last executing test programs: 2.326830271s ago: executing program 1 (id=1689): socket$alg(0x26, 0x5, 0x0) close(0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000800)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0xca02}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000008c0)={'syzkaller0\x00', @multicast}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f0000001780)='GPL\x00', 0x4, 0x436, &(0x7f00000017c0)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001880), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000018c0)=r6) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000001900)=0x1, 0x4) connect$inet6(r8, &(0x7f0000001940)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r8, &(0x7f0000001980)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x2e, &(0x7f00000019c0)=0x3, 0x4) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001a00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000001a40), 0x56) sendmsg$kcm(r7, &(0x7f0000001a80)={&(0x7f0000001ac0)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001b80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001bc0)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.187283395s ago: executing program 0 (id=1691): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="270201000000000008000a00", @ANYRES32=r1, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x2, 0x7}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000240)={r3, 0xfffff001}, 0x8) 2.109977674s ago: executing program 3 (id=1692): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x11, 0x14, &(0x7f0000002440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020706500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069fc0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000002500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002540)={r1, r0}, 0xc) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001fc0), 0xfffffffffffffe89}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002200)=[{&(0x7f00000021c0)="beb90f3a8b9596aadda777b46cd87023f688a2b406", 0x15}], 0x1, &(0x7f0000002240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdcb}}, @ip_tos_int={{0x14}}], 0x48}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r2, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000002080)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f00000020c0)='\x00', 0x0}, 0x48) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800010000000003080002000000000074000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000004800048024000180090001006d6574610000000014000280080001000000000808000200000000002000018007000100637400001400028008000200000000120800040000000008"], 0xfc}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000840)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x4, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x48, 0x0, 0x11, 0x0, @empty, @local}, "341517c1b7df60c7"}}}}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3000008, 0x11, 0xffffffffffffffff, 0xaca5f000) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) socket$nl_rdma(0x10, 0x3, 0x14) 2.091914211s ago: executing program 1 (id=1694): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) bind$x25(r0, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'ip_vti0\x00', {0x2, 0x0, @multicast2}}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'perf_event'}, {0x2b, 'blkio'}, {0x2d, 'devices'}, {0x2b, 'rlimit'}]}, 0x24) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000000) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)={0x1, 0x24, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x6, 0xf3, "2b0f91640dc8a0a245244a4a2fe739321e012f8898c7b950e38dfc486bf109fbc3fdd1aadd1b23c31d5e51470427aaa043f2fcfa9afd40fe1314fac1f56bb4396d0be59dc22f152be4af5f4ea44826ee72c2f30a3c636aae27638448f20f4593bfea1b3f58e7085cef2ef5c7f9d085bdbf21760ccf12050fd54e4125543c00713ba38c134c1f33149a2f230c1b2ad112cea36f38df13caa54a87f81b386fcf2b56522cb3cbdeb6878f65975bc5c8fd836e8b2ad19275cd7fc6c46ce7896d1c38ff84074d652d7a468903a2ce0237a79aace3225d3c97ea213ceabc1f4252e6b129b15fb7ba7ee3b10d6b4bb2b58c813d4c03c6"}, @calipso={0x7, 0x18, {0x3, 0x4, 0xf9, 0x8, [0xfffffffffffffc00, 0x64]}}]}, 0x130) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x4, 0x5, {{0xb, 0x4, 0x1, 0x3, 0x2c, 0x64, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x17, 0xe8, [@multicast1, @rand_addr=0x64010101, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) getsockname$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc4, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffff120}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa5eed2662bfd12eb}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x20048041) (async) bind$netlink(r3, &(0x7f0000000780)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) (async) connect$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x1b, r6, 0x1, 0x8, 0x6, @remote}, 0x14) (async) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000800), &(0x7f0000000840)=0xc) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@getspdinfo={0x14, 0x25, 0x8, 0x70bd2b, 0x25dfdbfc, 0x2, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000980)={0xfffffff9, {{0xa, 0x4e24, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1}}, 0x0, 0x6, [{{0xa, 0x4e20, 0x9, @loopback, 0xffffffff}}, {{0xa, 0x4e24, 0xfffffffe, @remote, 0x5}}, {{0xa, 0x4e21, 0xc1, @mcast2, 0x4}}, {{0xa, 0x4e24, 0xc7800000, @mcast1, 0x8}}, {{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5}}, {{0xa, 0x4e21, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x390) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r3, 0x624c0000) (async) listen(r0, 0xa08) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r2}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000e00)={r3, r2}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000f40)={r0, &(0x7f0000000e40)='perf_event', 0x101000, &(0x7f0000000e80)={@_ha_fsid={[0xfffffff5, 0x10000]}, {0x7, 0x9, 0xc6f2, 0x7}}, 0x10000, &(0x7f0000000ec0)={@_ha_fsid}, &(0x7f0000000f00)=0x8}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r8, &(0x7f0000000f80)={0x2, 0x0, @remote}, &(0x7f0000000fc0)=0x10) r9 = accept$alg(r2, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r9, 0x40809440, &(0x7f0000002200)={&(0x7f00000021c0)=[{&(0x7f0000001000)="6dcce711fc4d864f0bead18002b749f239a1c9361003c7ea7ab564a5ac6dbd2678b4a6e45a1719732cbe60a4ef43b09aeb5d4724841137dd301d715166c57ede4e1496a3b52a73db904550a72154b69ebb752feb487edae76d199e87ca6febeb51dd2fd8694c5e9fd620241cf081677e2811", 0x72}, {&(0x7f0000001080)="99806f837b28d91d4d8eddb3200e29df30c6c2dafdb04ba2cbf941dd34d132510b9cc1ae27c83d55843dfb4bd771c48d4f34d68e97dbd342e6bfba7d9127f7baed3c8b16fbd9f61e2212c8b2ecd953648292c7f6c1d198b3a57b5628ac4e6e7ebdfd43c51c191154a2eb9d774740ed614252f8de95e7111f77f4a9bb905cb84e3060056c15850f5594dc1b9e58e5f4da9e59c71dd5f22d465ba892f42f3054ae3db161974b87abc401ff63d4130b46b4da540192ae866dc9686f758a2b881f42778d586a5f9636ae65934d62e27819b2c07c80573eba6e0865dc330a795c018c09f888d87bdd5233d89d4dee2c724329f61a7d3e8634b5deb43dc741c5cdbdf55aa3216d0ff43cbee19e57830329703c82ae6f562682d44150091ad5f89287f154704563a281d45c03f6ecf9824f72354f242f02cc9f0bc62cbcdf0310de134c60f58e46779fc893b633f6e3c09ea9b39ef37759e44219f4a5a9991db8c1586265cbca6ab47de5c261dcbe3d834a540c61bd63f79aaf6dd4747c27acd794ae83977d084c834278c5c65d3f1e93044f367379af4a8a5526d0ff1d0b1854eaef29f223ed545110182aaa3770103feddc8bdc892c465b4ceca77559e4dac86c2b1f532f858ec925132e8d60b7aeb1ab6f38276662a83e85801ab0d1f230b12aabbb0458c3ee508cf6cf53d84a00f28a594f13590373aafbdf097ccbd7efb7628246f0e09532a22be0229cdab67be8aa28d40fcecfe0cdb4e4806f7b89b4cb28ae817360de8dc777e89abf2e572f6c9b47b2652f008ab44aa22912a1b162286e98f010369148a154697bb2180dbc32e94760ab00cbaf6b94904afa355c0783ff1642340d76f382be606683835cba2be2a0892928a6c71b0020b0bba2baf20eb69c60a8236c8bbfd704f1116fc7fe1e9c22fdb86e0b9f2756855e8480dbd0458abf3c73fe90ab24817449e2c7d0f7f2a74f72bbba19ae26e9c3bea6015f1c5fad6c99891f4f485f6ca18e9313d12b1ab5cd6d714b0e1b76db458b23361c470a69fa9f982cd2772e4dda15f6cb6f4a15a5054a14cc7598e17ed25278e6cc7a304638970074f04ffb55bfe009e09feafbfe175c9bf17344b80ff549921164e10407ed9f6267382e7603634913bddd6c2de4db6efdf4b81d4735804e76f339d18c6e2851abed077b67077d7ac6608fded46c978f0a8d74177d57321eb87a59d38af0dea203cc6ddba4a85371e851b85f31f43b99f0a4639c755700b06f9d59544cb3d3f4f96e8c4848f05c24a7a89c3c4280ecec84d726392acb9e31adf073d8dc31e882f247b5833ff0ea3b917a649b6fee3e5d30eb5875ed3d751af27be488b94b0ab53e8524ce2c0bac249b653ee367b3b9cd56ed17e9f8cd40160ababfa8bfc83965ea7a97915deea00ce96254af4c59a06d1948775dcd541dd93301e4c33405cff76e0121c7a9faa97d89e8f70c670cd215212dba4c9be7fd343aedba6857261d6a8c20803d6acc3e82a949c0168c73401406c41077b3f71d141a05ee8e96d99fe0c6c0e308a93e04d426c1f32b5be5bd3baaae61b1774711fa469d50474157b2876fa0c017435d7acff86ff6427eb2c5ed70d3ad3a908828c2ec72068388df75aff9cf312a145ef1c0dfc7cdc6f094663824faf84193ea196fc5590ac4abda70fc221520c78d94465149bbada6c124929382bef62018cf3ae470ee82e89b8531726ba6dedb334ea4f89d4f36106a59d433dee54c3fcf4cbc67c755584c99041461f1c278d6c1fcbe5286d2b9dd45e1c6f1d4f61abfe8e34c258dc43299390b96136ba9f49cde419d00a103f9d66b84788ab288b047b16cb8507fe90556b9d4a55c3470751ab83d7690470b18d41d25948fb69a3bf618af5761b9c591ca808613d940d83c3ec58e0c14e08a4f04349c23b4ac3b59c5867c907cbaf33b2472947dbeb09bfd5d0736271adae5884b4558b44d79e3e5782739a70ce05d50fa496b522854a902233df4d13c80cade3367634e73a3b1ec796094ac68b319985a3419e511262b7660491065dfd05537df3042697b8a972d9d1ec0b2ffcba38f3796a0c79660ef9a9ac86b412335284db4dcd71f2116ce43533334ff1396f6a383c43d4ecea26a2e952f2b70630f63919acd86f0983917fba3a25f2e6c42f9aa950f2d64b8388a7959b0d31edea0f15fa1887769c7fec41ee2da545b8f7b868bb221763ab610d656dc525d9154b5bdcc6c0a73a2fc4a4c5a6de7f954814b07b4d89c578b7e0a4e2c99e4b8bc40c30d75de2420f42d21b8360992e3684016c44e8409039491b6cd0202bf2ffa1a65b1ffa33045a99eeb6be79945046b6208944edf7163c2406ef9204f4465bc5056a074dd6e8a7f58ec6521b61a5b08ec426e59750c0643153487ba95b76468d329a745f43ff25590c088ddeda75a0aab7d209c7836e3cad91c4aaf71fb988fab6fc1e50dea5b8d38690d2a2b23f12e2e953cabd594528618f148f957b224f4dedb64bc94172a7672c99bacc180499b36bc1a283d743e8313ae5adf8938e9b17827ef9f6cbaa2c1e7772faa9129eab78ecc23dafb27b9ead46ddc9f52307e4df9deb296f60cf6aa189b5d1625290ec459a90d0a66711ed593bfc3231b6aa64bdb5304e5f9ba62485f75240d147c31de4904f6a7aeeabb335fd61554154b30e30a430f9bba09828e46196614b36f788079036a08b977d6a2de0f6185a0d7bb95b36d20696c0506f378daaaf039ff9cc77516e86bf4648263c03129a3e744276fe97792728d112fbaf0508e4c401148e122c765cbb789bdb0052bbee5e524cf75e591066ce2d0ea3144bd01c3d7aaa2a57009c0bc2f783d83e2e26b316820f52eaef8746f1239e2c62acaddc159ec5e8da7f874bef1aefd3c9d9e3ffbf5d1e6296c8bf4f9597fdeb90daadbf7fd4aebe97c1cb727360c823822d712ca73fd6b0dedb71ad7b7d247db00a3b130d3862f92e4f082355b345ac54d83c9f246519a72d4bd3ba7d7ec61b70eabba66c57b98128ed4fe9af5271e1b81eaee7dbee79b107e3b6498302653823224f5f82e69a6c05f90cfc1bd3143389e1d7043671001cc3536d0d6122c19d3ec2b69ce6d9a2c3ce0bb22f906c39085fdc70643d4f2bbdc8a838bc6901458af8478683236caad6785adc5177c91a6c170bd53910b700b6246d4c708fcfd335b9c7013582aea8f317d7ae0e6dd45932a9f3ede51073c66f3fb117d9d2bb9f895704703214bc329e1701d51ea7b197cf7fab1847278be5532b74f3d69fee3038dfd257c2da350dc91a68c286c2f3d4ab7d6585a4cf396da97583e01c4119199baa130013eed652b99a32962f06b09585fcc489c09e2f77a0e6d48ac174c85aacc8ee82f8b738fecd02feee5781c16707465688a449faf2c113a7e746a5597e80593b19480a7a89f2adca11560c0e91028f00fc44728adb6a09e1127c5cdb4db5cd4fc33956c76d55a75424136473101ad92af4e853913e60790e4a01bb3690cf0fa21d51bc006d004e1812a3ab14b48b8869acd7d7d66aeb8ab95498021fe20ecdbd7d2070083f08566b1dc8080d39f126bfdf6b330e67f429f9ee34cebe4390c044a2e1750a404dc0ae47c7102ae1cb9c799ebea66733312580390dffbaad46d4888fdc584c09f77f91c1af5f2bb9409b9bc0a615172c6c123adf80b3d1a6e8e75d71b31f7953b4aa018fb313d4e147c9c0d61695ee293da92179875294ecf832aa90af5f541852206e2079ec54ac2476acde3255c59b8585c23e73ef8fbd07e1f4060878e8a98a92df1a5aa76d7cf0adca67b087d12b68de1f778cc3207c411cba24097ce573f9b90214782fa287928df9eee7ae706e8a917b0ea1923a9e810584c161300d22674db8f7f9642d1848edae99f93035b164e3f46195a6104ce7adc7b92fce624270e487a5706b16437bf094b1a3918015026bb3688eead99a68c3dd5cc644d5c2260fec197e90f7b6936d30b8d03090c808f5f96aa0d865a5da1322fcc22b513dab9c01e1a0d71a16c452a9c1909369023e64cc02517f22617317acc15354be0a3433b0393d650d0440ecc5328236e5d89375c1eb626eb36e485c4a02ead2c87c404f7e301148fa646ca34af1c82b34a733c72434b0582c9d7c06de7fa867639ea5fe5858f177c42b3a6d6798d531e6821f0e82fb6b73b1092713bdee4686ea8ab5ab644e7e4d68b67915a68ab228f4965ade33d389308a4f407100f29610ad4d71898fd28072f931e4d79e291b5c22de360f350f9d42d2bd7183f6f69473ca285f2f055a6d944712dbf8aa1c3bba99dc4c51f704025ba8dc10cbb3de187afed5cc569fd6cd020af47383b8b5a06773364b3459fdc4a521c6c6358a8264e09d91062108ad05b58cf13e33cffad4a8863cb854e099e3b0b918e471cfda31a8d271589972841a5ea9238832f717f451bcb2342e21f507eba89dd4958fb6a79c77239931bd990b8d408efac1faf8b952060991c0788c3fdbe63148f533274a14353c26d588d383dc117d2917c78484cf93cfa0e0cde90cd31ead1287ef2aa84e959b3c209e360f306508d2f7e9c47424b01833e714fba1133a60e913b645da164146c6c8febdbfedecbec5fd5f43586bac22c343b803c2103ff113d8ed96a1f405ad7105299fa70abfd36b4bebb78e759f22f67ea6822d9e00983f861ca389113e93954e767f33a4d34b5a1aaa9b8c88e989774765416907908c09f85529f5bd89ea83f42c4351f1cd7aa464cf83c29aa1f2850a92ae531602749f05fcffc946fb0711400a61050a0435098923636bc1cdd4dd1bf1f17ef3f911e7658fbd5cda23e2b210479085ffa23c0b055e6fe738548019929c6e6161332aa21dcebd140a9fb19593b2295349f2ba83e2b6c3cab3166390e2e7da42b64d9484c5d91ad942c9c803612a0b5e19d76f99e7ba61619e272900fe0bf0a4c29ebd651cfad4a74c90f067a21736349b87a70434057e611ebd851deafdaf05dc7b58b5a47d07babbfa52212b9cb97b863b6a5e8b71b2d8887614bbf3f085036813d6f7192a223e68f054ce6abd24df865479add610cedc7db79961c9120fafcdf423bc6b1d40bc29c65b02f719e5b45239756398216076188bbfe9c903c98634af3efeab5b63f78cc301218a6500329a38ee6d491228ba5313375918540cbcbdd614f0bd574bee6a978a2b6ce2cef379e86ca5a01b2014d0106f170c0e0c45b7c668719597b34074d96ab1123fa223fe52616e72189365aa475806863da5da0c62e72c53ccf87c9d247f0d13770238ebd9c5c77bdddd7c95f50df6255621e706b7ac05199e51fdd8b1c06ace87078df541997f5015a426ad4632c0d02e57122adcc09c376b5f92a64ae45a96be818b275994708d28f1c74e7bab42ff14a98c9a235de23da62a016e23b2354a3a0fb57870e6ced0dd9e46ee71243be3666e4819f73d9d541bead51dc47e525086d1ed8c8cca210bbe65ac685c99aecafadc05f4434d5e413ec3647bc60cc51358bad436080a7aea52e9d996bfb97fc81c829e4322687479ec9b49e8e6a885df8797b18ff9203fab58e3d4c7e40ec180ae4bc693f5e264faca00ddaebaa463435f600e03226acd31195a5de2675e7543c082b82662f1675b61d1da50a1689800e732afee416c605fc738ba3a71f19b0f04e5f621fdc12b47393aa7a078b72e4db5ec219942b2b15389859a5268cb53072ce878b11ff3a73e0d29beb65edbc672f971a114d560b3530b2612a919ebd73270f137c8bbde6a49a7f23481167f0c6cfa62b36409bd359ca", 0x1000}, {&(0x7f0000002080)="88724a0314adec25425d603c9b574dae7eed8d653299b09dfb0fb71a2d28d099292d269400f8cbe58e5326e9e037911a6ca8dc53b747652315ea1d8c004075bea9081f0c5986c22e81cff13a50c9142c9fb8e243cecec18e2ccd04e8538b918f1725871a7df3755b5b3a59b4cfc150d9b22f705db7662ae0009598a866b4029695ea", 0x82}, {&(0x7f0000002140)="cd594ad42210628a510d710f398d8da43f32cf114c04a79841c34fd980a80fc1d93e075f33229c7aba59351b4ad6e7dce085fee9e936146675e0ac80f9fc33c4a0b93e7f1b4585916d9fa63bd19ed92a940d6db227e65cfd172d3f60e65520428d38e03fc01c4705b77c3372816ff4e44b", 0x71}], 0x4, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0x7}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002280), &(0x7f00000022c0)=0xc) 1.957950791s ago: executing program 4 (id=1695): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690add", 0x4}], 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x4, 0x2, 0x0, 0x0, @str}]}, 0x18}}, 0x0) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18e6ffffff008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000004c0)=0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r5}, 0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000500)={0x1, 0x3}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="00010000fe8ebd49aab0b99e9cc583f77f2589f443db5d7d1c6b0d09247f1a61e8b11f36174c98dd779968ec84f3aed1a0470c8614af85162109b353ccda9fcc4ad5ff14f966fd94c39bab8347a297c4674562636b1be7f0f6891fb50aaeb3f0582165fcf1d3ce11170e19dd09c9c388e9c964948a57f91c5b4663666ab7c2921403898241f0ce28b118a002f3207da4", @ANYRES16=r7, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x8801) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x84, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000f00)={&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000840)="3d915d1cb4d6487751e48efb8240c5a765d344728097ec58c5c65d59e7074827ee929581bde34aa9e6ed4370c5e1cc325ff482aebd8068c76a491f2ea91128ac67bd16f7cf677d283c42b11cf41630e655414db32269684853c105b213eb6a2a5ee0b1c16528a1288c2864cff0d3ccaf0bee", 0x72}, {&(0x7f00000008c0)="1edd921685ef921d6564ad4364c027dc4c4a2be0c55f4e2c26eee01f85cafd9f7c1dec98e2f181299d47f1204ebccf688a1dde84d12e2df3525a9493684d5a5fa0aea4d32ff577f294367154ff2731a35aebcdee3b7801820a640bbc5d44bccd863e15bb3a21e31683", 0x69}, {&(0x7f0000000940)="4c5d68bb4628d68d7be5d3a582e99ba686b2cd1a726c2cb457565cf4ea31c60f5c497d94b83d1256d9ecfa3a4684ea01c7ec605715bc9ec9a5a87ff919fdea4b5ee4c1080415d4e1cae0e7caaa2dbb95731c8466be0b7a295e159d3fb36c105d216e16fe714d9303fd27a4efc829471b2989462429f56fb8581e080f95bbdb97f582918b566df1d719d91845137b4a257a109702a187dc813d30baa05fe85ea577910f72a10211f5c259", 0xaa}, {&(0x7f0000000a00)="3b04a28f9be5926159a2608b688d46e42dc16b0e38edff347a3653378133d9183f3ef1d8f30d5c405bdb", 0x2a}, {&(0x7f0000000a40)="a87dd10c5d05828f5d1e2992f014d7bb3f3bfcccbbdf457a0c6e3735db76719c14693deb22861243106c04f4b851a8ffe130c97f4779ed62a4d0955201fb9521462f035bde8dada9ac2f52ddff809f667fb4e21edc043cf2a0a93fdb36477cd46f7b24e263bcc462007b4a8e1030a4062277f42691ef25cad9e8337697a562690eaeac4cfe6acb722e135aa4ad950cb3a32d08e648e8f7aa946c3d10a740aae8502a813b66d979453e1c6ca147534754a049d43d20aedb67022877ae32b83472c1208e3a6add", 0xc6}, {&(0x7f0000000b40)="7a4d4b6dc9c5adf59c6d91485227264e8fdb686c5a15f103bc45d7a2c1b9876a4d108995e412a75da477cb8203b8c25a57687ccef758e9951f43439d1fa2995836fe69e803a193b67c4980174c9d8ff87bfcbba8750369d9a59faa10209f6d5759b86216a0d5bfc83b581e0aa7500fe28c89f08d9b4329297e77ba9f9636bdca2fed73d6d229c214998a98ef46db07094cdef6b02f75165914ea5472db2c6e95fb950dc971c07e567ae02f9fc100802f87b9604a4b52881ca55a36d1de4c8e8520110903128b360f909747f385", 0xcd}, {&(0x7f0000000c40)="a17f875904eb68a78e5fcff6a431743f4daa5067802ca42296ae6b3c2ec5d99c53d90b6aecfcc64dba46bf897f939d70073d4c90fc991b3d6c4e4ad0defa3f628c86c775cbdf63eca9087def69c13e25c0dc6e6c6982bae0cbe68df3cc4affab94437f42ee031bb7f35f526277854a4eb1c45953e7d1712ea89b8e6818303a9bfabedaeb25335c331664a826", 0x8c}, {&(0x7f0000000d00)="019a7d0db16bcfae8704e0a34da0bc85ffb8b25bc3a1096306ad68198919e03e0f1707c044c41d760242bdb6ac7789441a0b8bc9af9a98d23fe5a5e89d71d5382632dfce0b88ebb45156e1a633b85638dccc3170833b0ed5e7946603b6b20410ec337c72b1f24b33b8e625a2b0be40f15e1a7212049834d16612ec75d5a02ec8c8df7f7f07f86b6b1c8aad3bd43396d21d7e28e097e3549c20477912270090c655e7e1e93b0ff31f3e42e0d7", 0xac}], 0x8, &(0x7f0000001100)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="2c0097a3000000000100000001000000d2d512", @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r10, @ANYRES32, @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x4040810}, 0x20004000) splice(r0, 0x0, r1, 0x0, 0x8201, 0x9) 1.909519853s ago: executing program 1 (id=1696): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), 0x0) (async) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$kcm(0x29, 0xfe66ccf3474fd32b, 0x0) (async) socket$kcm(0x29, 0xfe66ccf3474fd32b, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000480), 0x10}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x8165, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x13, &(0x7f0000000a40)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000b40)=""/222, 0x0, 0x8}, 0x78) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.797711629s ago: executing program 3 (id=1698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000011000000181100009e6b95bb92fa23f9c09cf567eb3b1d0fb827c4d357088cd524060cb7cf2629b9fd62281bfb6791d5a5068c6eb0c2678149c94ec3059f310bf06293f262c6f5d45777a43fd832f80b48190233f833716f627689d24708df2ab07c0a89c76e02fac468ac6c6d0c3f9a16d4a337c9609279267ffee2eab0", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.797131928s ago: executing program 4 (id=1699): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000000c0)=0x6, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000240035b900000000000000000700000006000480ffef"], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24020001) getsockopt$sock_buf(r2, 0x1, 0x34, &(0x7f0000001680)=""/4096, &(0x7f0000002680)=0x1000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1000}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6211006}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@setneightbl={0x2c, 0x43, 0x422, 0x70bd27, 0x25dfdbfd, {}, [@NDTA_THRESH2={0x8, 0x3, 0xff}, @NDTA_THRESH3={0x8, 0x4, 0x3}, @NDTA_THRESH3={0x8, 0x4, 0xba}]}, 0x2c}, 0x1, 0x0, 0x0, 0x488c0}, 0x40054) 1.778672037s ago: executing program 0 (id=1700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x9fc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000000000001855635611efb35c20f3c7110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) 1.75394372s ago: executing program 2 (id=1701): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.63416445s ago: executing program 1 (id=1702): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f00000000c0)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000180)=0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000380)={@loopback={0xfec0ffffffffffff}, 0x32, r2}) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000580)=0x497, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000740)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000640)="8dbe9de29a1823474186f72aea11678235e7a71ee4828c75d76df69110ae2b2baa4ca3f238a147af68c7999e831fc3590e36dea27d", 0x35}], 0x1, &(0x7f00000006c0)}}], 0x1, 0x20044000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000300)=0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x100, 0x18}, 0xc) 1.556074735s ago: executing program 3 (id=1703): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x8d5c211ebccc750f}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x448d4}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r6}, 0xc) 1.555607585s ago: executing program 2 (id=1704): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) accept4$unix(r0, 0x0, 0x0, 0x81800) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.554645777s ago: executing program 0 (id=1705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000cf850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000005c0)={0x3f0, {{0xa, 0x4e24, 0x2, @mcast2, 0x3}}}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000098", @ANYRES64=r3, @ANYBLOB="0100feffffff000000000474090614000200000000000000"], 0x50}, 0x1, 0xffffffff00000003, 0x0, 0x28840}, 0x404c080) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000200)='ns/mnt\x00') r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14080) 1.522253341s ago: executing program 2 (id=1706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'netdevsim0\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa88a8110081002f000800450000244000e000062f90787f000001ac141441a001880b"], 0x3e) 1.506796284s ago: executing program 4 (id=1707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x9}, 0x8}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.417726069s ago: executing program 3 (id=1708): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000007000008a8d1e991115c00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.40173923s ago: executing program 4 (id=1709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x7ff, r0}, 0x38) (async) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000240)={r0, 0x58, &(0x7f0000000280)}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xc, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00000029c0)='syzkaller\x00'}, 0x48) (async, rerun: 32) socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) 1.333345308s ago: executing program 3 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x5, 0x9, {{0x1b, 0x4, 0x1, 0x3, 0x6c, 0x64, 0x0, 0x40, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x4, "1196"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x7, [{@loopback, 0x200}]}, @timestamp={0x44, 0x18, 0x2a, 0x0, 0x7, [0x4, 0xffffffff, 0x4, 0x1ad, 0x0]}, @cipso={0x86, 0x26, 0x0, [{0x1, 0xe, "528cd3f4e3d5113f68f4d014"}, {0x5, 0x12, "8b8c821f015f2687b4c755b703c72395"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.241817556s ago: executing program 0 (id=1711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0xc0, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xac, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x31, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xb, 0x12, 0x6, 0x695}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc0}}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000010000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8feffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x2, 0xff5c, &(0x7f00000006c0)=""/222}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x35, 0x0, @void}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="2e00000011008188040f46ecdb4cb9cca7480e123f000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0xfffffc01}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x7, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'syzkaller1\x00', 0x0}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r5, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%-010d \x00'}, 0x20) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0xfd7f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x18, &(0x7f0000000c00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0xa, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x401}, @ldst={0x1, 0x1, 0x4, 0x9, 0x2, 0xffffffffffffffff, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r12}, @exit], &(0x7f0000000cc0)='GPL\x00', 0x8ee6, 0x86, &(0x7f0000000d00)=""/134, 0x41100, 0x22, '\x00', 0x0, @fallback=0xa, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x4, 0x1, 0x2, 0x2684acc}, 0x10, r14, r1, 0x1, 0x0, &(0x7f0000000e80)=[{0x2, 0x5, 0xc, 0x7}], 0x10, 0x6}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0x401, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(0x3) 1.121934353s ago: executing program 3 (id=1712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="000000000000f6000018110000000000000000000000000000000000d8ba10ccb9cf2127cc08b3ce5cd6abc2cb0212b0bba1eba4", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r2}, 0xc) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) socket$nl_route(0x10, 0x3, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x53b3f40, &(0x7f00000000c0)={[0x126d5c3d]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x5e2e, 0x8}, [@IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000c40)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000c80)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r7, &(0x7f0000000cc0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@esp={{0x5, 0x4, 0x2, 0x8, 0x22, 0x67, 0x0, 0x7, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x4d6, 0xc0000000, @basic={0x0, 0x0, 0xa0}}}}, 0x30) getsockopt(r5, 0x111, 0x2, 0x0, &(0x7f0000000400)) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000070", @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf25120000000800070001800000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xe040) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x4c02}) readv(r10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001300)=""/4096, 0x734}], 0x2) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xb, &(0x7f0000000880)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x25, 0x0, 0x0, 0x0, 0xffffff7f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000002300)=0x730) 1.067924955s ago: executing program 2 (id=1713): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xfff7, 0x4}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x40000000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) unshare(0x8040480) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000100)={{}, 0x80000000, 0xab, 0x3}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r6 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000001340)=0x497, 0x4) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000001380)) getpeername$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fedbdf2506000000700001800800030003000000140002006873723000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000300010072696467655f736c6176655f300000084003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f776966690008000100", @ANYRES32=r8, @ANYBLOB], 0x84}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4a22, @multicast2}, @in6={0xa, 0x4e28, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fff}, @in6={0xa, 0x4e20, 0xfffffffc, @private2, 0x4}, @in={0x2, 0x4e24, @broadcast}], 0x58) r9 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2100000000000000000000002000000000000600", @ANYRES32=r2, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000050000000600000000b1d863e000"/28], 0x50) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000001640)=ANY=[], 0x4) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000180000012dbd7000fedbdf250220140500dac80a002500000c00168008000300ac1414aa100016800c004700000000000000000306001c004e22000006001c004e2100000c7573a5f5d3b584071e21cb5962a9e3bb5f18f29cf5d9a273db6664b07b7803679dbc03fa22f93e18b23e5f358041a7b86cd1fa75"], 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) socket$inet(0x2, 0x2, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000001880)=0x1, 0x4) 1.056912541s ago: executing program 4 (id=1714): r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0xffae49117298858d, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x20}}, 0x0) ppoll(&(0x7f0000000480)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000540)) connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b40500000000000061106c00000000006600000000000000950000000000000053"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000800), r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000880)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f00000008c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r8, &(0x7f0000000980)=@generic, &(0x7f0000000a00)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000a40)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000a80)=@assoc_value={r7, 0x401}, &(0x7f0000000ac0)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fcdbdf251700100054000680140003002e2d73352d5f2d5d482ee5364c4323843c00040067636d286165732900e8feffff0000000000000000000000000000000000000014"], 0x68}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x56) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) socket$kcm(0x11, 0x3, 0x0) 815.752289ms ago: executing program 2 (id=1715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x50, 0xcb, 0x5, 0x80f7}, {0x6, 0xfc, 0x4, 0x75}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 585.592571ms ago: executing program 0 (id=1716): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000009c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 584.764873ms ago: executing program 1 (id=1717): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0xfffffffe, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x106}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0xfec, &(0x7f00000003c0)=""/4076, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 510.525514ms ago: executing program 0 (id=1718): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000400)=0x3d, 0x4) sendto$inet6(r0, &(0x7f0000000080)="d8", 0x1, 0x488e1, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) pipe(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080012400000000305001500090000000500010006000000050005000a00000005000400000000000900020073798530000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20015051}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabb018014b6a4c1d83cc200000108004a5d0038006800000c21907864010100ac1414aa89135d640002000000000000000002e0000001004e214e2204b1907840740e234b310000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000580)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x7a44, 0x1700) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f00000006c0)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x7a05, 0x1700) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) write$cgroup_type(r9, &(0x7f0000000880), 0x9) sendfile(r9, r5, 0x0, 0x10000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0xfc, 0x0, 0x8, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) 394.085976ms ago: executing program 1 (id=1719): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x3}, {0x4}, 0x13c, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="a4971e1be60e7a0de0de01678c8211db03d0f101131afcb7cab1cd693bc4efa4dc40ee5433df25255c4dd154b7efdb761b0cac4b0e88cb2379fb83f4d5976126f81382ae2e66b69839ff34ca56625762063282273ac90b9f858c183aaa084d3d4f95cbebad2e29d31e419f67da17180ded8a5944589f973aa79691f38a3b68cc4228cbd0f416192e7b13e6a828e3016a103244ae98fd01f48bb98e636e0acf37663263357adcd1b410538039e776f42e79a3ae1fa5e7e1f139705ac3474a0030ef99c6f4411ea5c7a38b11893f2959c0fc5b956a230ad75eb95caeac8e9e4df3731f9e37eeb692cf", 0xe8, 0x0, &(0x7f00000001c0)={0x2, 0x7a, {0x1, 0xc, 0x68, "f70ed112e381b7f7e16c362a031f96659a9537e4c81fce45d91420478cf71491425a75239f88f976a8f342b2c37a8dfec0addbd62bf1648513a64aa446933766b01a794cfa687dac58c55e10689ce99524ed918255255ff0d9616b68e7e059fc1fa93906f96f8272", 0x5, "088147f8cf"}, 0x43, "89a0cd4dc5756ffbd1301744de49af5db05b375a5321447dc4923889eacd34bd7c169f5f21d7bc25c71d802ba3f2914d13659a95623ac4653af97c55cf173aaf40b7e5"}, 0xc9}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000340)={0x9, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000580)={@private0, 0x0}, &(0x7f00000005c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0xad, 0xfe, 0x4, 0x46, @loopback, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8000, 0x7, 0x0, 0x4}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x349029db, 0x4, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7800, 0x8, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x4, 0x91, 0xf, 0xfe, 0x41, @ipv4={'\x00', '\xff\xff', @local}, @private0, 0x1, 0x700, 0x1, 0x4d}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r0, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f00000009c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000cc0)={0x11, 0x0, 0x0}, &(0x7f0000000d00)=0x14) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000d40)={@rand_addr, @initdev, 0x0}, &(0x7f0000000d80)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000dc0)={@empty, @empty, 0x0}, &(0x7f0000000e00)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ec0)={'gretap0\x00', &(0x7f0000000e40)={'syztnl1\x00', 0x0, 0x7, 0x80, 0x6, 0xb231, {{0x15, 0x4, 0x3, 0x0, 0x54, 0x66, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ssrr={0x89, 0x7, 0x74, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0xa, [{@local, 0x800}, {@broadcast, 0x1}]}, @timestamp={0x44, 0x8, 0x5f, 0x0, 0x6, [0x9]}, @end, @timestamp_prespec={0x44, 0x1c, 0x76, 0x3, 0x2, [{@private=0xa010102, 0x10001}, {@empty, 0x7cfc20ad}, {@multicast1, 0x9}]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r0, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000fc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0x8, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001200)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001240)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001280)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x3, 0x1ee9f7cf, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x65, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010101, {[@noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001380)={'ip_vti0\x00', &(0x7f0000001300)={'ip_vti0\x00', 0x0, 0x7800, 0x1, 0x8001, 0x9, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x68, 0x0, 0x6, 0x6, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1b, 0xf3, [@rand_addr=0x64010100, @multicast2, @loopback, @remote, @private=0x10000000, @empty]}, @timestamp_prespec={0x44, 0x2c, 0x64, 0x3, 0x6, [{@multicast2, 0x7}, {@local, 0x9}, {@loopback, 0x8}, {@loopback, 0x9}, {@multicast2, 0x80000001}]}]}}}}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000013c0)={@initdev, @initdev, 0x0}, &(0x7f0000001400)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001440)={0x96c, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r14}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf58e}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4f8a}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe4da}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa42}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff11}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f01}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff8, 0xfc, 0xf7, 0x9}, {0x3, 0xf, 0x8b, 0xffff0000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdb}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1baa133a}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x170, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x12}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r24}}, {0x8}}}]}}]}, 0x96c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001e80)={0x1, &(0x7f0000001e40)=[{0xd, 0x9, 0x75, 0x10000}]}, 0x10) 222.010514ms ago: executing program 2 (id=1720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000940)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000001140)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40145}, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000080", @ANYRES16=r4, @ANYBLOB="010000000000000000000400000008000700e0000002080002000500000008000800ac1e000106000b000a000000"], 0x34}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="14123683000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000000000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) (async) sendmsg$nl_route(r11, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r10, r8, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x1c6, &(0x7f00000013c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd611b000001903a00fc000000000000000000000000000000ff0200000000000000000000000000012e00009600000000fc010000000000000000000000000000fc010000000000000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001fc0100000000000000000000000000018f009078ffff00040b010006fe8000000000000000000000000000bb00000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000001fc010000000000000000000000000000fe80000000000000000000000000001900000000000000000000ffffac1414bb0c0000000930000320010000000000000000000000000002fe8000000000000000000000000000bbff0100000000000000000000000000010000000000000000000000000000000004000000000400000700000043090000fc0100000000000000000000000000000d000000100000000000010002000000000000800500000005000000000000000600000054010007ff020000000000000000000000000001fe800000000000000000000000000020fe800000000000000000000000000040fc01000000000000000000000000000120010000000000000000000000000000fc000000000000000000000000000000fe800000000000000000000000000036ff01000000000000000000000000000102000000a7ac3a37d6dcb7627b54df20c71b42a622b74ed1b323205dc79455297cdf9f33762ec3585af839509efc725f7cab9d4875671f9bf2a48fca99fa8e2b251e5bc82f6c8802524113aba809e1836a"], 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050001000000"], 0x38}}, 0x0) (async) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) (async, rerun: 64) r14 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r15 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r15, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x32}}, 0x0) (async, rerun: 32) getsockname$packet(r15, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) (rerun: 32) sendmsg$nl_route(r14, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r16, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async) sendmsg$nl_route(r15, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="30000000100039042dbd7000eaffffff000003e4", @ANYRES32=r16, @ANYBLOB="830056fb5bf00000100012800800010073697400040002800fb4addff74ea474fff09a2e3d0ffed395c0b5b6cf20a0599f63a01db05ee55301da7716d094d4e6767022f40c868fb62d3531a8ec58ee02de7aaabddc02d06e0a0c7cebf680f5d3f2b2bdc75ca558d3e5e039668038a575be3c5f4b0420a06a1895aab30740a7a27c2a2f501e5f8222557fdd1165e194586b7c658c521a1e0754fa"], 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x4800) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r13], 0x22c}}, 0x24048000) 0s ago: executing program 4 (id=1721): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000020000007b2ac0ff00000000632ac8ff00000000bfa200000000000001020000c0ffffffb703000040000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400b59500000000000000000a0000c8", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000ffff0000000008000800f4020000340d3e470e510acd3d050a000000000000004fd0358148d6d1216a598b66de5c0c9f11691bea73e6a3d1c6e4fd4e7faecb2d844c3b5bb0212824723414f53138d2d34dfaee8b4f21f685590fe9cdfb7de069c93654d7aa62ac11485112c3639eaf8f1ea06baa1ede36"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x7f}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x25}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x16, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c00)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000c80)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @loopback}}}], 0x20}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d00)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003640)={&(0x7f0000000d40)=@newtfilter={0x24d0, 0x2c, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xfff2, 0x4}, {0xffff, 0xd}}, [@filter_kind_options=@f_route={{0xa}, {0xc28, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_ACT={0x7f0, 0x6, [@m_mirred={0xc4, 0x6, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x5, 0x800, 0x72000000}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x0, 0xffffffffffffffff, 0xf, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5e, 0x5, 0x2, 0xff, 0x4}, 0x4, r9}}]}, {0x35, 0x6, "ef02a800bc6479e171cadabb5d724262bf6e39d71eb8fa9a8722e874fb00ee8e380eea1d1a75c5f25ee9087576b7cb3d1d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_xt={0x34, 0x1a, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x238, 0x1f, 0x0, 0x0, {{0x7}, {0x114, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xc0, 0x6, {0x4, 'mangle\x00', 0xf9, 0x8, "c43743f7ec4282fb2f9b0dba980a708722a68cce57b3ce9cc595b1aac13b757b8a3e18f9776ba7bd05a3b25dbf9c0882044bc352bf10916cb02d7aaa131d6cfd0b795e94ab936c279c87d1c168d49a1953ed7bf99b4e7e533b68dda4c1cd02d82c50a95a37b2a6d30325a5ee5610547f3b93228eddf2dfa97cd2d51e9b3d34892cc70c0f795ccb2a654eb6354ecd2eebb2ef0376cfb0"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x260, 0x6, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x0, 0x0, 0x6}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x5d0, 0x0, 0x8, 0xb5}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2a, 0x8, 0x7, 0xfffffeff, 0x3d}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2, 0x7, 0x7, 0x5}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0x7, 0x6d17fde6, 0x29de3ccf}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x92, 0x9, 0x1, 0x6, 0x1}, 0x0, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0x9, 0x8, 0x4, 0x1}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x80000001, 0x20000000, 0x9, 0x6}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0x8, 0x20000000, 0x7, 0x4}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3ff, 0xffffffffffffffff, 0x4, 0x3f61}, 0x3, r4}}]}, {0xf4, 0x6, "466719e941487daa03ac5d54ed6f39f645315aa708077933823eb43cbab519bf84e5cd516666708350be2da2c9fbe5ea70bfe21e7f6e418564e1f30cf6332265c9954adf213f737d2ded221ddb95903cff69cd682f2dee30de0d0bd0992bd519929c86ffa54449134670627e96907a41568fb39909cfcb3da84eee8c9d72c0f9f4b649e4de4d8f58f10056bd0c6abbf466f7f307047e1a623546bda7bbde7f98438d8dcda2b91abe7e23449edf071d08cd47f00ef9a6b4d08beded981abce9d6841e2948cd50b7caf2ce4a759b8412d089cd24351166ca345d0e939cd15f406e07ab314e22810ad9c9c25f85451901db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x25c, 0x9, 0x0, 0x0, {{0x7}, {0x194, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x72, 0x6, {0x3, 'raw\x00', 0x3f, 0xfffe, "6b1d535cbad00f294ec34ec5c73b76d5edbb8badeea681737c7c4d717a8b8e637641b55b135bc0a50fe679e9b15b90c16144ae88f668add5dae8c80cf4bb1b9191cd174d67c22912"}}, @TCA_IPT_TARG={0x11c, 0x6, {0x35c, 'nat\x00', 0xff, 0x4a7, "d045f7777a11369b93d7a322eaa5a5f964d5e5d3db60c0fe2238a953e92d0486986034e94e1bc7208bcb93d0a1cddae0ef08633e942746f52f285e590c7a29fa0534def10f07e0851fd8d6b485ae0e5726b0eee65e1d9ca766f8a1e8df933c3108198b42c6342c75c3caa9aa7c3d94e918226fc24ef8c479d91118f4043e829aa4c8b37c025c51543c8e940a845779e10777232ed2fae0af0cd04baef458505dcd090d4c242c214821f1610773af840694a5387b13d5ac183c350032bc06476293b568da04b230b80827944b134943921bc283df11643c8842e59645008144632df737ee11b6cdf4be3f1621e526dbac388c"}}]}, {0xa1, 0x6, "ca6fbb2746ba508081c129c26bde554e8b27054a926a97148f0bbdeb74b5322452e4797a583e0233a1237c2a4f4c9b95f9a3479f76e865e5ef8cda4e72842df686873799c1e1e46e23c673dae4eeb00ea8f69d9a08f69cbe4e9c6f324b7f6426f5de82cd9e1c50cc65be714b0b34c123e1776dfebc84fe59d05534957ea21147dd7a344a61c9fa7feda31f5c8b604b395186fcaf6fd0bd26d28d45c5bb"}, {0xc, 0x7, {0xbbf8977009751489}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_POLICE={0x420, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x8, 0x3, 0x1, 0xc5, 0xceb3, 0x100, 0xfffffc62, 0x4, 0x401, 0x6038081c, 0x5, 0x7fffffff, 0x0, 0x7, 0x3, 0xb, 0x0, 0x616, 0x9, 0x2, 0x3e9e, 0x0, 0x16b6, 0x1, 0x3, 0x3, 0x1, 0x6, 0x4, 0x80000001, 0x8, 0x7, 0xfffffff0, 0x7fffffff, 0x3, 0x7e6e, 0x7, 0x8, 0x7f, 0x8, 0x8, 0x9, 0x6, 0x7, 0xb7, 0x2, 0x80000001, 0x2, 0x8, 0x1ff, 0xffffffdf, 0x7, 0x0, 0x6, 0x1, 0xfffffffc, 0x3, 0x6, 0x50, 0xfff, 0x5, 0xe7ee, 0x7ff, 0x9, 0x81, 0x1c8, 0x2, 0x40, 0xdffffff7, 0x1, 0xc, 0x10, 0xb0, 0xe82e, 0xffffffff, 0x1, 0x6, 0x8000, 0x40, 0x2, 0x400, 0xf52, 0x1000, 0xfffffffc, 0x14, 0x4, 0x2, 0xb140, 0x69, 0x200, 0x2, 0x1, 0x1, 0x81, 0xea, 0x7, 0x4ccb, 0x3ff, 0xdd, 0x4, 0x5, 0x4, 0x8, 0xdfc, 0x9, 0x9, 0x0, 0x9, 0x9, 0x7, 0x4e37, 0xffffffff, 0x0, 0xc9, 0x2, 0x8, 0x3, 0x4, 0xb2, 0x5, 0x3, 0x1, 0x2, 0x3, 0x3, 0x1, 0x7, 0x0, 0x7, 0x1, 0x6, 0x5, 0x8, 0x7, 0x2, 0x7, 0x9, 0x3, 0x10, 0x3ff, 0x8000, 0x68, 0x9, 0x9, 0x5, 0x1ff, 0x0, 0x8, 0x5, 0x9, 0x8, 0xa, 0x7, 0x2, 0x6, 0x2, 0x7fffffff, 0xe563, 0x800, 0x5, 0x0, 0x9, 0x9af, 0x0, 0x9, 0x2, 0xf9, 0x7f, 0x7, 0x6c, 0xfffff21e, 0x1, 0x1, 0x8, 0x2, 0x1, 0xe24c, 0x3, 0x81, 0x0, 0x9349, 0x1, 0x3, 0x9, 0xc8be, 0x5, 0xe133, 0x7ff, 0x8, 0x1000, 0x0, 0x7, 0x1, 0x1000, 0xe59d, 0x0, 0x7, 0x0, 0x0, 0xffff2bfc, 0x9, 0x2, 0x7, 0x7f, 0x9, 0x378, 0xe6c4, 0xa3ee, 0x8, 0xfffff001, 0x3c, 0x1ff, 0x1, 0x7, 0x3, 0x9, 0x2, 0x10000, 0x5, 0x0, 0xffffffbb, 0x2, 0x10, 0x3, 0x7, 0x101, 0x7ff, 0x5, 0x1, 0x1, 0x70c0, 0x0, 0xfffffff8, 0x7, 0x40, 0xc50, 0xfff, 0xa24, 0x6, 0x3, 0xf5a, 0x8000, 0xffffff91, 0xffffffff, 0x1, 0x100, 0x2, 0x3, 0xa211, 0x6, 0x1, 0x2, 0x100, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x122c, 0x2, [@TCA_CGROUP_ACT={0x1228, 0x1, [@m_gact={0x188, 0x1a, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x106b, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x163e, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3ff, 0x6, 0x1, 0x6, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x6, 0x2, 0x2a0000, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x8, 0x0, 0x1, 0x9}}]}, {0xfa, 0x6, "fd6b0397ea182f1347a1659ae518a15cf96f77f92c045cfc5791d0430bc58884be12a2e602e8219f96bf12c424960eb5e5d714d1debf73a7609896487fed8eab3cbe45b9ac4d0ad5e9b495303d03c03517b32f8d8f695134451a8ab9b7edbfb562a7046e2cb0df92520726f9f11279bb82cdfda0b3969bc1910b8d7ae1e129a4cfaca22f69737ab42d02ef6ec1abf89cc8ba19c5f8aa286f07867d6c5af558ef54666c4c49c12c59720848925b36477c258b4cf7867d70920402d412ec777f8bba62837539ca3b018b285da04d2e4a207d9e178cb52e1f65048bf413a52ef1178aecc333259b4ab22e253111d18e5c460b12a2a82ce1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x109c, 0x16, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf887, 0x1, 0x8, 0xa4, 0x2024}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x7, 0x5, 0x40, 0xfffffff8}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x604, 0x2, [@TCA_CGROUP_EMATCHES={0x150, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xf082, 0x1, 0xc05c}, {0x800, 0x49b, 0x8, 0x4, 0x0, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0xe0, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x1000}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xc2, 0x5, "578c57bb5087d28ce1d8b96e16652b001fd26642b72b558726d189d85052668b1821ff74c8cc992541dddf0287344ca69fa45c7b74f1b641738435aed9b63b68244bdb6c90122c7dc0a96f4a3deb42491be78766176b553048046406150c9c9bb9edecdba4b25fc1cf725ee5f0b0249b2b3f790b54f77e81d3808643edf854e8e48f01ce7ad393c2e31a8e496415b51f1233d31f596f4d94c7375684d5fe2d2dc35bc731e00943d43670a97d26802be0503615fd88168f3fdfbe1d5710f4"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x1ff}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x3}, {0x3bf, 0x346, 0x1, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4df}}]}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_POLICE={0x498, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x61, 0x8, 0x7ff, {0x1, 0x0, 0x8, 0xaac8, 0xff, 0x1}, {0x9c, 0x2, 0x4, 0x9, 0x2, 0x2}, 0x2, 0x2, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x1, 0x9, 0x385, 0x67c, 0x4, 0xff, 0x0, 0x0, 0x2, 0x82a, 0x6, 0x0, 0x8d6e, 0x1ff, 0x9, 0x1, 0x0, 0x7958, 0x5ef3eba1, 0xe3a, 0xf3, 0x1, 0x101, 0x7, 0xfffffff1, 0x8, 0x2, 0x718, 0x4, 0x101, 0x1ff, 0x8, 0x6, 0xd, 0x5, 0x4, 0x1, 0xfffffffb, 0xffffffff, 0x18000000, 0x0, 0x1000, 0x101, 0x0, 0x8, 0x7, 0x8, 0xf7d9, 0x1ff, 0x8, 0x3ff, 0x8, 0x1, 0x8000, 0x512, 0x8, 0x8, 0x88, 0x401, 0x5, 0x2, 0x7, 0xb11c, 0x8b, 0x7b2, 0xffffffff, 0x10000, 0x10, 0xfffffff5, 0x4, 0x4, 0x7, 0x6, 0x3, 0x6, 0x8, 0x8, 0xfffffdba, 0x63f4, 0x5dc, 0x8, 0x5, 0xb9bd, 0x3, 0x8, 0x1000, 0x700000, 0x5, 0x2, 0x10001, 0x5, 0x7b8, 0x4, 0x8, 0xd2c, 0x1, 0x7fffffff, 0x2, 0x7, 0x8, 0x3, 0x3, 0x1, 0x80000001, 0x1, 0x4, 0x9, 0x3, 0xfffffff9, 0x4, 0xf, 0xff, 0xff, 0xffff6f8e, 0x25, 0x7, 0x0, 0x4, 0x2, 0x26, 0x9, 0x7, 0x8, 0x5, 0x9, 0x3, 0x2, 0x401, 0x8000000, 0x0, 0x3, 0x2, 0x3, 0xb, 0x10001, 0x22f, 0xd07, 0x7, 0x1a, 0x456ff829, 0x8, 0x2, 0x5, 0x51, 0x5, 0x3, 0x5, 0x7ff, 0x3, 0x8000, 0x8000, 0x6, 0xffff, 0x5e, 0x9, 0x7, 0x1, 0x4, 0x200, 0x5d8, 0xe, 0xffff, 0x401, 0x1000, 0x4e58, 0x0, 0x0, 0xfffffff0, 0x2, 0x8, 0x9, 0x2, 0x8001, 0x2, 0x652, 0x5, 0x40, 0x6, 0x6, 0x81, 0x40, 0x1, 0x9, 0x3, 0xffff8001, 0x2, 0x7, 0x0, 0x3, 0xf4, 0x77c, 0x960, 0xbdd, 0xc1f, 0x400, 0x2, 0x7, 0xe3, 0x8, 0x5, 0x3, 0x3, 0x7, 0x5, 0xfffff6fd, 0x20, 0xde, 0x0, 0x3f, 0x3, 0x7f, 0x143, 0x51, 0x9, 0x6, 0x9, 0x8, 0x9b, 0x4, 0x0, 0x40, 0xed, 0x9, 0x3, 0x7de71491, 0x6, 0x2, 0x24db, 0x7, 0x1, 0x9, 0x7a81b362, 0x3, 0x86, 0xfffffffc, 0x6, 0x1, 0x5, 0x4, 0x2, 0x5, 0x200, 0x8, 0x2, 0x33b4, 0x7fffffff, 0x400000, 0x7c, 0x2, 0x0, 0x7, 0xfffffff8, 0x7ff, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x69d9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc46, 0x4, 0x7, 0x5, 0x1, {0x9, 0x1, 0x8, 0x1000, 0x5, 0xffffffff}, {0x8, 0x1, 0x401, 0x8, 0x8c5, 0x1}, 0x1ff, 0xffffffff, 0xe}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}, @TCA_RATE={0x6, 0x5, {0xbc, 0x8}}, @TCA_RATE={0x6, 0x5, {0x1, 0x86}}, @TCA_RATE={0x6, 0x5, {0x4, 0xc}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x24d0}, 0x1, 0x0, 0x0, 0x4c850}, 0x48840) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000003700)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000000bc0)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x49c8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x1fb3, &(0x7f0000000600)=ANY=[], 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1b0000001a00010000001c00000400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000000)={0x2, 0x4ea2, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r13, &(0x7f0000000100), &(0x7f0000000140)=@udp=r12}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r13], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xd, 0x0, &(0x7f0000000400)="00000000000000000200000011", 0x0}, 0x50) kernel console output (not intermixed with test programs): workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 89.585323][ T6435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.587434][ T6435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.587732][ T6435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.588020][ T6435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.591925][ T6435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.595362][ T6435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.595661][ T6435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.595936][ T6435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.597427][ T6435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.880895][ T6441] __nla_validate_parse: 9 callbacks suppressed [ 89.880913][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 89.880925][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 89.881901][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 89.881917][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 89.988731][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 89.990151][ T6425] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 89.990166][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 90.037206][ T6449] bond2: Invalid ad_actor_system MAC address. [ 90.037226][ T6449] bond2: option ad_actor_system: invalid value (7) [ 90.057984][ T6449] bond2 (unregistering): Released all slaves [ 90.074175][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 90.144514][ T6458] bond2: Invalid ad_actor_system MAC address. [ 90.144533][ T6458] bond2: option ad_actor_system: invalid value (7) [ 90.151465][ T6458] bond2 (unregistering): Released all slaves [ 90.188825][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 90.567671][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 90.567904][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 90.723650][ T6480] lo: entered allmulticast mode [ 90.860064][ T6503] macsec1: entered promiscuous mode [ 92.410810][ T6571] bond2: invalid ARP target 0.0.0.0 specified for addition [ 92.410835][ T6571] bond2: option arp_ip_target: invalid value (0) [ 92.410848][ T6571] bond2: Removing last arp target with arp_interval on [ 92.424611][ T6571] bond2 (unregistering): Released all slaves [ 92.975720][ T6593] netlink: 'syz.1.178': attribute type 101 has an invalid length. [ 93.280768][ T6613] Cannot find del_set index 1 as target [ 93.455834][ T6604] bridge_slave_0: left allmulticast mode [ 93.455870][ T6604] bridge_slave_0: left promiscuous mode [ 93.456096][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.506785][ T6607] bridge_slave_1: left allmulticast mode [ 93.506811][ T6607] bridge_slave_1: left promiscuous mode [ 93.507021][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.616310][ T6622] nbd0: detected capacity change from 0 to 63 [ 93.666189][ T53] block nbd0: Receive control failed (result -104) [ 93.859649][ T6634] netlink: 'syz.0.189': attribute type 11 has an invalid length. [ 94.095272][ T6655] warning: `syz.3.194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.294796][ T6667] net_ratelimit: 24 callbacks suppressed [ 94.294814][ T6667] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.296105][ T6667] netlink: 'syz.2.199': attribute type 1 has an invalid length. [ 94.417984][ T6667] bond1: entered promiscuous mode [ 94.421152][ T6667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.468444][ T6679] x_tables: unsorted underflow at hook 3 [ 94.593794][ T6667] bond1: (slave bridge2): making interface the new active one [ 94.593817][ T6667] bridge2: entered promiscuous mode [ 94.595185][ T6667] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 94.984924][ T6703] batman_adv: batadv0: Adding interface: gretap1 [ 94.984940][ T6703] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.984963][ T6703] batman_adv: batadv0: Interface activated: gretap1 [ 95.115869][ T6712] netlink: 'syz.4.206': attribute type 6 has an invalid length. [ 95.115891][ T6712] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.303651][ T6713] 0: reclassify loop, rule prio 0, protocol 03 [ 98.994119][ T6887] __nla_validate_parse: 70 callbacks suppressed [ 98.994138][ T6887] netlink: 32 bytes leftover after parsing attributes in process `syz.4.277'. [ 99.037600][ T6887] macvlan0: entered promiscuous mode [ 99.037937][ T6887] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 99.037953][ T6887] netlink: 'syz.4.277': attribute type 2 has an invalid length. [ 100.830526][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.284'. [ 101.450776][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 101.572261][ T6954] netlink: 68 bytes leftover after parsing attributes in process `syz.1.296'. [ 101.597422][ T6948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.859715][ T6948] syzkaller0: entered promiscuous mode [ 101.859741][ T6948] syzkaller0: entered allmulticast mode [ 102.383611][ T6985] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 102.693543][ T2005] block nbd0: Possible stuck request ffff888028c87000: control (read@0,1024B). Runtime 9 seconds [ 102.693845][ T2005] block nbd0: Possible stuck request ffff888028c871c0: control (read@1024,1024B). Runtime 9 seconds [ 102.693864][ T2005] block nbd0: Possible stuck request ffff888028c87380: control (read@2048,1024B). Runtime 9 seconds [ 102.693876][ T2005] block nbd0: Possible stuck request ffff888028c87540: control (read@3072,1024B). Runtime 9 seconds [ 103.300251][ T6985] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 103.302813][ T6986] netlink: 'syz.1.301': attribute type 3 has an invalid length. [ 103.797897][ T7023] syzkaller0: entered promiscuous mode [ 103.797918][ T7023] syzkaller0: entered allmulticast mode [ 103.831255][ T7031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.860076][ T7034] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.135973][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.313'. [ 104.136630][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 104.209150][ T7044] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 104.209170][ T7044] netlink: 92 bytes leftover after parsing attributes in process `syz.3.314'. [ 104.340603][ T7059] netlink: 'syz.3.317': attribute type 153 has an invalid length. [ 104.348356][ T7060] Cannot find add_set index 0 as target [ 104.544677][ T7068] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.616825][ T7070] tipc: Started in network mode [ 104.616856][ T7070] tipc: Node identity ac14140f, cluster identity 4711 [ 104.617729][ T7070] tipc: New replicast peer: 255.255.255.255 [ 104.619193][ T7070] tipc: Enabled bearer , priority 10 [ 104.620104][ T7070] syzkaller1: entered promiscuous mode [ 104.620120][ T7070] syzkaller1: entered allmulticast mode [ 104.783704][ T7076] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 104.819658][ T7076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.839714][ T7076] bond1: entered allmulticast mode [ 104.840293][ T7076] netlink: 56 bytes leftover after parsing attributes in process `syz.0.322'. [ 104.849649][ T7079] macvlan2: entered allmulticast mode [ 104.849668][ T7079] bridge0: entered allmulticast mode [ 104.849699][ T7079] bridge0: entered promiscuous mode [ 104.946416][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 105.109695][ T7090] netlink: 'syz.1.327': attribute type 4 has an invalid length. [ 105.226650][ T7098] netlink: 52 bytes leftover after parsing attributes in process `syz.3.329'. [ 105.226676][ T7098] netlink: 52 bytes leftover after parsing attributes in process `syz.3.329'. [ 105.226688][ T7098] netlink: 52 bytes leftover after parsing attributes in process `syz.3.329'. [ 105.280372][ T7103] ip_tables: iptables: counters copy to user failed while replacing table [ 105.397293][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 105.397325][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 105.504154][ T7115] netlink: 'syz.3.335': attribute type 10 has an invalid length. [ 105.733077][ T976] tipc: Node number set to 2886997007 [ 105.844701][ T7100] netlink: 'syz.4.333': attribute type 1 has an invalid length. [ 105.936762][ T7100] bond3: option mode: invalid value (7) [ 105.940437][ T7100] bond3 (unregistering): Released all slaves [ 106.030728][ T7143] netlink: 'syz.4.333': attribute type 10 has an invalid length. [ 106.156458][ T7150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.315627][ T7143] dummy0: entered promiscuous mode [ 106.821448][ T7166] netlink: 'syz.2.345': attribute type 1 has an invalid length. [ 106.852701][ T7166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.869165][ T7166] bond2: (slave ip6erspan0): making interface the new active one [ 106.870750][ T7166] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 106.951270][ T7173] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 107.044496][ T7179] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 107.263270][ T7176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.475569][ T7202] gretap0: entered promiscuous mode [ 107.527114][ T7176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.571245][ T7204] syzkaller1: entered promiscuous mode [ 107.571267][ T7204] syzkaller1: entered allmulticast mode [ 107.638874][ T7176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.724238][ T7176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.841593][ T62] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.921664][ T43] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.931657][ T43] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.931706][ T43] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.025898][ T7232] netlink: 'syz.4.360': attribute type 4 has an invalid length. [ 108.026604][ T7232] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 108.269684][ T7202] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.269709][ T7202] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 108.300822][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.301609][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.326024][ T7202] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.326046][ T7202] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 108.367657][ T7202] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.367679][ T7202] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 108.394633][ T7202] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.394654][ T7202] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 108.434260][ T7202] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.434280][ T7202] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 108.473972][ T7241] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.474970][ T7244] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.822567][ T7253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.114560][ T7283] syzkaller1: entered promiscuous mode [ 109.114581][ T7283] syzkaller1: entered allmulticast mode [ 109.197294][ T7285] __nla_validate_parse: 5 callbacks suppressed [ 109.197311][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 109.227128][ T7296] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 109.271819][ T7297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.376'. [ 109.271952][ T7297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.376'. [ 111.731814][ T2005] block nbd0: Possible stuck request ffff888028c87000: control (read@0,1024B). Runtime 18 seconds [ 111.731870][ T2005] block nbd0: Possible stuck request ffff888028c871c0: control (read@1024,1024B). Runtime 18 seconds [ 111.731894][ T2005] block nbd0: Possible stuck request ffff888028c87380: control (read@2048,1024B). Runtime 18 seconds [ 111.731917][ T2005] block nbd0: Possible stuck request ffff888028c87540: control (read@3072,1024B). Runtime 18 seconds [ 112.157869][ T7306] ip_tables: iptables: counters copy to user failed while replacing table [ 112.386906][ T7326] x_tables: duplicate entry at hook 1 [ 112.439902][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 112.517102][ T7328] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 112.570398][ T7328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.611766][ T7337] xt_TCPMSS: Only works on TCP SYN packets [ 112.683705][ T7336] syzkaller0: entered promiscuous mode [ 112.683726][ T7336] syzkaller0: entered allmulticast mode [ 112.706914][ T7336] tipc: Started in network mode [ 112.706943][ T7336] tipc: Node identity 3a1caec9ae25, cluster identity 4711 [ 112.707240][ T7336] tipc: Enabled bearer , priority 0 [ 112.710567][ T7334] tipc: Resetting bearer [ 112.759430][ T7334] tipc: Disabling bearer [ 112.795267][ T7353] netlink: 116 bytes leftover after parsing attributes in process `syz.3.391'. [ 112.931376][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.931451][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.949927][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.962099][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 113.008547][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 113.389714][ T7384] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 113.481186][ T7388] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 113.536370][ T986] IPVS: starting estimator thread 0... [ 113.621772][ T7391] IPVS: using max 36 ests per chain, 86400 per kthread [ 113.746080][ T7396] veth3: entered allmulticast mode [ 113.946819][ T7409] sctp: [Deprecated]: syz.1.410 (pid 7409) Use of int in max_burst socket option. [ 113.946819][ T7409] Use struct sctp_assoc_value instead [ 114.201381][ T7418] veth5: entered promiscuous mode [ 114.201402][ T7418] veth5: entered allmulticast mode [ 114.224272][ T7418] __nla_validate_parse: 11 callbacks suppressed [ 114.224289][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 115.053947][ T7481] veth0_to_bridge: entered promiscuous mode [ 115.054268][ T7481] macvtap1: entered allmulticast mode [ 115.054281][ T7481] veth0_to_bridge: entered allmulticast mode [ 115.059845][ T7481] veth0_to_bridge: left allmulticast mode [ 115.059868][ T7481] veth0_to_bridge: left promiscuous mode [ 115.467901][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.430'. [ 115.467934][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.430'. [ 115.854478][ T7525] netlink: 88 bytes leftover after parsing attributes in process `syz.3.437'. [ 115.874663][ T7525] netlink: 76 bytes leftover after parsing attributes in process `syz.3.437'. [ 115.880467][ T7525] netlink: 88 bytes leftover after parsing attributes in process `syz.3.437'. [ 116.034935][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 116.037592][ T7530] tipc: Started in network mode [ 116.037608][ T7530] tipc: Node identity 86698b933761, cluster identity 4711 [ 116.037813][ T7530] tipc: Enabled bearer , priority 10 [ 116.065106][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 116.084434][ T7529] tipc: Resetting bearer [ 116.114109][ T7529] tipc: Disabling bearer [ 116.290656][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.448'. [ 116.550779][ T7565] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 116.656025][ T7565] bond3: (slave veth0_to_bond): making interface the new active one [ 116.657349][ T7565] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 116.677853][ T7565] macvlan2: entered promiscuous mode [ 116.677884][ T7565] macvlan2: entered allmulticast mode [ 116.679635][ T7565] bond3: entered promiscuous mode [ 116.679728][ T7565] veth0_to_bond: entered promiscuous mode [ 116.680734][ T7565] bond3: entered allmulticast mode [ 116.680747][ T7565] veth0_to_bond: entered allmulticast mode [ 116.688197][ T7565] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.688860][ T7565] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 116.688972][ T7565] bond3: left allmulticast mode [ 116.689252][ T7565] veth0_to_bond: left allmulticast mode [ 116.689269][ T7565] bond3: left promiscuous mode [ 116.689278][ T7565] veth0_to_bond: left promiscuous mode [ 116.765132][ T7578] syzkaller0: entered promiscuous mode [ 116.765151][ T7578] syzkaller0: entered allmulticast mode [ 117.044572][ T7591] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 117.057875][ T7594] macvlan2: entered promiscuous mode [ 117.057895][ T7594] batadv0: entered promiscuous mode [ 117.058078][ T7594] macvlan2: entered allmulticast mode [ 117.058090][ T7594] batadv0: entered allmulticast mode [ 117.059341][ T7594] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.060091][ T7594] batadv0: left allmulticast mode [ 117.060108][ T7594] batadv0: left promiscuous mode [ 117.069440][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 117.601375][ T7616] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 117.648342][ T7616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.658596][ T7616] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 118.179358][ T7660] netlink: 'syz.4.476': attribute type 4 has an invalid length. [ 118.700916][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.701605][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.887745][ T7681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.904537][ T7681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.909035][ T7700] netlink: 'syz.2.487': attribute type 49 has an invalid length. [ 119.007173][ T7713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.163589][ T986] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.164571][ T986] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.167868][ T986] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.167915][ T986] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.283750][ T7720] __nla_validate_parse: 12 callbacks suppressed [ 119.283769][ T7720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'. [ 119.477731][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 119.944784][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.497'. [ 120.297411][ T7769] x_tables: duplicate underflow at hook 1 [ 120.620030][ T7788] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 120.700644][ T7788] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.717616][ T7795] netlink: 44 bytes leftover after parsing attributes in process `syz.0.505'. [ 120.736061][ T7799] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 120.782334][ T7785] bond4: (slave geneve2): making interface the new active one [ 120.817995][ T7785] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 120.991009][ T7799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.000702][ T7799] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 121.011748][ T7800] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 121.031103][ T7799] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 121.031295][ T7799] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 121.344430][ T2005] block nbd0: Possible stuck request ffff888028c87000: control (read@0,1024B). Runtime 27 seconds [ 121.344470][ T2005] block nbd0: Possible stuck request ffff888028c871c0: control (read@1024,1024B). Runtime 27 seconds [ 121.344492][ T2005] block nbd0: Possible stuck request ffff888028c87380: control (read@2048,1024B). Runtime 27 seconds [ 121.344523][ T2005] block nbd0: Possible stuck request ffff888028c87540: control (read@3072,1024B). Runtime 27 seconds [ 121.735955][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 121.736118][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 121.736136][ T7833] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 121.796059][ T7837] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 121.798091][ T7834] netlink: 830 bytes leftover after parsing attributes in process `syz.4.512'. [ 124.851403][ T7860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.893727][ T7862] ip_tables: iptables: counters copy to user failed while replacing table [ 124.912966][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 124.912986][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 124.955510][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 124.955543][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 125.028995][ T7868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.404639][ T43] IPVS: starting estimator thread 0... [ 125.430089][ T7883] validate_nla: 61 callbacks suppressed [ 125.430107][ T7883] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 125.491551][ T7887] IPVS: using max 27 ests per chain, 64800 per kthread [ 125.599731][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 125.633402][ T7893] bond5: (slave geneve3): making interface the new active one [ 125.636623][ T7893] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 125.639116][ T7883] bond5: entered promiscuous mode [ 125.639133][ T7883] geneve3: entered promiscuous mode [ 125.650629][ T7883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.663023][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.663256][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.663287][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.671627][ T43] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.498553][ T7937] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 126.580268][ T7937] bond4: entered promiscuous mode [ 126.580708][ T7937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.627439][ T7937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.630421][ T7937] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 126.630441][ T7937] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 126.650108][ T7937] bond4: (slave ip6gre1): making interface the new active one [ 126.650131][ T7937] ip6gre1: entered promiscuous mode [ 126.668775][ T7937] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 126.749475][ T7948] ip_tables: iptables: counters copy to user failed while replacing table [ 126.805504][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 127.070217][ T7970] netlink: 180 bytes leftover after parsing attributes in process `syz.4.545'. [ 127.173894][ T7976] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 127.260977][ T7982] netlink: 'syz.4.545': attribute type 4 has an invalid length. [ 127.283249][ T7982] netlink: 'syz.4.545': attribute type 4 has an invalid length. [ 127.305479][ T7984] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 127.307649][ T7981] vlan2: entered promiscuous mode [ 127.307669][ T7981] bridge0: entered promiscuous mode [ 127.336102][ T7984] syzkaller1: entered promiscuous mode [ 127.336123][ T7984] syzkaller1: entered allmulticast mode [ 127.514375][ T7998] block nbd3: not configured, cannot reconfigure [ 127.598293][ T8001] vlan2: entered promiscuous mode [ 127.837349][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 127.892479][ T62] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.893914][ T62] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.896840][ T1021] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.896877][ T1021] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.923208][ T8015] netlink: 'syz.1.559': attribute type 23 has an invalid length. [ 127.939425][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'. [ 128.165772][ T8023] netlink: 48 bytes leftover after parsing attributes in process `syz.4.560'. [ 128.534794][ T8031] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 128.546882][ T8031] bond3 (unregistering): Released all slaves [ 128.951844][ T8052] netlink: 'syz.1.567': attribute type 2 has an invalid length. [ 128.969096][ T8052] pimreg: entered allmulticast mode [ 128.978871][ T8051] pimreg: left allmulticast mode [ 129.008893][ T8057] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 129.065933][ T8057] bond6: entered promiscuous mode [ 129.066406][ T8057] 8021q: adding VLAN 0 to HW filter on device bond6 [ 129.078684][ T8055] netlink: 'syz.0.569': attribute type 4 has an invalid length. [ 129.210517][ T8078] syzkaller0: entered promiscuous mode [ 129.210538][ T8078] syzkaller0: entered allmulticast mode [ 129.246707][ T8065] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.290099][ T8064] xt_bpf: check failed: parse error [ 129.337972][ T8087] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 129.440309][ T8087] 8021q: adding VLAN 0 to HW filter on device bond7 [ 129.646780][ T8106] xt_CT: No such helper "syz0" [ 130.862026][ T8095] 8021q: adding VLAN 0 to HW filter on device bond7 [ 130.862399][ T8095] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 130.864789][ T8095] bond7: (slave gre1): Error -95 calling set_mac_address [ 130.924312][ T2005] block nbd0: Possible stuck request ffff888028c87000: control (read@0,1024B). Runtime 36 seconds [ 130.924352][ T2005] block nbd0: Possible stuck request ffff888028c871c0: control (read@1024,1024B). Runtime 36 seconds [ 130.924376][ T2005] block nbd0: Possible stuck request ffff888028c87380: control (read@2048,1024B). Runtime 36 seconds [ 130.924398][ T2005] block nbd0: Possible stuck request ffff888028c87540: control (read@3072,1024B). Runtime 36 seconds [ 132.230148][ T8084] tipc: Started in network mode [ 132.230183][ T8084] tipc: Node identity 02399a45cc54, cluster identity 4711 [ 132.231055][ T8084] tipc: Enabled bearer , priority 0 [ 132.238897][ T8098] gretap1: entered promiscuous mode [ 132.244987][ T8098] bond7: (slave gretap1): making interface the new active one [ 132.251880][ T8098] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 132.282704][ T8106] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 132.291057][ T8108] bond7 (unregistering): (slave gretap1): Releasing active interface [ 132.307332][ T8108] bond7 (unregistering): Released all slaves [ 132.347862][ T8077] tipc: Resetting bearer [ 132.366912][ T8077] tipc: Disabling bearer [ 132.844296][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.012631][ T8117] openvswitch: netlink: IP tunnel dst address not specified [ 133.038847][ T8119] __nla_validate_parse: 8 callbacks suppressed [ 133.038863][ T8119] netlink: 84 bytes leftover after parsing attributes in process `syz.2.579'. [ 133.049363][ T8120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 133.259529][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 133.260322][ T8111] netlink: 264 bytes leftover after parsing attributes in process `syz.1.578'. [ 133.260348][ T8111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.578'. [ 133.756941][ T8150] IPVS: nq: FWM 3 0x00000003 - no destination available [ 133.779443][ T8148] netlink: 228 bytes leftover after parsing attributes in process `syz.3.591'. [ 134.044490][ T986] IPVS: starting estimator thread 0... [ 134.141844][ T8172] IPVS: using max 28 ests per chain, 67200 per kthread [ 134.188611][ T8177] netlink: 76 bytes leftover after parsing attributes in process `syz.1.600'. [ 134.195621][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.600'. [ 134.195643][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.600'. [ 134.372993][ T8177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.600'. [ 134.446388][ T8189] lo: entered allmulticast mode [ 134.607960][ T8187] lo: left allmulticast mode [ 134.828162][ T8224] syzkaller0: entered promiscuous mode [ 134.828183][ T8224] syzkaller0: entered allmulticast mode [ 134.875797][ T8212] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 135.029711][ T8233] ip6gretap0: entered promiscuous mode [ 135.031196][ T8231] ip6gretap0: left promiscuous mode [ 135.713917][ T8256] bond0: entered promiscuous mode [ 135.713940][ T8256] bond_slave_0: entered promiscuous mode [ 135.714153][ T8256] bond_slave_1: entered promiscuous mode [ 135.718097][ T8256] batadv0: entered promiscuous mode [ 135.722431][ T8256] debugfs: 'hsr1' already exists in 'hsr' [ 135.722447][ T8256] Cannot create hsr debugfs directory [ 135.722497][ T8256] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 135.722512][ T8256] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 135.724273][ T8256] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 135.787668][ T8256] bond0: left promiscuous mode [ 135.787819][ T8256] bond_slave_0: left promiscuous mode [ 135.788136][ T8256] bond_slave_1: left promiscuous mode [ 135.803546][ T8256] batadv0: left promiscuous mode [ 135.945272][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.945363][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.945444][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.945552][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.945633][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.945714][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.945792][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.945900][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.945981][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.946070][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.946151][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.947182][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.947273][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.951837][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.951928][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.952045][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.952121][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.952585][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.952667][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.952771][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.957964][ T8269] tap0: tun_chr_ioctl cmd 1074025680 [ 135.960225][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.960319][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.960397][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.960502][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.960597][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.960674][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.968064][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968160][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968238][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968316][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968423][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968502][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968578][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968651][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968751][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968824][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968911][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.968997][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.975072][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.975159][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.975237][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.975313][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 135.976914][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977007][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977083][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977157][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977258][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977331][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977405][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977479][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977578][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977654][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.977728][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.980080][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.980191][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 135.980668][ T8264] tap0: tun_chr_ioctl cmd 1074025673 [ 136.007706][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 136.007826][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 136.010599][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 136.010697][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 136.010802][ T8265] tap0: tun_chr_ioctl cmd 2152240185 [ 136.498507][ T8294] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 136.734341][ T8295] veth3: entered allmulticast mode [ 136.752495][ T8295] bond4: (slave veth3): Enslaving as an active interface with an up link [ 136.789905][ T8300] bond4 (unregistering): (slave veth3): Releasing backup interface [ 136.810237][ T8300] bond4 (unregistering): Released all slaves [ 136.887755][ T8312] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 136.933716][ T8310] syzkaller0: entered promiscuous mode [ 136.933738][ T8310] syzkaller0: entered allmulticast mode [ 136.949905][ T8313] sctp: [Deprecated]: syz.4.635 (pid 8313) Use of int in max_burst socket option. [ 136.949905][ T8313] Use struct sctp_assoc_value instead [ 136.974158][ T8313] hsr0 speed is unknown, defaulting to 1000 [ 136.974217][ T8313] hsr0 speed is unknown, defaulting to 1000 [ 136.975039][ T8312] siw: device registration error -23 [ 136.977401][ T8313] hsr0 speed is unknown, defaulting to 1000 [ 136.979719][ T8313] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 136.979745][ T8313] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 136.979776][ T8313] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 137.086744][ T8313] hsr0 speed is unknown, defaulting to 1000 [ 137.128507][ T8313] hsr0 speed is unknown, defaulting to 1000 [ 137.141883][ T8313] hsr0 speed is unknown, defaulting to 1000 [ 137.166987][ T8318] veth5: entered allmulticast mode [ 137.180504][ T8318] bond3: (slave veth5): Enslaving as an active interface with an up link [ 137.181645][ T8313] hsr0 speed is unknown, defaulting to 1000 [ 137.189899][ T8313] hsr0 speed is unknown, defaulting to 1000 [ 137.717685][ T8354] sch_tbf: peakrate 32767 is lower than or equals to rate 4294967169 ! [ 137.720884][ T8354] syzkaller0: entered promiscuous mode [ 137.720904][ T8354] syzkaller0: entered allmulticast mode [ 138.240571][ T8379] __nla_validate_parse: 12 callbacks suppressed [ 138.240590][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.654'. [ 138.341074][ T8378] netlink: 48 bytes leftover after parsing attributes in process `syz.2.653'. [ 138.405694][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 138.551200][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.660'. [ 138.601286][ T8399] xt_IDLETIMER: timeout value is zero [ 138.626395][ T8402] netlink: 'syz.4.662': attribute type 10 has an invalid length. [ 138.626689][ T8402] dummy0: left promiscuous mode [ 138.660847][ T8402] team0: Port device dummy0 added [ 138.676445][ T8402] netlink: 'syz.4.662': attribute type 10 has an invalid length. [ 138.771063][ T8402] team0: Port device dummy0 removed [ 138.952281][ T8416] netlink: 'syz.4.667': attribute type 4 has an invalid length. [ 138.952300][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 138.979110][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 138.980668][ T8416] netlink: 'syz.4.667': attribute type 4 has an invalid length. [ 138.980683][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 139.099946][ T8432] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 139.135169][ T8433] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.265071][ T8432] syzkaller0: entered promiscuous mode [ 139.265093][ T8432] syzkaller0: entered allmulticast mode [ 139.363608][ T7707] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 139.553378][ T7707] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 139.678761][ T8444] netlink: 348 bytes leftover after parsing attributes in process `syz.1.670'. [ 139.736986][ T8446] netlink: 'syz.2.671': attribute type 13 has an invalid length. [ 139.817644][ T8448] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 139.953225][ T8453] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 140.092611][ T8425] syz.0.668 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 140.092660][ T8425] CPU: 1 UID: 0 PID: 8425 Comm: syz.0.668 Not tainted syzkaller #0 PREEMPT(full) [ 140.092678][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 140.092694][ T8425] Call Trace: [ 140.092701][ T8425] [ 140.092709][ T8425] dump_stack_lvl+0xe8/0x150 [ 140.092747][ T8425] dump_header+0xd3/0x4b0 [ 140.092774][ T8425] oom_kill_process+0x3ab/0x9e0 [ 140.092803][ T8425] out_of_memory+0xfb1/0x13b0 [ 140.092824][ T8425] ? try_charge_memcg+0xc0d/0x15e0 [ 140.092856][ T8425] ? __pfx_out_of_memory+0x10/0x10 [ 140.092877][ T8425] ? do_raw_spin_unlock+0xf5/0x200 [ 140.092906][ T8425] try_charge_memcg+0xcc3/0x15e0 [ 140.092945][ T8425] ? __pfx_try_charge_memcg+0x10/0x10 [ 140.092985][ T8425] ? charge_memcg+0x47/0x310 [ 140.093015][ T8425] charge_memcg+0x1dd/0x310 [ 140.093043][ T8425] ? mem_cgroup_swapin_charge_folio+0x2b/0x180 [ 140.093060][ T8425] mem_cgroup_swapin_charge_folio+0x11a/0x180 [ 140.093082][ T8425] __swap_cache_alloc_folio+0x4de/0x990 [ 140.093118][ T8425] swap_cache_read_folio+0x44/0x130 [ 140.093143][ T8425] swap_cluster_readahead+0x392/0x640 [ 140.093172][ T8425] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 140.093219][ T8425] swapin_readahead+0x1a3/0xc60 [ 140.093258][ T8425] ? lock_acquire+0x115/0x350 [ 140.093281][ T8425] ? __pfx_swapin_readahead+0x10/0x10 [ 140.093299][ T8425] ? swap_table_get+0x1e/0x260 [ 140.093325][ T8425] ? swap_table_get+0x1e/0x260 [ 140.093343][ T8425] ? swap_table_get+0x1e/0x260 [ 140.093359][ T8425] ? swap_table_get+0x1e/0x260 [ 140.093384][ T8425] ? swap_cache_get_folio+0x315/0x390 [ 140.093402][ T8425] ? get_swap_device+0xd7/0x1c0 [ 140.093431][ T8425] do_swap_page+0x752/0x4b80 [ 140.093467][ T8425] ? lock_acquire+0x115/0x350 [ 140.093498][ T8425] ? __lock_acquire+0x747/0x2de0 [ 140.093518][ T8425] ? do_swap_page+0x123/0x4b80 [ 140.093544][ T8425] ? __pfx_do_swap_page+0x10/0x10 [ 140.093568][ T8425] ? __pte_offset_map+0x1ae/0x240 [ 140.093593][ T8425] ? pte_offset_map_rw_nolock+0xea/0x160 [ 140.093619][ T8425] handle_mm_fault+0x1327/0x2f80 [ 140.093651][ T8425] ? handle_mm_fault+0xee/0x2f80 [ 140.093679][ T8425] ? __pfx_handle_mm_fault+0x10/0x10 [ 140.093695][ T8425] ? lock_vma_under_rcu+0x45a/0x500 [ 140.093739][ T8425] do_user_addr_fault+0xb35/0x1480 [ 140.093773][ T8425] ? trace_page_fault_user+0x84/0x1e0 [ 140.093797][ T8425] exc_page_fault+0x6a/0xc0 [ 140.093820][ T8425] asm_exc_page_fault+0x26/0x30 [ 140.093837][ T8425] RIP: 0033:0x7fe9a24528bf [ 140.093862][ T8425] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 f7 3b 00 89 f0 4c 8d 05 49 d7 3b 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 140.093876][ T8425] RSP: 002b:00007ffe3afa66e8 EFLAGS: 00010206 [ 140.093897][ T8425] RAX: 00000000824c90cf RBX: ffffffff824c90cf RCX: ffffffff824c94be [ 140.093909][ T8425] RDX: 00000000000010cf RSI: ffffffff824c90cf RDI: 0000000000000002 [ 140.093921][ T8425] RBP: 0000000000000000 R08: 00007fe9a2810000 R09: 00007fe9a2812000 [ 140.093932][ T8425] R10: 00000000824c90d3 R11: 0000000000000002 R12: 00007fe9a2826038 [ 140.093943][ T8425] R13: 0000000000045dda R14: ffffffff824c90c7 R15: 00007fe9a3355720 [ 140.093956][ T8425] ? page_ext_lookup+0x127/0x180 [ 140.093981][ T8425] ? page_ext_lookup+0x12f/0x180 [ 140.094008][ T8425] ? page_ext_put+0x4e/0xc0 [ 140.094031][ T8425] ? page_ext_lookup+0x12f/0x180 [ 140.094062][ T8425] [ 140.094690][ T8425] memory: usage 307200kB, limit 307200kB, failcnt 711 [ 140.094705][ T8425] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0 [ 140.094716][ T8425] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 140.094727][ T8425] Memory cgroup stats for /syz0: [ 140.094961][ T8425] cache 0 [ 140.094969][ T8425] rss 0 [ 140.094975][ T8425] rss_huge 0 [ 140.094980][ T8425] shmem 0 [ 140.094986][ T8425] mapped_file 0 [ 140.094991][ T8425] dirty 0 [ 140.094997][ T8425] writeback 0 [ 140.095003][ T8425] workingset_refault_anon 37 [ 140.095009][ T8425] workingset_refault_file 11 [ 140.095015][ T8425] swap 139264 [ 140.095021][ T8425] swapcached 73728 [ 140.095026][ T8425] pgpgin 13623 [ 140.095032][ T8425] pgpgout 13605 [ 140.095037][ T8425] pgfault 24494 [ 140.095043][ T8425] pgmajfault 12 [ 140.095049][ T8425] inactive_anon 49152 [ 140.095055][ T8425] active_anon 24576 [ 140.095061][ T8425] inactive_file 0 [ 140.095067][ T8425] active_file 0 [ 140.095073][ T8425] unevictable 0 [ 140.095078][ T8425] hierarchical_memory_limit 314572800 [ 140.095085][ T8425] hierarchical_memsw_limit 9223372036854771712 [ 140.095091][ T8425] total_cache 0 [ 140.095097][ T8425] total_rss 0 [ 140.095103][ T8425] total_rss_huge 0 [ 140.095109][ T8425] total_shmem 0 [ 140.095114][ T8425] total_mapped_file 0 [ 140.095120][ T8425] total_dirty 0 [ 140.095126][ T8425] total_writeback 0 [ 140.095132][ T8425] total_workingset_refault_anon 37 [ 140.095138][ T8425] total_workingset_refault_file 11 [ 140.095145][ T8425] total_swap 139264 [ 140.095151][ T8425] total_swapcached 73728 [ 140.095157][ T8425] total_pgpgin 13623 [ 140.095163][ T8425] total_pgpgout 13605 [ 140.095169][ T8425] total_pgfault 24494 [ 140.095175][ T8425] total_pgmajfault 12 [ 140.095181][ T8425] total_inactive_anon 49152 [ 140.095187][ T8425] total_active_anon 24576 [ 140.095193][ T8425] total_inactive_file 0 [ 140.095199][ T8425] total_active_file 0 [ 140.095205][ T8425] total_unevictable 0 [ 140.095216][ T8425] anon_cost 0 [ 140.095221][ T8425] file_cost 0 [ 140.095228][ T8425] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.668,pid=8425,uid=0 [ 140.097152][ T8425] Memory cgroup out of memory: Killed process 8425 (syz.0.668) total-vm:106712kB, anon-rss:1272kB, file-rss:27452kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 140.692274][ T2005] block nbd0: Connection timed out, retrying (0/1 alive) [ 140.692816][ T2005] block nbd0: Connection timed out, retrying (0/1 alive) [ 140.692862][ T2005] block nbd0: Connection timed out, retrying (0/1 alive) [ 140.692900][ T2005] block nbd0: Connection timed out, retrying (0/1 alive) [ 140.693174][ T2005] block nbd0: Dead connection, failed to find a fallback [ 140.770907][ T8458] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 141.950926][ T8448] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 141.959048][ T986] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 142.002183][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.673'. [ 142.006429][ T8458] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 142.110404][ T8464] raw_sendmsg: syz.1.674 forgot to set AF_INET. Fix it! [ 142.364571][ T8481] l2tp_ppp: sess 2/0: no socket in recv [ 142.370005][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 142.612725][ T8487] netlink: 'syz.1.680': attribute type 1 has an invalid length. [ 142.692678][ T8487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.810195][ T8504] netlink: 'syz.3.686': attribute type 21 has an invalid length. [ 142.810285][ T8504] netlink: 'syz.3.686': attribute type 4 has an invalid length. [ 142.810297][ T8504] netlink: 'syz.3.686': attribute type 3 has an invalid length. [ 143.012736][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 143.012995][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 143.211843][ T7682] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 143.484549][ T8536] syzkaller1: entered promiscuous mode [ 143.484570][ T8536] syzkaller1: entered allmulticast mode [ 143.888458][ T8552] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001 [ 144.064233][ T8564] syz_tun: entered promiscuous mode [ 144.093584][ T8564] syz_tun: left promiscuous mode [ 144.187075][ T8570] syzkaller0: left promiscuous mode [ 144.187095][ T8570] syzkaller0: left allmulticast mode [ 144.259481][ T8576] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 144.259501][ T8576] __nla_validate_parse: 2 callbacks suppressed [ 144.259511][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 144.342594][ T8575] bond1: option miimon: invalid value (18446744073709551609) [ 144.342619][ T8575] bond1: option miimon: allowed values 0 - 2147483647 [ 144.345863][ T8575] bond1 (unregistering): Released all slaves [ 144.495071][ T8585] bond1: option miimon: invalid value (18446744073709551609) [ 144.495093][ T8585] bond1: option miimon: allowed values 0 - 2147483647 [ 144.499143][ T8585] bond1 (unregistering): Released all slaves [ 144.734703][ T8597] netlink: 68 bytes leftover after parsing attributes in process `syz.1.712'. [ 144.761923][ T8601] Cannot find map_set index 135 as target [ 144.848947][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.716'. [ 144.999643][ T8601] netlink: 72 bytes leftover after parsing attributes in process `syz.3.715'. [ 145.653666][ T8656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.727'. [ 145.733491][ T8662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.728'. [ 145.826354][ T8666] IPVS: lc: FWM 3 0x00000003 - no destination available [ 146.051418][ T8680] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.218187][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 146.234162][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 146.397359][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 146.397379][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.740'. [ 146.638662][ T8723] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.761925][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 147.312504][ T8742] 8021q: adding VLAN 0 to HW filter on device bond8 [ 147.390089][ T8742] bond8 (unregistering): Released all slaves [ 147.657222][ T8771] ip_tables: iptables: counters copy to user failed while replacing table [ 147.940814][ T8782] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 148.606298][ T8780] team0: Port device team_slave_0 removed [ 148.619283][ T8781] bridge0: port 3(syz_tun) entered blocking state [ 148.619425][ T8781] bridge0: port 3(syz_tun) entered disabled state [ 148.620302][ T8781] syz_tun: entered allmulticast mode [ 148.643131][ T8781] syz_tun: entered promiscuous mode [ 148.711322][ T8783] bridge0: port 4(ip6gretap0) entered blocking state [ 148.713463][ T8783] bridge0: port 4(ip6gretap0) entered disabled state [ 148.715158][ T8783] ip6gretap0: entered promiscuous mode [ 148.986656][ T8810] s: renamed from veth0 (while UP) [ 149.053535][ T8807] ip_tables: iptables: counters copy to user failed while replacing table [ 149.313499][ T8825] __nla_validate_parse: 6 callbacks suppressed [ 149.313518][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 149.490736][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'. [ 149.557949][ T8850] netlink: 'syz.0.776': attribute type 11 has an invalid length. [ 149.640507][ T8854] netlink: 'syz.1.778': attribute type 11 has an invalid length. [ 149.685598][ T8853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.926762][ T8876] : renamed from team_slave_1 (while UP) [ 150.312404][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 150.427076][ T8896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.429740][ T8896] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.433948][ T8896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.861312][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'. [ 151.099060][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.106411][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.111366][ T8896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.111386][ T8896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.116581][ T8896] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 151.168179][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.168289][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.170617][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.170774][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.281537][ T30] audit: type=1107 audit(1794069180.377:2): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 151.333746][ T8922] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 151.333943][ T8923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.795'. [ 151.395008][ T8922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.413741][ T13] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 151.414014][ T13] bond2: (slave veth0_to_bond): making interface the new active one [ 151.432575][ T13] bond2: active interface up! [ 151.654952][ T8945] netlink: 96 bytes leftover after parsing attributes in process `syz.2.801'. [ 151.655269][ T8945] netlink: zone id is out of range [ 151.655278][ T8945] netlink: zone id is out of range [ 151.655285][ T8945] netlink: zone id is out of range [ 151.655291][ T8945] netlink: get zone limit has 4 unknown bytes [ 151.706808][ T8951] netlink: 'syz.0.802': attribute type 15 has an invalid length. [ 151.711335][ T8952] netlink: 'syz.0.802': attribute type 15 has an invalid length. [ 151.746562][ T8952] sctp: [Deprecated]: syz.0.802 (pid 8952) Use of int in max_burst socket option. [ 151.746562][ T8952] Use struct sctp_assoc_value instead [ 151.747576][ T8957] sctp: [Deprecated]: syz.0.802 (pid 8957) Use of int in max_burst socket option. [ 151.747576][ T8957] Use struct sctp_assoc_value instead [ 151.922902][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 151.990955][ T8971] netlink: 44 bytes leftover after parsing attributes in process `syz.2.807'. [ 151.990978][ T8971] tipc: Enabling of bearer rejected, media not registered [ 151.994595][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 152.020658][ T8972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.806'. [ 152.089231][ T8976] syzkaller1: entered promiscuous mode [ 152.089253][ T8976] syzkaller1: entered allmulticast mode [ 152.349915][ T8995] FAULT_INJECTION: forcing a failure. [ 152.349915][ T8995] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 152.349944][ T8995] CPU: 0 UID: 0 PID: 8995 Comm: syz.4.813 Not tainted syzkaller #0 PREEMPT(full) [ 152.349964][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 152.349972][ T8995] Call Trace: [ 152.349978][ T8995] [ 152.349985][ T8995] dump_stack_lvl+0xe8/0x150 [ 152.350016][ T8995] should_fail_ex+0x3eb/0x540 [ 152.350042][ T8995] _copy_from_iter+0x1d3/0x1680 [ 152.350061][ T8995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.350096][ T8995] ? policy_nodemask+0x31b/0x980 [ 152.350112][ T8995] ? __pfx__copy_from_iter+0x10/0x10 [ 152.350134][ T8995] ? alloc_pages_mpol+0x256/0x390 [ 152.350161][ T8995] copy_page_from_iter+0x219/0x2d0 [ 152.350185][ T8995] tun_get_user+0x20f5/0x4430 [ 152.350209][ T8995] ? tun_get_user+0x6f9/0x4430 [ 152.350246][ T8995] ? aa_file_perm+0x4ed/0x15f0 [ 152.350265][ T8995] ? __pfx_tun_get_user+0x10/0x10 [ 152.350288][ T8995] ? __lock_acquire+0x747/0x2de0 [ 152.350320][ T8995] ? ref_tracker_alloc+0x172/0x530 [ 152.350340][ T8995] ? lock_acquire+0x115/0x350 [ 152.350359][ T8995] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 152.350381][ T8995] ? lock_acquire+0x115/0x350 [ 152.350399][ T8995] ? tun_get+0x1c/0x2f0 [ 152.350432][ T8995] ? tun_get+0x1c/0x2f0 [ 152.350452][ T8995] ? tun_get+0x1c/0x2f0 [ 152.350474][ T8995] tun_chr_write_iter+0x113/0x200 [ 152.350496][ T8995] vfs_write+0x612/0xba0 [ 152.350527][ T8995] ? __pfx_vfs_write+0x10/0x10 [ 152.350554][ T8995] ? __fget_files+0x3a2/0x420 [ 152.350575][ T8995] ? __fget_files+0x2a/0x420 [ 152.350599][ T8995] ? fdget+0x1ac/0x250 [ 152.350627][ T8995] ksys_write+0x150/0x270 [ 152.350653][ T8995] ? __pfx_ksys_write+0x10/0x10 [ 152.350688][ T8995] do_syscall_64+0x166/0x520 [ 152.350710][ T8995] ? trace_irq_disable+0x3b/0x140 [ 152.350733][ T8995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.350751][ T8995] ? clear_bhb_loop+0x70/0xc0 [ 152.350772][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.350789][ T8995] RIP: 0033:0x7f11aab6034e [ 152.350805][ T8995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.350818][ T8995] RSP: 002b:00007f11abaaefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.350837][ T8995] RAX: ffffffffffffffda RBX: 00007f11abaaf6c0 RCX: 00007f11aab6034e [ 152.350849][ T8995] RDX: 0000000000000056 RSI: 0000200000000000 RDI: 00000000000000c8 [ 152.350860][ T8995] RBP: 00007f11abaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 152.350870][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.350879][ T8995] R13: 00007f11aae26038 R14: 00007f11aae25fa0 R15: 00007fff13c96a28 [ 152.350907][ T8995] [ 152.812621][ T9003] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 153.248318][ T9022] FAULT_INJECTION: forcing a failure. [ 153.248318][ T9022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.248349][ T9022] CPU: 1 UID: 0 PID: 9022 Comm: syz.0.825 Not tainted syzkaller #0 PREEMPT(full) [ 153.248376][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 153.248386][ T9022] Call Trace: [ 153.248394][ T9022] [ 153.248402][ T9022] dump_stack_lvl+0xe8/0x150 [ 153.248433][ T9022] should_fail_ex+0x3eb/0x540 [ 153.248460][ T9022] _copy_to_user+0x31/0xb0 [ 153.248484][ T9022] simple_read_from_buffer+0xe1/0x170 [ 153.248511][ T9022] proc_fail_nth_read+0x1bb/0x230 [ 153.248533][ T9022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.248554][ T9022] ? rw_verify_area+0x24a/0x4c0 [ 153.248577][ T9022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.248593][ T9022] vfs_read+0x213/0xa80 [ 153.248619][ T9022] ? __pfx___mutex_lock+0x10/0x10 [ 153.248641][ T9022] ? __pfx_vfs_read+0x10/0x10 [ 153.248663][ T9022] ? __fget_files+0x2a/0x420 [ 153.248683][ T9022] ? __fget_files+0x3a2/0x420 [ 153.248702][ T9022] ? __fget_files+0x2a/0x420 [ 153.248727][ T9022] ? fdget+0x1ac/0x250 [ 153.248756][ T9022] ksys_read+0x150/0x270 [ 153.248782][ T9022] ? __pfx_ksys_read+0x10/0x10 [ 153.248814][ T9022] do_syscall_64+0x166/0x520 [ 153.248835][ T9022] ? trace_irq_disable+0x3b/0x140 [ 153.248856][ T9022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.248871][ T9022] ? clear_bhb_loop+0x70/0xc0 [ 153.248893][ T9022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.248909][ T9022] RIP: 0033:0x7fe9a256034e [ 153.248925][ T9022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.248938][ T9022] RSP: 002b:00007fe9a33b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.248956][ T9022] RAX: ffffffffffffffda RBX: 00007fe9a33b46c0 RCX: 00007fe9a256034e [ 153.248968][ T9022] RDX: 000000000000000f RSI: 00007fe9a33b40a0 RDI: 0000000000000004 [ 153.248979][ T9022] RBP: 00007fe9a33b4090 R08: 0000000000000000 R09: 0000000000000000 [ 153.248989][ T9022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.248998][ T9022] R13: 00007fe9a2826038 R14: 00007fe9a2825fa0 R15: 00007ffe3afa6658 [ 153.249030][ T9022] [ 153.737515][ T9045] bridge1: entered promiscuous mode [ 153.961636][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 154.118404][ T9067] bond3: (slave veth0_to_bond): Releasing active interface [ 154.138697][ T9067] bond0: (slave bond_slave_0): Releasing backup interface [ 154.160543][ T9067] bond0: (slave bond_slave_1): Releasing backup interface [ 154.198928][ T9067] team0: Port device team_slave_0 removed [ 154.246847][ T9067] team0: Port device team_slave_1 removed [ 154.247700][ T9067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.247719][ T9067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.280556][ T9067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.280591][ T9067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.290275][ T9067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.390287][ T9073] __nla_validate_parse: 6 callbacks suppressed [ 154.390306][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 154.434928][ T9077] FAULT_INJECTION: forcing a failure. [ 154.434928][ T9077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.434954][ T9077] CPU: 1 UID: 0 PID: 9077 Comm: syz.1.837 Not tainted syzkaller #0 PREEMPT(full) [ 154.434973][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 154.434982][ T9077] Call Trace: [ 154.434989][ T9077] [ 154.434996][ T9077] dump_stack_lvl+0xe8/0x150 [ 154.435028][ T9077] should_fail_ex+0x3eb/0x540 [ 154.435054][ T9077] _copy_from_iter+0x1d3/0x1680 [ 154.435075][ T9077] ? __alloc_skb+0x27a/0x7a0 [ 154.435093][ T9077] ? __alloc_skb+0x27a/0x7a0 [ 154.435112][ T9077] ? __alloc_skb+0x27a/0x7a0 [ 154.435129][ T9077] ? __pfx__copy_from_iter+0x10/0x10 [ 154.435146][ T9077] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 154.435165][ T9077] ? __alloc_skb+0x27a/0x7a0 [ 154.435180][ T9077] ? __alloc_skb+0x27a/0x7a0 [ 154.435201][ T9077] ? netlink_sendmsg+0x64f/0xb20 [ 154.435218][ T9077] ? skb_put+0x112/0x210 [ 154.435238][ T9077] netlink_sendmsg+0x6bb/0xb20 [ 154.435261][ T9077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.435291][ T9077] ? aa_sock_msg_perm+0x144/0x210 [ 154.435314][ T9077] ? apparmor_socket_sendmsg+0x18b/0x360 [ 154.435338][ T9077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.435353][ T9077] sock_sendmsg_nosec+0x14e/0x190 [ 154.435380][ T9077] ____sys_sendmsg+0x54e/0x850 [ 154.435403][ T9077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.435428][ T9077] ? import_iovec+0x73/0xa0 [ 154.435452][ T9077] ___sys_sendmsg+0x2a5/0x360 [ 154.435467][ T9077] ? __lock_acquire+0x747/0x2de0 [ 154.435493][ T9077] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.435547][ T9077] ? __fget_files+0x3a2/0x420 [ 154.435568][ T9077] ? __fget_files+0x2a/0x420 [ 154.435598][ T9077] __x64_sys_sendmsg+0x1b1/0x290 [ 154.435620][ T9077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.435662][ T9077] do_syscall_64+0x166/0x520 [ 154.435683][ T9077] ? trace_irq_disable+0x3b/0x140 [ 154.435704][ T9077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.435721][ T9077] ? clear_bhb_loop+0x70/0xc0 [ 154.435741][ T9077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.435756][ T9077] RIP: 0033:0x7f229d99fb19 [ 154.435772][ T9077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.435785][ T9077] RSP: 002b:00007f229e8ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.435803][ T9077] RAX: ffffffffffffffda RBX: 00007f229dc26090 RCX: 00007f229d99fb19 [ 154.435815][ T9077] RDX: 0000000024008050 RSI: 0000200000000980 RDI: 0000000000000006 [ 154.435826][ T9077] RBP: 00007f229e8ea090 R08: 0000000000000000 R09: 0000000000000000 [ 154.435837][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.435846][ T9077] R13: 00007f229dc26128 R14: 00007f229dc26090 R15: 00007ffe52400118 [ 154.435876][ T9077] [ 154.831180][ T9088] netlink: 48 bytes leftover after parsing attributes in process `syz.0.841'. [ 154.856323][ T9090] bridge0: port 1(bond0) entered blocking state [ 154.856491][ T9090] bridge0: port 1(bond0) entered disabled state [ 154.856656][ T9090] bond0: entered allmulticast mode [ 154.859895][ T9090] bond0: entered promiscuous mode [ 154.885253][ T5656] udevd[5656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 155.070931][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 155.155749][ T13] IPVS: starting estimator thread 0... [ 155.244162][ T9122] IPVS: using max 30 ests per chain, 72000 per kthread [ 155.441658][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 155.474936][ T9130] netlink: 88 bytes leftover after parsing attributes in process `syz.2.850'. [ 155.881876][ T9149] netlink: 32 bytes leftover after parsing attributes in process `syz.2.856'. [ 155.882092][ T9149] macvlan0: entered promiscuous mode [ 155.882620][ T9149] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 155.882638][ T9149] netlink: 'syz.2.856': attribute type 2 has an invalid length. [ 155.952458][ T9154] netlink: 68 bytes leftover after parsing attributes in process `syz.2.858'. [ 156.089387][ T9162] FAULT_INJECTION: forcing a failure. [ 156.089387][ T9162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.089413][ T9162] CPU: 1 UID: 0 PID: 9162 Comm: syz.4.859 Not tainted syzkaller #0 PREEMPT(full) [ 156.089432][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 156.089442][ T9162] Call Trace: [ 156.089449][ T9162] [ 156.089456][ T9162] dump_stack_lvl+0xe8/0x150 [ 156.089488][ T9162] should_fail_ex+0x3eb/0x540 [ 156.089516][ T9162] _copy_from_iter+0x1d3/0x1680 [ 156.089536][ T9162] ? __alloc_skb+0x27a/0x7a0 [ 156.089555][ T9162] ? __alloc_skb+0x27a/0x7a0 [ 156.089573][ T9162] ? __alloc_skb+0x27a/0x7a0 [ 156.089590][ T9162] ? __pfx__copy_from_iter+0x10/0x10 [ 156.089608][ T9162] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 156.089628][ T9162] ? __alloc_skb+0x27a/0x7a0 [ 156.089643][ T9162] ? __alloc_skb+0x27a/0x7a0 [ 156.089665][ T9162] ? netlink_sendmsg+0x64f/0xb20 [ 156.089680][ T9162] ? skb_put+0x112/0x210 [ 156.089700][ T9162] netlink_sendmsg+0x6bb/0xb20 [ 156.089722][ T9162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.089741][ T9162] ? aa_sock_msg_perm+0x144/0x210 [ 156.089762][ T9162] ? apparmor_socket_sendmsg+0x18b/0x360 [ 156.089788][ T9162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.089802][ T9162] sock_sendmsg_nosec+0x14e/0x190 [ 156.089829][ T9162] ____sys_sendmsg+0x54e/0x850 [ 156.089854][ T9162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.089884][ T9162] ? import_iovec+0x73/0xa0 [ 156.089909][ T9162] ___sys_sendmsg+0x2a5/0x360 [ 156.089926][ T9162] ? __lock_acquire+0x747/0x2de0 [ 156.089954][ T9162] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.090011][ T9162] ? __fget_files+0x3a2/0x420 [ 156.090032][ T9162] ? __fget_files+0x2a/0x420 [ 156.090063][ T9162] __x64_sys_sendmsg+0x1b1/0x290 [ 156.090085][ T9162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.090130][ T9162] do_syscall_64+0x166/0x520 [ 156.090152][ T9162] ? trace_irq_disable+0x3b/0x140 [ 156.090174][ T9162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.090192][ T9162] ? clear_bhb_loop+0x70/0xc0 [ 156.090220][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.090236][ T9162] RIP: 0033:0x7f11aab9fb19 [ 156.090253][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.090267][ T9162] RSP: 002b:00007f11aba8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.090286][ T9162] RAX: ffffffffffffffda RBX: 00007f11aae26090 RCX: 00007f11aab9fb19 [ 156.090298][ T9162] RDX: 0000000024008050 RSI: 0000200000000980 RDI: 0000000000000006 [ 156.090309][ T9162] RBP: 00007f11aba8e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.090319][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.090329][ T9162] R13: 00007f11aae26128 R14: 00007f11aae26090 R15: 00007fff13c96a28 [ 156.090359][ T9162] [ 156.165974][ T9165] sit0: entered promiscuous mode [ 156.166119][ T9165] netlink: 'syz.0.862': attribute type 1 has an invalid length. [ 156.166133][ T9165] netlink: 1 bytes leftover after parsing attributes in process `syz.0.862'. [ 156.432237][ T9170] erspan1: entered promiscuous mode [ 156.554865][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 157.634525][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.883'. [ 157.816252][ T9254] netlink: 'syz.1.886': attribute type 4 has an invalid length. [ 158.226540][ T9275] pim6reg: entered allmulticast mode [ 158.230901][ T9275] pim6reg: left allmulticast mode [ 158.255706][ T30] audit: type=1804 audit(1794069187.357:3): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.894" name="/newroot/173/cgroup.controllers" dev="tmpfs" ino=909 res=1 errno=0 [ 158.256640][ T30] audit: type=1800 audit(1794069187.357:4): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.894" name="cgroup.controllers" dev="tmpfs" ino=909 res=0 errno=-22 [ 158.264194][ T9277] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 158.272705][ T9277] team0: Port device dummy0 added [ 158.275376][ T9277] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 158.306623][ T9277] team0: Port device dummy0 removed [ 158.627680][ T9297] Bluetooth: MGMT ver 1.23 [ 159.098825][ T9304] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 159.104689][ T9304] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 159.460520][ T9335] __nla_validate_parse: 1 callbacks suppressed [ 159.460540][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 159.463805][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 159.603573][ T9343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.911'. [ 160.017747][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 160.021162][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 160.032554][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 160.039544][ T9373] netlink: 68 bytes leftover after parsing attributes in process `syz.3.921'. [ 160.078375][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 160.078629][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 160.078849][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 160.231419][ T9386] netlink: 'syz.0.924': attribute type 49 has an invalid length. [ 160.248497][ T9386] bond0: (slave bond_slave_0): Releasing backup interface [ 160.295913][ T9386] bond_slave_0: entered promiscuous mode [ 160.295936][ T9386] bond_slave_0: entered allmulticast mode [ 160.738736][ T9418] batadv_slave_1: entered promiscuous mode [ 160.738915][ T9418] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 160.893383][ T9426] bridge_slave_1: left allmulticast mode [ 160.893406][ T9426] bridge_slave_1: left promiscuous mode [ 160.893628][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.926712][ T9426] bridge_slave_0: left allmulticast mode [ 160.926737][ T9426] bridge_slave_0: left promiscuous mode [ 160.927867][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.308410][ T9451] dvmrp6: entered allmulticast mode [ 161.507448][ T9454] syzkaller0: entered promiscuous mode [ 161.507466][ T9454] syzkaller0: entered allmulticast mode [ 163.187185][ T9507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.199167][ T9517] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 163.347567][ T5001] udevd[5001]: worker [5654] /devices/virtual/block/nbd0 is taking a long time [ 164.204919][ T9579] tc_dump_action: action bad kind [ 164.258662][ T9583] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 164.258876][ T9583] ip6t_rt: address list match requested but addrnr is 0 [ 165.119523][ T9646] __nla_validate_parse: 75 callbacks suppressed [ 165.119541][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 165.119553][ T9646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.987'. [ 165.474716][ T9662] netlink: 'syz.3.992': attribute type 3 has an invalid length. [ 165.728371][ T9672] netlink: 'syz.3.996': attribute type 32 has an invalid length. [ 165.728393][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 165.810544][ T9672] bond1: option coupled_control: invalid value (10) [ 165.845404][ T9672] bond1 (unregistering): Released all slaves [ 165.900086][ T9676] netlink: 52 bytes leftover after parsing attributes in process `syz.4.997'. [ 165.978587][ T9682] netlink: 52 bytes leftover after parsing attributes in process `syz.4.997'. [ 166.249922][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 166.298900][ T9699] netlink: 'syz.4.1002': attribute type 21 has an invalid length. [ 166.298925][ T9699] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.333011][ T9699] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 166.335519][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 166.335548][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 166.369721][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'. [ 166.466766][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 166.498247][ T9711] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 166.507145][ T9699] netlink: 'syz.4.1002': attribute type 21 has an invalid length. [ 166.511981][ T82] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.518101][ T82] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.518153][ T82] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.518181][ T82] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.682965][ T9726] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 167.050726][ T9751] geneve1: entered promiscuous mode [ 168.041696][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 169.002443][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.009687][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.009734][ T9846] batadv_slave_1: left promiscuous mode [ 169.080148][ T9846] macvlan0: left promiscuous mode [ 169.156356][ T9846] bond1: left promiscuous mode [ 169.156378][ T9846] bridge2: left promiscuous mode [ 169.209905][ T9846] bond5: left promiscuous mode [ 169.209927][ T9846] geneve3: left promiscuous mode [ 169.230389][ T9846] bond6: left promiscuous mode [ 169.241196][ T9846] gretap1: left promiscuous mode [ 169.261726][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.261756][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 169.261802][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.261823][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 169.261853][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.261874][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 169.261904][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.261924][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 170.200541][ T9901] __nla_validate_parse: 9 callbacks suppressed [ 170.200560][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 170.231743][ T9901] gretap2: entered promiscuous mode [ 170.405242][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 170.531385][ T9907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1059'. [ 170.717694][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1062'. [ 170.851032][ T9939] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.864616][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 171.012012][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 171.024164][ T9941] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 171.122507][ T9943] xt_connbytes: Forcing CT accounting to be enabled [ 171.122726][ T9943] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 171.565216][ T9966] netlink: 'syz.4.1071': attribute type 11 has an invalid length. [ 171.990470][ T9996] tipc: Can't bind to reserved service type 0 [ 171.998201][ T9993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1076'. [ 172.325989][T10008] xt_connbytes: Forcing CT accounting to be enabled [ 172.326013][T10008] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 175.028159][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 175.028193][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 175.093083][ T82] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 175.095664][ T43] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 175.095698][ T43] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 175.095726][ T43] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 175.108255][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 175.182307][T10054] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 175.226524][T10056] xt_connbytes: Forcing CT accounting to be enabled [ 175.226557][T10056] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 175.263612][T10054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.317728][T10059] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 175.333704][T10054] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 175.362553][ T43] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.485058][ T43] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.590422][T10079] __nla_validate_parse: 1 callbacks suppressed [ 175.590440][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 175.733931][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 175.737866][T10091] batman_adv: batadv0: Adding interface: veth0 [ 175.737881][T10091] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.737906][T10091] batman_adv: batadv0: Interface activated: veth0 [ 175.738456][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 175.738654][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 175.738897][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 175.739092][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 175.739278][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 175.739478][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 175.739675][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 175.740019][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 175.760664][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.760688][T10091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.805722][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.805744][T10091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.828211][T10091] batman_adv: batadv0: Interface deactivated: gretap1 [ 175.828233][T10091] batman_adv: batadv0: Removing interface: gretap1 [ 175.850757][T10091] batman_adv: batadv0: Interface deactivated: veth0 [ 175.850776][T10091] batman_adv: batadv0: Removing interface: veth0 [ 176.228450][T10106] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.457800][T10120] netlink: 'syz.0.1111': attribute type 15 has an invalid length. [ 176.693273][T10135] netlink: 'syz.1.1117': attribute type 8 has an invalid length. [ 176.867636][T10141] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 176.965881][T10159] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 177.569599][T10196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.576615][T10196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.626855][T10196] batadv0 (unregistering): left promiscuous mode [ 177.752219][T10193] bond5: option lacp_active: invalid value (5) [ 177.755666][T10193] bond5 (unregistering): Released all slaves [ 177.832370][T10206] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 177.940682][T10204] syzkaller0: entered promiscuous mode [ 177.940704][T10204] syzkaller0: entered allmulticast mode [ 178.280017][T10227] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 178.280037][T10227] netlink: 'syz.1.1143': attribute type 268 has an invalid length. [ 178.356836][T10223] syzkaller0: entered promiscuous mode [ 178.356861][T10223] syzkaller0: entered allmulticast mode [ 178.643360][T10244] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 180.466784][T10300] xt_connbytes: Forcing CT accounting to be enabled [ 180.466810][T10300] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 180.945262][T10327] netlink: 'syz.1.1165': attribute type 21 has an invalid length. [ 180.945338][T10327] __nla_validate_parse: 67 callbacks suppressed [ 180.945348][T10327] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1165'. [ 180.945593][T10328] netlink: 'syz.1.1165': attribute type 21 has an invalid length. [ 180.945628][T10328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1165'. [ 181.070489][T10333] netlink: 'syz.0.1166': attribute type 4 has an invalid length. [ 181.297416][T10349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.302371][T10349] sit0: left promiscuous mode [ 181.371030][T10359] sctp: [Deprecated]: syz.0.1171 (pid 10359) Use of int in max_burst socket option. [ 181.371030][T10359] Use struct sctp_assoc_value instead [ 181.408001][T10354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1172'. [ 181.652974][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 181.655990][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1174'. [ 181.656320][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1174'. [ 181.718197][T10372] syzkaller0: entered promiscuous mode [ 181.718219][T10372] syzkaller0: entered allmulticast mode [ 182.230778][T10402] IPVS: Error connecting to the multicast addr [ 182.247242][T10403] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 182.374460][T10409] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1184'. [ 182.678186][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 183.772710][T10433] tipc: Started in network mode [ 183.772739][T10433] tipc: Node identity ac14140f, cluster identity 4711 [ 183.772972][T10433] tipc: New replicast peer: 255.255.255.255 [ 183.773567][T10433] tipc: Enabled bearer , priority 10 [ 183.972518][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 183.976753][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1193'. [ 184.384063][T10467] 8021q: VLANs not supported on vxcan1 [ 184.403234][T10460] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.891812][ T7693] tipc: Node number set to 2886997007 [ 185.105576][T10510] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 185.558799][T10537] syzkaller1: entered promiscuous mode [ 185.558820][T10537] syzkaller1: entered allmulticast mode [ 185.584666][T10539] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 185.616427][T10539] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (h\E3~ϱoR!Fo?< [ 186.618748][T10589] __nla_validate_parse: 5 callbacks suppressed [ 186.618768][T10589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'. [ 186.733217][T10600] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1236'. [ 187.843868][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 187.868939][T10654] netlink: 'syz.3.1247': attribute type 29 has an invalid length. [ 187.868959][T10654] netlink: 'syz.3.1247': attribute type 31 has an invalid length. [ 187.868971][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1247'. [ 187.986428][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 188.018656][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 188.041197][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 188.069324][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 188.091911][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 188.111619][T10666] netlink: 'syz.3.1251': attribute type 8 has an invalid length. [ 188.123733][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 188.127269][T10669] netlink: 'syz.3.1251': attribute type 8 has an invalid length. [ 188.547102][T10683] Bluetooth: hci0: unsupported parameter 5134 [ 188.547123][T10683] Bluetooth: hci0: unsupported parameter 8192 [ 188.547150][T10683] Bluetooth: hci0: unsupported parameter 5134 [ 188.547161][T10683] Bluetooth: hci0: unsupported parameter 8192 [ 189.217402][T10709] bond5 (unregistering): Released all slaves [ 189.392775][T10720] netlink: 'syz.3.1268': attribute type 8 has an invalid length. [ 189.599354][T10704] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 189.685736][T10731] ipvlan0: entered promiscuous mode [ 189.685759][T10731] ipvlan0: entered allmulticast mode [ 189.685770][T10731] veth0_vlan: entered allmulticast mode [ 189.685957][T10731] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 190.311836][T10752] can: request_module (can-proto-4) failed. [ 190.346228][T10749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.930691][T10802] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.091924][T10827] __nla_validate_parse: 28 callbacks suppressed [ 192.091942][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1292'. [ 192.098335][T10831] FAULT_INJECTION: forcing a failure. [ 192.098335][T10831] name failslab, interval 1, probability 0, space 0, times 1 [ 192.098360][T10831] CPU: 0 UID: 0 PID: 10831 Comm: syz.2.1295 Not tainted syzkaller #0 PREEMPT(full) [ 192.098381][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 192.098391][T10831] Call Trace: [ 192.098398][T10831] [ 192.098405][T10831] dump_stack_lvl+0xe8/0x150 [ 192.098438][T10831] should_fail_ex+0x3eb/0x540 [ 192.098464][T10831] should_failslab+0xa8/0x100 [ 192.098483][T10831] __kmalloc_noprof+0xf9/0x710 [ 192.098503][T10831] ? string+0x28a/0x2d0 [ 192.098521][T10831] ? diag_fmt_alloc+0x1ff/0x570 [ 192.098543][T10831] ? diag_fmt_alloc+0x1ff/0x570 [ 192.098572][T10831] diag_fmt_alloc+0x1ff/0x570 [ 192.098604][T10831] bpf_diag_fmt+0x179/0x220 [ 192.098632][T10831] ? __pfx_bpf_diag_fmt+0x10/0x10 [ 192.098676][T10831] check_reg_type+0xa23/0xfb0 [ 192.098708][T10831] check_func_args+0x1d23/0x6c60 [ 192.098780][T10831] ? __pfx_check_func_args+0x10/0x10 [ 192.098808][T10831] ? check_arg_prog_aux+0x107/0x630 [ 192.098831][T10831] check_helper_call+0x2059/0x61e0 [ 192.098875][T10831] ? __pfx_check_helper_call+0x10/0x10 [ 192.098922][T10831] ? __asan_memcpy+0x40/0x70 [ 192.098944][T10831] ? vsnprintf+0xe42/0xef0 [ 192.098973][T10831] do_check_insn+0x2949/0xb800 [ 192.099010][T10831] ? verbose+0x11d/0x1a0 [ 192.099033][T10831] ? __pfx_do_check_insn+0x10/0x10 [ 192.099057][T10831] ? __pfx_verbose+0x10/0x10 [ 192.099081][T10831] ? bpf_vlog_reset+0x1db/0x340 [ 192.099103][T10831] ? print_insn_state+0x106/0x170 [ 192.099125][T10831] do_check_common+0x557a/0x7590 [ 192.099195][T10831] ? __pfx_do_check_common+0x10/0x10 [ 192.099215][T10831] ? __pfx_verbose+0x10/0x10 [ 192.099236][T10831] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 192.099275][T10831] ? mark_fastcall_patterns+0x10e1/0x1140 [ 192.099313][T10831] do_check_main+0x95/0x1f0 [ 192.099335][T10831] bpf_check+0x302b/0x34e0 [ 192.099363][T10831] ? ktime_get_with_offset+0x93/0x2d0 [ 192.099386][T10831] ? ktime_get_with_offset+0x93/0x2d0 [ 192.099409][T10831] ? __pfx_bpf_check+0x10/0x10 [ 192.099430][T10831] ? bpf_obj_name_cpy+0x194/0x1e0 [ 192.099455][T10831] bpf_prog_load+0x14da/0x1c60 [ 192.099483][T10831] ? __pfx_bpf_prog_load+0x10/0x10 [ 192.099516][T10831] ? __might_fault+0xaf/0x130 [ 192.099542][T10831] __sys_bpf+0xd86/0xe00 [ 192.099566][T10831] ? __pfx___sys_bpf+0x10/0x10 [ 192.099597][T10831] ? __fget_files+0x2a/0x420 [ 192.099637][T10831] ? ksys_write+0x242/0x270 [ 192.099662][T10831] ? __pfx_ksys_write+0x10/0x10 [ 192.099690][T10831] __x64_sys_bpf+0xba/0xd0 [ 192.099717][T10831] do_syscall_64+0x166/0x520 [ 192.099737][T10831] ? trace_irq_disable+0x3b/0x140 [ 192.099758][T10831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.099775][T10831] ? clear_bhb_loop+0x70/0xc0 [ 192.099797][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.099813][T10831] RIP: 0033:0x7f51f2f9fb19 [ 192.099830][T10831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.099844][T10831] RSP: 002b:00007f51f3dc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.099863][T10831] RAX: ffffffffffffffda RBX: 00007f51f3225fa0 RCX: 00007f51f2f9fb19 [ 192.099875][T10831] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 192.099885][T10831] RBP: 00007f51f3dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 192.099896][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.099905][T10831] R13: 00007f51f3226038 R14: 00007f51f3225fa0 R15: 00007ffc1f332e38 [ 192.099935][T10831] [ 192.587563][T10845] syzkaller0: entered promiscuous mode [ 192.587588][T10845] syzkaller0: entered allmulticast mode [ 192.805677][T10866] netlink: 'syz.0.1302': attribute type 11 has an invalid length. [ 192.882964][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 193.043425][T10882] FAULT_INJECTION: forcing a failure. [ 193.043425][T10882] name failslab, interval 1, probability 0, space 0, times 0 [ 193.043452][T10882] CPU: 1 UID: 0 PID: 10882 Comm: syz.0.1307 Not tainted syzkaller #0 PREEMPT(full) [ 193.043472][T10882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 193.043481][T10882] Call Trace: [ 193.043487][T10882] [ 193.043495][T10882] dump_stack_lvl+0xe8/0x150 [ 193.043527][T10882] should_fail_ex+0x3eb/0x540 [ 193.043554][T10882] should_failslab+0xa8/0x100 [ 193.043573][T10882] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 193.043597][T10882] ? diag_reason+0x15d/0x250 [ 193.043619][T10882] ? diag_reason+0x15d/0x250 [ 193.043650][T10882] kvasprintf+0xeb/0x1a0 [ 193.043675][T10882] ? __pfx_kvasprintf+0x10/0x10 [ 193.043709][T10882] diag_reason+0x15d/0x250 [ 193.043743][T10882] ? __pfx_bpf_diag_fmt+0x10/0x10 [ 193.043770][T10882] ? __pfx_diag_reason+0x10/0x10 [ 193.043796][T10882] ? vsnprintf+0xe42/0xef0 [ 193.043822][T10882] bpf_diag_call_type+0x4db/0x6f0 [ 193.043854][T10882] ? __pfx_bpf_diag_call_type+0x10/0x10 [ 193.043893][T10882] bpf_diag_call_arg_fmt+0x256/0x2e0 [ 193.043921][T10882] ? __pfx_bpf_diag_fmt+0x10/0x10 [ 193.043948][T10882] ? __pfx_bpf_diag_call_arg_fmt+0x10/0x10 [ 193.043971][T10882] ? diag_fmt_alloc+0x4dd/0x570 [ 193.044004][T10882] check_reg_type+0xcf7/0xfb0 [ 193.044035][T10882] check_func_args+0x1d23/0x6c60 [ 193.044107][T10882] ? __pfx_check_func_args+0x10/0x10 [ 193.044134][T10882] ? check_arg_prog_aux+0x107/0x630 [ 193.044159][T10882] check_helper_call+0x2059/0x61e0 [ 193.044203][T10882] ? __pfx_check_helper_call+0x10/0x10 [ 193.044251][T10882] ? __asan_memcpy+0x40/0x70 [ 193.044275][T10882] ? vsnprintf+0xe42/0xef0 [ 193.044303][T10882] do_check_insn+0x2949/0xb800 [ 193.044341][T10882] ? verbose+0x11d/0x1a0 [ 193.044364][T10882] ? __pfx_do_check_insn+0x10/0x10 [ 193.044389][T10882] ? __pfx_verbose+0x10/0x10 [ 193.044414][T10882] ? bpf_vlog_reset+0x1db/0x340 [ 193.044436][T10882] ? print_insn_state+0x106/0x170 [ 193.044459][T10882] do_check_common+0x557a/0x7590 [ 193.044531][T10882] ? __pfx_do_check_common+0x10/0x10 [ 193.044552][T10882] ? __pfx_verbose+0x10/0x10 [ 193.044573][T10882] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 193.044607][T10882] ? mark_fastcall_patterns+0x10e1/0x1140 [ 193.044645][T10882] do_check_main+0x95/0x1f0 [ 193.044669][T10882] bpf_check+0x302b/0x34e0 [ 193.044698][T10882] ? ktime_get_with_offset+0x93/0x2d0 [ 193.044720][T10882] ? ktime_get_with_offset+0x93/0x2d0 [ 193.044750][T10882] ? __pfx_bpf_check+0x10/0x10 [ 193.044770][T10882] ? bpf_obj_name_cpy+0x194/0x1e0 [ 193.044795][T10882] bpf_prog_load+0x14da/0x1c60 [ 193.044825][T10882] ? __pfx_bpf_prog_load+0x10/0x10 [ 193.044859][T10882] ? __might_fault+0xaf/0x130 [ 193.044885][T10882] __sys_bpf+0xd86/0xe00 [ 193.044910][T10882] ? __pfx___sys_bpf+0x10/0x10 [ 193.044938][T10882] ? __fget_files+0x2a/0x420 [ 193.044977][T10882] ? ksys_write+0x242/0x270 [ 193.045003][T10882] ? __pfx_ksys_write+0x10/0x10 [ 193.045030][T10882] __x64_sys_bpf+0xba/0xd0 [ 193.045057][T10882] do_syscall_64+0x166/0x520 [ 193.045078][T10882] ? trace_irq_disable+0x3b/0x140 [ 193.045101][T10882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.045118][T10882] ? clear_bhb_loop+0x70/0xc0 [ 193.045140][T10882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.045157][T10882] RIP: 0033:0x7fe9a259fb19 [ 193.045174][T10882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.045188][T10882] RSP: 002b:00007fe9a33b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.045208][T10882] RAX: ffffffffffffffda RBX: 00007fe9a2825fa0 RCX: 00007fe9a259fb19 [ 193.045220][T10882] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 193.045231][T10882] RBP: 00007fe9a33b4090 R08: 0000000000000000 R09: 0000000000000000 [ 193.045241][T10882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.045251][T10882] R13: 00007fe9a2826038 R14: 00007fe9a2825fa0 R15: 00007ffe3afa6658 [ 193.045281][T10882] [ 193.139090][T10888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1306'. [ 193.487117][T10896] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1313'. [ 193.567530][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1314'. [ 193.937106][T10920] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1319'. [ 193.937129][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 193.940389][T10922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1319'. [ 194.349390][T10928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1321'. [ 194.352184][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 196.439159][T10956] openvswitch: netlink: Flow actions attr not present in new flow. [ 196.439531][T10956] netlink: 'syz.4.1325': attribute type 4 has an invalid length. [ 196.468761][T10956] netlink: 'syz.4.1325': attribute type 4 has an invalid length. [ 196.544517][T10939] gretap0: left promiscuous mode [ 196.686695][T10939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.694236][T10939] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.801913][T10939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.801938][T10939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.809176][T10939] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 196.841706][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 196.939719][T10966] bridge_slave_1: left allmulticast mode [ 196.939746][T10966] bridge_slave_1: left promiscuous mode [ 196.939965][T10966] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.975741][T10966] bridge_slave_0: left allmulticast mode [ 196.975767][T10966] bridge_slave_0: left promiscuous mode [ 196.975967][T10966] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.375085][T10988] __nla_validate_parse: 9 callbacks suppressed [ 197.375103][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 197.542391][T11003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.712393][T11015] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.714662][T11011] skbuff: bad partial csum: csum=65535/2 headroom=2 headlen=65543 [ 197.719110][T11011] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1339'. [ 197.747022][T11016] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 197.747043][T11016] netlink: 'syz.1.1341': attribute type 2 has an invalid length. [ 197.849078][T11019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1338'. [ 198.140030][T11034] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 198.184736][T11034] team0: No ports can be present during mode change [ 198.188621][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'. [ 198.193048][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1346'. [ 198.195451][T11034] vlan0: entered promiscuous mode [ 198.199435][T11034] tipc: Enabled bearer , priority 0 [ 198.235126][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 198.257922][T11038] syz_tun (unregistering): left allmulticast mode [ 198.257946][T11038] syz_tun (unregistering): left promiscuous mode [ 198.258034][T11038] bridge0: port 3(syz_tun) entered disabled state [ 198.403120][T11042] hsr_slave_0: left promiscuous mode [ 198.418071][T11042] hsr_slave_1: left promiscuous mode [ 198.532798][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 198.965863][T11072] Cannot find del_set index 0 as target [ 199.091761][T11057] bond0: entered promiscuous mode [ 199.091782][T11057] bond_slave_0: entered promiscuous mode [ 199.091980][T11057] bond_slave_1: entered promiscuous mode [ 200.439676][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'. [ 200.569786][T11121] bridge0 (unregistering): left allmulticast mode [ 200.894634][T11153] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 200.996616][T11160] netlink: Conntrack attr has 8 unknown bytes [ 201.147313][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1375'. [ 201.295398][T11168] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1376'. [ 201.680493][T11194] pim6reg1: entered promiscuous mode [ 201.680515][T11194] pim6reg1: entered allmulticast mode [ 201.746936][T11197] syzkaller1: entered promiscuous mode [ 201.746958][T11197] syzkaller1: entered allmulticast mode [ 201.999456][T11211] unsupported nlmsg_type 40 [ 202.565080][T11232] __nla_validate_parse: 3 callbacks suppressed [ 202.565098][T11232] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.1396'. [ 202.565314][T11232] 0XD: renamed from gretap0 (while UP) [ 202.580870][T11232] 0XD: entered allmulticast mode [ 202.731278][T11243] syzkaller1: entered promiscuous mode [ 202.731299][T11243] syzkaller1: entered allmulticast mode [ 202.756352][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1397'. [ 202.814816][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 202.870215][T11248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1399'. [ 202.873739][T11248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1399'. [ 202.983183][ T30] audit: type=1800 audit(1794069232.087:5): pid=11255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1401" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1519 res=0 errno=-22 [ 203.720303][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1410'. [ 203.928249][T11291] ip_tables: iptables: counters copy to user failed while replacing table [ 204.462921][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1420'. [ 204.474733][T11304] netlink: 'syz.3.1417': attribute type 1 has an invalid length. [ 204.616971][T11304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.672632][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 204.770674][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1422'. [ 205.110629][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1425'. [ 205.204554][T11342] netlink: 'syz.3.1427': attribute type 10 has an invalid length. [ 205.228994][T11343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.229011][T11343] IPv6: NLM_F_CREATE should be set when creating new route [ 205.981345][T11371] syzkaller1: entered promiscuous mode [ 205.981367][T11371] syzkaller1: entered allmulticast mode [ 206.144001][T11388] netlink: 'syz.1.1438': attribute type 2 has an invalid length. [ 206.144022][T11388] netlink: 'syz.1.1438': attribute type 1 has an invalid length. [ 206.209690][T11390] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.266789][T11392] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 206.296082][T11392] netlink: 'syz.2.1439': attribute type 1 has an invalid length. [ 206.307603][T11390] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.426236][ T53] block nbd1: Receive control failed (result -107) [ 206.428226][T11392] 8021q: adding VLAN 0 to HW filter on device bond10 [ 206.448115][T11404] bond10: entered promiscuous mode [ 206.448135][T11404] bond10: entered allmulticast mode [ 206.469376][T11390] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.497627][T11405] syzkaller0: entered promiscuous mode [ 206.497648][T11405] syzkaller0: entered allmulticast mode [ 206.545595][T11390] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.549069][T11412] sctp: [Deprecated]: syz.3.1445 (pid 11412) Use of int in max_burst socket option. [ 206.549069][T11412] Use struct sctp_assoc_value instead [ 206.796834][T11417] 8021q: adding VLAN 0 to HW filter on device bond11 [ 206.825925][T10582] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.871572][T10582] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.891862][T10582] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.891952][T10582] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.958060][T11433] tipc: Enabling of bearer rejected, failed to enable media [ 207.219705][T11462] ip6t_hbh: too many supported opts specified [ 207.479828][T11473] netlink: 'syz.1.1459': attribute type 219 has an invalid length. [ 207.946184][T11460] tipc: Resetting bearer [ 207.958493][T11483] tipc: Failed to remove unknown binding: 66,0,2/0:2611855614/2611855615 [ 207.959205][T11483] tipc: Failed to remove unknown binding: 66,0,2/0:2611855614/2611855615 [ 208.079448][T11483] __nla_validate_parse: 11 callbacks suppressed [ 208.079467][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 208.079480][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 208.086386][ T53] block nbd2: Receive control failed (result -32) [ 208.089174][ T5640] block nbd2: Receive control failed (result -32) [ 208.183284][ T82] IPVS: starting estimator thread 0... [ 208.273866][T11488] IPVS: using max 26 ests per chain, 62400 per kthread [ 208.614357][T11507] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 208.704174][T11513] sctp: [Deprecated]: syz.0.1470 (pid 11513) Use of int in max_burst socket option. [ 208.704174][T11513] Use struct sctp_assoc_value instead [ 208.704206][T11513] sctp: [Deprecated]: syz.0.1470 (pid 11513) Use of int in max_burst socket option. [ 208.704206][T11513] Use struct sctp_assoc_value instead [ 208.704226][T11513] sctp: [Deprecated]: syz.0.1470 (pid 11513) Use of int in max_burst socket option. [ 208.704226][T11513] Use struct sctp_assoc_value instead [ 208.704246][T11513] sctp: [Deprecated]: syz.0.1470 (pid 11513) Use of int in max_burst socket option. [ 208.704246][T11513] Use struct sctp_assoc_value instead [ 208.704265][T11513] sctp: [Deprecated]: syz.0.1470 (pid 11513) Use of int in max_burst socket option. [ 208.704265][T11513] Use struct sctp_assoc_value instead [ 208.704285][T11513] sctp: [Deprecated]: syz.0.1470 (pid 11513) Use of int in max_burst socket option. [ 208.704285][T11513] Use struct sctp_assoc_value instead [ 208.704304][T11513] sctp: [Deprecated]: syz.0.1470 (pid 11513) Use of int in max_burst socket option. [ 208.704304][T11513] Use struct sctp_assoc_value instead [ 208.704324][T11513] sctp: [Deprecated]: syz.0.1470 (pid 11513) Use of int in max_burst socket option. [ 208.704324][T11513] Use struct sctp_assoc_value instead [ 208.704343][T11513] sctp: [Deprecated]: syz.0.1470 (pid 11513) Use of int in max_burst socket option. [ 208.704343][T11513] Use struct sctp_assoc_value instead [ 208.880359][T11524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1472'. [ 209.060398][T11534] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 209.060917][T11534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.328546][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'. [ 209.329017][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'. [ 210.351521][ T30] audit: type=1800 audit(1794069239.447:6): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1479" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1576 res=0 errno=-22 [ 210.427880][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 210.430324][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 210.531239][T11574] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1483'. [ 210.531264][T11574] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1483'. [ 211.050471][T11596] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1488'. [ 212.356311][T11640] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.356446][T11640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.356457][T11640] IPv6: NLM_F_CREATE should be set when creating new route [ 212.464369][T11642] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 212.471374][T11642] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 212.582140][T11648] ip_tables: iptables: counters copy to user failed while replacing table [ 212.631885][T11658] IPVS: set_ctl: invalid protocol: 0 172.20.20.55:20003 [ 213.464381][T11692] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 213.465784][T11689] IPVS: stopping backup sync thread 11692 ... [ 213.884638][T11708] x_tables: duplicate underflow at hook 2 [ 213.930254][T11707] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:3 [ 213.938039][T11707] __nla_validate_parse: 3 callbacks suppressed [ 213.938056][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1521'. [ 214.007717][T11707] netlink: 'syz.3.1521': attribute type 1 has an invalid length. [ 214.129241][T11707] bond2: option min_links: invalid value (18446744073709551612) [ 214.129267][T11707] bond2: option min_links: allowed values 0 - 2147483647 [ 214.150685][T11707] bond2 (unregistering): Released all slaves [ 214.389943][T11720] syzkaller0: entered promiscuous mode [ 214.389987][T11720] syzkaller0: entered allmulticast mode [ 214.925611][T11744] syzkaller1: entered promiscuous mode [ 214.925633][T11744] syzkaller1: entered allmulticast mode [ 215.262795][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 215.273169][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 215.467476][T11755] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.586279][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'. [ 215.654217][T11778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.113236][T11797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1545'. [ 216.378429][T11803] xt_hashlimit: size too large, truncated to 1048576 [ 216.562696][T11808] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.1548'. [ 216.562726][T11808] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.1548'. [ 216.912087][T11815] sock: sock_timestamping_bind_phc: sock not bind to device [ 216.989793][T11822] netlink: 'syz.1.1552': attribute type 32 has an invalid length. [ 217.228908][T11830] syzkaller1: entered promiscuous mode [ 217.228929][T11830] syzkaller1: entered allmulticast mode [ 217.296017][T11830] syzkaller1: left promiscuous mode [ 217.296038][T11830] syzkaller1: left allmulticast mode [ 217.518381][T11836] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 217.605033][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1559'. [ 217.798438][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 217.811782][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 217.834558][T11863] IPVS: Error connecting to the multicast addr [ 219.518924][T11943] ip_tables: iptables: counters copy to user failed while replacing table [ 219.636642][T11948] __nla_validate_parse: 4 callbacks suppressed [ 219.636662][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 220.201337][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 220.227485][T11972] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 220.230701][T11972] 0XD: entered promiscuous mode [ 220.247991][T11972] 0XD: left promiscuous mode [ 220.264719][T11972] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 220.448253][T11975] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1584'. [ 220.491903][T11975] syzkaller1: entered promiscuous mode [ 220.491924][T11975] syzkaller1: entered allmulticast mode [ 220.575336][ T5296] veth0_vlan: left promiscuous mode [ 220.594626][ T7693] veth0_vlan: entered promiscuous mode [ 220.793760][T11992] syzkaller0: entered promiscuous mode [ 220.793783][T11992] syzkaller0: entered allmulticast mode [ 221.367005][T12030] pimreg9: entered allmulticast mode [ 221.900637][T12049] ip_tables: iptables: counters copy to user failed while replacing table [ 221.920711][T12056] syz.1.1605 (12056) used obsolete PPPIOCDETACH ioctl [ 221.921187][T12056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.109751][T12065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.142670][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 222.279399][T12078] team0 (unregistering): Port device team_slave_0 removed [ 222.329437][T12078] team0 (unregistering): Port device team_slave_1 removed [ 222.558755][T12091] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1614'. [ 222.561380][T12091] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1614'. [ 223.160108][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 223.387999][T12130] netlink: 'syz.3.1624': attribute type 4 has an invalid length. [ 223.388020][T12130] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1624'. [ 223.388362][T12130] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 223.447444][T12132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1624'. [ 224.017367][T12167] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.366117][T12228] TCP: TCP_TX_DELAY enabled [ 225.404323][T12227] bond5: Removing last ns target with arp_interval on [ 225.469989][T12235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1651'. [ 225.703787][T12250] netlink: 'syz.3.1654': attribute type 21 has an invalid length. [ 225.703811][T12250] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.703899][T12250] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 225.988322][T12251] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.012408][T12251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1655'. [ 226.585715][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'. [ 226.826594][T12286] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1663'. [ 227.043206][T12294] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1664'. [ 227.513514][T12293] hsr0: entered promiscuous mode [ 227.515539][T12294] hsr_slave_0: left promiscuous mode [ 227.517841][T12294] hsr_slave_1: left promiscuous mode [ 227.550583][T12294] hsr0 (unregistering): left promiscuous mode [ 228.384434][T12308] netlink: 'syz.1.1668': attribute type 6 has an invalid length. [ 228.387436][T12312] netlink: 'syz.1.1668': attribute type 6 has an invalid length. [ 228.544364][T12322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1669'. [ 228.575005][T12329] netlink: 'syz.2.1671': attribute type 34 has an invalid length. [ 228.575025][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 228.689250][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1675'. [ 228.697028][T12329] netlink: 'syz.2.1671': attribute type 1 has an invalid length. [ 228.711836][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.769598][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.823953][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.988796][T12347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1676'. [ 229.074857][T12352] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 229.117835][T12352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1677'. [ 229.285913][T12370] : renamed from bond_slave_0 [ 229.859518][T12401] ip6gretap3: entered allmulticast mode [ 229.905158][T12399] netlink: 'syz.3.1692': attribute type 2 has an invalid length. [ 230.311724][T12436] 8021q: VLANs not supported on vcan0 [ 230.556925][T12457] __nla_validate_parse: 6 callbacks suppressed [ 230.556942][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1709'. [ 230.556991][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1709'. [ 230.609624][T12458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1709'. [ 230.609654][T12458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1709'. [ 230.720487][T12463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1711'. [ 230.720518][T12463] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1711'. [ 230.724427][T12463] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1711'. [ 230.830652][T12463] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1711'. [ 230.888346][T12468] syz.2.1713: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 230.888472][T12468] CPU: 1 UID: 0 PID: 12468 Comm: syz.2.1713 Not tainted syzkaller #0 PREEMPT(full) [ 230.888493][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 230.888503][T12468] Call Trace: [ 230.888511][T12468] [ 230.888519][T12468] dump_stack_lvl+0xe8/0x150 [ 230.888552][T12468] warn_alloc+0x24d/0x270 [ 230.888574][T12468] ? stack_depot_save_flags+0x33/0x810 [ 230.888604][T12468] ? __pfx_warn_alloc+0x10/0x10 [ 230.888624][T12468] ? kasan_save_track+0x4f/0x80 [ 230.888648][T12468] ? __kasan_kmalloc+0x93/0xb0 [ 230.888674][T12468] ? xsk_init_queue+0x8a/0xe0 [ 230.888693][T12468] ? xsk_setsockopt+0x52a/0x960 [ 230.888713][T12468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.888745][T12468] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 230.888793][T12468] ? rcu_is_watching+0x16/0xb0 [ 230.888822][T12468] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.888840][T12468] ? __kmalloc_cache_noprof+0x31c/0x600 [ 230.888864][T12468] ? __kmalloc_cache_noprof+0x148/0x600 [ 230.888886][T12468] ? xskq_create+0x56/0x220 [ 230.888912][T12468] xskq_create+0x148/0x220 [ 230.888933][T12468] ? xsk_init_queue+0x8a/0xe0 [ 230.888959][T12468] xsk_init_queue+0x8a/0xe0 [ 230.888982][T12468] xsk_setsockopt+0x52a/0x960 [ 230.889006][T12468] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.889026][T12468] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.889061][T12468] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 230.889083][T12468] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.889103][T12468] do_sock_setsockopt+0x17c/0x1b0 [ 230.889127][T12468] __x64_sys_setsockopt+0x13d/0x1b0 [ 230.889152][T12468] do_syscall_64+0x166/0x520 [ 230.889175][T12468] ? trace_irq_disable+0x3b/0x140 [ 230.889197][T12468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.889216][T12468] ? clear_bhb_loop+0x70/0xc0 [ 230.889238][T12468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.889263][T12468] RIP: 0033:0x7f51f2f9fb19 [ 230.889282][T12468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.889298][T12468] RSP: 002b:00007f51f3dc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.889317][T12468] RAX: ffffffffffffffda RBX: 00007f51f3225fa0 RCX: 00007f51f2f9fb19 [ 230.889330][T12468] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 230.889342][T12468] RBP: 00007f51f3037b70 R08: 0000000000000004 R09: 0000000000000000 [ 230.889353][T12468] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 230.889365][T12468] R13: 00007f51f3226038 R14: 00007f51f3225fa0 R15: 00007ffc1f332e38 [ 230.889397][T12468] [ 230.889433][T12468] Mem-Info: [ 230.889442][T12468] active_anon:6236 inactive_anon:3 isolated_anon:0 [ 230.889442][T12468] active_file:1 inactive_file:43302 isolated_file:0 [ 230.889442][T12468] unevictable:0 dirty:274 writeback:0 [ 230.889442][T12468] slab_reclaimable:11897 slab_unreclaimable:103132 [ 230.889442][T12468] mapped:29464 shmem:529 pagetables:1340 [ 230.889442][T12468] sec_pagetables:0 bounce:0 [ 230.889442][T12468] kernel_misc_reclaimable:0 [ 230.889442][T12468] free:1278468 free_pcp:10242 free_cma:0 [ 230.889493][T12468] Node 0 active_anon:24944kB inactive_anon:12kB active_file:4kB inactive_file:173008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117856kB dirty:1096kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14172kB pagetables:5244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 230.889543][T12468] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 230.889587][T12468] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.889639][T12468] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 230.890696][T12468] Node 0 DMA32 free:1154260kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24944kB inactive_anon:12kB active_file:4kB inactive_file:173008kB unevictable:0kB writepending:1096kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:40928kB local_pcp:22976kB free_cma:0kB [ 230.890762][T12468] lowmem_reserve[]: 0 0 1 1 1 [ 230.890793][T12468] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 230.890844][T12468] lowmem_reserve[]: 0 0 0 0 0 [ 230.890874][T12468] Node 1 Normal free:3944252kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.890926][T12468] lowmem_reserve[]: 0 0 0 0 0 [ 230.890980][T12468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.891093][T12468] Node 0 DMA32: 2455*4kB (UME) 1431*8kB (UM) 1120*16kB (UM) 1128*32kB (UME) 463*64kB (UME) 260*128kB (UME) 135*256kB (UM) 83*512kB (UME) 35*1024kB (UME) 7*2048kB (UME) 217*4096kB (UM) = 1154260kB [ 230.891232][T12468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.891318][T12468] Node 1 Normal: 5*4kB (UM) 5*8kB (UM) 4*16kB (UM) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3944252kB [ 230.897615][T12468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.897631][T12468] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.897645][T12468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.897659][T12468] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.897672][T12468] 43828 total pagecache pages [ 230.897688][T12468] 0 pages in swap cache [ 230.897695][T12468] Free swap = 124996kB [ 230.897702][T12468] Total swap = 124996kB [ 230.897709][T12468] 2097051 pages RAM [ 230.897716][T12468] 0 pages HighMem/MovableOnly [ 230.897722][T12468] 434380 pages reserved [ 230.897729][T12468] 0 pages cma reserved [ 230.916880][T12471] ip_tables: iptables: counters copy to user failed while replacing table [ 231.115360][T12477] sctp: [Deprecated]: syz.4.1714 (pid 12477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.115360][T12477] Use struct sctp_sack_info instead [ 231.117160][T12477] sctp: [Deprecated]: syz.4.1714 (pid 12477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.117160][T12477] Use struct sctp_sack_info instead [ 231.297123][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 231.297144][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 231.297167][T12483] netlink: 'syz.1.1717': attribute type 18 has an invalid length. [ 231.343291][T12483] netlink: 'syz.1.1717': attribute type 18 has an invalid length. [ 232.106492][T12518] bond6: peer notification delay (37) is not a multiple of miimon (100), value rounded to 0 ms [ 232.125186][T12518] bond6 (unregistering): Released all slaves [ 232.317725][T12532] 0XD: entered promiscuous mode [ 232.317748][T12532] 0XD: left allmulticast mode [ 276.098068][ T5001] udevd[5001]: worker [5654] /devices/virtual/block/nbd0 timeout; kill it [ 276.098164][ T5001] udevd[5001]: seq 11516 '/devices/virtual/block/nbd0' killed [ 289.001760][ T32] INFO: task kworker/1:1H:2005 blocked for more than 143 seconds. [ 289.001802][ T32] Not tainted syzkaller #0 [ 289.001812][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.001821][ T32] task:kworker/1:1H state:D stack:25600 pid:2005 tgid:2005 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 289.001872][ T32] Workqueue: kblockd blk_mq_requeue_work [ 289.001892][ T32] Call Trace: [ 289.001896][ T32] [ 289.001904][ T32] __schedule+0x17dd/0x5830 [ 289.001965][ T32] ? __pfx___schedule+0x10/0x10 [ 289.001992][ T32] ? schedule+0x90/0x2b0 [ 289.002006][ T32] schedule+0x164/0x2b0 [ 289.002019][ T32] schedule_timeout+0x152/0x2c0 [ 289.002030][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 289.002041][ T32] ? __pfx_process_timeout+0x10/0x10 [ 289.002056][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.002067][ T32] ? prepare_to_wait_event+0x3e4/0x4d0 [ 289.002077][ T32] ? prepare_to_wait_event+0x440/0x4d0 [ 289.002091][ T32] nbd_queue_rq+0x96a/0xff0 [ 289.002109][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 289.002120][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 289.002142][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 289.002166][ T32] ? sbitmap_get+0x229/0x390 [ 289.002178][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 289.002192][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 289.002211][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 289.002233][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 289.002243][ T32] ? lock_acquire+0x115/0x350 [ 289.002258][ T32] ? lock_acquire+0x115/0x350 [ 289.002276][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 289.002287][ T32] ? blk_mq_run_hw_queue+0x317/0x4e0 [ 289.002301][ T32] blk_mq_run_hw_queue+0x340/0x4e0 [ 289.002316][ T32] blk_mq_run_hw_queues+0x268/0x3f0 [ 289.002361][ T32] blk_mq_requeue_work+0x703/0x760 [ 289.002376][ T32] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 289.002390][ T32] ? rcu_is_watching+0x16/0xb0 [ 289.002406][ T32] ? process_scheduled_works+0x97a/0x1630 [ 289.002426][ T32] process_scheduled_works+0xc3d/0x1630 [ 289.002457][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.002475][ T32] ? assign_work+0x3cf/0x5d0 [ 289.002492][ T32] worker_thread+0xa47/0xfb0 [ 289.002514][ T32] ? __kthread_parkme+0x71/0x1f0 [ 289.002530][ T32] kthread+0x38b/0x480 [ 289.002542][ T32] ? __pfx_worker_thread+0x10/0x10 [ 289.002555][ T32] ? __pfx_kthread+0x10/0x10 [ 289.002567][ T32] ret_from_fork+0x514/0xb70 [ 289.002580][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 289.002591][ T32] ? __switch_to+0xc78/0x1410 [ 289.002608][ T32] ? __pfx_kthread+0x10/0x10 [ 289.002620][ T32] ret_from_fork_asm+0x1a/0x30 [ 289.002640][ T32] [ 289.002720][ T32] [ 289.002720][ T32] Showing all locks held in the system: [ 289.002726][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 289.002734][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 289.002772][ T32] locks held by kworker/1:1H/2005: 4, on CPU#1: [ 289.002779][ T32] #0: ffff8880212bc148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.002806][ T32] #1: ffffc9000660fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.002838][ T32] #2: ffff888028737718 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x317/0x4e0 [ 289.002865][ T32] #3: ffff888028c876b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 289.002897][ T32] locks held by getty/5391: 2, on CPU#1: [ 289.002904][ T32] #0: ffff8880375ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 289.002951][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 289.002992][ T32] locks held by udevd/5654: 1, on CPU#1: [ 289.003000][ T32] #0: ffff8880287d0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 289.003056][ T32] [ 289.003059][ T32] ============================================= [ 289.003059][ T32] [ 289.003065][ T32] NMI backtrace for cpu 0 [ 289.003074][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 289.003093][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 289.003104][ T32] Call Trace: [ 289.003111][ T32] [ 289.003119][ T32] dump_stack_lvl+0xe8/0x150 [ 289.003150][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 289.003172][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.003198][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 289.003224][ T32] sys_info+0x135/0x170 [ 289.003241][ T32] watchdog+0x1073/0x10f0 [ 289.003277][ T32] ? watchdog+0x209/0x10f0 [ 289.003312][ T32] kthread+0x38b/0x480 [ 289.003334][ T32] ? __pfx_watchdog+0x10/0x10 [ 289.003345][ T32] ? __pfx_kthread+0x10/0x10 [ 289.003356][ T32] ret_from_fork+0x514/0xb70 [ 289.003368][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 289.003379][ T32] ? __switch_to+0xc78/0x1410 [ 289.003394][ T32] ? __pfx_kthread+0x10/0x10 [ 289.003405][ T32] ret_from_fork_asm+0x1a/0x30 [ 289.003423][ T32] [ 289.003427][ T32] Sending NMI from CPU 0 to CPUs 1: [ 289.003460][ C1] NMI backtrace for cpu 1 [ 289.003472][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 289.003492][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 289.003502][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 289.003526][ C1] Code: 7b 92 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1a 24 00 fb f4 3c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 289.003542][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 289.003558][ C1] RAX: 000000000015d2a5 RBX: ffffffff819c9950 RCX: 8000000000000001 [ 289.003571][ C1] RDX: 0000000000000001 RSI: ffffffff8e6a8ac6 RDI: ffffffff8c8ea180 [ 289.003584][ C1] RBP: ffffc90000197f10 R08: ffff8880b8333d9b R09: 1ffff110170667b3 [ 289.003598][ C1] R10: dffffc0000000000 R11: ffffed10170667b4 R12: 0000000000000000 [ 289.003611][ C1] R13: 1ffff11003e5a000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 289.003624][ C1] FS: 0000000000000000(0000) GS:ffff88812350a000(0000) knlGS:0000000000000000 [ 289.003639][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.003652][ C1] CR2: 00007fcae0b7a4c0 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 289.003668][ C1] Call Trace: [ 289.003675][ C1] [ 289.003681][ C1] default_idle+0x9/0x20 [ 289.003705][ C1] default_idle_call+0x72/0xb0 [ 289.003731][ C1] do_idle+0x2e0/0x540 [ 289.003753][ C1] ? __pfx_do_idle+0x10/0x10 [ 289.003778][ C1] cpu_startup_entry+0x43/0x60 [ 289.003799][ C1] start_secondary+0x101/0x110 [ 289.003818][ C1] common_startup_64+0x13e/0x157 [ 289.003859][ C1] [ 289.004451][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 289.664048][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 289.673142][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 289.683271][ T32] Call Trace: [ 289.686538][ T32] [ 289.689456][ T32] vpanic+0x26f/0x710 [ 289.693432][ T32] panic+0xc5/0xd0 [ 289.697137][ T32] ? __pfx_panic+0x10/0x10 [ 289.701541][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 289.706566][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 289.712711][ T32] watchdog+0x10e7/0x10f0 [ 289.717037][ T32] ? watchdog+0x209/0x10f0 [ 289.721450][ T32] kthread+0x38b/0x480 [ 289.725517][ T32] ? __pfx_watchdog+0x10/0x10 [ 289.730186][ T32] ? __pfx_kthread+0x10/0x10 [ 289.734765][ T32] ret_from_fork+0x514/0xb70 [ 289.739348][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 289.744449][ T32] ? __switch_to+0xc78/0x1410 [ 289.749117][ T32] ? __pfx_kthread+0x10/0x10 [ 289.753696][ T32] ret_from_fork_asm+0x1a/0x30 [ 289.758461][ T32] [ 289.761747][ T32] Kernel Offset: disabled [ 289.766067][ T32] Rebooting in 86400 seconds..