000104000000852000000400000018000000e722ffff0000000003000000"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, 0x24}, 0x94) 849.561318ms ago: executing program 2 (id=5490): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80000, @local, 0x1000006}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}, 0x4004040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 788.719503ms ago: executing program 2 (id=5491): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000040)) 700.710751ms ago: executing program 0 (id=5492): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8000000000000000, 0x100000000, 0x7fffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000080)=0xffffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, 0x0) 699.358558ms ago: executing program 2 (id=5493): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) (async, rerun: 64) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 693.254213ms ago: executing program 1 (id=5494): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x1a, 0x0, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000001c000000180001800002006e657464657673696d30000000000000"], 0x2c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtaction={0x340, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x32c, 0x1, [@m_vlan={0x88, 0x1b, 0x0, 0x0, {{0x9}, {0x4}, {0x59, 0x6, "5894d099cfd9d46933c1f3eb4adf43d1b7e9c796660e4e22a96e6fda2537df66179dca9ddd30124bbaae5379dd97c99148d31bb75c96c34eb1992be738f22b5db7574a19ef9850d2251104253c64842a46c712c38c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x168, 0x10, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x10001, 0xffffffffffffffff, 0x6, 0x3}, @empty, @rand_addr=0x64010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xd, 0x5, 0xffff, 0x6}, @empty, @local, 0xff, 0x1}}]}, {0xee, 0x6, "4cf4104ba1a30da04da23471c76404ffceabd59e692502dca4a5966281ec347c4ceef45495e871fa2d31f4f00370616919bab087fa7216898ff5a24a3bb012a2fb823d784790890b69969af66b4c6b9aec419e7d292b6418cc5198f2d2c23881c9cb45e4ddca61eac050acdf0defb6fe39815907e99bcc1f19ab6d1ba0327b3ecaeebf774e2c2255b0c541d2e25d3060048194c86b8f9cac4df7d3faaa4128354f33dc0849456aa5377937bd341de5a60b8352e6041adcaeed1ba5ae02ca3d3420a567310dff5d023b9e84cd0ca9c39c92013270aaa9323ad9cdc3c77a11c90e9c3fd957d6b2efb364db"}, {0xc}, {0xc}}}, @m_mpls={0x138, 0x0, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfcd2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xd82e, 0x0, 0x7f, 0x80000000}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xb6, 0x6, "4a63dc42d52b67fcf549d8952dd17260420519666b97bb68205439b4ee0ed986e552a41ca7b8bce7ef80e7ee750e83fe734d84b15d40638b7a6dfad71bd24b41c164e9551656ff8417b233e4d6bfabdd1b6c4165a41cedde0e61d5774560f5caa0c975be84b0e3f2b359e22df816d5e1121ba758c71960abde189e11eec7f679c2e9a0299db7a506198635ce5663e5c0dd340e2d340eca1f6ace405386e161355d6fad8c24087a60894b7a53e0933926db2a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x340}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x20000090) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x20000090) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bf700004000000890000000800030062b180d1742c2fe2a4219b2e19e1146cf2458d6109c97a62dcec51dc9c5f1d597cae029ec113a8f1c0a07f70629de0127ade4dbd6aa2c3962bf9b74ec0a101a983163ac4", @ANYRES32=r7, @ANYBLOB="18001d801400008006000500ca00000005000c0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bf700004000000890000000800030062b180d1742c2fe2a4219b2e19e1146cf2458d6109c97a62dcec51dc9c5f1d597cae029ec113a8f1c0a07f70629de0127ade4dbd6aa2c3962bf9b74ec0a101a983163ac4", @ANYRES32=r7, @ANYBLOB="18001d801400008006000500ca00000005000c0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x4c, r8, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xbd73e04d0e45e8ea}, 0x8000) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x41}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r9, r10, 0x37, 0xce2d3afaee44ac6a, 0x4}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r9, r10, 0x37, 0xce2d3afaee44ac6a, 0x4}, 0x20) 692.985554ms ago: executing program 4 (id=5495): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000009e149798b0e23034"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003a00270700000000fcdb022503"], 0x18}, 0x1, 0x0, 0x0, 0x4048000}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 603.588442ms ago: executing program 0 (id=5496): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600050a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) 516.524723ms ago: executing program 4 (id=5497): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000f8de000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0}, 0x90) 478.450187ms ago: executing program 1 (id=5498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffede}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000600)=[{@none}, {@none}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0104000000000000000002000000600004805c0001800b00010065787468647200004c00028008000540000000e1080001400000000f080003400000005b08000440000000b605000200830000000800074000000009080001400000000108000340000000fe08000340000000540900010073797a300000000009"], 0xb4}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xc8004, &(0x7f0000000180)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r4, 0x88, 0x1, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000001c0)=0x30) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x24, r6, 0x509, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4044000) r9 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, 0x0, 0x0) close(r3) 418.783873ms ago: executing program 2 (id=5499): r0 = socket$inet6_sctp(0xa, 0x97af4792ba609e82, 0x84) r1 = socket(0x2, 0x1, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async, rerun: 32) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) 340.361434ms ago: executing program 0 (id=5500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffdf0000000003000000090000000000000000000002000000000000000000000006020000000000"], 0x0, 0x4a, 0x0, 0x2}, 0x28) (async, rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="15001e008b5a2bdc00009500"/36], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r2, 0x0, 0x24, &(0x7f0000000040)="9f0910", 0x3) (async) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000240)) (async, rerun: 32) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x4, @loopback, 0x8}, {0xa, 0x4e22, 0x101, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1}, 0x0, {[0x7, 0xa, 0x7fff, 0x7437de4d, 0x101, 0x3, 0x10001, 0x10000]}}, 0x5c) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="087ebad175884c434a8c33be6a59913ab8764187b8df76486bb398075e884de9c7180ef6c4557d7b0537d4a6e022ed1bd74724861a0f23aaf3dd497578c2a6569eba3aae9e13ef26daaceef4b955d86366c053617011f08350f1be1846a14343c76887837caf580500d28fc39223d5914de088d9def05b5b8e029a79c5c7e38620d0e79cd30562371040705d5f9ce4af32e241d91df307bd7849ad8547a9589e41fbea07c5250afb6cc7837fc5378233b689dec2ed2bc79ded8691a27d52ff7f14994a571188360e0aceac486d7631250902371e", @ANYRES16=r1, @ANYRES64=r1, @ANYRES64=0x0], 0xfc}}, 0x0) (async) poll(&(0x7f0000000080)=[{r1, 0x1000}], 0x1, 0x4) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r5, r5, 0x2f, 0x2024, 0x4}, 0x20) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async, rerun: 32) r6 = socket$inet(0x2, 0x4000000000000001, 0x800009) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='bic', 0x59) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a45b207f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23a2c6f868bca8b557e", 0xc4}, {&(0x7f0000000e40)="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", 0x13b}, {&(0x7f0000001d00)="e2e275e6df03f874026f99cb71504ba6a2d384a24bc787a5ec33677d1035199bada6710b39408937eaba5eb41341922ec892c294b642ccfeb15285298b4e3cfd4f89aa3b5d5dc3895369762b67a83e5baa5a7415979873d89ca48506d4eb53318e12a74d5e2376cf0e0592cd2e9d8530d86827bc7bb7c946c3f56fed143524f6c6f0bea47f7570df98c8d5387e1c17b3d5de4b0b643104ee77e352539908c48e1e69f3930c4ff647569cab9f143a83ddd01a9b9e253db2de43a2ede43b492e97913d8c8eeabccc2ba594368b632eeb1d97db1190627d995d4119616350dcdea3801eaeb508f23cc69d0be0a025aa48bc8d0f35e140e058a06caf480587860276e63b69eecdb5c95324d73e17865d8dccec9a8de62602a3dfd3e2f4fb17f6cc373de94d42d7c50c39ace02ff0736206e1dc44d33e6666f3a44e5e57581be22f131953a5ad3003e42f8637a7ac0324d47eddef3e4956d0352f5c8e95e6b1f373c9b0287fbe0c97bb55c97bd23e0b80f98a68d894962c78fefbe8e493a62036fe41976fc8162af176686f75829c4ff6f9b9f6656aa422a69fe0e4074536053e0ccd53ac8756c70aa1596d5f89e1520ef9c5cdc22281e3c2acd27658784f179d3779a52848d7d32c6491ce536e40c2c46d8d54835f5af9775d974642828cd009f944bbe93f2606d05918cbe44ba6df5815a95a1d7a7b7a2b97af60022d6b21259befef699936528355a888c4fcd2bd138a8b956b873e790f48cbee90db3517292068cdcb5b49c488a3e0b1dfc1e72c6708396fe33a006f1138850caa594448dca7975b6cab77670c897110a283ebf159be3580a97ba2f371346390bd30fda426aeb76052d51d4d4e45379ef5590637fc9a169c34cbcb85943ca88931f8e274241ba631dae3ced6b6afe9b64799a6e8b265c7d359037f59f7ef28baf49e0dea8bf44843a1a1c702e530f2495b32adde439ab627c7c11eee3ae33dfdf3665dcca53f88d7740f81a55992bbd70926a7ed9cce10e2cce4c38f9c7328873e418276e6bb337e1327decf6956f6601b7b01a8e8bcce2206f5a3580abed1fb1d38e4afa3e734134db187ca7173ed4c0ba142a6a4036c098b07bf740562984a76a8381cebaa1bc821fa71fa453bee5f241b3f640346b743df5bbec75ee6e5f9134211c40a0b89571e9843f3abd7d590ec4b7fee919835a7904eec58c0acf52158a80a71f3cfa570ea974857bdc5593aced5b75a31f29b51ee38fc1ff12e191992f171fd0334d7ffea77a29191cee888b9226c457b06f8eb04184a34ca5afe470da0b48917c67e1a790734", 0x3a4}], 0x4}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="f52781c56358772acd0e1f6c28ba6ce946333cde03aa4feb3688ebd72779447f4d466d1858a78551ac98fe80411bb52d1bd1a057491b2aceb93514409b9297084bee6abad490596ec7c64ef170ea3946490a72bd606f3b167f08f2e623dc40259983fb6415f99aa21cca171bc5dba059f0327d6b73f9dc73477d5f6a87c4602130377a233f31f7ff299ad138bd3b58d73a23f949bc3ee045f34fa94b346e", @ANYRES8=r3, @ANYRESOCT, @ANYBLOB="fe8afb58bea2360718d555668f3ce6aec8d632b9c25dd25cbaf5495b33bd7d98e880cf14b7fa230e7280ebf81508fed4f05dd457c76ee2349901c2f0f95bdf8fa19af59a2ee96ba5313397af339401fd976054a501fc3f84ccf2aabb8e75c3ee0967de08345d1849b8646317bfeb79717000d13ee3b4f880258910f23439b6cda797196c3065122c052953a265f9a8fe3eea2c68e66e8b9916ae9423c79ec1"], 0x34c}, 0x1, 0x0, 0x0, 0x4400}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) 338.554196ms ago: executing program 4 (id=5501): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) 336.988424ms ago: executing program 3 (id=5502): r0 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r7, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x30}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x91}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xfffe}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x4004810) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@rand_addr, 0x0}, &(0x7f0000000380)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x5}], &(0x7f0000000240)='GPL\x00', 0x0, 0xa0, &(0x7f0000000280)=""/160, 0x41100, 0x3, '\x00', r10, 0x0, r8, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x5, 0x101, 0x5}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000440)=[{0x5, 0x4, 0x4, 0x4}, {0x5, 0x4, 0x2}, {0x3, 0x1, 0xe, 0x9}, {0x1, 0x2, 0xf}, {0x0, 0x5, 0x5, 0xc}, {0x2, 0x1, 0x10, 0x4}, {0x3, 0x4, 0x2, 0xc}, {0x3, 0x5, 0xc, 0x2}]}, 0x94) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r11, 0x80047453, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x1a48, 0x4) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r13 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r13, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 281.446074ms ago: executing program 1 (id=5503): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_channels={0x1, 0x4, 0x4, 0x1ff, 0x3, 0x7fffffff, 0x80, 0x101, 0x8}}) getsockname$packet(r2, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 258.142718ms ago: executing program 0 (id=5504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) close(r0) bind$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 176.423041ms ago: executing program 3 (id=5505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800009e657cbf44c93b3b2a8e3a612fe7000000000000000893912b1ae1fa65e3c49b10878093ad877b8fa64600fc1572863fc9393b47b09375e87dfc977454ed62e2bb48eb511df0d809390dc14d627889bec3044ad78f8d5da647210af15c8f4bb887471683253138cca82a4aca707c4514841146d8165d15f1b023077ea5817568e26fadf669c4e4531fa3fc2bf6da1b36aa0fba2c2f4d28230aac813feb684a98c0a1ad57b2171b63f16634cefafefa706cc2e0bad33eb5ba1734de142b6fabdb7fec17566c915f3632cc5a67fcc9d51218e8704eb0166f6a27bf30c9512db5"], &(0x7f0000000580)='GPL\x00'}, 0x90) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x800) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000000c0)=0x2) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=@delchain={0x24, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfffb}, {}, {0xb, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x40) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 175.763412ms ago: executing program 2 (id=5506): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x0, 0x1, 0xe1, 0xfffffffc}, {0xf, 0x7, 0x6, 0x65cac013}, {0x3, 0x6, 0x4, 0x8}, {0x9b58, 0xf8, 0x0, 0x5}, {0x2, 0x2, 0x44, 0xcdbf}, {0x1, 0x81, 0xf1, 0x4}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000001c0)) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='x\x00\x00'], 0x0) 157.104758ms ago: executing program 4 (id=5507): r0 = socket(0x2b, 0x3, 0x8001) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8d}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x60000}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @private0, 0x7a8}}}}]}, @TIPC_NLA_LINK={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44845}, 0x20040020) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x4, 0x5, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote, {[@noop, @timestamp_addr={0x44, 0x3c, 0x78, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@loopback, 0x4}, {@multicast1, 0x2}, {@local, 0x401}, {@rand_addr=0x64010102, 0x300000}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@loopback, 0xd}]}, @end, @timestamp_addr={0x44, 0xc, 0xf0, 0x1, 0x6, [{@rand_addr=0x64010101, 0x7}]}, @ssrr={0x89, 0xf, 0x5, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}}) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="3ae523549e5c3e4a0524ecb1d0f8dbd14b44a3936221c472bf9dccf6ead5b176b147f514b46a016861de3b38c37d607f9e91b232bfab145b1e43e4cb027ed353c347b611e4a503de771bee996e282f983b6ca6e02ec182b935ae315855dc7221f44d13b9add4877b16352a3a00c1b4333d60e57ead64319e2728405544510685a3294698efd4fc294521b217e592f9c932edfb7ad9ba2355b3051d38eb2379d26d7da357f448ba659f3cbe6e2d8b4cc5bb27fd56d41c9806314c3fb5229ed3124f8cdeef87525defe2ae5b761f664e5a1dc0dfb7f79ad9808eaf657c7972397db413b8ac2c196e42f49acb97cd1629d64d02", 0xf2}, {&(0x7f0000000340)="78bf488005699832074c0be41d136cd825abd8722806718bf5d0e74f84725597728cd0a0343c018ce2a91bd6bcc89157fa36a33426e34eb3a5f78dd4db0c4a75d36fe032780d8102b6a5b03754fd43881ed0559db858fd21d133287870e495b3c8aba09f169d1826514fcaf263f1f0d22c36fb7679b40532803ad2f6bd8df94b9b7b8a0ff8c644a28b404fe154e3ee", 0x8f}, {&(0x7f0000000400)="dd3d0f285a24a6260ae4585963a100da142917a5de9681b88e34", 0x1a}, {&(0x7f0000000440)="66aa9ba883d534908b2b91e311", 0xd}, {&(0x7f0000000480)="2985143d5f5417ac39be83a88746dd5f5ed70e837fc27b411cb57082e0d9d75534d306376942b0f91f06670c60c2a16a1cbd10671858ec94231226447b9b78ee20b182b98d6c9843879e17f4e7103c7d95fac73ae6500e5998eb74d4fca92af6ee1a166007d29c6c346a9f4744b7058e346040b633960f6ff6c124a6670ff5452c133e04472522efd84cbd407d0f56c91777e8049160bf7296acd7ab519915db9e894e56668f2a4ce8c3c36d0d9cc583f2f212b0c58bc76d1001229a0e95f75311969ef69942709e", 0xc8}, {&(0x7f0000000580)="ec1aebd242634d04dd684b3089c2030bdfe09487a39a5263382122da2ad8f7fae9529b693d08a4df513017b11306c619f3fadb6436cfe964d156b42e8a6cfd4d853125fa059cb1012b738a8f186deef2c0086dc48bc48f7636acbf17c093223a14ac2772c72a31fc4c581c59968c19d099f95c3d7a254013c46d3691d8b79ce593c21ef36c36da1621f64bdac6ced364d31be46710992e00f987250630f86bfdc360db98b2484b09f80e6348bcd382c4bd08246efd280ee0cf65981289e1303ed9b91fbb215e9b55339f12bcf00602230a43247ae541d7bf6909fbf9f279e2b8bbc96506ed004a61c07f6c01b541b8aa12f280f15cf57f", 0xf7}, {&(0x7f0000000680)="028d534fba1df957d7264e4e483ad21c7d912444d371cbc827364716d22d365576cc324067b34333ded70fc16ba701f17920fcfc0b1f725a36301d06b3447e68cd30d76456900b57ebcb366305e5da4a0bba600aa7d04443bf1e46a1183b102339cf32a4ae3dd415ec5c0293de6db446d4193b67b92d1e6c058a13c804462564fdfbf01744a7041d0269a425c0e89699a1c61c04487ff6d41ae61cf24b1876760df71485517bec19f944c6e8a8b280bb036723e569eedd9d3830cd854f82733bbf5d68c23a8f2580a98f8bbb3976f928522d369c0775b975320edbd2e155e29f3755438e1d", 0xe5}, {&(0x7f0000000780)}], 0x8, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x38000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7e}}], 0x80}}], 0x1, 0x8000) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000a00)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, r4, 0x110, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x14}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000d00)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000d40)={{{@in=@remote, @in=@multicast2, 0x4e22, 0x0, 0x4e22, 0x8, 0xa, 0x20, 0x0, 0x4, r2, r5}, {0x6, 0x5, 0x9, 0x8001, 0xfffffffffffffffa, 0x8000, 0x9, 0x8000000000000000}, {0x9, 0x8000000000000000, 0x7fffffff, 0x1c}, 0x2, 0x6e6bbe, 0x1, 0x1, 0x1, 0x1}, {{@in=@broadcast, 0x4d6, 0x33}, 0xa, @in6=@mcast2, 0x3504, 0x4, 0x0, 0x3, 0x6be, 0x0, 0x1}}, 0xe8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000e40)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000e80)={'ip6_vti0\x00', 0x0, 0x2b, 0x10, 0x2, 0x0, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x700, 0x8, 0x8, 0x6}}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000f40)={@broadcast, @dev={0xac, 0x14, 0x14, 0x26}, r6}, 0xc) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000fc0)=0x200, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x48005}, 0x8000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001140)={0x0, 0x1}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000011c0)={r9, 0x1ff, 0x20, 0x200, 0x10000}, &(0x7f0000001200)=0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001240)={0x6, 'veth0_to_bridge\x00', {0x7}, 0x7}) listen(r3, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'syztnl2\x00', r2, 0x4, 0x8, 0x85, 0x6, 0x22, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, 0x700, 0x8, 0xffffffff, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001400)={'syztnl2\x00', &(0x7f0000001380)={'ip6_vti0\x00', r2, 0x29, 0x9e, 0x9, 0x1780, 0x40, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8, 0x7, 0xd}}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001640)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f0000001440)={0x18c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xba, 0x5, "ce4a26b91b8b8042dfa494c1d7e3e8bf839e2747e909d20587a4453393e30a0908380724eec4797322183faa5448c8d484c8b042eadfa1a13eebb83ccd13dda767433f6d11aab6b2323a942c29e33ee6c31642731af1b99114e1c5637d03c95b2e67bbd025aeb1fe9e53ba7c3353f51f6fafdb34e58d009c6d0ae790a89327c33f30fc748b9bfdbb24b4d72cb347e418399186de0d6f608731c83ba45f2fa0dba6bc3f1e209c2ef6d6389464c4e3acc6cab9aba526e3"}]}, @ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000016c0)=@o_path={&(0x7f0000001680)='./file0\x00', 0x0, 0x10, r7}, 0x18) connect$inet(r0, &(0x7f0000001700)={0x2, 0x1, @loopback}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000001740), &(0x7f0000001780)=0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000017c0), &(0x7f0000001800)=0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001840)={r10, @in6={{0xa, 0x4e23, 0x5, @private2, 0x2}}}, 0x84) 94.874973ms ago: executing program 0 (id=5508): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}, 0x6e6bb2}, [@migrate={0xe8, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}]}]}, 0x138}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 0s ago: executing program 2 (id=5509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="4400000010000100400c00"/20, @ANYRES32=0x0, @ANYBLOB="00000200000200002400128009000100626f6e64000000001400028008000300020000000800050002000000"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.1.3657'. [ 469.192718][T19180] netlink: 'syz.2.3667': attribute type 1 has an invalid length. [ 469.196081][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 469.271075][T19170] Bluetooth: MGMT ver 1.23 [ 469.389411][T19185] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 469.402425][T19185] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 469.412938][T19185] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 469.512269][T19188] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 469.561609][T19188] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 470.056981][T19224] netlink: 'syz.2.3677': attribute type 33 has an invalid length. [ 470.497953][T19255] netlink: 'syz.2.3690': attribute type 3 has an invalid length. [ 470.506173][T19251] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 470.750545][T19276] netlink: 'syz.0.3697': attribute type 2 has an invalid length. [ 470.903882][T19286] batman_adv: batadv0: Adding interface: dummy0 [ 470.923177][T19286] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.977074][T19286] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 470.994036][T19291] __nla_validate_parse: 8 callbacks suppressed [ 470.994061][T19291] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3702'. [ 471.015019][T19289] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3701'. [ 471.030808][T19291] xt_ecn: cannot match TCP bits for non-tcp packets [ 471.350454][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3707'. [ 471.585928][T19323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3712'. [ 471.597658][T19328] syzkaller0: entered promiscuous mode [ 471.603141][T19328] syzkaller0: entered allmulticast mode [ 471.678876][T19330] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.686496][T19330] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.736368][T19335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.811384][T19340] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3719'. [ 472.109657][T19356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3724'. [ 472.168528][T19363] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3727'. [ 472.426655][T19369] syzkaller0: entered promiscuous mode [ 472.448059][T19369] syzkaller0: entered allmulticast mode [ 472.489666][T19369] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3729'. [ 472.503089][T19381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.559203][T19384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3736'. [ 472.678571][T19390] syzkaller0: entered promiscuous mode [ 472.684077][T19390] syzkaller0: entered allmulticast mode [ 472.750068][T19394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3739'. [ 472.873256][T19398] ipt_ECN: cannot use operation on non-tcp rule [ 473.158507][T19421] pim6reg1: entered promiscuous mode [ 473.165206][T19421] pim6reg1: entered allmulticast mode [ 473.210696][T19425] bond0: option all_slaves_active: invalid value (222) [ 473.220619][T19425] bond0 (unregistering): Released all slaves [ 473.865135][T19466] netlink: 'syz.4.3763': attribute type 2 has an invalid length. [ 473.883401][T19466] netlink: 'syz.4.3763': attribute type 1 has an invalid length. [ 473.893622][T19470] sock: sock_set_timeout: `syz.1.3765' (pid 19470) tries to set negative timeout [ 474.242733][T19488] tipc: New replicast peer: 255.255.255.255 [ 474.251200][T19488] tipc: Enabled bearer , priority 6 [ 474.431517][ T5198] udevd[5198]: worker [15905] terminated by signal 33 (Unknown signal 33) [ 474.459500][ T5198] udevd[5198]: worker [15905] failed while handling '/devices/virtual/block/loop0' [ 474.942672][ T7054] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.964743][ T7054] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.984854][ T7054] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.012452][ T7054] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.060024][T19549] netlink: 'syz.3.3793': attribute type 5 has an invalid length. [ 475.093586][T19549] geneve3: entered promiscuous mode [ 475.099122][T19549] geneve3: entered allmulticast mode [ 475.106097][ T7023] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 475.140751][ T7023] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 475.161014][ T7023] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 475.182444][ T7023] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 475.368202][T13259] tipc: Node number set to 2339565827 [ 475.614513][T19593] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 475.656028][T19597] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 475.656336][T19594] syzkaller0: entered promiscuous mode [ 475.673184][T19594] syzkaller0: entered allmulticast mode [ 475.677085][T19598] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 475.698765][T19598] netlink: 'syz.4.3805': attribute type 2 has an invalid length. [ 475.719320][T19598] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 475.727520][T19598] netlink: 'syz.4.3805': attribute type 2 has an invalid length. [ 476.098428][T19627] netlink: 'syz.0.3816': attribute type 1 has an invalid length. [ 476.184691][T19632] __nla_validate_parse: 24 callbacks suppressed [ 476.184716][T19632] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3819'. [ 476.254202][T19639] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3821'. [ 476.269486][T19640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3821'. [ 476.376633][T19646] netlink: 'syz.0.3824': attribute type 11 has an invalid length. [ 476.390563][T19647] netlink: 'syz.0.3824': attribute type 11 has an invalid length. [ 476.399267][T19646] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3824'. [ 476.410496][T19646] NCSI netlink: No device for ifindex 813332851 [ 476.535788][T19653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3826'. [ 476.642730][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3828'. [ 476.688874][T19663] bond2: option coupled_control: invalid value (16) [ 476.695949][T19653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3826'. [ 476.708233][T19663] bond2 (unregistering): Released all slaves [ 476.879244][T19653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3826'. [ 476.899098][T19675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3831'. [ 476.933369][T19683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3832'. [ 477.343277][T19701] pim6reg1: entered promiscuous mode [ 477.357199][T19701] pim6reg1: entered allmulticast mode [ 477.463145][T19713] syzkaller1: entered promiscuous mode [ 477.480412][T19713] syzkaller1: entered allmulticast mode [ 477.717846][ T5834] Bluetooth: hci1: link tx timeout [ 477.723984][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 478.037013][T19748] IPv6: sit2: Disabled Multicast RS [ 478.051500][T19748] sit2: entered allmulticast mode [ 478.285698][T19761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.536285][T19766] can: request_module (can-proto-0) failed. [ 478.756342][T19787] syz_tun: entered allmulticast mode [ 478.900670][T19792] syzkaller0: entered promiscuous mode [ 478.906294][T19792] syzkaller0: entered allmulticast mode [ 478.947796][T19795] ip6gre1: entered promiscuous mode [ 478.970718][T19802] validate_nla: 5 callbacks suppressed [ 478.970736][T19802] netlink: 'syz.1.3869': attribute type 23 has an invalid length. [ 478.977208][T19795] ip6gre1: entered allmulticast mode [ 479.250615][T19812] netlink: 'syz.4.3874': attribute type 83 has an invalid length. [ 479.281451][T19812] Cannot find add_set index 2 as target [ 479.498080][T19836] netlink: 'syz.2.3879': attribute type 21 has an invalid length. [ 479.527425][T19837] netlink: 'syz.2.3879': attribute type 21 has an invalid length. [ 479.537248][T19837] netlink: 'syz.2.3879': attribute type 4 has an invalid length. [ 479.555451][T19837] netlink: 'syz.2.3879': attribute type 5 has an invalid length. [ 479.564444][T19836] netlink: 'syz.2.3879': attribute type 4 has an invalid length. [ 479.587354][T19836] netlink: 'syz.2.3879': attribute type 5 has an invalid length. [ 479.828120][ T5841] Bluetooth: hci1: command 0x0405 tx timeout [ 480.201588][ T7041] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.229823][ T7041] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.316453][ T7041] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.327224][ T7041] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.372942][T19896] : renamed from hsr0 (while UP) [ 480.456866][T19902] xt_hashlimit: size too large, truncated to 1048576 [ 480.467633][T19896] xt_hashlimit: size too large, truncated to 1048576 [ 480.649375][T19912] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 480.910031][T19928] veth0: entered promiscuous mode [ 480.941453][ T56] block nbd3: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 240 seconds [ 480.952405][ T56] block nbd3: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 240 seconds [ 480.964040][ T56] block nbd3: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 240 seconds [ 480.976410][ T56] block nbd3: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 240 seconds [ 480.998356][T19927] veth0: left promiscuous mode [ 481.433554][T19960] tipc: Can't bind to reserved service type 2 [ 481.613524][T19971] __nla_validate_parse: 22 callbacks suppressed [ 481.613541][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 481.645364][T19969] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 481.650842][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 482.252465][T20022] netlink: 'syz.3.3928': attribute type 1 has an invalid length. [ 482.364274][T20022] netlink: 'syz.3.3928': attribute type 1 has an invalid length. [ 482.449556][T20052] netlink: 'syz.0.3931': attribute type 11 has an invalid length. [ 482.630238][T20077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3932'. [ 482.669820][T20083] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3933'. [ 482.786061][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3933'. [ 482.913082][T20081] delete_channel: no stack [ 482.923687][T20104] sctp: [Deprecated]: syz.2.3937 (pid 20104) Use of int in max_burst socket option deprecated. [ 482.923687][T20104] Use struct sctp_assoc_value instead [ 483.106218][T20022] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 483.202867][T20125] bond3: option arp_missed_max: invalid value (0) [ 483.219248][T20125] bond3: option arp_missed_max: allowed values 1 - 255 [ 483.230418][T20125] bond3 (unregistering): Released all slaves [ 483.259401][T20127] syzkaller0: entered promiscuous mode [ 483.264997][T20127] syzkaller0: entered allmulticast mode [ 483.345658][T20138] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3946'. [ 483.346258][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 483.398017][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3946'. [ 483.406965][T20138] bridge_slave_1: left allmulticast mode [ 483.412982][T20138] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.426259][T20138] bridge_slave_0: left allmulticast mode [ 483.435739][T20138] bridge_slave_0: left promiscuous mode [ 483.443309][T20138] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.672723][T20159] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3952'. [ 483.698645][T20159] bond6 (unregistering): Released all slaves [ 484.060160][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3956'. [ 484.472077][T20154] validate_nla: 14 callbacks suppressed [ 484.472097][T20154] netlink: 'syz.1.3950': attribute type 1 has an invalid length. [ 484.640209][T20192] syzkaller0: entered promiscuous mode [ 484.645817][T20192] syzkaller0: entered allmulticast mode [ 484.811379][T20204] netlink: 'syz.2.3966': attribute type 1 has an invalid length. [ 485.106046][T20196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.415095][T20239] syzkaller0: entered promiscuous mode [ 485.426579][T20239] syzkaller0: entered allmulticast mode [ 485.450934][T20235] "syz.0.3976" (20235) uses obsolete ecb(arc4) skcipher [ 485.614025][T20248] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 485.654776][T20248] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 485.822046][T20261] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 485.902939][T20268] netlink: 'syz.3.3988': attribute type 2 has an invalid length. [ 485.987034][T20272] Cannot find add_set index 1 as target [ 486.039411][T20276] syzkaller0: entered promiscuous mode [ 486.045298][T20276] syzkaller0: entered allmulticast mode [ 486.475549][T20291] syzkaller0: entered promiscuous mode [ 486.484016][T20291] syzkaller0: entered allmulticast mode [ 486.692600][T20309] netlink: 'syz.4.4002': attribute type 39 has an invalid length. [ 486.738999][T16793] IPVS: starting estimator thread 0... [ 486.827264][T20320] IPVS: using max 35 ests per chain, 84000 per kthread [ 486.859435][T20324] syzkaller0: entered promiscuous mode [ 486.865104][T20324] syzkaller0: entered allmulticast mode [ 486.934187][T20325] __nla_validate_parse: 7 callbacks suppressed [ 486.934204][T20325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'. [ 486.955838][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'. [ 487.046162][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4007'. [ 488.151362][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 488.338286][T20344] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 488.471187][T20350] syzkaller0: refused to change device tx_queue_len [ 488.649102][T20367] openvswitch: netlink: Flow actions attr not present in new flow. [ 488.660592][T20366] ipt_ECN: cannot use operation on non-tcp rule [ 488.830457][T20377] netlink: 'syz.2.4020': attribute type 1 has an invalid length. [ 488.907767][T20388] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4024'. [ 488.920523][T20386] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 488.951688][T20386] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 488.963909][T20386] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 489.043499][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'. [ 489.044248][T20079] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 489.060288][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4022'. [ 489.980414][T20418] syzkaller0: entered promiscuous mode [ 489.986143][T20418] syzkaller0: entered allmulticast mode [ 490.031316][T20417] tipc: Enabled bearer , priority 0 [ 490.052424][T20414] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4031'. [ 490.081124][T20421] syzkaller0: entered promiscuous mode [ 490.088484][T20421] syzkaller0: entered allmulticast mode [ 490.112767][T20427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4034'. [ 490.161398][T20417] tipc: Resetting bearer [ 490.176985][T20425] tipc: Enabling of bearer rejected, failed to enable media [ 490.188366][T20425] syzkaller0: entered promiscuous mode [ 490.193851][T20425] syzkaller0: entered allmulticast mode [ 490.209224][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4033'. [ 490.244908][T20415] tipc: Resetting bearer [ 490.281821][T20415] tipc: Disabling bearer [ 490.297071][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4036'. [ 490.312564][T20435] netlink: 'syz.3.4035': attribute type 3 has an invalid length. [ 492.388172][T20496] team0: Device gtp0 is of different type [ 492.405857][T20499] netlink: 'syz.4.4056': attribute type 64 has an invalid length. [ 492.414129][T20499] __nla_validate_parse: 2 callbacks suppressed [ 492.414143][T20499] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4056'. [ 492.444111][T20500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.499706][T20506] team0: Device gtp0 is of different type [ 492.785731][T20524] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4063'. [ 492.814585][T20527] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4064'. [ 492.859109][T20532] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4066'. [ 492.882320][T20533] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4066'. [ 493.310872][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4076'. [ 493.330802][T16793] IPVS: starting estimator thread 0... [ 493.417487][T20574] IPVS: using max 33 ests per chain, 79200 per kthread [ 493.518589][T20589] 8021q: VLANs not supported on gre0 [ 493.701622][T20600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4085'. [ 493.819154][T20606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4089'. [ 493.995660][T20622] IPVS: length: 239 != 24 [ 494.155828][T20627] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 494.171001][T20627] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 494.180930][T20627] gretap1: entered promiscuous mode [ 494.186279][T20627] gretap1: entered allmulticast mode [ 494.231513][T20629] netlink: 'syz.1.4096': attribute type 83 has an invalid length. [ 494.254033][T20629] tipc: Enabled bearer , priority 0 [ 494.302148][T20629] syzkaller0: entered promiscuous mode [ 494.308156][T20629] syzkaller0: entered allmulticast mode [ 494.343860][T20629] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 494.371054][T20629] tipc: Resetting bearer [ 494.387487][T20628] tipc: Resetting bearer [ 494.432513][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4102'. [ 494.449090][T20628] tipc: Disabling bearer [ 494.481222][T20652] Cannot find del_set index 0 as target [ 494.573276][T20656] netlink: 'syz.2.4105': attribute type 1 has an invalid length. [ 494.602574][T20658] netlink: 'syz.1.4106': attribute type 30 has an invalid length. [ 494.663747][T20658] bond0: option arp_missed_max: invalid value (0) [ 494.671139][T20658] bond0: option arp_missed_max: allowed values 1 - 255 [ 494.680202][T20658] bond0 (unregistering): Released all slaves [ 494.724091][T20662] gretap1: entered promiscuous mode [ 494.732689][T20662] bond4: (slave gretap1): making interface the new active one [ 494.741791][T20662] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 494.761198][T20656] bond4: entered promiscuous mode [ 494.766621][T20656] macvlan2: entered promiscuous mode [ 494.773751][T20656] macvlan2: entered allmulticast mode [ 494.779733][T20656] bond4: entered allmulticast mode [ 494.785122][T20656] gretap1: entered allmulticast mode [ 494.794378][T20656] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 494.846559][T20656] bond4: left promiscuous mode [ 495.049412][T20680] netlink: 'syz.4.4112': attribute type 12 has an invalid length. [ 495.057719][T20680] netlink: 'syz.4.4112': attribute type 29 has an invalid length. [ 495.066080][T20680] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4112'. [ 495.080796][T20680] netlink: 'syz.4.4112': attribute type 21 has an invalid length. [ 495.099047][T20680] netlink: 'syz.4.4112': attribute type 5 has an invalid length. [ 495.162491][T20685] netlink: 'syz.2.4113': attribute type 10 has an invalid length. [ 495.199145][T20685] team0: Port device geneve0 added [ 495.222232][T20079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.246055][T20079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.255709][T20079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.276076][T20079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.472322][T20711] netlink: 'syz.4.4122': attribute type 10 has an invalid length. [ 495.543046][T20716] netlink: 'syz.4.4124': attribute type 1 has an invalid length. [ 495.597212][T20724] FAULT_INJECTION: forcing a failure. [ 495.597212][T20724] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 495.613828][T20724] CPU: 1 UID: 0 PID: 20724 Comm: syz.3.4125 Not tainted syzkaller #0 PREEMPT(full) [ 495.613851][T20724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 495.613868][T20724] Call Trace: [ 495.613875][T20724] [ 495.613883][T20724] dump_stack_lvl+0x189/0x250 [ 495.613910][T20724] ? __pfx____ratelimit+0x10/0x10 [ 495.613933][T20724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.613954][T20724] ? __pfx__printk+0x10/0x10 [ 495.613970][T20724] ? __might_fault+0xb0/0x130 [ 495.614003][T20724] should_fail_ex+0x414/0x560 [ 495.614032][T20724] _copy_from_user+0x2d/0xb0 [ 495.614054][T20724] do_ipv6_setsockopt+0x23e/0x2eb0 [ 495.614092][T20724] ? get_pid_task+0x20/0x1f0 [ 495.614115][T20724] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 495.614142][T20724] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 495.614176][T20724] ? vfs_write+0x956/0xb30 [ 495.614202][T20724] ? __pfx___might_resched+0x10/0x10 [ 495.614228][T20724] ? __lock_acquire+0xab9/0xd20 [ 495.614251][T20724] ? aa_sk_perm+0x81e/0x950 [ 495.614274][T20724] ? __pfx_aa_sk_perm+0x10/0x10 [ 495.614291][T20724] ? aa_sock_opt_perm+0xff/0x1b0 [ 495.614311][T20724] ipv6_setsockopt+0x59/0x170 [ 495.614323][T20724] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 495.614343][T20724] do_sock_setsockopt+0x17c/0x1b0 [ 495.614365][T20724] __x64_sys_setsockopt+0x13f/0x1b0 [ 495.614387][T20724] do_syscall_64+0xfa/0xfa0 [ 495.614408][T20724] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.614430][T20724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.614447][T20724] ? clear_bhb_loop+0x60/0xb0 [ 495.614468][T20724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.614489][T20724] RIP: 0033:0x7f8ef738f6c9 [ 495.614505][T20724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.614520][T20724] RSP: 002b:00007f8ef8161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 495.614537][T20724] RAX: ffffffffffffffda RBX: 00007f8ef75e5fa0 RCX: 00007f8ef738f6c9 [ 495.614549][T20724] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 495.614559][T20724] RBP: 00007f8ef8161090 R08: 0000000000000410 R09: 0000000000000000 [ 495.614570][T20724] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 495.614581][T20724] R13: 00007f8ef75e6038 R14: 00007f8ef75e5fa0 R15: 00007ffc190f1648 [ 495.614608][T20724] [ 496.404249][T20766] FAULT_INJECTION: forcing a failure. [ 496.404249][T20766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.424597][T20766] CPU: 1 UID: 0 PID: 20766 Comm: syz.1.4139 Not tainted syzkaller #0 PREEMPT(full) [ 496.424620][T20766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.424629][T20766] Call Trace: [ 496.424636][T20766] [ 496.424644][T20766] dump_stack_lvl+0x189/0x250 [ 496.424671][T20766] ? __pfx____ratelimit+0x10/0x10 [ 496.424693][T20766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.424714][T20766] ? __pfx__printk+0x10/0x10 [ 496.424733][T20766] ? __might_fault+0xb0/0x130 [ 496.424766][T20766] should_fail_ex+0x414/0x560 [ 496.424795][T20766] _copy_from_user+0x2d/0xb0 [ 496.424818][T20766] do_ip6t_set_ctl+0x69f/0xce0 [ 496.424846][T20766] ? rcu_is_watching+0x15/0xb0 [ 496.424866][T20766] ? trace_contention_end+0x39/0x120 [ 496.424886][T20766] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 496.424940][T20766] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.424975][T20766] ? __pfx_aa_sk_perm+0x10/0x10 [ 496.425002][T20766] nf_setsockopt+0x26f/0x290 [ 496.425026][T20766] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 496.425051][T20766] do_sock_setsockopt+0x17c/0x1b0 [ 496.425074][T20766] __x64_sys_setsockopt+0x13f/0x1b0 [ 496.425098][T20766] do_syscall_64+0xfa/0xfa0 [ 496.425120][T20766] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.425141][T20766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.425158][T20766] ? clear_bhb_loop+0x60/0xb0 [ 496.425179][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.425196][T20766] RIP: 0033:0x7f7bf1d8f6c9 [ 496.425211][T20766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.425226][T20766] RSP: 002b:00007f7bf2c46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 496.425245][T20766] RAX: ffffffffffffffda RBX: 00007f7bf1fe5fa0 RCX: 00007f7bf1d8f6c9 [ 496.425258][T20766] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 496.425268][T20766] RBP: 00007f7bf2c46090 R08: 0000000000000410 R09: 0000000000000000 [ 496.425279][T20766] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 496.425291][T20766] R13: 00007f7bf1fe6038 R14: 00007f7bf1fe5fa0 R15: 00007ffdff504378 [ 496.425321][T20766] [ 496.853815][T20786] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 497.039465][T20791] tipc: Enabling of bearer rejected, failed to enable media [ 497.125141][T20805] FAULT_INJECTION: forcing a failure. [ 497.125141][T20805] name failslab, interval 1, probability 0, space 0, times 0 [ 497.154689][T20805] CPU: 1 UID: 0 PID: 20805 Comm: syz.4.4152 Not tainted syzkaller #0 PREEMPT(full) [ 497.154715][T20805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.154725][T20805] Call Trace: [ 497.154732][T20805] [ 497.154740][T20805] dump_stack_lvl+0x189/0x250 [ 497.154768][T20805] ? __pfx____ratelimit+0x10/0x10 [ 497.154791][T20805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.154813][T20805] ? __pfx__printk+0x10/0x10 [ 497.154836][T20805] ? __pfx___might_resched+0x10/0x10 [ 497.154855][T20805] ? fs_reclaim_acquire+0x7d/0x100 [ 497.154884][T20805] should_fail_ex+0x414/0x560 [ 497.154915][T20805] should_failslab+0xa8/0x100 [ 497.154935][T20805] __kvmalloc_node_noprof+0x158/0x910 [ 497.154960][T20805] ? xt_alloc_table_info+0x40/0xb0 [ 497.154989][T20805] xt_alloc_table_info+0x40/0xb0 [ 497.155011][T20805] do_ip6t_set_ctl+0x88a/0xce0 [ 497.155039][T20805] ? rcu_is_watching+0x15/0xb0 [ 497.155058][T20805] ? trace_contention_end+0x39/0x120 [ 497.155085][T20805] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 497.155131][T20805] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.155165][T20805] ? __pfx_aa_sk_perm+0x10/0x10 [ 497.155193][T20805] nf_setsockopt+0x26f/0x290 [ 497.155215][T20805] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 497.155240][T20805] do_sock_setsockopt+0x17c/0x1b0 [ 497.155263][T20805] __x64_sys_setsockopt+0x13f/0x1b0 [ 497.155285][T20805] do_syscall_64+0xfa/0xfa0 [ 497.155306][T20805] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.155328][T20805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.155344][T20805] ? clear_bhb_loop+0x60/0xb0 [ 497.155366][T20805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.155382][T20805] RIP: 0033:0x7f82b4d8f6c9 [ 497.155397][T20805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.155411][T20805] RSP: 002b:00007f82b5c29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 497.155430][T20805] RAX: ffffffffffffffda RBX: 00007f82b4fe5fa0 RCX: 00007f82b4d8f6c9 [ 497.155443][T20805] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 497.155453][T20805] RBP: 00007f82b5c29090 R08: 0000000000000410 R09: 0000000000000000 [ 497.155464][T20805] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 497.155474][T20805] R13: 00007f82b4fe6038 R14: 00007f82b4fe5fa0 R15: 00007fffc7dbd518 [ 497.155506][T20805] [ 497.451507][T20811] __nla_validate_parse: 7 callbacks suppressed [ 497.451524][T20811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4155'. [ 497.479400][T20816] netlink: 'syz.0.4153': attribute type 12 has an invalid length. [ 497.489813][T20816] netlink: 'syz.0.4153': attribute type 11 has an invalid length. [ 497.517305][T20819] netlink: 'syz.3.4157': attribute type 29 has an invalid length. [ 497.536464][T20819] netlink: 'syz.3.4157': attribute type 29 has an invalid length. [ 497.570318][T20823] netlink: 'syz.0.4158': attribute type 8 has an invalid length. [ 497.726928][T20831] tipc: Enabling of bearer rejected, failed to enable media [ 497.773731][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4160'. [ 497.872381][T20842] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 497.885282][T20844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4165'. [ 498.000482][T20848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4168'. [ 498.067781][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'. [ 498.098792][T20859] FAULT_INJECTION: forcing a failure. [ 498.098792][T20859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.115219][T20859] CPU: 0 UID: 0 PID: 20859 Comm: syz.4.4171 Not tainted syzkaller #0 PREEMPT(full) [ 498.115240][T20859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.115250][T20859] Call Trace: [ 498.115257][T20859] [ 498.115264][T20859] dump_stack_lvl+0x189/0x250 [ 498.115290][T20859] ? __pfx____ratelimit+0x10/0x10 [ 498.115312][T20859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.115331][T20859] ? __pfx__printk+0x10/0x10 [ 498.115360][T20859] should_fail_ex+0x414/0x560 [ 498.115388][T20859] _copy_from_user+0x2d/0xb0 [ 498.115410][T20859] copy_from_sockptr_offset+0x66/0xa0 [ 498.115435][T20859] do_ip6t_set_ctl+0x8b7/0xce0 [ 498.115459][T20859] ? rcu_is_watching+0x15/0xb0 [ 498.115479][T20859] ? trace_contention_end+0x39/0x120 [ 498.115496][T20859] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 498.115537][T20859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.115571][T20859] ? __pfx_aa_sk_perm+0x10/0x10 [ 498.115597][T20859] nf_setsockopt+0x26f/0x290 [ 498.115620][T20859] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 498.115645][T20859] do_sock_setsockopt+0x17c/0x1b0 [ 498.115667][T20859] __x64_sys_setsockopt+0x13f/0x1b0 [ 498.115689][T20859] do_syscall_64+0xfa/0xfa0 [ 498.115710][T20859] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.115731][T20859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.115746][T20859] ? clear_bhb_loop+0x60/0xb0 [ 498.115764][T20859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.115780][T20859] RIP: 0033:0x7f82b4d8f6c9 [ 498.115795][T20859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.115810][T20859] RSP: 002b:00007f82b5c29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 498.115828][T20859] RAX: ffffffffffffffda RBX: 00007f82b4fe5fa0 RCX: 00007f82b4d8f6c9 [ 498.115841][T20859] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 498.115851][T20859] RBP: 00007f82b5c29090 R08: 0000000000000410 R09: 0000000000000000 [ 498.115861][T20859] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 498.115872][T20859] R13: 00007f82b4fe6038 R14: 00007f82b4fe5fa0 R15: 00007fffc7dbd518 [ 498.115902][T20859] [ 498.170178][T20867] sctp: [Deprecated]: syz.0.4172 (pid 20867) Use of int in maxseg socket option. [ 498.170178][T20867] Use struct sctp_assoc_value instead [ 498.297833][T20862] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4173'. [ 498.363290][T20862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4173'. [ 498.470305][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4177'. [ 498.552083][T20887] netlink: 'syz.4.4179': attribute type 9 has an invalid length. [ 498.594374][T20887] netlink: 'syz.4.4179': attribute type 11 has an invalid length. [ 498.610565][T20887] netlink: 'syz.4.4179': attribute type 12 has an invalid length. [ 498.680394][T20887] netlink: 210060 bytes leftover after parsing attributes in process `syz.4.4179'. [ 498.692400][T20887] openvswitch: netlink: Message has 4 unknown bytes. [ 498.760957][T20902] syzkaller0: entered promiscuous mode [ 498.776724][T20902] syzkaller0: entered allmulticast mode [ 498.874849][T20911] FAULT_INJECTION: forcing a failure. [ 498.874849][T20911] name failslab, interval 1, probability 0, space 0, times 0 [ 498.889106][T20911] CPU: 1 UID: 0 PID: 20911 Comm: syz.2.4186 Not tainted syzkaller #0 PREEMPT(full) [ 498.889128][T20911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.889139][T20911] Call Trace: [ 498.889146][T20911] [ 498.889153][T20911] dump_stack_lvl+0x189/0x250 [ 498.889179][T20911] ? __pfx____ratelimit+0x10/0x10 [ 498.889199][T20911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.889219][T20911] ? __pfx__printk+0x10/0x10 [ 498.889241][T20911] ? __pfx___might_resched+0x10/0x10 [ 498.889257][T20911] ? fs_reclaim_acquire+0x7d/0x100 [ 498.889284][T20911] should_fail_ex+0x414/0x560 [ 498.889313][T20911] should_failslab+0xa8/0x100 [ 498.889332][T20911] __kvmalloc_node_noprof+0x158/0x910 [ 498.889354][T20911] ? do_ip6t_set_ctl+0x88a/0xce0 [ 498.889376][T20911] ? nf_setsockopt+0x26f/0x290 [ 498.889395][T20911] ? translate_table+0x19b/0x2040 [ 498.889415][T20911] ? do_syscall_64+0xfa/0xfa0 [ 498.889441][T20911] translate_table+0x19b/0x2040 [ 498.889478][T20911] ? __lock_acquire+0xab9/0xd20 [ 498.889499][T20911] ? __pfx_translate_table+0x10/0x10 [ 498.889525][T20911] ? __might_fault+0xb0/0x130 [ 498.889564][T20911] ? _copy_from_user+0x94/0xb0 [ 498.889590][T20911] do_ip6t_set_ctl+0x970/0xce0 [ 498.889626][T20911] ? rcu_is_watching+0x15/0xb0 [ 498.889645][T20911] ? trace_contention_end+0x39/0x120 [ 498.889665][T20911] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 498.889706][T20911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.889740][T20911] ? __pfx_aa_sk_perm+0x10/0x10 [ 498.889767][T20911] nf_setsockopt+0x26f/0x290 [ 498.889788][T20911] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 498.889815][T20911] do_sock_setsockopt+0x17c/0x1b0 [ 498.889837][T20911] __x64_sys_setsockopt+0x13f/0x1b0 [ 498.889859][T20911] do_syscall_64+0xfa/0xfa0 [ 498.889878][T20911] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.889900][T20911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.889915][T20911] ? clear_bhb_loop+0x60/0xb0 [ 498.889934][T20911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.889949][T20911] RIP: 0033:0x7f8fce18f6c9 [ 498.889964][T20911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.889978][T20911] RSP: 002b:00007f8fcf0dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 498.889995][T20911] RAX: ffffffffffffffda RBX: 00007f8fce3e5fa0 RCX: 00007f8fce18f6c9 [ 498.890007][T20911] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 498.890017][T20911] RBP: 00007f8fcf0dc090 R08: 0000000000000410 R09: 0000000000000000 [ 498.890028][T20911] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 498.890038][T20911] R13: 00007f8fce3e6038 R14: 00007f8fce3e5fa0 R15: 00007ffed41bdbc8 [ 498.890068][T20911] [ 498.894941][T20909] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4184'. [ 499.635835][T20956] FAULT_INJECTION: forcing a failure. [ 499.635835][T20956] name failslab, interval 1, probability 0, space 0, times 0 [ 499.651852][T20956] CPU: 1 UID: 0 PID: 20956 Comm: syz.2.4199 Not tainted syzkaller #0 PREEMPT(full) [ 499.651877][T20956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 499.651887][T20956] Call Trace: [ 499.651894][T20956] [ 499.651902][T20956] dump_stack_lvl+0x189/0x250 [ 499.651929][T20956] ? __pfx____ratelimit+0x10/0x10 [ 499.651951][T20956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.651971][T20956] ? __pfx__printk+0x10/0x10 [ 499.651992][T20956] ? __pfx___might_resched+0x10/0x10 [ 499.652010][T20956] ? fs_reclaim_acquire+0x7d/0x100 [ 499.652038][T20956] should_fail_ex+0x414/0x560 [ 499.652066][T20956] should_failslab+0xa8/0x100 [ 499.652085][T20956] __kvmalloc_node_noprof+0x158/0x910 [ 499.652108][T20956] ? __nf_register_net_hook+0x232/0x930 [ 499.652127][T20956] ? nf_hook_entries_grow+0x281/0x720 [ 499.652153][T20956] nf_hook_entries_grow+0x281/0x720 [ 499.652187][T20956] __nf_register_net_hook+0x2c9/0x930 [ 499.652216][T20956] nf_register_net_hook+0xb2/0x190 [ 499.652236][T20956] nf_register_net_hooks+0x44/0x1b0 [ 499.652256][T20956] nf_ct_netns_do_get+0x212/0x5a0 [ 499.652275][T20956] ? rcu_is_watching+0x15/0xb0 [ 499.652294][T20956] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 499.652310][T20956] ? trace_contention_end+0x39/0x120 [ 499.652347][T20956] conntrack_mt_check+0x53/0xf0 [ 499.652369][T20956] xt_check_match+0x3d1/0xab0 [ 499.652396][T20956] ? __pfx_xt_check_match+0x10/0x10 [ 499.652419][T20956] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 499.652451][T20956] ? xt_find_match+0x1f7/0x250 [ 499.652479][T20956] translate_table+0x1553/0x2040 [ 499.652534][T20956] ? __pfx_translate_table+0x10/0x10 [ 499.652560][T20956] ? __might_fault+0xb0/0x130 [ 499.652603][T20956] ? _copy_from_user+0x94/0xb0 [ 499.652630][T20956] do_ip6t_set_ctl+0x970/0xce0 [ 499.652657][T20956] ? rcu_is_watching+0x15/0xb0 [ 499.652677][T20956] ? trace_contention_end+0x39/0x120 [ 499.652696][T20956] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 499.652742][T20956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 499.652777][T20956] ? __pfx_aa_sk_perm+0x10/0x10 [ 499.652805][T20956] nf_setsockopt+0x26f/0x290 [ 499.652831][T20956] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 499.652858][T20956] do_sock_setsockopt+0x17c/0x1b0 [ 499.652881][T20956] __x64_sys_setsockopt+0x13f/0x1b0 [ 499.652903][T20956] do_syscall_64+0xfa/0xfa0 [ 499.652924][T20956] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.652946][T20956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.652963][T20956] ? clear_bhb_loop+0x60/0xb0 [ 499.652984][T20956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.653001][T20956] RIP: 0033:0x7f8fce18f6c9 [ 499.653017][T20956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.653032][T20956] RSP: 002b:00007f8fcf0dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 499.653052][T20956] RAX: ffffffffffffffda RBX: 00007f8fce3e5fa0 RCX: 00007f8fce18f6c9 [ 499.653064][T20956] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 499.653074][T20956] RBP: 00007f8fcf0dc090 R08: 0000000000000410 R09: 0000000000000000 [ 499.653084][T20956] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 499.653095][T20956] R13: 00007f8fce3e6038 R14: 00007f8fce3e5fa0 R15: 00007ffed41bdbc8 [ 499.653127][T20956] [ 499.653435][T20956] xt_conntrack: cannot load conntrack support for proto=10 [ 500.130103][T20966] tipc: Enabled bearer , priority 0 [ 500.145816][T20966] syzkaller0: entered promiscuous mode [ 500.167689][T20966] syzkaller0: entered allmulticast mode [ 500.218335][T20974] 8021q: VLANs not supported on vcan0 [ 500.237430][T20966] tipc: Resetting bearer [ 500.243514][T20973] 8021q: VLANs not supported on vcan0 [ 500.454750][T20995] FAULT_INJECTION: forcing a failure. [ 500.454750][T20995] name failslab, interval 1, probability 0, space 0, times 0 [ 500.473068][T20965] tipc: Resetting bearer [ 500.479891][T20995] CPU: 0 UID: 0 PID: 20995 Comm: syz.0.4212 Not tainted syzkaller #0 PREEMPT(full) [ 500.479913][T20995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 500.479923][T20995] Call Trace: [ 500.479930][T20995] [ 500.479937][T20995] dump_stack_lvl+0x189/0x250 [ 500.479965][T20995] ? __pfx____ratelimit+0x10/0x10 [ 500.479988][T20995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.480010][T20995] ? __pfx__printk+0x10/0x10 [ 500.480035][T20995] ? __pfx___might_resched+0x10/0x10 [ 500.480053][T20995] ? fs_reclaim_acquire+0x7d/0x100 [ 500.480083][T20995] should_fail_ex+0x414/0x560 [ 500.480113][T20995] should_failslab+0xa8/0x100 [ 500.480132][T20995] __kvmalloc_node_noprof+0x158/0x910 [ 500.480158][T20995] ? nf_hook_entries_grow+0x281/0x720 [ 500.480175][T20995] ? __pfx___mutex_lock+0x10/0x10 [ 500.480204][T20995] nf_hook_entries_grow+0x281/0x720 [ 500.480238][T20995] __nf_register_net_hook+0x2c9/0x930 [ 500.480268][T20995] nf_register_net_hook+0xb2/0x190 [ 500.480289][T20995] nf_register_net_hooks+0x44/0x1b0 [ 500.480310][T20995] nf_defrag_ipv6_enable+0x87/0x120 [ 500.480333][T20995] socket_mt_v2_check+0xa5/0x1e0 [ 500.480356][T20995] xt_check_match+0x3d1/0xab0 [ 500.480383][T20995] ? __pfx_xt_check_match+0x10/0x10 [ 500.480406][T20995] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 500.480440][T20995] ? xt_find_match+0x1f7/0x250 [ 500.480468][T20995] translate_table+0x1553/0x2040 [ 500.480517][T20995] ? __pfx_translate_table+0x10/0x10 [ 500.480543][T20995] ? __might_fault+0xb0/0x130 [ 500.480587][T20995] ? _copy_from_user+0x94/0xb0 [ 500.480613][T20995] do_ip6t_set_ctl+0x970/0xce0 [ 500.480639][T20995] ? rcu_is_watching+0x15/0xb0 [ 500.480659][T20995] ? trace_contention_end+0x39/0x120 [ 500.480686][T20995] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 500.480734][T20995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 500.480770][T20995] ? __pfx_aa_sk_perm+0x10/0x10 [ 500.480799][T20995] nf_setsockopt+0x26f/0x290 [ 500.480820][T20995] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 500.480846][T20995] do_sock_setsockopt+0x17c/0x1b0 [ 500.480869][T20995] __x64_sys_setsockopt+0x13f/0x1b0 [ 500.480894][T20995] do_syscall_64+0xfa/0xfa0 [ 500.480914][T20995] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.480936][T20995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.480953][T20995] ? clear_bhb_loop+0x60/0xb0 [ 500.480974][T20995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.480991][T20995] RIP: 0033:0x7f3cd018f6c9 [ 500.481006][T20995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.481021][T20995] RSP: 002b:00007f3cce3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.481039][T20995] RAX: ffffffffffffffda RBX: 00007f3cd03e5fa0 RCX: 00007f3cd018f6c9 [ 500.481052][T20995] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 500.481063][T20995] RBP: 00007f3cce3f6090 R08: 0000000000000410 R09: 0000000000000000 [ 500.481074][T20995] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 500.481085][T20995] R13: 00007f3cd03e6038 R14: 00007f3cd03e5fa0 R15: 00007ffca4225e18 [ 500.481118][T20995] [ 500.522741][T20997] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20003 [ 500.854500][T20965] tipc: Disabling bearer [ 501.154941][T21036] FAULT_INJECTION: forcing a failure. [ 501.154941][T21036] name failslab, interval 1, probability 0, space 0, times 0 [ 501.160251][T21034] gre0: entered promiscuous mode [ 501.180769][T21036] CPU: 1 UID: 0 PID: 21036 Comm: syz.1.4225 Not tainted syzkaller #0 PREEMPT(full) [ 501.180792][T21036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.180802][T21036] Call Trace: [ 501.180809][T21036] [ 501.180816][T21036] dump_stack_lvl+0x189/0x250 [ 501.180838][T21036] ? __pfx____ratelimit+0x10/0x10 [ 501.180855][T21036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.180871][T21036] ? __pfx__printk+0x10/0x10 [ 501.180886][T21036] ? __pfx___might_resched+0x10/0x10 [ 501.180904][T21036] ? fs_reclaim_acquire+0x7d/0x100 [ 501.180932][T21036] should_fail_ex+0x414/0x560 [ 501.180961][T21036] should_failslab+0xa8/0x100 [ 501.180980][T21036] __kvmalloc_node_noprof+0x158/0x910 [ 501.181002][T21036] ? __nf_register_net_hook+0x232/0x930 [ 501.181021][T21036] ? nf_hook_entries_grow+0x281/0x720 [ 501.181044][T21036] nf_hook_entries_grow+0x281/0x720 [ 501.181074][T21036] __nf_register_net_hook+0x2c9/0x930 [ 501.181102][T21036] nf_register_net_hook+0xb2/0x190 [ 501.181121][T21036] nf_register_net_hooks+0x44/0x1b0 [ 501.181140][T21036] nf_ct_netns_do_get+0x212/0x5a0 [ 501.181158][T21036] ? rcu_is_watching+0x15/0xb0 [ 501.181176][T21036] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 501.181192][T21036] ? trace_contention_end+0x39/0x120 [ 501.181223][T21036] conntrack_mt_check+0x53/0xf0 [ 501.181245][T21036] xt_check_match+0x3d1/0xab0 [ 501.181271][T21036] ? __pfx_xt_check_match+0x10/0x10 [ 501.181295][T21036] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 501.181329][T21036] ? xt_find_match+0x1f7/0x250 [ 501.181366][T21036] translate_table+0x1553/0x2040 [ 501.181415][T21036] ? __pfx_translate_table+0x10/0x10 [ 501.181441][T21036] ? __might_fault+0xb0/0x130 [ 501.181485][T21036] ? _copy_from_user+0x94/0xb0 [ 501.181512][T21036] do_ip6t_set_ctl+0x970/0xce0 [ 501.181540][T21036] ? rcu_is_watching+0x15/0xb0 [ 501.181559][T21036] ? trace_contention_end+0x39/0x120 [ 501.181579][T21036] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 501.181626][T21036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 501.181662][T21036] ? __pfx_aa_sk_perm+0x10/0x10 [ 501.181690][T21036] nf_setsockopt+0x26f/0x290 [ 501.181712][T21036] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 501.181738][T21036] do_sock_setsockopt+0x17c/0x1b0 [ 501.181761][T21036] __x64_sys_setsockopt+0x13f/0x1b0 [ 501.181784][T21036] do_syscall_64+0xfa/0xfa0 [ 501.181806][T21036] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.181827][T21036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.181844][T21036] ? clear_bhb_loop+0x60/0xb0 [ 501.181865][T21036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.181882][T21036] RIP: 0033:0x7f7bf1d8f6c9 [ 501.181898][T21036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.181912][T21036] RSP: 002b:00007f7bf2c46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 501.181931][T21036] RAX: ffffffffffffffda RBX: 00007f7bf1fe5fa0 RCX: 00007f7bf1d8f6c9 [ 501.181944][T21036] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 501.181955][T21036] RBP: 00007f7bf2c46090 R08: 0000000000000410 R09: 0000000000000000 [ 501.181966][T21036] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 501.181977][T21036] R13: 00007f7bf1fe6038 R14: 00007f7bf1fe5fa0 R15: 00007ffdff504378 [ 501.182010][T21036] [ 501.212000][T21036] xt_conntrack: cannot load conntrack support for proto=10 [ 501.421689][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.994299][T21085] FAULT_INJECTION: forcing a failure. [ 501.994299][T21085] name failslab, interval 1, probability 0, space 0, times 0 [ 502.022785][T21085] CPU: 1 UID: 0 PID: 21085 Comm: syz.4.4238 Not tainted syzkaller #0 PREEMPT(full) [ 502.022809][T21085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.022819][T21085] Call Trace: [ 502.022826][T21085] [ 502.022834][T21085] dump_stack_lvl+0x189/0x250 [ 502.022861][T21085] ? __pfx____ratelimit+0x10/0x10 [ 502.022884][T21085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.022907][T21085] ? __pfx__printk+0x10/0x10 [ 502.022928][T21085] ? __pfx___might_resched+0x10/0x10 [ 502.022947][T21085] ? fs_reclaim_acquire+0x7d/0x100 [ 502.022975][T21085] should_fail_ex+0x414/0x560 [ 502.023003][T21085] should_failslab+0xa8/0x100 [ 502.023023][T21085] __kvmalloc_node_noprof+0x158/0x910 [ 502.023046][T21085] ? __nf_register_net_hook+0x232/0x930 [ 502.023064][T21085] ? nf_hook_entries_grow+0x281/0x720 [ 502.023088][T21085] nf_hook_entries_grow+0x281/0x720 [ 502.023122][T21085] __nf_register_net_hook+0x2c9/0x930 [ 502.023151][T21085] nf_register_net_hook+0xb2/0x190 [ 502.023173][T21085] nf_register_net_hooks+0x44/0x1b0 [ 502.023195][T21085] nf_ct_netns_do_get+0x212/0x5a0 [ 502.023215][T21085] ? rcu_is_watching+0x15/0xb0 [ 502.023234][T21085] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 502.023251][T21085] ? trace_contention_end+0x39/0x120 [ 502.023287][T21085] conntrack_mt_check+0x53/0xf0 [ 502.023310][T21085] xt_check_match+0x3d1/0xab0 [ 502.023338][T21085] ? __pfx_xt_check_match+0x10/0x10 [ 502.023362][T21085] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 502.023396][T21085] ? xt_find_match+0x1f7/0x250 [ 502.023425][T21085] translate_table+0x1553/0x2040 [ 502.023481][T21085] ? __pfx_translate_table+0x10/0x10 [ 502.023508][T21085] ? __might_fault+0xb0/0x130 [ 502.023552][T21085] ? _copy_from_user+0x94/0xb0 [ 502.023579][T21085] do_ip6t_set_ctl+0x970/0xce0 [ 502.023607][T21085] ? rcu_is_watching+0x15/0xb0 [ 502.023625][T21085] ? trace_contention_end+0x39/0x120 [ 502.023644][T21085] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 502.023690][T21085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 502.023725][T21085] ? __pfx_aa_sk_perm+0x10/0x10 [ 502.023752][T21085] nf_setsockopt+0x26f/0x290 [ 502.023774][T21085] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 502.023799][T21085] do_sock_setsockopt+0x17c/0x1b0 [ 502.023823][T21085] __x64_sys_setsockopt+0x13f/0x1b0 [ 502.023846][T21085] do_syscall_64+0xfa/0xfa0 [ 502.023867][T21085] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.023889][T21085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.023906][T21085] ? clear_bhb_loop+0x60/0xb0 [ 502.023924][T21085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.023941][T21085] RIP: 0033:0x7f82b4d8f6c9 [ 502.023957][T21085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.023971][T21085] RSP: 002b:00007f82b5c29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 502.023991][T21085] RAX: ffffffffffffffda RBX: 00007f82b4fe5fa0 RCX: 00007f82b4d8f6c9 [ 502.024004][T21085] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 502.024014][T21085] RBP: 00007f82b5c29090 R08: 0000000000000410 R09: 0000000000000000 [ 502.024025][T21085] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 502.024036][T21085] R13: 00007f82b4fe6038 R14: 00007f82b4fe5fa0 R15: 00007fffc7dbd518 [ 502.024068][T21085] [ 502.024133][T21085] xt_conntrack: cannot load conntrack support for proto=10 [ 502.052635][T21092] netlink: 'syz.3.4240': attribute type 1 has an invalid length. [ 502.070800][T21087] syzkaller0: entered promiscuous mode [ 502.102155][T21092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.105002][T21087] syzkaller0: entered allmulticast mode [ 502.489123][T21102] netlink: 'syz.4.4242': attribute type 10 has an invalid length. [ 502.602710][T21110] __nla_validate_parse: 7 callbacks suppressed [ 502.602727][T21110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4243'. [ 502.629227][T21108] syzkaller0: entered promiscuous mode [ 502.634792][T21108] syzkaller0: entered allmulticast mode [ 502.887662][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4248'. [ 502.898157][T21123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4250'. [ 502.919624][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4250'. [ 502.938476][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 503.025129][T21129] FAULT_INJECTION: forcing a failure. [ 503.025129][T21129] name failslab, interval 1, probability 0, space 0, times 0 [ 503.063626][T21129] CPU: 1 UID: 0 PID: 21129 Comm: syz.0.4252 Not tainted syzkaller #0 PREEMPT(full) [ 503.063650][T21129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 503.063660][T21129] Call Trace: [ 503.063667][T21129] [ 503.063674][T21129] dump_stack_lvl+0x189/0x250 [ 503.063701][T21129] ? __pfx____ratelimit+0x10/0x10 [ 503.063723][T21129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.063744][T21129] ? __pfx__printk+0x10/0x10 [ 503.063768][T21129] ? __pfx___might_resched+0x10/0x10 [ 503.063784][T21129] ? fs_reclaim_acquire+0x7d/0x100 [ 503.063812][T21129] should_fail_ex+0x414/0x560 [ 503.063840][T21129] should_failslab+0xa8/0x100 [ 503.063858][T21129] __kmalloc_node_noprof+0xd2/0x800 [ 503.063879][T21129] ? alloc_slab_obj_exts+0x3e/0x100 [ 503.063907][T21129] alloc_slab_obj_exts+0x3e/0x100 [ 503.063928][T21129] allocate_slab+0x152/0x350 [ 503.063949][T21129] ___slab_alloc+0xe94/0x18a0 [ 503.063970][T21129] ? __pfx___might_resched+0x10/0x10 [ 503.063987][T21129] ? nf_hook_entries_grow+0x281/0x720 [ 503.064012][T21129] ? nf_hook_entries_grow+0x281/0x720 [ 503.064034][T21129] __slab_alloc+0x65/0x100 [ 503.064056][T21129] __kvmalloc_node_noprof+0x6ba/0x910 [ 503.064081][T21129] ? nf_hook_entries_grow+0x281/0x720 [ 503.064097][T21129] ? __pfx___mutex_lock+0x10/0x10 [ 503.064134][T21129] nf_hook_entries_grow+0x281/0x720 [ 503.064168][T21129] __nf_register_net_hook+0x2c9/0x930 [ 503.064197][T21129] nf_register_net_hook+0xb2/0x190 [ 503.064218][T21129] nf_register_net_hooks+0x44/0x1b0 [ 503.064238][T21129] nf_defrag_ipv6_enable+0x87/0x120 [ 503.064260][T21129] socket_mt_v2_check+0xa5/0x1e0 [ 503.064283][T21129] xt_check_match+0x3d1/0xab0 [ 503.064310][T21129] ? __pfx_xt_check_match+0x10/0x10 [ 503.064333][T21129] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 503.064367][T21129] ? xt_find_match+0x1f7/0x250 [ 503.064393][T21129] translate_table+0x1553/0x2040 [ 503.064442][T21129] ? __pfx_translate_table+0x10/0x10 [ 503.064467][T21129] ? __might_fault+0xb0/0x130 [ 503.064510][T21129] ? _copy_from_user+0x94/0xb0 [ 503.064536][T21129] do_ip6t_set_ctl+0x970/0xce0 [ 503.064565][T21129] ? rcu_is_watching+0x15/0xb0 [ 503.064584][T21129] ? trace_contention_end+0x39/0x120 [ 503.064605][T21129] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 503.064652][T21129] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 503.064687][T21129] ? __pfx_aa_sk_perm+0x10/0x10 [ 503.064715][T21129] nf_setsockopt+0x26f/0x290 [ 503.064737][T21129] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 503.064763][T21129] do_sock_setsockopt+0x17c/0x1b0 [ 503.064786][T21129] __x64_sys_setsockopt+0x13f/0x1b0 [ 503.064810][T21129] do_syscall_64+0xfa/0xfa0 [ 503.064830][T21129] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.064852][T21129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.064870][T21129] ? clear_bhb_loop+0x60/0xb0 [ 503.064891][T21129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.064907][T21129] RIP: 0033:0x7f3cd018f6c9 [ 503.064923][T21129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.064937][T21129] RSP: 002b:00007f3cce3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 503.064956][T21129] RAX: ffffffffffffffda RBX: 00007f3cd03e5fa0 RCX: 00007f3cd018f6c9 [ 503.064969][T21129] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 503.064979][T21129] RBP: 00007f3cce3f6090 R08: 0000000000000410 R09: 0000000000000000 [ 503.064990][T21129] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000002 [ 503.065001][T21129] R13: 00007f3cd03e6038 R14: 00007f3cd03e5fa0 R15: 00007ffca4225e18 [ 503.065034][T21129] [ 503.431743][T21129] No such timeout policy "syz0" [ 503.483115][T21134] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.493521][T21134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 503.500813][T21134] IPv6: NLM_F_CREATE should be set when creating new route [ 503.579252][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4255'. [ 503.776883][T21155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4258'. [ 503.845698][T21160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4258'. [ 503.878476][T21160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4258'. [ 504.045410][T21168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4263'. [ 504.058690][T21166] team0: Device ip6gre1 is of different type [ 504.261907][T21181] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 504.273838][T21181] FAULT_INJECTION: forcing a failure. [ 504.273838][T21181] name failslab, interval 1, probability 0, space 0, times 0 [ 504.312928][T21181] CPU: 0 UID: 0 PID: 21181 Comm: syz.2.4267 Not tainted syzkaller #0 PREEMPT(full) [ 504.312952][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.312962][T21181] Call Trace: [ 504.312970][T21181] [ 504.312977][T21181] dump_stack_lvl+0x189/0x250 [ 504.313004][T21181] ? __pfx____ratelimit+0x10/0x10 [ 504.313025][T21181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.313047][T21181] ? __pfx__printk+0x10/0x10 [ 504.313069][T21181] ? __pfx___might_resched+0x10/0x10 [ 504.313087][T21181] ? fs_reclaim_acquire+0x7d/0x100 [ 504.313116][T21181] should_fail_ex+0x414/0x560 [ 504.313147][T21181] should_failslab+0xa8/0x100 [ 504.313166][T21181] __kvmalloc_node_noprof+0x158/0x910 [ 504.313201][T21181] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 504.313229][T21181] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 504.313260][T21181] __nf_unregister_net_hook+0x4f6/0x700 [ 504.313289][T21181] nf_unregister_net_hooks+0xcb/0x140 [ 504.313311][T21181] nf_ct_netns_put+0x36d/0x520 [ 504.313331][T21181] ? __pfx_conntrack_mt_destroy+0x10/0x10 [ 504.313351][T21181] translate_table+0x1a0d/0x2040 [ 504.313400][T21181] ? __pfx_translate_table+0x10/0x10 [ 504.313426][T21181] ? __might_fault+0xb0/0x130 [ 504.313469][T21181] ? _copy_from_user+0x94/0xb0 [ 504.313496][T21181] do_ip6t_set_ctl+0x970/0xce0 [ 504.313524][T21181] ? rcu_is_watching+0x15/0xb0 [ 504.313544][T21181] ? trace_contention_end+0x39/0x120 [ 504.313564][T21181] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 504.313612][T21181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 504.313648][T21181] ? __pfx_aa_sk_perm+0x10/0x10 [ 504.313677][T21181] nf_setsockopt+0x26f/0x290 [ 504.313700][T21181] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 504.313728][T21181] do_sock_setsockopt+0x17c/0x1b0 [ 504.313755][T21181] __x64_sys_setsockopt+0x13f/0x1b0 [ 504.313780][T21181] do_syscall_64+0xfa/0xfa0 [ 504.313802][T21181] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.313823][T21181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.313841][T21181] ? clear_bhb_loop+0x60/0xb0 [ 504.313862][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.313879][T21181] RIP: 0033:0x7f8fce18f6c9 [ 504.313894][T21181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.313908][T21181] RSP: 002b:00007f8fcf0dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 504.313926][T21181] RAX: ffffffffffffffda RBX: 00007f8fce3e5fa0 RCX: 00007f8fce18f6c9 [ 504.313938][T21181] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 504.313946][T21181] RBP: 00007f8fcf0dc090 R08: 0000000000000410 R09: 0000000000000000 [ 504.313954][T21181] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000002 [ 504.313964][T21181] R13: 00007f8fce3e6038 R14: 00007f8fce3e5fa0 R15: 00007ffed41bdbc8 [ 504.313996][T21181] [ 504.685144][T21194] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4272'. [ 504.830192][T21207] veth0_to_team: entered promiscuous mode [ 504.837564][T21198] nbd4: detected capacity change from 0 to 127 [ 504.846442][ T5841] block nbd4: Receive control failed (result -32) [ 504.856393][T15908] block nbd4: Dead connection, failed to find a fallback [ 504.864369][T15908] block nbd4: shutting down sockets [ 504.869782][T15908] blk_print_req_error: 138 callbacks suppressed [ 504.869796][T15908] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.885650][T15908] buffer_io_error: 138 callbacks suppressed [ 504.885665][T15908] Buffer I/O error on dev nbd4, logical block 0, async page read [ 504.902819][T21210] veth1_macvtap: left promiscuous mode [ 504.908413][T21210] macsec0: entered promiscuous mode [ 504.913696][T21210] macsec0: entered allmulticast mode [ 504.916007][T15908] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.956205][T15908] Buffer I/O error on dev nbd4, logical block 1, async page read [ 504.964706][T15908] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.973875][T15908] Buffer I/O error on dev nbd4, logical block 2, async page read [ 504.984700][T15908] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.000828][T21210] veth1_macvtap: entered promiscuous mode [ 505.010569][T21210] veth1_macvtap: entered allmulticast mode [ 505.018051][T15908] Buffer I/O error on dev nbd4, logical block 3, async page read [ 505.022955][T21217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 505.036133][T15908] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.037070][T21210] macsec0: left promiscuous mode [ 505.045498][T15908] Buffer I/O error on dev nbd4, logical block 0, async page read [ 505.059538][T15908] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.085650][T21210] macsec0: left allmulticast mode [ 505.089809][T15908] Buffer I/O error on dev nbd4, logical block 1, async page read [ 505.108127][T15908] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.110283][T21210] veth1_macvtap: left allmulticast mode [ 505.121888][T15908] Buffer I/O error on dev nbd4, logical block 2, async page read [ 505.135341][T15908] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.151547][T15908] Buffer I/O error on dev nbd4, logical block 3, async page read [ 505.160062][T15908] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.179942][T15908] Buffer I/O error on dev nbd4, logical block 0, async page read [ 505.206244][T15908] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.241882][T15908] Buffer I/O error on dev nbd4, logical block 1, async page read [ 505.270565][T15908] ldm_validate_partition_table(): Disk read failed. [ 505.281451][T15908] Dev nbd4: unable to read RDB block 0 [ 505.286301][T21234] FAULT_INJECTION: forcing a failure. [ 505.286301][T21234] name failslab, interval 1, probability 0, space 0, times 0 [ 505.289539][T15908] nbd4: unable to read partition table [ 505.318008][T21223] syzkaller1: entered promiscuous mode [ 505.323619][T21223] syzkaller1: entered allmulticast mode [ 505.331780][T21234] CPU: 0 UID: 0 PID: 21234 Comm: syz.0.4280 Not tainted syzkaller #0 PREEMPT(full) [ 505.331806][T21234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 505.331816][T21234] Call Trace: [ 505.331823][T21234] [ 505.331831][T21234] dump_stack_lvl+0x189/0x250 [ 505.331867][T21234] ? __pfx____ratelimit+0x10/0x10 [ 505.331890][T21234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.331911][T21234] ? __pfx__printk+0x10/0x10 [ 505.331936][T21234] ? __pfx___might_resched+0x10/0x10 [ 505.331959][T21234] should_fail_ex+0x414/0x560 [ 505.331989][T21234] should_failslab+0xa8/0x100 [ 505.332008][T21234] __kmalloc_cache_noprof+0x6f/0x6f0 [ 505.332029][T21234] ? __mutex_trylock_common+0x153/0x260 [ 505.332049][T21234] ? nf_ct_tmpl_alloc+0x7e/0x230 [ 505.332073][T21234] nf_ct_tmpl_alloc+0x7e/0x230 [ 505.332094][T21234] xt_ct_tg_check+0x223/0xa90 [ 505.332120][T21234] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 505.332140][T21234] ? xt_find_target+0x1f3/0x240 [ 505.332167][T21234] xt_check_target+0x3c3/0xa90 [ 505.332190][T21234] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 505.332215][T21234] ? __pfx_xt_check_target+0x10/0x10 [ 505.332239][T21234] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 505.332272][T21234] ? xt_find_target+0x1f3/0x240 [ 505.332298][T21234] translate_table+0x186b/0x2040 [ 505.332344][T21234] ? __pfx_translate_table+0x10/0x10 [ 505.332370][T21234] ? __might_fault+0xb0/0x130 [ 505.332412][T21234] ? _copy_from_user+0x94/0xb0 [ 505.332438][T21234] do_ip6t_set_ctl+0x970/0xce0 [ 505.332465][T21234] ? rcu_is_watching+0x15/0xb0 [ 505.332485][T21234] ? trace_contention_end+0x39/0x120 [ 505.332505][T21234] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 505.332551][T21234] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 505.332584][T21234] ? __pfx_aa_sk_perm+0x10/0x10 [ 505.332612][T21234] nf_setsockopt+0x26f/0x290 [ 505.332634][T21234] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 505.332659][T21234] do_sock_setsockopt+0x17c/0x1b0 [ 505.332680][T21234] __x64_sys_setsockopt+0x13f/0x1b0 [ 505.332702][T21234] do_syscall_64+0xfa/0xfa0 [ 505.332722][T21234] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.332743][T21234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.332759][T21234] ? clear_bhb_loop+0x60/0xb0 [ 505.332779][T21234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.332794][T21234] RIP: 0033:0x7f3cd018f6c9 [ 505.332809][T21234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.332824][T21234] RSP: 002b:00007f3cce3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 505.332849][T21234] RAX: ffffffffffffffda RBX: 00007f3cd03e5fa0 RCX: 00007f3cd018f6c9 [ 505.332860][T21234] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 505.332869][T21234] RBP: 00007f3cce3f6090 R08: 0000000000000410 R09: 0000000000000000 [ 505.332879][T21234] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000002 [ 505.332889][T21234] R13: 00007f3cd03e6038 R14: 00007f3cd03e5fa0 R15: 00007ffca4225e18 [ 505.332918][T21234] [ 505.336839][T15908] ldm_validate_partition_table(): Disk read failed. [ 505.591467][T21242] xt_ecn: cannot match TCP bits for non-tcp packets [ 505.600758][T15908] Dev nbd4: unable to read RDB block 0 [ 505.678241][T15908] nbd4: unable to read partition table [ 505.990840][T21259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.018767][T21259] syzkaller0: entered promiscuous mode [ 506.024259][T21259] syzkaller0: entered allmulticast mode [ 506.153121][T21267] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 506.168059][T21267] FAULT_INJECTION: forcing a failure. [ 506.168059][T21267] name failslab, interval 1, probability 0, space 0, times 0 [ 506.189419][T21267] CPU: 0 UID: 0 PID: 21267 Comm: syz.2.4293 Not tainted syzkaller #0 PREEMPT(full) [ 506.189445][T21267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 506.189455][T21267] Call Trace: [ 506.189463][T21267] [ 506.189470][T21267] dump_stack_lvl+0x189/0x250 [ 506.189498][T21267] ? __pfx____ratelimit+0x10/0x10 [ 506.189520][T21267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.189540][T21267] ? __pfx__printk+0x10/0x10 [ 506.189563][T21267] ? __pfx___might_resched+0x10/0x10 [ 506.189580][T21267] ? fs_reclaim_acquire+0x7d/0x100 [ 506.189607][T21267] should_fail_ex+0x414/0x560 [ 506.189637][T21267] should_failslab+0xa8/0x100 [ 506.189656][T21267] __kvmalloc_node_noprof+0x158/0x910 [ 506.189680][T21267] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 506.189707][T21267] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 506.189748][T21267] __nf_unregister_net_hook+0x4f6/0x700 [ 506.189776][T21267] nf_unregister_net_hooks+0xcb/0x140 [ 506.189799][T21267] nf_ct_netns_put+0x36d/0x520 [ 506.189818][T21267] ? __pfx_conntrack_mt_destroy+0x10/0x10 [ 506.189838][T21267] translate_table+0x1a0d/0x2040 [ 506.189887][T21267] ? __pfx_translate_table+0x10/0x10 [ 506.189914][T21267] ? __might_fault+0xb0/0x130 [ 506.189957][T21267] ? _copy_from_user+0x94/0xb0 [ 506.189984][T21267] do_ip6t_set_ctl+0x970/0xce0 [ 506.190010][T21267] ? rcu_is_watching+0x15/0xb0 [ 506.190030][T21267] ? trace_contention_end+0x39/0x120 [ 506.190050][T21267] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 506.190097][T21267] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 506.190132][T21267] ? __pfx_aa_sk_perm+0x10/0x10 [ 506.190160][T21267] nf_setsockopt+0x26f/0x290 [ 506.190182][T21267] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 506.190208][T21267] do_sock_setsockopt+0x17c/0x1b0 [ 506.190231][T21267] __x64_sys_setsockopt+0x13f/0x1b0 [ 506.190255][T21267] do_syscall_64+0xfa/0xfa0 [ 506.190276][T21267] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.190297][T21267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.190314][T21267] ? clear_bhb_loop+0x60/0xb0 [ 506.190335][T21267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.190351][T21267] RIP: 0033:0x7f8fce18f6c9 [ 506.190368][T21267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.190381][T21267] RSP: 002b:00007f8fcf0dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 506.190400][T21267] RAX: ffffffffffffffda RBX: 00007f8fce3e5fa0 RCX: 00007f8fce18f6c9 [ 506.190412][T21267] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 506.190423][T21267] RBP: 00007f8fcf0dc090 R08: 0000000000000410 R09: 0000000000000000 [ 506.190433][T21267] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000002 [ 506.190444][T21267] R13: 00007f8fce3e6038 R14: 00007f8fce3e5fa0 R15: 00007ffed41bdbc8 [ 506.190476][T21267] [ 506.762319][T21283] xt_TCPMSS: Only works on TCP SYN packets [ 507.095886][T21314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.892810][T21357] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 507.901042][T21359] __nla_validate_parse: 9 callbacks suppressed [ 507.901060][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4326'. [ 508.250021][T21375] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 508.267882][T21378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4332'. [ 508.314675][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4335'. [ 508.324972][T21382] tipc: Enabled bearer , priority 0 [ 508.344292][T21382] syzkaller0: entered promiscuous mode [ 508.344840][T21381] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4334'. [ 508.357313][T21382] syzkaller0: entered allmulticast mode [ 508.425252][T21382] tipc: Resetting bearer [ 508.478460][T21377] tipc: Resetting bearer [ 508.503581][T21396] netlink: 'syz.2.4338': attribute type 1 has an invalid length. [ 508.530642][T21377] tipc: Disabling bearer [ 508.582154][T21397] tipc: Enabled bearer , priority 0 [ 508.595918][T21393] tipc: Resetting bearer [ 508.610459][T21401] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 508.625221][T21396] bond6: entered promiscuous mode [ 508.641587][T21396] macvlan2: entered promiscuous mode [ 508.646899][T21396] macvlan2: entered allmulticast mode [ 508.656106][T21396] bond6: entered allmulticast mode [ 508.662042][T21396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 508.684570][T21396] bond6: left promiscuous mode [ 508.750999][T21390] tipc: Disabling bearer [ 508.944495][T21425] netlink: 'syz.1.4346': attribute type 1 has an invalid length. [ 509.002764][T21425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.013583][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4344'. [ 509.015314][T21430] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 509.068590][T21425] bond4: (slave ip6gretap1): making interface the new active one [ 509.081997][T21425] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 509.182992][T21440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4351'. [ 509.264707][T21441] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 509.272877][T21441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.284423][T21441] tipc: Invalid UDP bearer configuration [ 509.284474][T21441] tipc: Enabling of bearer rejected, failed to enable media [ 509.323922][T21447] sctp: [Deprecated]: syz.1.4353 (pid 21447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.323922][T21447] Use struct sctp_sack_info instead [ 509.448265][T21459] netlink: 'syz.2.4357': attribute type 29 has an invalid length. [ 509.456489][T21460] netlink: 'syz.2.4357': attribute type 29 has an invalid length. [ 509.783172][T21483] tipc: Enabled bearer , priority 0 [ 509.794626][T21483] syzkaller0: entered promiscuous mode [ 509.801672][T21483] syzkaller0: entered allmulticast mode [ 509.834967][T21483] tipc: Resetting bearer [ 509.901528][T21481] tipc: Resetting bearer [ 509.938705][T21481] tipc: Disabling bearer [ 510.068890][T21501] bridge0: port 3(batadv1) entered blocking state [ 510.096388][T21501] bridge0: port 3(batadv1) entered disabled state [ 510.105320][T21501] batadv1: entered allmulticast mode [ 510.120618][T21501] batadv1: entered promiscuous mode [ 510.157441][T21508] syzkaller0: entered promiscuous mode [ 510.163084][T21508] syzkaller0: entered allmulticast mode [ 510.206204][T21510] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.293224][T21519] netlink: 'syz.0.4374': attribute type 11 has an invalid length. [ 510.309979][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4373'. [ 510.321170][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4374'. [ 510.348549][T21519] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.452317][T21523] tipc: Resetting bearer [ 510.537335][T21532] bond0: (slave rose0): Error: Device can not be enslaved while up [ 510.562527][T20078] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 510.571999][T20078] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 510.583789][ T982] syzkaller0 speed is unknown, defaulting to 1000 [ 510.596277][ T982] syz2: Port: 1 Link DOWN [ 510.727647][T21548] netlink: 'syz.1.4381': attribute type 2 has an invalid length. [ 510.749236][T21548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4381'. [ 510.750437][T21540] tipc: Enabled bearer , priority 0 [ 510.824032][T21540] syzkaller0: entered promiscuous mode [ 510.850954][T21540] syzkaller0: entered allmulticast mode [ 510.962178][T21540] tipc: Resetting bearer [ 511.028876][ T56] block nbd3: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 270 seconds [ 511.039749][ T56] block nbd3: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 270 seconds [ 511.050900][ T56] block nbd3: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 270 seconds [ 511.062773][ T56] block nbd3: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 270 seconds [ 511.092736][T21536] tipc: Resetting bearer [ 511.176552][T21536] tipc: Disabling bearer [ 511.227939][T21570] syzkaller0: entered promiscuous mode [ 511.233448][T21570] syzkaller0: entered allmulticast mode [ 511.380779][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 511.693649][T21598] netlink: 'syz.3.4396': attribute type 8 has an invalid length. [ 511.866415][T21610] netlink: 'syz.4.4398': attribute type 10 has an invalid length. [ 511.996694][T21612] x_tables: duplicate underflow at hook 1 [ 512.278847][T21631] syzkaller0: entered promiscuous mode [ 512.295365][ T30] audit: type=1107 audit(1762841085.111:7): pid=21636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 512.295365][ T30] G ZمͶ>zjAb]A[avQUHw_pR%0#I(* g4jno_vXvHjGt3xnZ@K0f8/, priority 0 [ 519.772815][T21886] syzkaller0: entered promiscuous mode [ 519.794809][T21886] syzkaller0: entered allmulticast mode [ 519.939146][T21898] tipc: Resetting bearer [ 520.083431][T21883] tipc: Resetting bearer [ 520.135924][T21883] tipc: Disabling bearer [ 520.143762][T21907] No such timeout policy "syz0" [ 520.454211][T21916] netlink: 'syz.4.4495': attribute type 1 has an invalid length. [ 520.475195][T21917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4495'. [ 520.500714][T21917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4495'. [ 520.535107][T21916] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 520.572524][T21924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4496'. [ 520.726887][T21930] syzkaller0: entered promiscuous mode [ 520.734779][T21930] syzkaller0: entered allmulticast mode [ 520.774110][T21920] syz_tun: entered promiscuous mode [ 520.793531][T21920] syz_tun: entered allmulticast mode [ 520.927401][T21942] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4502'. [ 520.987921][T21950] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4505'. [ 521.009317][T21951] tipc: Enabled bearer , priority 0 [ 521.036784][T21951] syzkaller0: entered promiscuous mode [ 521.043331][T21951] syzkaller0: entered allmulticast mode [ 521.123107][T21951] tipc: Resetting bearer [ 521.164404][T21943] tipc: Resetting bearer [ 521.223603][T21969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4510'. [ 521.244840][T21943] tipc: Disabling bearer [ 521.368543][ T30] audit: type=1800 audit(1762841094.181:8): pid=21969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4510" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1398 res=0 errno=0 [ 521.621770][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4518'. [ 521.844359][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4524'. [ 522.053501][T22023] syzkaller0: entered promiscuous mode [ 522.059247][T22023] syzkaller0: entered allmulticast mode [ 522.192499][T22025] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4529'. [ 522.280053][T22031] xt_l2tp: v2 doesn't support IP mode [ 522.371273][T22037] nbd: couldn't find device at index 61440 [ 522.500485][T22048] syzkaller0: entered promiscuous mode [ 522.506113][T22048] syzkaller0: entered allmulticast mode [ 522.541135][T22049] batman_adv: batadv0: Adding interface: dummy0 [ 522.570784][T22049] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.617751][T22049] batman_adv: batadv0: Interface activated: dummy0 [ 522.710717][T22060] IPVS: ip_vs_edit_dest(): server weight less than zero [ 522.718074][ T5902] IPVS: starting estimator thread 0... [ 522.831445][T22061] IPVS: using max 26 ests per chain, 62400 per kthread [ 522.897985][T22069] Bluetooth: MGMT ver 1.23 [ 522.932733][T22072] x_tables: duplicate underflow at hook 2 [ 523.101449][T22081] nbd: illegal input index 2958377 [ 523.241436][T22099] chnl_net:caif_netlink_parms(): no params data found [ 523.460402][T13259] IPVS: starting estimator thread 0... [ 523.557236][T22122] IPVS: using max 34 ests per chain, 81600 per kthread [ 523.557947][T22128] netlink: 'syz.0.4558': attribute type 3 has an invalid length. [ 524.296233][T22177] __nla_validate_parse: 73 callbacks suppressed [ 524.296252][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4573'. [ 524.322833][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4575'. [ 524.626519][T22208] batman_adv: batadv0: Adding interface: dummy0 [ 524.650310][T22208] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.678162][T22208] batman_adv: batadv0: Interface activated: dummy0 [ 524.695200][T22215] batadv0: mtu less than device minimum [ 524.704773][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.716932][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.728842][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.740705][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.752540][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.764406][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.776251][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.788156][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.799267][T22221] xt_HMARK: spi-set and port-set can't be combined [ 524.799897][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.820858][T22222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4588'. [ 524.858450][T22217] tunl0: left promiscuous mode [ 524.863418][T22217] gre0: left promiscuous mode [ 524.949637][T22229] netlink: 'syz.1.4592': attribute type 1 has an invalid length. [ 524.953337][T22217] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.024536][T22217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.036931][T22217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.124125][T22217] ip6gre1: left promiscuous mode [ 525.132367][T22217] gretap1: left promiscuous mode [ 525.242347][T22238] netlink: 'syz.4.4595': attribute type 1 has an invalid length. [ 525.248283][T22229] 8021q: adding VLAN 0 to HW filter on device bond5 [ 525.253952][T22238] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4595'. [ 525.271212][T22240] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4593'. [ 525.309809][T22240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4593'. [ 525.373375][T22234] bond5: (slave gretap2): making interface the new active one [ 525.388088][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'. [ 525.406712][T22234] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 525.478400][T20079] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.511262][T20079] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.553137][T20079] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.574388][T20079] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.602472][T20079] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.624256][T20079] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.640132][T20079] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.649350][T20079] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.660775][T22262] netlink: 'syz.0.4600': attribute type 12 has an invalid length. [ 525.669379][T22262] netlink: 'syz.0.4600': attribute type 29 has an invalid length. [ 525.678461][T22262] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4600'. [ 525.687960][T22262] netlink: 59 bytes leftover after parsing attributes in process `syz.0.4600'. [ 525.700049][T22261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4600'. [ 525.714863][T22265] pim6reg1: entered promiscuous mode [ 525.732225][T22265] pim6reg1: entered allmulticast mode [ 526.299574][T22309] netlink: 'syz.4.4614': attribute type 3 has an invalid length. [ 526.362084][T22314] netlink: 'syz.2.4615': attribute type 1 has an invalid length. [ 526.398799][T22314] 8021q: adding VLAN 0 to HW filter on device bond8 [ 526.749559][T22345] netlink: 'syz.3.4625': attribute type 39 has an invalid length. [ 527.444441][T22377] syzkaller0: entered promiscuous mode [ 527.454304][T22377] syzkaller0: entered allmulticast mode [ 527.480643][T22378] pim6reg1: entered promiscuous mode [ 527.486103][T22378] pim6reg1: entered allmulticast mode [ 527.878750][T22420] netlink: 'syz.4.4645': attribute type 15 has an invalid length. [ 527.926567][T22420] netlink: 'syz.4.4645': attribute type 15 has an invalid length. [ 527.926761][T20078] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 527.963562][T22422] bond0: (slave syz_tun): Releasing backup interface [ 527.999932][T22422] batman_adv: batadv0: Removing interface: dummy0 [ 528.012908][T22422] bridge_slave_0: left allmulticast mode [ 528.029852][T22422] bridge_slave_0: left promiscuous mode [ 528.035736][T22422] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.061266][T22422] bridge_slave_1: left allmulticast mode [ 528.067050][T22422] bridge_slave_1: left promiscuous mode [ 528.074110][T22422] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.084663][T22422] bond0: (slave bond_slave_0): Releasing backup interface [ 528.093698][T22422] bond0: (slave bond_slave_1): Releasing backup interface [ 528.104082][T22422] team0: Port device C removed [ 528.110935][T22422] team0: Port device team_slave_1 removed [ 528.117038][T22422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.126373][T22422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.134986][T20078] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 528.144115][T20078] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 528.152916][T20078] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 528.314572][T22443] netlink: 'syz.2.4654': attribute type 62 has an invalid length. [ 529.153520][T22503] 8021q: VLANs not supported on gre0 [ 529.221963][T22508] team0: Device wireguard0 is of different type [ 529.311727][T22513] __nla_validate_parse: 22 callbacks suppressed [ 529.311745][T22513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4679'. [ 529.483244][T22525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4683'. [ 529.685658][T22541] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4688'. [ 529.706229][T22539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4689'. [ 529.723114][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4690'. [ 529.792908][T22548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4691'. [ 529.814397][T22552] tc_dump_action: action bad kind [ 529.918379][T22556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4693'. [ 529.984923][T22562] netlink: 'syz.0.4696': attribute type 1 has an invalid length. [ 530.014840][T22562] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4696'. [ 530.044192][T22562] NCSI netlink: No device for ifindex 0 [ 530.138100][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 530.359851][T22584] syzkaller0: entered promiscuous mode [ 530.365429][T22584] syzkaller0: entered allmulticast mode [ 530.540334][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4710'. [ 530.560346][T22604] bridge_slave_1: left allmulticast mode [ 530.570500][T22604] bridge_slave_1: left promiscuous mode [ 530.580837][T22604] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.602796][T22607] nbd: must specify a size in bytes for the device [ 530.625267][T22604] bridge_slave_0: left allmulticast mode [ 530.645757][T22604] bridge_slave_0: left promiscuous mode [ 530.658316][T22604] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.756354][T22620] netlink: 'syz.1.4714': attribute type 1 has an invalid length. [ 530.821310][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4714'. [ 530.842468][T22620] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.978586][T22626] tipc: Enabled bearer , priority 0 [ 530.999153][T22626] syzkaller0: entered promiscuous mode [ 531.005005][T22628] No such timeout policy "syz0" [ 531.012573][T22626] syzkaller0: entered allmulticast mode [ 531.077038][T22626] tipc: Resetting bearer [ 531.167277][T22625] tipc: Resetting bearer [ 531.180341][T22643] Bluetooth: MGMT ver 1.23 [ 531.190930][T22643] Bluetooth: hci1: too big key_count value 32778 [ 531.225524][T22625] tipc: Disabling bearer [ 531.679154][T22673] No such timeout policy "syz0" [ 531.858230][T22686] net_ratelimit: 12 callbacks suppressed [ 531.858248][T22686] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 531.877035][T22686] openvswitch: netlink: Flow key attr not present in new flow. [ 531.988537][T22698] netlink: 'syz.0.4736': attribute type 33 has an invalid length. [ 532.611511][T22740] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 532.622625][T22740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.806602][T22754] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 534.378391][T22796] __nla_validate_parse: 13 callbacks suppressed [ 534.378408][T22796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4763'. [ 534.404328][T22795] netlink: 'syz.4.4764': attribute type 1 has an invalid length. [ 534.413383][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4763'. [ 534.422692][T22799] openvswitch: netlink: Flow actions attr not present in new flow. [ 534.443229][T22795] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4764'. [ 534.474259][T22803] netlink: 'syz.2.4766': attribute type 1 has an invalid length. [ 534.487979][T22803] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4766'. [ 534.520120][T22806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.525173][T22800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4765'. [ 534.660147][T22817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4771'. [ 534.672522][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4771'. [ 534.782912][T22826] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4773'. [ 534.840081][T22828] dvmrp0: entered allmulticast mode [ 535.029909][T22843] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4779'. [ 535.142899][T22845] netlink: 'syz.3.4780': attribute type 1 has an invalid length. [ 535.158393][T22845] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4780'. [ 535.335266][T22853] veth3: entered promiscuous mode [ 535.342334][T22853] veth3: entered allmulticast mode [ 535.429044][T22865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.694461][T22885] nbd: illegal input index -8454144 [ 535.732331][T22881] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 535.760372][T22881] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 535.784408][T22877] tipc: Enabling of bearer rejected, failed to enable media [ 535.801211][T22891] tipc: New replicast peer: 255.255.255.255 [ 535.808415][T22891] tipc: Enabled bearer , priority 6 [ 535.942266][T22901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.007865][T22901] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 536.038488][T22907] bridge_slave_0: left allmulticast mode [ 536.046051][T22907] bridge_slave_0: left promiscuous mode [ 536.065860][T22907] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.075157][T22915] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 536.087839][T22907] bridge_slave_1: left allmulticast mode [ 536.093619][T22907] bridge_slave_1: left promiscuous mode [ 536.110125][T22907] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.131063][T22907] bond0: (slave bond_slave_0): Releasing backup interface [ 536.154541][T22907] bond0: (slave bond_slave_1): Releasing backup interface [ 536.194511][T22907] team0: Port device team_slave_0 removed [ 536.212842][T22907] team0: Port device team_slave_1 removed [ 536.219868][T22907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.228454][T22907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.236413][T22907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 536.238151][T22927] netlink: 'syz.3.4806': attribute type 2 has an invalid length. [ 536.263237][T22927] netlink: 'syz.3.4806': attribute type 1 has an invalid length. [ 536.416588][T22932] syzkaller0: entered promiscuous mode [ 536.427818][T22932] syzkaller0: entered allmulticast mode [ 536.746949][T22954] batadv1: entered allmulticast mode [ 536.774648][T22959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.817681][T22964] tipc: Enabled bearer , priority 0 [ 536.825212][T22964] syzkaller0: entered promiscuous mode [ 536.833678][T22964] syzkaller0: entered allmulticast mode [ 536.879105][T22964] tipc: Resetting bearer [ 536.924685][T22964] tipc: Resetting bearer [ 536.958983][T22964] tipc: Disabling bearer [ 536.978339][T22973] netlink: 'syz.4.4822': attribute type 1 has an invalid length. [ 537.189278][T22995] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 537.438125][T23007] netlink: 'syz.3.4835': attribute type 2 has an invalid length. [ 537.450980][T23007] netlink: 'syz.3.4835': attribute type 2 has an invalid length. [ 537.474990][T23013] sctp: [Deprecated]: syz.1.4838 (pid 23013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.474990][T23013] Use struct sctp_sack_info instead [ 537.728156][T23022] sctp: [Deprecated]: syz.1.4842 (pid 23022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.728156][T23022] Use struct sctp_sack_info instead [ 538.241274][T23074] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 538.261257][T23074] team0: Device macvtap1 is already an upper device of the team interface [ 538.337710][T23087] batman_adv: batadv0: Interface deactivated: dummy0 [ 538.351147][T23071] netlink: 'syz.2.4856': attribute type 13 has an invalid length. [ 538.381176][T23071] netlink: 'syz.2.4856': attribute type 58 has an invalid length. [ 538.449190][T23087] batman_adv: batadv0: Removing interface: dummy0 [ 538.463645][T23089] netlink: 'syz.0.4860': attribute type 1 has an invalid length. [ 538.542014][T23089] 8021q: adding VLAN 0 to HW filter on device bond8 [ 538.586269][T23098] netlink: 'syz.3.4863': attribute type 3 has an invalid length. [ 538.591491][T23093] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 538.609093][T23093] bond9 (unregistering): Released all slaves [ 538.886123][T23109] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 538.932492][T23113] IPv6: sit1: Disabled Multicast RS [ 538.972509][T23118] netlink: 'syz.2.4870': attribute type 32 has an invalid length. [ 539.146724][T23118] bond9: Setting coupled_control to off (0) [ 539.214678][T23113] sit2: entered promiscuous mode [ 539.221149][T23113] sit2: entered allmulticast mode [ 539.579603][T23157] __nla_validate_parse: 152 callbacks suppressed [ 539.579621][T23157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4878'. [ 539.603790][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4878'. [ 539.862524][T20073] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xd6 [ 540.191387][T23200] x_tables: duplicate underflow at hook 1 [ 540.260410][T23205] syzkaller0: entered promiscuous mode [ 540.273584][T23205] syzkaller0: entered allmulticast mode [ 540.443731][T23219] No such timeout policy "syz0" [ 540.990451][T23251] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 541.070669][T23254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4905'. [ 541.106303][ T56] block nbd3: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 300 seconds [ 541.118185][ T56] block nbd3: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 300 seconds [ 541.129266][ T56] block nbd3: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 300 seconds [ 541.140274][ T56] block nbd3: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 300 seconds [ 542.335591][T23248] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4902'. [ 542.345205][T23257] netlink: 340 bytes leftover after parsing attributes in process `syz.2.4907'. [ 542.356402][T23254] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 542.528905][T23279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4910'. [ 542.626742][T23283] veth0: entered promiscuous mode [ 542.709092][T23295] validate_nla: 5 callbacks suppressed [ 542.709110][T23295] netlink: 'syz.4.4916': attribute type 1 has an invalid length. [ 542.723740][T23287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'. [ 542.746624][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4915'. [ 542.769166][T23292] veth0: left promiscuous mode [ 542.937837][T23312] pim6reg1: entered promiscuous mode [ 542.959099][T23312] pim6reg1: entered allmulticast mode [ 543.045663][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4920'. [ 543.054848][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4920'. [ 543.066262][T23312] netlink: 'syz.1.4920': attribute type 5 has an invalid length. [ 543.302007][T23334] netlink: 'syz.4.4924': attribute type 3 has an invalid length. [ 543.663650][T23363] netlink: 'syz.0.4935': attribute type 4 has an invalid length. [ 543.684499][T23363] openvswitch: netlink: Duplicate key (type 1). [ 544.370883][T23398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.465131][T23402] : entered promiscuous mode [ 544.585621][T23409] team1: entered promiscuous mode [ 544.591132][T23409] team1: entered allmulticast mode [ 544.632057][T23413] ip6tnl0: left allmulticast mode [ 544.646799][T23413] ip6gre1: left allmulticast mode [ 544.654136][T23413] gretap1: left allmulticast mode [ 544.673147][T23413] veth3: left promiscuous mode [ 544.684595][T23413] veth3: left allmulticast mode [ 544.693950][T23418] netlink: 'syz.3.4952': attribute type 10 has an invalid length. [ 544.695255][T20079] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 544.713058][T20079] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 544.723750][T20079] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 544.732861][T20079] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 544.815517][T23422] __nla_validate_parse: 2 callbacks suppressed [ 544.815556][T23422] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4956'. [ 544.855092][T23427] xt_hashlimit: overflow, try lower: 3/0 [ 544.914941][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4954'. [ 544.993062][T23440] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4958'. [ 545.021121][T23419] delete_channel: no stack [ 545.344415][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4965'. [ 545.361931][T23463] netlink: 'syz.1.4965': attribute type 1 has an invalid length. [ 545.390649][T23463] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4965'. [ 545.492463][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4968'. [ 545.660421][T23487] erspan0: entered promiscuous mode [ 545.921456][T23515] syzkaller0: entered promiscuous mode [ 545.946533][T23515] syzkaller0: entered allmulticast mode [ 546.006847][T23515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4978'. [ 547.094264][T23569] veth0: entered promiscuous mode [ 547.162404][T23566] veth0: left promiscuous mode [ 547.192569][T23580] pim6reg: entered allmulticast mode [ 547.226864][T23580] pim6reg: left allmulticast mode [ 547.333462][T23589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4997'. [ 547.578025][T23601] No such timeout policy "syz0" [ 547.653047][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5001'. [ 547.717191][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5001'. [ 547.726092][T23608] netlink: 'syz.0.5001': attribute type 15 has an invalid length. [ 547.850322][T23622] C: renamed from lo (while UP) [ 548.073070][T23637] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 548.552096][T23695] netlink: 'syz.0.5025': attribute type 13 has an invalid length. [ 548.564005][T23695] netlink: 'syz.0.5025': attribute type 58 has an invalid length. [ 549.032665][T23729] IPVS: Error joining to the multicast group [ 549.042414][T23729] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20004 [ 549.088347][T23731] syzkaller0: entered promiscuous mode [ 549.093859][T23731] syzkaller0: entered allmulticast mode [ 549.564866][T23763] bond9: option xmit_hash_policy: invalid value (64) [ 549.583898][T23763] bond9 (unregistering): Released all slaves [ 549.847072][T23787] netlink: 'syz.2.5049': attribute type 10 has an invalid length. [ 549.873937][T23787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.883175][T23787] bond0: (slave wg0): The slave device specified does not support setting the MAC address [ 549.901509][T23787] bond0: (slave wg0): Error -95 calling set_mac_address [ 549.935086][T23789] __nla_validate_parse: 15 callbacks suppressed [ 549.935104][T23789] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5050'. [ 549.967659][T23789] 0: reclassify loop, rule prio 0, protocol 800 [ 550.064309][T23800] netlink: 'syz.4.5053': attribute type 8 has an invalid length. [ 550.119950][T23808] netlink: 'syz.1.5055': attribute type 24 has an invalid length. [ 550.371167][T23813] can: request_module (can-proto-3) failed. [ 550.492146][T23833] netlink: 'syz.1.5063': attribute type 29 has an invalid length. [ 550.507074][T23833] netlink: 'syz.1.5063': attribute type 29 has an invalid length. [ 550.520254][T23833] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5063'. [ 550.918137][T23802] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 550.941966][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5073'. [ 551.039657][T23871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5076'. [ 551.052664][T23871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5076'. [ 551.180283][T23876] bond0: (slave rose0): Error: Device can not be enslaved while up [ 551.221525][T23883] No such timeout policy "syz0" [ 551.365325][T23893] tipc: New replicast peer: 255.255.255.255 [ 551.374152][T23893] tipc: Enabled bearer , priority 6 [ 551.555000][T23907] netlink: 'syz.3.5089': attribute type 1 has an invalid length. [ 551.671465][T23912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5090'. [ 551.726648][T23912] 8021q: adding VLAN 0 to HW filter on device bond16 [ 551.828869][T23912] 8021q: adding VLAN 0 to HW filter on device bond16 [ 551.836131][T23912] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address [ 551.847725][T23912] bond16: (slave vxcan1): Error -95 calling set_mac_address [ 551.869848][T23924] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 551.939708][T23924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5092'. [ 552.022294][T23930] No such timeout policy "syz0" [ 552.063500][T23928] sctp: [Deprecated]: syz.0.5094 (pid 23928) Use of int in maxseg socket option. [ 552.063500][T23928] Use struct sctp_assoc_value instead [ 552.114689][T23931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5094'. [ 552.128748][T23931] netlink: 'syz.0.5094': attribute type 21 has an invalid length. [ 552.152461][T23931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5094'. [ 552.371754][T16793] tipc: Node number set to 3381021659 [ 552.665647][T23954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5103'. [ 552.822726][T23964] No such timeout policy "syz0" [ 553.114995][T23982] validate_nla: 1 callbacks suppressed [ 553.115012][T23982] netlink: 'syz.0.5115': attribute type 1 has an invalid length. [ 553.388855][T23999] tipc: Enabling of bearer rejected, failed to enable media [ 553.482603][T24006] No such timeout policy "syz0" [ 553.609428][T24020] vlan3: entered allmulticast mode [ 553.614590][T24020] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 554.113414][T24065] No such timeout policy "syz0" [ 554.426722][T24089] bond10: option xmit_hash_policy: invalid value (64) [ 554.459048][T24089] bond10 (unregistering): Released all slaves [ 554.652691][T24104] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 554.798746][ T5841] Bluetooth: hci1: link tx timeout [ 554.804016][ T5841] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 554.915936][T24116] netlink: 'syz.2.5150': attribute type 10 has an invalid length. [ 554.932131][T24116] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 554.962288][T24119] tipc: Enabled bearer , priority 0 [ 554.978006][T24119] syzkaller0: entered promiscuous mode [ 554.987231][T24119] syzkaller0: entered allmulticast mode [ 555.021523][T24119] tipc: Resetting bearer [ 555.043557][T24118] tipc: Resetting bearer [ 555.070595][T24118] tipc: Disabling bearer [ 555.372824][T24144] openvswitch: netlink: Flow key attr not present in new flow. [ 555.520637][T24147] __nla_validate_parse: 8 callbacks suppressed [ 555.520654][T24147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5159'. [ 555.623120][T24153] netlink: zone id is out of range [ 555.632648][T24153] netlink: zone id is out of range [ 555.639379][T24159] No such timeout policy "syz0" [ 555.654362][T24153] netlink: set zone limit has 8 unknown bytes [ 555.679574][T24157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5160'. [ 555.702862][T24157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5160'. [ 555.735652][T24168] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.852565][T24177] netlink: 'syz.3.5166': attribute type 2 has an invalid length. [ 555.866866][T24177] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5166'. [ 555.998950][T24176] team0 (unregistering): Port device team_slave_0 removed [ 556.012332][T24176] team0 (unregistering): Port device team_slave_1 removed [ 556.130265][T24188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5169'. [ 556.549986][T24210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5175'. [ 556.660188][T24210] syzkaller1: entered promiscuous mode [ 556.673299][T24210] syzkaller1: entered allmulticast mode [ 556.820080][T24222] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 556.863982][T24222] gretap2: entered promiscuous mode [ 556.867362][ T5841] Bluetooth: hci1: command 0x0405 tx timeout [ 556.872014][T24222] gretap2: entered allmulticast mode [ 557.006453][T24230] No such timeout policy "syz0" [ 557.115378][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5184'. [ 557.220633][T24250] netlink: 'syz.0.5189': attribute type 6 has an invalid length. [ 557.252482][T24255] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5188'. [ 557.465432][T24270] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 557.498682][T24274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5198'. [ 557.513030][T24274] netlink: 'syz.0.5198': attribute type 5 has an invalid length. [ 557.522511][T24274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5198'. [ 557.556662][T24274] geneve2: entered promiscuous mode [ 557.562177][T24274] geneve2: entered allmulticast mode [ 557.572705][T20073] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 557.598810][T20073] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 557.631905][T20073] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 557.654806][T20073] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 557.762516][T24296] tipc: Enabling of bearer rejected, failed to enable media [ 557.773689][T24297] xt_recent: Unsupported userspace flags (000000b1) [ 557.788896][T24296] netlink: 'syz.0.5202': attribute type 29 has an invalid length. [ 558.464650][T24343] netlink: 'syz.0.5215': attribute type 1 has an invalid length. [ 558.489756][T24343] xt_l2tp: v2 doesn't support IP mode [ 558.628861][T24358] netlink: 'syz.2.5220': attribute type 83 has an invalid length. [ 558.710592][T24361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.735410][T24363] x_tables: unsorted entry at hook 2 [ 558.938507][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 559.035676][T24395] : renamed from lo [ 559.648126][T24434] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 559.731100][T24441] netlink: 'syz.4.5245': attribute type 4 has an invalid length. [ 559.755404][T24442] netlink: 'syz.4.5245': attribute type 4 has an invalid length. [ 559.829984][T24444] netlink: 'syz.0.5246': attribute type 10 has an invalid length. [ 560.003329][T24461] bridge5: entered promiscuous mode [ 560.010056][T24461] bridge5: entered allmulticast mode [ 560.263549][T24473] No such timeout policy "syz0" [ 561.434392][T24536] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 561.463139][T24538] __nla_validate_parse: 16 callbacks suppressed [ 561.463157][T24538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5273'. [ 561.521124][T24542] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5274'. [ 561.579186][T24544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5272'. [ 561.998923][T24561] xt_hashlimit: size too large, truncated to 1048576 [ 562.111992][T24558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5277'. [ 562.136743][T24558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5277'. [ 562.195102][T24564] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5277'. [ 562.299632][T24558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5277'. [ 562.321266][T24558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5277'. [ 562.459251][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5283'. [ 562.472266][T24582] netlink: 'syz.1.5283': attribute type 4 has an invalid length. [ 564.807068][T24664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 564.835435][T24664] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 564.911603][T24664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 564.929178][T24664] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 564.970923][T24664] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 564.978417][T24664] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 565.010947][T24664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 565.026806][T24664] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 565.183816][T24695] netlink: 'syz.3.5316': attribute type 1 has an invalid length. [ 565.271882][T24695] 8021q: adding VLAN 0 to HW filter on device bond17 [ 565.365046][T24700] bond17: (slave gretap1): making interface the new active one [ 565.397551][T24700] bond17: (slave gretap1): Enslaving as an active interface with an up link [ 565.546702][T24717] netlink: 528 bytes leftover after parsing attributes in process `syz.3.5321'. [ 565.970947][T24740] pim6reg: entered allmulticast mode [ 566.408476][T24756] bond11: option resend_igmp: invalid value (32767) [ 566.428964][T24756] bond11: option resend_igmp: allowed values 0 - 255 [ 566.442035][T24756] bond11 (unregistering): Released all slaves [ 566.571619][T24769] __nla_validate_parse: 2 callbacks suppressed [ 566.571636][T24769] netlink: 576 bytes leftover after parsing attributes in process `syz.4.5340'. [ 567.173130][T24816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5354'. [ 567.270384][T24823] netlink: 'syz.2.5357': attribute type 1 has an invalid length. [ 567.282874][T24823] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5357'. [ 567.384745][T24830] delete_channel: no stack [ 567.438387][T24832] syzkaller0: entered promiscuous mode [ 567.443953][T24832] syzkaller0: entered allmulticast mode [ 567.590809][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5363'. [ 567.873394][T24858] tipc: Enabled bearer , priority 0 [ 567.902632][T24858] syzkaller0: entered promiscuous mode [ 567.929235][T24858] syzkaller0: entered allmulticast mode [ 567.996373][T24866] syzkaller0 speed is unknown, defaulting to 1000 [ 568.016583][T24866] hsr0 speed is unknown, defaulting to 1000 [ 568.026173][T24858] tipc: Resetting bearer [ 568.188509][T24857] tipc: Resetting bearer [ 568.283266][T24857] tipc: Disabling bearer [ 568.451720][T24892] syzkaller0: entered promiscuous mode [ 568.465123][T24892] syzkaller0: entered allmulticast mode [ 568.790755][T24905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.546075][T24936] pim6reg1: entered promiscuous mode [ 569.554126][T24936] pim6reg1: entered allmulticast mode [ 569.631514][T24949] sctp: [Deprecated]: syz.3.5393 (pid 24949) Use of int in max_burst socket option deprecated. [ 569.631514][T24949] Use struct sctp_assoc_value instead [ 569.783568][T24957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5394'. [ 569.942851][T24969] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5398'. [ 570.060009][T24978] netlink: 'syz.1.5400': attribute type 1 has an invalid length. [ 570.072663][T24978] netlink: 'syz.1.5400': attribute type 11 has an invalid length. [ 570.082792][T24978] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5400'. [ 570.219422][T24987] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5405'. [ 570.309004][T24994] tipc: Enabled bearer , priority 0 [ 570.316429][T24994] syzkaller0: entered promiscuous mode [ 570.323517][T24994] syzkaller0: entered allmulticast mode [ 570.352751][T24994] tipc: Resetting bearer [ 570.362005][T24993] tipc: Resetting bearer [ 570.384408][T24993] tipc: Disabling bearer [ 570.446550][T24998] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 570.457389][T24998] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 570.518417][T25001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5410'. [ 570.620193][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5413'. [ 570.640415][T25008] geneve2: entered promiscuous mode [ 570.645654][T25008] geneve2: entered allmulticast mode [ 570.668672][T20078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 570.678793][T20078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 570.708080][T25008] bridge0: port 1(syz_tun) entered blocking state [ 570.715083][T25008] bridge0: port 1(syz_tun) entered disabled state [ 570.721970][T25008] syz_tun: entered allmulticast mode [ 570.732710][T25008] syz_tun: left allmulticast mode [ 570.740864][T20078] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 570.757971][T20078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 571.066600][T25034] netlink: 'syz.4.5422': attribute type 1 has an invalid length. [ 571.185644][ T56] block nbd3: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 330 seconds [ 571.197391][ T56] block nbd3: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 330 seconds [ 571.208943][ T56] block nbd3: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 330 seconds [ 571.220530][ T56] block nbd3: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 330 seconds [ 571.311428][T25055] gre0: entered promiscuous mode [ 571.413655][T25058] bridge0: port 4(veth0_to_bridge) entered blocking state [ 571.421641][T25058] bridge0: port 4(veth0_to_bridge) entered disabled state [ 571.439703][T25058] veth0_to_bridge: entered allmulticast mode [ 571.448228][T25058] veth0_to_bridge: entered promiscuous mode [ 571.455456][T25058] bridge0: port 4(veth0_to_bridge) entered blocking state [ 571.463091][T25058] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 571.563370][T25065] syzkaller0 speed is unknown, defaulting to 1000 [ 571.579144][T25065] hsr0 speed is unknown, defaulting to 1000 [ 571.623679][T25079] netlink: 'syz.4.5432': attribute type 5 has an invalid length. [ 571.665966][T25081] __nla_validate_parse: 2 callbacks suppressed [ 571.665982][T25081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5434'. [ 571.684710][T25079] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5432'. [ 571.798437][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5432'. [ 571.828446][T25079] xt_hashlimit: size too large, truncated to 1048576 [ 572.159489][T25114] netlink: 'syz.0.5444': attribute type 1 has an invalid length. [ 572.179434][T25114] netlink: 'syz.0.5444': attribute type 4 has an invalid length. [ 572.201399][T25114] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.5444'. [ 572.233865][T25114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5444'. [ 572.272486][T25114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5444'. [ 572.443912][T25127] netlink: 'syz.3.5448': attribute type 10 has an invalid length. [ 572.479473][T25127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5448'. [ 572.534742][T25127] team0: Port device geneve0 added [ 574.339455][T25147] tipc: Enabling of bearer rejected, failed to enable media [ 574.364165][T25150] tipc: Enabling of bearer rejected, failed to enable media [ 574.399524][T25149] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5458'. [ 574.922190][T25191] netlink: 'syz.4.5467': attribute type 1 has an invalid length. [ 575.039003][T25197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5469'. [ 575.722962][T25246] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5482'. [ 575.749233][T25246] openvswitch: netlink: Message has 536 unknown bytes. [ 575.778578][T25249] tipc: Enabled bearer , priority 0 [ 575.785963][T25249] syzkaller0: entered promiscuous mode [ 575.794037][T25249] syzkaller0: entered allmulticast mode [ 575.806753][T25246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.828310][T25249] tipc: Resetting bearer [ 575.839644][T25248] tipc: Resetting bearer [ 575.880942][T25248] tipc: Disabling bearer [ 575.958500][T25257] netlink: 'syz.4.5486': attribute type 1 has an invalid length. [ 576.061185][T25257] bond5: (slave bridge5): making interface the new active one [ 576.071679][T25257] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 576.938376][ T31] INFO: task udevd:5825 blocked for more than 143 seconds. [ 576.945808][ T31] Not tainted syzkaller #0 [ 576.951194][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.960555][ T31] task:udevd state:D stack:22536 pid:5825 tgid:5825 ppid:5198 task_flags:0x400140 flags:0x00080003 [ 576.973389][ T31] Call Trace: [ 576.976920][ T31] [ 576.983531][ T31] __schedule+0x1798/0x4cc0 [ 576.991808][ T31] ? __pfx___schedule+0x10/0x10 [ 576.999752][ T31] ? schedule+0x91/0x360 [ 577.004130][ T31] schedule+0x165/0x360 [ 577.008804][ T31] io_schedule+0x80/0xd0 [ 577.013166][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 577.019076][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 577.025000][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 577.035628][ T31] ? __filemap_get_folio+0x6c0/0xaf0 [ 577.041978][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 577.048473][ T31] do_read_cache_folio+0x1aa/0x590 [ 577.053694][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 577.060743][ T31] read_part_sector+0xb6/0x2b0 [ 577.065633][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 577.072788][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 577.078514][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 577.084652][ T31] bdev_disk_changed+0x75f/0x14b0 [ 577.090470][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 577.096072][ T31] ? wait_on_inode+0xc0/0x230 [ 577.101911][ T31] blkdev_get_whole+0x380/0x510 [ 577.106908][ T31] bdev_open+0x31e/0xd30 [ 577.111341][ T31] blkdev_open+0x457/0x600 [ 577.115854][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 577.121029][ T31] do_dentry_open+0x953/0x13f0 [ 577.125807][ T31] vfs_open+0x3b/0x340 [ 577.132881][ T31] ? path_openat+0x2ecd/0x3830 [ 577.138313][ T31] path_openat+0x2ee5/0x3830 [ 577.143063][ T31] ? __pfx_path_openat+0x10/0x10 [ 577.148375][ T31] do_filp_open+0x1fa/0x410 [ 577.152902][ T31] ? __lock_acquire+0xab9/0xd20 [ 577.158498][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 577.163528][ T31] ? _raw_spin_unlock+0x28/0x50 [ 577.168404][ T31] ? alloc_fd+0x64c/0x6c0 [ 577.172727][ T31] do_sys_openat2+0x121/0x1c0 [ 577.177551][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 577.182760][ T31] __x64_sys_openat+0x138/0x170 [ 577.188072][ T31] do_syscall_64+0xfa/0xfa0 [ 577.192590][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.198690][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 577.204841][ T31] ? clear_bhb_loop+0x60/0xb0 [ 577.209581][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.215475][ T31] RIP: 0033:0x7fcc260a7407 [ 577.220409][ T31] RSP: 002b:00007ffc534e2be0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 577.229313][ T31] RAX: ffffffffffffffda RBX: 00007fcc26764880 RCX: 00007fcc260a7407 [ 577.237526][ T31] RDX: 00000000000a0800 RSI: 0000561d15174930 RDI: ffffffffffffff9c [ 577.245499][ T31] RBP: 0000561d15160910 R08: 0000000000000000 R09: 0000000000000000 [ 577.253734][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561d153a6880 [ 577.262194][ T31] R13: 0000561d1516e190 R14: 0000000000000000 R15: 0000561d153a6880 [ 577.270371][ T31] [ 577.273580][ T31] [ 577.273580][ T31] Showing all locks held in the system: [ 577.284067][ T31] 1 lock held by khungtaskd/31: [ 577.293457][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 577.303581][ T31] 2 locks held by getty/5583: [ 577.309635][ T31] #0: ffff88802fec50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 577.319747][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 577.329898][ T31] 1 lock held by udevd/5825: [ 577.334468][ T31] #0: ffff8880251dc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 577.344377][ T31] 2 locks held by kworker/u8:44/20078: [ 577.350125][ T31] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 577.360248][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 577.369370][ T31] 2 locks held by syz.3.5505/25319: [ 577.374633][ T31] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 577.384032][ T31] #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 577.396268][ T31] 2 locks held by syz.0.5508/25331: [ 577.401781][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.410307][ T31] #1: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 577.420113][ T31] 2 locks held by syz.2.5509/25333: [ 577.425303][ T31] #0: ffffffff8f7d1830 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 577.435052][ T31] #1: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 577.444335][ T31] [ 577.446678][ T31] ============================================= [ 577.446678][ T31] [ 577.455638][ T31] NMI backtrace for cpu 0 [ 577.455654][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.455671][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.455681][ T31] Call Trace: [ 577.455688][ T31] [ 577.455695][ T31] dump_stack_lvl+0x189/0x250 [ 577.455723][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.455743][ T31] ? __pfx__printk+0x10/0x10 [ 577.455771][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 577.455792][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 577.455812][ T31] ? __pfx__printk+0x10/0x10 [ 577.455832][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 577.455857][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 577.455877][ T31] watchdog+0xf60/0xfa0 [ 577.455898][ T31] ? watchdog+0x1e2/0xfa0 [ 577.455918][ T31] kthread+0x711/0x8a0 [ 577.455942][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.455965][ T31] ? __pfx_kthread+0x10/0x10 [ 577.455986][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.456006][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.456024][ T31] ? __pfx_kthread+0x10/0x10 [ 577.456044][ T31] ret_from_fork+0x4bc/0x870 [ 577.456064][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.456086][ T31] ? __switch_to_asm+0x39/0x70 [ 577.456099][ T31] ? __switch_to_asm+0x33/0x70 [ 577.456112][ T31] ? __pfx_kthread+0x10/0x10 [ 577.456131][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.456161][ T31] [ 577.456167][ T31] Sending NMI from CPU 0 to CPUs 1: [ 577.603511][ C1] NMI backtrace for cpu 1 [ 577.603528][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 577.603544][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.603554][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 577.603581][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 577.603594][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 577.603609][ C1] RAX: 3a45a8f580615700 RBX: ffffffff81967bf7 RCX: 3a45a8f580615700 [ 577.603621][ C1] RDX: 0000000000000001 RSI: ffffffff8d70db4f RDI: ffffffff8bbf0760 [ 577.603632][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 577.603643][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce270 [ 577.603655][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 577.603665][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 577.603678][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.603688][ C1] CR2: 00007f467a861e9c CR3: 0000000021b58000 CR4: 00000000003526f0 [ 577.603702][ C1] Call Trace: [ 577.603709][ C1] [ 577.603715][ C1] default_idle+0x13/0x20 [ 577.603729][ C1] default_idle_call+0x73/0xb0 [ 577.603745][ C1] do_idle+0x1e7/0x510 [ 577.603764][ C1] ? __pfx_do_idle+0x10/0x10 [ 577.603789][ C1] cpu_startup_entry+0x44/0x60 [ 577.603804][ C1] start_secondary+0x101/0x110 [ 577.603825][ C1] common_startup_64+0x13e/0x147 [ 577.603853][ C1]