last executing test programs: 3m34.329320697s ago: executing program 0 (id=3896): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000001c0)) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYBLOB="f4881b45d7dbd09ae775bee6eb94a6ff49a3945d289c49d0a4baa23ab7bead58a60dbe5a28933eeb9b0f82bea9fbf178a1089cfb8aa72b5d4b476ff54b6a6d0f1f20b97b74afed521fbb53956091b30d90f2bcfef22ea68df4bed9ddeb4c347b08c2bf95ee3b078c932f58d8db9f75532af523a770a8cdef7d36a3393cdaa426d2cf671ffd5d52c9a96e4b90", @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0xfffffffffffffd9b, r3, 0x200, 0x870bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}) (async) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@typed={0x8, 0xbb, 0x0, 0x0, @u32}, @nested={0xc5, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x11, 0x0, 0x0, 0x0, @str=':]]\xb2T+[^&\\\\@\x00'}, @generic="d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2eea68a0190e2cbaa0de269676787c764635889ca6c747973691886e2c92540eed6d8ba6c451bf6e1d4cdc30726ae5a7f3a3d9fc406dbc9c8d216ac9ae9b81cb1baa6d1e6e2f8dd400c916908e496e03fe", @generic="b756cdbc348afc03a961da8975d58b1e97d5e66c11404751fc6a7d0664394eea973826bf10"]}]}, 0xe0}], 0x1}, 0x0) setsockopt$packet_int(r5, 0x107, 0x0, &(0x7f0000000180)=0x1, 0x4) socket(0x1e, 0x5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x404}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001200ffff27feac5d6b3fab4fac90a048", @ANYBLOB="fda65f05000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x140, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x110, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1000}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x48040}, 0x40081d0) (rerun: 32) 3m33.95835991s ago: executing program 0 (id=3899): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='xprtrdma_frwr_alloc\x00', r4, 0x0, 0xffffffffffffc0b8}, 0xfffffffffffffee3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'hugetlb'}, {0x0, 'devices'}, {0x2b, 'io'}, {0x2d, 'hugetlb'}, {0x2d, 'rlimit'}]}, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket$tipc(0x1e, 0x4, 0x0) close(0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x40040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001800190100000000fcdbdf250a80000000000007000000001400010000f700", @ANYRESDEC=r0, @ANYBLOB="00faa813221b09e16dde002cf23ac568b6c0c38495e23bd317f885c3534735744182dc84dd4d37d4291c2e68fdc67e3309e00da55dcc35d29d44caf7721cd09585c394f07ce97ac70ea4dc2be3e4abfbff6e8f545acb2b490f8bf5878fe611ae53d405d0f4b7139d2fd19bebe788aa3ebd3e4481bfd60d161f2944be59edfcf7c5d0bb0aadeedb445390ac92498bc4e2516104af741151b4b1b5a32fb923d11c67d3ca11dc1ddb43b8adcb0e599f7448a1dfe5493d2e7ce1acba874e4c6b45ee07d5cc400368f4e7f6602fcc63a0da8cf588835b51c2ee", @ANYRES64=r0, @ANYBLOB="ebbfe809ab9c8ee1c31b7470e0da9191e110a995ce92dd1518911e2251b20107a2120c0c13af644abbd4c079381decb4fffb2d4dd24382e7f8caecedff501f503b5a353e900990915f9dd7dfbfdf21be819f399c2801d3b317bf6c726dabede792e9b2c55ee3feaa138bfeb6b7acf9f6475c3165ad253bd5e26d193e90cf6a3df7daf726c2a65d651fb7e25ea2bb8585c3fb96d720b992e6ca0ad97440bf58a5157efc32dd6e9b5ba921c7eb43f77265f5008381a77f2b56221c967e36a4e05043ed907f9e1499273f065ac6974045109bb93416cef5e3f864d79450e41ee84951df74f7f58f31c39d2868a497aad07c191a039316c8149fc094", @ANYRES32, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x30}}, 0x0) 3m30.167418196s ago: executing program 0 (id=3918): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001580)={0x21}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r5 = openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='-cpu', @ANYRES16=r2], 0x5) 3m29.978535964s ago: executing program 0 (id=3921): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x14, 0x21, 0xa, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000180)=0x60, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000480)=""/37, &(0x7f0000000340)=0x25) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x2, 0x4, 0x80, 0x2002, r7, 0xe39, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0xb}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x9, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1b, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000000000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="00004d000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008520000084000000b70000000000000009000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="38000000d203390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac1414bb"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xebc}]}, 0x28}}, 0x0) 3m29.617710227s ago: executing program 0 (id=3925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x698, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x6a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x130}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x698, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x6a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x130}}, 0x0) (async) 3m29.38693332s ago: executing program 0 (id=3928): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x10004}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x10004}, 0x18) (async) 3m13.922707897s ago: executing program 32 (id=3928): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x10004}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x10004}, 0x18) (async) 18.261582182s ago: executing program 2 (id=5372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f00000004c0)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000004a000701feffffff02000000017c0000040042800c000180060006c869431d0014000280100014800c0016800800b60088470000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000900000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x4e1d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x3}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0)=0x7f, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 17.720096177s ago: executing program 1 (id=5380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0xa}]}, {0x0, [0x61, 0x0, 0x30, 0x61]}}, 0x0, 0x2a}, 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2d}]}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 17.321561045s ago: executing program 3 (id=5382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0xff, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x0, 0x7, 0x3, 0xa14, 0x3, 0x7, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0xb, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x1000, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x6, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x2, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x7, 0x6, 0xfff80000, 0x7ff, 0xfffffffd, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x101, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x74, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x2, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 17.215831251s ago: executing program 1 (id=5384): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket(0x2, 0x3, 0xff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x5f, 0x30000000, 0xd4a, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1f}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20040805) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xe7ba51640302031c) recvmmsg(r6, 0x0, 0x0, 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x2, 0x488c4) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x29, 0x5, 0xa9) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 16.931418684s ago: executing program 3 (id=5388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408d1}, 0x80c4) r2 = socket(0x23, 0x2, 0x6) recvfrom$rxrpc(r2, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000075123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xff74}, 0x94) poll(0x0, 0x0, 0x7) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x20001) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 0x7df}, 0x46) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000000c0)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x8a, 0x2, 0x5889, 0xc, 0x6, 0x10001, 'syz1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="810000000049a6af63cbaf8acba3bc149ccaf2fd19f0b24ae57ae2075d81835acb623a730a24e92a7c0283b87aadbc9019dcba58a37d3a83d95d8a99971a5878cbc2e197500f7ea07648284eef648d60c4a431d6f89de143ada0a0634fcc13929a12ad886fae5b2bd5b2d4ed8798cdec2de07ae9630db7e0bb54b969633a59b04ff9ec7fc4753157a7e0fb10837e52e4e03a70e93832238b69a90e3b5a08c8abc200e3f230ad970cd499bc9895193d3e011c9d371a450ddaa9c62ffebab950d888c0ba13"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48084) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000003c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}) socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x3e, &(0x7f0000000000)={0x0}}, 0x20004000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000003f40)={0x0, 0xffffffffffffff11, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20020084) sendmsg$NFT_MSG_GETOBJ_RESET(r10, &(0x7f00000002c0)={0x0, 0x3f, &(0x7f0000006000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000150a0103000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x400c054}, 0x44004080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') 16.443092555s ago: executing program 3 (id=5394): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x10, 0x10, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7d, 0x2f, 0x0, @empty, @private=0x1}}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x9, 0x6, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast2, 0x10, 0x20, 0x9, 0x2a}}) 16.386732805s ago: executing program 5 (id=5395): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340030000000900010073797a300000"], 0xc8}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010101}, 0xc) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4119, 0x1017}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x4022, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001dc0)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x30bd, 0x6, 0x0, 0x7, 0x1, 0xc, 0x9, 0xfffffffb, r6}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0), 0x1, 0x240000c0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r9, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket(0x2, 0x3, 0x4) 16.342708286s ago: executing program 3 (id=5397): r0 = socket$nl_crypto(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000280), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r1 = socket(0x2a, 0x80000, 0xffff8c56) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x24}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_AUTORATE={0x38, 0x9, 0x9}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x6c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x89fb, &(0x7f0000000040)={'xfrm0\x00', 0x7f}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xb, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000d06010100000000000000000700000a050001000700000016000300686173683a6e657402006f72742c6e6574000000050001000700000005000100070000000d0003170000"], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x48081) 16.126913666s ago: executing program 3 (id=5399): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) (async) bind$can_raw(r0, &(0x7f0000000040), 0x10) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0x15}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0x15}, 0x2c) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'hsr0\x00', @multicast}) 16.027436927s ago: executing program 5 (id=5401): r0 = socket(0x2, 0x3, 0xff) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "52d4346f2e964b093b6278f2f5d27d162f3ae892ebe960a6"}]]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8010) 15.962535067s ago: executing program 1 (id=5402): syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00050000002f907800020000e0000001248088a800"], 0x0) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 32) unshare(0x6a040000) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) (async) accept4(r0, 0x0, 0x0, 0x80800) (async, rerun: 32) shutdown(r0, 0x0) (async, rerun: 32) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) gettid() (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x19c04, 0x55007}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) socket(0x8, 0x0, 0x8000) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r7, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r4, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) 15.784283856s ago: executing program 1 (id=5404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x420, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x20001) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 15.376480541s ago: executing program 1 (id=5406): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000240)) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000024c0)="bad330fbc9b507560000000000004e82f7ccc6b952e3d2358b5445ed07008bb1fcfa8dd53897db305ffdee56e8bba684e500f07f5235", 0x36, 0x20040, &(0x7f00000001c0)={0x11, 0xf5, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) splice(r2, &(0x7f0000000080)=0x8, r5, &(0x7f00000000c0)=0x3, 0x100000001, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$nfc_llcp(r8, &(0x7f0000000980)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x6, 0x14, "3d2d9737b48e4f7c047c0ddca40594355ad82ec92cbec7e410c8c9514a0c247f226738a978a9b9ea3c5f6ab954ad9d27348a65dc09c811b648bba122fb1626", 0x12}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x20010, 0xffffffffffffffff, 0x0) 15.139374922s ago: executing program 3 (id=5408): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000b80)={{0x0, 0xfffffffffffffff6, 0x4, 0x6, 0x0, 0x3, 0x3042, 0x7, 0x2, 0x8f, 0x0, 0x200, 0xffffffffffffffff, 0x80, 0x70}}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYRES16=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') unshare(0x6a040000) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000004a00030000000000000000000a0080", @ANYRES32=0x0, @ANYBLOB="0080"], 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 15.013898416s ago: executing program 2 (id=5409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000100)={0x2a, "a0bcf00f7e667d375260151741f822f349b1d645f88eb0dd9909c5a5bd27a69170a95256260a114c14d488c2c47765d585e2709ec04c5a35869dde68ddbad42194880c107acd5e6ac4a651dd00922cf68c3c0d731c0488bcffb4efd428fda19863d13be22390555de4ebd63fc62fe6be0c7c1eff120481dd866a79730116af01"}) (async) bind$alg(r1, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0x3}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) (async) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x7, @private=0xa010100}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) close(0x4) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0xffffffffffffffb3) (async) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="3fca30419b5631cacbe4f35f67ee8538d3e72e88814590b13676d1472f32aa02c12aed8962a133381b31c7832adb03f409855befcd23f5634c2a8b9e09e7f993cbe7b61f5bcb43cecf27ced031bbaeeb", 0x50}], 0x1, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x7f}], 0x18}], 0x40, 0x4044081) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x34, r7, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/104, 0x68}], 0x1}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) 15.012855636s ago: executing program 4 (id=5410): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000009c00)={r3, @in6={{0xa, 0x4e21, 0x6, @private2, 0x3}}}, &(0x7f0000009cc0)=0x84) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000d97e94090000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/161, 0x45, 0xa1, 0x1}, 0x28) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x22c00000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r8}, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x400000000000290, 0x0, 0x0) 15.01214761s ago: executing program 5 (id=5411): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd3c00008500000041", @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8005}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$xdp(0x2c, 0x3, 0x0) 14.949879587s ago: executing program 1 (id=5412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x61e2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000180)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff2c00048005000300050000000500030002000000050003000200000005000300000000000500030080ff07000800020002"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000000c0)=0x26) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="02000000010000000d1d0014711f5f5c15912a101283d9000000043f439069dbc38f08aab74ef89ba421dffeb4657785a83ad96a4d83ec8e6ce7627b0f3489302642bff65b1dc84eeee5e80038f289f25bafe70bd98a3d1921543e24486af30cd8f309c8ff075f10eb84029680ad220567a223cf4b52e66ef39fa46c0694a2599760e80b67a37d43872f9b5f4e20207e03592dd3cb21a6724bb1a59498890b820ea07116d5cc81568bd9436bc8501d2134f2e95ae6d365bd09b54d6864360602f562c830f121233c5969b78d4efbf3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0200006001000000020000c0060200004c36e155179d5575"], 0x48}, 0x1, 0x0, 0x0, 0x20002804}, 0x800) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 14.773704056s ago: executing program 2 (id=5413): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8847}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x3}]}, 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r3 = socket(0xa, 0x3, 0x38f) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r3}, 0x18) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xae1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x80) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000640)=0x1, 0x32) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) getsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000002280)=""/159, &(0x7f0000002340)=0x9f) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000002380), &(0x7f00000023c0)=0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "00000001", "3b8eda4d6920ba22"}, 0x28) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r9, 0x89fd, &(0x7f0000000100)={'veth1_to_bond\x00', @ifru_names='ipvlan0\x00'}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) 14.29367015s ago: executing program 5 (id=5414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x11) socketpair(0x18, 0x4, 0x8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f00000004c0)={0x39c, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x39e}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x72}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x34c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "5d3c5c97124ae4d80fccb54f14965bbd8b51a6bfe99c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc0d6}, @TIPC_NLA_NODE_ID={0xef, 0x3, "0be9952c5eb351e41ed0f72c6ca55760d6c64f0f64a2d717286081a9376aad48f5a1f1ba739aaf4db44bb4be46ea067ea3d5c393b2907b2d54ab62c8eb47f37b5a27d8fd8ec5a0ca773d53d5d9b97942299a9acb2d61b157550c5cff9fc386e044be62de548f578a9ab741745fdf9ddae91039a06a9a2bcbede16f00b88d089c49d7149850e8831e744450529469c83882bade7892469a80e968b12b5f702434de835e229722ad59fae27f6c4b372ad984f18f3ed62d8df04acdfa3adc71d1a0fb7653055a84f9173ca9be60842e4537add9e6d2f446e66e550fc0c52258d9af9a23a7b96aff9fa6e2000c"}, @TIPC_NLA_NODE_ID={0xf3, 0x3, "81548c3fba385f6eac20f991d3fec19d303edec054ddcd65862a5df7890c008b6e4583ac779d4f751743f2ee61f7cc670817cffc2f93764016291f0b150df06eebc046755704868bf7cfbd0c45d03ee5814de6696223efed4f1f5ce5af014ec049b560e57971d5f8eabe447f3be5f047f9759f8924ff52aa1b9537cc5c9757eae3e55b657491f45717d52abb08e23858b3029b84988b361fdade80a1ff68335aeb96b23b01f5c7ed161c79e86ae7fd28bc4baec53ac8fdcb67ba42e062c99c28ab1db17c9214683ef965fc717dfca454f0359081a99b23241dd4ff9546aec63d0189243d6bc055930b70c5a91e3975"}, @TIPC_NLA_NODE_ID={0xc5, 0x3, "699c2395eabdb19f856f25c4c84aa5ea61cd50cac6b4e595f49d2be3527574321648706fe2d1f1f4dc344be872d27e9ca12013d8f366109b72c95a979d8b8fac13338ae3d0cde7b2f4541daea6b78d9629f0b39cad3b69efed1dbc243ad4dcd01590d831b7b859eeafef7d3ca024429686e7774a0f48045e9a0d3855761314365d8fa5ef162be9d79cbbb79709d942603b28b22bc5cca179a58df8db9d59f614c2463f0bd61c14c286860d1b46b42cffc6dfe182a3cac8957ac25a32e82578dbcc"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "1197c287781077911e0a28665a0667430e5b8b897141d41cae"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd03}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x20004440}, 0x44) syz_emit_ethernet(0x3d5, &(0x7f0000000900)={@remote, @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_mc={0x8848, {[{0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xb2, 0x0, 0x1}], @ipv4=@gre={{0x48, 0x4, 0x3, 0x3b, 0x3b3, 0x64, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x82, 0xa, "a303c4ce660508d5"}, @timestamp_prespec={0x44, 0x3c, 0x8e, 0x3, 0xb, [{@multicast1, 0x10000}, {@local, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0x1f}, {@rand_addr=0x64010102, 0x5}, {@empty, 0x2}, {@empty, 0x4}]}, @timestamp={0x44, 0xc, 0x59, 0x0, 0x5, [0x100, 0x4]}, @timestamp={0x44, 0x24, 0x31, 0x0, 0x2, [0x0, 0x6, 0x4, 0x8, 0x8, 0x8001, 0x8, 0xf]}, @rr={0x7, 0x17, 0x20, [@remote, @multicast1, @loopback, @rand_addr=0x64010101, @local]}, @cipso={0x86, 0x9, 0x2, [{0x7, 0x3, "17"}]}, @timestamp={0x44, 0xc, 0xe1, 0x0, 0xf, [0x3, 0x1]}, @ssrr={0x89, 0x13, 0x17, [@rand_addr=0x64010101, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x54, 0xdf, 0x1, 0x4, [{@loopback, 0x7ff}, {@private=0xa010102, 0x7ff}, {@multicast2, 0xc}, {@loopback, 0x8}, {@rand_addr=0x64010102, 0x1}, {@local, 0x2}, {@empty, 0x6be2}, {@rand_addr=0x64010102, 0x4}, {@broadcast, 0x3}, {@loopback, 0x7}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x2c, 0x3, [0x5, 0x3], "70cb5a7db2a76f8cb736ad8fa81c270742fff2e2e79e4deb3520191e09f006cc88988276380e2fdc02c4daa8"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "dde9e92725740fd0ebc34c682a4740c655ee8afa3afdb4c895958e1814bf78362e650f240b39a07c613e75a95d0dc95f6cb7dfc01ee21a2927d006740c9ede0edfd241379a225fe511b0f70a4afed99d0f75637efa28abdbdfeb08285b5f6adc8b1910ad861a7b3d20d93eb74a909f8948f7ad6b39e82d1d14134ac86caa3f547b815df43ac308f965aa8aa608a6451cf4473a529a6aa6af598bcf203e96747a4ee5d298d8f219ee7a48547658b3cf4fb0176fa4702ba34bd99ef65617498173a5ecc04db1cf9084a503b4c5c7f59027a73942c43c049af966626cc74f3ba1dfa8fb103214a5108ff2b1da878b9552d0bcc81ef90d6f8669"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x73e], "5c03edaf26cc5c2a4bead3733a981f878eb0ddc56e02750c6ec0f876a348d72b60252ea0621e34419d92fd1dc0cbbe2ab55847217a49856a85ed684d18855e77dee40068a51b6c5d4d98fddff7e045e2e16f6bda8db6615cdbff17f32a065664b8fc88bda163ee962876571966146ebeeee8f07a5b6d5dc00ddac372b43ee737c77cbc077c9186c95c0513a6214f07105fe860cf01f76ca4d4764e3e9b8697f5612bfc84a684035ee6b6213fd36d6270678f1f7c3fa757ff2b86126511764cdf6c52847a6a69f53114d722dd6ab30411d8783b7d56d34760ac9ff5dfb920363da9e3ad7c069b46fa4a81682a2c4286f795"}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x5, 0x1, 0x0, 0x0, 0x3, 0xbf}, 0x1, {0x80000001}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0xc, 0x2, 0x0, 0x2, 0x2, 0x2}, 0x2, {0x0, 0xfffc, 0x3, 0x1e, 0x1}}}, {0x8, 0x6558, 0x1, "abcae6c0dcc645a64ffe3f16b4e5af6eb50ab06b4de0ae6e5ec44dfb201780b4615666f7e502d1ed450c312c9e7e9c068f60f71d"}}}}}}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r4) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x58, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x58}}, 0x4000001) recvmsg(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000e80)=@vsock, 0x80, &(0x7f0000001540)=[{&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/17, 0x11}, {&(0x7f0000000f80)=""/231, 0xe7}, {&(0x7f0000001080)=""/92, 0x5c}, {&(0x7f0000001100)=""/182, 0xb6}, {&(0x7f00000011c0)=""/219, 0xdb}, {&(0x7f00000012c0)=""/173, 0xad}, {&(0x7f0000001380)=""/104, 0x68}, {&(0x7f0000001400)=""/54, 0x36}, {&(0x7f0000001440)=""/204, 0xcc}], 0xa, &(0x7f0000001600)=""/33, 0x21}, 0x23) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000016c0)={'sit0\x00', @multicast}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001740)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x98, r7, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x44044}, 0x20000881) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000018c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001900)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000001940)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @empty}], 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000019c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x10000, 0x0, r8, 0x7fff, '\x00', r9, r11, 0x0, 0x1, 0x2}, 0x50) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000001a80)={0x8, 'veth0_to_team\x00', {'tunl0\x00'}, 0x2}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)=@getchain={0x4c, 0x66, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xfff3, 0x9}, {0x7, 0x10}}, [{0x8, 0xb, 0x8a87}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x63}, {0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008081}, 0x4000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000001c40), r0) sendmsg$GTP_CMD_ECHOREQ(r13, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x58, r14, 0x20, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_FAMILY={0x5, 0xd, 0x29}, @GTPA_TID={0xc}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x800) 14.073231593s ago: executing program 5 (id=5415): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9bf31d0dd9b2f6b7, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0x2c, 0x7, 0x7}) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe1b) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x208) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 14.036076995s ago: executing program 2 (id=5416): getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080)=r0, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1a, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @map_fd={0x18, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0x11, 0xce, &(0x7f0000000240)=""/206, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x1, 0x7, 0xc}, {0x1, 0x4, 0xd, 0xc}, {0x2, 0x4, 0xa, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000000c0)='ext4_es_insert_delayed_block\x00', r1, 0x0, 0x7ff}, 0x18) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r5, r2, 0x3, 0x4, 0x4}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), r2) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', r5, 0x4, 0x4, 0x7, 0xfffffff7, 0x0, @empty, @rand_addr=' \x01\x00', 0x8, 0x40, 0x4, 0x4}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r6, 0x42a, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x10) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0xfffffffffffffffc, &(0x7f0000000800)) sendmsg$AUDIT_GET(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3e8, 0x400, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008000) (async) r8 = accept4(r3, &(0x7f0000000940)=@x25, &(0x7f00000009c0)=0x80, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl1\x00', r5, 0x4, 0x2, 0x2, 0x2abf, 0x18, @mcast1, @private2={0xfc, 0x2, '\x00', 0x5}, 0x1, 0x20, 0x6, 0x41}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000800) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={r2, 0x20, &(0x7f0000000d00)={&(0x7f0000000c00)=""/86, 0x56, 0x0, &(0x7f0000000c80)=""/78, 0x4e}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x10000, 0x0) (async, rerun: 32) ioctl$int_out(r8, 0x2, &(0x7f0000000dc0)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000e00)=@assoc_value={r0, 0x3ff}, &(0x7f0000000e40)=0x8) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r10, 0x4018f514, &(0x7f0000000e80)={0x400, 0x9, 0x6}) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x60, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x200440d0}, 0x60) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001000)={r0, 0x4, 0x3, [0x2, 0x7fff, 0x6]}, &(0x7f0000001040)=0xe) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000001080)=@sack_info={r11, 0x9, 0x7}, 0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000010c0)={r0, @in6={{0xa, 0x4e20, 0x4, @private0, 0x7ba2}}}, 0x84) (async) r12 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000011c0)={0x6, &(0x7f0000001180)=[{0x7, 0x40, 0x6, 0xffffffff}, {0x7, 0xe, 0x3, 0xffffffff}, {0x3, 0x6b, 0x5, 0x4}, {0x1, 0x8, 0x6, 0x4e844d44}, {0xfff8, 0x3, 0x9, 0xd82}, {0xfff, 0x5, 0x43, 0x7}]}, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), r8) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000001240)=r0, 0x4) 13.972606124s ago: executing program 4 (id=5417): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) shutdown(r0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) 13.869083898s ago: executing program 2 (id=5418): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = accept4$packet(r0, 0x0, &(0x7f0000000000), 0x800) accept$packet(r2, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) 13.833275633s ago: executing program 4 (id=5419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r7, 0x111, 0x3, 0x0, &(0x7f0000000080)) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) getsockopt(r7, 0x111, 0x3, 0x0, &(0x7f0000000080)) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) (async) 13.493017033s ago: executing program 4 (id=5420): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000200)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) 13.446815385s ago: executing program 4 (id=5421): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x401, 0x0, r1, 0xc33, '\x00', r2, r3, 0x2, 0x4, 0x3}, 0x50) r5 = socket$inet6(0xa, 0x5, 0xfff) r6 = socket$inet(0x2, 0x2, 0x2) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0x3, 0xa, 0x7, 0xd, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x0, 0xb, 0x1, 0x0, 0xffffffffffffffc0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0xb7f, 0x21, &(0x7f0000000380)=""/33, 0x40f00, 0x0, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[r1, r1], &(0x7f0000000400)=[{0x2, 0x2, 0xb, 0x1}, {0x3, 0x5, 0x0, 0x4}, {0x3, 0x3, 0x2, 0x7}, {0x2, 0x4, 0xe, 0x4}, {0x5, 0x3, 0x8}, {0x1, 0x1, 0x6, 0x5}, {0x3, 0x2, 0x9, 0xa}, {0x4, 0x3, 0x3, 0x8}, {0x0, 0x5, 0x7, 0x8}], 0x10, 0x400}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/pid\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000780)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=@migrate={0x98, 0x21, 0x10, 0x70bd28, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0xc4, 0x4, 0x4e23, 0x6, 0xa, 0x20, 0xa0, 0x1d, r8, r9}, 0x6e6bb5}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}}, @extra_flags={0x8, 0x18, 0xb}, @srcaddr={0x14, 0xd, @in6=@local}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r10, &(0x7f0000000900), &(0x7f0000000940)=0x10, 0x80800) sendmsg$nl_xfrm(r7, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)=@getpolicy={0xf8, 0x15, 0x100, 0x70bd29, 0x25dfdbfc, {{@in=@broadcast, @in=@remote, 0x4e23, 0xf2e9, 0x4e21, 0x9, 0xba7af81257b2db81, 0x60, 0x0, 0x2f, 0x0, r9}, 0x6e6bb7, 0x1}, [@mark={0xc, 0x15, {0x35075b, 0x7}}, @algo_crypt={0x99, 0x2, {{'cbc(cast5)\x00'}, 0x288, "aeeb74474297a0617b646d96a09a7fca11abfa73250b86ac2c5c3f0e4badec2619d3b625b444ad8068161e118e40003511358713c16029854c5022dba0fc4017be6b143be825e38c804e6a5de68d2bf6d9"}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8804}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x101, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000b40)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], &(0x7f0000000b80)='syzkaller\x00', 0xa1, 0xf1, &(0x7f0000000bc0)=""/241, 0x41000, 0xc, '\x00', r2, 0x1b, r3, 0x8, &(0x7f0000000cc0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0x3, 0x2}, 0x10, r11, 0x0, 0x3, 0x0, &(0x7f0000000d80)=[{0x0, 0x5, 0xc, 0x4}, {0x5, 0x2, 0x4, 0xc}, {0x1, 0x5, 0x1, 0x1}], 0x10, 0xe}, 0x94) syz_emit_ethernet(0x9f, &(0x7f0000000e80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x2, 0x1, 0x3}}, {@x25={0x805, {0x2, 0x4, 0x1b, "b2684745be3c92820469acd30e3e31d6a2380ce5f5b65d568366e625408bc0c8602bf8fea8fe395bd22999403fa522387e0e032a60cac160e19b76d682dafbe49308fb010043257d0775e082e1b894e78fdd7ce0a08205a5a962d9583ed562ad752b6290cc90ff2acad2e22d3412ea6016d332f0ef2aca25f43a190fcc53c91391663d14f1e6"}}}}, &(0x7f0000000f40)={0x0, 0x1, [0x44e, 0x2f7, 0x278, 0xd1d]}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) getpeername$l2tp6(r5, &(0x7f0000000f80)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000fc0)=0x20) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r12, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r13, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000001140)={0x2, @bcast, @netrom={'nr', 0x0}, 0x3, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) socket$nl_netfilter(0x10, 0x3, 0xc) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000001240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000001300)={&(0x7f00000011c0), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r14, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 13.121774391s ago: executing program 4 (id=5422): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x8000) ioctl$SIOCSIFMTU(r9, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket(0x1, 0x803, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x16, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x5, 0x5, 0x1, 0x4439481481fe895f, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0xcb, &(0x7f0000000480)=""/203, 0x41100, 0x32, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[{0x1, 0x2, 0x7, 0xa}, {0x1, 0x3, 0x8, 0xc}], 0x10, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='wake_reaper\x00', r11, 0x0, 0x2}, 0x18) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r13 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) 13.071001957s ago: executing program 2 (id=5423): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x2, {0xa, 0x4e26, 0x8, @mcast2, 0x3}}}, 0x3a) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000140)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(streebog256)\x00'}, 0x58) 13.046946395s ago: executing program 5 (id=5424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20090}, 0x4004004) (async) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r4, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3}}, 0x24) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6, 0x10, 0xff, 0x3}) 0s ago: executing program 33 (id=5408): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000b80)={{0x0, 0xfffffffffffffff6, 0x4, 0x6, 0x0, 0x3, 0x3042, 0x7, 0x2, 0x8f, 0x0, 0x200, 0xffffffffffffffff, 0x80, 0x70}}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYRES16=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') unshare(0x6a040000) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000004a00030000000000000000000a0080", @ANYRES32=0x0, @ANYBLOB="0080"], 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): [T22032] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4013'. [ 939.219769][T22039] SET target dimension over the limit! [ 939.237883][T22039] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4016'. [ 939.249231][T22041] netlink: 'syz.2.4017': attribute type 12 has an invalid length. [ 939.363499][ T30] audit: type=1800 audit(1768845258.102:13): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4018" name=CB dev="tmpfs" ino=1142 res=0 errno=0 [ 939.669298][T22059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4021'. [ 939.691323][T22059] netlink: 'syz.1.4021': attribute type 1 has an invalid length. [ 939.786804][T22059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4021'. [ 939.806944][T22059] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 940.054508][T22080] tipc: Enabled bearer , priority 0 [ 940.073656][T22080] syzkaller0: entered promiscuous mode [ 940.079465][T22080] syzkaller0: entered allmulticast mode [ 940.341415][T22097] tipc: Resetting bearer [ 940.398354][T22079] tipc: Resetting bearer [ 940.443623][T22079] tipc: Disabling bearer [ 941.508375][T22144] erspan0: left promiscuous mode [ 941.526021][T22144] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 942.033861][T22165] netlink: 'syz.1.4051': attribute type 5 has an invalid length. [ 942.043868][T22171] batadv0: mtu less than device minimum [ 942.217128][T22169] erspan0: left allmulticast mode [ 942.223881][T22169] erspan0: left promiscuous mode [ 942.229393][T22169] bridge0: port 1(erspan0) entered disabled state [ 943.142308][T22182] __nla_validate_parse: 9 callbacks suppressed [ 943.142328][T22182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4059'. [ 943.173607][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 943.256805][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 943.267286][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 943.276645][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 943.295509][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 943.305984][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 943.324691][T22183] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 943.356376][T22183] xfrm0 speed is unknown, defaulting to 1000 [ 943.437044][T22184] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 943.492756][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4061'. [ 943.566666][T22192] syzkaller0: entered promiscuous mode [ 943.586828][T22192] syzkaller0: entered allmulticast mode [ 943.733807][T22184] xfrm0 speed is unknown, defaulting to 1000 [ 944.024425][T22203] IPVS: Error connecting to the multicast addr [ 944.183887][T22205] vlan0: entered allmulticast mode [ 944.189470][T22205] bridge_slave_0: entered allmulticast mode [ 944.198994][T22205] bridge0: port 2(vlan0) entered blocking state [ 944.222045][T22212] netlink: 'syz.1.4067': attribute type 3 has an invalid length. [ 944.230269][T22205] bridge0: port 2(vlan0) entered disabled state [ 944.239067][T22205] vlan0: entered promiscuous mode [ 944.244799][T22212] netlink: 'syz.1.4067': attribute type 1 has an invalid length. [ 944.252700][T22212] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4067'. [ 944.271918][ T30] audit: type=1804 audit(1768845263.012:14): pid=22212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4067" name="/newroot/230/cgroup.controllers" dev="tmpfs" ino=1200 res=1 errno=0 [ 944.299517][T22205] bridge_slave_0: entered promiscuous mode [ 944.323247][ T30] audit: type=1800 audit(1768845263.032:15): pid=22212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4067" name="cgroup.controllers" dev="tmpfs" ino=1200 res=0 errno=0 [ 944.766046][T22224] smc: net device wlan0 applied user defined pnetid SYZ0 [ 944.800997][T22224] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 944.808949][T22226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4071'. [ 944.832137][T22226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4071'. [ 945.152562][T22184] chnl_net:caif_netlink_parms(): no params data found [ 945.153273][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 945.180570][T22235] netlink: 'syz.2.4073': attribute type 30 has an invalid length. [ 945.193989][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4073'. [ 945.212669][T22242] Bluetooth: MGMT ver 1.23 [ 945.327111][T22245] netlink: 'syz.4.4075': attribute type 12 has an invalid length. [ 945.401212][ T5842] Bluetooth: hci0: command tx timeout [ 945.550095][T22184] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.570212][T22184] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.588946][T22184] bridge_slave_0: entered allmulticast mode [ 945.611138][T22184] bridge_slave_0: entered promiscuous mode [ 945.619649][T22253] nbd0: detected capacity change from 0 to 127 [ 945.634106][T22184] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.649588][T22251] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4076'. [ 945.649607][T22258] netlink: 'syz.4.4076': attribute type 10 has an invalid length. [ 945.661226][T22184] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.682141][T22184] bridge_slave_1: entered allmulticast mode [ 945.690406][T22253] siw: device registration error -23 [ 945.697489][T22257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4078'. [ 945.709163][ T5842] block nbd0: Receive control failed (result -32) [ 945.717172][T22184] bridge_slave_1: entered promiscuous mode [ 945.835105][T22261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4079'. [ 945.868857][T22184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.927436][T22184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.058438][T22184] team0: Port device team_slave_0 added [ 946.083642][T22184] team0: Port device team_slave_1 added [ 946.198914][T22184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.214309][T22184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.243364][T22184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.257286][T22184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.273472][T22184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.302720][T22184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.473960][T22279] netlink: 'syz.1.4084': attribute type 13 has an invalid length. [ 946.477109][T22184] hsr_slave_0: entered promiscuous mode [ 946.512692][T22184] hsr_slave_1: entered promiscuous mode [ 946.521530][T22279] netlink: 'syz.1.4084': attribute type 17 has an invalid length. [ 946.531190][T22184] debugfs: 'hsr0' already exists in 'hsr' [ 946.536968][T22184] Cannot create hsr debugfs directory [ 946.595570][T22280] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 946.609760][T22280] xfrm0 speed is unknown, defaulting to 1000 [ 946.642655][T22283] netlink: 'syz.4.4085': attribute type 12 has an invalid length. [ 946.683897][T22279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 947.481679][ T5842] Bluetooth: hci0: command tx timeout [ 947.934050][T22184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 948.026333][T22184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 948.079066][T22184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 948.108219][T22184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 948.184657][T22326] netlink: 'syz.2.4095': attribute type 1 has an invalid length. [ 948.200545][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 948.208658][ C1] lec:lec_tx_timeout: lec0 [ 948.224106][T22329] netlink: 'syz.1.4096': attribute type 12 has an invalid length. [ 948.386576][T22339] netlink: 'syz.3.4097': attribute type 13 has an invalid length. [ 948.394742][T22339] netlink: 'syz.3.4097': attribute type 17 has an invalid length. [ 948.502219][T22339] bridge0: port 3(team0) entered blocking state [ 948.508706][T22339] bridge0: port 3(team0) entered forwarding state [ 948.550811][T22339] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.584964][T22339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 948.724042][T22184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.767702][T22184] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.807620][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.814942][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.866740][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.874091][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.956475][T22365] __nla_validate_parse: 1 callbacks suppressed [ 948.956493][T22365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4105'. [ 949.154919][T22372] syzkaller1: entered allmulticast mode [ 949.196390][T22374] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4104'. [ 949.373621][T22381] batadv_slave_0: entered promiscuous mode [ 949.385550][T22381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4108'. [ 949.419913][T22380] batadv_slave_0: left promiscuous mode [ 949.549118][T22184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.561037][ T5840] Bluetooth: hci0: command tx timeout [ 949.792958][T22394] netlink: 'syz.2.4112': attribute type 21 has an invalid length. [ 949.824233][T22394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4112'. [ 949.860646][T22394] netlink: 'syz.2.4112': attribute type 1 has an invalid length. [ 949.913486][T22394] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 950.209517][T22184] veth0_vlan: entered promiscuous mode [ 950.229138][T22184] veth1_vlan: entered promiscuous mode [ 950.376152][T22184] veth0_macvtap: entered promiscuous mode [ 950.388966][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 950.523261][T22184] veth1_macvtap: entered promiscuous mode [ 950.665446][T22184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.715805][T22184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.772950][T20638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.828071][T20638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.843323][T22415] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4117'. [ 950.859105][T20638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.904523][T20638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.185594][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.213831][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.301860][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4120'. [ 951.314110][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.342951][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.640674][ T5842] Bluetooth: hci0: command tx timeout [ 952.038279][T22453] netlink: 'syz.2.4126': attribute type 7 has an invalid length. [ 952.212011][T22464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4122'. [ 952.231113][T22464] nbd: must specify a size in bytes for the device [ 952.459301][T22467] dvmrp1: entered allmulticast mode [ 952.501908][T22471] netlink: 'syz.2.4129': attribute type 3 has an invalid length. [ 952.509702][T22471] netlink: 'syz.2.4129': attribute type 7 has an invalid length. [ 952.521456][T22471] netlink: 'syz.2.4129': attribute type 8 has an invalid length. [ 952.533823][T22467] dvmrp1: left allmulticast mode [ 952.548708][T22471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4129'. [ 952.873434][T22475] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 952.926768][T22475] xfrm0 speed is unknown, defaulting to 1000 [ 953.178020][T22496] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 953.376723][T22505] geneve2: entered promiscuous mode [ 953.388411][T17958] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 953.432147][T17958] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 953.488006][T17958] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 953.536878][T17958] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 953.551657][T22511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4139'. [ 953.586050][T22496] xfrm0 speed is unknown, defaulting to 1000 [ 953.667218][T22513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4140'. [ 953.678809][T19858] IPVS: starting estimator thread 0... [ 953.723165][T22513] validate_nla: 1 callbacks suppressed [ 953.723185][T22513] netlink: 'syz.5.4140': attribute type 3 has an invalid length. [ 953.775507][T22516] IPVS: using max 26 ests per chain, 62400 per kthread [ 953.996155][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4144'. [ 954.025932][T22530] netlink: 'syz.4.4144': attribute type 20 has an invalid length. [ 954.044947][T22530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4144'. [ 954.748377][T22526] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 954.767460][T22526] xfrm0 speed is unknown, defaulting to 1000 [ 955.371005][T22549] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 955.753562][T22549] xfrm0 speed is unknown, defaulting to 1000 [ 956.152882][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4153'. [ 956.504943][T22581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4157'. [ 956.657026][T22588] netlink: 'syz.1.4160': attribute type 12 has an invalid length. [ 956.897708][T22586] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 956.963380][T22586] xfrm0 speed is unknown, defaulting to 1000 [ 957.288515][T22604] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4162'. [ 957.404365][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4163'. [ 957.537221][T22614] syzkaller0: entered promiscuous mode [ 957.553137][T22614] syzkaller0: entered allmulticast mode [ 957.582056][T22614] 0: reclassify loop, rule prio 0, protocol 800 [ 957.855392][T22626] netlink: 'syz.2.4169': attribute type 16 has an invalid length. [ 957.959651][T22631] netlink: 'syz.1.4171': attribute type 12 has an invalid length. [ 958.130764][T22636] netlink: 'syz.5.4170': attribute type 29 has an invalid length. [ 958.207628][T22644] FAULT_INJECTION: forcing a failure. [ 958.207628][T22644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.229000][T22637] xt_hashlimit: size too large, truncated to 1048576 [ 958.248333][T22644] CPU: 1 UID: 0 PID: 22644 Comm: syz.4.4175 Not tainted syzkaller #0 PREEMPT(full) [ 958.248363][T22644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.248382][T22644] Call Trace: [ 958.248391][T22644] [ 958.248400][T22644] dump_stack_lvl+0xe8/0x150 [ 958.248436][T22644] should_fail_ex+0x414/0x560 [ 958.248571][T22644] _copy_to_user+0x31/0xb0 [ 958.248622][T22644] simple_read_from_buffer+0xe1/0x170 [ 958.248685][T22644] proc_fail_nth_read+0x1b3/0x220 [ 958.248734][T22644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 958.248761][T22644] ? rw_verify_area+0x2a6/0x4d0 [ 958.248835][T22644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 958.248860][T22644] vfs_read+0x200/0xa30 [ 958.248880][T22644] ? fdget_pos+0x247/0x320 [ 958.248933][T22644] ? __pfx___mutex_lock+0x10/0x10 [ 958.248962][T22644] ? __pfx_vfs_read+0x10/0x10 [ 958.248985][T22644] ? __fget_files+0x2a/0x420 [ 958.249017][T22644] ? __fget_files+0x3a0/0x420 [ 958.249042][T22644] ? __fget_files+0x2a/0x420 [ 958.249085][T22644] ksys_read+0x145/0x250 [ 958.249116][T22644] ? __pfx_ksys_read+0x10/0x10 [ 958.249151][T22644] do_syscall_64+0xec/0xf80 [ 958.249178][T22644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.249198][T22644] ? trace_irq_disable+0x37/0x100 [ 958.249226][T22644] ? clear_bhb_loop+0x60/0xb0 [ 958.249258][T22644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.249283][T22644] RIP: 0033:0x7fd66cd8e15c [ 958.249303][T22644] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 958.249322][T22644] RSP: 002b:00007fd66db49030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 958.249346][T22644] RAX: ffffffffffffffda RBX: 00007fd66cfe5fa0 RCX: 00007fd66cd8e15c [ 958.249361][T22644] RDX: 000000000000000f RSI: 00007fd66db490a0 RDI: 0000000000000006 [ 958.249375][T22644] RBP: 00007fd66db49090 R08: 0000000000000000 R09: 0000000000000000 [ 958.249388][T22644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.249400][T22644] R13: 00007fd66cfe6038 R14: 00007fd66cfe5fa0 R15: 00007ffcd769fa58 [ 958.249436][T22644] [ 958.254178][T22637] xt_hashlimit: max too large, truncated to 1048576 [ 958.916329][T22672] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4181'. [ 958.946453][T22656] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 958.983663][T22662] tipc: Enabled bearer , priority 0 [ 959.031031][T22668] syzkaller0: entered promiscuous mode [ 959.069427][T22668] syzkaller0: entered allmulticast mode [ 959.263700][T22654] tipc: Resetting bearer [ 959.275770][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4182'. [ 959.286653][T22682] netlink: 'syz.4.4184': attribute type 12 has an invalid length. [ 959.377932][T22678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4182'. [ 959.388533][T22652] tipc: Resetting bearer [ 959.411755][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4182'. [ 959.424595][T22678] netlink: 'syz.5.4182': attribute type 13 has an invalid length. [ 959.484055][T22652] tipc: Disabling bearer [ 959.577236][T22692] sctp: [Deprecated]: syz.1.4185 (pid 22692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 959.577236][T22692] Use struct sctp_sack_info instead [ 959.938931][T22704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 960.144888][T22707] netlink: 'syz.2.4190': attribute type 1 has an invalid length. [ 960.610874][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 960.784665][T22717] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 960.838844][T22717] xfrm0 speed is unknown, defaulting to 1000 [ 961.223487][T22730] netlink: 'syz.3.4195': attribute type 13 has an invalid length. [ 961.436583][T22738] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 961.461060][T22738] pim6reg1: entered promiscuous mode [ 961.471340][T22741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4198'. [ 961.491209][T22738] pim6reg1: entered allmulticast mode [ 961.673945][T22745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4200'. [ 961.732900][T22747] netlink: 'syz.5.4201': attribute type 1 has an invalid length. [ 962.176933][T22764] netlink: 'syz.3.4204': attribute type 12 has an invalid length. [ 962.405768][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4207'. [ 962.449978][T22776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4207'. [ 962.588043][T22783] netlink: 'syz.5.4209': attribute type 13 has an invalid length. [ 962.619117][T22783] netlink: 'syz.5.4209': attribute type 17 has an invalid length. [ 962.819444][T22783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 962.838667][T22791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4211'. [ 962.909228][T22792] bond2 (unregistering): Released all slaves [ 963.919580][T22440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.931735][T22801] syzkaller0: entered promiscuous mode [ 963.938914][T22440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.943818][T22801] syzkaller0: entered allmulticast mode [ 964.118591][T22812] netlink: 'syz.5.4218': attribute type 12 has an invalid length. [ 964.382121][T22825] netlink: 'syz.2.4222': attribute type 13 has an invalid length. [ 964.391748][T22825] netlink: 'syz.2.4222': attribute type 17 has an invalid length. [ 964.491564][T22820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4220'. [ 964.523965][T22825] gretap0: entered promiscuous mode [ 964.587589][T22825] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.602674][T22825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 965.257164][T22857] netlink: 'syz.5.4230': attribute type 12 has an invalid length. [ 965.379517][T22863] netlink: 'syz.3.4233': attribute type 13 has an invalid length. [ 965.401261][T22863] netlink: 'syz.3.4233': attribute type 17 has an invalid length. [ 965.433037][T22860] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 965.593206][T22863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 965.681779][T22861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 965.829119][T22874] bond2: option resend_igmp: invalid value (2878) [ 965.838915][T22874] bond2: option resend_igmp: allowed values 0 - 255 [ 965.852963][T22874] bond2 (unregistering): Released all slaves [ 965.904603][T22860] xfrm0 speed is unknown, defaulting to 1000 [ 965.983983][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4236'. [ 966.157596][T22878] netlink: 'syz.2.4236': attribute type 16 has an invalid length. [ 966.197924][T22878] netlink: 'syz.2.4236': attribute type 17 has an invalid length. [ 966.272535][T22882] IPv6: NLM_F_REPLACE set, but no existing node found! [ 966.440041][T22881] xt_CT: No such helper "netbios-ns" [ 966.637716][T22878] bond0: left promiscuous mode [ 966.665835][T22880] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 966.666039][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 966.697493][ T1311] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 65535 - 0 [ 966.707942][ T1311] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 966.747018][ T1311] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 65535 - 0 [ 966.766803][ T1311] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 966.798492][T22880] xfrm0 speed is unknown, defaulting to 1000 [ 966.823369][ T1311] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 65535 - 0 [ 966.856127][ T1311] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 966.900689][ T1311] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 65535 - 0 [ 966.904691][T22894] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4240'. [ 966.930970][ T1311] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 967.065108][T22896] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 967.596450][T22909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4245'. [ 967.835600][T22916] netlink: 'syz.2.4247': attribute type 13 has an invalid length. [ 967.844389][T22916] netlink: 'syz.2.4247': attribute type 17 has an invalid length. [ 967.931970][T22916] gretap0: left promiscuous mode [ 967.994054][T22916] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.020027][T22916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 968.338147][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4249'. [ 968.555768][T22927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4251'. [ 969.205699][T22957] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4256'. [ 969.230777][T22960] xt_cgroup: xt_cgroup: no path or classid specified [ 969.277240][T22945] bridge2: entered promiscuous mode [ 969.307109][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4260'. [ 969.407728][T22967] --map-set only usable from mangle table [ 969.416469][T22969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 969.807550][T22976] netlink: 'syz.5.4265': attribute type 1 has an invalid length. [ 969.915256][T22976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 970.005105][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4265'. [ 970.026826][T22983] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 970.053318][T22983] bond1: (slave batadv1): making interface the new active one [ 970.118961][T22983] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 970.160087][T22962] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4260'. [ 970.304299][T22999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4268'. [ 970.561651][T22986] bond1 (unregistering): (slave batadv1): Releasing active interface [ 970.593220][T22986] bond1 (unregistering): Released all slaves [ 970.809218][T23013] netlink: 'syz.4.4271': attribute type 11 has an invalid length. [ 970.822276][T23013] netlink: 171308 bytes leftover after parsing attributes in process `syz.4.4271'. [ 971.274656][T23030] netlink: 'syz.5.4277': attribute type 10 has an invalid length. [ 971.331023][T23031] netlink: 'syz.5.4277': attribute type 10 has an invalid length. [ 971.365227][T23030] team0: Port device dummy0 added [ 971.396636][T23031] team0: Port device dummy0 removed [ 971.425769][T23031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 971.717207][T23035] tipc: MTU too low for tipc bearer [ 971.889572][T23044] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 971.925440][T23044] xfrm0 speed is unknown, defaulting to 1000 [ 972.116719][T23053] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4284'. [ 972.208766][T23053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4284'. [ 972.219982][T23053] netem: change failed [ 972.286777][T23065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4285'. [ 972.330945][T23065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4285'. [ 972.721755][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4290'. [ 972.767373][T23078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4290'. [ 973.072189][T23090] syzkaller0: entered promiscuous mode [ 973.077943][T23090] syzkaller0: entered allmulticast mode [ 973.097429][T23092] netlink: 'syz.4.4295': attribute type 12 has an invalid length. [ 973.112501][T23089] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 973.131916][T19862] IPVS: starting estimator thread 0... [ 973.208158][T23089] xfrm0 speed is unknown, defaulting to 1000 [ 973.242952][T23098] IPVS: using max 26 ests per chain, 62400 per kthread [ 973.337539][T23100] ip6tnl1: entered promiscuous mode [ 973.351436][T23100] ip6tnl1: entered allmulticast mode [ 973.387791][T23102] pimreg: entered allmulticast mode [ 973.474502][T23077] netlink: 'syz.5.4291': attribute type 1 has an invalid length. [ 974.091992][T23114] netlink: 'syz.2.4302': attribute type 13 has an invalid length. [ 974.127882][T23114] netlink: 'syz.2.4302': attribute type 17 has an invalid length. [ 974.281031][T23114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 974.572420][T23132] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 974.829350][T23127] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 974.887848][T23127] xfrm0 speed is unknown, defaulting to 1000 [ 974.971218][T23147] team0: Device is already in use. [ 975.833920][T23180] tipc: Started in network mode [ 975.843827][T23180] tipc: Node identity beaf0224242a, cluster identity 1 [ 975.854515][T23180] tipc: Enabled bearer , priority 0 [ 975.863839][T23186] __nla_validate_parse: 5 callbacks suppressed [ 975.863857][T23186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4322'. [ 975.998397][T23180] tipc: Disabling bearer [ 976.298737][T23204] netlink: 'syz.4.4328': attribute type 1 has an invalid length. [ 976.414004][T23207] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 976.425559][T23207] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 976.454434][T23207] bond2: (slave xfrm1): making interface the new active one [ 976.466390][T23207] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 976.703101][T23218] tipc: Started in network mode [ 976.708311][T23218] tipc: Node identity 4a7a92780b6f, cluster identity 4711 [ 976.719308][T23218] tipc: Enabled bearer , priority 0 [ 976.786943][T23218] tipc: Disabling bearer [ 976.839686][T23222] bridge1: entered allmulticast mode [ 976.923096][T22440] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.945987][T22440] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.980103][T22440] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.997579][T22440] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.108418][T23237] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4338'. [ 977.216658][T23244] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4341'. [ 977.243068][ T7140] wlan1: Trigger new scan to find an IBSS to join [ 977.285701][T23249] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 977.445973][T23257] netlink: 'syz.3.4344': attribute type 13 has an invalid length. [ 977.455924][T23257] netlink: 'syz.3.4344': attribute type 17 has an invalid length. [ 977.999648][T23257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 978.253196][T23268] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 978.321588][T23268] xfrm0 speed is unknown, defaulting to 1000 [ 978.370250][T23282] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20002 [ 978.371887][T23283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4348'. [ 978.509192][T23285] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.4349'. [ 978.589592][T23287] tipc: Enabled bearer , priority 0 [ 978.855129][T23287] syzkaller0: entered promiscuous mode [ 978.878839][T23287] syzkaller0: entered allmulticast mode [ 978.898775][T23287] tipc: Resetting bearer [ 978.913024][T23299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4354'. [ 979.056197][T23291] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 979.157646][T23310] netlink: 'syz.2.4357': attribute type 13 has an invalid length. [ 979.166336][T23310] netlink: 'syz.2.4357': attribute type 17 has an invalid length. [ 979.232737][T23291] xfrm0 speed is unknown, defaulting to 1000 [ 979.259427][T23310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 979.500116][T20643] tipc: Resetting bearer [ 979.641577][T19866] tipc: Node number set to 2654373791 [ 979.666234][T23324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4362'. [ 979.704103][T23325] tipc: Enabled bearer , priority 0 [ 979.835607][T23324] syzkaller0: entered promiscuous mode [ 979.850690][T23324] syzkaller0: entered allmulticast mode [ 979.997059][T23325] tipc: Resetting bearer [ 980.086575][T23323] tipc: Resetting bearer [ 980.285809][ T7357] wlan1: Trigger new scan to find an IBSS to join [ 982.031107][T23323] tipc: Disabling bearer [ 982.066152][T19866] tipc: Node number set to 2358657835 [ 982.404933][T23353] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 982.446118][T23353] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 982.506515][T23358] nbd: must specify a size in bytes for the device [ 982.987033][T23291] tipc: Resetting bearer [ 983.241824][T20643] wlan1: Trigger new scan to find an IBSS to join [ 983.471343][T23403] netlink: 'syz.2.4380': attribute type 1 has an invalid length. [ 984.091421][T23414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4382'. [ 984.126760][T23414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4382'. [ 984.157473][T23414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4382'. [ 984.222057][ T7357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.619356][T23291] tipc: Disabling bearer [ 985.682621][T23404] batman_adv: batadv0: Interface deactivated: gretap0 [ 985.689464][T23404] batman_adv: batadv0: Removing interface: gretap0 [ 986.062006][T23437] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 986.398022][T23446] tipc: Enabled bearer , priority 0 [ 986.409140][T23446] syzkaller0: entered promiscuous mode [ 986.415453][T23446] syzkaller0: entered allmulticast mode [ 986.484995][T23446] tipc: Resetting bearer [ 986.534659][T23445] tipc: Resetting bearer [ 986.556258][T23445] tipc: Disabling bearer [ 986.693933][T23450] netlink: 'syz.4.4393': attribute type 1 has an invalid length. [ 986.725661][T23450] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4393'. [ 986.750013][T23455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4395'. [ 986.792395][T23455] sctp: [Deprecated]: syz.2.4395 (pid 23455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 986.792395][T23455] Use struct sctp_sack_info instead [ 986.821691][T23453] x_tables: duplicate underflow at hook 2 [ 986.994352][T23466] sctp: [Deprecated]: syz.4.4397 (pid 23466) Use of int in max_burst socket option deprecated. [ 986.994352][T23466] Use struct sctp_assoc_value instead [ 987.109855][T23471] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4398'. [ 987.123818][T23470] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4398'. [ 987.238299][T23475] netlink: 'syz.4.4399': attribute type 10 has an invalid length. [ 987.252474][T23474] netlink: 'syz.4.4399': attribute type 10 has an invalid length. [ 987.449772][T23491] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 987.753335][T23504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4404'. [ 988.494892][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4412'. [ 988.874560][T23558] netlink: 'syz.3.4418': attribute type 3 has an invalid length. [ 988.883978][T23558] netlink: 'syz.3.4418': attribute type 3 has an invalid length. [ 988.911646][T23558] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 988.928023][T23558] bridge4: entered allmulticast mode [ 989.119225][T23562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 989.845951][T23576] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 989.859942][T23576] xfrm0 speed is unknown, defaulting to 1000 [ 989.942007][T23585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4426'. [ 990.587329][T23604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4434'. [ 990.593230][T23601] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4432'. [ 990.808755][T23605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4433'. [ 990.818650][T23607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4433'. [ 990.839342][T23607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4433'. [ 991.124638][T23625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4439'. [ 991.323407][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 991.754630][T23649] gretap1: entered promiscuous mode [ 991.786341][T23649] batman_adv: batadv0: Adding interface: gretap1 [ 991.827440][T23649] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.914825][T23649] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 992.276005][T23669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4454'. [ 992.298269][T23673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4454'. [ 992.427478][T23681] netlink: 'syz.2.4456': attribute type 13 has an invalid length. [ 992.718593][T23701] netlink: 420 bytes leftover after parsing attributes in process `syz.1.4461'. [ 992.774736][T23690] gretap1: entered allmulticast mode [ 993.061496][T23709] syz_tun: entered allmulticast mode [ 993.184804][T23709] syz_tun (unregistering): left allmulticast mode [ 993.585735][T23720] bond2 (unregistering): Released all slaves [ 993.922860][T23737] vlan2: entered promiscuous mode [ 993.942003][T23737] bond0: entered promiscuous mode [ 994.137681][T23752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.390393][T23765] nbd: must specify a size in bytes for the device [ 994.743069][T23772] syzkaller0: entered promiscuous mode [ 994.748615][T23772] syzkaller0: entered allmulticast mode [ 994.790976][T23780] tipc: Enabled bearer , priority 10 [ 995.234097][T23806] xt_hashlimit: max too large, truncated to 1048576 [ 995.258733][T23809] __nla_validate_parse: 14 callbacks suppressed [ 995.258754][T23809] netlink: 7052 bytes leftover after parsing attributes in process `syz.5.4487'. [ 995.275472][T23809] openvswitch: netlink: Message has 8 unknown bytes. [ 995.349143][T23810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4486'. [ 997.088289][T23804] bridge0: port 2(bridge_slave_1) entered listening state [ 997.114601][T23804] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.158871][T23799] ieee80211 phy55: Failed to add default virtual iface [ 997.435141][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 997.650044][T23838] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004 [ 997.727003][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 997.776633][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 997.835165][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 997.852172][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 997.879711][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 997.943517][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 998.020627][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 998.071701][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 998.111594][T23827] netlink: 'syz.3.4491': attribute type 13 has an invalid length. [ 998.130146][T23853] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4499'. [ 998.170840][T23853] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4499'. [ 998.198127][T23852] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 998.222322][T23852] xfrm0 speed is unknown, defaulting to 1000 [ 998.379896][T23861] ip6gre1: entered promiscuous mode [ 998.636536][T23867] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4503'. [ 999.047253][T23887] syzkaller0: entered promiscuous mode [ 999.056060][T23887] syzkaller0: entered allmulticast mode [ 999.076661][T23881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4508'. [ 999.237420][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4510'. [ 999.527823][T23898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4511'. [ 999.637318][T23898] nbd: socks must be embedded in a SOCK_ITEM attr [ 999.985286][T23915] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 1000.137494][T23909] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 1000.198282][T23909] xfrm0 speed is unknown, defaulting to 1000 [ 1000.233966][T23908] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 1000.384853][T23910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4511'. [ 1000.403382][T23927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4517'. [ 1000.413910][T23927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4517'. [ 1000.427689][T23910] bond0: option coupled_control: mode dependency failed, not supported in mode balance-tlb(5) [ 1000.621774][T23930] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 1000.633510][T23928] syzkaller1: entered promiscuous mode [ 1000.639036][T23928] syzkaller1: entered allmulticast mode [ 1000.754184][T23928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1000.802664][T23930] xfrm0 speed is unknown, defaulting to 1000 [ 1001.307979][T23908] xfrm0 speed is unknown, defaulting to 1000 [ 1001.732743][T23960] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1001.746926][T23960] bond3 (unregistering): Released all slaves [ 1002.315191][T23976] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4530'. [ 1003.200017][T24008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 1003.255283][T24008] nbd: must specify a size in bytes for the device [ 1003.677554][T24021] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1003.716650][T24034] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4545'. [ 1003.734347][T24021] validate_nla: 4 callbacks suppressed [ 1003.734367][T24021] netlink: 'syz.2.4542': attribute type 1 has an invalid length. [ 1003.785738][T24034] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4545'. [ 1003.795630][ T30] audit: type=1800 audit(1768845322.532:16): pid=24038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4545" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1711 res=0 errno=0 [ 1004.231817][T24061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4549'. [ 1004.293231][T24057] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1004.404732][T24065] syzkaller0: entered promiscuous mode [ 1004.419373][T24065] syzkaller0: entered allmulticast mode [ 1004.440073][T24065] TC_ACT_REPEAT abuse ? [ 1004.469217][T24065] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1004.628439][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1004.658962][T22602] team0: left allmulticast mode [ 1004.688581][T22602] team0: left promiscuous mode [ 1004.704302][T22602] bridge0: port 1(team0) entered disabled state [ 1005.619151][T24098] xt_cluster: node mask cannot exceed total number of nodes [ 1005.906957][T22602] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 1005.962791][T24116] IPv6: addrconf: prefix option has invalid lifetime [ 1006.198335][T22602] dvmrp0 (unregistering): left allmulticast mode [ 1006.305894][T24130] __nla_validate_parse: 1 callbacks suppressed [ 1006.305913][T24130] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4569'. [ 1006.886991][T22602] bond3 (unregistering): (slave bridge8): Removing an active aggregator [ 1006.897476][T22602] bond3 (unregistering): (slave bridge8): Releasing backup interface [ 1006.906544][T22602] bridge8 (unregistering): left promiscuous mode [ 1006.914703][T22602] bridge8 (unregistering): left allmulticast mode [ 1006.976616][T22602] bond4 (unregistering): (slave bridge9): Releasing active interface [ 1006.985395][T22602] bond4 (unregistering): (slave bridge9): the permanent HWaddr of slave - ae:11:07:9e:a2:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1007.044754][T22602] bond4 (unregistering): (slave bridge10): Releasing active interface [ 1007.798308][T22602] team0: Port device bridge27 removed [ 1007.992767][T22602] bond0 (unregistering): left promiscuous mode [ 1007.998973][T22602] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 1008.031651][T22602] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1008.041878][T22602] bond0 (unregistering): Released all slaves [ 1008.173651][T22602] bond1 (unregistering): Released all slaves [ 1008.189604][T22602] bond2 (unregistering): (slave veth3): Releasing active interface [ 1008.200236][T22602] bond2 (unregistering): Released all slaves [ 1008.345080][T22602] bond3 (unregistering): Released all slaves [ 1008.359360][T22602] bond4 (unregistering): Released all slaves [ 1008.376522][T22602] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1008.386321][T22602] bond5 (unregistering): Released all slaves [ 1008.525040][T22602] bond6 (unregistering): Released all slaves [ 1008.539273][T22602] bond7 (unregistering): Released all slaves [ 1008.673604][T22602] bond8 (unregistering): Released all slaves [ 1008.688856][T22602] bond9 (unregistering): Released all slaves [ 1008.705197][T22602] bond10 (unregistering): Released all slaves [ 1008.747073][T24111] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1008.756119][T24111] syzkaller1: linktype set to 260 [ 1008.799317][T24087] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 1008.839753][T24087] xfrm0 speed is unknown, defaulting to 1000 [ 1008.932412][T22602] : left promiscuous mode [ 1009.071901][T22602] : left promiscuous mode [ 1009.134355][T24151] syzkaller0: entered promiscuous mode [ 1009.139895][T24151] syzkaller0: entered allmulticast mode [ 1009.248499][T22602] tipc: Disabling bearer [ 1009.322879][T22602] tipc: Left network mode [ 1009.455296][T24163] xt_l2tp: invalid flags combination: 8 [ 1009.732867][T24170] erspan0: entered promiscuous mode [ 1009.765948][T24170] erspan0: left promiscuous mode [ 1009.836032][T24183] netlink: 34 bytes leftover after parsing attributes in process `syz.3.4583'. [ 1009.968574][T24170] erspan0: entered promiscuous mode [ 1009.994099][T24170] erspan0: left promiscuous mode [ 1010.065870][T24174] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 1010.092516][T24170] erspan0: entered promiscuous mode [ 1010.105065][T24170] erspan0: left promiscuous mode [ 1010.210446][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 1010.218516][ C1] lec:lec_tx_timeout: lec0 [ 1010.257806][T24170] erspan0: entered promiscuous mode [ 1010.276757][T24170] erspan0: left promiscuous mode [ 1010.343627][T24186] syzkaller1: entered promiscuous mode [ 1010.349527][T24186] syzkaller1: entered allmulticast mode [ 1010.393575][T24174] xfrm0 speed is unknown, defaulting to 1000 [ 1010.485212][T24170] erspan0: entered promiscuous mode [ 1010.523953][T24170] erspan0: left promiscuous mode [ 1010.632022][T24194] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 1010.941829][T24203] batadv2: entered promiscuous mode [ 1011.034897][T24194] xfrm0 speed is unknown, defaulting to 1000 [ 1011.359464][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4590'. [ 1011.385576][T24210] lo: Caught tx_queue_len zero misconfig [ 1011.437643][T24208] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 1011.771651][T24208] xfrm0 speed is unknown, defaulting to 1000 [ 1012.246120][T24225] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4594'. [ 1012.509622][T24231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1012.545678][T24231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1012.578447][T24231] netlink: 'syz.3.4595': attribute type 18 has an invalid length. [ 1012.736780][T24232] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1013.173503][T24238] syzkaller1: entered promiscuous mode [ 1013.179118][T24238] syzkaller1: entered allmulticast mode [ 1014.317904][T14386] ªªªªª9úž‹¿_‘zý speed is unknown, defaulting to 1000 [ 1014.341231][T14386] infiniband syz2: ib_query_port failed (-19) [ 1014.416910][T24246] netlink: 'syz.1.4598': attribute type 1 has an invalid length. [ 1014.645877][T24246] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1014.688535][T24252] xt_TCPMSS: Only works on TCP SYN packets [ 1014.702629][T24252] netlink: 'syz.2.4600': attribute type 13 has an invalid length. [ 1014.742865][T24246] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1015.388222][T24290] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.512517][T24303] netlink: 'syz.1.4611': attribute type 10 has an invalid length. [ 1015.527560][T22602] IPVS: stop unused estimator thread 0... [ 1015.553106][T24299] tipc: Enabled bearer , priority 0 [ 1015.562021][T24299] syzkaller0: entered promiscuous mode [ 1015.567817][T24299] syzkaller0: entered allmulticast mode [ 1015.630890][T24290] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.654897][T24308] netlink: 'syz.3.4612': attribute type 3 has an invalid length. [ 1015.675389][T24300] tipc: Resetting bearer [ 1015.713316][T24299] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4610'. [ 1015.743011][T24308] netlink: 'syz.3.4612': attribute type 3 has an invalid length. [ 1015.774449][T24298] tipc: Resetting bearer [ 1015.851620][T24298] tipc: Disabling bearer [ 1015.897054][T24290] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.976635][T24318] bond0: Caught tx_queue_len zero misconfig [ 1016.107352][T24290] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.148785][T24327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1016.175937][T24327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1016.186723][T24328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1016.373600][T17955] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.477527][T24343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4623'. [ 1016.535621][T24346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4623'. [ 1016.543993][T24343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1016.561954][T17955] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.589651][T24349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4624'. [ 1016.611919][T24347] tipc: Enabled bearer , priority 0 [ 1016.648093][T22602] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.665431][T24339] 8021q: VLANs not supported on ip6_vti0 [ 1016.678447][T24341] syzkaller0: entered promiscuous mode [ 1016.701120][T24341] syzkaller0: entered allmulticast mode [ 1016.719891][T24349] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4624'. [ 1016.738705][T24349] ip6tnl0: Caught tx_queue_len zero misconfig [ 1016.792089][T24351] lo: Caught tx_queue_len zero misconfig [ 1016.836888][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4624'. [ 1016.872228][T22600] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.889530][T24356] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1016.911132][T24347] tipc: Resetting bearer [ 1016.917358][T24356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1016.946334][T24340] tipc: Resetting bearer [ 1016.994395][T24340] tipc: Disabling bearer [ 1017.056128][T24359] netlink: 'syz.4.4626': attribute type 4 has an invalid length. [ 1017.117456][T24359] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4626'. [ 1017.143512][T24359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4626'. [ 1017.409365][T24363] xfrm0 speed is unknown, defaulting to 1000 [ 1017.686578][T24377] netlink: 'syz.5.4631': attribute type 4 has an invalid length. [ 1018.087909][T24385] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1018.303481][T24403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4635'. [ 1018.378335][T24392] xfrm0 speed is unknown, defaulting to 1000 [ 1018.676055][T24420] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1018.727959][T24420] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20001 [ 1018.915266][T24427] netlink: 'syz.4.4642': attribute type 5 has an invalid length. [ 1019.837127][T24443] netlink: 'syz.3.4646': attribute type 1 has an invalid length. [ 1020.119308][T24449] netlink: 'syz.3.4649': attribute type 9 has an invalid length. [ 1020.128706][T24449] netlink: 'syz.3.4649': attribute type 11 has an invalid length. [ 1020.142139][T24449] netlink: 'syz.3.4649': attribute type 12 has an invalid length. [ 1020.480871][T24456] macvtap1: entered promiscuous mode [ 1020.486277][T24456] macvtap1: entered allmulticast mode [ 1020.735408][T24466] bridge_slave_1: left promiscuous mode [ 1020.781152][T24466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.928445][T24466] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1021.022572][T24477] IPv6: sit1: Disabled Multicast RS [ 1021.383420][T24487] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1021.433819][T24487] 0ªî{X¹¦: entered allmulticast mode [ 1021.439843][T24487] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1021.675401][T24493] __nla_validate_parse: 8 callbacks suppressed [ 1021.675422][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4663'. [ 1021.903336][T24495] syzkaller0: entered promiscuous mode [ 1021.919456][T24495] syzkaller0: entered allmulticast mode [ 1021.962319][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4665'. [ 1022.817356][T24512] netlink: 'syz.2.4668': attribute type 4 has an invalid length. [ 1022.834437][T24512] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4668'. [ 1023.325191][T19125] IPVS: ip_vs_send_async error -101 [ 1024.149699][T24498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.499679][T24528] xfrm0 speed is unknown, defaulting to 1000 [ 1024.523508][T24521] netlink: 'syz.3.4671': attribute type 3 has an invalid length. [ 1024.532927][T24521] netlink: 'syz.3.4671': attribute type 1 has an invalid length. [ 1024.542952][T24531] Bluetooth: MGMT ver 1.23 [ 1024.620544][T24521] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4671'. [ 1024.942567][T24541] xt_TCPMSS: Only works on TCP SYN packets [ 1025.167255][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.234341][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.256412][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.382914][T24536] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1025.695619][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.721611][T24552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4679'. [ 1025.739469][T24552] macvtap1: entered promiscuous mode [ 1025.770130][T24552] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 1025.801664][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.821003][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.853144][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.876231][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.895750][T24553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4679'. [ 1025.912758][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.922941][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.942925][T24536] wg1 speed is unknown, defaulting to 1000 [ 1025.986524][T24555] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4680'. [ 1026.011510][T24536] wg1 speed is unknown, defaulting to 1000 [ 1026.547005][T24568] netlink: 'syz.5.4685': attribute type 10 has an invalid length. [ 1026.591434][T24568] bond0: (slave dummy0): Releasing backup interface [ 1026.612488][T24574] netlink: 'syz.5.4685': attribute type 10 has an invalid length. [ 1026.647749][T24568] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1026.682120][T24568] team0: Failed to send options change via netlink (err -105) [ 1026.689760][T24568] team0: Port device dummy0 added [ 1026.733141][T24574] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1026.786643][T24574] team0: Failed to send options change via netlink (err -105) [ 1026.796689][T24574] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1026.807216][T24574] team0: Port device dummy0 removed [ 1026.817908][T24574] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1026.982595][T24585] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4688'. [ 1027.049835][T24587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4689'. [ 1027.091787][T24587] syz_tun: entered promiscuous mode [ 1027.119214][T24587] syz_tun: refused to change device tx_queue_len [ 1027.369674][T24597] xfrm0 speed is unknown, defaulting to 1000 [ 1027.992523][T24597] wg1 speed is unknown, defaulting to 1000 [ 1028.418360][T24628] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1028.468735][T24637] xfrm0 speed is unknown, defaulting to 1000 [ 1029.066268][T24637] wg1 speed is unknown, defaulting to 1000 [ 1030.181432][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4709'. [ 1030.218749][T24673] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1030.528257][T24685] netlink: 'syz.1.4711': attribute type 10 has an invalid length. [ 1031.382683][T24723] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1031.423080][T24718] xfrm0 speed is unknown, defaulting to 1000 [ 1031.903931][T24739] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4725'. [ 1031.913316][T24718] wg1 speed is unknown, defaulting to 1000 [ 1032.304309][T24754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4730'. [ 1032.588894][T24764] x_tables: duplicate underflow at hook 2 [ 1032.654974][T24760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4731'. [ 1032.749366][T24763] xfrm0 speed is unknown, defaulting to 1000 [ 1033.101540][T24778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1033.311035][T24791] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1033.604126][T24763] wg1 speed is unknown, defaulting to 1000 [ 1033.611287][T24777] xfrm0 speed is unknown, defaulting to 1000 [ 1033.862084][T24807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4743'. [ 1034.015919][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1034.077430][T24811] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1034.157472][T24815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1034.492885][T24777] wg1 speed is unknown, defaulting to 1000 [ 1035.011528][T24830] syzkaller0: entered promiscuous mode [ 1035.024750][T24830] syzkaller0: entered allmulticast mode [ 1035.049036][T24830] 0: reclassify loop, rule prio 0, protocol 800 [ 1035.195319][T24832] xfrm0 speed is unknown, defaulting to 1000 [ 1035.738254][T24852] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1035.783034][T24852] bond4: (slave lo): speed changed to 0 on port 1 [ 1035.793528][T24852] bond4: (slave lo): Enslaving as a backup interface with an up link [ 1035.804930][T24852] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1035.857009][T24832] wg1 speed is unknown, defaulting to 1000 [ 1036.184662][T24883] netlink: 'syz.2.4762': attribute type 39 has an invalid length. [ 1036.267445][T24891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4765'. [ 1036.277594][T24891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4765'. [ 1036.427293][T24880] xfrm0 speed is unknown, defaulting to 1000 [ 1036.666276][T24908] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4768'. [ 1037.024751][T24919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4772'. [ 1037.039541][T24919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.059659][T24919] batman_adv: batadv0: Removing interface: gretap1 [ 1037.256484][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.311942][T24931] __nla_validate_parse: 41 callbacks suppressed [ 1037.311962][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.401701][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.435452][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.448306][T24880] wg1 speed is unknown, defaulting to 1000 [ 1037.469381][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.494251][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.504388][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.522611][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.535126][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.546803][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1037.571856][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1038.145525][T24953] bond2: option arp_all_targets: invalid value (129) [ 1038.155208][T24953] bond2 (unregistering): Released all slaves [ 1038.219801][T24902] xfrm0 speed is unknown, defaulting to 1000 [ 1038.319137][T24963] netlink: 'syz.2.4781': attribute type 1 has an invalid length. [ 1038.472884][T24963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1038.532053][T24967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1038.541451][T24967] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1038.557109][T24967] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1038.593646][T24970] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 1038.606154][T24970] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1038.682795][T24963] bridge5: entered allmulticast mode [ 1038.785389][T24965] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.797293][T24965] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.808698][T24965] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1038.846372][T24884] xfrm0 speed is unknown, defaulting to 1000 [ 1038.973398][T24965] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.984684][T24965] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.996212][T24965] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1039.188823][T24965] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.202410][T24965] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.216193][T24965] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1039.242815][T24987] netlink: 'syz.2.4788': attribute type 10 has an invalid length. [ 1039.308548][T24987] team0: Port device geneve0 added [ 1039.351432][T20645] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.359711][T20645] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.390788][T20645] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.399218][T20645] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.504512][T24965] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.551270][T24965] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.567655][T24965] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1039.609872][T24902] wg1 speed is unknown, defaulting to 1000 [ 1039.724605][T24985] xfrm0 speed is unknown, defaulting to 1000 [ 1039.731179][T24998] lo: entered promiscuous mode [ 1039.736124][T24998] tunl0: entered promiscuous mode [ 1039.741836][T24884] wg1 speed is unknown, defaulting to 1000 [ 1039.758218][T24998] gre0: entered promiscuous mode [ 1039.775209][T24998] gretap0: entered promiscuous mode [ 1039.781860][T24998] erspan0: entered promiscuous mode [ 1039.797755][T24998] ip_vti0: entered promiscuous mode [ 1039.805271][T24999] ipt_REJECT: ECHOREPLY no longer supported. [ 1039.820669][T24998] ip6_vti0: entered promiscuous mode [ 1039.826632][T24998] sit0: entered promiscuous mode [ 1039.832663][T24998] ip6tnl0: entered promiscuous mode [ 1039.838210][T24998] ip6gre0: entered promiscuous mode [ 1039.858593][T24998] ip6gretap0: entered promiscuous mode [ 1039.865517][T24998] vcan0: entered promiscuous mode [ 1039.880913][T24998] team0: entered promiscuous mode [ 1039.886079][T24998] geneve0: entered promiscuous mode [ 1039.894885][T24998] dummy0: entered promiscuous mode [ 1039.900187][T24998] nlmon0: entered promiscuous mode [ 1039.910626][T24998] caif0: entered promiscuous mode [ 1039.916099][T24998] batadv0: entered promiscuous mode [ 1039.930887][T24998] vxcan0: entered promiscuous mode [ 1039.936225][T24998] vxcan1: entered promiscuous mode [ 1039.950481][T24998] veth0: entered promiscuous mode [ 1039.955720][T24998] veth1: entered promiscuous mode [ 1039.970490][T24998] wg1: entered promiscuous mode [ 1039.976664][T24998] wg2: entered promiscuous mode [ 1039.990535][T24998] veth0_to_bridge: entered promiscuous mode [ 1039.996754][T24998] bridge_slave_0: entered promiscuous mode [ 1040.003160][T24998] veth1_to_bridge: entered promiscuous mode [ 1040.009493][T24998] bridge_slave_1: entered promiscuous mode [ 1040.015689][T24998] veth0_to_bond: entered promiscuous mode [ 1040.021982][T24998] bond_slave_0: entered promiscuous mode [ 1040.027816][T24998] veth1_to_bond: entered promiscuous mode [ 1040.033991][T24998] bond_slave_1: entered promiscuous mode [ 1040.039820][T24998] veth0_to_team: entered promiscuous mode [ 1040.046157][T24998] team_slave_0: entered promiscuous mode [ 1040.052675][T24998] veth1_to_team: entered promiscuous mode [ 1040.058941][T24998] team_slave_1: entered promiscuous mode [ 1040.066129][T24998] veth0_to_batadv: entered promiscuous mode [ 1040.072672][T24998] batadv_slave_0: entered promiscuous mode [ 1040.078998][T24998] veth1_to_batadv: entered promiscuous mode [ 1040.085740][T24998] batadv_slave_1: entered promiscuous mode [ 1040.092463][T24998] xfrm0: entered promiscuous mode [ 1040.098025][T24998] veth0_to_hsr: entered promiscuous mode [ 1040.104661][T24998] veth1_to_hsr: entered promiscuous mode [ 1040.111100][T24998] hsr0: entered promiscuous mode [ 1040.116712][T24998] veth1_virt_wifi: entered promiscuous mode [ 1040.127561][T24998] veth0_virt_wifi: entered promiscuous mode [ 1040.133866][T24998] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1040.142004][T24998] vlan0: entered promiscuous mode [ 1040.147502][T24998] vlan1: entered promiscuous mode [ 1040.153392][T24998] macvlan0: entered promiscuous mode [ 1040.160001][T24998] macvlan1: entered promiscuous mode [ 1040.166183][T24998] ipvlan0: entered promiscuous mode [ 1040.172093][T24998] ipvlan1: entered promiscuous mode [ 1040.178059][T24998] macvtap0: entered promiscuous mode [ 1040.184479][T24998] macsec0: entered promiscuous mode [ 1040.196692][T24998] geneve1: entered promiscuous mode [ 1040.207278][T24998] ip6tnl1: entered promiscuous mode [ 1040.213042][T24998] veth2: entered promiscuous mode [ 1040.218434][T24998] veth3: entered promiscuous mode [ 1040.225618][T24998] geneve3: left allmulticast mode [ 1040.233400][T24998] erspan1: entered promiscuous mode [ 1040.238953][T24998] gtp0: entered promiscuous mode [ 1040.245448][T24998] gretap1: entered promiscuous mode [ 1040.251185][T24998] bond1: entered promiscuous mode [ 1040.256724][T24998] macvlan2: entered promiscuous mode [ 1040.272280][T24998] batadv1: entered promiscuous mode [ 1040.277534][T24998] batadv1: left allmulticast mode [ 1040.283692][T24998] macsec1: entered promiscuous mode [ 1040.289072][T24998] ip6tnl2: entered promiscuous mode [ 1040.294873][T24998] gre1: entered promiscuous mode [ 1040.299975][T24998] bond2: entered promiscuous mode [ 1040.305768][T24998] geneve4: entered promiscuous mode [ 1040.312283][T24998] bridge0: entered promiscuous mode [ 1040.317696][T24998] bridge1: entered promiscuous mode [ 1040.323665][T24998] ip6tnl3: entered promiscuous mode [ 1040.329143][T24998] syztnl2: entered promiscuous mode [ 1040.336060][T24998] netdevsim netdevsim2 eth0: entered promiscuous mode [ 1040.345265][T24998] netdevsim netdevsim2 eth1: entered promiscuous mode [ 1040.352595][T24998] netdevsim netdevsim2 eth2: entered promiscuous mode [ 1040.359753][T24998] netdevsim netdevsim2 eth3: entered promiscuous mode [ 1040.368385][T24998] veth4: entered promiscuous mode [ 1040.377479][T24998] veth5: entered promiscuous mode [ 1040.386115][T24998] bridge3: entered promiscuous mode [ 1040.392576][T24998] bridge4: entered promiscuous mode [ 1040.397949][T24998] veth6: entered promiscuous mode [ 1040.403599][T24998] veth7: entered promiscuous mode [ 1040.408839][T24998] bond3: entered promiscuous mode [ 1040.415644][T24998] bridge5: entered promiscuous mode [ 1040.421698][T24998] bridge5: left allmulticast mode [ 1040.486023][T22600] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.497908][T22600] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.523228][T24985] wg1 speed is unknown, defaulting to 1000 [ 1040.539556][T22600] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.559299][T22600] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.718223][T20643] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.732493][T20643] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1040.742584][T25005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1040.755874][T20643] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1040.855217][T20643] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.879870][T20643] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1040.889331][T20643] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1041.007074][T17955] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1041.031579][T17955] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1041.079521][T17955] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1041.132000][T20637] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1041.143187][T20637] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1041.154000][T20637] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1042.364001][T25039] __nla_validate_parse: 8 callbacks suppressed [ 1042.364020][T25039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4798'. [ 1042.628674][T25053] xfrm1: entered allmulticast mode [ 1042.701942][T25056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1042.744364][T25056] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1043.005665][T25059] netlink: 'syz.4.4806': attribute type 21 has an invalid length. [ 1043.041722][T25059] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4806'. [ 1043.063168][T25069] xfrm0 speed is unknown, defaulting to 1000 [ 1043.706778][T25069] wg1 speed is unknown, defaulting to 1000 [ 1043.759986][T25089] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1043.879842][T25088] tipc: Enabled bearer , priority 0 [ 1043.963891][T25093] tipc: Enabling of bearer rejected, already enabled [ 1044.126172][T25088] syzkaller0: entered promiscuous mode [ 1044.134082][T25088] syzkaller0: entered allmulticast mode [ 1044.142312][T25088] tipc: Resetting bearer [ 1044.182194][T25088] tipc: Resetting bearer [ 1044.531122][T25109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4819'. [ 1044.685393][T25116] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4821'. [ 1046.538074][T25088] tipc: Disabling bearer [ 1046.566644][T19860] tipc: Node number set to 2592408100 [ 1046.576975][T25126] tipc: Enabled bearer , priority 10 [ 1046.663098][T25124] syzkaller0: entered promiscuous mode [ 1046.668648][T25124] syzkaller0: entered allmulticast mode [ 1047.165390][T25145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4827'. [ 1048.813802][T16338] tipc: Node number set to 1091932792 [ 1048.883460][T25139] xfrm0 speed is unknown, defaulting to 1000 [ 1049.192162][T25158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4830'. [ 1049.272499][T25159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4830'. [ 1049.336237][T25161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4832'. [ 1049.409871][T25159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4830'. [ 1049.541249][T25139] wg1 speed is unknown, defaulting to 1000 [ 1049.928075][T25184] netlink: 'syz.4.4838': attribute type 39 has an invalid length. [ 1049.981746][T25186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4839'. [ 1050.035432][T25191] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4838'. [ 1050.085695][T25191] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4838'. [ 1050.141369][T25191] netlink: 'syz.4.4838': attribute type 5 has an invalid length. [ 1050.191860][T25191] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4838'. [ 1050.309938][T25192] vlan1: entered allmulticast mode [ 1050.828274][T25218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4846'. [ 1050.863127][T25218] bridge0: port 3(team0) entered disabled state [ 1051.109441][T25230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4851'. [ 1051.198914][T25229] syzkaller0: entered promiscuous mode [ 1051.220103][T25229] syzkaller0: entered allmulticast mode [ 1051.855811][T25255] xfrm0 speed is unknown, defaulting to 1000 [ 1052.649474][T25255] wg1 speed is unknown, defaulting to 1000 [ 1053.267269][T25315] netlink: 'syz.2.4865': attribute type 3 has an invalid length. [ 1053.442151][T25290] lo: left promiscuous mode [ 1053.452232][T25290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1053.592884][T25314] tc_dump_action: action bad kind [ 1054.066400][T25324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1054.106496][T25333] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1054.136742][T25331] netlink: 'syz.2.4873': attribute type 2 has an invalid length. [ 1054.195943][T25331] !: entered promiscuous mode [ 1054.442702][T25345] __nla_validate_parse: 4 callbacks suppressed [ 1054.442734][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4877'. [ 1054.478948][T25343] xfrm0 speed is unknown, defaulting to 1000 [ 1054.503726][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4877'. [ 1054.525979][T25345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4877'. [ 1054.703843][T25357] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4878'. [ 1055.131782][T25343] wg1 speed is unknown, defaulting to 1000 [ 1055.281140][T25369] tipc: Enabled bearer , priority 0 [ 1055.297979][T25369] syzkaller0: entered promiscuous mode [ 1055.304660][T25369] syzkaller0: entered allmulticast mode [ 1055.601439][T25372] tipc: Resetting bearer [ 1055.642714][T25368] tipc: Resetting bearer [ 1055.724342][T25368] tipc: Disabling bearer [ 1055.848984][T25370] xfrm0 speed is unknown, defaulting to 1000 [ 1055.982147][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1056.269875][T25390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4890'. [ 1056.465358][T25396] bond0: (slave gre0): Error: Device type is different from other slaves [ 1056.587262][T25370] wg1 speed is unknown, defaulting to 1000 [ 1056.787683][T25404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1056.799611][T25404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4893'. [ 1056.963716][T25400] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1056.989313][T25400] syzkaller0: entered promiscuous mode [ 1056.996000][T25400] syzkaller0: entered allmulticast mode [ 1057.797017][T25421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4897'. [ 1058.585010][T25431] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4900'. [ 1059.529044][T25421] 8021q: VLANs not supported on ip6_vti0 [ 1059.743802][T25445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4901'. [ 1059.753625][T25444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4904'. [ 1059.767384][T25444] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 1059.781468][T25445] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4901'. [ 1059.813277][T25445] netlink: 'syz.3.4901': attribute type 6 has an invalid length. [ 1059.818807][T25444] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1059.832263][T25445] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4901'. [ 1060.155193][T25463] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1060.166835][T25463] syzkaller1: linktype set to 773 [ 1060.758836][T25487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4917'. [ 1061.613094][T25516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4929'. [ 1061.856876][T25526] syzkaller0: entered promiscuous mode [ 1061.873743][T25526] syzkaller0: entered allmulticast mode [ 1062.005955][T25541] rdma_rxe: rxe_newlink: failed to add veth1_macvtap [ 1062.018710][T25543] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4937'. [ 1062.119191][T25546] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4938'. [ 1062.179959][T25549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4939'. [ 1062.310841][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4941'. [ 1062.553199][T25562] syzkaller1: entered promiscuous mode [ 1062.558767][T25562] syzkaller1: entered allmulticast mode [ 1062.607221][T25564] netlink: 'syz.4.4943': attribute type 10 has an invalid length. [ 1063.001887][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 1063.597182][T25602] x_tables: duplicate underflow at hook 2 [ 1063.913244][T25620] xfrm0 speed is unknown, defaulting to 1000 [ 1064.218213][T25620] wg1 speed is unknown, defaulting to 1000 [ 1064.383817][T25631] geneve2: entered promiscuous mode [ 1064.759208][T25655] __nla_validate_parse: 10 callbacks suppressed [ 1064.759230][T25655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4968'. [ 1064.776039][T25656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4969'. [ 1064.805266][T25658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4970'. [ 1065.084265][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 1065.307594][T25674] netlink: 'syz.1.4974': attribute type 13 has an invalid length. [ 1066.054626][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1066.068008][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1066.113521][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'. [ 1066.131271][T22600] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.154893][T22600] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.188075][T22600] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1066.231802][T22600] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.273282][T22600] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.311312][T22600] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1066.334923][T25696] syzkaller0: entered promiscuous mode [ 1066.359426][T25696] syzkaller0: entered allmulticast mode [ 1066.542704][T22600] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.561539][T22600] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.583803][T22600] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1066.598973][T25723] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4985'. [ 1066.618939][T22600] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.633237][T25722] netlink: 'syz.2.4986': attribute type 1 has an invalid length. [ 1066.641536][T22600] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.651969][T22600] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1066.709473][T25722] bond4: entered promiscuous mode [ 1066.717005][T25722] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1066.727667][T25693] xfrm0 speed is unknown, defaulting to 1000 [ 1066.795559][T25725] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1066.821637][T25725] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1066.852353][T25725] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1066.903282][T25725] bond4: (slave wireguard0): making interface the new active one [ 1066.912766][T25725] wireguard0: entered promiscuous mode [ 1066.926806][T25725] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 1066.959310][T25722] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1066.978793][T25739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4988'. [ 1067.004126][T25722] bond4: (slave wireguard1): Enslaving as a backup interface with an up link [ 1067.343509][T25745] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1067.378327][T25745] bond5 (unregistering): Released all slaves [ 1067.465254][T25693] wg1 speed is unknown, defaulting to 1000 [ 1071.240293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms [ 1071.248358][ C1] lec:lec_tx_timeout: lec0 [ 1071.983565][T25769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1072.036570][T25769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1072.047388][T25769] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1072.144789][T25773] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.163738][T25773] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.174682][T25773] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1072.324984][T25773] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.338883][T25773] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.354922][T25773] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1072.396607][T25779] syzkaller0: entered promiscuous mode [ 1072.405259][T25779] syzkaller0: entered allmulticast mode [ 1072.424651][T25773] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.436797][T25773] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.449972][T25773] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1072.525874][T25773] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.536532][T25773] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.562691][T25773] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1072.642173][T25731] mpoa:mpoad_close: () going down [ 1072.666822][T25783] netlink: 'syz.3.5001': attribute type 1 has an invalid length. [ 1072.693305][T25785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5002'. [ 1072.714047][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5002'. [ 1072.744824][T25788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1072.772336][T25783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1072.801284][T25774] xfrm0 speed is unknown, defaulting to 1000 [ 1072.817160][T25788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1073.092034][T25788] bond3 (unregistering): Released all slaves [ 1073.246762][T17955] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.269050][T17955] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1073.288519][T17955] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1073.336341][T25774] wg1 speed is unknown, defaulting to 1000 [ 1073.336471][T17955] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.368036][T17955] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1073.388687][T17955] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1073.466649][T22600] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.495044][T22600] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1073.520998][T22600] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1073.631247][T20643] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.639508][T20643] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1073.670650][T20643] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1073.789358][T25812] pimreg: entered allmulticast mode [ 1073.811563][T25812] pimreg: left allmulticast mode [ 1074.194691][T25823] netlink: 'syz.4.5013': attribute type 83 has an invalid length. [ 1074.390504][T25825] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5013'. [ 1074.470063][T25824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5013'. [ 1074.522301][T25829] netlink: 'syz.3.5014': attribute type 12 has an invalid length. [ 1074.561168][T25829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5014'. [ 1074.729754][T25829] tipc: Resetting bearer [ 1075.673107][T25863] xfrm0 speed is unknown, defaulting to 1000 [ 1075.994601][T25881] netlink: 'syz.2.5026': attribute type 5 has an invalid length. [ 1076.116507][T25884] netlink: 'syz.4.5027': attribute type 3 has an invalid length. [ 1076.133405][T25884] tipc: Enabled bearer , priority 0 [ 1076.149366][T25879] xfrm0 speed is unknown, defaulting to 1000 [ 1076.156734][T25863] wg1 speed is unknown, defaulting to 1000 [ 1076.164333][T25884] syzkaller0: entered promiscuous mode [ 1076.169878][T25884] syzkaller0: entered allmulticast mode [ 1076.183559][T25886] x_tables: unsorted entry at hook 2 [ 1076.207618][T25884] tipc: Resetting bearer [ 1076.226831][T25883] tipc: Resetting bearer [ 1076.294651][T25883] tipc: Disabling bearer [ 1076.624679][T25895] bond4: option mode: unable to set because the bond device has slaves [ 1076.654349][T25879] wg1 speed is unknown, defaulting to 1000 [ 1077.207418][T25903] __nla_validate_parse: 10 callbacks suppressed [ 1077.207441][T25903] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5033'. [ 1077.243854][T25892] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1077.261945][T25892] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1077.374284][T25892] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1077.381488][T25892] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1077.448612][T25892] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1077.456621][T25892] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1077.478280][T25892] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1077.485619][T25892] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1077.616058][T25892] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1077.628598][T25913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5037'. [ 1077.640170][T25913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5037'. [ 1077.648626][T25892] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1077.752107][T25915] netlink: 'syz.4.5039': attribute type 1 has an invalid length. [ 1077.824122][T25924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5039'. [ 1077.849495][T25915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1077.937161][T25915] bond5: (slave gretap2): making interface the new active one [ 1077.948986][T25915] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1078.171277][T25940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5043'. [ 1078.212390][T25940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5043'. [ 1078.237170][T25940] xt_TCPMSS: Only works on TCP SYN packets [ 1078.376205][T25943] tipc: Enabled bearer , priority 0 [ 1078.402292][T25946] syzkaller0: entered promiscuous mode [ 1078.418619][T25946] syzkaller0: entered allmulticast mode [ 1078.527153][T25941] tipc: Resetting bearer [ 1078.644521][T25966] netlink: 'syz.5.5051': attribute type 2 has an invalid length. [ 1078.658827][T25966] netlink: 'syz.5.5051': attribute type 1 has an invalid length. [ 1078.827193][T25941] tipc: Disabling bearer [ 1078.893899][T25969] netlink: 'syz.4.5050': attribute type 21 has an invalid length. [ 1078.987300][T25966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5051'. [ 1079.011401][T25969] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5050'. [ 1079.292409][T25984] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1079.386770][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5056'. [ 1079.560054][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5061'. [ 1079.819504][T26000] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1079.834532][T26000] team0 (unregistering): Port device team_slave_0 removed [ 1079.844986][T26008] netlink: 'syz.1.5064': attribute type 3 has an invalid length. [ 1079.882248][T26000] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1079.893982][T26000] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1079.932270][T26000] team0 (unregistering): Port device team_slave_1 removed [ 1080.282337][T17955] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.429822][T17955] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.464183][T17955] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.540079][T17955] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.734937][T26036] 0ªî{X¹¦: left allmulticast mode [ 1080.748642][T26036] syz_tun: left promiscuous mode [ 1080.777423][T26036] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 1080.787172][T26036] bond1: left promiscuous mode [ 1080.793293][T26039] netlink: 'syz.1.5073': attribute type 1 has an invalid length. [ 1080.798348][T26036] team1: left promiscuous mode [ 1080.808248][T26036] team1: left allmulticast mode [ 1080.817082][T26036] ip6erspan0: left allmulticast mode [ 1080.823669][T26039] netlink: 'syz.1.5073': attribute type 1 has an invalid length. [ 1080.823949][T26039] netlink: 'syz.1.5073': attribute type 1 has an invalid length. [ 1080.840945][T26036] ip6tnl1: left promiscuous mode [ 1080.840976][T26036] ip6tnl1: left allmulticast mode [ 1080.842799][T26036] bridge4: left allmulticast mode [ 1080.859000][T26039] netlink: 'syz.1.5073': attribute type 1 has an invalid length. [ 1080.863351][T26036] gretap1: left promiscuous mode [ 1080.904982][T26039] netlink: 'syz.1.5073': attribute type 1 has an invalid length. [ 1081.646199][T26083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.572548][T26101] __nla_validate_parse: 10 callbacks suppressed [ 1082.572568][T26101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5092'. [ 1082.737787][T26096] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5091'. [ 1082.848221][T26111] validate_nla: 15 callbacks suppressed [ 1082.848240][T26111] netlink: 'syz.3.5095': attribute type 1 has an invalid length. [ 1082.914980][T26115] netlink: 'syz.2.5096': attribute type 15 has an invalid length. [ 1082.949891][T26115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5096'. [ 1082.983790][T26115] netlink: 'syz.2.5096': attribute type 15 has an invalid length. [ 1083.113678][T26115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5096'. [ 1083.148438][T26121] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5099'. [ 1083.165029][T26121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5099'. [ 1083.200988][T26122] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1083.263699][T26122] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1083.372471][T26128] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5102'. [ 1083.432032][T26128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5102'. [ 1083.477762][T26130] macvlan2: entered promiscuous mode [ 1083.501564][T26130] batman_adv: batadv0: Adding interface: macvlan2 [ 1083.524377][T26130] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.551135][T26130] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 1083.628570][T26130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5103'. [ 1083.871332][T19125] IPVS: ip_vs_send_async error -101 [ 1084.123487][T26155] netlink: 'syz.2.5111': attribute type 1 has an invalid length. [ 1084.123523][T26156] netlink: 'syz.2.5111': attribute type 1 has an invalid length. [ 1084.186464][T26155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1084.961643][T26186] macvlan0: left allmulticast mode [ 1084.969594][T26186] netlink: 'syz.1.5118': attribute type 2 has an invalid length. [ 1085.019988][T26186] pimreg: entered allmulticast mode [ 1085.072238][T26186] pimreg: left allmulticast mode [ 1085.398875][T26191] xfrm0 speed is unknown, defaulting to 1000 [ 1085.440616][ T30] audit: type=1800 audit(1768845404.172:17): pid=26188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5121" name="cgroup.controllers" dev="tmpfs" ino=1126 res=0 errno=0 [ 1085.645209][T26204] netlink: 'syz.2.5123': attribute type 10 has an invalid length. [ 1085.677177][T26204] team0: Device veth0_vlan failed to register rx_handler [ 1085.911456][T26207] vlan2: entered promiscuous mode [ 1085.926830][T26207] bridge0: entered promiscuous mode [ 1085.942019][T26195] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1085.972166][T26195] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1086.646178][T26191] wg1 speed is unknown, defaulting to 1000 [ 1086.652613][T26209] xfrm0 speed is unknown, defaulting to 1000 [ 1087.179767][T26246] IPVS: set_ctl: invalid protocol: 58 10.1.1.4:20000 [ 1087.255441][T26247] netlink: 'syz.1.5134': attribute type 1 has an invalid length. [ 1087.473745][T26194] xfrm0 speed is unknown, defaulting to 1000 [ 1087.524154][T26246] bond4: (slave gretap2): making interface the new active one [ 1087.554608][T26246] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1087.626241][T26246] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1088.034044][T26194] wg1 speed is unknown, defaulting to 1000 [ 1088.043861][T26209] wg1 speed is unknown, defaulting to 1000 [ 1088.092336][T26253] xfrm0 speed is unknown, defaulting to 1000 [ 1088.437660][T26267] __nla_validate_parse: 5 callbacks suppressed [ 1088.437680][T26267] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5137'. [ 1088.703532][T26253] wg1 speed is unknown, defaulting to 1000 [ 1089.647287][T26284] netlink: 332 bytes leftover after parsing attributes in process `syz.5.5142'. [ 1089.657070][T26284] netlink: 'syz.5.5142': attribute type 9 has an invalid length. [ 1089.669912][T26284] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5142'. [ 1089.680734][T26284] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5142'. [ 1090.323905][T26296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1090.387390][T26299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5146'. [ 1090.489605][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1090.517026][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1090.538480][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1090.551555][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1090.589824][T26306] netlink: 'syz.3.5148': attribute type 1 has an invalid length. [ 1090.660799][T26312] xt_hashlimit: size too large, truncated to 1048576 [ 1090.668696][T26314] netlink: 'syz.5.5151': attribute type 1 has an invalid length. [ 1090.681938][T26312] xt_hashlimit: max too large, truncated to 1048576 [ 1090.915141][T26328] netlink: 'syz.2.5153': attribute type 12 has an invalid length. [ 1090.969662][T26330] netlink: 'syz.3.5155': attribute type 12 has an invalid length. [ 1091.017084][T26330] netlink: 'syz.3.5155': attribute type 12 has an invalid length. [ 1091.076646][T26335] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1091.109495][T26337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5157'. [ 1091.413438][T26351] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1091.596721][T26348] netlink: 'syz.3.5160': attribute type 9 has an invalid length. [ 1091.608741][T26348] netlink: 'syz.3.5160': attribute type 11 has an invalid length. [ 1091.618573][T26348] netlink: 'syz.3.5160': attribute type 11 has an invalid length. [ 1092.006089][T26360] syzkaller0: entered promiscuous mode [ 1092.012722][T26360] syzkaller0: entered allmulticast mode [ 1092.356506][T26365] vlan2: entered promiscuous mode [ 1092.364217][T26365] erspan0: entered promiscuous mode [ 1092.751902][T26374] xfrm0 speed is unknown, defaulting to 1000 [ 1093.084931][T26348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.420740][T26382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1093.544393][T26366] xfrm0 speed is unknown, defaulting to 1000 [ 1093.550819][T26374] wg1 speed is unknown, defaulting to 1000 [ 1094.132155][T26366] wg1 speed is unknown, defaulting to 1000 [ 1094.245841][T26416] __nla_validate_parse: 6 callbacks suppressed [ 1094.245860][T26416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5177'. [ 1094.314870][T26416] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.5177'. [ 1094.526658][T26408] xfrm0 speed is unknown, defaulting to 1000 [ 1094.541803][T26421] netlink: 'syz.3.5178': attribute type 10 has an invalid length. [ 1094.557055][T26421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5178'. [ 1094.584098][T26421] geneve0: entered promiscuous mode [ 1094.599818][T26421] geneve0: entered allmulticast mode [ 1094.607749][T26421] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1094.619201][T26421] team0: Failed to send options change via netlink (err -105) [ 1094.631791][T26421] team0: Port device geneve0 added [ 1094.641109][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.668154][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.681296][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.689553][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.978944][T26435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5180'. [ 1095.028449][T26408] wg1 speed is unknown, defaulting to 1000 [ 1095.403159][T26439] xfrm0 speed is unknown, defaulting to 1000 [ 1096.027401][T26451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5183'. [ 1096.066444][T26455] netlink: 'syz.5.5186': attribute type 11 has an invalid length. [ 1096.144376][T26439] wg1 speed is unknown, defaulting to 1000 [ 1096.171869][T26455] netlink: 'syz.5.5186': attribute type 11 has an invalid length. [ 1096.180128][T26455] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5186'. [ 1096.441497][T26446] xfrm0 speed is unknown, defaulting to 1000 [ 1096.906087][T26446] wg1 speed is unknown, defaulting to 1000 [ 1097.423170][T26492] tipc: Enabled bearer , priority 0 [ 1097.433306][T26492] syzkaller0: entered promiscuous mode [ 1097.438824][T26492] syzkaller0: entered allmulticast mode [ 1097.503125][T26492] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5195'. [ 1097.585594][T26492] tipc: Resetting bearer [ 1097.764320][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5198'. [ 1097.782065][T26498] FAULT_INJECTION: forcing a failure. [ 1097.782065][T26498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.801273][T26498] CPU: 0 UID: 0 PID: 26498 Comm: syz.1.5197 Not tainted syzkaller #0 PREEMPT(full) [ 1097.801315][T26498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1097.801337][T26498] Call Trace: [ 1097.801347][T26498] [ 1097.801356][T26498] dump_stack_lvl+0xe8/0x150 [ 1097.801389][T26498] should_fail_ex+0x414/0x560 [ 1097.801431][T26498] _copy_from_user+0x2d/0xb0 [ 1097.801460][T26498] ___sys_sendmsg+0x158/0x2a0 [ 1097.801492][T26498] ? __pfx____sys_sendmsg+0x10/0x10 [ 1097.801562][T26498] ? __fget_files+0x2a/0x420 [ 1097.801594][T26498] ? __fget_files+0x3a0/0x420 [ 1097.801635][T26498] __x64_sys_sendmsg+0x19b/0x260 [ 1097.801666][T26498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1097.801706][T26498] ? __pfx_ksys_write+0x10/0x10 [ 1097.801741][T26498] do_syscall_64+0xec/0xf80 [ 1097.801767][T26498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.801787][T26498] ? trace_irq_disable+0x37/0x100 [ 1097.801815][T26498] ? clear_bhb_loop+0x60/0xb0 [ 1097.801841][T26498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.801868][T26498] RIP: 0033:0x7f187c38f749 [ 1097.801888][T26498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.801907][T26498] RSP: 002b:00007f187d2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.801930][T26498] RAX: ffffffffffffffda RBX: 00007f187c5e5fa0 RCX: 00007f187c38f749 [ 1097.801946][T26498] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000d [ 1097.801960][T26498] RBP: 00007f187d2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.801973][T26498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.801985][T26498] R13: 00007f187c5e6038 R14: 00007f187c5e5fa0 R15: 00007ffd599b2f78 [ 1097.802021][T26498] [ 1098.117349][T26504] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20004 [ 1098.154768][T26488] tipc: Resetting bearer [ 1098.173332][T26507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5200'. [ 1098.199074][T26507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5200'. [ 1098.211920][T26488] tipc: Disabling bearer [ 1098.594347][T26530] netlink: 'syz.2.5208': attribute type 2 has an invalid length. [ 1098.604880][T26530] netlink: 'syz.2.5208': attribute type 2 has an invalid length. [ 1098.637922][T26530] vlan2: entered promiscuous mode [ 1098.643636][T26530] vlan2: entered allmulticast mode [ 1098.649218][T26530] geneve1: entered allmulticast mode [ 1098.756360][T26531] tipc: Enabled bearer , priority 0 [ 1098.825151][T26529] tipc: Disabling bearer [ 1098.889618][T26544] xfrm0 speed is unknown, defaulting to 1000 [ 1099.361722][T26542] xfrm0 speed is unknown, defaulting to 1000 [ 1099.376737][T26544] wg1 speed is unknown, defaulting to 1000 [ 1099.502801][T26562] __nla_validate_parse: 4 callbacks suppressed [ 1099.502821][T26562] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5215'. [ 1099.612000][T26571] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.5215'. [ 1099.962198][T26562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5215'. [ 1099.990879][T26542] wg1 speed is unknown, defaulting to 1000 [ 1100.844265][T26599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5225'. [ 1101.062926][T26605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5228'. [ 1101.082816][T26605] netlink: 'syz.5.5228': attribute type 1 has an invalid length. [ 1101.332947][T26624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5231'. [ 1101.359841][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5231'. [ 1101.818327][T26643] netlink: 'syz.1.5237': attribute type 1 has an invalid length. [ 1101.867969][T26645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5238'. [ 1103.164974][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5248'. [ 1103.244079][T26675] tipc: Enabled bearer , priority 0 [ 1103.255497][T26675] syzkaller0: entered promiscuous mode [ 1103.265692][T26675] syzkaller0: entered allmulticast mode [ 1103.316220][T26675] tipc: Resetting bearer [ 1103.460052][T26683] tunl0: Caught tx_queue_len zero misconfig [ 1103.567302][T26684] xfrm0 speed is unknown, defaulting to 1000 [ 1104.116217][T26705] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 1104.204245][T26684] wg1 speed is unknown, defaulting to 1000 [ 1104.212481][T26680] xfrm0 speed is unknown, defaulting to 1000 [ 1104.794582][T26716] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1105.053521][T26723] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 1105.140092][T26680] wg1 speed is unknown, defaulting to 1000 [ 1105.145994][T26692] xfrm0 speed is unknown, defaulting to 1000 [ 1105.332784][T26736] netlink: 'syz.3.5267': attribute type 3 has an invalid length. [ 1105.365840][T26737] netlink: 'syz.3.5267': attribute type 3 has an invalid length. [ 1105.396664][T26736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5267'. [ 1105.437628][T26737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5267'. [ 1105.866098][T26731] xfrm0 speed is unknown, defaulting to 1000 [ 1106.252624][T26692] wg1 speed is unknown, defaulting to 1000 [ 1106.298295][T26731] wg1 speed is unknown, defaulting to 1000 [ 1106.830137][T26747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5270'. [ 1107.106311][T26749] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 1107.196435][T26747] bond5: entered promiscuous mode [ 1107.210803][T26747] bridge6: entered promiscuous mode [ 1107.238453][T26747] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1107.282519][T26747] bond5: left promiscuous mode [ 1107.300041][T26747] bridge6: left promiscuous mode [ 1107.417917][T26757] netlink: 'syz.3.5272': attribute type 4 has an invalid length. [ 1107.450001][T26757] netlink: 'syz.3.5272': attribute type 4 has an invalid length. [ 1107.585715][T26761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5274'. [ 1107.869055][T26777] tipc: Enabled bearer , priority 0 [ 1107.876709][T26776] syzkaller0: entered promiscuous mode [ 1107.910027][T26776] syzkaller0: entered allmulticast mode [ 1107.975161][T26776] syzkaller0: mtu less than device minimum [ 1107.997293][T26776] syzkaller0: mtu less than device minimum [ 1108.017618][T26776] syzkaller0: mtu less than device minimum [ 1108.032273][T26776] syzkaller0: mtu less than device minimum [ 1108.068840][T26776] syzkaller0: mtu less than device minimum [ 1108.132755][T26776] syzkaller0: mtu less than device minimum [ 1108.157307][T26776] syzkaller0: mtu less than device minimum [ 1108.170192][T26797] veth0: entered promiscuous mode [ 1108.176493][T26776] syzkaller0: mtu less than device minimum [ 1108.205442][T26797] batadv_slave_0: entered promiscuous mode [ 1108.216302][T26776] syzkaller0: mtu less than device minimum [ 1108.240086][T26796] batadv_slave_0: left promiscuous mode [ 1108.247499][T26796] veth0: left promiscuous mode [ 1108.266608][T26775] tipc: Resetting bearer [ 1108.282039][T26801] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5283'. [ 1108.344061][T26775] tipc: Disabling bearer [ 1108.384191][T26801] tipc: Resetting bearer [ 1108.486742][T26801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.814212][T26801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.896562][T26801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.935110][T26836] siw: device registration error -23 [ 1109.219920][T26801] tipc: Resetting bearer [ 1109.285174][ T1311] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.313670][ T1311] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1109.342041][ T1311] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1109.489601][ T1311] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.500195][ T1311] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1109.509290][ T1311] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1109.531627][ T1311] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.543725][ T1311] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1109.552902][ T1311] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1109.742508][ T1311] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.767708][ T1311] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1109.788265][ T1311] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1110.186797][T26861] xfrm0 speed is unknown, defaulting to 1000 [ 1110.213142][T26865] gretap2: entered allmulticast mode [ 1110.546343][T26868] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5297'. [ 1110.848084][T26861] wg1 speed is unknown, defaulting to 1000 [ 1111.291628][T26904] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5306'. [ 1111.426994][T26908] netlink: 'syz.2.5309': attribute type 1 has an invalid length. [ 1111.524283][T26908] pim6reg: entered allmulticast mode [ 1111.627561][T26916] pim6reg: left allmulticast mode [ 1111.724952][T26921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5311'. [ 1111.894034][T26926] netlink: 'syz.5.5314': attribute type 1 has an invalid length. [ 1112.013883][T26926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1112.934692][T26967] syz.5.5323 (26967) used obsolete PPPIOCDETACH ioctl [ 1113.158384][T26976] tipc: Enabled bearer , priority 0 [ 1113.201176][T26976] syzkaller0: entered promiscuous mode [ 1113.219829][T26976] syzkaller0: entered allmulticast mode [ 1113.355907][T26986] tipc: Enabled bearer , priority 0 [ 1113.385338][T26986] syzkaller0: entered promiscuous mode [ 1113.391816][T26986] syzkaller0: entered allmulticast mode [ 1113.439755][T26986] tipc: Resetting bearer [ 1113.887266][T26982] tipc: Resetting bearer [ 1113.962870][T26982] tipc: Disabling bearer [ 1114.017149][T26973] tipc: Resetting bearer [ 1114.093186][T26973] tipc: Disabling bearer [ 1114.138822][T26993] tipc: New replicast peer: 255.255.255.255 [ 1114.147382][T26993] tipc: Enabled bearer , priority 26 [ 1114.174719][T26993] netlink: 'syz.5.5332': attribute type 11 has an invalid length. [ 1114.198682][T26993] netlink: 'syz.5.5332': attribute type 11 has an invalid length. [ 1114.231326][T26993] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5332'. [ 1114.305332][T26995] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5331'. [ 1114.346089][T27003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1114.358831][T27003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1114.406602][T27006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5335'. [ 1114.437593][T26993] bridge3: entered promiscuous mode [ 1114.451553][T27007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5335'. [ 1114.467999][T26993] bridge3: entered allmulticast mode [ 1114.635738][T27017] xfrm0 speed is unknown, defaulting to 1000 [ 1114.870118][T27026] netlink: 'syz.2.5339': attribute type 322 has an invalid length. [ 1114.996583][T27036] netlink: 'syz.5.5341': attribute type 10 has an invalid length. [ 1115.017381][T27036] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5341'. [ 1115.184894][T27043] pim6reg: entered allmulticast mode [ 1115.223803][T27043] pim6reg: left allmulticast mode [ 1115.327376][T27017] wg1 speed is unknown, defaulting to 1000 [ 1115.327389][T27019] xfrm0 speed is unknown, defaulting to 1000 [ 1116.333379][T27019] wg1 speed is unknown, defaulting to 1000 [ 1116.462299][T27078] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1116.515765][T27079] __nla_validate_parse: 2 callbacks suppressed [ 1116.515786][T27079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1116.541993][T27079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1116.897089][T27090] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5355'. [ 1117.092790][T27094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5357'. [ 1117.596587][T27097] xfrm0 speed is unknown, defaulting to 1000 [ 1117.913026][T27114] vlan0: entered promiscuous mode [ 1117.918322][T27114] vlan0: entered allmulticast mode [ 1117.951503][T27114] hsr_slave_1: entered allmulticast mode [ 1118.050639][T27124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5365'. [ 1118.076150][T27124] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.5365'. [ 1118.110159][T27120] netlink: 'syz.4.5365': attribute type 10 has an invalid length. [ 1118.151126][T27097] wg1 speed is unknown, defaulting to 1000 [ 1118.230574][T27127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5367'. [ 1118.427833][T27137] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5368'. [ 1118.467407][T27144] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5370'. [ 1119.247059][T27175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5378'. [ 1120.633513][T27230] netlink: 'syz.5.5395': attribute type 6 has an invalid length. [ 1120.656601][T27230] netlink: 'syz.5.5395': attribute type 5 has an invalid length. [ 1120.703484][T27230] netlink: 'syz.5.5395': attribute type 4 has an invalid length. [ 1120.747340][T27230] netlink: 'syz.5.5395': attribute type 4 has an invalid length. [ 1120.804661][T27230] mac80211_hwsim hwsim52 wlan1: entered allmulticast mode [ 1120.999225][T27254] geneve3: entered promiscuous mode [ 1121.004942][T27254] geneve3: entered allmulticast mode [ 1121.105929][T27255] xfrm0 speed is unknown, defaulting to 1000 [ 1121.592333][T27255] wg1 speed is unknown, defaulting to 1000 [ 1121.893439][T27283] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1121.947180][T27284] __nla_validate_parse: 9 callbacks suppressed [ 1121.947200][T27284] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5409'. [ 1122.027335][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5410'. [ 1122.183681][T27286] gre0: MTU too low for tipc bearer [ 1122.188965][T27286] tipc: Disabling bearer [ 1122.344251][T27297] xfrm0 speed is unknown, defaulting to 1000 [ 1123.078963][T27298] xfrm0 speed is unknown, defaulting to 1000 [ 1123.086760][T27297] wg1 speed is unknown, defaulting to 1000 [ 1123.161842][T27328] netlink: 'syz.4.5419': attribute type 1 has an invalid length. [ 1123.182611][T27328] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5419'. [ 1123.653027][T27298] wg1 speed is unknown, defaulting to 1000 [ 1123.939264][T27354] netlink: 'syz.4.5422': attribute type 1 has an invalid length. [ 1137.051573][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1137.061702][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1137.069751][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1137.078906][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1137.088358][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1137.112729][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1137.120706][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1137.128288][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1137.136740][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1137.145488][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1138.084448][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1138.095526][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1138.104086][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1138.113227][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1138.123008][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1139.162293][ T5840] Bluetooth: hci6: command tx timeout [ 1139.284830][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1139.295045][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1139.304427][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1139.315779][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1139.325939][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1139.425662][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1139.435727][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1139.443909][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1139.453040][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1139.461415][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1139.636860][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1139.648498][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1139.656950][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1139.666823][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1139.675283][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1140.200759][ T5842] Bluetooth: hci7: command tx timeout [ 1141.240942][ T5842] Bluetooth: hci6: command tx timeout [ 1141.400515][ T5842] Bluetooth: hci8: command tx timeout [ 1141.480833][ T5842] Bluetooth: hci9: command tx timeout [ 1141.720466][ T5842] Bluetooth: hci10: command tx timeout [ 1142.280522][ T5842] Bluetooth: hci7: command tx timeout [ 1143.320820][ T5842] Bluetooth: hci6: command tx timeout [ 1143.480786][ T5842] Bluetooth: hci8: command tx timeout [ 1143.561180][ T5842] Bluetooth: hci9: command tx timeout [ 1143.803061][ T5842] Bluetooth: hci10: command tx timeout [ 1144.360648][ T5842] Bluetooth: hci7: command tx timeout [ 1145.240892][T19125] IPVS: ip_vs_send_async error -101 [ 1145.400593][ T5842] Bluetooth: hci6: command tx timeout [ 1145.560929][ T5842] Bluetooth: hci8: command tx timeout [ 1145.641008][ T5842] Bluetooth: hci9: command tx timeout [ 1145.880629][ T5842] Bluetooth: hci10: command tx timeout [ 1146.441013][ T5842] Bluetooth: hci7: command tx timeout [ 1147.640662][ T5842] Bluetooth: hci8: command tx timeout [ 1147.721023][ T5842] Bluetooth: hci9: command tx timeout [ 1147.963162][ T5840] Bluetooth: hci10: command tx timeout [ 1197.732341][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1197.744809][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1197.755981][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1197.764473][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1197.773109][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1198.759114][ T5842] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1198.768734][ T5842] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1198.778051][ T5842] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1198.788657][ T5842] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1198.797115][ T5842] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1199.813000][ T5842] Bluetooth: hci11: command tx timeout [ 1199.957082][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1199.967594][ T5842] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1199.977430][ T5842] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1199.986987][ T5842] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1199.995589][ T5842] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1200.062890][ T5840] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1200.072818][ T5840] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1200.083715][ T5840] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1200.092819][ T5840] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1200.101223][ T5840] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1200.286379][ T5842] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1200.296656][ T5842] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1200.306625][ T5842] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1200.315407][ T5842] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1200.323909][ T5842] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1200.840394][ T5840] Bluetooth: hci12: command tx timeout [ 1201.880357][ T5840] Bluetooth: hci11: command tx timeout [ 1202.051375][ T5840] Bluetooth: hci13: command tx timeout [ 1202.200647][ T5840] Bluetooth: hci14: command tx timeout [ 1202.360559][ T5840] Bluetooth: hci15: command tx timeout [ 1202.920348][ T5840] Bluetooth: hci12: command tx timeout [ 1203.960332][ T5840] Bluetooth: hci11: command tx timeout [ 1204.120502][ T5840] Bluetooth: hci13: command tx timeout [ 1204.281229][ T5840] Bluetooth: hci14: command tx timeout [ 1204.440776][ T5840] Bluetooth: hci15: command tx timeout [ 1205.000485][ T5840] Bluetooth: hci12: command tx timeout [ 1206.040463][ T5840] Bluetooth: hci11: command tx timeout [ 1206.200505][ T5840] Bluetooth: hci13: command tx timeout [ 1206.360501][ T5840] Bluetooth: hci14: command tx timeout [ 1206.520385][ T5840] Bluetooth: hci15: command tx timeout [ 1206.600793][T19125] IPVS: ip_vs_send_async error -101 [ 1207.080758][ T5840] Bluetooth: hci12: command tx timeout [ 1208.280538][ T5840] Bluetooth: hci13: command tx timeout [ 1208.440619][ T5840] Bluetooth: hci14: command tx timeout [ 1208.600689][ T5840] Bluetooth: hci15: command tx timeout [ 1228.900235][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1228.906899][ C0] rcu: 0-....: (1 GPs behind) idle=1e24/1/0x4000000000000000 softirq=161745/161746 fqs=5175 [ 1228.918234][ C0] rcu: hardirqs softirqs csw/system [ 1228.924661][ C0] rcu: number: 8264 0 0 [ 1228.931096][ C0] rcu: cputime: 487 51991 19 ==> 52480(ms) [ 1228.938915][ C0] rcu: (t=10500 jiffies g=151237 q=6025 ncpus=2) [ 1228.945338][ C0] CPU: 0 UID: 0 PID: 27346 Comm: syz.4.5422 Not tainted syzkaller #0 PREEMPT(full) [ 1228.945356][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1228.945367][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 1228.945393][ C0] Code: 48 16 00 00 83 fa 02 75 21 48 8b 91 50 16 00 00 48 8b 32 48 8d 7e 01 8b 89 4c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0e 27 9c 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 1228.945407][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000246 [ 1228.945421][ C0] RAX: ffffffff8970cc2a RBX: ffff88807b417000 RCX: ffff888025cadb80 [ 1228.945433][ C0] RDX: 0000000000000100 RSI: 0000000000000009 RDI: ffff88807b417000 [ 1228.945443][ C0] RBP: 1ffff1100f682e6a R08: ffffffff89702086 R09: ffffffff8df41aa0 [ 1228.945455][ C0] R10: 0000000000000001 R11: ffffffff89634ae0 R12: dffffc0000000000 [ 1228.945466][ C0] R13: ffff88807b417354 R14: ffff88805337f800 R15: 0000000000000009 [ 1228.945476][ C0] FS: 00007fd66db496c0(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 1228.945490][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1228.945500][ C0] CR2: 000000110c29ba1f CR3: 000000006b2c4000 CR4: 00000000003526f0 [ 1228.945514][ C0] Call Trace: [ 1228.945522][ C0] [ 1228.945527][ C0] taprio_dequeue_from_txq+0x2a/0x980 [ 1228.945633][ C0] ? taprio_dequeue+0x26/0x550 [ 1228.945663][ C0] taprio_dequeue_tc_priority+0x1ac/0x750 [ 1228.945696][ C0] ? taprio_dequeue+0x26/0x550 [ 1228.945719][ C0] taprio_dequeue+0x186/0x550 [ 1228.945745][ C0] __qdisc_run+0x23f/0x1510 [ 1228.945808][ C0] qdisc_run+0xc7/0x300 [ 1228.945824][ C0] ? net_tx_action+0x58c/0x900 [ 1228.945856][ C0] net_tx_action+0x717/0x900 [ 1228.945877][ C0] handle_softirqs+0x22b/0x7c0 [ 1228.945895][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1228.945918][ C0] __irq_exit_rcu+0x60/0x150 [ 1228.945933][ C0] irq_exit_rcu+0x9/0x30 [ 1228.945947][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1228.945966][ C0] [ 1228.945972][ C0] [ 1228.945978][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1228.945995][ C0] RIP: 0010:lockdep_unregister_key+0x2ce/0x350 [ 1228.946012][ C0] Code: 41 5d 41 5e 41 5f 5d e9 a0 f1 08 00 89 c7 e8 79 07 00 00 e9 6c fe ff ff e8 df 0d bc 09 41 f7 c7 00 02 00 00 74 bb fb 40 84 ed <75> ba eb cb 90 0f 0b 90 e9 2e ff ff ff 90 0f 0b 90 e9 36 ff ff ff [ 1228.946025][ C0] RSP: 0018:ffffc9000512f028 EFLAGS: 00000246 [ 1228.946038][ C0] RAX: 0000000000000046 RBX: ffff888066233268 RCX: 0000000000000046 [ 1228.946048][ C0] RDX: ffffffff95884630 RSI: ffffffff8d7a85e9 RDI: ffffffff8bc086e0 [ 1228.946059][ C0] RBP: ffff888025cadb00 R08: ffffffff81ab3b98 R09: ffffffff8df41aa0 [ 1228.946070][ C0] R10: dffffc0000000000 R11: ffffffff89635300 R12: 0000000000000000 [ 1228.946081][ C0] R13: ffff888066233269 R14: 0000000000001000 R15: 0000000000000a87 [ 1228.946095][ C0] ? __pfx_fifo_destroy+0x10/0x10 [ 1228.946131][ C0] ? __is_module_percpu_address+0x28/0x3f0 [ 1228.946165][ C0] ? __pfx_fifo_destroy+0x10/0x10 [ 1228.946183][ C0] __qdisc_destroy+0x166/0x400 [ 1228.946206][ C0] taprio_destroy+0x263/0x550 [ 1228.946231][ C0] ? __pfx_taprio_destroy+0x10/0x10 [ 1228.946252][ C0] __qdisc_destroy+0x153/0x400 [ 1228.946274][ C0] taprio_attach+0x25a/0x380 [ 1228.946302][ C0] ? __pfx_taprio_attach+0x10/0x10 [ 1228.946325][ C0] qdisc_graft+0x1175/0x1590 [ 1228.946359][ C0] ? __pfx_qdisc_graft+0x10/0x10 [ 1228.946379][ C0] ? qdisc_create+0xa52/0xea0 [ 1228.946401][ C0] tc_modify_qdisc+0x16d3/0x2020 [ 1228.946428][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1228.946468][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1228.946483][ C0] rtnetlink_rcv_msg+0x77c/0xb70 [ 1228.946504][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1228.946522][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1228.946538][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 1228.946577][ C0] ? __asan_memcpy+0x40/0x70 [ 1228.946606][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1228.946631][ C0] netlink_rcv_skb+0x208/0x470 [ 1228.946654][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1228.946673][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1228.946704][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.946733][ C0] netlink_unicast+0x82f/0x9e0 [ 1228.946759][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1228.946781][ C0] ? netlink_sendmsg+0x642/0xb30 [ 1228.946801][ C0] ? skb_put+0x11b/0x210 [ 1228.946838][ C0] netlink_sendmsg+0x805/0xb30 [ 1228.946868][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.946893][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1228.946930][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1228.946957][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.946980][ C0] __sock_sendmsg+0x21c/0x270 [ 1228.947007][ C0] ____sys_sendmsg+0x505/0x820 [ 1228.947032][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.947059][ C0] ? import_iovec+0x74/0xa0 [ 1228.947104][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 1228.947126][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.947151][ C0] ? futex_wait+0x285/0x360 [ 1228.947192][ C0] ? __fget_files+0x2a/0x420 [ 1228.947211][ C0] ? __fget_files+0x3a0/0x420 [ 1228.947238][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 1228.947260][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1228.947288][ C0] ? rcu_is_watching+0x15/0xb0 [ 1228.947317][ C0] do_syscall_64+0xec/0xf80 [ 1228.947339][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.947354][ C0] ? trace_irq_disable+0x37/0x100 [ 1228.947374][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1228.947393][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.947408][ C0] RIP: 0033:0x7fd66cd8f749 [ 1228.947423][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.947435][ C0] RSP: 002b:00007fd66db49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.947450][ C0] RAX: ffffffffffffffda RBX: 00007fd66cfe5fa0 RCX: 00007fd66cd8f749 [ 1228.947461][ C0] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 1228.947471][ C0] RBP: 00007fd66ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1228.947480][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.947489][ C0] R13: 00007fd66cfe6038 R14: 00007fd66cfe5fa0 R15: 00007ffcd769fa58 [ 1228.947515][ C0] [ 1230.549092][ C0] sched: DL replenish lagged too much