last executing test programs: 2m46.846415127s ago: executing program 0 (id=5529): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000001280)=0x7ffff050) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)=ANY=[@ANYBLOB="240000002e0029022ac77000fadbdf25", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) socketpair(0x21, 0x5, 0xd, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "e7ffff7f00000000"}]}, @NFTA_SET_ELEM_KEY_END={0xffffffffffffff66, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) r5 = socket(0x10, 0x3, 0x0) getpeername(r2, &(0x7f0000001180)=@in={0x2, 0x0, @dev}, &(0x7f0000001240)=0x80) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x1}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, r7}, 0x14) syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0xffffffff000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="2000000007060104000d000000000000050000090900020073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20004000) 2m46.705400526s ago: executing program 0 (id=5530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003100090027bd7000fddbdf250600000008000a0011"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "15fe08", 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3, 0x3]}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xfffc}}}}}}}}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async, rerun: 32) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xa2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000007dc0)=@newtfilter={0x8b4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x874, 0x2, [@TCA_CGROUP_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x9, 0x3, 0x5, {0x7, 0x2, 0x3, 0x6, 0x4824, 0x94}, {0x4, 0x1, 0x5, 0xfffa, 0x1, 0x7}, 0x6, 0xa1aa, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x1, 0x0, 0xe3a1, 0x9, 0x2, 0x1693, 0x9, 0xffffffff, 0xffffffff, 0x1, 0x80, 0xfffffe01, 0x3, 0x1ff, 0x5, 0x8, 0x5, 0x2, 0x80000000, 0x1, 0x7, 0x3, 0xb3, 0xfffffbff, 0xc, 0xfc4, 0x5, 0x2, 0x5, 0x9, 0x34e, 0x3, 0x8, 0x3ff, 0x3, 0x9, 0x7, 0x7fffffff, 0x4, 0x6, 0x97f, 0xde, 0xd, 0x7, 0x2, 0x481d, 0x7fffffff, 0x0, 0x5, 0x4a09, 0xa63, 0x7fe, 0x3, 0x9, 0xcb, 0x3, 0x7, 0xffff45cc, 0x7, 0x8, 0x1, 0x5, 0xcbb, 0x8, 0x8662, 0x3, 0x9, 0x5, 0xffff, 0x27, 0xfffffffa, 0x8000, 0x1, 0xc, 0xfff, 0x8, 0x5, 0x1, 0x2, 0x40, 0x48, 0xa64, 0x40, 0x8, 0x2, 0xf, 0x0, 0x2, 0x7, 0x9, 0x400, 0x10000, 0x0, 0x5, 0x9, 0x7, 0x2, 0x6, 0x0, 0x3, 0x4, 0x2, 0x1, 0x2, 0x17141ccd, 0x3, 0x80000001, 0xfffffffb, 0xffffffe7, 0xff, 0x0, 0x20000000, 0x2, 0x6, 0x5, 0x9, 0x4b, 0x6, 0x8, 0x8, 0x200, 0x218d, 0x4, 0x4, 0x3ff, 0x1, 0xff, 0x3, 0x0, 0x2, 0x4, 0x1000, 0x6, 0x2, 0xffff2238, 0x9, 0x5, 0x4, 0x8, 0x6, 0x9, 0xfe0c, 0xfffffffd, 0xffffff81, 0x7, 0x9, 0x8001, 0x1000, 0xfff, 0x9, 0x1, 0x5, 0xfffffff7, 0x37, 0x78, 0x4, 0x9, 0x5, 0x5, 0x2, 0xfffffffb, 0x800, 0x62e, 0x5, 0xbb, 0x84, 0x3, 0x6, 0xc17e, 0x3, 0x6, 0xffffffff, 0xb, 0x3, 0x8, 0x1, 0x0, 0xef, 0xfffffffb, 0x8, 0x6, 0x9ad1, 0x5, 0x3, 0x4, 0x5, 0xb, 0xe, 0xfffffc01, 0x5, 0x39, 0x2, 0xb, 0x7fff, 0x74, 0x200, 0x3, 0x0, 0xe1, 0x974, 0x2, 0x9, 0xfffffff9, 0x2, 0x9, 0x7, 0x2e, 0xfffffffa, 0x5fb, 0x7fffffff, 0x271a, 0x5, 0x2, 0x7, 0x56, 0x2, 0x5, 0xdd3, 0x4, 0x9, 0x9, 0x1, 0x4, 0xf, 0x400, 0x2, 0x800, 0x7, 0x0, 0xfffffffe, 0x1, 0x3, 0x3, 0x8, 0x3718, 0x6, 0xf, 0x8, 0x6, 0x1ff, 0x20000, 0x8, 0x7, 0x3, 0xfffffff8, 0x4, 0x0, 0x6, 0x5d, 0x49, 0x2, 0x6, 0x2, 0x3ff, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x8, 0x4d2a, 0x1, 0x5, 0x9, 0x0, 0x3, 0x8000, 0xffffba77, 0x9, 0x5, 0x4, 0x7, 0x3, 0xf, 0x4f0c, 0x4, 0x8000, 0x5, 0x10001, 0x1000, 0x0, 0x2, 0x3, 0x2, 0x4cc, 0xec, 0x800, 0x7f, 0x101, 0x1, 0x8, 0x0, 0xebe, 0x4, 0x5, 0x8e0, 0xfffffff9, 0x402a, 0x5, 0x1, 0x80000000, 0xcfc, 0x8, 0xffffff01, 0x9, 0x6, 0x1, 0x8001, 0xffffffff, 0x8, 0x9, 0xffffffff, 0x7, 0xb90f, 0x7ff, 0x20, 0x0, 0x1, 0x5, 0x4, 0x2, 0xb1, 0x11d, 0x7e, 0x3, 0x800, 0x1, 0x2, 0x3, 0xccb, 0x7, 0x2, 0x9, 0xfffffffa, 0x6, 0x7b, 0x80, 0x304, 0x3, 0xc7, 0x8, 0x5, 0x1, 0x9, 0xff, 0x5, 0x0, 0x7, 0xfffffffa, 0x2, 0xa2, 0x8001, 0x3, 0xa, 0xd563, 0x7fff, 0x1, 0x53e468b3, 0x5, 0x3, 0x314, 0x400, 0x4, 0xffff, 0x800, 0xb, 0x5, 0x1, 0x7d, 0x0, 0xea34, 0x0, 0x7, 0x68d, 0x2, 0x6, 0x200, 0x10000, 0x793d, 0x7, 0x876d, 0xfffff800, 0x5, 0xfff, 0x6, 0x5, 0x0, 0xfffffff9, 0x1, 0x5, 0x5c88, 0x6, 0x80, 0x75e, 0x9, 0x8, 0x1ff, 0x7fffffff, 0x7, 0x81, 0xffffffff, 0x35, 0x0, 0x81, 0x101, 0x100, 0x52, 0x0, 0x9, 0x0, 0xfffffc00, 0xfffffffc, 0x6, 0x7fffffff, 0x9, 0x5, 0x6, 0x400, 0x6, 0x8001, 0x7, 0xfffff144, 0x5, 0x6, 0x200, 0x5, 0x4, 0x9, 0x5, 0x1, 0x9, 0xfff, 0xe, 0x7, 0x4, 0x3, 0x601f, 0x800, 0x6, 0x9, 0x7, 0x3, 0x7, 0x400, 0x9, 0x3, 0x8, 0x9, 0x9, 0x9, 0x3, 0x0, 0x3ee, 0x4, 0x62cb, 0x3ff, 0x2, 0x52, 0xfffffff9, 0xffffffff, 0xb62, 0x1, 0x10000, 0x9c8, 0x1, 0x80000001, 0x6eb, 0x4cc7, 0x2, 0x4, 0xbd9e, 0xfff, 0x7, 0x8, 0x2, 0x4, 0x1, 0x400, 0x3, 0xbf, 0x5, 0x5, 0x2, 0x2, 0x8, 0xfffffb1a, 0x81, 0x3, 0x7, 0x9e80, 0x100, 0x10, 0xc, 0x0, 0x2, 0x1, 0x5000000, 0x80000001, 0x8, 0x8d80, 0x4609, 0x3, 0x46b, 0x9, 0x4, 0x7, 0x6, 0x2, 0x200, 0x8, 0x8, 0x0, 0x1ff]}]}, @TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcaaf}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m45.221216742s ago: executing program 2 (id=5536): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000580)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESHEX=r0, @ANYRESDEC=r1], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000b80)={0x1a8, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7919}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x246}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20895}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000880)={{[0x4, 0x8, 0x7, 0x1]}, 0x0, 0x0, 0x6, 0x0, &(0x7f00000008c0)=[{{@_ha_fsid={[0xeb, 0x4cfc]}, {0x2, 0x8, 0x3, 0x6}}, 0x9, 0x0, '\\\x00'}, {{@align=0x9, {0x45bd, 0xfff7, 0x5, 0x4}}, 0xa9, 0x0, 'syztnl0\x00'}, {{@_ha_fsid={[0x10000, 0x5]}, {0x101, 0xe27, 0x6, 0x401}}, 0x0, 0x0, '\x00'}]}) getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) sendmsg$nl_route(r5, 0x0, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x44) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)="2e00000011008188040f6eec59acbc0413a181004000000004000000000000000e00460012e2440102800200121f", 0x2e}], 0x1}, 0x800) r8 = epoll_create1(0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000700)={0x14}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r8, &(0x7f0000000740)=[{}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80802, 0x0) 2m44.802917394s ago: executing program 2 (id=5538): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xf, &(0x7f0000000040)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000240)=@ll={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000340)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="807f945d60b48d1695af498180f6af464d7ba05f4a82e846b949a95cba2304000936614ca69f52d8d85254a4679023541bdaedcbc2ed926591f475b278cef24b30b80bbd1843948c61da83fed827ff9b7b9365f5efe48d9577945edf2e4a", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r1], 0xffffffffffffff47) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2m44.340871977s ago: executing program 2 (id=5541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x2c, 0x0, 0x0, 0x2}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x806}, @val={0x0, 0x1, 0x3, 0x99, 0x401, 0x80}, @ipv6=@tipc_packet={0x0, 0x6, 'F+T', 0x28, 0x6, 0xff, @mcast2, @private0, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xdf, 0x0, 0x1, 0x7, 0x398a, 0x4, 0x4e24, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x1}}}}}, 0x5e) r1 = socket$vsock_seqpacket(0x28, 0x5, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, [0xdb05]}, {}, {0xa888, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x20000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r4, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000080)={0x0, 0x3, 0x400000000000002, 0x6}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x100, 0x4) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local, 0x1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000002c0)={0x10000000}) 2m40.576798809s ago: executing program 2 (id=5561): r0 = socket$l2tp(0x2, 0x2, 0x73) write(r0, &(0x7f0000000000)="cb9afb3ee53cef19fc16fb2a23e151d22b146092f611d0f57fe5a40eb00e89f1ada57ef1072d967557c00bb6b5932859e37751b4f174e3ea57cc11ba5d5dda16a515d9298ac5da37a2da9e1caea4543028bafe2baebca20de5d6892511412fd1dc373e03814734d7c24e34cbeceb10b47850142c3d537b056e8e98e748ca1dbb776311ff53f402eeaa07a0948d822764e84f05f7b80a06a687", 0x99) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r3, &(0x7f00000017c0)=""/182, 0xb6, 0x40002000, &(0x7f0000001880)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x1409, 0x1, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4084}, 0x810) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x324}}, 0x20040040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x4001, 0x3, 0x2e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x5, 0x5}}, @common=@inet=@multiport={{0x50}, {0x0, 0x83, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e20, 0x4e22, 0x4e23, 0x4e23, 0x6e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1, 0x2, 0x4, 0x2, 0x3], 0x3, 0x4}, {0x3, [0x3, 0x4, 0x1, 0x7, 0x6, 0x1], 0x6, 0x5}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x7, 0x4, 0x2, 0x3, 0x1, 0x6], 0x5}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r7, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x5}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000780), 0x10) sendmsg$can_bcm(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)={0x4, 0x0, 0x9, {}, {0x77359400}, {}, 0x2}, 0x48}, 0x300, 0x0, 0x0, 0x20008011}, 0x24000004) shutdown(r5, 0x0) recvmsg$unix(r5, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r9, 0x0) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000540)={0x18, 0x3c, 0x13a, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x35, 0x0, 0x0, @fd=r4}]}, 0x18}, {&(0x7f00000008c0)={0x540, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, "", [@generic="fdaaa76219cb39e8b2bf2ba7f09da96ef65cad4bb77e05b7d482741b105629a83aae77af0a3316574171354b1c0a8de718ae207b2ae04fe0e19092b59f8bc28f4ec9ed96e2c4aac3e62b737c32bc3c0c357ee4af7f828f244642", @typed={0xaf, 0x87, 0x0, 0x0, @binary="a1ee76ea6f59bae36eea3bc897215277219acc2d8ccc2cf9b51bc68fa109b0bc90b63040a0ea089ee1aeb381559fdc5bdd8bfc0c66a60bf7ec61ada3f93005c1dc61d321eb874962337fc4e5116115a6483227581fe57ba92fdad9f1820ae5bb355bbc67bf76745bcdc75d69e046484c8df889d1945597c37ee3c6da047c8576cafb01b9c2a148796a664f2cbd218baa6d25379326594a64a644af2ba62fc3a248a314cb59feb41d3e7dec"}, @typed={0x8, 0x6c, 0x0, 0x0, @u32=0x8}, @nested={0x161, 0x57, 0x0, 0x1, [@generic="4bad7320ded1a3b6a1f117a6c5137288c58cda002d15466f35c18e39feea2acd7ddb33f4f3d24bc67d83f219d8cf0e761658430f8d4e83476d72a72260b4286c6690ee9053b7804a783829ed596f48d924bbf600252632303066752e2884021ed987d6900425e14ff9793ac4f47e0bd52c1d2e6ab4f60d583af0cfcd543e0ec1644058104c9a7935e2301e4908a5848c987f9913d0a97dd5d688e40bdfc04f95c143fe11098a601b7cc7f2866eead936383585f5b21ab023bf10677040a93e1e3a6723002c80705c8cbd451d4aec3f118b103216718fef3a166c0f7552bd2660a36057fa319f201ec41eedeed1e2c0", @generic="2297495fb341b02fa591ac4da8c44f854029f4ca436273a2f0d883cb53df7c829ce303bc58139e068a83d0bd3b1aa48f13fd24e18042c40e6500bc8e5325906835309e9a346491b66ca4d80476fe13c0c63a6b3b9a3bc6732a7ba5d4cf38c39038293eca668b7e8f906b5e8fbb65"]}, @nested={0xd8, 0x104, 0x0, 0x1, [@generic="3aa1a99b16245af1bbc414a43d20ef68fa3e91692963e898a68cdac915160f4f5ddbe2ae5a32c288451b23581b8da3c289f276d448313423219f6fa3b671d70bb904b187d29f1ab946f0d1ad0893707688bae5ebb7da958f758daebc1ccd164ba12b80e80a1c3032424dbe60de31a5934e73904ff644778635376d3dc42e5acd67553b7d52da05175a567a8086ad64453e8ec740d702dd91ac413a3a003ae6441026a7155f45a57a410d5d745cb379cc44bd46cbaf5a058e67c5", @nested={0x4, 0x79}, @typed={0xa, 0x168, 0x0, 0x0, @str='*#]\'\xe5\x00'}, @generic="40dfd9a93694", @nested={0x4, 0x62}]}, @typed={0x8, 0xa8, 0x0, 0x0, @fd=r0}, @generic="4541e987b77ddc9009f6a6b7384806bd16f0fdde1196d578b7b26cdf14ff82ec75ca37bcc46bd13eade942d2be534d4675fdec9baeae6cd56d5766535205e5d1def6da2a928c8818d6c5fc09406a0c71fd117c4bb5d813566bd1a2e7b07e7e89710c240c056cd9f857b6aa67257edcaae6d62920e7f22a63c7edf55c0cc05149a4eea96328983a8e5b646532d61e6d06f4973e7c77c44d358a1c8db46c51a1aa40e325624b8ecb158bc616d7cdcba392a69fb9ddd0ce79e120", @nested={0xeb, 0xc2, 0x0, 0x1, [@generic="b74eec584e0648e8d2c6aba1be708f00c4137f741ac72931edd29a33232d6d5b238b0dd183414d4c276c7fd77eb8409d821ab3d353f41f0e07180713baebbc1005bb", @generic="3779e6839e75d4950e1820b20d2fa32b0b49efb4aa951a66fbf2d15c0fe3f24ca8a58829fe924a9a707f54a3fb7d7750ce504de4b8a405b9517f60517b84b2f9c363d24c3c9099317cd32ea2ac72c880c01ee4a72d60650cbadd1e02773f04782fc27a949599c069ffefb4c60bbadffcc58b7d9a6a4da9601c96bc3a5b97eb0f94ccb077c321b0a8ae15af6adaa915ab5604832700766a20f961637b27ca19911b63296e6e"]}, @generic="99e746be0863952eaad4383aee2c6e20c5bd59a71f2c36bbf776a4bad557b74295915403b3a480c86e7f2bf0df4d37cfd7c6f1"]}, 0x540}, {&(0x7f0000000e00)={0x5c, 0x37, 0x10, 0x70bd2c, 0x25dfdbff, "", [@generic="dd1f423a192cf5a8b7f522349c4a10cbbee8bf356e1d52c0429de68127b09457c774b51c2e538add9a26ff373cdf54ea634fc2ccf6de3a8335296b0eb557b604baf65ef9594be5843937751d"]}, 0x5c}, {&(0x7f0000000640)=ANY=[@ANYBLOB="100000004000e5002bbd7000fedbdf25ef5f2b5be1d34c82adee75a63524d5393914c11479fe716186925c3c937864467926b44210dac5e3dd9c1e52e11105a0dc1a7a1abba0db0e295a1e26d3a13ddcfe2aee3c50bb282b841374a382e1ee747a21914b6bf4ba837074dfe4d1314b4c4bb822cdeaed715b92a8f1ed0a417225dcb0810b54bf7e3543c57896d1ee197f54ce0605ebdd27b44f771b60ea00a3ab5c8b418fc446fcf1940faace43c2310f8301848f19ddbcb0eae0fed0d07258376e621c16dfe8c024134ef778773d03e1ff4cf3d69640fa1f01fdf0e7815aefa88c79b2b166c34700d1c88616df59a6b4054f76b5da00"/260], 0x10}, {&(0x7f0000000ec0)={0x104, 0x34, 0x4, 0x70bd27, 0x25dfdbfe, "", [@typed={0x4, 0x4c}, @nested={0xef, 0x7d, 0x0, 0x1, [@nested={0x4, 0x95}, @generic="f96c014199e2b2df7be5988abdbc2cf09ef1252de172d890ab625ad61e98838cab4e032ced88049c654e1dfef0f1d0f0f6b9368ac2eecf6217696d5611840462e37fc58eada20e710bdf418fd8a099462f475fe05c43554f799f29ed0978ed6dc7140bb84c743f9526f89efadf025fb71736c67d57ef196ce35b57102775a8d73c8f7c455f405c77ce4a2da59702dff834d3041a4205a6020da7234f52dad0b88e4a53186752fe8b4cf261d94a48f8ebd344b1e0b765a1016613883809acbeed4fcf23c9a8becf37d8845936efaec27aac775389145842f954fb41fb810ebb70eb46cc0208fe91"]}]}, 0x104}, {&(0x7f00000010c0)={0x15c, 0x38, 0x300, 0x70bd25, 0x25dfdbfc, "", [@generic="eb719bc4bb2e774c9fe4e5873e83c8e7d09bb7b0ab7cdc263a0b7ef19258f41b78bbe3d0dc644b264c0dfd33ad5bcc7a05a2103b0ee9ee46cd3862ceba8dacce7b749b29b71b11cffd903025c37188df0437aaf50e07178d8968cc970dce354714e640417343ebe44ffc50563c7494b3bbcadb4746c56f455dc3a88fdfff3c9ae85eeb7ea99168165612940228526c10804664a4ddeae08c4d29e2225b9fb7f0fac863800d100af4ad818face91506e1ab09b3ce3378a83ee8e73a38cd617433a26bfd76548558f53610c0398ada11113d796d32c3978d6b6563b099b286c8b2cee49f17e88c37c9de325bcd01823e1f8fc07da4a5c0786c", @nested={0x18, 0xfb, 0x0, 0x1, [@nested={0x4, 0xf6}, @typed={0xc, 0xcc, 0x0, 0x0, @u64=0xfff}, @nested={0x4, 0x10d}]}, @nested={0x28, 0xf8, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @pid=r9}, @typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @generic="1081fc425d97f2024d", @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x400}]}, 0x15c}], 0x6}, 0x0) 2m40.475068516s ago: executing program 1 (id=5562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000500)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x5, 0x4, 0x1, 0x10}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r1, &(0x7f0000000840)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000880)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfffa}, @NFTA_LOG_GROUP={0x6}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20010940) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffe}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000091117b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000500)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) (async) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x5, 0x4, 0x1, 0x10}}}}}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) bind$packet(r1, &(0x7f0000000840)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r1, &(0x7f0000000880)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfffa}, @NFTA_LOG_GROUP={0x6}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20010940) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffe}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000091117b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async) 2m40.474219328s ago: executing program 4 (id=5563): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r2, &(0x7f0000000140)="9f", &(0x7f0000000180)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f00000002c0)="73f73d18b0dc", &(0x7f0000000300)=""/68}, 0x20) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f00000008c0)=@generic={0x0, r9}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000900)={r8, 0x0, 0x0}, 0x10) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r11, 0x84, 0x1f, &(0x7f0000001300)=""/4057, &(0x7f0000002300)=0xfd9) write(r10, &(0x7f0000002340)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000002380)={'wg1\x00'}) (async) sendmsg$nl_route(r0, 0x0, 0x20040040) (async) socket$inet(0x2, 0x5, 0x2) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0x8, 0x0, 0x8, 0xff}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x5c}}, 0x0) 2m40.213890253s ago: executing program 2 (id=5565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x39, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001480)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x11b01}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0x15877e98, 0x4}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) 2m39.81152354s ago: executing program 2 (id=5566): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000c6a2ddcf6177a88a840008100190088644509008c006600071430f4ebf900061d90780a0100ffac1414bbee2802ef6f8792dbeb10ba3144a3e2e4e48063350d5c8e17fdb845f56ed948b757ac82064dd9dd2bbffe122df0df5932a3b5b89bc3d4e4b90ef61f8ae0166a65e70c2006b112a5e4626c9727b2f8ee0cec915b65be47d6b226c2e868d773e93c5d1410269ebf552ad15412ea67f770461d16"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000003c0), 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="2c005a8028000380240008"], 0x48}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010410000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000880)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x8, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYRES64], &(0x7f0000000ac0)='GPL\x00', 0x1, 0x100000, &(0x7f0000000b00)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, &(0x7f0000100b00)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000980)=@req={0x800, 0x0, 0x401, 0x397}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r8}, 0xc) bind$bt_l2cap(r6, &(0x7f0000000480)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000540)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) setsockopt$packet_int(r10, 0x107, 0x13, &(0x7f0000000580)=0x9, 0x4) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809ff070000ffc10002d588380003c1800000"], 0xfd6c) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) 2m39.524169435s ago: executing program 1 (id=5568): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f00000000c0)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(0xca, &(0x7f0000000140)="040e0c01031000ffffffffff40ffff", 0xf) write(0xca, &(0x7f0000000180)="040e0c01032000ffffffffffffffff", 0xf) write(0xca, &(0x7f00000001c0)="040e0a01602000fb000a00020a", 0xd) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, 0x0) write(r0, &(0x7f0000000240)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000004c0)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x800, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x2, 0xe5e1}]}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x2, 0xe5e1}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r3}, 0x8) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000900)={&(0x7f0000000940)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000980)=0x20, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x12, 0x3, &(0x7f0000000a80)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b00)={'netdevsim0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000d00)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000d40)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000d80)={0x2c, 0x0, r6}, 0x10) 2m38.894958671s ago: executing program 3 (id=5570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x48241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf3, &(0x7f0000000140)=""/243, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf3, &(0x7f0000000140)=""/243, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x7}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'hsr0\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa88a8110081002f000800450000244000e000062f90787f000001ac141441a001880b"], 0x3e) 2m38.662769297s ago: executing program 3 (id=5571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x100, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x20004004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b80000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000290000cc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000020000000000000000000000ffffffffffffffff0700"/112], 0xb8}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8014) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000500)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f00000005c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600), 0x30}}], 0x2, 0x41) getsockname(r5, &(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x80) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x80, 0xa, 0x4, 0x7, 0x0, 0xd94e, 0x38d4a25, {0x2, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x3, 0x8, 0x0, 0x5, 0xd}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)={r7, 0x90, "6e1b0426269c2baabd9c204e6de44ab2ea4c49706d200b85c499c15992ecd6bcfafbf086984f0179c585a3afa886a6a733ffbbd51b915964c4d29b6c4baf5c4b3e61428aeb9b9375f10285aae46033085bd6c04c2b1dcfad472904fc30e3ec73122ddae0ad2b50efadc4ab10490c5c8cbe1831379521a48099ea0ce7fc75d90ab6887a15868ff93433b6bf1d29b113fd"}, &(0x7f00000001c0)=0x98) 2m38.565308252s ago: executing program 3 (id=5572): socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x3}, 0xa) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001200010a00000000000000008001"], 0x20}}, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/68, 0x44}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x2, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0xfc0, 0x65, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb5a28ada390a7b0a58177e7d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef759d8f6ca8744bd9d672c1c9368faa9f538c1e6d3f741c022ddc02e6d3e1881c4ebf6d62df9fc11edf041909cea12539f7b05232c1cd9a748ff7e4a6b7ce7420bab33b3ce6da2742316d128730875e8c1d068a59aef9030e56546effdf83fe2b6fcadf2a73552e77d9cfdb452639cae6aa8f5c7aba74516be0a290f60c30c51e8de293376c07b999d87ac564e47f21f28fda4d277beb21a78ab228bfa2b84461fc73b9a82c9ac29bf066fa44f3f676ef64edab4c6dcaa57c48c0065817b0cbf3263361e93334a400fd74ae663ccc959da070390c833a3dc9381a771d719ae9417cd07b43c30e6a10ae8a59c4fd0a9004cc3f9cb772a64d240d7a0d0dac57f4d7978a304adf48f94ce0b7d6a2dff5d3ff8738a81daad9df5b8d6f361e7032c0d2cc84c73a7a2f07a35b1b26966bb08fe07ecb2438006de2d9ff9b9ca0b94bc44c858e785a261bbfbf5f6cfa78b017d671ee8180312522c8031744591711d0517fb8b120e27fb7752f0a0e85bbf1e7059aa2711bf2355fe98e3df0d7cece9741623e2fa492af8287e0fa75daea5725e0519e70aba398c00ae69c572e327755ba2fa81dc47bdcd4e5b722e0ecc8f92f4cd821d575f5f8421dc2e2994621d17da042fd59a2c3ee0ba998a771e066fcf3646007ef3c731edb9472baaa6a5722b09aa6a4da93d855fee7bc2a4db816880160449c576ed46b4ca1e299595f0116946b841308bbd9c2d8e82ce9bcd9173476523bfa8abb82cbd16ddf2efb4aeb5476ab0f5dadbe2528360195a317f3106d25b016901b65b6eed65062083234f205cf4fefe2ee0af15a86feb5d7473d1cdf202387127171d633c02dc39faca7d69721074c0e7eee28ff71fb9e75d80d8fa6bc70a50bd71f60569cb9a30b0cf5599c790353590fd3fb91f77ec89257faa66ff3d13913906166604af616d8de1b92b9cc459a05daad927ebf023c53afdf5ebad5e1d73632777374dfe33b0b90e0cc4cf85bbba301ffe94b26b9f792bdde6d5a9c644bd15ad45c373f768a3a3868ed96c112f2429a27a97bd7756cec800e4ed644a22a81f1010ec376a5726e530d5bcecc635db756ff9a6e2ee89248949d52f88c84cf71be5428a4675430ecef15f1c8ff6a786e5b74eeb76fd26b53dd6287b8e9134b8096b9425f650039af1b3465ab57662ce70c5e29c559e6ffed62f731fd95d31c2f7fa57d98a8aa0b30e454ea73d4f8ba1242bb511e2d0d0e7a764f87cc6b208f85b79b980285cd890dacf77dc2668e3c2ad211998f5e3f15be32a3600a2c59821e7e48d46974d17d642ff7b3f1334057c88bea888120095582d257ccaa903d341c850bd2b446c31980acc6f02f0c559a895614f62aea0eee4a904bd1b35193fd2cbff4354834b5f7e8698bad049cfea27a76ec83dfbe2071ff1523bf127713b062ee3ebf6986bd12c31ab386a490734a47466cdde3a82dc7535b1b068a1aa585322c4bf8dd8cf0ca2b8eb56fcf98cf8129148142344d00fca2cd5611e42c607168abcf92c94be28c15be3485375290b825136e0f4047212a866831bc670b9b038355e0c976673b80584c640ec6681ae724ea58685581d493c809fc8861c60ff245cdc486228b0c3c0ac562a3fd777b7d3d43dcc4cf031b70a101bc64a3727d1f5890890070dfc14847f225a82f5a1b3c702970a25a672aa8c4a24bd7d414bb52c839611e48afe3a9022aa9eeedb2dc4cb20aaeb244b0e438f28d3c6cac9fb16171a8b66b93e48d1afb3feae84bb6a4ed0d00ba862dc6fd474fe210faa0d6d51132dcdc4dcdd5d4f94f1ba7dc8b5712188b0f80bd7f6cc211c1a2796d5c8568a97dbfb9e1bcc6e43858342767ffe5d648873215971e968382870afb0f0b33e3a0dbfe70b982abd73b340abaedd3f71ea30c90544b6a3fb8ce0c240d0bc9da7c12a927223185e5ba907d93c30089ca68525983f04ff85ef98314f69e5c9b4a388ca67813fcd0a9b2c083defac488cb3f7e4ebabc7bf6f4f7601a6c4c1a8d10c2fb13f6863c29cf3dcb8bd56768bb0a9e642bb6b94e5957deaeab3e24223e03764bbb16a7084a05735a8d188cbfabcccfce95848a804b56bd5e2051b1755a0e4262044ea2b037113af2e4e90bfed33bdcdc33824245cad3f94c4c9ea0f414a539c36b55d423fbfe4461774696012ee12e9d9c1d645d6dd72b57cca7e8526cc98b2f9e97e23503428642bd8793a87ab120f20092b6e4cbcbb52ec9a406dbb893e303077b675ecbd48e6bec13b700ab09d55e17c8815077a31cd75057c9cd65e7a881924a50bed228517be9c0abb19c3d24c458160405dab3ad0deb989a4e1b2e509b7fa57bcddbe8292512c9656df46acc62a028bb484ad0a6548ed9efdff0e83ca82a1d4c86c7d8810d1e4ff1846d1dc8e80f8206c6834bf9c433bc92ce73560d22ba0c8030b694d737fa0f4deb8b59ea9a35147efc891e993b6489a1ed86bbbf159c590bad0b5892c72383f5afedd58b7fa5e11271b35381dbf4a14daf70505b346cbd83b3258b1b413f7247d04e30e1a9eddbf82e8a25a70903c21e6a16ea34f6d7fe3cad0d51812e827596d50549153e394c4926e5e87b78d0faf440472c12929bb7fd49c959e5b06eb48c51915d80f003c2019525c91bdd4efc0e58d7811b083af3164f254c9c6cf3f8345525770033901308d02a9439131e632d073705e7a28312f8c1ccbeec064113009a34f177d7cd953c9a635f6bb12f0ed871a1d80ba86011e13df3220bda5e49c7c3d70f8c49397f69720f31b38cac3ddc7758f7bd1c99dca967a5aa5c788faf18eb2d996be835c3e5901349104ea63bdf1c195f4d29b8c63a0dcf58d501a102b8ac34709e82c0b0d19f762b1d3c40f01e0cb05b0909b90fb587ea260cdc0a043ac67f649486d3c57b9dbf94e44334fd8034218f82c937e6b8c97b627e8803cab0a27f33ebf0e447ab198cdbfc81371fdb6061dcf8c87c24084614ddfdc71cc2a5324e0ea9a1f7cb21ec46d7e5fd936a2a9224e5fe3c39051eb7269f51832751a36814db4aa01eb1a79eca73480c12b1d7f79bb20ba7b957f7e8343af7c38c81edb6aa48eeb82e17f47f5335f4086ef2cb57c4e70e847a77362271e16158e010f95c3227162caa7f911e94893d3bdf17fb914dddddf7f982ae898914378e3f5a4bc810f246d84ae977290d20773761b8d52bb493076052022586b8ce915b1f4c8f6ef6093e3e12f56e642b1cde9dda220fd7fb26f40ba08899e0217cf2a0883ab552c9432a7d60c6316f936b57c271e13b35d5cc4f20dfbe5fb1b13e916e62cd39e5bec37d0885f6fb5523860f8ae09592d32574e3d9c570c651fa9f4db0d4b9fbd002af8b6919d7587504989123533804e4a496def7d1d9740ec83e0670233a732d55425014276efcf6b6634c5ed5a97f25deaab14fe934efe0eb13992ef48e29a7f190f253d3cce9929f3183c01c72315b6a36998016af08f84155ca1ad18acf1a54d23fe605957f7016873187a47d7ded54667d3ba4aab222319c5968d0192a1af47be415fce025329b81d5034d2c608ddb108d7acac2c145bf4abadb97cc6a05398c04a8385dab86979a0c857d2b27eeb7bdcd154e9f3ea7e394d3a41d81b0410356e252f5d0fba812d5099ede64b20d4a865fc359092ed619f0e3e6728acc69ce41b585e3c54f73fac28c38aa41ea53440cec35cebf03caaef987b18d9942c644c3f6a389970f3d7d18db8ea1f2c5ab2c0bb84478ce5e439c10749b278dfe8348391cb2bd4c7634a3ac813a6ea36f95bdd80c87fae037775834eb5029854cfe59c99a9597944e7cbce895d14ed0ee8b84ea586e77dc12fe709cf9a083c2a4806913d8914b379b4ecf27525e84fc1df3ff520f79ec244da60f680b59d848e591c89f069cec4b497d9579a86c19a710c5cc00239d6cf3c8596c924561843ae20ad5cac9bc92bf42157ab35329cd62242fec48117f1f6f801c68f9f3ec9677875916ceea7795dfbdd23121cfb3bb1813fe1ee14ddbd5a45985bc496449f82a2cc200905eaaadd1333bf79128459f47b580fdd5a10787094b08418c1dac843ab0e15d824aff2b3d242fe78d9762d39c713ded38cf972c227831ba6fb963c956458eef5689180baa3ef2aef3d3e57c63c2d4509759fb711dfe2772341ae308a7892e583be0917ef5355bfe68becce5bc5971733ca260055ee6481c0998698a49a1f03a0f537145d051179601c04cd887a64917480ba96ac046638dd6977599f72a7235506737e7e81a03095cc7e102586ec33b79eff0d1dc2b34912fa89dfb434f0256be53f6695685688af05361d3b6954d416f4be06b9ab7846a44ce25b39c7c79012b2f16159fdf96a3998098691364dbbf930a8e224701ee6f8b899fcde632077a03f649bcfad6f506924db17558b708d38d0b286d6f16f286b26cbf11094def0d017eda65328fe2a24d129bd7ac28679f2a98999e6ae508c3bb31b4e384de7593cf8ac46727cb8a07c30d97c87b638f154e1ae2223a8158e292d9467049cd9115051d3dc0c090f9e9ff6cc425f2fbcd3a4471af5182c0e45485194b6627839d356adf2cf7159b6360f7983a5c50f5cdfcf253cc40a413ed280b9ce7d9d70bef8233fbc8f6e0f5e9100f110519088ce84b41d861171f607338f5acf0664f56c88dd50e86851f59e81c2601f66ee9ced3ecae2dcbd37c55f6058390d6237837ff601900971806e987abbca25221d08f7ccb11a41b3a6246efffaff359e04fa52d7ac630f7d96bc5976817f8a347ddacfe079da0633d855343884bf4d2eb58638cd29d499de7af8490a6d9db3922363839371e819e49e54ef7dc953aa8125e053e3689a22d785c3c1729936eedccf682fd56e0aa6069c1ac88d46b0c06c1f43e631f74f9c8b4557678e90ad7788d25caca67b70da4470cc8d28606acf1fed5d4585085449ced76b1a871ebe8ede8d86570d505010c4f6f4656d2195b6190a1dfe423860b5f767f96c1e0fbf1194b9cab5c87dc2f6ce5f408681e2af319ada237e4232cd356574d7a5edbf7c292acc0c0ca04303614e46b6875f2b58f8b400fda08e24020739c2493ecf7c5d0695ecac14e486bc36a575e6a765d43313c4a4c43c5cc32488c045466504cc690f6b14f12e0a669b701d305a056c610b5f3e696e002bd5b940abac2edde34dbadc88881a5a5fc1d7db4389f33eed574ff8ed69eaf3a656635963e297cf2915c2da4bc7739c5d24017c4757a4aaca2b3323bd4fefefc004d2a675a40b7b31a221d825f79fc12f12b9d6637ca48fc2b55c9e982db14d8cce59172d7d7ee6a1f98a2839d263d7382e81ee306d27e7463a3a0cc71c74df84060ca69331afa4e19e0b124ddf430f4323e682d99f7d77854ba416162182dc161a41af02c75eef1688bef190ca86f712994db24d81831cfe4f54229ba2f5df634e45c2d2980cec96d8aefecdb35dcd7fb360c6117af12bcf894ada94069ba44814334ba4b4d487a866e484b45d7348e07a49460ab64c89f45f8b6f74507179fb6b5f03c202dedbc7cc70723ddb56accb1000000000000"}}, 0xfce) 2m38.306766959s ago: executing program 0 (id=5573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000091020000000000002000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ff0800ff400000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000340)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000005c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x40800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000600)=@assoc_value={0x0}, &(0x7f00000037c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000003800)=ANY=[@ANYRES32=0x0, @ANYBLOB="02100100fa"], 0x9) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1b5cffcde48a67afc18dd1da6f33d843fafb540b49d7f67214562afca4c9c8602aaf69485988df61e6fa09f5d541ca3c8e6934"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24002004) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000003840)={r5, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x11, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, &(0x7f0000000540)=[r2], 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r5], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) unshare(0x26020480) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000000000000000000000000000218100000", @ANYRES32=r6, @ANYBLOB="00dd00000000000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000003380)={0x1c, 0x0, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000003780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20088000}, 0xc, &(0x7f0000000300)={&(0x7f0000003700)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003340)=ANY=[@ANYBLOB="2200000004"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000003380)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000033c0)={r10, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003400)={{r9}, &(0x7f0000003440), &(0x7f0000003480)=r11}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000034c0)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x7, 0x1c, &(0x7f00000035c0)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b70300f8ffffff008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f00000036c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) socket$inet(0x2, 0x2, 0x0) 2m38.216339056s ago: executing program 0 (id=5574): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000080004007f0000010f000700756e636f6e66696e65640019bdd93c007f000001"], 0x44}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r5, &(0x7f00000004c0), 0x0}, 0x20) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000040", @ANYRES16=r4, @ANYBLOB="0103000000000000000008000000"], 0x14}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800e10000000000007b1e81bd545db61eb9abbd0ae8a756000000000000006112990000000000950000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000060000008e0004006401010114200200fe80000000000000000000000000001508000500e0000001"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001515415c0000000000000000"], 0x50) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000925eae884355469079333d93ca1c3a4acd4bbe8915bc623a96616299b78f13c5e53c1860857e38caffb31ccbdebc49d50af4ae2437c11cd4e0f39e034c23bc23db35b50876c16e6170b5503e86b4c75c531cb9fd063496912f904bcbcbf1607960ec00f7415677fb48a6a34eda6b12f7966f26bef4a6482f48d87fe0d6f0df69a0642d53f28cc3d72a60e108297ea681098e3d2f0f0de7a7861e802ee5190967c82dc8100fa262a1ce1e1d11944ef1a50a438367a037d0117a4bc43af03b00adadefd80ce724f935aaa64a5a59cf173c5a84dd445598"], &(0x7f0000000a00)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000a40)={0x0, 0x1}, 0x8}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000a80), 0x0) close(r8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_ext={0x1a, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000001b0000000000000007000000086f0002000028004497fcff1000000085100000fbffffff14a9f4fffcffffff186400000600000000000000020000003a02ffff08000000804700f800000000186300000a000000800000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000c00)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000e00)={r8, r8, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x1, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004005100000095"], &(0x7f0000000f40)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5}, 0x94) (async, rerun: 64) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000f80)={'netdevsim0\x00', 0x0}) ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000000fc0)={'veth0_to_bond\x00', @ifru_hwaddr=@remote}) (async) sendmsg$nl_xfrm(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x104d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x1000, 0x0, 0x800, 0xe92, 0xfffffffeffffffff, 0x10000000, 0x80000001, 0x543}, {0x1000000000004, 0x7fffffffffffffff, 0x100, 0xc}, {}, 0x70bd26, 0x3505, 0x0, 0x4, 0x40, 0x54}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r12}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000041401002cbd7000fcdbdf25080001000100000008000100010000000800010002000000080001000100000006000100000000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x20000010) 2m37.100350614s ago: executing program 0 (id=5575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c000000000101040000000000000000050000000800084000000005240002801400018008000100ac14143f080002000a0101020c0002800500010000000000240010800800024000000009080003400000000308000240000001ff080003400000000018000d805400040000000000000000000000000000000001"], 0x7c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x1, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) mmap(&(0x7f0000081000/0x8000)=nil, 0x8000, 0x0, 0x3032, 0xffffffffffffffff, 0x5f3fb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095", @ANYRESHEX, @ANYRESDEC=r0], &(0x7f0000000f80)='GPL\x00', 0xa, 0xde, &(0x7f0000000fc0)=""/222, 0x0, 0x8}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'pim6reg0\x00', @multicast}) 2m36.330211196s ago: executing program 4 (id=5576): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000940)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000980)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x9, 0xee, &(0x7f0000000500)=""/238, 0x40f00, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x0, 0x2, 0x0, 0x6}], 0x10, 0x1}, 0x94) 2m36.325097746s ago: executing program 3 (id=5577): unshare(0x26020480) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) 2m36.323436739s ago: executing program 1 (id=5578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r1, 0x952de000) 2m35.960704626s ago: executing program 4 (id=5579): r0 = socket$netlink(0x10, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x89, 0xa5}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x7bc}, [@alu={0x4, 0x0, 0x6, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000500)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f00000003c0)={r1, &(0x7f0000000040)='/#--\x00', 0x301402, &(0x7f0000000300)={@align=0xffff, {0x8, 0x2, 0x400000, 0x1}}, 0x7, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)}) recvmsg$can_raw(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/242, 0xf2}, {&(0x7f0000000240)=""/38, 0x26}], 0x2}, 0x40002140) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f0000000080)) 2m35.58882404s ago: executing program 1 (id=5580): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0xd, &(0x7f0000002d00)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000006000000b7040000010000008500000015000000850000000700000095"], &(0x7f0000002d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002dc0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000002e40)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x0, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmmsg$inet(r0, &(0x7f0000002b80)=[{{&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000240)="03", 0x1}, {&(0x7f0000000340)="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", 0x1000}], 0x2}}, {{&(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="89", 0x1}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000000140)="626069dc8d9edbedc889d6d74404af1b6094468ce1b441f613e479bbea21f513774a2e019ab003fcf3fc2d1acaca5a4e24caa71fa87249ff6ce74fdbe39c327fd3f1cfbffb8da937b39a871a707e040b00e0ba4917ae77f28cc9b71a204567cd005a6d67474a9b15a121d51913119fb963cfeaac3cb67f19ad6e3ca4642272576aa5e4090e2b349643b609", 0x8b}, {&(0x7f0000001380)="4c404d45c1cea09866a206104974d5d5914a3da7634b1433990a745c4aefcf3cc5f3cb2a25774ad7ecf0f30c52e0db5ff965c8e765a8aceadba51f6f68172c6ed0dab98f8da30a998f010857405ceaf68a0cd34f507404c2da7e04439e12d94bf5a9986a5c2ee8ea64ab99de61401260c70bc63615c8976258dd3014236e87dcbfcca73c6f7ac177559d3062fb57d8af053312df9f43b70af4144b3f83690120672bea27dda109925338bb90096060222282a6e56801af8e6f1f3125904f1808ba60d1cc5b30a7e6cfe9a3ac5e1446a275", 0xd1}, {&(0x7f0000001480)="1ee50341475babcaf0ccb76395472701d844816c15527e0db37c295206b4445864d2d397d84e1bfea05deb74a09178a322ddddb97a80eed5cb92c3de2a7e283f1bf277f529acc59c10561e725961fad59b392ccd3bcfb8a378d0c2a3586dfeadf24115a9d092193dda8f14cfa729957c6f41f989e804be8b765ed2d7b7e95d17ab3c75033e1f0100092862a2a205c2464a6d56237bc65ce20b900d8b7986250b4ee232225efd911fe8624c5fb682545cb79273fa8fef", 0xb6}, {&(0x7f0000000080)="5b5e1d666389a3a46884d4ff4ec7f3c5bfbd818653d04c843869792843bd844b0d99bb6529a30d2aaf4d50cd1592aa6b6bd84bb36e2aba12a349ad55a171b207c1c39e941cc03ba8e8cf82d397737983a219f6bed6497842ff9a44375a3f2585daedac770c92560273f58469084eab287d4683a12a7eeb770d451c", 0x7b}, {&(0x7f00000015c0)="6ada83f91df4738248631e6a86f12e1a75f03b11c7e92a5fe28832a1eee8b5757db7309c863f5abc673de384c8e2ddf18dbd8be261", 0x35}, {&(0x7f0000001600)="e85a2ef894c27e0056e23fb2862712cf79857d6c2d202cbac741d32f1e18042f1fe54bd5dca544304b74dffdf4ece0ad26925ea0ef2def22a6d1dbccd2", 0x3d}, {&(0x7f0000001640)="4b8399b91f12510ae400c4c246c47e69b905637c4e9faf5e8219a8ca2ef81ff31746af0113d607a60750afb6478e59a321c189fb43f72c875b9625598e64fe94ff3b1299b2fb67f4f4eb7dcc9f577aa44083aa06a18a86b594218e9e826a3b5830b56a5f242004f96ed15c521e29d1b6e9bcfa098e59839ac38f87fb55d862346ff80b0548bd2499580b88a069064710e6ed269bb43cc86bc6baf28bb47ec640de780a053a6f94da798a37de867c1be0", 0xb0}, {&(0x7f0000001700)="74e84a9480654a6e9431cd675b95acbe509a1b60eba40ae6dee915a114a1bb2dc6d0e3dd7ca0b4cdb452179fb5f2566237e7ae0f01865a04b15a9d41444a125c41ff886be140a192515756e6b54960bf2cdcbfe5939a77937f25407df3a28d98438ab12c8fe5731493697059fad9fbfeec65535d3bd5e1eb7f811855369e53bcb24033d708af2fb351594d", 0x8b}, {&(0x7f00000017c0)="8e17ac7609540e93eba3b0d3158a0ae3e16e35f8b08d86dd5637dc8221abd65bd2f6a49690a58831f07fac04e6f4dffc98393e5f73e7f7be2e8eddd872f91d3b21257432d21607e5d12843607e7b6f5e1f455cd25e50cf04c3e3d454d73002228a36d3f056ad7b72877d911fd03e01e9c6488dd9d1e30e5e1ba32d9d5dc594237c62d0ab438ab90640371b0c3e5fbd5d08a143b9a2690b142251697f13938d8bae014a5d1619485724aeeba8c699e71910c1e82815c885f1c26bcb9b84fc23cc7db34b29b5fee998713d1890b1124ef32de4880fbab073502659f4dce17d664dd1852d0509b2837124269bbb7c", 0xed}, {&(0x7f00000018c0)="56672c0d910d257ca8110a988647741be92998588463227c8e2da73d39fb77324c2f07d9662bfae06eb8762f19c5d68d7d9b8d474aba7187a1197ea1018b65dcbe4e454345ef28a2dabaada523d90b25ab9a4d156719ef486ee5d66c31151adfc41c686c5e5a729d0b2ab6a75f127aaa71b9f7573a5345ba828f822cce7c7085cc90d85e770c429c012500fb5b296fb653266caeddcb51e0ba6ec2576e13ae501d86f1292edd4e498e3b8cf36e72cfb5690dea01dd3bc1169dc2ba70c7247a7ab24ab6862681df0349b062696e0678602316fb58bdf0410f28a0f247b6657aec58f19c96be35643307056ee6f70da7fbb17d7ea36fa6557e3604420a7ef61f227b985610e38653373fd878b25a323229e28e4eda1d929480805a6ba8d9ca9287782b2921c366a4c40fdf85fd24ef45d7f2780cc7bff9c57174edddb6ad0c686326c0263f74daa0e59b3583eefbfb6460daabb498a181c4098e5a3cc5fa5a785fe25eda80ec6fc81ffbbf3e24bcd203a9f7709371c06ded5e41bbfdcb3269f65c19a6b1a7e4c1309cf25f12a4d8a5d7427b71276903ff3e331bae2ae7f03a2507f09286df96d48a7f6f984634518c4ed07592b8c34036c31f71d19c0b6eddd0effbc5e04951ad4085fa711692a0c94704b1863b0c34a1f46681dacf32a86fef3ea8b0efcd3bcc4e5db3563e4f0d4b88f74e299ddf20783ca46b2212ad46b56baf9df536210c7bba77cfa083569d0b82ce23c5f66c2a2cdd77e52b813f4c414b43ebcab764a3a28456ec4bf5efa5fd97103ac454de1fadfe15022870370f73e272bc7a88c6773249eccb69cabf34145a3ae953c52ff2f84bc50b36f0ff2ece7bbbc807b945a6c7fd6d1a99f2c20d6f7662897ab65fe40feb574ca2fd782034044fd9fe4af99dbb4d5b16b7eb179108f773f8a6eefb625648d1b5700013303d819691c0b46c582ca218eec9534dc1fb60d1a13ea7edf9851cf8644604784a6c6b12eddefe171db3d4ce4a2878fb1ee98841a8f31d1a9c9767c2157d9de50e114e14958ae4b219773df58c81d62b5b17264365155fcc998cac08cb75aead62bb9ba67d3f53cbbd6ec1cadff816801f166bd4bc87f6145dce92573a8a104b7a17863418d94c1cee092f27284895ef46c4a26e59e7237554e5b2adf7de93ac551fe9ef01d75a131384e0061b710e6744b76f94f03b1df76dccb180f00d7349b55436d5d23f64a9b545308b9e84e94b3160f75d4a17e1d6d83a487dc88641cb8ca0f6ee8db29b7ac588d4fb36d2a02267650bf7c8e5c509f3632dc149f46e9823fa6c1d331ee662d5033ce407385efb0f949e5c42455956ee1d3630722a8f4ea8395b422f7cbf945dc1a418b8a36ac14a4d1662838050be840a11158a48f3ab651445a1e75a9b02dccc335a222722768ae654ca85bcf3e8b157aa59a3b669c665811f16d6ecf4f5a0230c1ca012aaff39b18c113836039302808e329b7b03855eef05669a9dd148c29e538cc9511db114c21c37bb53e681bde270b002f87a3e5f36034a1f48b45e41a2436504352ea0f8de1638199fb77b8b50284b282d1e551daf660c89275d2a73284480207464115437225a9ac9ac8ed593bd16b61fc4368d7ca3e228017b85785c9034c9be76e7c923b031b3e290bb27c49dd623a609b09649d8c87150ac3d3c3c4ff82a14b3a3ad7d345571f94ed85b21c8481bf8388cc98a506663fb8aff1eeb8a51c964ec9dbd1e9ce4bce6dba3a44918f1bab61b8bf54f9def61ce7aed79d16628cd755f85b35d873d48d556fe59249ee9ca223b52b30b7de58a3a294b15546f9822f6042ac2c653c1547ddaed7abd1c7162a58bf46ba5c479ef374d2146d64fd85a1477226ee631ae5ab8b86de02960680a67362cc262d6b1c1a005fff8fbd7fd32d823d6568579695f7e144eebeeab0edbb2e2915c938494786c6b74ea4c1a08433fad3d6b88842394803bbaf8067f7e0b31bfde28da6c3b34e7e59a9805bae55e4c0e0afb2febfcc94c76d06b2a0a87135c6acb06b213b2090df5a43f07cab947310e4d6705ddc8038f48190aedbc40069d5d69f7e4530794d5a2041e8bad66cd044369edc1e89a7d45d1633a666952d70b30783db40d29965860a02c78444fc35bd982f1014665d427d76d51a793b01d3b0e827f1f7abb5c2f382b019608a621291e4ae75268c02be49117694b84e2c2b244ac641d08833d131237af1ed5d514cd66d542810847fa3ff5d12c58ebd9204ec0dd36b4881808f5ba943a138382902cddc013172d5b6eb588b757a3557bb39b9f8957759c4f555473b572f70a4b2185b11b42e8a5bdca7c006df5787fb68447c40b2d71ef1ec165c9fe584c9349cf28e2d3a04512278f1b68a37d08b6bcddd98a6d40fe7a0b457eaab872ae900ebd41fd63a91deb2c51c18981f46853f3e666862bfdce1267ef61babc414f6eddb46aaeb2a01a3eeed041647897dca16486913bd0e690a4119bf9ca4ac0ca9a33104df2f99bede6c00b27148764ca4e67f5cd0b70ccc9cab8b6816514a9a09fbdc4d0dfbb00b475ecb4ab07934dcadf239e59b5e8d537b8cbbbb6e3af03f39c4e46af4f02cb0002c56918b7b680c810908c30585b25df716915742d6fa39280b84f7fd4733abef2d1ee5ef314b8d9fc4ea5cb7e91cc90fdb89597019e0bc63b7772b8c6624fab36f1cd2f42ee738f696cf0ac7a1dc1066294f5189d47434451dacbfb6933f25e1f49d779d3a928b9b59db00655a53677f6d4c7951a609f5506e89401afe0f3ba68d98a5acc96a61dbc6bc19fd259f72eb16398bc3573ce0f70963293a3f2b481f2a6e82b1cb3c2c1cd790e7349d78c0d5573d5b6dbfd7d51c200b0949b3600d28d6e5d12c93675ca52ad907b19f8acaf9fefce01cb538f2f839699041a7375aa92ce48fe9a6f0266e0a65b223ad69f53bc09c257af261ffb30ac28e2c3a3a9bdd236108d191d166c46745977278cb7d829991ec9b9e32ec517d3eb66b2495d6c444591ede27e1636439df45d025493b5794f00268af5aac17f1e77c41566e33451289c27af6ae990a8fe2ab7642a80582e7405df67f10d49647d395782bc9fc94e5cd4eaeac99f2e1e71288bd9a0e77a77273e910d0ebdab3c45c98dc768bd63d26589504c7104f4d0b984348a07558f0abd2efe0f3e8eb069def173bb15419cec7cdf99292bec4dc5f5ddf79fd163a3a0b30cb12a74ff550a9da2f147ea1c9f35e58e3e595906340ea0d93b02dc357aded2ec08cb3ce406d910ef8ddec21697dbf0b05782c0bce22269fc203018418711822f02badcbf704495100ad4dbf1de428c4b26cf4702c05fb63d63b3a9334ecf6e30dbd8d9e8b19f57c14b70c3799d9835c032511ead7d2c0da0f7d67f132724fbc7f6028c1fb6f4086ed319030808a12efa08bad8bf89e51e782dacea9e9c000cde7fd6b25d85deefad79ba302a821d978dbc95e8ba1dd9f1ae92b2a79b103364d1025a8d5c20e76df1fdfe135eda4c668532a6c6e7b9fae211481f94f9ba1b68fd8aee58383f6c43724a96dab28c80d7ed70ed83cef71d5a8a6b917d1ca331e1947ce06c703d2890f0462a913082ec772cdf5b522eb4f2bba4f7977e611373fc7aa89ff9ae0c1ca2a1881bf5969d54682cb99e7159a1729aafc1e6d5f1c8fb74ade6cb51cf2d7954fda012e499342ef9ae4bb57d9e8dea520959e261e84751174327234d98c5c1104bd99ab37cc1bc2d80fa114da43b5f2fd2da441d72198d67368c86e14d3013c611bb6a4c29a5f56cf9626604f2ff5c502aa9aab957c5126385aa2fd9d3f0360d003bd056a870d3119af89ded1ea4f93766d5057108531b3c6147a0c4add1f1c55860db1014e056c451b38070c49fbddccbf45192c8d8294c8d1027518767d871a626af02c94ae2b88facf4d8e9e13e96fad7741632e00186b75562facc327556b10d2830466a0006cc7e467f9b8eaf511cc9e6120ca8aa2b093aed18fe6afabc486b6054e23479fd4dc71aa3ed7fc5a1d72c8f7185a15b82673cf82d22c37f630e6bd72872de44da0dd612b79e9522574b9c71768739e73aabd8c0b4d2a92b8d445143fe001d2cdf569d802981a6659a4b4eb6cf2d5a94a9354b36f5537e4b4ebdb19d5ab44e0a3ebfb94c43c46f9a0fe641d3acd33b27246eb43e257536956c5aff849b9899515d8a54f1329a33a77471b3e504a477de03ed72d2869ebefbbb83d7997f0fa189dc6eb3654d41dadf91bd2ee0ef3738db1ebb543f9f27b9a82cafe5f75a9b6906245547e8e6db6d85509e53114d9fc957c137665e525dc7d1ec0fb4079f9950788e424d3d1c17a62423e864b5c44179ced108260ca2a083fca14e1bdd45ed580e305daf01d5d2f84d0b0568ff590efe9c76883c2053e359c237eb6e0641fe067849f354c0c6243f1d0acf9fe8f3cba3bfd957ee4383f5c626139d762ea2f974b0141a062aee69c564cf85dccfa512741aa788f5962e369e49062267444c6d81c3c162d4bd9097c519fb10a3878f22afc2b7258a0a1c703dc497aff9266de10235d66f2431ddb260899ec63c606de3e9b19584aea28af75b44f34d0b6761c561a55ffefec077c1fdeecd96c8f40c989c08bf68f594b27e54a0f14d287a09942ca5d5802158329f8309d3d55a9e4e1faecd8bce8420bcd7117a868c6ea9babd72daf1b9d5537df657ff38c115260ff2b48cd9d5e211ebee096c7c84c474c9a4983e20858897d1425e5fc7959fada51d16a59b408501893caa69f332b46ac8a3f1b62c227d14093421efbd0e60843922ff8c309e554f8cf99a96cf17f7cf2f5dccaa8c579e6ddf11a41742dd84893a4aa39fba4f081e28596482ad3ae531b2d98b72686ea39883adfb3f2132b2d8c9eec9042bfe5b01df5316292767e7cbfa6d678ad08d3842a9b292941034216fada6c83ce0ae2fd80486ddeeceef0a3b618b0fc9073205d823305cf58f4104db94bc5a0adaaa34f414f50d4cab7f3422a95aa2dbc879b53859221863873221d54e44bc51148abf46ce6934f063d25af536e8710c57e0bfb6bbef7e86ec3a71734e329c76c7648c5bf23cf113830f5a9435b07b90fb8d3b3052c5cd9b29ab64b3ac0180b6f974c428be8aea8a0fad8dfa490f243afae3286cdcf6c2fb084644020992fab2ee9381cf72d0050dff7215ff1d899a8ece7ddc7267331ebd7e33ccbb11a92c9db2b264400e620e45665ebaca769258d3fd6950ddf020a67087153a3e40b07502faa48ef67bdd70332a8f38f4d6d06712f77fbe22251e7120f8c650da979d2d40e2bed0bb3770d9a5328662c3682257dc57e6d81e42c9eaac73aabfaf4ed6a5b652fcc8330ec17a6218f6855148167f1b6dae67c48bd90e095c4f07c445591d5a015383d1a897e6b01380588eb6507992c138bc9cf92ef2d3b7a032c7d82099069005824aad163371d4f7a1d338afd7fb74c624031def2abfaa4b04662dd2b93bf9f122eeaea666bee851256e48d9a756361acdf6c84293bd60694bdb19f7dcb0097e04e443ee71498777f0fec07c6cec6cc3e6fec6cad03ecf159825f2d2167463b18ec76070a09a4243a79560aae74d233b4a35836cc2d5db050b5fe88d37f414826ad91a9b8a9aa33c8003e23167a22477b8982b9dcd2d428b137216d55c97b14ccf4b1bc0b44037f0967f386347b998802cb0cddc881c82b7109d0d0cc1112b5f050177a74b97e758db7188da480e25f5954ce10a019b94cbcf4f3f121aab19c8b04717a2033570431a0131ade4eee739952d843b2bf6e434f006357e8d5a41", 0x1000}], 0xa, &(0x7f0000002ac0)=[@ip_retopts={{0x48, 0x0, 0x7, {[@generic={0x83, 0xe, "e9a03896dda67a090cc3b3d8"}, @ssrr={0x89, 0x27, 0x68, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local, @empty, @private=0xa010100, @broadcast]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}], 0xa0}}], 0x3, 0x0) 2m35.29094681s ago: executing program 4 (id=5581): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000140)={0x1, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r2, 0x91}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r3, 0x0, &(0x7f0000000040)}, &(0x7f0000000040)=0x10) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000680)=""/4102, &(0x7f00000016c0)=0x1006) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000077080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.079634243s ago: executing program 4 (id=5582): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x21, 0x80b, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%-010d \x00'}, 0x20) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000340)={0x1, 0x5, 0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000380)={r4, @in={{0x2, 0x4e22, @empty}}, 0x3ff, 0x8}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={r4, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000500)=0x84) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000ac141440000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030803c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000b000000000000000000000000000000000000010000000000000000000000000000000000000000000208000000000000000000000000000000000400000000000000000000000000000000000000000000000500"/112], 0xb8}}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000214010023bd7000fddbdf0808000100000000000900020073", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0) 2m34.970076083s ago: executing program 1 (id=5583): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000300)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000120001000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000400), 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}]}, 0xa8}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x6, 0x1, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010102}, 0x10) 2m34.666799657s ago: executing program 3 (id=5584): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000180)="8e06f0b6a17a2e16b329d731c2ef5624") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d042804000000dbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2m34.477699458s ago: executing program 1 (id=5585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x8000, @rand_addr=' \x01\x00', 0x7}, 0xf, &(0x7f0000000400)=[{&(0x7f0000000440)='$', 0x1}], 0x1}}], 0x2, 0x40408d1) (async) shutdown(r0, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000480)={0x0, 0x3}, 0x8) (rerun: 64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000580)={0x4}) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000540)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) (rerun: 32) sendmsg$inet_sctp(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x80000}, &(0x7f00000000c0)=0xfdc1) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f00000006c0)={r4, &(0x7f00000005c0)='wlan1\x00', 0x0, &(0x7f0000000600)={@_ha_fsid={[0xffff0001, 0x8]}, {0x6, 0x3, 0x7, 0x6b}}, 0xf596, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x1}) sendmsg$kcm(r8, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000700)="87bbd0705351924d6793e10beef49020a5bfe625aa4e40f7c25ec6bde37fdda037e90a09d3913d352f451e5995715edb11e10f8e795cfd0a9ab473a2c308e5b60dacc4a87f7ba1db837899f11fba5207fb243b685c3d77f2e1aca25793bb3e19aae3e46a9c61dbe04dfea9119fbc19478e02c098b83d172db246131052bef0825a5006372cb0b52fe4d9f260547ff3d89d111dbb543a4e963deabb20c57b7987b2dc90ec340e17e389397023648e6581a9e08b97d0a702734c8956856940ac16921b7db4d6ac5683d169ec6ac6bbf9541d1cafcb9b", 0xd5}, {&(0x7f0000000800)="d2eb18c48aa59917573ca9bef766bef7fb731cab146cfabec2380c8dfc8cb03afd4c84c6d4cb1927f700c8e302e4df169f40c6ce1477fc16fd681b076750a092b76fe60e046874738f0dc0ddaea9c1d2b5d6ebcb08f9aaa430c7affc57bc266d2cefb0f65847613541c1b669f292c424bc7d87ed18648801eb96c1bce7d7829d524fd491060dd0b06f61c701aa982a8f73dd7acc751b0bc3d9be9326049110084a1608dc46b1ca2f158309", 0xab}, {&(0x7f00000008c0)="5e330cb520e282f6565226684dd6a48ad29a99a8e577750f8edddf6f7581be2aa886c67e748ec0a822c366eff6baae3e94cec2c771f4663e5395877010f2d9b14056f912304224ca4c276a9f9c5d12fc8620d9976541043d5c91323af5710307e261af646ad47593d80a786480c30711044eb7cfc52398e51b1ec13f45d142b88ec04ddd77024fb6b36180ade0a674f25796dc6bd71a2ea729f874fbb2ebd7731e7e4dc3397d02caa6ef35914794dad6e54c94fa8d5d6c7a597b16b031605c1d67ceb28da0c674636e1f3e1ac61a24c2745d26", 0xd3}, {&(0x7f0000001a40)="bd573910bcbb06150e7924e931335bc286962d75705686724fea8fedee399b5d4b53bb42ace3c766b742c73f4e696f9d4da48cdc10241283b54addf8e77f58e4eb67ac64ffea10cd5245665612329a0432c71789011bd8d2bf351c893268d5074affc1cca64a5a921b8a1fe2cc6b", 0x6e}, {&(0x7f0000001ac0)="8086e1984808c82ff0def39d0d228300154ca77870d7c80ec72c6afacbf7b9c0f815faa34ff64aab519e1f4b6a852f4fee1b8be70851b4d21ff48e8728f329b1fe67c4ff4dd61679452cda4aa462e042fccd457dfe62b652cb7629ffc9d69dd627fc471524c74d815f1ff0696587c3239ce1fe2bde503efa99cde1bfb1a6a2c966381bb3233d2eec0d58641b365375918d8b661f07fec9ff03d8139dedfb90e6ba6d3678d8c36e66ae0cdc5818415f2afa", 0xb1}], 0x5, &(0x7f0000001c00)=[{0x18, 0x104, 0x3, "a457f6f8"}], 0x18}, 0x40480d0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000a40)={{r2}, "f6adbb1460ee1bba06a96f7f01860effcb61577129512b06fb54c353754f51268ab4b76ce0cd6197ac51f1b590fd0d3c4bc194a055a448ae6e95a86c6e1c4d31691f4b77e970fc20f84672ea097b424ffa5e16203d68f0963e883c7582d215b9258ec7513e99cc6aca22764b4c50b796bec25d6fb4f1a5a241d3da9437c9663c45ea073dca751b879d53ecef87ea945c819ffd6d4b9ab7f32abb108ff74f930cb4d4b02fc4e3f89737e5a5fe2c24d106284fd585adc1759e48fabe29800f9907499753627cb5ec4e1a23a6bd4a9098107b1bd991afd078c8c7a2994e8b98f0e0e53aa426559d113999c319873fca5e12ea696a5f986a5d1d47a5cbf6ec358ab8bbaae42f92bb6da6167a839d647282a77552e5874b7681284db59bae2bbadd1c111e4f51edf21710886eafdaff1b9e32d3807ca26259c1bd5108cbecc19076fde1d12075616e47259dd016f4357158c46e161ef600afdc2277b9b8a93719d4c7221311e4eaefd02028e8329d9f7fed9860e6f290011c5ce528a9ca402da83899a6f92b95bb1d03bc943540f7e1c860bd08a257b394afe78a9613eabd193cbc5b4606032a39ab2428964198c987cda5b368c7c0f16ce50a57308fb37590cbd24e350452c45badb9a331f7bc148d860073a71b5b3e65ebda40ca447a97b93271f3ec621b8022b2fd57efaf26fc23b6379169d8a5cd402b3a7703454b2a3d70ecf0d04846597ee35aad591820b9a2cbf5e4714a016436abf3854c36426d4a3aab4cc826a99e25cc5386c156a9fcf512567824c728b4d64afc9c00f2039817ed45f2baf5005d36ffb22fb9321c3e9d0d2e9caac2acb1dca6071460b06ddbb100544e712a2b7fe41c6ae3cce639ba2f4518a0287a843b3616f5cc74ec3ca8ecf1a6784c1753d35e62b409371a5f5b3e3be5835b3b9a813a04cc72513ca2ae132ef9c9dd531a412390cfe0d109fef4395c8bb6b95d274093294162b1d2b61b9b9d87cb422f19fe8a384fd579a6daffc647629010927406b5014ffa760c8bf3def3c3465eaf5925b481737793b73301824e8ef293e9d0671bdaa52813ff3f1e4bb7c2eb651a076ab139c3725da844784e0f77143fa5cdf31bf482a3a81741a1c93bd33e7cc5ad7e1a23f90ea8f2f38cfee24b2667a1b7586f9e951a295aa53494e6f23bb3c8ed7e51e78396601a7942627500305c255599c7941dfad48528087428c5ea478ef13e6c494c1d8ee34ed24e33a8c9a157b177f56644b799679464740c622abe77cb712d4d277d3a24c63bc38b237af8c9b9b52c1f1f0511030620ebb538c6557cb0fcef812a6a426730d7206bf368e0fb4a1bf100b346998ab2350d0e23aec9ca41113064496a4be46f559a8935e7b235c01a1be71e787f44e707a8fee1098a3c273024b9bde330b7036cbc3eb1cbe9b562edd59c0b098b7d744c3d3ea9d5f99614091240033c69abc9c6ecf16b2ab3250c734fbc91f301101ed443205dac19926a29a0d497b39a642ccf27c9af7b5ad704126af463c452238aacbe6fd638898322da0b6df684ca5057c9eacc775c1458952eaa8c5f86dbab44b7b34e66d078a37ed37c22427612f43ecad46a0d373448f328e960cf9853d051990cf98070f04af6d74449ec050e42648a76cb8586f1e72ba2bb2aea27703dbcdd28087dde6ff926f0b5de4ed9372d41a42d1a52e289012d8da2f7958a1aaf43e2d875ba64920b7b2f375be47f2dd344e27b25ae4b284e0577282630be56878c5c47400282fe05081e7ccff05592de9f26428d823c4425bd6235f02b0e1fd266179bb6078e1f04f7867ea57cdd128971aea9c9f5623220d7a73354a2b40e1fc6656374bcad5acc2497ab9f910a9adc10e41ca5b16e3e8d98202af0cf0ebf26580ac3eb100d2ab3fdb993dd6cf67b85240cfb4d6269215aeb3eb4b19509840a6ea280adb8dd771bc346676dffbc2e202393c62a63a67646969ac7fec6ea8e54960705a8a889fde1c70d4be36f788b475d4f7c5820e711a8a36576d9641560b376f8706907394fdf657d8a3fc04a42e9801f532938da03c492ee84d2d8235f6036b6cdf30499707b409ad7ee14246e69819115803e5cbc438370957b137de7c137b9efde4f6dc3f4bf33c54fa46be21dc24fe76abbfa4cb7bb343e9cd4025899fe8bdb7b54d7b8f521ade35f5a6e7550aa86838e1fe78a6a1fe88731ec1567c5bf7fbccc78be2c7432070c7dbfee997e7561ee995b6ee21ae63f7eca17114e82e4b9e2fdae3caa66bebddae7d3ffc5c392154874b6f9c28da1d3559fe7f874f0d2624ba4225c003664fe7eb7edfeb54dd05a93ebd76b03838e1202f86101cd4cf466b323d67c38e070376e5fb2614fba24bdd1b523036101f33102aea8c19b16f41bbf5290a96b3382afd26c5d2f66b77c61c5e8c61b92e50d0f0aeac59cf686a1346dbaf9b17d82980f11c649eb189d2b0b20da2a39e264a329fba68768f5c0028e8b95f02ea6b21bc7ba828122c04b4bae8475654155ef967b5db07714a99ffbeb5865492af373a870128d760c2f9a3e2ca52d5eded9e683c3a479ea751eb93282fc3df3b1f3059957446bb119e9aca73aa46b18a00c32eb5a2e3c3c167525dabca2f01c5a74ea39630e6f1faaefeea827466439f36168c8f3ad06f6f3d22bdb2dcc5002d6fdba131f78d17dfa81e69e7b2c4007547cd7de9752206cfc1d7cb234ce50983237271a3ab19403fbddde31100c65921509d1009a273e6e7287a7c5e7a8e1c24eb65fba870f6fa42346c023ef6822bcb203567137606776e139d45afd0e7dc53d36552c757d09a6f4bc1919675ed1606ff8131c600dd7b0d840aea530b3c864271aa971ee0d6a1f13b052107ee7ab7d01d74a1891a01e98e1d53644bc188baeb421ba6d21ba1dfbb9fe29be4e14903f4cef86612c43ebb0d66d66500b1faac6cf5919805ab2b99d58dfa04a48033a99aff576762ed357e998da20669719f4d8dc94cc65b1aad2a81f333874c2275deb68122f1f7700e3717844ee7983a29b3cf2e88315ac5208746c447db25ebceb388d401da29a5164e7e4bf41655b47a4ff34c8aedfea14120f057b92dda1ce2abe7b4c1d679904c9a5527dc197130dbba23c7bc88edb82fb3e343619bd0d5c5fdb85db58320f26f667191418226e938a7ebce96754f0ef4d662b2f0a2fede8e5e8c9c1c5672f6ede0b7441b180cd8b354d9950684b8bc0c038ff93646b76e5d6ccc5290eda749cb52bba2aa46ecfd17855e83559f9ebfefe4efe99529709a4dea740992fca770b7fbaf1409f5d2c080e42bccf879573f28dd7c873987171e649e4a933fc437b013a229319e12ed6def3694062103e30b05579a9e426cfeb0c7e362ecb2b47c26221e751be2e23cd277088dfdbba9f320477f0a112821a1fb1007915d86b47b9253c7e92257600ae9caf9c2b92da75e606027dd091677c0ac660450c66b4090d275029842a564f8092ea853266858176082474954025e8de7847ae04a444bb3ce178ef10601147895d5f36d93fef77aae1a3f0e9ffb3934faf9adffb94c7ffa7115b4a84a7e13ffd3e811720f0db0019c371d9e85272c18c331d4b576a500372c92e32c0a7584c1458a8258324e395eae441d8727a4d93d6f28e2b583ea791595374df87d2f34fa5866a1cdd95c5a44881b274770b5906bcfd697d3bd0ebe8a34aa365177618c9243a4a71fe52a5eb50e6204ed2e6296016825bf5408b7ba2de4f48364fdf28e2e776ba3257e9384d02e05ddbe57a7d7d385d66bd77653ce7e31db44d5e07638e39ca78d0d32e58c6f973c3955d336fbf03e9365f92a20808493eef9b58f1f7ff95fe9f3cd9d8cb66b4e0cf705cbc9f1876dd7d52986285fd815a7a9cb883baa98b79b4399787baf00e4456e4338e1270047496ec77f7e189c90fc888b02a640edbf4aecfa8aa73b213b92061c51785820d28fdfd643e577405e369c457aae985cf48d55ac61ff82b856e076268d96566a874342d00db57f3bce04b5aed8b9dbc2761704b14c0929780a7b99f0e9101e1378b6f33dda3fdf412268c26b5288b2792f24a02cda31b76a86383a3f97be28faffb06109a0d2d19880511db787654f9328ed7432a9a8466a0dc9d46cfa2773187c61efbcc86b3b058829b4f1b85d8a98646a0238cfffbafd970f47dc0f678d47483ae2103d071d4c7349557ae3f62469df65377c2a3e039b99eb8987f7ec0e20b1335cd0705208ec8d6c7202e8be06c3fe7655c2e5202b701f84a1baf3b9dda5b8cf3ca1103ce73164bc3e809aa8ec10db311c27f516dc88fcc8d981a18a66ed43b39bb355db480d964e2a48c1b660515f8ad3063eabfce7d2957ff057d92c7fe17f7d9ff0bdb350dfe5d18c27a21eec308aa0d6cef5202d45fd03559a01fed6cc2416cdfdbbf39a8dbf23d46f0d0ff1fb9a38f24b9a317b88400757927ea175ab03da26c1ea78e40d796434b51c8f6e7572089357ea217fdcade8455c60a2aebc0b93082d22bdeb914bc2519c3f11db8f2e2fc90912bfc320af6125a758c95a7f0c4dbf377e79ffa7dd60cf3d9c09c0fbff4ad74a8bbc1bae882673dd8a078c8f8eb94023d45bf8902d50778a861a759c6468db64052236f26b1ad9bab0919caa5a4ddc26a3ae5d5b646a92213c9d7a4d45cc7f96ac9c8e6dae0211c796991aa4313a364885ab7077f67e58a11173b6d7378129301c36861a9d53f602c33dde3924a4692e8e74128f7c60f82bf271e41b3508e60b9fce97963e290a6d5ea25635af422054e791b119de8815fbeaefbe11b91e916528ed3f3c83db754cc73de271cb607cd7c2ea8fa2249581f62adba602f0a04c1654a2dfc4839ff1db0b7706b1b8421648c715ff74925cb0ff383318c5c0bcef01569ab8673b3cbb71aa429a82825bf9f8e863e22be31ab3be59c1e87f2f2927f0fee90027d20cf88d6696f9815cf8fbaa1c244c7ccc3fbdd91d1d2079f3c162f87a3e69c2649a5a9efdae96d77c112146af0aba50a75cd3274558f5f6bc930dcbe1a1356ca34079f9ae73e5a53f55f976a3e91fc7c328f607ebf0688febbd54645c11455bf17e7644af4224fa3407f18b4908b3e29ca03cb419972c449ef789994a0e93a7212754b209a83aa357d62922f2d13343d4cec3a3496f8d9741c7473721709e79e350299062c82371ad6c746cad36738d66cc9d2bbd188d6d54c19f28d4aabd251214ed5b22aabd157090a0f9c9a582b5960fc793e9f7b781529f110b78e46bfc87e7e6b2fe0eff4cdc8eba9b04f128778b0fabc881ac3e24cb84a7943a53ec22334aad325fdf6cec5945fb1269d2f6799c16c2150cd50c6b89f050d5db8bf0ea55119c1e8bcbd92c1cfbfe85a665dfa594c62689b0d92db507352a43f6623b59c1dd042be09fd7f2446bda8c35d15912cd628e05f37f7fd4e006a08522cf97a7fe36f6801f688ff7392bd138c044a162bc7908fc6f24ee99530f6c06ad7ffb1f0d665afd45a64186826b2e3d37a75a0801b358815f73e5707fc76cc5cf714ed155e6865a3c6413cec1880fcce291e884f84bf14b0429af5af2d69c80a3234110d16cdf50698b41b211bdf02dace72a39861a40efcd06c5e21e569c40c8514bb0ee907d2646402d56d382f4089d3a0e3a749de3d192ac10a86b7df3d378442dac43005c62f6641e0995486c6a7eb9f600c7b530d80df5e26d9c955c5fc549a77a198de1cd8c1386c4bd903927fbcb0093370600c441a491a9e8fc0d45206ecd0ae24037d0cc4b5bb011013e02a7d89e2e74858b6"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c80), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001cc0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r10 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000001d00)={'syzkaller1\x00', @link_local}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001d40)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001ec0)={0x0, 0x50, &(0x7f0000001dc0)={&(0x7f0000001e00)=@newqdisc={0x30, 0x24, 0x601, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x26000000) (async, rerun: 32) sendmsg$nl_route_sched(r11, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000002280)=@newtfilter={0x2bc, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xc, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x28c, 0x2, [@TCA_FLOW_EMATCHES={0x280, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x180, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x100, 0x7, 0x8}, {{0x4, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x800}, {{0x2, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_IPT={0xcc, 0x3, 0x0, 0x0, {{0x6, 0x9, 0xcd2c}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "da5942af3597d39a3f2eff41027f4cd6ca834e395aae91cf8031f69d5f5e6f5b4fa24e0431b720259fb55bc97cb8b527547e0f71a90684fc0c6f0d5ae267ad87613ce26590bbcbecafe3f648112e9090050956cc8289c4c5659c18c5ef71d8fc1c066faec5d4dd3281f172d61a4e963dc7497faa133f7fed9b7610d2993067d537"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x59}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x70, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xf9, 0x2}, {0x81, 0x4c}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffd, 0x7, 0x2}, {0x2, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xe}, {0x4, 0xf2, 0x2}}}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="7563d4d841", @TCF_META_TYPE_VAR="c0d405ae2c66", @TCF_META_TYPE_VAR="4640ea5c25b660e1", @TCF_META_TYPE_VAR="12ae86745584b1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x3, 0x1}, {0x6, 0x3}}}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xcf76, 0x2, 0xfb1}, {0x7, 0x7, 0x1, "070955cec8049c"}}}]}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x5}, {0x7, 0xfffff070, 0x200, 0x0, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x10a3, 0x1, 0x4}, {0x400, 0x6, 0x4, 0x0, 0x7, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x200}, {0x3, 0x2}}}, @TCF_EM_META={0x84, 0x1, 0x0, 0x0, {{0xff, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x93, 0x1}, {0x8, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x0, 0x1}, {0x7, 0xc7, 0x2}}}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="fc", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="0b63dad29cc5cd", @TCF_META_TYPE_VAR="6ab023", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="551de98ced", @TCF_META_TYPE_VAR="eb27c2b151c192d644", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="3ec713e8"]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x7}, {0xffffffffffffffff, 0x5, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x6}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}]}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}]}}]}, 0x2bc}}, 0x0) (async, rerun: 32) write$tun(r9, &(0x7f0000001f80)=ANY=[@ANYBLOB="70080000dfffffffffff0777ff6be67beaaa55000000000000000000e6a5795667730fc6477b52e062c512df436cc94fd5f56a18d1b57453d7649dbff946d872b1817bddc2fff367edb656f81c5a680493ee351040b0c8ba9b26ec7ae687ab8f2437e5195b74b3d8ec4fc0650adbdb32b92f820a95cb5563c1ce55d33afc57fca65962aca25750ffe885b084d43f87e585fa5bf9f480e67acea5419239a32b45ef0b14ffad73bb569ab57f7508293810b2e2322bc49ae2842d599f9295442ad1ea3f4ecbc400000000523f5136701fb1710e9d3abd3c3d"], 0x1d) ioctl$SIOCSIFHWADDR(r7, 0x8be0, &(0x7f0000000a00)={'wlan1\x00', @random="8dffffffebff"}) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r6, 0x84, 0x7d, &(0x7f00000004c0)={r3, 0x2}, &(0x7f0000000500)=0x8) 2m34.440662701s ago: executing program 3 (id=5586): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000c00)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000c40)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000c80)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000cc0)={0x1, &(0x7f0000000d00)=[{0x6, 0x1}]}, 0x10) bind$inet6(r2, &(0x7f0000000d40)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r2, 0x50) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x2000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000200)='F', 0x1, 0x4000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x126}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000400)=0xdf8, 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="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", 0x643}], 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x3, 0x9, {{0x24, 0x4, 0x0, 0x36, 0x90, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x10, 0x1, 0x3, [{@multicast2, 0x9}, {@remote, 0x2}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010102, 0x80}]}, @lsrr={0x83, 0x7, 0x76, [@private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0xe, 0x1, 0x4, [{@empty, 0x6}, {@multicast2, 0x1}, {@empty, 0x5}, {@rand_addr=0x64010100, 0x1}]}, @generic={0x82, 0xb, "409c671ec2bf8d6214"}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@multicast2, 0x7fffffff}, {@local, 0xfff}]}]}}}}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$inet(r4, &(0x7f0000000000)='=', 0x1, 0x200c0004, &(0x7f0000001100)={0x2, 0x4e22, @empty}, 0x10) 2m27.96025184s ago: executing program 4 (id=5587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x3, @local, @loopback}, "8a876261ffd9c6e4"}}}, 0x46) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@ptr={0xd, 0x0, 0x0, 0x2, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x3}, @enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x3, [{0xf, 0x8, 0xd8}]}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @typedef={0x4}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x30, 0x30, 0x0, 0x30]}}, &(0x7f0000000300)=""/94, 0x6a, 0x5e, 0x0, 0x7fff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x22, r2}, 0x94) 2m21.90849887s ago: executing program 0 (id=5588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="f4b0f176b7abb4f02446f4e9b4cc9e9104290eaf1455f7de9a0efedc7bac697e5987e585a68d72320927fb91d1097c992a45f6a498b6dccb1c27fcc7c011039978970aab3892d6021e149053425b631b3efa82557cf567f92b45b530f30db40044395bd66a6a5ab1e5e622e117b80ce763585dbf41355f9b5347bbd3d1de3fe0252887f13523da8d51ad7a964d2cdb5370bc62010b0a19e20d09f254c5897382efc42199b4357cf0f3ef30516bfa005975b1140cc54255468245d25954b69ded"]}, 0xe0}], 0x1, 0x0, 0x0, 0x4000}, 0x8014) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7ff, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) 2m14.964047726s ago: executing program 32 (id=5566): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000c6a2ddcf6177a88a840008100190088644509008c006600071430f4ebf900061d90780a0100ffac1414bbee2802ef6f8792dbeb10ba3144a3e2e4e48063350d5c8e17fdb845f56ed948b757ac82064dd9dd2bbffe122df0df5932a3b5b89bc3d4e4b90ef61f8ae0166a65e70c2006b112a5e4626c9727b2f8ee0cec915b65be47d6b226c2e868d773e93c5d1410269ebf552ad15412ea67f770461d16"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000003c0), 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="2c005a8028000380240008"], 0x48}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010410000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000880)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x8, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYRES64], &(0x7f0000000ac0)='GPL\x00', 0x1, 0x100000, &(0x7f0000000b00)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, &(0x7f0000100b00)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000980)=@req={0x800, 0x0, 0x401, 0x397}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r8}, 0xc) bind$bt_l2cap(r6, &(0x7f0000000480)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000540)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) setsockopt$packet_int(r10, 0x107, 0x13, &(0x7f0000000580)=0x9, 0x4) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809ff070000ffc10002d588380003c1800000"], 0xfd6c) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) 1m50.455780893s ago: executing program 33 (id=5585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x8000, @rand_addr=' \x01\x00', 0x7}, 0xf, &(0x7f0000000400)=[{&(0x7f0000000440)='$', 0x1}], 0x1}}], 0x2, 0x40408d1) (async) shutdown(r0, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000480)={0x0, 0x3}, 0x8) (rerun: 64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000580)={0x4}) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000540)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) (rerun: 32) sendmsg$inet_sctp(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x80000}, &(0x7f00000000c0)=0xfdc1) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f00000006c0)={r4, &(0x7f00000005c0)='wlan1\x00', 0x0, &(0x7f0000000600)={@_ha_fsid={[0xffff0001, 0x8]}, {0x6, 0x3, 0x7, 0x6b}}, 0xf596, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x1}) sendmsg$kcm(r8, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000700)="87bbd0705351924d6793e10beef49020a5bfe625aa4e40f7c25ec6bde37fdda037e90a09d3913d352f451e5995715edb11e10f8e795cfd0a9ab473a2c308e5b60dacc4a87f7ba1db837899f11fba5207fb243b685c3d77f2e1aca25793bb3e19aae3e46a9c61dbe04dfea9119fbc19478e02c098b83d172db246131052bef0825a5006372cb0b52fe4d9f260547ff3d89d111dbb543a4e963deabb20c57b7987b2dc90ec340e17e389397023648e6581a9e08b97d0a702734c8956856940ac16921b7db4d6ac5683d169ec6ac6bbf9541d1cafcb9b", 0xd5}, {&(0x7f0000000800)="d2eb18c48aa59917573ca9bef766bef7fb731cab146cfabec2380c8dfc8cb03afd4c84c6d4cb1927f700c8e302e4df169f40c6ce1477fc16fd681b076750a092b76fe60e046874738f0dc0ddaea9c1d2b5d6ebcb08f9aaa430c7affc57bc266d2cefb0f65847613541c1b669f292c424bc7d87ed18648801eb96c1bce7d7829d524fd491060dd0b06f61c701aa982a8f73dd7acc751b0bc3d9be9326049110084a1608dc46b1ca2f158309", 0xab}, {&(0x7f00000008c0)="5e330cb520e282f6565226684dd6a48ad29a99a8e577750f8edddf6f7581be2aa886c67e748ec0a822c366eff6baae3e94cec2c771f4663e5395877010f2d9b14056f912304224ca4c276a9f9c5d12fc8620d9976541043d5c91323af5710307e261af646ad47593d80a786480c30711044eb7cfc52398e51b1ec13f45d142b88ec04ddd77024fb6b36180ade0a674f25796dc6bd71a2ea729f874fbb2ebd7731e7e4dc3397d02caa6ef35914794dad6e54c94fa8d5d6c7a597b16b031605c1d67ceb28da0c674636e1f3e1ac61a24c2745d26", 0xd3}, {&(0x7f0000001a40)="bd573910bcbb06150e7924e931335bc286962d75705686724fea8fedee399b5d4b53bb42ace3c766b742c73f4e696f9d4da48cdc10241283b54addf8e77f58e4eb67ac64ffea10cd5245665612329a0432c71789011bd8d2bf351c893268d5074affc1cca64a5a921b8a1fe2cc6b", 0x6e}, {&(0x7f0000001ac0)="8086e1984808c82ff0def39d0d228300154ca77870d7c80ec72c6afacbf7b9c0f815faa34ff64aab519e1f4b6a852f4fee1b8be70851b4d21ff48e8728f329b1fe67c4ff4dd61679452cda4aa462e042fccd457dfe62b652cb7629ffc9d69dd627fc471524c74d815f1ff0696587c3239ce1fe2bde503efa99cde1bfb1a6a2c966381bb3233d2eec0d58641b365375918d8b661f07fec9ff03d8139dedfb90e6ba6d3678d8c36e66ae0cdc5818415f2afa", 0xb1}], 0x5, &(0x7f0000001c00)=[{0x18, 0x104, 0x3, "a457f6f8"}], 0x18}, 0x40480d0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000a40)={{r2}, "f6adbb1460ee1bba06a96f7f01860effcb61577129512b06fb54c353754f51268ab4b76ce0cd6197ac51f1b590fd0d3c4bc194a055a448ae6e95a86c6e1c4d31691f4b77e970fc20f84672ea097b424ffa5e16203d68f0963e883c7582d215b9258ec7513e99cc6aca22764b4c50b796bec25d6fb4f1a5a241d3da9437c9663c45ea073dca751b879d53ecef87ea945c819ffd6d4b9ab7f32abb108ff74f930cb4d4b02fc4e3f89737e5a5fe2c24d106284fd585adc1759e48fabe29800f9907499753627cb5ec4e1a23a6bd4a9098107b1bd991afd078c8c7a2994e8b98f0e0e53aa426559d113999c319873fca5e12ea696a5f986a5d1d47a5cbf6ec358ab8bbaae42f92bb6da6167a839d647282a77552e5874b7681284db59bae2bbadd1c111e4f51edf21710886eafdaff1b9e32d3807ca26259c1bd5108cbecc19076fde1d12075616e47259dd016f4357158c46e161ef600afdc2277b9b8a93719d4c7221311e4eaefd02028e8329d9f7fed9860e6f290011c5ce528a9ca402da83899a6f92b95bb1d03bc943540f7e1c860bd08a257b394afe78a9613eabd193cbc5b4606032a39ab2428964198c987cda5b368c7c0f16ce50a57308fb37590cbd24e350452c45badb9a331f7bc148d860073a71b5b3e65ebda40ca447a97b93271f3ec621b8022b2fd57efaf26fc23b6379169d8a5cd402b3a7703454b2a3d70ecf0d04846597ee35aad591820b9a2cbf5e4714a016436abf3854c36426d4a3aab4cc826a99e25cc5386c156a9fcf512567824c728b4d64afc9c00f2039817ed45f2baf5005d36ffb22fb9321c3e9d0d2e9caac2acb1dca6071460b06ddbb100544e712a2b7fe41c6ae3cce639ba2f4518a0287a843b3616f5cc74ec3ca8ecf1a6784c1753d35e62b409371a5f5b3e3be5835b3b9a813a04cc72513ca2ae132ef9c9dd531a412390cfe0d109fef4395c8bb6b95d274093294162b1d2b61b9b9d87cb422f19fe8a384fd579a6daffc647629010927406b5014ffa760c8bf3def3c3465eaf5925b481737793b73301824e8ef293e9d0671bdaa52813ff3f1e4bb7c2eb651a076ab139c3725da844784e0f77143fa5cdf31bf482a3a81741a1c93bd33e7cc5ad7e1a23f90ea8f2f38cfee24b2667a1b7586f9e951a295aa53494e6f23bb3c8ed7e51e78396601a7942627500305c255599c7941dfad48528087428c5ea478ef13e6c494c1d8ee34ed24e33a8c9a157b177f56644b799679464740c622abe77cb712d4d277d3a24c63bc38b237af8c9b9b52c1f1f0511030620ebb538c6557cb0fcef812a6a426730d7206bf368e0fb4a1bf100b346998ab2350d0e23aec9ca41113064496a4be46f559a8935e7b235c01a1be71e787f44e707a8fee1098a3c273024b9bde330b7036cbc3eb1cbe9b562edd59c0b098b7d744c3d3ea9d5f99614091240033c69abc9c6ecf16b2ab3250c734fbc91f301101ed443205dac19926a29a0d497b39a642ccf27c9af7b5ad704126af463c452238aacbe6fd638898322da0b6df684ca5057c9eacc775c1458952eaa8c5f86dbab44b7b34e66d078a37ed37c22427612f43ecad46a0d373448f328e960cf9853d051990cf98070f04af6d74449ec050e42648a76cb8586f1e72ba2bb2aea27703dbcdd28087dde6ff926f0b5de4ed9372d41a42d1a52e289012d8da2f7958a1aaf43e2d875ba64920b7b2f375be47f2dd344e27b25ae4b284e0577282630be56878c5c47400282fe05081e7ccff05592de9f26428d823c4425bd6235f02b0e1fd266179bb6078e1f04f7867ea57cdd128971aea9c9f5623220d7a73354a2b40e1fc6656374bcad5acc2497ab9f910a9adc10e41ca5b16e3e8d98202af0cf0ebf26580ac3eb100d2ab3fdb993dd6cf67b85240cfb4d6269215aeb3eb4b19509840a6ea280adb8dd771bc346676dffbc2e202393c62a63a67646969ac7fec6ea8e54960705a8a889fde1c70d4be36f788b475d4f7c5820e711a8a36576d9641560b376f8706907394fdf657d8a3fc04a42e9801f532938da03c492ee84d2d8235f6036b6cdf30499707b409ad7ee14246e69819115803e5cbc438370957b137de7c137b9efde4f6dc3f4bf33c54fa46be21dc24fe76abbfa4cb7bb343e9cd4025899fe8bdb7b54d7b8f521ade35f5a6e7550aa86838e1fe78a6a1fe88731ec1567c5bf7fbccc78be2c7432070c7dbfee997e7561ee995b6ee21ae63f7eca17114e82e4b9e2fdae3caa66bebddae7d3ffc5c392154874b6f9c28da1d3559fe7f874f0d2624ba4225c003664fe7eb7edfeb54dd05a93ebd76b03838e1202f86101cd4cf466b323d67c38e070376e5fb2614fba24bdd1b523036101f33102aea8c19b16f41bbf5290a96b3382afd26c5d2f66b77c61c5e8c61b92e50d0f0aeac59cf686a1346dbaf9b17d82980f11c649eb189d2b0b20da2a39e264a329fba68768f5c0028e8b95f02ea6b21bc7ba828122c04b4bae8475654155ef967b5db07714a99ffbeb5865492af373a870128d760c2f9a3e2ca52d5eded9e683c3a479ea751eb93282fc3df3b1f3059957446bb119e9aca73aa46b18a00c32eb5a2e3c3c167525dabca2f01c5a74ea39630e6f1faaefeea827466439f36168c8f3ad06f6f3d22bdb2dcc5002d6fdba131f78d17dfa81e69e7b2c4007547cd7de9752206cfc1d7cb234ce50983237271a3ab19403fbddde31100c65921509d1009a273e6e7287a7c5e7a8e1c24eb65fba870f6fa42346c023ef6822bcb203567137606776e139d45afd0e7dc53d36552c757d09a6f4bc1919675ed1606ff8131c600dd7b0d840aea530b3c864271aa971ee0d6a1f13b052107ee7ab7d01d74a1891a01e98e1d53644bc188baeb421ba6d21ba1dfbb9fe29be4e14903f4cef86612c43ebb0d66d66500b1faac6cf5919805ab2b99d58dfa04a48033a99aff576762ed357e998da20669719f4d8dc94cc65b1aad2a81f333874c2275deb68122f1f7700e3717844ee7983a29b3cf2e88315ac5208746c447db25ebceb388d401da29a5164e7e4bf41655b47a4ff34c8aedfea14120f057b92dda1ce2abe7b4c1d679904c9a5527dc197130dbba23c7bc88edb82fb3e343619bd0d5c5fdb85db58320f26f667191418226e938a7ebce96754f0ef4d662b2f0a2fede8e5e8c9c1c5672f6ede0b7441b180cd8b354d9950684b8bc0c038ff93646b76e5d6ccc5290eda749cb52bba2aa46ecfd17855e83559f9ebfefe4efe99529709a4dea740992fca770b7fbaf1409f5d2c080e42bccf879573f28dd7c873987171e649e4a933fc437b013a229319e12ed6def3694062103e30b05579a9e426cfeb0c7e362ecb2b47c26221e751be2e23cd277088dfdbba9f320477f0a112821a1fb1007915d86b47b9253c7e92257600ae9caf9c2b92da75e606027dd091677c0ac660450c66b4090d275029842a564f8092ea853266858176082474954025e8de7847ae04a444bb3ce178ef10601147895d5f36d93fef77aae1a3f0e9ffb3934faf9adffb94c7ffa7115b4a84a7e13ffd3e811720f0db0019c371d9e85272c18c331d4b576a500372c92e32c0a7584c1458a8258324e395eae441d8727a4d93d6f28e2b583ea791595374df87d2f34fa5866a1cdd95c5a44881b274770b5906bcfd697d3bd0ebe8a34aa365177618c9243a4a71fe52a5eb50e6204ed2e6296016825bf5408b7ba2de4f48364fdf28e2e776ba3257e9384d02e05ddbe57a7d7d385d66bd77653ce7e31db44d5e07638e39ca78d0d32e58c6f973c3955d336fbf03e9365f92a20808493eef9b58f1f7ff95fe9f3cd9d8cb66b4e0cf705cbc9f1876dd7d52986285fd815a7a9cb883baa98b79b4399787baf00e4456e4338e1270047496ec77f7e189c90fc888b02a640edbf4aecfa8aa73b213b92061c51785820d28fdfd643e577405e369c457aae985cf48d55ac61ff82b856e076268d96566a874342d00db57f3bce04b5aed8b9dbc2761704b14c0929780a7b99f0e9101e1378b6f33dda3fdf412268c26b5288b2792f24a02cda31b76a86383a3f97be28faffb06109a0d2d19880511db787654f9328ed7432a9a8466a0dc9d46cfa2773187c61efbcc86b3b058829b4f1b85d8a98646a0238cfffbafd970f47dc0f678d47483ae2103d071d4c7349557ae3f62469df65377c2a3e039b99eb8987f7ec0e20b1335cd0705208ec8d6c7202e8be06c3fe7655c2e5202b701f84a1baf3b9dda5b8cf3ca1103ce73164bc3e809aa8ec10db311c27f516dc88fcc8d981a18a66ed43b39bb355db480d964e2a48c1b660515f8ad3063eabfce7d2957ff057d92c7fe17f7d9ff0bdb350dfe5d18c27a21eec308aa0d6cef5202d45fd03559a01fed6cc2416cdfdbbf39a8dbf23d46f0d0ff1fb9a38f24b9a317b88400757927ea175ab03da26c1ea78e40d796434b51c8f6e7572089357ea217fdcade8455c60a2aebc0b93082d22bdeb914bc2519c3f11db8f2e2fc90912bfc320af6125a758c95a7f0c4dbf377e79ffa7dd60cf3d9c09c0fbff4ad74a8bbc1bae882673dd8a078c8f8eb94023d45bf8902d50778a861a759c6468db64052236f26b1ad9bab0919caa5a4ddc26a3ae5d5b646a92213c9d7a4d45cc7f96ac9c8e6dae0211c796991aa4313a364885ab7077f67e58a11173b6d7378129301c36861a9d53f602c33dde3924a4692e8e74128f7c60f82bf271e41b3508e60b9fce97963e290a6d5ea25635af422054e791b119de8815fbeaefbe11b91e916528ed3f3c83db754cc73de271cb607cd7c2ea8fa2249581f62adba602f0a04c1654a2dfc4839ff1db0b7706b1b8421648c715ff74925cb0ff383318c5c0bcef01569ab8673b3cbb71aa429a82825bf9f8e863e22be31ab3be59c1e87f2f2927f0fee90027d20cf88d6696f9815cf8fbaa1c244c7ccc3fbdd91d1d2079f3c162f87a3e69c2649a5a9efdae96d77c112146af0aba50a75cd3274558f5f6bc930dcbe1a1356ca34079f9ae73e5a53f55f976a3e91fc7c328f607ebf0688febbd54645c11455bf17e7644af4224fa3407f18b4908b3e29ca03cb419972c449ef789994a0e93a7212754b209a83aa357d62922f2d13343d4cec3a3496f8d9741c7473721709e79e350299062c82371ad6c746cad36738d66cc9d2bbd188d6d54c19f28d4aabd251214ed5b22aabd157090a0f9c9a582b5960fc793e9f7b781529f110b78e46bfc87e7e6b2fe0eff4cdc8eba9b04f128778b0fabc881ac3e24cb84a7943a53ec22334aad325fdf6cec5945fb1269d2f6799c16c2150cd50c6b89f050d5db8bf0ea55119c1e8bcbd92c1cfbfe85a665dfa594c62689b0d92db507352a43f6623b59c1dd042be09fd7f2446bda8c35d15912cd628e05f37f7fd4e006a08522cf97a7fe36f6801f688ff7392bd138c044a162bc7908fc6f24ee99530f6c06ad7ffb1f0d665afd45a64186826b2e3d37a75a0801b358815f73e5707fc76cc5cf714ed155e6865a3c6413cec1880fcce291e884f84bf14b0429af5af2d69c80a3234110d16cdf50698b41b211bdf02dace72a39861a40efcd06c5e21e569c40c8514bb0ee907d2646402d56d382f4089d3a0e3a749de3d192ac10a86b7df3d378442dac43005c62f6641e0995486c6a7eb9f600c7b530d80df5e26d9c955c5fc549a77a198de1cd8c1386c4bd903927fbcb0093370600c441a491a9e8fc0d45206ecd0ae24037d0cc4b5bb011013e02a7d89e2e74858b6"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c80), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001cc0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r10 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000001d00)={'syzkaller1\x00', @link_local}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001d40)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001ec0)={0x0, 0x50, &(0x7f0000001dc0)={&(0x7f0000001e00)=@newqdisc={0x30, 0x24, 0x601, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x26000000) (async, rerun: 32) sendmsg$nl_route_sched(r11, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000002280)=@newtfilter={0x2bc, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xc, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x28c, 0x2, [@TCA_FLOW_EMATCHES={0x280, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x180, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x100, 0x7, 0x8}, {{0x4, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x800}, {{0x2, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_IPT={0xcc, 0x3, 0x0, 0x0, {{0x6, 0x9, 0xcd2c}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "da5942af3597d39a3f2eff41027f4cd6ca834e395aae91cf8031f69d5f5e6f5b4fa24e0431b720259fb55bc97cb8b527547e0f71a90684fc0c6f0d5ae267ad87613ce26590bbcbecafe3f648112e9090050956cc8289c4c5659c18c5ef71d8fc1c066faec5d4dd3281f172d61a4e963dc7497faa133f7fed9b7610d2993067d537"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x59}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x70, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xf9, 0x2}, {0x81, 0x4c}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffd, 0x7, 0x2}, {0x2, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xe}, {0x4, 0xf2, 0x2}}}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="7563d4d841", @TCF_META_TYPE_VAR="c0d405ae2c66", @TCF_META_TYPE_VAR="4640ea5c25b660e1", @TCF_META_TYPE_VAR="12ae86745584b1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x3, 0x1}, {0x6, 0x3}}}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xcf76, 0x2, 0xfb1}, {0x7, 0x7, 0x1, "070955cec8049c"}}}]}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x5}, {0x7, 0xfffff070, 0x200, 0x0, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x10a3, 0x1, 0x4}, {0x400, 0x6, 0x4, 0x0, 0x7, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x200}, {0x3, 0x2}}}, @TCF_EM_META={0x84, 0x1, 0x0, 0x0, {{0xff, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x93, 0x1}, {0x8, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x0, 0x1}, {0x7, 0xc7, 0x2}}}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="fc", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="0b63dad29cc5cd", @TCF_META_TYPE_VAR="6ab023", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="551de98ced", @TCF_META_TYPE_VAR="eb27c2b151c192d644", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="3ec713e8"]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x7}, {0xffffffffffffffff, 0x5, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x6}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}]}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}]}}]}, 0x2bc}}, 0x0) (async, rerun: 32) write$tun(r9, &(0x7f0000001f80)=ANY=[@ANYBLOB="70080000dfffffffffff0777ff6be67beaaa55000000000000000000e6a5795667730fc6477b52e062c512df436cc94fd5f56a18d1b57453d7649dbff946d872b1817bddc2fff367edb656f81c5a680493ee351040b0c8ba9b26ec7ae687ab8f2437e5195b74b3d8ec4fc0650adbdb32b92f820a95cb5563c1ce55d33afc57fca65962aca25750ffe885b084d43f87e585fa5bf9f480e67acea5419239a32b45ef0b14ffad73bb569ab57f7508293810b2e2322bc49ae2842d599f9295442ad1ea3f4ecbc400000000523f5136701fb1710e9d3abd3c3d"], 0x1d) ioctl$SIOCSIFHWADDR(r7, 0x8be0, &(0x7f0000000a00)={'wlan1\x00', @random="8dffffffebff"}) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r6, 0x84, 0x7d, &(0x7f00000004c0)={r3, 0x2}, &(0x7f0000000500)=0x8) 1m5.35781817s ago: executing program 34 (id=5586): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000c00)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000c40)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000c80)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000cc0)={0x1, &(0x7f0000000d00)=[{0x6, 0x1}]}, 0x10) bind$inet6(r2, &(0x7f0000000d40)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r2, 0x50) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x2000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000200)='F', 0x1, 0x4000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x126}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000400)=0xdf8, 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="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", 0x643}], 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x3, 0x9, {{0x24, 0x4, 0x0, 0x36, 0x90, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x10, 0x1, 0x3, [{@multicast2, 0x9}, {@remote, 0x2}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010102, 0x80}]}, @lsrr={0x83, 0x7, 0x76, [@private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0xe, 0x1, 0x4, [{@empty, 0x6}, {@multicast2, 0x1}, {@empty, 0x5}, {@rand_addr=0x64010100, 0x1}]}, @generic={0x82, 0xb, "409c671ec2bf8d6214"}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@multicast2, 0x7fffffff}, {@local, 0xfff}]}]}}}}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$inet(r4, &(0x7f0000000000)='=', 0x1, 0x200c0004, &(0x7f0000001100)={0x2, 0x4e22, @empty}, 0x10) 34.693445932s ago: executing program 35 (id=5587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x3, @local, @loopback}, "8a876261ffd9c6e4"}}}, 0x46) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@ptr={0xd, 0x0, 0x0, 0x2, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x3}, @enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x3, [{0xf, 0x8, 0xd8}]}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @typedef={0x4}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x30, 0x30, 0x0, 0x30]}}, &(0x7f0000000300)=""/94, 0x6a, 0x5e, 0x0, 0x7fff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x22, r2}, 0x94) 0s ago: executing program 36 (id=5588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="f4b0f176b7abb4f02446f4e9b4cc9e9104290eaf1455f7de9a0efedc7bac697e5987e585a68d72320927fb91d1097c992a45f6a498b6dccb1c27fcc7c011039978970aab3892d6021e149053425b631b3efa82557cf567f92b45b530f30db40044395bd66a6a5ab1e5e622e117b80ce763585dbf41355f9b5347bbd3d1de3fe0252887f13523da8d51ad7a964d2cdb5370bc62010b0a19e20d09f254c5897382efc42199b4357cf0f3ef30516bfa005975b1140cc54255468245d25954b69ded"]}, 0xe0}], 0x1, 0x0, 0x0, 0x4000}, 0x8014) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7ff, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) kernel console output (not intermixed with test programs): 67] netlink: 'syz.3.4359': attribute type 8 has an invalid length. [ 868.709043][T24774] netlink: 'syz.2.4363': attribute type 1 has an invalid length. [ 869.100014][T24792] netlink: 'syz.3.4366': attribute type 1 has an invalid length. [ 869.137768][T24757] syzkaller0 speed is unknown, defaulting to 1000 [ 869.184873][T24788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4365'. [ 869.351113][T24788] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 869.403747][T24788] netlink: 'syz.0.4365': attribute type 61 has an invalid length. [ 869.403784][T24788] netlink: 'syz.0.4365': attribute type 268 has an invalid length. [ 869.588783][T24800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4370'. [ 869.707170][T24802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4369'. [ 869.707203][T24802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4369'. [ 869.838167][T24804] x_tables: duplicate underflow at hook 2 [ 869.838539][T24804] x_tables: duplicate underflow at hook 2 [ 869.918404][T24804] tipc: Enabling of bearer rejected, failed to enable media [ 870.309037][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 871.971771][T24845] gre1: entered promiscuous mode [ 872.139327][T24846] smc: net device lo applied user defined pnetid SYZ0 [ 872.142706][T24849] netlink: 'syz.2.4383': attribute type 2 has an invalid length. [ 872.142730][T24849] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4383'. [ 872.183244][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 872.183458][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 872.183651][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 872.183850][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 872.184041][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 872.203419][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 872.207161][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 872.207697][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 872.208212][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 873.013801][T24883] syzkaller0: left promiscuous mode [ 873.013825][T24883] syzkaller0: left allmulticast mode [ 873.455068][T24890] ip6tnl3: entered promiscuous mode [ 873.455090][T24890] ip6tnl3: entered allmulticast mode [ 873.501335][T24893] vlan2: entered promiscuous mode [ 873.501362][T24893] batadv0: entered promiscuous mode [ 873.501571][T24893] vlan2: entered allmulticast mode [ 873.501586][T24893] batadv0: entered allmulticast mode [ 873.613805][T24900] netlink: 'syz.0.4400': attribute type 5 has an invalid length. [ 876.137633][T24988] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 876.299465][T24995] ip6t_hbh: too many supported opts specified [ 876.333364][T24996] netlink: 'syz.2.4422': attribute type 4 has an invalid length. [ 877.161151][T25040] __nla_validate_parse: 22 callbacks suppressed [ 877.161172][T25040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4433'. [ 877.199552][T25040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4433'. [ 877.199581][T25040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4433'. [ 877.298810][T25044] netlink: 'syz.4.4436': attribute type 4 has an invalid length. [ 877.345275][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 877.638442][T25061] veth1_to_team: entered promiscuous mode [ 877.642034][ T29] audit: type=1800 audit(1794137903.713:16): pid=25065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4441" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1472 res=0 errno=-22 [ 877.697308][T25061] veth1_to_team: left promiscuous mode [ 878.330296][T25089] netlink: 'syz.2.4445': attribute type 21 has an invalid length. [ 878.330392][T25089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4445'. [ 878.472216][T25095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4448'. [ 878.793627][T25118] netlink: 'syz.1.4454': attribute type 4 has an invalid length. [ 879.636221][T25154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.689301][T25157] netlink: 'syz.1.4461': attribute type 4 has an invalid length. [ 879.689326][T25157] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4461'. [ 879.689635][T25157] netlink: 'syz.1.4461': attribute type 4 has an invalid length. [ 879.689651][T25157] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4461'. [ 879.689941][T25157] netlink: 'syz.1.4461': attribute type 4 has an invalid length. [ 879.689955][T25157] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4461'. [ 879.690242][T25157] netlink: 'syz.1.4461': attribute type 4 has an invalid length. [ 879.690256][T25157] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4461'. [ 879.690542][T25157] netlink: 'syz.1.4461': attribute type 4 has an invalid length. [ 879.690557][T25157] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4461'. [ 879.690863][T25157] netlink: 'syz.1.4461': attribute type 4 has an invalid length. [ 879.757602][T25157] netlink: 'syz.1.4461': attribute type 4 has an invalid length. [ 879.820927][T25165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.108500][T25176] ip_tables: iptables: counters copy to user failed while replacing table [ 880.523402][T25186] nbd: nbd0 already in use [ 880.837212][T25199] bond3 (unregistering): Released all slaves [ 880.924198][T25204] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 881.171460][T25214] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 881.836141][T25241] batman_adv: batadv0: Adding interface: dummy0 [ 881.836163][T25241] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.836197][T25241] batman_adv: batadv0: Interface activated: dummy0 [ 881.932092][T25245] batadv0: mtu less than device minimum [ 881.933625][T25245] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 881.935228][T25245] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 881.936761][T25245] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 881.938277][T25245] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 881.939821][T25245] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 881.941335][T25245] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 882.059695][T25241] batadv0: entered allmulticast mode [ 882.334144][T25263] __nla_validate_parse: 32 callbacks suppressed [ 882.334167][T25263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4480'. [ 882.334187][T25263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4480'. [ 882.334204][T25263] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4480'. [ 882.760331][T25285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4488'. [ 882.820090][T25290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4489'. [ 882.837924][T25286] validate_nla: 28 callbacks suppressed [ 882.837949][T25286] netlink: 'syz.2.4487': attribute type 1 has an invalid length. [ 882.838756][T25288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4487'. [ 882.972723][T25286] bond3: entered promiscuous mode [ 882.973170][T25286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 883.014149][T25288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 883.023253][T25288] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 883.023278][T25288] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 883.071829][T25288] bond3: (slave wireguard0): making interface the new active one [ 883.071855][T25288] wireguard0: entered promiscuous mode [ 883.093651][T25288] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 883.152615][T25297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 883.152646][T25297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 883.431218][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 883.431243][T25312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4497'. [ 883.431468][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 883.431484][T25312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4497'. [ 883.892805][T25338] netlink: 'syz.2.4504': attribute type 1 has an invalid length. [ 883.967328][T25338] 8021q: adding VLAN 0 to HW filter on device bond5 [ 884.004165][T25351] netlink: 'syz.3.4507': attribute type 1 has an invalid length. [ 884.216560][T25359] netlink: 'syz.1.4508': attribute type 3 has an invalid length. [ 884.643743][T25382] syzkaller0: entered promiscuous mode [ 884.643789][T25382] syzkaller0: entered allmulticast mode [ 885.031233][T25391] pimreg: renamed from bridge0 [ 885.169103][T25394] net_ratelimit: 17 callbacks suppressed [ 885.169129][T25394] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 885.338546][T25399] vlan0: entered promiscuous mode [ 885.802531][T25410] netlink: 'syz.1.4521': attribute type 1 has an invalid length. [ 885.885819][T25413] ip_tables: iptables: counters copy to user failed while replacing table [ 885.922870][T25410] bond5: entered promiscuous mode [ 885.924380][T25410] 8021q: adding VLAN 0 to HW filter on device bond5 [ 886.337024][T25426] ip6gretap0: entered promiscuous mode [ 886.607133][T25443] ip_tables: iptables: counters copy to user failed while replacing table [ 886.664464][T25447] netlink: 'syz.2.4532': attribute type 12 has an invalid length. [ 886.839238][T25457] netlink: 'syz.0.4535': attribute type 4 has an invalid length. [ 886.889625][T25459] netlink: 'syz.0.4535': attribute type 4 has an invalid length. [ 886.921491][T25457] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 887.486006][T25482] netlink: 'syz.0.4545': attribute type 4 has an invalid length. [ 887.743418][T25500] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 887.744689][T25500] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 887.808832][T25501] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 887.815978][T25501] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 888.032881][T25515] netlink: 'syz.4.4553': attribute type 1 has an invalid length. [ 888.032906][T25515] __nla_validate_parse: 267 callbacks suppressed [ 888.032919][T25515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4553'. [ 888.371858][T25531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4558'. [ 888.487282][T25535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4559'. [ 888.494321][T25535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4559'. [ 888.531008][T25542] xt_hashlimit: size too large, truncated to 1048576 [ 888.624311][T25544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4560'. [ 888.649759][T25544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4560'. [ 888.829885][T25546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4561'. [ 888.870788][T25546] vlan0: entered promiscuous mode [ 888.870812][T25546] veth1_macvtap: entered promiscuous mode [ 889.133475][T25566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4567'. [ 889.215814][T25568] netlink: 'syz.0.4566': attribute type 1 has an invalid length. [ 889.247467][T25568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 889.270515][T25564] rxe_eth0 speed is unknown, defaulting to 1000 [ 889.504260][T25564] syzkaller0 speed is unknown, defaulting to 1000 [ 889.629862][T25581] netlink: 3604 bytes leftover after parsing attributes in process `syz.4.4572'. [ 889.647747][ T29] audit: type=1804 audit(1794137915.723:17): pid=25581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4572" name="/newroot/280/cgroup.controllers" dev="tmpfs" ino=1451 res=1 errno=0 [ 889.647910][ T29] audit: type=1800 audit(1794137915.723:18): pid=25581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4572" name="cgroup.controllers" dev="tmpfs" ino=1451 res=0 errno=-22 [ 889.814635][T25586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4575'. [ 890.013270][T25592] ip_tables: iptables: counters copy to user failed while replacing table [ 890.029379][T25592] ip_tables: iptables: counters copy to user failed while replacing table [ 890.481399][T25615] netlink: 'syz.2.4581': attribute type 11 has an invalid length. [ 890.498438][T25615] syzkaller0: MTU not usable for tipc bearer [ 890.498481][T25615] tipc: Enabling of bearer rejected, failed to enable media [ 890.500349][T25615] syzkaller0: entered promiscuous mode [ 890.500368][T25615] syzkaller0: entered allmulticast mode [ 890.587422][T25617] syzkaller0: mtu less than device minimum [ 891.040932][T25628] gretap1: entered promiscuous mode [ 891.153128][T13498] IPVS: starting estimator thread 0... [ 891.153341][T25635] netlink: 'syz.4.4586': attribute type 4 has an invalid length. [ 891.236264][T25638] IPVS: using max 37 ests per chain, 88800 per kthread [ 891.300747][T25646] sctp: Trying to GSO but underlying device doesn't support it. [ 891.749386][T25677] sctp: [Deprecated]: syz.1.4596 (pid 25677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.749386][T25677] Use struct sctp_sack_info instead [ 891.770392][T25677] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 896.349307][T25703] bond6: entered allmulticast mode [ 896.376224][T25712] tipc: Enabled bearer , priority 10 [ 896.476098][T25715] batman_adv: batadv0: Adding interface: syzkaller0 [ 896.476119][T25715] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.476235][T25715] batman_adv: batadv0: Interface activated: syzkaller0 [ 896.654687][T25701] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 896.719353][T25701] batman_adv: batadv0: Removing interface: syzkaller0 [ 896.881893][T25739] netlink: 'syz.3.4613': attribute type 1 has an invalid length. [ 896.932303][T25743] __nla_validate_parse: 8 callbacks suppressed [ 896.932325][T25743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4615'. [ 896.969254][T25739] 8021q: adding VLAN 0 to HW filter on device bond10 [ 896.987478][T25747] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 897.032023][T25739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4613'. [ 897.117195][T25750] batman_adv: batadv0: Adding interface: dummy0 [ 897.117219][T25750] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.117260][T25750] batman_adv: batadv0: Interface activated: dummy0 [ 897.122027][T25750] veth1_to_batadv: mtu less than device minimum [ 897.123244][T25750] netlink: 'syz.2.4616': attribute type 10 has an invalid length. [ 897.123267][T25750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4616'. [ 897.123301][T25750] batadv0: entered allmulticast mode [ 897.124623][T25750] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 897.509343][T23397] tipc: Node number set to 989057744 [ 897.532304][T25766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4619'. [ 897.872158][T25789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4625'. [ 898.043652][T25793] syzkaller0: left promiscuous mode [ 898.043718][T25793] syzkaller0: left allmulticast mode [ 898.099737][T25793] ip6t_rpfilter: unknown options [ 898.207958][T25799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4630'. [ 898.352086][T25804] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4632'. [ 898.659208][T25810] syzkaller1: entered promiscuous mode [ 898.659234][T25810] syzkaller1: entered allmulticast mode [ 898.715082][T25822] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4637'. [ 898.715107][T25822] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4637'. [ 898.715162][T25822] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4637'. [ 899.101922][T25838] netlink: 'syz.4.4644': attribute type 62 has an invalid length. [ 899.113423][T25838] syzkaller1: entered promiscuous mode [ 899.113448][T25838] syzkaller1: entered allmulticast mode [ 899.398224][T25851] SET target dimension over the limit! [ 899.698490][T25859] xt_hashlimit: size too large, truncated to 1048576 [ 900.161718][T25861] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 900.174383][T25861] 0ªX¹¦Dö»: entered allmulticast mode [ 900.362838][T25871] FAULT_INJECTION: forcing a failure. [ 900.362838][T25871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.362873][T25871] CPU: 1 UID: 0 PID: 25871 Comm: syz.3.4656 Not tainted syzkaller #0 PREEMPT(full) [ 900.362898][T25871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 900.362911][T25871] Call Trace: [ 900.362921][T25871] [ 900.362931][T25871] dump_stack_lvl+0xe8/0x150 [ 900.362973][T25871] should_fail_ex+0x3eb/0x540 [ 900.363009][T25871] _copy_from_user+0x2d/0xb0 [ 900.363040][T25871] ___sys_sendmsg+0x1c6/0x360 [ 900.363065][T25871] ? __lock_acquire+0x747/0x2de0 [ 900.363101][T25871] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.363171][T25871] ? __fget_files+0x3a2/0x420 [ 900.363200][T25871] ? __fget_files+0x2a/0x420 [ 900.363241][T25871] __x64_sys_sendmsg+0x1b1/0x290 [ 900.363271][T25871] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 900.363325][T25871] do_syscall_64+0x166/0x520 [ 900.363354][T25871] ? trace_irq_disable+0x3b/0x140 [ 900.363385][T25871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.363409][T25871] ? clear_bhb_loop+0x70/0xc0 [ 900.363438][T25871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.363460][T25871] RIP: 0033:0x7f581c59fb19 [ 900.363481][T25871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.363501][T25871] RSP: 002b:00007f581d3e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.363525][T25871] RAX: ffffffffffffffda RBX: 00007f581c825fa0 RCX: 00007f581c59fb19 [ 900.363550][T25871] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 900.363565][T25871] RBP: 00007f581d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 900.363580][T25871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.363593][T25871] R13: 00007f581c826038 R14: 00007f581c825fa0 R15: 00007fffd6e5c088 [ 900.363631][T25871] [ 901.287613][T25911] syzkaller0: entered promiscuous mode [ 901.287640][T25911] syzkaller0: entered allmulticast mode [ 901.578218][T25923] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 902.041098][T25952] x_tables: duplicate underflow at hook 3 [ 902.200097][T25958] __nla_validate_parse: 3 callbacks suppressed [ 902.200120][T25958] netlink: 4836 bytes leftover after parsing attributes in process `syz.2.4671'. [ 902.451865][T25969] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 902.524575][T25971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4677'. [ 902.558530][T25971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4677'. [ 902.583540][T25971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4677'. [ 902.617063][T25971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4677'. [ 902.641356][T25971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4677'. [ 902.658087][T25971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4677'. [ 902.689608][T25971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4677'. [ 902.714013][T25971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4677'. [ 902.742844][T25971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4677'. [ 903.899637][T26032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 903.899656][T26032] IPv6: NLM_F_CREATE should be set when creating new route [ 903.899686][T26032] IPv6: NLM_F_CREATE should be set when creating new route [ 904.028847][T26038] netlink: 'syz.3.4692': attribute type 10 has an invalid length. [ 904.028992][T26038] veth1_macvtap: left promiscuous mode [ 904.029924][T26038] team0: Device veth1_macvtap failed to register rx_handler [ 904.116819][T26036] syzkaller1: entered promiscuous mode [ 904.116844][T26036] syzkaller1: entered allmulticast mode [ 904.270164][T26038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.094077][T26089] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 906.409380][T26128] netlink: 'syz.1.4710': attribute type 1 has an invalid length. [ 906.589686][T26128] bond7: entered promiscuous mode [ 906.590174][T26128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 906.692052][T26129] 8021q: adding VLAN 0 to HW filter on device bond7 [ 906.692555][T26129] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 906.692581][T26129] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 906.764433][T26129] bond7: (slave wireguard0): making interface the new active one [ 906.764460][T26129] wireguard0: entered promiscuous mode [ 906.780767][T26129] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 907.006676][T26142] erspan0: entered promiscuous mode [ 907.047072][T26141] erspan0: left promiscuous mode [ 907.298728][T26154] __nla_validate_parse: 34 callbacks suppressed [ 907.298752][T26154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4711'. [ 907.388991][T26160] FAULT_INJECTION: forcing a failure. [ 907.388991][T26160] name failslab, interval 1, probability 0, space 0, times 0 [ 907.389026][T26160] CPU: 0 UID: 0 PID: 26160 Comm: syz.0.4718 Not tainted syzkaller #0 PREEMPT(full) [ 907.389071][T26160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 907.389085][T26160] Call Trace: [ 907.389094][T26160] [ 907.389105][T26160] dump_stack_lvl+0xe8/0x150 [ 907.389147][T26160] should_fail_ex+0x3eb/0x540 [ 907.389180][T26160] ? __alloc_skb+0x1db/0x7a0 [ 907.389204][T26160] should_failslab+0xa8/0x100 [ 907.389229][T26160] ? __alloc_skb+0x1db/0x7a0 [ 907.389249][T26160] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 907.389279][T26160] ? __alloc_skb+0x18d/0x7a0 [ 907.389302][T26160] ? __alloc_skb+0x1db/0x7a0 [ 907.389333][T26160] __alloc_skb+0x1db/0x7a0 [ 907.389376][T26160] netlink_ack+0x136/0xb30 [ 907.389409][T26160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 907.389438][T26160] ? __copy_skb_header+0xa3/0x4a0 [ 907.389479][T26160] netlink_rcv_skb+0x2a4/0x4a0 [ 907.389514][T26160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 907.389542][T26160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 907.389587][T26160] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.389621][T26160] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.389663][T26160] netlink_unicast+0x8ef/0xa80 [ 907.389714][T26160] netlink_sendmsg+0x7f0/0xb20 [ 907.389744][T26160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.389771][T26160] ? aa_sock_msg_perm+0x144/0x210 [ 907.389800][T26160] ? apparmor_socket_sendmsg+0x98/0x360 [ 907.389836][T26160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.389856][T26160] sock_sendmsg_nosec+0x14e/0x190 [ 907.389892][T26160] ____sys_sendmsg+0x54e/0x850 [ 907.389925][T26160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.389962][T26160] ? import_iovec+0x73/0xa0 [ 907.389996][T26160] ___sys_sendmsg+0x2a5/0x360 [ 907.390020][T26160] ? __lock_acquire+0x747/0x2de0 [ 907.390062][T26160] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.390132][T26160] ? __fget_files+0x3a2/0x420 [ 907.390161][T26160] ? __fget_files+0x2a/0x420 [ 907.390200][T26160] __x64_sys_sendmsg+0x1b1/0x290 [ 907.390231][T26160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.390283][T26160] do_syscall_64+0x166/0x520 [ 907.390313][T26160] ? trace_irq_disable+0x3b/0x140 [ 907.390344][T26160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.390368][T26160] ? clear_bhb_loop+0x70/0xc0 [ 907.390397][T26160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.390420][T26160] RIP: 0033:0x7f8be199fb19 [ 907.390443][T26160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.390463][T26160] RSP: 002b:00007f8be2799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.390488][T26160] RAX: ffffffffffffffda RBX: 00007f8be1c25fa0 RCX: 00007f8be199fb19 [ 907.390505][T26160] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 907.390519][T26160] RBP: 00007f8be2799090 R08: 0000000000000000 R09: 0000000000000000 [ 907.390533][T26160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.390546][T26160] R13: 00007f8be1c26038 R14: 00007f8be1c25fa0 R15: 00007fffa4cdc178 [ 907.390595][T26160] [ 907.425818][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 908.191867][ T29] audit: type=1800 audit(1794137934.263:19): pid=26180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4722" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1500 res=0 errno=-22 [ 908.273211][T26182] TC_ACT_REPEAT abuse ? [ 908.400911][ T5298] veth0_vlan: left promiscuous mode [ 908.462422][ T5772] veth0_vlan: entered promiscuous mode [ 908.554061][T26200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.581050][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4725'. [ 908.752343][T26205] x_tables: duplicate underflow at hook 3 [ 908.778913][T26205] netlink: 'syz.1.4726': attribute type 20 has an invalid length. [ 908.778937][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4726'. [ 908.833108][T26205] netlink: 'syz.1.4726': attribute type 20 has an invalid length. [ 908.833136][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4726'. [ 908.841619][T13518] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.849440][ T8414] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.853880][T16142] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.854028][T16142] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.052660][T26215] geneve1: entered promiscuous mode [ 909.160280][T26223] netlink: 'syz.0.4729': attribute type 12 has an invalid length. [ 909.203682][T26221] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 909.220540][T26221] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 909.220594][T26221] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 909.224408][T26224] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 909.377064][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4731'. [ 909.503944][T26224] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 909.539756][T26233] netlink: 'syz.2.4733': attribute type 4 has an invalid length. [ 909.890081][T26241] netlink: 'syz.1.4735': attribute type 12 has an invalid length. [ 909.999278][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4737'. [ 910.213803][T26264] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4739'. [ 910.213830][T26264] nbd: must specify a device to reconfigure [ 910.560979][T26282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4744'. [ 910.667946][T26288] xfrm0: entered promiscuous mode [ 910.667973][T26288] xfrm0: entered allmulticast mode [ 910.938821][T26296] netlink: 'syz.2.4747': attribute type 1 has an invalid length. [ 911.185638][T26313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4750'. [ 911.518121][T26326] x_tables: duplicate underflow at hook 1 [ 911.584050][T26335] x_tables: duplicate underflow at hook 1 [ 911.840077][T26341] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 911.865703][T26344] syzkaller1: entered promiscuous mode [ 911.865728][T26344] syzkaller1: entered allmulticast mode [ 911.984377][T26347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4757'. [ 912.279947][T26360] netlink: 'syz.4.4760': attribute type 1 has an invalid length. [ 912.762274][T26360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 912.831883][T26361] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 912.929677][T26364] bond6: (slave geneve2): making interface the new active one [ 913.001603][T26364] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 914.922542][T26426] netlink: 'syz.0.4771': attribute type 4 has an invalid length. [ 914.922570][T26426] __nla_validate_parse: 1 callbacks suppressed [ 914.922583][T26426] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4771'. [ 915.064678][T26435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4773'. [ 915.078324][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.078725][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.079175][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.079499][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.079802][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.080227][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.083042][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.083394][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.083734][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.084104][T26430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.464075][T26431] syzkaller1: entered allmulticast mode [ 915.911565][T26461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4776'. [ 916.318979][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4777'. [ 916.363728][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4777'. [ 916.479267][T26475] nbd: socks must be embedded in a SOCK_ITEM attr [ 916.582896][T26471] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 916.609886][T26471] bond8 (unregistering): Released all slaves [ 917.053532][T26485] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4781'. [ 917.053558][T26485] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4781'. [ 917.053575][T26485] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4781'. [ 917.181039][T26487] netlink: 'syz.1.4782': attribute type 10 has an invalid length. [ 917.342884][T26485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4781'. [ 918.100749][T26522] netlink: 'syz.2.4790': attribute type 1 has an invalid length. [ 918.568758][T26539] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4795'. [ 918.588178][T26537] syzkaller0: left promiscuous mode [ 918.588203][T26537] syzkaller0: left allmulticast mode [ 918.942958][T26562] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 918.959957][T26562] bond11 (unregistering): Released all slaves [ 919.180355][T26563] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 919.198434][T26563] bond11 (unregistering): Released all slaves [ 919.578854][T26592] syzkaller0: MTU not usable for tipc bearer [ 919.578899][T26592] tipc: Enabling of bearer rejected, failed to enable media [ 919.579441][T26592] syzkaller0: entered promiscuous mode [ 919.579461][T26592] syzkaller0: entered allmulticast mode [ 919.802008][T26599] netlink: 'syz.2.4803': attribute type 21 has an invalid length. [ 920.050675][T26616] netlink: 'syz.1.4812': attribute type 1 has an invalid length. [ 920.290987][T26619] syzkaller1: entered promiscuous mode [ 920.291029][T26619] syzkaller1: entered allmulticast mode [ 920.570896][T26647] __nla_validate_parse: 5 callbacks suppressed [ 920.570920][T26647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4817'. [ 920.570939][T26647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4817'. [ 920.570958][T26647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4817'. [ 920.664735][T26651] netlink: 'syz.1.4818': attribute type 1 has an invalid length. [ 920.722557][T26652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4819'. [ 921.141617][T26661] netlink: 'syz.3.4821': attribute type 1 has an invalid length. [ 921.141645][T26661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4821'. [ 921.161736][T26661] netlink: 'syz.3.4821': attribute type 11 has an invalid length. [ 921.520992][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 922.517307][T26724] set match dimension is over the limit! [ 922.670135][T26732] netlink: 'syz.3.4834': attribute type 1 has an invalid length. [ 922.758509][T26732] 8021q: adding VLAN 0 to HW filter on device bond11 [ 922.952222][T26736] bond11: entered allmulticast mode [ 922.953275][T26736] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4834'. [ 923.061529][T26738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4836'. [ 923.061568][T26738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4836'. [ 923.251235][T26756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4838'. [ 923.698039][T26779] net_ratelimit: 27 callbacks suppressed [ 923.698064][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 923.698402][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 923.700261][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 923.702240][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 923.702693][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 923.703011][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 923.703334][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 923.703648][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 923.783378][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 923.783762][T26779] ip_tables: iptables: counters copy to user failed while replacing table [ 924.302746][T26802] bond0: Device is already in use. [ 924.602697][T26816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4850'. [ 924.616339][T26816] netlink: 'syz.2.4850': attribute type 13 has an invalid length. [ 925.009612][T26843] IPVS: Unknown mcast interface: bridge_slave_0 [ 925.232151][T26854] pimreg0: tun_chr_ioctl cmd 1074025677 [ 925.232262][T26854] pimreg0: linktype set to 778 [ 925.293868][T26858] syzkaller1: entered allmulticast mode [ 925.547838][T26876] veth2: entered allmulticast mode [ 925.677442][T26881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.695022][T26883] __nla_validate_parse: 4 callbacks suppressed [ 925.695045][T26883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4866'. [ 925.780710][T26883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4866'. [ 925.886525][T26889] bond0: entered allmulticast mode [ 925.886552][T26889] bond_slave_0: entered allmulticast mode [ 925.886571][T26889] bond_slave_1: entered allmulticast mode [ 926.093565][T26902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4873'. [ 926.411717][T26909] syzkaller0: entered promiscuous mode [ 926.411749][T26909] syzkaller0: entered allmulticast mode [ 929.794478][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4883'. [ 930.898044][T26956] gretap0: left promiscuous mode [ 930.898070][T26956] gretap0: entered allmulticast mode [ 931.253734][T26979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4888'. [ 931.344536][T26975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.361431][T26975] bond_slave_0: left allmulticast mode [ 931.381280][T26975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.403042][T26975] bond_slave_1: left allmulticast mode [ 931.416399][T26975] bond0 (unregistering): Released all slaves [ 931.453765][T26976] syzkaller1: entered promiscuous mode [ 931.453821][T26976] syzkaller1: entered allmulticast mode [ 931.680340][T26993] bond3 (unregistering): Released all slaves [ 931.842598][T26998] bond3 (unregistering): Released all slaves [ 931.883021][T27007] macvlan0: entered promiscuous mode [ 932.593911][T27054] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4903'. [ 932.593941][T27054] net_ratelimit: 23 callbacks suppressed [ 932.593957][T27054] A link change request failed with some changes committed already. Interface 26±ÿ†ˆ¬hËdtÍ may have been left with an inconsistent configuration, please check. [ 932.718581][ T29] audit: type=1800 audit(1794137958.793:20): pid=27058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4904" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1572 res=0 errno=-22 [ 933.117765][T27077] x_tables: duplicate underflow at hook 1 [ 933.168753][T27080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4908'. [ 933.168780][T27080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4908'. [ 933.283585][T27082] ip_tables: iptables: counters copy to user failed while replacing table [ 934.089120][T27115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4918'. [ 934.652823][T27125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4923'. [ 934.669043][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'. [ 934.889426][T27139] netlink: 'syz.0.4927': attribute type 11 has an invalid length. [ 935.300906][T27158] û: renamed from vlan1 (while UP) [ 935.325236][T27158] 8021q: VLANs not supported on nlmon0 [ 935.604259][T27168] bridge_slave_1: left allmulticast mode [ 935.604290][T27168] bridge_slave_1: left promiscuous mode [ 935.604532][T27168] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.633000][T27168] bridge_slave_0: left allmulticast mode [ 935.633026][T27168] bridge_slave_0: left promiscuous mode [ 935.633272][T27168] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.014116][T27184] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4938'. [ 936.080641][T27188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4939'. [ 936.080939][T27188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4939'. [ 936.115038][T27188] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 936.115253][T27188] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 937.638579][T27209] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 937.686327][T27226] __nla_validate_parse: 31 callbacks suppressed [ 937.686354][T27226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4944'. [ 937.858577][T27215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4944'. [ 937.963446][T27244] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 937.963542][T27243] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 937.967783][T27240] sctp: [Deprecated]: syz.0.4949 (pid 27240) Use of int in max_burst socket option. [ 937.967783][T27240] Use struct sctp_assoc_value instead [ 938.103134][T27248] netlink: 'syz.3.4952': attribute type 8 has an invalid length. [ 938.103161][T27248] sch_fq: defrate 0 ignored. [ 938.292890][T27251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4953'. [ 938.410737][T27255] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4955'. [ 938.410804][T27255] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4955'. [ 938.661732][T27265] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4958'. [ 938.748256][T27270] ip_tables: iptables: counters copy to user failed while replacing table [ 938.929056][T27279] tc_dump_action: action bad kind [ 939.783939][T27322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4974'. [ 939.822354][T27313] tipc: Enabling of bearer rejected, failed to enable media [ 939.841974][T27313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4971'. [ 939.935275][T27329] netlink: 'syz.0.4979': attribute type 4 has an invalid length. [ 939.935300][T27329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4979'. [ 940.207409][T27345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4983'. [ 940.790555][T27382] netlink: 'syz.1.4987': attribute type 30 has an invalid length. [ 940.821315][T27382] vxlan1: entered promiscuous mode [ 940.821343][T27382] vxlan1: entered allmulticast mode [ 940.844327][T27383] netlink: 'syz.1.4987': attribute type 30 has an invalid length. [ 940.887063][T27383] vxlan1: entered promiscuous mode [ 940.887102][T27383] vxlan1: entered allmulticast mode [ 941.192703][T27396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 941.692369][T27413] x_tables: duplicate underflow at hook 3 [ 942.202289][T27443] openvswitch: netlink: Key type 144 is out of range max 32 [ 943.530502][T27506] sctp: [Deprecated]: syz.2.5019 (pid 27506) Use of int in max_burst socket option. [ 943.530502][T27506] Use struct sctp_assoc_value instead [ 943.530573][T27500] sctp: [Deprecated]: syz.2.5019 (pid 27500) Use of int in max_burst socket option. [ 943.530573][T27500] Use struct sctp_assoc_value instead [ 943.531348][T27506] __nla_validate_parse: 15 callbacks suppressed [ 943.531365][T27506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5019'. [ 943.531596][T27500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5019'. [ 945.898934][T27518] kthread_run failed with err -4 [ 946.130585][T27550] FAULT_INJECTION: forcing a failure. [ 946.130585][T27550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 946.130619][T27550] CPU: 0 UID: 0 PID: 27550 Comm: syz.0.5029 Not tainted syzkaller #0 PREEMPT(full) [ 946.130645][T27550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 946.130660][T27550] Call Trace: [ 946.130669][T27550] [ 946.130679][T27550] dump_stack_lvl+0xe8/0x150 [ 946.130721][T27550] should_fail_ex+0x3eb/0x540 [ 946.130765][T27550] _copy_from_user+0x2d/0xb0 [ 946.130796][T27550] ___sys_sendmsg+0x1c6/0x360 [ 946.130834][T27550] ? __lock_acquire+0x747/0x2de0 [ 946.130873][T27550] ? __pfx____sys_sendmsg+0x10/0x10 [ 946.130943][T27550] ? __fget_files+0x3a2/0x420 [ 946.130970][T27550] ? __fget_files+0x2a/0x420 [ 946.131009][T27550] __x64_sys_sendmsg+0x1b1/0x290 [ 946.131039][T27550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 946.131091][T27550] do_syscall_64+0x166/0x520 [ 946.131119][T27550] ? trace_irq_disable+0x3b/0x140 [ 946.131151][T27550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.131173][T27550] ? clear_bhb_loop+0x70/0xc0 [ 946.131202][T27550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.131225][T27550] RIP: 0033:0x7f8be199fb19 [ 946.131245][T27550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.131265][T27550] RSP: 002b:00007f8bdfbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.131288][T27550] RAX: ffffffffffffffda RBX: 00007f8be1c26090 RCX: 00007f8be199fb19 [ 946.131305][T27550] RDX: 0000000000000050 RSI: 00002000000029c0 RDI: 0000000000000004 [ 946.131320][T27550] RBP: 00007f8bdfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 946.131335][T27550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.131349][T27550] R13: 00007f8be1c26128 R14: 00007f8be1c26090 R15: 00007fffa4cdc178 [ 946.131386][T27550] [ 946.218217][T27551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5027'. [ 946.394265][T27553] netlink: 'syz.4.5027': attribute type 1 has an invalid length. [ 946.667935][T27564] 8021q: VLANs not supported on syzkaller0 [ 946.757346][T27566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5032'. [ 946.888069][T27575] pimreg: entered allmulticast mode [ 946.910424][T27575] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5035'. [ 947.417393][T27585] pimreg: left allmulticast mode [ 947.548520][T27593] rxe_eth0 speed is unknown, defaulting to 1000 [ 947.561648][T27595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5039'. [ 948.231339][T27613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5043'. [ 948.252899][T27615] FAULT_INJECTION: forcing a failure. [ 948.252899][T27615] name failslab, interval 1, probability 0, space 0, times 0 [ 948.252933][T27615] CPU: 0 UID: 0 PID: 27615 Comm: syz.1.5044 Not tainted syzkaller #0 PREEMPT(full) [ 948.252959][T27615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 948.252973][T27615] Call Trace: [ 948.252983][T27615] [ 948.252993][T27615] dump_stack_lvl+0xe8/0x150 [ 948.253034][T27615] should_fail_ex+0x3eb/0x540 [ 948.253068][T27615] ? __alloc_skb+0x1db/0x7a0 [ 948.253094][T27615] should_failslab+0xa8/0x100 [ 948.253125][T27615] ? __alloc_skb+0x1db/0x7a0 [ 948.253146][T27615] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 948.253175][T27615] ? __alloc_skb+0x18d/0x7a0 [ 948.253198][T27615] ? __alloc_skb+0x1db/0x7a0 [ 948.253229][T27615] __alloc_skb+0x1db/0x7a0 [ 948.253257][T27615] netlink_sendmsg+0x5cd/0xb20 [ 948.253288][T27615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.253315][T27615] ? aa_sock_msg_perm+0x144/0x210 [ 948.253344][T27615] ? apparmor_socket_sendmsg+0x98/0x360 [ 948.253380][T27615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.253401][T27615] sock_sendmsg_nosec+0x14e/0x190 [ 948.253437][T27615] ____sys_sendmsg+0x54e/0x850 [ 948.253470][T27615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.253508][T27615] ? import_iovec+0x73/0xa0 [ 948.253541][T27615] ___sys_sendmsg+0x2a5/0x360 [ 948.253565][T27615] ? __lock_acquire+0x747/0x2de0 [ 948.253600][T27615] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.253671][T27615] ? __fget_files+0x3a2/0x420 [ 948.253699][T27615] ? __fget_files+0x2a/0x420 [ 948.253739][T27615] __x64_sys_sendmsg+0x1b1/0x290 [ 948.253769][T27615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.253822][T27615] do_syscall_64+0x166/0x520 [ 948.253850][T27615] ? trace_irq_disable+0x3b/0x140 [ 948.253881][T27615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.253904][T27615] ? clear_bhb_loop+0x70/0xc0 [ 948.253933][T27615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.253956][T27615] RIP: 0033:0x7fef0df9fb19 [ 948.253977][T27615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.253997][T27615] RSP: 002b:00007fef0ee84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.254022][T27615] RAX: ffffffffffffffda RBX: 00007fef0e226090 RCX: 00007fef0df9fb19 [ 948.254039][T27615] RDX: 0000000000000050 RSI: 00002000000029c0 RDI: 0000000000000004 [ 948.254054][T27615] RBP: 00007fef0ee84090 R08: 0000000000000000 R09: 0000000000000000 [ 948.254069][T27615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.254082][T27615] R13: 00007fef0e226128 R14: 00007fef0e226090 R15: 00007ffde5d98cf8 [ 948.254128][T27615] [ 948.559769][T27593] syzkaller0 speed is unknown, defaulting to 1000 [ 948.715833][T27622] netlink: 'syz.3.5046': attribute type 1 has an invalid length. [ 948.872754][T27629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5050'. [ 948.889110][T27630] xt_l2tp: missing protocol rule (udp|l2tpip) [ 949.372625][T27647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5056'. [ 949.385525][T27647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5056'. [ 949.385613][T27647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5056'. [ 949.390482][T27651] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 949.426444][T27644] syzkaller1: entered promiscuous mode [ 949.426474][T27644] syzkaller1: entered allmulticast mode [ 949.476046][T27642] vlan1: entered promiscuous mode [ 949.476067][T27642] batadv0: entered promiscuous mode [ 949.476220][T27642] vlan1: entered allmulticast mode [ 949.476236][T27642] batadv0: entered allmulticast mode [ 949.792359][T27663] FAULT_INJECTION: forcing a failure. [ 949.792359][T27663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.792394][T27663] CPU: 0 UID: 0 PID: 27663 Comm: syz.4.5058 Not tainted syzkaller #0 PREEMPT(full) [ 949.792419][T27663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 949.792434][T27663] Call Trace: [ 949.792443][T27663] [ 949.792453][T27663] dump_stack_lvl+0xe8/0x150 [ 949.792496][T27663] should_fail_ex+0x3eb/0x540 [ 949.792531][T27663] _copy_from_iter+0x1d3/0x1680 [ 949.792558][T27663] ? __alloc_skb+0x27a/0x7a0 [ 949.792583][T27663] ? __alloc_skb+0x27a/0x7a0 [ 949.792606][T27663] ? __alloc_skb+0x27a/0x7a0 [ 949.792628][T27663] ? __pfx__copy_from_iter+0x10/0x10 [ 949.792652][T27663] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 949.792680][T27663] ? __alloc_skb+0x27a/0x7a0 [ 949.792700][T27663] ? __alloc_skb+0x27a/0x7a0 [ 949.792729][T27663] ? netlink_sendmsg+0x64f/0xb20 [ 949.792751][T27663] ? skb_put+0x112/0x210 [ 949.792777][T27663] netlink_sendmsg+0x6bb/0xb20 [ 949.792806][T27663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.792833][T27663] ? aa_sock_msg_perm+0x144/0x210 [ 949.792861][T27663] ? apparmor_socket_sendmsg+0x98/0x360 [ 949.792898][T27663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.792919][T27663] sock_sendmsg_nosec+0x14e/0x190 [ 949.792955][T27663] ____sys_sendmsg+0x54e/0x850 [ 949.792988][T27663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.793025][T27663] ? import_iovec+0x73/0xa0 [ 949.793058][T27663] ___sys_sendmsg+0x2a5/0x360 [ 949.793083][T27663] ? __lock_acquire+0x747/0x2de0 [ 949.793118][T27663] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.793196][T27663] ? __fget_files+0x3a2/0x420 [ 949.793225][T27663] ? __fget_files+0x2a/0x420 [ 949.793266][T27663] __x64_sys_sendmsg+0x1b1/0x290 [ 949.793296][T27663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.793349][T27663] do_syscall_64+0x166/0x520 [ 949.793377][T27663] ? trace_irq_disable+0x3b/0x140 [ 949.793409][T27663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.793434][T27663] ? clear_bhb_loop+0x70/0xc0 [ 949.793462][T27663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.793484][T27663] RIP: 0033:0x7f75cdb9fb19 [ 949.793506][T27663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.793526][T27663] RSP: 002b:00007f75ceadf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.793550][T27663] RAX: ffffffffffffffda RBX: 00007f75cde26090 RCX: 00007f75cdb9fb19 [ 949.793567][T27663] RDX: 0000000000000050 RSI: 00002000000029c0 RDI: 0000000000000004 [ 949.793582][T27663] RBP: 00007f75ceadf090 R08: 0000000000000000 R09: 0000000000000000 [ 949.793596][T27663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.793610][T27663] R13: 00007f75cde26128 R14: 00007f75cde26090 R15: 00007fff36403f48 [ 949.793648][T27663] [ 950.139152][T27666] netlink: 279 bytes leftover after parsing attributes in process `syz.2.5060'. [ 950.216587][T27668] netlink: 'syz.3.5059': attribute type 5 has an invalid length. [ 950.308424][T27671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5061'. [ 951.272787][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5071'. [ 951.293577][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5071'. [ 951.305617][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5071'. [ 951.307852][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5071'. [ 951.340821][T27718] ip_tables: iptables: counters copy to user failed while replacing table [ 951.364000][T27718] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 951.849166][T27740] xt_hashlimit: invalid interval [ 952.017555][T27743] syzkaller1: entered promiscuous mode [ 952.017581][T27743] syzkaller1: entered allmulticast mode [ 952.144755][T27755] netlink: 'syz.2.5079': attribute type 1 has an invalid length. [ 952.144783][T27755] netlink: 'syz.2.5079': attribute type 2 has an invalid length. [ 953.234175][T27797] netlink: 'syz.1.5089': attribute type 1 has an invalid length. [ 953.259336][T27805] IPVS: Unknown mcast interface: macsec0 [ 953.446039][T27816] macvlan1: entered allmulticast mode [ 953.872916][T27837] batman_adv: batadv0: Adding interface: syzkaller0 [ 953.872942][T27837] batman_adv: batadv0: Interface activated: syzkaller0 [ 953.888983][T27837] __nla_validate_parse: 14 callbacks suppressed [ 953.889005][T27837] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5095'. [ 953.957585][T27839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5097'. [ 954.290825][T27853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5101'. [ 954.332903][T27853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5101'. [ 954.472422][T27856] syzkaller1: entered promiscuous mode [ 954.472448][T27856] syzkaller1: entered allmulticast mode [ 954.490237][T27861] xt_hashlimit: size too large, truncated to 1048576 [ 954.490514][T27861] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 954.688681][T27857] syzkaller1: left promiscuous mode [ 954.688707][T27857] syzkaller1: left allmulticast mode [ 954.856873][T27880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5111'. [ 954.914197][T27887] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5110'. [ 954.988106][T27888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5106'. [ 955.029709][T27888] bond6: option ad_actor_sys_prio: invalid value (0) [ 955.029738][T27888] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 955.059899][T27888] bond6 (unregistering): Released all slaves [ 955.497411][T27891] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5110'. [ 956.016546][T27924] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 956.065904][T27924] bond8: (slave lo): Enslaving as an active interface with an up link [ 956.079938][T27924] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 956.596873][T27931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5119'. [ 956.832318][T27936] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5121'. [ 956.848400][T27936] netlink: 'syz.3.5121': attribute type 1 has an invalid length. [ 957.194048][T27951] netlink: 'syz.4.5124': attribute type 1 has an invalid length. [ 957.307315][T27951] 8021q: adding VLAN 0 to HW filter on device bond9 [ 957.405501][T27948] bond9: (slave veth0_to_bond): making interface the new active one [ 957.410670][T27948] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 957.453773][T27963] netlink: 'syz.4.5124': attribute type 1 has an invalid length. [ 957.489202][T27951] macvlan2: entered promiscuous mode [ 957.489227][T27951] macvlan2: entered allmulticast mode [ 957.501842][T27951] bond9: entered promiscuous mode [ 957.501865][T27951] veth0_to_bond: entered promiscuous mode [ 957.502407][T27951] bond9: entered allmulticast mode [ 957.502425][T27951] veth0_to_bond: entered allmulticast mode [ 957.503050][T27951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 957.503755][T27951] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 957.504040][T27951] bond9: left allmulticast mode [ 957.504057][T27951] veth0_to_bond: left allmulticast mode [ 957.504100][T27951] bond9: left promiscuous mode [ 957.504113][T27951] veth0_to_bond: left promiscuous mode [ 957.698366][T27961] ip6gre1: entered promiscuous mode [ 957.699049][T27961] ip6gre1: entered allmulticast mode [ 957.789620][T27969] macvlan2: entered promiscuous mode [ 957.789646][T27969] macvlan2: entered allmulticast mode [ 957.790270][T27969] bond9: entered promiscuous mode [ 957.790289][T27969] veth0_to_bond: entered promiscuous mode [ 957.790782][T27969] bond9: entered allmulticast mode [ 957.790800][T27969] veth0_to_bond: entered allmulticast mode [ 957.791405][T27969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 957.792235][T27969] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 957.792393][T27969] bond9: left allmulticast mode [ 957.792409][T27969] veth0_to_bond: left allmulticast mode [ 957.792450][T27969] bond9: left promiscuous mode [ 957.792464][T27969] veth0_to_bond: left promiscuous mode [ 957.948067][T27983] ip6erspan1: entered allmulticast mode [ 957.953737][T27982] netlink: 'syz.2.5131': attribute type 5 has an invalid length. [ 957.994558][T13510] bond9: (slave veth0_to_bond): link status definitely down, disabling slave [ 958.011748][T27982] netlink: 'syz.2.5131': attribute type 39 has an invalid length. [ 958.027095][T13510] bond9: now running without any active interface! [ 958.225994][T27994] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 958.286120][T27997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 958.501008][T28000] geneve2: entered allmulticast mode [ 958.536879][T28004] ip_tables: iptables: counters copy to user failed while replacing table [ 958.538982][T28005] ip_tables: iptables: counters copy to user failed while replacing table [ 958.668229][T28004] netlink: 'syz.0.5138': attribute type 16 has an invalid length. [ 958.668257][T28004] netlink: 'syz.0.5138': attribute type 17 has an invalid length. [ 958.879448][T28004] 0ªX¹¦Dö»: left allmulticast mode [ 958.911768][T28004] sit0: left promiscuous mode [ 958.967437][T28004] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.972333][T28004] batadv0: left allmulticast mode [ 959.039828][T28004] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 959.350761][T28045] FAULT_INJECTION: forcing a failure. [ 959.350761][T28045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.350795][T28045] CPU: 1 UID: 0 PID: 28045 Comm: syz.0.5145 Not tainted syzkaller #0 PREEMPT(full) [ 959.350821][T28045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 959.350836][T28045] Call Trace: [ 959.350845][T28045] [ 959.350856][T28045] dump_stack_lvl+0xe8/0x150 [ 959.350899][T28045] should_fail_ex+0x3eb/0x540 [ 959.350945][T28045] _copy_to_user+0x31/0xb0 [ 959.350979][T28045] simple_read_from_buffer+0xe1/0x170 [ 959.351015][T28045] proc_fail_nth_read+0x1bb/0x230 [ 959.351044][T28045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.351073][T28045] ? rw_verify_area+0x24a/0x4c0 [ 959.351105][T28045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.351130][T28045] vfs_read+0x213/0xa80 [ 959.351167][T28045] ? __pfx___mutex_lock+0x10/0x10 [ 959.351200][T28045] ? __pfx_vfs_read+0x10/0x10 [ 959.351233][T28045] ? __fget_files+0x2a/0x420 [ 959.351269][T28045] ? __fget_files+0x3a2/0x420 [ 959.351297][T28045] ? __fget_files+0x2a/0x420 [ 959.351331][T28045] ? fdget+0x1ac/0x250 [ 959.351369][T28045] ksys_read+0x150/0x270 [ 959.351405][T28045] ? __pfx_ksys_read+0x10/0x10 [ 959.351451][T28045] do_syscall_64+0x166/0x520 [ 959.351480][T28045] ? trace_irq_disable+0x3b/0x140 [ 959.351511][T28045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.351534][T28045] ? clear_bhb_loop+0x70/0xc0 [ 959.351564][T28045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.351588][T28045] RIP: 0033:0x7f8be196034e [ 959.351609][T28045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 959.351629][T28045] RSP: 002b:00007f8bdfbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 959.351653][T28045] RAX: ffffffffffffffda RBX: 00007f8bdfbf66c0 RCX: 00007f8be196034e [ 959.351670][T28045] RDX: 000000000000000f RSI: 00007f8bdfbf60a0 RDI: 0000000000000005 [ 959.351684][T28045] RBP: 00007f8bdfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 959.351698][T28045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.351711][T28045] R13: 00007f8be1c26128 R14: 00007f8be1c26090 R15: 00007fffa4cdc178 [ 959.351750][T28045] [ 959.769113][T28050] bond9: option xmit_hash_policy: invalid value (10) [ 959.774281][T28050] bond9 (unregistering): Released all slaves [ 959.880440][T28059] __nla_validate_parse: 7 callbacks suppressed [ 959.880462][T28059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5149'. [ 959.969003][T28061] bond9: option xmit_hash_policy: invalid value (10) [ 959.971601][T28061] bond9 (unregistering): Released all slaves [ 960.848939][T28106] can: request_module (can-proto-0) failed. [ 960.904097][T28112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5161'. [ 961.162383][T28116] bond13: option min_links: invalid value (18446744073709551612) [ 961.162427][T28116] bond13: option min_links: allowed values 0 - 2147483647 [ 961.182204][T28116] bond13 (unregistering): Released all slaves [ 961.184429][T28120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5163'. [ 961.459331][T28126] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5166'. [ 961.521774][T28134] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5169'. [ 961.769243][T28140] tipc: Enabling of bearer rejected, media not registered [ 962.179069][T28160] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5178'. [ 962.410702][T28163] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5180'. [ 962.424632][T28165] tipc: New replicast peer: 127.0.0.1 [ 962.438752][T28165] tipc: Enabled bearer , priority 10 [ 962.438948][T28166] tipc: Enabling of bearer rejected, already enabled [ 962.442179][T28168] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 962.479012][T28168] batman_adv: batadv0: Adding interface: syz_tun [ 962.479042][T28168] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.479076][T28168] batman_adv: batadv0: Interface activated: syz_tun [ 962.479095][T28168] batadv0: mtu less than device minimum [ 962.480463][T28168] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 962.481630][T28168] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 962.483109][T28168] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 962.484518][T28168] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 962.485988][T28168] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 962.608431][T28169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5182'. [ 962.608459][T28169] IPv6: NLM_F_CREATE should be specified when creating new route [ 962.961322][T28181] : option downdelay: invalid value (18446744073709547007) [ 962.961355][T28181] : option downdelay: allowed values 0 - 2147483647 [ 963.020141][T28181]  (unregistering): Released all slaves [ 963.238426][T28192] netlink: 'syz.3.5186': attribute type 1 has an invalid length. [ 963.303848][T28192] 8021q: adding VLAN 0 to HW filter on device bond13 [ 963.322410][T28193] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 963.386838][T28193] macvlan3: entered promiscuous mode [ 963.386865][T28193] macvlan3: entered allmulticast mode [ 963.387483][T28193] bond13: entered promiscuous mode [ 963.388091][T28193] bond13: entered allmulticast mode [ 963.388848][T28193] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 963.389655][T28193] bond13: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 963.391317][T28193] bond13: left allmulticast mode [ 963.391358][T28193] bond13: left promiscuous mode [ 963.468829][T28202] net_ratelimit: 14 callbacks suppressed [ 963.468851][T28202] IPv6: addrconf: prefix option has invalid lifetime [ 963.492553][T28200] rdma_op ffff888079439a38 conn xmit_rdma 0000000000000000 [ 963.540850][T28192] macvlan3: entered promiscuous mode [ 963.540875][T28192] macvlan3: entered allmulticast mode [ 963.544907][T28192] bond13: entered promiscuous mode [ 963.561184][T28192] bond13: entered allmulticast mode [ 963.567901][T28192] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 963.569163][T28192] bond13: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 963.569784][T28192] bond13: left allmulticast mode [ 963.569825][T28192] bond13: left promiscuous mode [ 963.841541][T28216] Cannot find add_set index 3 as target [ 964.063389][T28236] sit0: left promiscuous mode [ 964.114170][T28236] batman_adv: batadv0: Interface deactivated: veth0 [ 964.178753][T28243] FAULT_INJECTION: forcing a failure. [ 964.178753][T28243] name failslab, interval 1, probability 0, space 0, times 0 [ 964.178786][T28243] CPU: 0 UID: 0 PID: 28243 Comm: syz.2.5199 Not tainted syzkaller #0 PREEMPT(full) [ 964.178813][T28243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 964.178827][T28243] Call Trace: [ 964.178836][T28243] [ 964.178847][T28243] dump_stack_lvl+0xe8/0x150 [ 964.178890][T28243] should_fail_ex+0x3eb/0x540 [ 964.178923][T28243] ? alloc_vmap_area+0x217/0x1410 [ 964.178947][T28243] should_failslab+0xa8/0x100 [ 964.178980][T28243] ? alloc_vmap_area+0x217/0x1410 [ 964.179002][T28243] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 964.179036][T28243] ? alloc_vmap_area+0x217/0x1410 [ 964.179069][T28243] alloc_vmap_area+0x217/0x1410 [ 964.179110][T28243] ? __pfx_alloc_vmap_area+0x10/0x10 [ 964.179133][T28243] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 964.179165][T28243] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 964.179195][T28243] ? __get_vm_area_node+0x155/0x2f0 [ 964.179225][T28243] __get_vm_area_node+0x200/0x2f0 [ 964.179258][T28243] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 964.179287][T28243] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 964.179312][T28243] ? lock_acquire+0x115/0x350 [ 964.179343][T28243] ? __lock_acquire+0x747/0x2de0 [ 964.179387][T28243] ? hook_capable+0x1c3/0x5e0 [ 964.179421][T28243] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 964.179459][T28243] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 964.179480][T28243] __vmalloc_noprof+0xd2/0x120 [ 964.179507][T28243] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 964.179533][T28243] bpf_prog_alloc_no_stats+0x47/0x550 [ 964.179554][T28243] ? bpf_prog_alloc+0x2a/0x1a0 [ 964.179579][T28243] bpf_prog_alloc+0x3c/0x1a0 [ 964.179604][T28243] bpf_prog_load+0x7f8/0x1c60 [ 964.179642][T28243] ? __pfx_bpf_prog_load+0x10/0x10 [ 964.179683][T28243] ? __might_fault+0xaf/0x130 [ 964.179716][T28243] __sys_bpf+0xd86/0xe00 [ 964.179749][T28243] ? __pfx___sys_bpf+0x10/0x10 [ 964.179785][T28243] ? __fget_files+0x2a/0x420 [ 964.179842][T28243] ? ksys_write+0x242/0x270 [ 964.179878][T28243] ? __pfx_ksys_write+0x10/0x10 [ 964.179915][T28243] __x64_sys_bpf+0xba/0xd0 [ 964.179951][T28243] do_syscall_64+0x166/0x520 [ 964.179990][T28243] ? trace_irq_disable+0x3b/0x140 [ 964.180020][T28243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.180044][T28243] ? clear_bhb_loop+0x70/0xc0 [ 964.180073][T28243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.180096][T28243] RIP: 0033:0x7faf6ff9fb19 [ 964.180117][T28243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.180137][T28243] RSP: 002b:00007faf70e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 964.180161][T28243] RAX: ffffffffffffffda RBX: 00007faf70225fa0 RCX: 00007faf6ff9fb19 [ 964.180178][T28243] RDX: 0000000000000094 RSI: 0000200000000e00 RDI: 0000000000000005 [ 964.180193][T28243] RBP: 00007faf70e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 964.180207][T28243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.180220][T28243] R13: 00007faf70226038 R14: 00007faf70225fa0 R15: 00007ffe2c4ebfe8 [ 964.180258][T28243] [ 964.187731][T28243] syz.2.5199: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 964.187982][T28243] CPU: 0 UID: 0 PID: 28243 Comm: syz.2.5199 Not tainted syzkaller #0 PREEMPT(full) [ 964.188057][T28243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 964.188096][T28243] Call Trace: [ 964.188118][T28243] [ 964.188139][T28243] dump_stack_lvl+0xe8/0x150 [ 964.188235][T28243] warn_alloc+0x24d/0x270 [ 964.188319][T28243] ? lockdep_hardirqs_on+0x7b/0x110 [ 964.188399][T28243] ? __pfx_warn_alloc+0x10/0x10 [ 964.188463][T28243] ? kfree+0x1c5/0x650 [ 964.188550][T28243] ? __get_vm_area_node+0x219/0x2f0 [ 964.188631][T28243] __vmalloc_node_range_noprof+0x396/0x16f0 [ 964.188703][T28243] ? lock_acquire+0x115/0x350 [ 964.188776][T28243] ? __lock_acquire+0x747/0x2de0 [ 964.188893][T28243] ? hook_capable+0x1c3/0x5e0 [ 964.188995][T28243] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 964.189087][T28243] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 964.189133][T28243] __vmalloc_noprof+0xd2/0x120 [ 964.189203][T28243] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 964.189267][T28243] bpf_prog_alloc_no_stats+0x47/0x550 [ 964.189318][T28243] ? bpf_prog_alloc+0x2a/0x1a0 [ 964.189393][T28243] bpf_prog_alloc+0x3c/0x1a0 [ 964.189472][T28243] bpf_prog_load+0x7f8/0x1c60 [ 964.189566][T28243] ? __pfx_bpf_prog_load+0x10/0x10 [ 964.189663][T28243] ? __might_fault+0xaf/0x130 [ 964.189731][T28243] __sys_bpf+0xd86/0xe00 [ 964.189814][T28243] ? __pfx___sys_bpf+0x10/0x10 [ 964.189911][T28243] ? __fget_files+0x2a/0x420 [ 964.190036][T28243] ? ksys_write+0x242/0x270 [ 964.190119][T28243] ? __pfx_ksys_write+0x10/0x10 [ 964.190211][T28243] __x64_sys_bpf+0xba/0xd0 [ 964.190302][T28243] do_syscall_64+0x166/0x520 [ 964.190372][T28243] ? trace_irq_disable+0x3b/0x140 [ 964.190445][T28243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.190498][T28243] ? clear_bhb_loop+0x70/0xc0 [ 964.190570][T28243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.190632][T28243] RIP: 0033:0x7faf6ff9fb19 [ 964.190685][T28243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.190735][T28243] RSP: 002b:00007faf70e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 964.190804][T28243] RAX: ffffffffffffffda RBX: 00007faf70225fa0 RCX: 00007faf6ff9fb19 [ 964.190858][T28243] RDX: 0000000000000094 RSI: 0000200000000e00 RDI: 0000000000000005 [ 964.190891][T28243] RBP: 00007faf70e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 964.190937][T28243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.190972][T28243] R13: 00007faf70226038 R14: 00007faf70225fa0 R15: 00007ffe2c4ebfe8 [ 964.191095][T28243] [ 964.204602][T28243] Mem-Info: [ 964.204643][T28243] active_anon:11809 inactive_anon:0 isolated_anon:0 [ 964.204643][T28243] active_file:16 inactive_file:43568 isolated_file:0 [ 964.204643][T28243] unevictable:0 dirty:194 writeback:0 [ 964.204643][T28243] slab_reclaimable:13656 slab_unreclaimable:129730 [ 964.204643][T28243] mapped:29540 shmem:535 pagetables:3456 [ 964.204643][T28243] sec_pagetables:0 bounce:0 [ 964.204643][T28243] kernel_misc_reclaimable:0 [ 964.204643][T28243] free:1228878 free_pcp:11214 free_cma:0 [ 964.204791][T28243] Node 0 active_anon:47236kB inactive_anon:0kB active_file:64kB inactive_file:174076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118160kB dirty:776kB writeback:0kB shmem:2140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17672kB pagetables:13684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 964.210506][T28243] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 964.210658][T28243] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 964.210820][T28243] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 964.210909][T28243] Node 0 DMA32 free:953652kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47236kB inactive_anon:0kB active_file:64kB inactive_file:174076kB unevictable:0kB writepending:776kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:43836kB local_pcp:22016kB free_cma:0kB [ 964.211074][T28243] lowmem_reserve[]: 0 0 1 1 1 [ 964.211191][T28243] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 964.214156][T28243] lowmem_reserve[]: 0 0 0 0 0 [ 964.214260][T28243] Node 1 Normal free:3946480kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:1004kB free_cma:0kB [ 964.219724][T28243] lowmem_reserve[]: 0 0 0 0 0 [ 964.219871][T28243] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 964.220284][T28243] Node 0 DMA32: 1513*4kB (UM) 1369*8kB (UM) 951*16kB (UME) 968*32kB (UME) 526*64kB (UME) 519*128kB (UME) 381*256kB (UME) 235*512kB (UME) 123*1024kB (UME) 8*2048kB (UME) 105*4096kB (UM) = 953564kB [ 964.230126][T28243] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 964.230624][T28243] Node 1 Normal: 2*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 4*64kB (UM) 5*128kB (UM) 6*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3946480kB [ 964.231053][T28243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.231096][T28243] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 964.231138][T28243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.231188][T28243] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 964.231230][T28243] 44115 total pagecache pages [ 964.231265][T28243] 0 pages in swap cache [ 964.231286][T28243] Free swap = 124996kB [ 964.231307][T28243] Total swap = 124996kB [ 964.231335][T28243] 2097051 pages RAM [ 964.231356][T28243] 0 pages HighMem/MovableOnly [ 964.231377][T28243] 434380 pages reserved [ 964.231397][T28243] 0 pages cma reserved [ 964.239405][T28236] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 964.288732][T28236] syzkaller0: left promiscuous mode [ 965.079110][T28236] erspan1: left promiscuous mode [ 965.631204][T28238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5197'. [ 965.631293][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5197'. [ 965.693147][T28256] IPVS: Error connecting to the multicast addr [ 965.696918][T17218] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.698408][T17218] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.698458][T17218] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.737881][T28262] netlink: 'syz.4.5203': attribute type 12 has an invalid length. [ 965.794641][T28264] Bluetooth: hci0: unsupported parameter 5135 [ 965.794671][T28264] Bluetooth: hci0: unsupported parameter 8192 [ 965.794686][T28264] Bluetooth: hci0: unsupported parameter 5135 [ 965.794701][T28264] Bluetooth: hci0: unsupported parameter 8192 [ 965.929430][T28267] syzkaller1: entered promiscuous mode [ 965.929457][T28267] syzkaller1: entered allmulticast mode [ 965.953598][T28275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5208'. [ 966.050472][T28283] FAULT_INJECTION: forcing a failure. [ 966.050472][T28283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 966.050505][T28283] CPU: 0 UID: 0 PID: 28283 Comm: syz.0.5211 Not tainted syzkaller #0 PREEMPT(full) [ 966.050530][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 966.050545][T28283] Call Trace: [ 966.050554][T28283] [ 966.050564][T28283] dump_stack_lvl+0xe8/0x150 [ 966.050606][T28283] should_fail_ex+0x3eb/0x540 [ 966.050641][T28283] prepare_alloc_pages+0x21e/0x5f0 [ 966.050680][T28283] __alloc_frozen_pages_noprof+0x17c/0x410 [ 966.050712][T28283] ? __lock_acquire+0x747/0x2de0 [ 966.050743][T28283] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 966.050787][T28283] ? policy_nodemask+0x31b/0x980 [ 966.050817][T28283] alloc_pages_mpol+0x21e/0x390 [ 966.050847][T28283] alloc_pages_noprof+0xb1/0x2b0 [ 966.050873][T28283] get_free_pages_noprof+0xf/0x80 [ 966.050905][T28283] __kasan_populate_vmalloc+0x38/0x1c0 [ 966.050937][T28283] ? do_raw_spin_unlock+0xf5/0x200 [ 966.050965][T28283] alloc_vmap_area+0xd10/0x1410 [ 966.051007][T28283] ? __pfx_alloc_vmap_area+0x10/0x10 [ 966.051030][T28283] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 966.051062][T28283] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 966.051093][T28283] ? __get_vm_area_node+0x155/0x2f0 [ 966.051124][T28283] __get_vm_area_node+0x200/0x2f0 [ 966.051159][T28283] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 966.051187][T28283] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 966.051212][T28283] ? lock_acquire+0x115/0x350 [ 966.051243][T28283] ? __lock_acquire+0x747/0x2de0 [ 966.051287][T28283] ? hook_capable+0x1c3/0x5e0 [ 966.051322][T28283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 966.051361][T28283] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 966.051381][T28283] __vmalloc_noprof+0xd2/0x120 [ 966.051415][T28283] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 966.051441][T28283] bpf_prog_alloc_no_stats+0x47/0x550 [ 966.051463][T28283] ? bpf_prog_alloc+0x2a/0x1a0 [ 966.051488][T28283] bpf_prog_alloc+0x3c/0x1a0 [ 966.051513][T28283] bpf_prog_load+0x7f8/0x1c60 [ 966.051555][T28283] ? __pfx_bpf_prog_load+0x10/0x10 [ 966.051597][T28283] ? __might_fault+0xaf/0x130 [ 966.051630][T28283] __sys_bpf+0xd86/0xe00 [ 966.051663][T28283] ? __pfx___sys_bpf+0x10/0x10 [ 966.051699][T28283] ? __fget_files+0x2a/0x420 [ 966.051748][T28283] ? ksys_write+0x242/0x270 [ 966.051783][T28283] ? __pfx_ksys_write+0x10/0x10 [ 966.051821][T28283] __x64_sys_bpf+0xba/0xd0 [ 966.051857][T28283] do_syscall_64+0x166/0x520 [ 966.051886][T28283] ? trace_irq_disable+0x3b/0x140 [ 966.051917][T28283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.051941][T28283] ? clear_bhb_loop+0x70/0xc0 [ 966.051969][T28283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.051992][T28283] RIP: 0033:0x7f8be199fb19 [ 966.052012][T28283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.052032][T28283] RSP: 002b:00007f8be2799028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 966.052055][T28283] RAX: ffffffffffffffda RBX: 00007f8be1c25fa0 RCX: 00007f8be199fb19 [ 966.052071][T28283] RDX: 0000000000000094 RSI: 0000200000000e00 RDI: 0000000000000005 [ 966.052085][T28283] RBP: 00007f8be2799090 R08: 0000000000000000 R09: 0000000000000000 [ 966.052099][T28283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.052112][T28283] R13: 00007f8be1c26038 R14: 00007f8be1c25fa0 R15: 00007fffa4cdc178 [ 966.052149][T28283] [ 966.498184][T28290] netlink: 'syz.2.5213': attribute type 1 has an invalid length. [ 966.532662][T28290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 966.624255][T28292] bond6: (slave veth9): Enslaving as an active interface with a down link [ 966.736547][T28300] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 966.739486][T28300] bond6: (slave batadv1): making interface the new active one [ 966.741220][T28300] batadv1: entered promiscuous mode [ 966.741876][T28300] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 966.779270][T28299] syzkaller0: entered promiscuous mode [ 966.779297][T28299] syzkaller0: entered allmulticast mode [ 966.834888][T28290] bond6 (unregistering): (slave veth9): Releasing active interface [ 966.883384][T28290] bond6 (unregistering): (slave batadv1): Releasing active interface [ 966.883417][T28290] batadv1: left promiscuous mode [ 966.904769][T28290] bond6 (unregistering): Released all slaves [ 967.291839][T28321] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 967.292374][T28321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 967.293598][T28321] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 967.388549][T28331] FAULT_INJECTION: forcing a failure. [ 967.388549][T28331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 967.388583][T28331] CPU: 1 UID: 0 PID: 28331 Comm: syz.4.5222 Not tainted syzkaller #0 PREEMPT(full) [ 967.388609][T28331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 967.388621][T28331] Call Trace: [ 967.388630][T28331] [ 967.388640][T28331] dump_stack_lvl+0xe8/0x150 [ 967.388682][T28331] should_fail_ex+0x3eb/0x540 [ 967.388716][T28331] prepare_alloc_pages+0x21e/0x5f0 [ 967.388756][T28331] __alloc_frozen_pages_noprof+0x17c/0x410 [ 967.388794][T28331] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 967.388825][T28331] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 967.388861][T28331] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 967.388906][T28331] __alloc_pages_noprof+0x10/0x100 [ 967.388940][T28331] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 967.388988][T28331] ? alloc_pages_noprof+0x140/0x2b0 [ 967.389018][T28331] __kasan_populate_vmalloc+0xb7/0x1c0 [ 967.389057][T28331] alloc_vmap_area+0xd10/0x1410 [ 967.389100][T28331] ? __pfx_alloc_vmap_area+0x10/0x10 [ 967.389122][T28331] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 967.389155][T28331] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 967.389185][T28331] ? __get_vm_area_node+0x155/0x2f0 [ 967.389216][T28331] __get_vm_area_node+0x200/0x2f0 [ 967.389251][T28331] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 967.389279][T28331] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 967.389304][T28331] ? lock_acquire+0x115/0x350 [ 967.389336][T28331] ? __lock_acquire+0x747/0x2de0 [ 967.389387][T28331] ? hook_capable+0x1c3/0x5e0 [ 967.389422][T28331] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 967.389460][T28331] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 967.389481][T28331] __vmalloc_noprof+0xd2/0x120 [ 967.389508][T28331] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 967.389535][T28331] bpf_prog_alloc_no_stats+0x47/0x550 [ 967.389556][T28331] ? bpf_prog_alloc+0x2a/0x1a0 [ 967.389581][T28331] bpf_prog_alloc+0x3c/0x1a0 [ 967.389607][T28331] bpf_prog_load+0x7f8/0x1c60 [ 967.389646][T28331] ? __pfx_bpf_prog_load+0x10/0x10 [ 967.389689][T28331] ? __might_fault+0xaf/0x130 [ 967.389722][T28331] __sys_bpf+0xd86/0xe00 [ 967.389755][T28331] ? __pfx___sys_bpf+0x10/0x10 [ 967.389792][T28331] ? __fget_files+0x2a/0x420 [ 967.389842][T28331] ? ksys_write+0x242/0x270 [ 967.389878][T28331] ? __pfx_ksys_write+0x10/0x10 [ 967.389916][T28331] __x64_sys_bpf+0xba/0xd0 [ 967.389953][T28331] do_syscall_64+0x166/0x520 [ 967.389980][T28331] ? trace_irq_disable+0x3b/0x140 [ 967.390011][T28331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.390033][T28331] ? clear_bhb_loop+0x70/0xc0 [ 967.390061][T28331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.390082][T28331] RIP: 0033:0x7f75cdb9fb19 [ 967.390103][T28331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.390123][T28331] RSP: 002b:00007f75ceb00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 967.390147][T28331] RAX: ffffffffffffffda RBX: 00007f75cde25fa0 RCX: 00007f75cdb9fb19 [ 967.390163][T28331] RDX: 0000000000000094 RSI: 0000200000000e00 RDI: 0000000000000005 [ 967.390177][T28331] RBP: 00007f75ceb00090 R08: 0000000000000000 R09: 0000000000000000 [ 967.390190][T28331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.390202][T28331] R13: 00007f75cde26038 R14: 00007f75cde25fa0 R15: 00007fff36403f48 [ 967.390239][T28331] [ 967.586518][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 968.047095][T28348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5226'. [ 968.173363][T28350] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5224'. [ 968.258696][T28358] netlink: 'syz.0.5229': attribute type 1 has an invalid length. [ 968.391865][T28358] bond4: entered promiscuous mode [ 968.392301][T28358] 8021q: adding VLAN 0 to HW filter on device bond4 [ 968.623497][T28375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5233'. [ 968.812375][T28379] vlan2: entered promiscuous mode [ 968.812400][T28379] batadv0: entered promiscuous mode [ 968.812594][T28384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5236'. [ 968.812612][T28379] vlan2: entered allmulticast mode [ 968.812629][T28379] batadv0: entered allmulticast mode [ 968.964112][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5237'. [ 969.104485][T28398] netlink: 'syz.2.5240': attribute type 1 has an invalid length. [ 969.181844][T28396] nbd: nbd0 already in use [ 969.182415][T28396] block nbd0: NBD_DISCONNECT [ 969.182442][T28396] block nbd0: Send disconnect failed -32 [ 969.182462][T28396] block nbd0: shutting down sockets [ 969.479032][T13510] dvmrp6: left allmulticast mode [ 969.526778][T28409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5242'. [ 970.062878][T13510] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 970.062906][T13510] bond4 (unregistering): (slave gretap1): the permanent HWaddr of slave - 56:23:8d:0e:27:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 970.062939][T13510] bond4 (unregistering): (slave bond5): making interface the new active one [ 970.243439][T13510] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 970.243470][T13510] bridge6 (unregistering): left allmulticast mode [ 970.351978][T13510] bond0 (unregistering): Released all slaves [ 970.370199][T13510] bond1 (unregistering): Released all slaves [ 970.396265][T13510] bond2 (unregistering): Released all slaves [ 970.416891][T13510] bond3 (unregistering): Released all slaves [ 970.441100][T13510] bond4 (unregistering): (slave bond5): Releasing backup interface [ 970.454360][T13510] bond4 (unregistering): Released all slaves [ 970.472972][T13510] bond5 (unregistering): Released all slaves [ 970.492131][T13510] bond6 (unregistering): Released all slaves [ 970.518369][T13510] bond7 (unregistering): left allmulticast mode [ 970.564740][T13510] bond7 (unregistering): Released all slaves [ 970.582519][T13510] bond8 (unregistering): Released all slaves [ 970.607157][T13510] bond9 (unregistering): Released all slaves [ 970.623300][T13510] bond10 (unregistering): Released all slaves [ 970.641011][T13510] bond11 (unregistering): Released all slaves [ 970.667060][T13510] bond12 (unregistering): (slave veth7): Releasing backup interface [ 970.669072][T13510] bond12 (unregistering): Released all slaves [ 970.695813][T13510] bond13 (unregistering): Released all slaves [ 970.710472][T13510] bond14 (unregistering): Released all slaves [ 971.003515][T13510] tipc: Left network mode [ 971.114576][T28438] netlink: 'syz.1.5249': attribute type 3 has an invalid length. [ 971.114610][T28438] netlink: 'syz.1.5249': attribute type 1 has an invalid length. [ 971.114626][T28438] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5249'. [ 971.114721][T28438] NCSI netlink: No device for ifindex 0 [ 971.216821][T13510] IPVS: stopping backup sync thread 14226 ... [ 971.353587][T28448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5250'. [ 971.377407][T28448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5250'. [ 971.517917][T28448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5250'. [ 971.524480][T28449] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5250'. [ 971.651689][T28457] netlink: 'syz.1.5252': attribute type 1 has an invalid length. [ 971.685148][T28461] syzkaller1: entered promiscuous mode [ 971.685179][T28461] syzkaller1: entered allmulticast mode [ 971.812462][T28468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.931023][T28470] x_tables: duplicate underflow at hook 2 [ 971.958806][T28467] syzkaller0: entered promiscuous mode [ 971.958829][T28467] syzkaller0: entered allmulticast mode [ 972.203049][T28488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5260'. [ 972.312871][T28492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5262'. [ 972.381930][T28492] vlan2: entered allmulticast mode [ 972.381969][T28492] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 972.394126][T28492] batman_adv: batadv0: Adding interface: vlan2 [ 972.394169][T28492] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.394241][T28492] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 972.842942][ T29] audit: type=1804 audit(1794137998.913:21): pid=28512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5266" name="/newroot/406/cgroup.controllers" dev="tmpfs" ino=2104 res=1 errno=0 [ 972.843001][ T29] audit: type=1800 audit(1794137998.913:22): pid=28512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5266" name="cgroup.controllers" dev="tmpfs" ino=2104 res=0 errno=-22 [ 973.228493][T28524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5270'. [ 973.268307][T13510] hsr_slave_0: left promiscuous mode [ 973.279940][T13510] hsr_slave_1: left promiscuous mode [ 973.375707][T13510] veth1_macvtap: left promiscuous mode [ 973.375770][T13510] veth0_macvtap: left promiscuous mode [ 973.590867][T28539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5271'. [ 973.590920][T28539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5271'. [ 974.161452][T28558] ip_tables: iptables: counters copy to user failed while replacing table [ 974.919576][T28563] vlan3: entered promiscuous mode [ 974.919601][T28563] hsr0: entered promiscuous mode [ 974.940841][T28563] vlan3: entered allmulticast mode [ 974.940867][T28563] hsr0: entered allmulticast mode [ 974.940883][T28563] hsr_slave_0: entered allmulticast mode [ 974.940902][T28563] hsr_slave_1: entered allmulticast mode [ 975.082562][T28564] hsr_slave_0: left promiscuous mode [ 975.094769][T28564] hsr_slave_1: left promiscuous mode [ 975.243756][T28587] netlink: 'syz.4.5279': attribute type 1 has an invalid length. [ 975.329932][T13510] IPVS: stop unused estimator thread 0... [ 975.430204][T28587] 8021q: adding VLAN 0 to HW filter on device bond10 [ 975.523873][T28590] bond10: (slave veth7): Enslaving as an active interface with a down link [ 975.529760][T28592] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 975.553701][T28592] bond10: (slave wlan1): Opening slave failed [ 975.562581][T28597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 975.617883][T28598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.786333][T28607] syzkaller0: entered promiscuous mode [ 975.786357][T28607] syzkaller0: entered allmulticast mode [ 975.881922][T28610] sctp: [Deprecated]: syz.0.5287 (pid 28610) Use of int in maxseg socket option. [ 975.881922][T28610] Use struct sctp_assoc_value instead [ 976.465972][T28645] ip_tables: iptables: counters copy to user failed while replacing table [ 976.649495][T28643] nbd: nbd1240 already in use [ 976.661522][T28643] nbd: nbd1240 already in use [ 976.661891][T28643] nbd: nbd1240 already in use [ 976.662174][T28643] nbd: nbd1240 already in use [ 976.662397][T28643] nbd: nbd1240 already in use [ 976.662820][T28643] nbd: nbd1240 already in use [ 976.663044][T28643] nbd: nbd1240 already in use [ 976.683523][T28643] nbd: nbd1240 already in use [ 976.684555][T28643] nbd: nbd1240 already in use [ 976.688919][T28643] nbd: nbd1240 already in use [ 976.689750][T28643] nbd: nbd1240 already in use [ 976.691187][T28643] nbd: nbd1240 already in use [ 976.704262][T28643] nbd: nbd1240 already in use [ 976.723588][T28643] nbd: nbd1240 already in use [ 976.724116][T28643] nbd: nbd1240 already in use [ 976.733815][T28643] nbd: nbd1240 already in use [ 976.734107][T28643] nbd: nbd1240 already in use [ 976.734323][T28643] nbd: nbd1240 already in use [ 976.739796][T28643] nbd: nbd1240 already in use [ 976.743835][T28643] nbd: nbd1240 already in use [ 976.758332][T28643] nbd: nbd1240 already in use [ 976.759594][T28643] nbd: nbd1240 already in use [ 976.760843][T28643] nbd: nbd1240 already in use [ 976.762075][T28643] nbd: nbd1240 already in use [ 976.777652][T28643] nbd: nbd1240 already in use [ 976.778526][T28643] nbd: nbd1240 already in use [ 976.802951][T28643] nbd: nbd1240 already in use [ 976.803435][T28643] nbd: nbd1240 already in use [ 976.803673][T28643] nbd: nbd1240 already in use [ 976.810051][T28643] nbd: nbd1240 already in use [ 976.811638][T28643] nbd: nbd1240 already in use [ 977.059117][T28661] nbd: must specify at least one socket [ 977.418951][T28668] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20000 [ 977.419145][T28668] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20002 [ 977.420594][T28668] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 979.460596][T28663] tipc: Started in network mode [ 979.460630][T28663] tipc: Node identity ac14140f, cluster identity 4711 [ 979.460891][T28663] tipc: New replicast peer: 255.255.255.255 [ 979.461240][T28663] tipc: Enabled bearer , priority 10 [ 979.462375][T28673] batadv_slave_1: entered promiscuous mode [ 979.874689][T28693] syzkaller0: Caught tx_queue_len zero misconfig [ 979.935579][T28685] __nla_validate_parse: 4 callbacks suppressed [ 979.935603][T28685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5306'. [ 980.102879][T28705] syzkaller0: entered promiscuous mode [ 980.102945][T28705] syzkaller0: entered allmulticast mode [ 980.559895][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5312'. [ 980.580230][ T5772] tipc: Node number set to 2886997007 [ 980.614257][T28720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5312'. [ 980.631440][T28719] netlink: 'syz.4.5313': attribute type 1 has an invalid length. [ 980.842029][T28719] 8021q: adding VLAN 0 to HW filter on device bond11 [ 980.888087][T28729] netlink: 'syz.0.5314': attribute type 2 has an invalid length. [ 980.927769][T28728] netlink: 'syz.0.5314': attribute type 1 has an invalid length. [ 981.003007][T28728] 8021q: adding VLAN 0 to HW filter on device bond5 [ 981.027471][T28748] batadv_slave_1: entered promiscuous mode [ 981.027672][T28748] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 981.237997][T28753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5320'. [ 981.279344][T28751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5318'. [ 981.441670][T28762] netlink: 'syz.3.5321': attribute type 4 has an invalid length. [ 981.881493][T28788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5329'. [ 981.941476][T28793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 981.941508][T28793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 982.183492][T28808] netlink: 'syz.2.5336': attribute type 11 has an invalid length. [ 982.208009][T28808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5336'. [ 982.456305][T28816] ip_tables: iptables: counters copy to user failed while replacing table [ 982.491959][T28816] syzkaller1: entered promiscuous mode [ 982.491987][T28816] syzkaller1: entered allmulticast mode [ 982.733993][T28818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5340'. [ 983.224635][T28833] netlink: 'syz.3.5344': attribute type 1 has an invalid length. [ 983.279344][T28833] bond14: entered promiscuous mode [ 983.280503][T28833] 8021q: adding VLAN 0 to HW filter on device bond14 [ 983.376968][T28833] bond14: (slave bridge0): making interface the new active one [ 983.376996][T28833] bridge0: entered promiscuous mode [ 983.378209][T28833] bond14: (slave bridge0): Enslaving as an active interface with an up link [ 983.620465][T28841] xt_connbytes: Forcing CT accounting to be enabled [ 983.620757][T28841] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 983.917813][T28853] sctp: [Deprecated]: syz.0.5350 (pid 28853) Use of int in max_burst socket option. [ 983.917813][T28853] Use struct sctp_assoc_value instead [ 983.918712][T28854] sctp: [Deprecated]: syz.0.5350 (pid 28854) Use of int in max_burst socket option. [ 983.918712][T28854] Use struct sctp_assoc_value instead [ 984.090793][T28858] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 984.552031][T28885] macsec0: entered promiscuous mode [ 984.580210][T28885] macsec0 (unregistering): left promiscuous mode [ 984.602215][T28890] siw: device registration error -23 [ 984.682282][T28894] netlink: 'syz.4.5364': attribute type 1 has an invalid length. [ 985.460477][ T29] audit: type=1800 audit(1794138011.533:23): pid=28917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5371" name="memory.events" dev="tmpfs" ino=2326 res=0 errno=-22 [ 985.494386][ T29] audit: type=1804 audit(1794138011.563:24): pid=28917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5371" name="/newroot/452/memory.events" dev="tmpfs" ino=2326 res=1 errno=0 [ 985.657535][T28922] __nla_validate_parse: 9 callbacks suppressed [ 985.657558][T28922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5374'. [ 985.662478][T28922] netlink: 'syz.2.5374': attribute type 1 has an invalid length. [ 985.714754][T28922] bond6: entered promiscuous mode [ 985.720715][T28922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 985.964468][T28938] netlink: 'syz.2.5378': attribute type 1 has an invalid length. [ 985.964497][T28938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5378'. [ 986.073489][T28941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5379'. [ 986.126809][T28946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5381'. [ 986.211251][T28947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5380'. [ 986.229123][T28948] tipc: Resetting bearer [ 986.484066][T28948] batman_adv: batadv0: Interface deactivated: veth0 [ 986.578030][T28967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5384'. [ 986.694843][T28948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.718335][T28948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.781473][T28948] veth0_vlan: left promiscuous mode [ 987.095077][T17214] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.095116][T17214] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.152134][T28969] lo: entered promiscuous mode [ 987.156817][ T8414] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.156916][ T8414] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.157098][ T8414] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.157171][ T8414] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.157274][ T8414] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.157389][ T8414] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.302946][T28967] 8021q: adding VLAN 0 to HW filter on device bond15 [ 987.322557][T28986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5385'. [ 987.322680][T28986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5385'. [ 987.402330][T28990] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5387'. [ 987.476158][T28991] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 987.718910][T29010] netlink: 'syz.0.5390': attribute type 1 has an invalid length. [ 987.873849][T29010] bond6: entered promiscuous mode [ 987.874299][T29010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 987.911301][T29026] netlink: 'syz.0.5390': attribute type 1 has an invalid length. [ 987.974248][T29000] 8021q: adding VLAN 0 to HW filter on device bond6 [ 987.974655][T29000] bond6: (slave gre2): The slave device specified does not support setting the MAC address [ 987.974688][T29000] bond6: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 988.010055][T29000] bond6: (slave gre2): Opening slave failed [ 988.180224][T29010] bond6: (slave gre2): The slave device specified does not support setting the MAC address [ 988.183933][T29010] bond6: (slave gre2): Opening slave failed [ 988.532370][T29049] netlink: 1120 bytes leftover after parsing attributes in process `syz.0.5398'. [ 989.170093][T29079] netlink: 'syz.2.5402': attribute type 20 has an invalid length. [ 989.269729][T29079] netlink: 'syz.2.5402': attribute type 20 has an invalid length. [ 989.874621][T29107] batman_adv: batadv0: Adding interface: syzkaller0 [ 989.874648][T29107] batman_adv: batadv0: Interface activated: syzkaller0 [ 990.495702][T29136] ip_tables: iptables: counters copy to user failed while replacing table [ 990.561446][T29104] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 990.684506][T29104] batman_adv: batadv0: Removing interface: syzkaller0 [ 990.781161][T29146] __nla_validate_parse: 8 callbacks suppressed [ 990.781182][T29146] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5416'. [ 991.447745][T29167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5423'. [ 991.500731][T29167] 8021q: adding VLAN 0 to HW filter on device bond7 [ 991.548612][T29173] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 991.641293][T29167] bond7 (unregistering): (slave geneve3): Releasing backup interface [ 991.662349][T29167] bond7 (unregistering): Released all slaves [ 991.707713][T29178] IPv6: NLM_F_CREATE should be specified when creating new route [ 991.707846][T29178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 991.707861][T29178] IPv6: NLM_F_CREATE should be set when creating new route [ 991.854215][T29181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5428'. [ 991.923108][T29185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.016857][T29189] nbd: must specify a size in bytes for the device [ 992.017022][T29189] nbd: must specify a size in bytes for the device [ 992.017164][T29189] nbd: must specify a size in bytes for the device [ 992.017307][T29189] nbd: must specify a size in bytes for the device [ 992.017454][T29189] nbd: must specify a size in bytes for the device [ 992.017604][T29189] nbd: must specify a size in bytes for the device [ 992.017746][T29189] nbd: must specify a size in bytes for the device [ 992.017902][T29189] nbd: must specify a size in bytes for the device [ 992.018049][T29189] nbd: must specify a size in bytes for the device [ 992.018196][T29189] nbd: must specify a size in bytes for the device [ 992.021095][T29189] nbd: must specify a size in bytes for the device [ 992.021290][T29189] nbd: must specify a size in bytes for the device [ 992.021434][T29189] nbd: must specify a size in bytes for the device [ 992.021584][T29189] nbd: must specify a size in bytes for the device [ 992.021739][T29189] nbd: must specify a size in bytes for the device [ 992.021883][T29189] nbd: must specify a size in bytes for the device [ 992.022023][T29189] nbd: must specify a size in bytes for the device [ 992.022161][T29189] nbd: must specify a size in bytes for the device [ 992.022301][T29189] nbd: must specify a size in bytes for the device [ 992.024116][T29189] nbd: must specify a size in bytes for the device [ 992.024274][T29189] nbd: must specify a size in bytes for the device [ 992.024419][T29189] nbd: must specify a size in bytes for the device [ 992.024613][T29189] nbd: must specify a size in bytes for the device [ 992.024754][T29189] nbd: must specify a size in bytes for the device [ 992.024895][T29189] nbd: must specify a size in bytes for the device [ 992.203765][T29189] nbd: must specify a size in bytes for the device [ 992.203917][T29189] nbd: must specify a size in bytes for the device [ 992.220693][T29189] nbd: must specify a size in bytes for the device [ 992.220841][T29189] nbd: must specify a size in bytes for the device [ 992.220995][T29189] nbd: must specify a size in bytes for the device [ 992.221133][T29189] nbd: must specify a size in bytes for the device [ 992.221298][T29189] nbd: must specify a size in bytes for the device [ 992.221440][T29189] nbd: must specify a size in bytes for the device [ 992.221715][T29189] nbd: must specify a size in bytes for the device [ 992.221883][T29189] nbd: must specify a size in bytes for the device [ 992.222034][T29189] nbd: must specify a size in bytes for the device [ 992.234428][T29189] nbd: must specify a size in bytes for the device [ 992.292771][T29189] nbd: must specify a size in bytes for the device [ 992.293351][T29189] nbd: must specify a size in bytes for the device [ 992.293703][T29189] nbd: must specify a size in bytes for the device [ 992.300733][T29189] nbd: must specify a size in bytes for the device [ 992.319010][T29189] nbd: must specify a size in bytes for the device [ 992.319386][T29189] nbd: must specify a size in bytes for the device [ 992.319757][T29189] nbd: must specify a size in bytes for the device [ 992.320151][T29189] nbd: must specify a size in bytes for the device [ 992.354416][T29189] nbd: must specify a size in bytes for the device [ 992.354545][T29189] nbd: must specify a size in bytes for the device [ 992.354642][T29189] nbd: must specify a size in bytes for the device [ 992.354735][T29189] nbd: must specify a size in bytes for the device [ 992.354849][T29189] nbd: must specify a size in bytes for the device [ 992.371978][T29189] nbd: must specify a size in bytes for the device [ 992.372385][T29189] nbd: must specify a size in bytes for the device [ 992.372760][T29189] nbd: must specify a size in bytes for the device [ 992.373106][T29189] nbd: must specify a size in bytes for the device [ 992.373611][T29189] nbd: must specify a size in bytes for the device [ 992.399232][T29189] nbd: must specify a size in bytes for the device [ 992.399603][T29189] nbd: must specify a size in bytes for the device [ 992.399955][T29189] nbd: must specify a size in bytes for the device [ 992.400338][T29189] nbd: must specify a size in bytes for the device [ 992.432210][T29189] nbd: must specify a size in bytes for the device [ 992.438876][T29189] nbd: must specify a size in bytes for the device [ 992.439347][T29189] nbd: must specify a size in bytes for the device [ 992.469887][T29189] nbd: must specify a size in bytes for the device [ 992.470027][T29189] nbd: must specify a size in bytes for the device [ 992.470123][T29189] nbd: must specify a size in bytes for the device [ 992.591725][T29199] ip6gretap0: mtu less than device minimum [ 992.720085][T29204] batadv_slave_1: entered promiscuous mode [ 992.720296][T29204] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 992.748645][T29205] netlink: 'syz.2.5434': attribute type 1 has an invalid length. [ 992.748669][T29205] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5434'. [ 992.748933][T29204] netlink: 'syz.2.5434': attribute type 1 has an invalid length. [ 992.748951][T29204] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5434'. [ 992.907965][T29210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.912454][T29210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5436'. [ 993.078829][T29220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5440'. [ 993.130401][T29213] netlink: 'syz.3.5439': attribute type 1 has an invalid length. [ 993.207525][T29220] bond7: option updelay: invalid value (18446744073709518847) [ 993.207555][T29220] bond7: option updelay: allowed values 0 - 2147483647 [ 993.253269][T29220] bond7 (unregistering): Released all slaves [ 993.393505][T29233] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.5441'. [ 993.393636][T29233] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.5441'. [ 993.408103][T29230] ovs-dp0: entered promiscuous mode [ 993.450693][T29239] bridge5: entered allmulticast mode [ 994.137887][T29273] netlink: 'syz.2.5451': attribute type 9 has an invalid length. [ 994.291687][T29279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5453'. [ 994.744095][T29295] syzkaller0: left allmulticast mode [ 994.745791][T29295] batman_adv: batadv0: Interface activated: syzkaller0 [ 995.279773][T29323] netlink: 'syz.3.5466': attribute type 4 has an invalid length. [ 995.280282][T29323] netlink: 'syz.3.5466': attribute type 4 has an invalid length. [ 995.397539][T29325] netlink: 'syz.0.5467': attribute type 1 has an invalid length. [ 996.250057][T29385] netlink: 'syz.2.5475': attribute type 63 has an invalid length. [ 996.250085][T29385] __nla_validate_parse: 3 callbacks suppressed [ 996.250099][T29385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5475'. [ 996.377771][T29390] sctp: [Deprecated]: syz.3.5477 (pid 29390) Use of int in max_burst socket option. [ 996.377771][T29390] Use struct sctp_assoc_value instead [ 996.378345][T29390] netlink: 'syz.3.5477': attribute type 1 has an invalid length. [ 996.503610][T29392] ip6t_srh: unknown srh match flags 4000 [ 996.644578][T29401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5483'. [ 996.854381][T29414] netlink: zone id is out of range [ 996.854404][T29414] netlink: zone id is out of range [ 996.906033][T29412] netlink: 'syz.0.5484': attribute type 3 has an invalid length. [ 996.906069][T29412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5484'. [ 996.937715][T29414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5486'. [ 997.211290][T29416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5487'. [ 997.471777][T29428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5488'. [ 997.471805][T29428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5488'. [ 997.471824][T29428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5488'. [ 997.695575][T29429] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 997.870410][T29432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5490'. [ 997.899509][T29432] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5490'. [ 999.270621][T29462] bond3: (slave veth0_to_bond): Releasing backup interface [ 999.270649][T29462] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 999.384559][T29462] team0: Port device xfrm0 removed [ 999.430065][T29462] bond1: (slave ip6erspan0): Releasing active interface [ 999.493024][T29462] bond2: (slave geneve4): Releasing active interface [ 999.541060][T29470] netlink: 'syz.3.5500': attribute type 39 has an invalid length. [ 999.543749][T29462] bond3: (slave bridge2): Releasing backup interface [ 999.633932][T29462] bond7: (slave wireguard0): Releasing backup interface [ 999.633962][T29462] wireguard0: left promiscuous mode [ 999.803890][T29462] batman_adv: batadv0: Removing interface: vlan2 [ 1000.116237][T13518] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1000.116528][T13518] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1000.116609][T13518] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1000.116651][T13518] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1000.466606][T29486] ip_tables: iptables: counters copy to user failed while replacing table [ 1001.739584][T29506] __nla_validate_parse: 10 callbacks suppressed [ 1001.739606][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5504'. [ 1001.739625][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5504'. [ 1002.773060][T29501] veth0_to_bridge: left allmulticast mode [ 1003.084349][T29515] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5507'. [ 1003.084469][T29515] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5507'. [ 1003.123464][T29514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1003.145861][T17218] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.145900][T17218] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.145942][T17218] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.145971][T17218] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.146009][T17218] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.146038][T17218] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.146075][T17218] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.146103][T17218] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.240365][T29514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5507'. [ 1003.866998][T29529] macvlan0: entered promiscuous mode [ 1004.924588][T29534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5513'. [ 1004.924631][T29534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5513'. [ 1005.071717][T29543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5516'. [ 1005.740560][T29554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1005.911549][T29555] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5518'. [ 1006.447348][T29566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5522'. [ 1007.094129][T29572] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 1007.638839][T29581] x_tables: duplicate underflow at hook 3 [ 1007.733763][T29585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5529'. [ 1009.591659][T29634] netlink: 'syz.2.5536': attribute type 70 has an invalid length. [ 1009.673226][T29636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5537'. [ 1009.781435][T29639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1009.781563][T29639] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1009.781757][T29639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1009.781865][T29639] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1009.782022][T29639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1009.782129][T29639] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1009.782283][T29639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1009.782393][T29639] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1009.782547][T29639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1009.782662][T29639] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1010.334089][T29646] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5540'. [ 1010.657090][T29656] netlink: 'syz.3.5544': attribute type 1 has an invalid length. [ 1010.693624][T29656] bond16: entered promiscuous mode [ 1010.694476][T29656] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1010.739249][T29656] vlan0: entered allmulticast mode [ 1010.739274][T29656] bond16: entered allmulticast mode [ 1010.773007][T29656] bond16: (slave bridge6): making interface the new active one [ 1010.773046][T29656] bridge6: entered promiscuous mode [ 1010.773236][T29656] bridge6: entered allmulticast mode [ 1010.797592][T29656] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 1011.154371][T29669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5547'. [ 1011.241811][T29669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5547'. [ 1011.370619][T29672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5548'. [ 1011.370652][T29672] nbd: must specify a size in bytes for the device [ 1012.163135][T29688] x_tables: duplicate underflow at hook 2 [ 1012.163259][T29688] x_tables: duplicate underflow at hook 2 [ 1012.163341][T29688] x_tables: duplicate underflow at hook 2 [ 1012.163422][T29688] x_tables: duplicate underflow at hook 2 [ 1012.163512][T29688] x_tables: duplicate underflow at hook 2 [ 1012.163591][T29688] x_tables: duplicate underflow at hook 2 [ 1012.163669][T29688] x_tables: duplicate underflow at hook 2 [ 1012.163747][T29688] x_tables: duplicate underflow at hook 2 [ 1012.163824][T29688] x_tables: duplicate underflow at hook 2 [ 1013.510505][T29702] rxe_eth0 speed is unknown, defaulting to 1000 [ 1013.594343][T29704] netlink: 'syz.3.5560': attribute type 1 has an invalid length. [ 1013.849008][T29702] syzkaller0 speed is unknown, defaulting to 1000 [ 1014.121421][T29706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 1014.233835][T29710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1014.359747][T29715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5563'. [ 1014.532617][T29723] netlink: 'syz.4.5563': attribute type 3 has an invalid length. [ 1014.532640][T29723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5563'. [ 1014.598666][T29724] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1014.599061][T29724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1014.689801][T29731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1015.264173][T29743] nbd: must specify at least one socket [ 1016.089408][T29756] syzkaller1: entered promiscuous mode [ 1016.089434][T29756] syzkaller1: entered allmulticast mode [ 1016.629227][T29769] netlink: 'syz.0.5574': attribute type 1 has an invalid length. [ 1019.728869][T29799] dvmrp8: entered allmulticast mode [ 1019.871050][T29803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5584'. [ 1019.871088][T29803] netlink: 'syz.3.5584': attribute type 30 has an invalid length. [ 1019.924585][T29803] vxlan2: entered promiscuous mode [ 1019.924616][T29803] vxlan2: entered allmulticast mode [ 1019.942431][T29801] sctp: [Deprecated]: syz.4.5582 (pid 29801) Use of int in max_burst socket option. [ 1019.942431][T29801] Use struct sctp_assoc_value instead [ 1019.961867][T13505] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.962394][T13505] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.962447][T13505] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.001711][T29803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5584'. [ 1020.001750][T29803] netlink: 'syz.3.5584': attribute type 30 has an invalid length. [ 1020.039191][T29803] vxlan3: entered promiscuous mode [ 1020.039221][T29803] vxlan3: entered allmulticast mode [ 1024.326115][ C1] sched: DL replenish lagged too much [ 1080.229627][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1205.262590][ T5646] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1210.718132][T29832] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1265.908951][T13497] smbdirect: ib_dev[s`z1] removed [ 1285.033560][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1285.488290][T18972] batman_adv: batadv0: Interface deactivated: syz_tun [ 1285.488319][T18972] net_ratelimit: 3 callbacks suppressed [ 1285.488396][T18972] batadv0: mtu less than device minimum [ 1285.489799][T18972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1285.491177][T18972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1285.492580][T18972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1285.493988][T18972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1285.495491][T18972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1285.496984][T18972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1285.498471][T18972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1285.499934][T18972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1285.501383][T18972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1297.314202][ T31] INFO: task kworker/u8:46:17218 blocked for more than 145 seconds. [ 1297.314234][ T31] Not tainted syzkaller #0 [ 1297.314247][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1297.314259][ T31] task:kworker/u8:46 state:D stack:21544 pid:17218 tgid:17218 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1297.314320][ T31] Workqueue: events_unbound linkwatch_event [ 1297.314398][ T31] Call Trace: [ 1297.314462][ T31] [ 1297.314505][ T31] __schedule+0x17dd/0x5830 [ 1297.314656][ T31] ? queue_delayed_work_on+0x171/0x1e0 [ 1297.314719][ T31] ? __pfx___schedule+0x10/0x10 [ 1297.314760][ T31] ? schedule+0x90/0x2b0 [ 1297.314792][ T31] schedule+0x164/0x2b0 [ 1297.325768][ T31] schedule_preempt_disabled+0x13/0x30 [ 1297.325809][ T31] __mutex_lock+0x7c4/0x15a0 [ 1297.325846][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 1297.325883][ T31] ? linkwatch_event+0xe/0x60 [ 1297.325917][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1297.325956][ T31] ? lock_acquire+0x115/0x350 [ 1297.325997][ T31] ? rcu_is_watching+0x16/0xb0 [ 1297.326033][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1297.326069][ T31] linkwatch_event+0xe/0x60 [ 1297.326099][ T31] process_scheduled_works+0xc3d/0x1630 [ 1297.326173][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1297.326215][ T31] ? assign_work+0x3cf/0x5d0 [ 1297.326255][ T31] worker_thread+0xa47/0xfb0 [ 1297.326325][ T31] kthread+0x38b/0x480 [ 1297.326352][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1297.326386][ T31] ? __pfx_kthread+0x10/0x10 [ 1297.326414][ T31] ret_from_fork+0x514/0xb70 [ 1297.326446][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1297.326473][ T31] ? __switch_to+0xc78/0x1410 [ 1297.326513][ T31] ? __pfx_kthread+0x10/0x10 [ 1297.326543][ T31] ret_from_fork_asm+0x1a/0x30 [ 1297.326589][ T31] [ 1297.326730][ T31] INFO: task kworker/0:12:28978 blocked for more than 145 seconds. [ 1297.326750][ T31] Not tainted syzkaller #0 [ 1297.326763][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1297.326774][ T31] task:kworker/0:12 state:D stack:24744 pid:28978 tgid:28978 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1297.326840][ T31] Workqueue: infiniband ib_cache_event_task [ 1297.326875][ T31] Call Trace: [ 1297.326883][ T31] [ 1297.326899][ T31] __schedule+0x17dd/0x5830 [ 1297.326960][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 1297.326993][ T31] ? __pfx___schedule+0x10/0x10 [ 1297.327032][ T31] ? schedule+0x90/0x2b0 [ 1297.327065][ T31] schedule+0x164/0x2b0 [ 1297.327095][ T31] schedule_preempt_disabled+0x13/0x30 [ 1297.327123][ T31] __mutex_lock+0x7c4/0x15a0 [ 1297.327160][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 1297.327197][ T31] ? ib_get_eth_speed+0x173/0x8e0 [ 1297.327223][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1297.327264][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 1297.327291][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1297.327317][ T31] ? ib_device_get_netdev+0x220/0x2f0 [ 1297.327348][ T31] ib_get_eth_speed+0x173/0x8e0 [ 1297.327376][ T31] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1297.327397][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1297.327433][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 1297.327461][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1297.327495][ T31] siw_query_port+0x3c/0x4a0 [ 1297.327525][ T31] ib_cache_update+0x1ba/0xc50 [ 1297.327571][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1297.327598][ T31] ? __pfx_ib_cache_update+0x10/0x10 [ 1297.327636][ T31] ? lock_acquire+0x115/0x350 [ 1297.327676][ T31] ib_cache_event_task+0xd3/0x1c0 [ 1297.327712][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1297.327747][ T31] process_scheduled_works+0xc3d/0x1630 [ 1297.327821][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1297.327865][ T31] ? assign_work+0x3cf/0x5d0 [ 1297.327906][ T31] worker_thread+0xa47/0xfb0 [ 1297.327967][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1297.328004][ T31] kthread+0x38b/0x480 [ 1297.328031][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1297.328064][ T31] ? __pfx_kthread+0x10/0x10 [ 1297.328093][ T31] ret_from_fork+0x514/0xb70 [ 1297.328124][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1297.328152][ T31] ? __switch_to+0xc78/0x1410 [ 1297.328192][ T31] ? __pfx_kthread+0x10/0x10 [ 1297.328221][ T31] ret_from_fork_asm+0x1a/0x30 [ 1297.328267][ T31] [ 1297.328293][ T31] [ 1297.328293][ T31] Showing all locks held in the system: [ 1297.328342][ T31] locks held by pool_workqueue_/3: 1, on CPU#0: [ 1297.328417][ T31] #0: ffffffff8fff62a0 (wq_pool_mutex){+.+.}-{4:4}, at: pwq_release_workfn+0x868/0xb10 [ 1297.328517][ T31] locks held by kworker/0:1/10: 5, last CPU#0: [ 1297.328533][ T31] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.328597][ T31] #1: ffffc900000f7c40 ((work_completion)(&(&data->open_timeout)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.328663][ T31] #2: ffff888037f7a910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x33/0x6f0 [ 1297.328720][ T31] #3: ffffffff8fff62a0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xe8d/0x21d0 [ 1297.328776][ T31] #4: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.328839][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1297.328855][ T31] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1297.328938][ T31] locks held by kworker/u8:9/1119: 4, last CPU#0: [ 1297.328963][ T31] #0: ffff888077360148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.329067][ T31] #1: ffffc9000545fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.329133][ T31] #2: ffff888036f7d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1297.329191][ T31] #3: ffff88802b498330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1297.329262][ T31] locks held by klogd/4991: 1, last CPU#0: [ 1297.329279][ T31] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.329340][ T31] locks held by udevd/5002: 2, last CPU#0: [ 1297.329356][ T31] #0: ffffffff90907c98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1297.329419][ T31] #1: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.329479][ T31] locks held by dhcpcd/5297: 2, last CPU#0: [ 1297.329495][ T31] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.329554][ T31] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1297.329616][ T31] locks held by dhcpcd/5298: 4, last CPU#0: [ 1297.329632][ T31] #0: ffffffff9023a610 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0xf6/0x640 [ 1297.329692][ T31] #1: ffff88807cdd3440 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 1297.329753][ T31] #2: ffff88807fcca800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 1297.329814][ T31] #3: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.329876][ T31] locks held by getty/5393: 2, on CPU#1: [ 1297.329892][ T31] #0: ffff8880377ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1297.329957][ T31] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1297.330011][ T31] locks held by syz-executor/5623: 1, last CPU#0: [ 1297.330027][ T31] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.330092][ T31] locks held by kworker/u8:21/8414: 4, last CPU#0: [ 1297.330109][ T31] #0: ffff88807a745148 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.330180][ T31] #1: ffffc9000544fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.330246][ T31] #2: ffff88807d831480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1297.330304][ T31] #3: ffff888054da0d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1297.330361][ T31] locks held by kworker/u8:23/8416: 5, last CPU#1: [ 1297.330377][ T31] #0: ffff888033d08148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.330441][ T31] #1: ffffc9000542fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.330503][ T31] #2: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 1297.330556][ T31] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1297.330619][ T31] #4: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 1297.330676][ T31] locks held by kworker/u8:24/8417: 3, last CPU#0: [ 1297.330693][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.330758][ T31] #1: ffffc9000524fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.330824][ T31] #2: ffff88802bac8258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1297.330890][ T31] locks held by kworker/u8:26/8419: 2, last CPU#0: [ 1297.330907][ T31] #0: ffff888067f07148 ((wq_completion)krds_cp_wq#10/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.330978][ T31] #1: ffffc900051efc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.331044][ T31] locks held by kworker/u8:27/8420: 4, last CPU#0: [ 1297.331060][ T31] #0: ffff88807a740948 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.331129][ T31] #1: ffffc900051cfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.331195][ T31] #2: ffff888037c29480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1297.331253][ T31] #3: ffff888054da1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1297.331311][ T31] locks held by kworker/u8:1/13497: 4, last CPU#0: [ 1297.331328][ T31] #0: ffff88801d79d148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.331393][ T31] #1: ffffc90007567c40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.331459][ T31] #2: ffff88807aedc730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400 [ 1297.331514][ T31] #3: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.331575][ T31] locks held by kworker/u8:2/13498: 4, last CPU#0: [ 1297.331592][ T31] #0: ffff8880136aa148 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.331661][ T31] #1: ffffc90006c3fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.331726][ T31] #2: ffff888037d69480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1297.331784][ T31] #3: ffff88802b49aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1297.331842][ T31] locks held by kworker/u8:6/13499: 4, last CPU#0: [ 1297.331858][ T31] #0: ffff888077360148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.331927][ T31] #1: ffffc90007397c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.332000][ T31] #2: ffff888036f7d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1297.332057][ T31] #3: ffff888034a68330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1297.332115][ T31] locks held by kworker/u8:15/13505: 5, last CPU#0: [ 1297.332132][ T31] #0: ffff88804f83f148 ((wq_completion)krds_cp_wq#16/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.332197][ T31] #1: ffffc900055efc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.332261][ T31] #2: ffff8880360aea80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1297.332340][ T31] #3: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.332399][ T31] #4: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1297.332461][ T31] locks held by kworker/u8:19/13510: 4, last CPU#0: [ 1297.332478][ T31] #0: ffff888077361948 ((wq_completion)krds_cp_wq#7/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.332542][ T31] #1: ffffc9000541fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.332606][ T31] #2: ffff8880360ad280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1297.332664][ T31] #3: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.332726][ T31] locks held by kworker/u8:39/16142: 4, last CPU#0: [ 1297.332743][ T31] #0: ffff88807e4d8948 ((wq_completion)wg-kex-wg0#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.332812][ T31] #1: ffffc900073efc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.332877][ T31] #2: ffff88804b3ad480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1297.332935][ T31] #3: ffff8880370f8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1297.333000][ T31] locks held by kworker/u8:42/17214: 2, on CPU#0: [ 1297.333016][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.333080][ T31] #1: ffffc90003b6fc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.333146][ T31] locks held by kworker/u8:46/17218: 3, on CPU#1: [ 1297.333162][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.333225][ T31] #1: ffffc900026e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.333288][ T31] #2: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1297.333350][ T31] locks held by kworker/u8:48/17223: 2, on CPU#0: [ 1297.333367][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.333431][ T31] #1: ffffc900025b7c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.333497][ T31] locks held by syz-executor/18165: 1, on CPU#0: [ 1297.333513][ T31] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1297.333574][ T31] locks held by syz-executor/18972: 1, last CPU#0: [ 1297.333590][ T31] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1297.333649][ T31] locks held by syz-executor/19313: 1, on CPU#1: [ 1297.333665][ T31] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1297.344351][ T31] locks held by syz-executor/19876: 1, on CPU#0: [ 1297.344370][ T31] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1297.344430][ T31] locks held by syz-executor/20261: 1, on CPU#1: [ 1297.344446][ T31] #0: ffffffff901607f8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x175/0x610 [ 1297.344504][ T31] locks held by kworker/u8:50/23067: 3, on CPU#0: [ 1297.344521][ T31] #0: ffff88801c70b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.344587][ T31] #1: ffffc9000599fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.344663][ T31] #2: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1297.344728][ T31] locks held by kworker/1:7/23388: 2, last CPU#1: [ 1297.344744][ T31] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.356021][ T31] #1: ffffc90003d67c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.356104][ T31] locks held by kworker/1:11/23392: 4, last CPU#1: [ 1297.356123][ T31] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.356190][ T31] #1: ffffc90003c7fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.356257][ T31] #2: ffffffff919fb6a0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 1297.356316][ T31] #3: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.356384][ T31] locks held by kworker/0:12/28978: 3, on CPU#0: [ 1297.356402][ T31] #0: ffff88801d3f3148 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.356467][ T31] #1: ffffc9000803fc40 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.356538][ T31] #2: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x8e0 [ 1297.356593][ T31] locks held by kworker/0:13/28979: 3, last CPU#0: [ 1297.356610][ T31] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.356675][ T31] #1: ffffc900078b7c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.356739][ T31] #2: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1297.356804][ T31] locks held by syz-executor/29826: 5, last CPU#0: [ 1297.356820][ T31] #0: ffffffff9023a610 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0xf6/0x640 [ 1297.356880][ T31] #1: ffff888083af4cc0 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 1297.356946][ T31] #2: ffff888077280340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 1297.357009][ T31] #3: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.357068][ T31] #4: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1297.357130][ T31] locks held by syz-executor/29831: 2, last CPU#0: [ 1297.357146][ T31] #0: ffffffff90907c98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 1297.357210][ T31] #1: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1297.357271][ T31] locks held by kworker/u8:0/29836: 4, last CPU#0: [ 1297.357288][ T31] #0: ffff88807a745148 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.357357][ T31] #1: ffffc90005c8fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1297.357423][ T31] #2: ffff88807d831480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1297.357482][ T31] #3: ffff888054da0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1297.357541][ T31] [ 1297.357547][ T31] ============================================= [ 1297.357547][ T31] [ 1297.357573][ T31] NMI backtrace for cpu 0 [ 1297.357589][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1297.357614][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1297.357628][ T31] Call Trace: [ 1297.357638][ T31] [ 1297.357650][ T31] dump_stack_lvl+0xe8/0x150 [ 1297.357686][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1297.357713][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1297.357743][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1297.357774][ T31] sys_info+0x135/0x170 [ 1297.357794][ T31] watchdog+0x1073/0x10f0 [ 1297.357835][ T31] ? watchdog+0x209/0x10f0 [ 1297.357875][ T31] kthread+0x38b/0x480 [ 1297.357903][ T31] ? __pfx_watchdog+0x10/0x10 [ 1297.357931][ T31] ? __pfx_kthread+0x10/0x10 [ 1297.357967][ T31] ret_from_fork+0x514/0xb70 [ 1297.357997][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1297.358024][ T31] ? __switch_to+0xc78/0x1410 [ 1297.358063][ T31] ? __pfx_kthread+0x10/0x10 [ 1297.358091][ T31] ret_from_fork_asm+0x1a/0x30 [ 1297.358136][ T31] [ 1297.358145][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1297.358182][ C1] NMI backtrace for cpu 1 [ 1297.358195][ C1] CPU: 1 UID: 0 PID: 8416 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 1297.358217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1297.358230][ C1] Workqueue: bat_events batadv_tt_purge [ 1297.358251][ C1] RIP: 0010:debug_smp_processor_id+0x12/0x20 [ 1297.358280][ C1] Code: cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 20 a1 8e 8c 48 c7 c6 60 a1 8e 8c 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 1297.358296][ C1] RSP: 0018:ffffc90000a08720 EFLAGS: 00000282 [ 1297.358312][ C1] RAX: 0000000000000001 RBX: ffffc90000a08858 RCX: ffff88802cc33e80 [ 1297.358326][ C1] RDX: ffffc90000a08801 RSI: ffffffff8c8ea160 RDI: ffffffff8c8ea120 [ 1297.358341][ C1] RBP: 1ffffffff24ae101 R08: ffffc90000a08838 R09: 0000000000000000 [ 1297.358354][ C1] R10: ffffc90000a08898 R11: fffff52000141115 R12: ffffc90000a01000 [ 1297.358369][ C1] R13: ffffffff817879cf R14: ffffc90000a08848 R15: ffffc90000a08848 [ 1297.358384][ C1] FS: 0000000000000000(0000) GS:ffff88812350a000(0000) knlGS:0000000000000000 [ 1297.358399][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1297.358412][ C1] CR2: 00005612f6d22f00 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 1297.358430][ C1] Call Trace: [ 1297.358436][ C1] [ 1297.358449][ C1] rcu_is_watching+0x16/0xb0 [ 1297.358479][ C1] unwind_next_frame+0x1b66/0x2550 [ 1297.358508][ C1] ? __unwind_start+0xed/0x660 [ 1297.358532][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1297.358560][ C1] __unwind_start+0x514/0x660 [ 1297.358588][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1297.358612][ C1] arch_stack_walk+0xe3/0x150 [ 1297.358639][ C1] ? arch_stack_walk+0xe3/0x150 [ 1297.358665][ C1] stack_trace_save+0xa9/0x100 [ 1297.358688][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1297.358714][ C1] ? __lock_acquire+0x747/0x2de0 [ 1297.358741][ C1] kasan_save_track+0x3e/0x80 [ 1297.358800][ C1] kasan_save_free_info+0x40/0x50 [ 1297.358821][ C1] __kasan_slab_free+0x5c/0x80 [ 1297.358848][ C1] kfree+0x1c5/0x650 [ 1297.358867][ C1] ? ref_tracker_free+0x518/0x830 [ 1297.358892][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1297.358917][ C1] ref_tracker_free+0x518/0x830 [ 1297.358944][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 1297.358967][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1297.358985][ C1] ? dst_destroy+0x108/0x340 [ 1297.359010][ C1] ? rcu_core+0x92e/0x1230 [ 1297.359034][ C1] ? handle_softirqs+0x265/0x8d0 [ 1297.359058][ C1] ? do_softirq+0x77/0xd0 [ 1297.359081][ C1] ? __local_bh_enable_ip+0x100/0x140 [ 1297.359104][ C1] ? batadv_tt_purge+0x4ee/0xa40 [ 1297.359122][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 1297.359149][ C1] ? worker_thread+0xa47/0xfb0 [ 1297.359175][ C1] ? kthread+0x38b/0x480 [ 1297.359194][ C1] ? ret_from_fork+0x514/0xb70 [ 1297.359213][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1297.359237][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 1297.359261][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 1297.359285][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 1297.359307][ C1] dst_destroy+0x108/0x340 [ 1297.359333][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1297.359358][ C1] ? rcu_core+0x8b0/0x1230 [ 1297.359383][ C1] rcu_core+0x92e/0x1230 [ 1297.359418][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1297.359460][ C1] handle_softirqs+0x265/0x8d0 [ 1297.359491][ C1] ? batadv_tt_purge+0x4ee/0xa40 [ 1297.359510][ C1] do_softirq+0x77/0xd0 [ 1297.359533][ C1] [ 1297.359540][ C1] [ 1297.359547][ C1] __local_bh_enable_ip+0x100/0x140 [ 1297.359572][ C1] batadv_tt_purge+0x4ee/0xa40 [ 1297.359596][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1297.359623][ C1] process_scheduled_works+0xc3d/0x1630 [ 1297.359670][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1297.359702][ C1] ? assign_work+0x3cf/0x5d0 [ 1297.359731][ C1] worker_thread+0xa47/0xfb0 [ 1297.359776][ C1] kthread+0x38b/0x480 [ 1297.359797][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1297.359823][ C1] ? __pfx_kthread+0x10/0x10 [ 1297.359845][ C1] ret_from_fork+0x514/0xb70 [ 1297.359866][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1297.359887][ C1] ? __switch_to+0xc78/0x1410 [ 1297.359917][ C1] ? __pfx_kthread+0x10/0x10 [ 1297.359939][ C1] ret_from_fork_asm+0x1a/0x30 [ 1297.359969][ C1] [ 1297.360193][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1299.705264][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1299.714417][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1299.724512][ T31] Call Trace: [ 1299.727828][ T31] [ 1299.730791][ T31] vpanic+0x26f/0x710 [ 1299.734818][ T31] panic+0xc5/0xd0 [ 1299.738571][ T31] ? __pfx_panic+0x10/0x10 [ 1299.743026][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 1299.748132][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1299.754362][ T31] watchdog+0x10e7/0x10f0 [ 1299.758773][ T31] ? watchdog+0x209/0x10f0 [ 1299.763247][ T31] kthread+0x38b/0x480 [ 1299.767445][ T31] ? __pfx_watchdog+0x10/0x10 [ 1299.772168][ T31] ? __pfx_kthread+0x10/0x10 [ 1299.776895][ T31] ret_from_fork+0x514/0xb70 [ 1299.781538][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1299.786693][ T31] ? __switch_to+0xc78/0x1410 [ 1299.791428][ T31] ? __pfx_kthread+0x10/0x10 [ 1299.796059][ T31] ret_from_fork_asm+0x1a/0x30 [ 1299.800896][ T31] [ 1299.804565][ T31] Kernel Offset: disabled [ 1299.808916][ T31] Rebooting in 86400 seconds..