last executing test programs: 3m1.470729854s ago: executing program 4 (id=2709): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', "000300"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 3m1.072733903s ago: executing program 4 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) bind$pptp(r2, &(0x7f0000000500)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={r4, 0x5}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000044000480400001800e000100627974656f726465720000002c000280080004400000006d080001400000000e0800034000000065080002400000000e080005"], 0x98}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e64000000002400028008001a007f00000108001c001900000006001900030000000800030005"], 0x54}}, 0x0) 3m0.692149496s ago: executing program 2 (id=2715): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x40}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socket(0x1d, 0x2, 0x6) socket$kcm(0x29, 0xd, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x23010}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x12, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 3m0.176274436s ago: executing program 1 (id=2717): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000011c0)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2m59.809506029s ago: executing program 4 (id=2719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r5, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0) 2m59.65057298s ago: executing program 0 (id=2720): socket(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5c176104c34f1e4ba00010000000c00018008000400ee"], 0x20}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="58000000140001feffff7f00000000001e000000ffffffff00"/88, 0x58) (async) write(r2, &(0x7f0000000200)="58000000140001feffff7f00000000001e000000ffffffff00"/88, 0x58) 2m59.456386121s ago: executing program 1 (id=2721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa797, 0xb, 0x20000000, 0x1000005}, 0x4f, 0x5}, [{0x0, 0x3, 0x9, 0x1, 0xf, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x7fff, 0x6, 0x7ff, 0xa1}, {0x6, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x6, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x400, 0x7, 0xfffffffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x1, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x6, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0xfffff1ad, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x427d, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x3, 0x30000000, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x1, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x8, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8002, 0x3}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x78b83211, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24dd3}, {0x7, 0x3, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x1, 0x2, 0xc7e7, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x200}, {0x7, 0x1, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x4, 0xe, 0x9, 0x8, 0x457}, {0x9, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x7, 0x1, 0x100}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x4, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x7, 0x71, 0x0, 0x5}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x9, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0xf3, 0x4, 0x4, 0x4, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0xd, 0x8, 0x7, 0xa, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x7, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0x1ff}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x1, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0xa}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0x1, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x9}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 2m59.395219746s ago: executing program 3 (id=2722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x4, @random="f29478e80745"}, {0xa}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_CARRIER_CHANGES={0x0, 0x23, 0x5}]}, 0x90}}, 0x884) 2m59.047699781s ago: executing program 2 (id=2723): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4b, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x15, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x38, 0x1000, 0x0, 0x2}, {'^'}}}}}}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, &(0x7f0000000200), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfd6c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r2}, @alu={0x4, 0x0, 0xc, 0x0, 0x8, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) 2m58.936908039s ago: executing program 0 (id=2724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0xc8, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x710f955b, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c3ae5737597754750e3d3b700", @ANYRES16=r5, @ANYBLOB="00022cbd70000000000009000000050013000e000000080014001900000005001d001900000005001500070000000800140013000000050015000a000000"], 0x44}}, 0x20000008) socket$nl_route(0x10, 0x3, 0x0) 2m58.936467193s ago: executing program 3 (id=2725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0x16f3ba41, @mcast2, 0x7}, 0x18, &(0x7f00000006c0)=[{&(0x7f0000000700)="024bbc2c17066a", 0x7}, {&(0x7f0000000740)="96c329", 0x3}], 0x2}}], 0x1, 0x4001c00) 2m58.935288988s ago: executing program 4 (id=2726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000040)='\x00', 0x800, &(0x7f00000002c0)={@_ha_fsid={[0x7fffffff, 0x8]}, {0x7b0d, 0x0, 0xfffffff8, 0x2}}, 0x8001, &(0x7f00000003c0), &(0x7f0000000400)=0xffffff7e}, {[0x1, 0x9, 0x5, 0x1]}, 0x4, 0x66, &(0x7f0000000440)=""/102}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="6da8a103000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc8200000000020000000000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x129642, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x202000, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x4, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x434, 0x28, 0x400, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x0, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0xa, 0x7, 0x4, 0x2, 0x8000, 0x6, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x2008fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x5, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x2, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x7, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0x8, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x4, 0x1000, 0x2, 0xf, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0x358, 0x274, 0x7, 0x8, 0x4, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000010c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r15, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0xe, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0xa44, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000015c0)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2m58.790600149s ago: executing program 1 (id=2727): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c00200018b01101ffffffff000000000a600000ff00ff061b000000"], 0x1c}}, 0x0) syz_emit_ethernet(0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa310180c2000000000406ff1a82043e3538b14e7dec247a1a04bcdd60f61797e3f8ef41b72ebc612c1cfe89a0284cbd70f6d642f3de1672c4ad9b18bc65e425638c2ce4f6f5029dd7a597e542c8a3665e6ce122184c4932a0c3164904760071712f0415c3be641419a2d6cafdebb17406a2a93a635410f3e0e765a8bcf4cb2629f29d3aaf84f38346f7d1c9"], 0x0) (async) syz_emit_ethernet(0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa310180c2000000000406ff1a82043e3538b14e7dec247a1a04bcdd60f61797e3f8ef41b72ebc612c1cfe89a0284cbd70f6d642f3de1672c4ad9b18bc65e425638c2ce4f6f5029dd7a597e542c8a3665e6ce122184c4932a0c3164904760071712f0415c3be641419a2d6cafdebb17406a2a93a635410f3e0e765a8bcf4cb2629f29d3aaf84f38346f7d1c9"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x80111500, &(0x7f0000000c80)={'wlan0\x00'}) (async) ioctl$TUNSETIFF(r2, 0x80111500, &(0x7f0000000c80)={'wlan0\x00'}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2d000000100001000000000000000000000f6a0a010400000000000000000a0000010900010073797a3100000000140004801000018074114db97feb8b28c2e28c990800010066696200040002800900020073797a32000000001400000011000100000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000040) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2d000000100001000000000000000000000f6a0a010400000000000000000a0000010900010073797a3100000000140004801000018074114db97feb8b28c2e28c990800010066696200040002800900020073797a32000000001400000011000100000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000040) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) (async) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x7f, 0x10000, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x66, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x7f, 0x10000, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x66, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@noop]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb0100180000fbff000000a4000000a4000000030000000600000007000085050000000100000004000000260000000100000004000000070000001000000005000000080000001000000004000000040000000000000002000000020000000200000002000000030000000e00000000000000060000000300000000000007000000000a00000001000006040000000c0000000000020000000000000b0100000009000000006e000a05000000000000"], &(0x7f0000000a80)=""/226, 0xbf, 0xe2, 0x3, 0x6, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="210000c8a400008d000000000400000000000000", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05000000040000000400"/28], 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000880)=ANY=[], 0x32600) (async) write$cgroup_subtree(r9, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x7d, &(0x7f00000008c0)={0x0, 0xfffd}, &(0x7f0000000980)=0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r11, r8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) close(r5) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0xc88e, 0x8}, &(0x7f0000000280)=0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r8, &(0x7f0000000600)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r8, &(0x7f0000000600)}, 0x20) bind(r4, &(0x7f0000000300)=@un=@file={0x1, './file0\x00'}, 0x80) listen(r4, 0x1) 2m58.660946394s ago: executing program 2 (id=2728): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x4, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000001b40)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r1, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000001c00)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c, &(0x7f0000001d40), &(0x7f0000001d80)}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000002c0), 0x12) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="547c1f000b725b569720c7b91b36dffefcb5b5584643dd069af6e5730f462e86f206ff1625e6c719c7635d7fe9d342cb5dd77f99f3c0209016368210bd0499cb3c7baaa168846e885ab095b2a34472f0f47cd1c7304eb24c9c527cd295036418726692a46398da241760b73b57b52bfd36df381a836e9961fa5b28c18d956a41", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010062726964676500002400028005002c0001000000050018000000000005001900000000000500170001000000"], 0x54}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d40), 0x101002, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000200)={'wlan0\x00', @random="0100000000eb"}) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000001340)={@in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc7643b5}, {&(0x7f0000000300)=""/4096, 0x1000}, &(0x7f0000001300), 0x11}, 0xa0) 2m58.634079356s ago: executing program 3 (id=2729): r0 = socket(0xa, 0x80805, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2m58.312826158s ago: executing program 2 (id=2730): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'wlan0\x00'}) ioctl(r0, 0x8b25, &(0x7f0000000440)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x8905, &(0x7f0000000440)) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x10, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x6c, 0x8, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x7fffffff}]}, @lsrr={0x83, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x3, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2m58.309781015s ago: executing program 0 (id=2731): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x6) openat$cgroup_pressure(r0, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xd1383000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) 2m58.032372718s ago: executing program 3 (id=2732): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200), 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003e08f0ff0000000085000000b4005400b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000400)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r2) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r14, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) (async) writev(r7, &(0x7f0000000840)=[{&(0x7f0000000880)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x70e, 0x41e, 0x800]}, 0x0) (async) sendmmsg(r6, &(0x7f0000000200), 0x40000000000009f, 0x0) 2m57.995439297s ago: executing program 1 (id=2733): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) (async) write(r3, &(0x7f00000002c0)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) (async) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) listen(r7, 0x4) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000141000000180017"], 0x34}}, 0x0) 2m57.835528294s ago: executing program 0 (id=2734): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2m57.80557485s ago: executing program 4 (id=2735): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/time\x00') (async) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/time\x00') r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x1) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f00000003c0)=0x78e) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000200)=0x2000004) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="00214717a7070000273e030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) (async) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="00214717a7070000273e030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01070000000000000000410000000e0001006e657464657673696d0000000f0002006e65746465767369f928bfef"], 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01070000000000000000410000000e0001006e657464657673696d0000000f0002006e65746465767369f928bfef"], 0x34}}, 0x0) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="380000000100be", 0x7) (async) write(r0, &(0x7f0000000000)="380000000100be", 0x7) 2m57.17386287s ago: executing program 1 (id=2736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000400)=0x700, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00'}, 0x90) writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000640)="f792bffc9aa4815c17013d94b021a229edf53e55fe4237b193fa98357c26a958284bfef2931f43844739f7edb878f5b81a6183441e2a2ecfc487105ecdb266d56eefccbb7c9fbee7ed35f5375f224fed4dd6740572879ee54308e02e8314255a81c8a870d6eaadb21d07ae946a8f56849b89779f86f4f4a429ac3d5beb7aa7fe3b7dcc3937df328b87fa59a88e08b1333f03d49dd8cf41818aa95584e5209f95044513325746b745314238635faa7b5a10b02d7188ecc212f28b1149b29de344860e02480e0667e6d9f8a852b82b3bf08a3b5cfa63c3f1be37b0ddebcd89f25fc919ddb80e0e17df2f06664ac12ecfef93740f", 0xf3}, {&(0x7f0000000740)="5ec432a720a9d808a23ce332002d6d83a424d8ac528e06901275669b2b615a9af368ea2fcb2d4b0df78abe418707ec047932e7173fd656c3810efb0c1a18193219ee17a8ed3285fbf7a06725778a95cbd9a5ab1639dcc808a834fd0e68483ad1cf473fca219c7394eceacdbbaee9", 0x6e}, {&(0x7f00000007c0)="3f23c75146f8259e99ca02c8f5aabad72092ab4b8369c27b9aac33b456ff34c10afcb022cfd09354a3c01619f47912fee1d13dc405749c92cef14dbcc2a9b2abdaf38fefe3ec122d2ef21bafd775a61b2b632085cec1351288b3023224dce4abf7740b9340675d38d0c9ff6e4cb7fffdfaf761d6021847488b2805cd007eb13985df9ab11d8f6bb28c82cb6ec50a0429c6bff48eca20e1576e4c072d8678080759b83095d8f7bf5b1c18", 0xaa}, {&(0x7f0000000880)="0962f7bd1d5cda2661d8f7a8527ea5672f6ef6b2d3721d4ddee090d534b598cda82cd7f3109f25b3c6f919c56c3826a00e4d75be7cbbffd439e21e44944fd808787176f963bd74459649fca0c6bd0b02ecbc2de7497c5ed2bd16bed9df0b11ac2cb7033e39bcfdce6ca27ec7e4c8f55b14ee3f1e59899904fc5e7a95fc3077d2802d0386920d0fef813669c2928cd2959438faeb17c7742428c38adfa566522e4a4897eee3d3bd72f8126caef69a8b86c12259393312b5ef5e17baad122aa2b919d089d5a3b1667eba0e5c734e9539a52be98b", 0xd3}, {&(0x7f0000000980)="0a640bc97a878efca3a5d0c032c42e351e963e2f00b6d295fec50bc24a5b08f758ee759b3b671e7a79b6733b1af9e4ca794875db04e12b1ae687d97148d1b6c5af93519cc882e3ae78092a202d2d63b0", 0x50}, {&(0x7f0000000a00)="d03f59ee116ea7dbc00b07fa76eae7e196e9ad3a7b0b0b0f6c12a7669c64d7dcdc1f0176957c468b1c954fa6b54b7bd5a9bf633bf21e659ce024181614a9aadfb4a07d1b6613fdb0a5eaea5578925492eeb07ad4ffe00e8d2edc56c747bc1e00f3ffe2ba73ba0d9d59d3af9cccead8f82a6b67d1fad50d66637f39b53863e8b914ad589a5350d380f488bbb53419b69897ab36b1be9036419943ebe47f951eb1d9b266e1c680a1eddbdb8685c58137120fb21c8a678ab2b729cb5cc2b9567e019d976cd54bbe4d587b9b25531d190ba96b5df2d1816c", 0xd6}], 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000600)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x72}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2m57.060907137s ago: executing program 3 (id=2737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$phonet(0x23, 0x2, 0x1) 2m57.060294383s ago: executing program 0 (id=2738): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251b000000080001007063690011000200303030"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000000)={'filter\x00', 0x0, 0x3, 0x0, [0x80000000, 0x0, 0xfffffffffffffff8, 0x8, 0x5, 0x3], 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x78) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bond_slave_0\x00'}) r3 = socket(0x2b, 0x1, 0x0) read(r3, &(0x7f00000000c0)=""/108, 0x6c) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={0x0, 0x68}}, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r5, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ef, 0x1, 0x1, 0xffff, 0x5, 0x2, 0x7, 0xb2a5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m57.048358469s ago: executing program 2 (id=2739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x5}}}}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) 2m57.005574562s ago: executing program 4 (id=2740): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, 0x0, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = socket(0x10, 0x80002, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x82}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000001a00)=""/67, 0x43}, {&(0x7f0000001a80)=""/209, 0xd1}, {&(0x7f0000001b80)=""/12, 0xc}, {&(0x7f0000001bc0)=""/143, 0x8f}, {&(0x7f0000001c80)=""/4100, 0x1004}, {&(0x7f0000002cc0)=""/109, 0x6d}], 0x7}, 0x4}, {{0x0, 0x0, 0x0}, 0xfffffffb}], 0x3, 0x20, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}}, 0x400400c0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0x8}, {0xf1815da20b7bcf15}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newtfilter={0x10b8, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1088, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_POLICE={0x1074, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0xf, 0x9, 0x6bb7a3c2, {0x6, 0x1, 0x5, 0x0, 0x4, 0x85b}, {0x3, 0x2, 0xc206, 0x7, 0x8, 0x7f}, 0x7f, 0x5, 0xfffffbc0}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x3, 0x2, 0xc5, 0x4, 0x2, 0x1ff, 0x4, 0x4, 0x0, 0x5, 0x400, 0x2, 0x4, 0x5f72, 0xa, 0x8001, 0x6, 0x9, 0x5, 0x5, 0x0, 0x7, 0x9, 0x0, 0x4, 0xfff, 0x941, 0x5, 0x4, 0x1000, 0xb, 0x3, 0x5, 0x7, 0x8, 0x5, 0x5, 0xfff, 0x6, 0x1ff, 0x8, 0x7ef0a317, 0x9, 0x2, 0x7, 0x400, 0x1, 0x8, 0x800, 0xffffffff, 0x73, 0x2, 0xfffffffa, 0x1, 0xffffffff, 0x9, 0x6, 0x5, 0x8, 0x9, 0xef6, 0x8, 0x40, 0x62, 0x10, 0x8, 0xc1, 0x5e, 0xa1a, 0x8, 0x2a6, 0x1, 0xbb, 0x8, 0x101, 0x6, 0x5, 0x0, 0x2, 0x7, 0x6, 0x6, 0x9, 0xfff, 0x2, 0x7, 0x81, 0x26, 0x7, 0x7ff, 0x3ff, 0x5, 0x6, 0x30, 0x6, 0xfff, 0x1, 0x8, 0x4, 0x2, 0x2e73, 0x8001, 0x4485, 0xf093, 0x6, 0x9, 0x5, 0x10, 0x2, 0xc03, 0x7, 0x800, 0x7, 0x0, 0x53, 0xe, 0x0, 0x2, 0xfffffffd, 0x101, 0x7, 0xb2c2, 0xe02af08, 0x7, 0x80000000, 0x3, 0x8, 0x9, 0x100, 0x4, 0x200, 0x7, 0x6, 0x72, 0x4, 0x7, 0x5, 0xfd, 0x2, 0xa0, 0x4, 0x8001, 0x4, 0x7, 0x854, 0x9, 0x2, 0x6, 0x0, 0x0, 0xffffff61, 0x400, 0x3, 0xfffffffd, 0x100, 0x33, 0x6, 0xb, 0x4a4, 0x7, 0x5, 0x7ec, 0x2, 0x5, 0x2, 0x80000000, 0x3, 0xcdd, 0x9, 0xe, 0x6, 0xa2e, 0x1, 0x3, 0x7fff, 0x1, 0x0, 0x4, 0x7, 0x4, 0x1, 0xe09, 0x800, 0x1, 0xfffff670, 0x5b, 0x4, 0x7, 0x8ce, 0x6, 0x4, 0x9, 0x3, 0xada, 0x0, 0x57c, 0x6, 0x80000000, 0x9, 0x8, 0x2, 0x40, 0x100, 0x100, 0x9, 0xa1, 0x2, 0x9, 0xb, 0xfffffff7, 0x7ff, 0x2, 0x1, 0xfff, 0x7fff, 0x100000, 0x9, 0x7, 0x3, 0x7ff, 0x7, 0x5, 0x7, 0x7, 0x9, 0x19f, 0x3ff, 0x400, 0x40, 0x4, 0x9, 0x3, 0x4, 0x7542, 0x2, 0x43c, 0x10000, 0x5, 0x93, 0x1, 0x7, 0x7, 0x8, 0x95d, 0xa470, 0x6, 0x5, 0x6, 0x7, 0xf085, 0x6df, 0x1, 0xb4d, 0x38]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x7, 0x2f9, 0x8000, 0xc, 0x4, 0x1, 0x3ff, 0x8, 0x2, 0x1ff, 0xb, 0x8, 0x3, 0x7, 0x5, 0x5, 0x5, 0x9, 0x10001, 0x5, 0x3d, 0x4, 0x2d, 0x7, 0x7fffffff, 0x7, 0x4, 0x800000, 0x6, 0x5, 0x13, 0x2000000, 0x7f, 0x44, 0x4, 0x0, 0xfff, 0xa, 0x2, 0x7fffffff, 0x3, 0xfffffff8, 0x8, 0x60000000, 0xb1a, 0x6, 0x5, 0x7fff, 0x7b, 0x10000, 0x3fc, 0x3, 0xf26, 0x4, 0xf9d8, 0x5, 0x6, 0x4, 0x7, 0x1, 0x8, 0x9, 0x8000, 0x4, 0x5, 0x2, 0x6, 0x92d0, 0x3, 0x1, 0xfffffffc, 0x4, 0x1c000, 0x0, 0x81, 0x7, 0xfaff91d3, 0x3ff, 0x6, 0x2, 0xc7d, 0x7, 0x8, 0x3ff, 0x1, 0x4, 0x1, 0x7, 0x0, 0x0, 0x81, 0xffffffff, 0x5fc, 0x10, 0x3, 0x9, 0x5, 0x0, 0xa0, 0xe, 0x5, 0x1, 0x0, 0x0, 0x46a, 0xd1, 0x9, 0xff, 0x8, 0xe, 0x81, 0x80000000, 0x101, 0x1ff, 0x9, 0x8, 0x7, 0x3, 0x6, 0x4, 0xd, 0x9, 0xe, 0x2, 0x101, 0x5, 0x7, 0x2, 0x80, 0xffffffff, 0x100, 0x6, 0x2, 0xe0, 0x3ff, 0x6, 0xb, 0x9, 0x9, 0x839, 0x4, 0x0, 0x0, 0xedd, 0x197, 0x8, 0x6, 0x0, 0x7, 0x3, 0x6, 0x8, 0x8000, 0x4, 0x400, 0xb50, 0x2, 0x1ff, 0x4, 0x7f, 0x3, 0x3, 0x7afeadae, 0x3, 0xfffffffc, 0x1, 0xd36, 0x6880d4aa, 0x2, 0xfffffeea, 0x9, 0x5, 0x100, 0x6, 0x9, 0x3, 0x7f, 0x0, 0x2, 0x3, 0x8, 0x5, 0xb, 0x7, 0x8, 0x8001, 0x81, 0x6, 0x3, 0xab8, 0xffffb3e7, 0x9, 0x6, 0x3ff, 0x8, 0x66b5, 0x1, 0x3, 0x0, 0x2, 0x4, 0xc38, 0x3, 0x0, 0x7, 0x400, 0x1, 0x20, 0x8, 0x9, 0x3, 0x0, 0x5751, 0x0, 0x2, 0x8, 0x4, 0x7, 0x1, 0xb, 0x1, 0x8, 0x100, 0x3, 0x9, 0x7, 0xd, 0x3cc, 0x0, 0x7, 0x7, 0x4, 0x7, 0x2, 0x1, 0x0, 0x11be4894, 0x3, 0xffffffff, 0x3, 0x9, 0x7, 0x2, 0x9, 0x9, 0xffffffff, 0x4, 0x3, 0x7, 0x7c0, 0xe, 0x0, 0x1ff, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_RATE={0x404, 0x2, [0xcf0, 0xca8cf634, 0x1, 0x6, 0x9, 0x2, 0x3, 0x80000001, 0x0, 0x8, 0x9, 0xfffffffe, 0xff, 0x9, 0x4, 0xfffffff7, 0x8, 0x8, 0x6, 0xffffffff, 0x8000, 0x47, 0x9, 0x5, 0x80000000, 0x8, 0x145, 0x3ff, 0x10, 0x5, 0x2, 0x2, 0x8000, 0x400, 0x8, 0x7, 0x9000, 0x6, 0x3ff, 0x514a, 0x4, 0x6, 0x421, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5f6a, 0x9, 0xb42, 0x5, 0x2, 0x17, 0x1, 0x8, 0x8, 0x5, 0x5, 0x1, 0x401, 0x2, 0x6, 0x3, 0xfffffffe, 0x69, 0x3, 0x6, 0x699d, 0x7, 0x0, 0x80000000, 0x7e96, 0x3, 0xff, 0x1f, 0x2, 0x80, 0x2, 0xf, 0x6, 0x8, 0xdab8, 0x7bd, 0x2, 0xfffffe01, 0xf, 0xffffffc0, 0xb95, 0x4, 0x5, 0xe, 0x8, 0x8, 0x9, 0x100, 0x151, 0x0, 0x9, 0x0, 0x10001, 0x2, 0xe6f, 0x1, 0xfffff757, 0x0, 0xff, 0x6, 0x4, 0x800, 0x3ee0, 0x8, 0x1, 0x7, 0x8001, 0x3, 0xb, 0x7f, 0x1, 0x1, 0x3, 0x1a4, 0x7, 0x0, 0x4, 0x8, 0xa, 0x401, 0x8, 0x3, 0x3, 0xab, 0x200, 0x5, 0xfffffffb, 0xff, 0x1, 0xff, 0x9, 0x1, 0xf, 0x200, 0x5, 0xf, 0x8, 0xa0, 0xcf, 0x0, 0xd3d, 0x1, 0x9, 0x0, 0xfffffff9, 0xcd, 0xffff, 0x3, 0x200, 0x3, 0x42, 0x7fffffff, 0x2, 0x1, 0x5, 0x7, 0xb8dc, 0x4, 0x1, 0x9, 0x5, 0x6, 0x0, 0x50, 0x101, 0x6, 0x80000000, 0xa, 0x3ff, 0xfffffff9, 0x9, 0x0, 0x9, 0xe257, 0x6, 0x10001, 0x4, 0xff, 0x4326, 0x8, 0x5, 0x8000, 0x8, 0x800, 0x6, 0x9, 0x6, 0x3ff, 0x51b, 0x5, 0x8, 0xaa7, 0x5, 0x6d78, 0x4, 0x7, 0x1000, 0x2, 0x9, 0x5, 0x6d0008c, 0x3, 0xae, 0x1, 0x4, 0x8000, 0x8, 0x5, 0x40e8b54c, 0x7, 0x3ff, 0x1, 0x9, 0xe, 0xa, 0x0, 0x8, 0x2dcfa12e, 0x7ff, 0x10, 0x6, 0xfff, 0x9, 0x6, 0x0, 0x5, 0x995, 0x1, 0x8000, 0x4, 0x1000, 0xb, 0x7fff, 0x80000001, 0x200, 0x5, 0x3, 0x80, 0x4, 0x800, 0x5c, 0xffff8001, 0xb, 0x2, 0x8000, 0xfb, 0x6, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x729d2cbd, 0x1ff, 0xd, 0x9, 0x4, 0x4, 0x6, 0x6, 0x101, 0x282, 0xfff, 0x0, 0x501a4f, 0x5, 0x8001, 0x4c5468d3, 0xa, 0x67b, 0x7, 0xef, 0x4, 0x2, 0x926, 0x0, 0x7, 0xfffff800, 0x401, 0xb0fd, 0x4, 0x2, 0x49, 0xffffffff, 0x80000001, 0x40, 0x6, 0x2, 0x400, 0x8, 0x9, 0x9d9, 0x4, 0x4c0, 0x2, 0x9, 0x6, 0x7, 0xffff8e35, 0xc, 0x80000000, 0x9, 0x81, 0x8, 0xf, 0x5, 0x23, 0x3, 0xfffffbff, 0x1, 0xbc67, 0x8, 0x4, 0x9, 0x401, 0x4, 0x8, 0x7fff, 0x10, 0x2d, 0xb, 0x9, 0xbcf, 0x2, 0x3, 0xfffe0000, 0x0, 0x9, 0x66, 0x100, 0x9, 0x9337, 0x10000, 0x9, 0xfffffe01, 0x3, 0x330, 0x2, 0x0, 0x10, 0xd, 0x2, 0x2, 0xc, 0x38000000, 0x7fff, 0x80000000, 0x8000, 0x5, 0x101, 0x1d2, 0xe, 0x1, 0x3, 0x5, 0xf, 0x8468, 0x9, 0x400, 0x775b02b8, 0x3ac, 0x1, 0x8, 0x3, 0x1, 0x3, 0x9f28, 0xff, 0xfffffffb, 0x7, 0x2, 0x51, 0x6, 0xf375, 0xff, 0x2, 0x9, 0x0, 0x2, 0x0, 0xfe0, 0x7, 0x498, 0x7, 0x1a00000, 0x800, 0x827, 0xc931, 0xd, 0xffffffff, 0x9, 0x7fffffff, 0x6, 0xab, 0x5, 0x80000000, 0x9, 0x2, 0x4460, 0x7fffffff, 0x2, 0xc, 0x4, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x83, 0xac0a, 0x8, 0x80, 0x12d2, 0x2, 0x7, 0x6, 0x1000, 0x2, 0x1, 0x1, 0x77, 0x2, 0x0, 0x3, 0x4, 0xe6b, 0xfffffc01, 0xfffffc00, 0x6, 0x1, 0x9, 0x3e75, 0x5d, 0x3, 0x5, 0x0, 0x7, 0x0, 0xfffffffc, 0xd, 0xbd, 0x4, 0x4, 0x4, 0xf3, 0x2, 0x9, 0x1ff, 0x8, 0x7, 0x3, 0xfffffffc, 0xfff, 0x3, 0x5124, 0x7, 0xb2, 0x2, 0x7, 0x0, 0x80000000, 0x1, 0x15a2, 0x216aa1cd, 0x6, 0xffff9c8c, 0x3, 0x5, 0x9, 0x8, 0xfffffffc, 0x5, 0x8b, 0x9, 0x4, 0x3, 0x0, 0x2696, 0xbcd3, 0x5, 0x6, 0x2, 0x920, 0x9, 0xf, 0x1, 0x1462, 0x69, 0x7, 0x8000, 0x0, 0x81, 0x100, 0x2b17, 0x2, 0xc, 0x8, 0x7ec, 0x6, 0x2, 0x1ffe000, 0x7ff, 0x9, 0x0, 0x8e79, 0x199b, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x10b8}}, 0x0) (async) sendmmsg$alg(r5, &(0x7f0000000640), 0x492492492492627, 0x0) (async) sendmsg$key(r4, &(0x7f0000000080)={0xa, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x8) (async) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4b, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000150640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='P\b\r\x00\x00\x00\x00\x00\x00'], 0x0) 2m55.140631233s ago: executing program 1 (id=2741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r1, &(0x7f0000004000)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}, {&(0x7f0000002f80)="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", 0x1000}], 0x8}}], 0x1, 0x8800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000440)=0x40) 2m54.806558165s ago: executing program 2 (id=2742): r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="591a", 0x2}], 0x1}}], 0x2, 0x20040060) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m48.516842631s ago: executing program 0 (id=2743): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x40, r6, 0x205, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async, rerun: 64) r7 = socket(0x11, 0x2, 0x0) (rerun: 64) setsockopt(r7, 0x107, 0x1, &(0x7f0000000000)="010000000000060000071a80010061cc", 0x10) (async) close(r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) 2m47.505050381s ago: executing program 3 (id=2744): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000780)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000007c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)={0x30, r3, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) (fail_nth: 3) 2m37.700786054s ago: executing program 32 (id=2740): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, 0x0, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = socket(0x10, 0x80002, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x82}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000001a00)=""/67, 0x43}, {&(0x7f0000001a80)=""/209, 0xd1}, {&(0x7f0000001b80)=""/12, 0xc}, {&(0x7f0000001bc0)=""/143, 0x8f}, {&(0x7f0000001c80)=""/4100, 0x1004}, {&(0x7f0000002cc0)=""/109, 0x6d}], 0x7}, 0x4}, {{0x0, 0x0, 0x0}, 0xfffffffb}], 0x3, 0x20, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}}, 0x400400c0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0x8}, {0xf1815da20b7bcf15}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newtfilter={0x10b8, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1088, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_POLICE={0x1074, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0xf, 0x9, 0x6bb7a3c2, {0x6, 0x1, 0x5, 0x0, 0x4, 0x85b}, {0x3, 0x2, 0xc206, 0x7, 0x8, 0x7f}, 0x7f, 0x5, 0xfffffbc0}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x3, 0x2, 0xc5, 0x4, 0x2, 0x1ff, 0x4, 0x4, 0x0, 0x5, 0x400, 0x2, 0x4, 0x5f72, 0xa, 0x8001, 0x6, 0x9, 0x5, 0x5, 0x0, 0x7, 0x9, 0x0, 0x4, 0xfff, 0x941, 0x5, 0x4, 0x1000, 0xb, 0x3, 0x5, 0x7, 0x8, 0x5, 0x5, 0xfff, 0x6, 0x1ff, 0x8, 0x7ef0a317, 0x9, 0x2, 0x7, 0x400, 0x1, 0x8, 0x800, 0xffffffff, 0x73, 0x2, 0xfffffffa, 0x1, 0xffffffff, 0x9, 0x6, 0x5, 0x8, 0x9, 0xef6, 0x8, 0x40, 0x62, 0x10, 0x8, 0xc1, 0x5e, 0xa1a, 0x8, 0x2a6, 0x1, 0xbb, 0x8, 0x101, 0x6, 0x5, 0x0, 0x2, 0x7, 0x6, 0x6, 0x9, 0xfff, 0x2, 0x7, 0x81, 0x26, 0x7, 0x7ff, 0x3ff, 0x5, 0x6, 0x30, 0x6, 0xfff, 0x1, 0x8, 0x4, 0x2, 0x2e73, 0x8001, 0x4485, 0xf093, 0x6, 0x9, 0x5, 0x10, 0x2, 0xc03, 0x7, 0x800, 0x7, 0x0, 0x53, 0xe, 0x0, 0x2, 0xfffffffd, 0x101, 0x7, 0xb2c2, 0xe02af08, 0x7, 0x80000000, 0x3, 0x8, 0x9, 0x100, 0x4, 0x200, 0x7, 0x6, 0x72, 0x4, 0x7, 0x5, 0xfd, 0x2, 0xa0, 0x4, 0x8001, 0x4, 0x7, 0x854, 0x9, 0x2, 0x6, 0x0, 0x0, 0xffffff61, 0x400, 0x3, 0xfffffffd, 0x100, 0x33, 0x6, 0xb, 0x4a4, 0x7, 0x5, 0x7ec, 0x2, 0x5, 0x2, 0x80000000, 0x3, 0xcdd, 0x9, 0xe, 0x6, 0xa2e, 0x1, 0x3, 0x7fff, 0x1, 0x0, 0x4, 0x7, 0x4, 0x1, 0xe09, 0x800, 0x1, 0xfffff670, 0x5b, 0x4, 0x7, 0x8ce, 0x6, 0x4, 0x9, 0x3, 0xada, 0x0, 0x57c, 0x6, 0x80000000, 0x9, 0x8, 0x2, 0x40, 0x100, 0x100, 0x9, 0xa1, 0x2, 0x9, 0xb, 0xfffffff7, 0x7ff, 0x2, 0x1, 0xfff, 0x7fff, 0x100000, 0x9, 0x7, 0x3, 0x7ff, 0x7, 0x5, 0x7, 0x7, 0x9, 0x19f, 0x3ff, 0x400, 0x40, 0x4, 0x9, 0x3, 0x4, 0x7542, 0x2, 0x43c, 0x10000, 0x5, 0x93, 0x1, 0x7, 0x7, 0x8, 0x95d, 0xa470, 0x6, 0x5, 0x6, 0x7, 0xf085, 0x6df, 0x1, 0xb4d, 0x38]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x7, 0x2f9, 0x8000, 0xc, 0x4, 0x1, 0x3ff, 0x8, 0x2, 0x1ff, 0xb, 0x8, 0x3, 0x7, 0x5, 0x5, 0x5, 0x9, 0x10001, 0x5, 0x3d, 0x4, 0x2d, 0x7, 0x7fffffff, 0x7, 0x4, 0x800000, 0x6, 0x5, 0x13, 0x2000000, 0x7f, 0x44, 0x4, 0x0, 0xfff, 0xa, 0x2, 0x7fffffff, 0x3, 0xfffffff8, 0x8, 0x60000000, 0xb1a, 0x6, 0x5, 0x7fff, 0x7b, 0x10000, 0x3fc, 0x3, 0xf26, 0x4, 0xf9d8, 0x5, 0x6, 0x4, 0x7, 0x1, 0x8, 0x9, 0x8000, 0x4, 0x5, 0x2, 0x6, 0x92d0, 0x3, 0x1, 0xfffffffc, 0x4, 0x1c000, 0x0, 0x81, 0x7, 0xfaff91d3, 0x3ff, 0x6, 0x2, 0xc7d, 0x7, 0x8, 0x3ff, 0x1, 0x4, 0x1, 0x7, 0x0, 0x0, 0x81, 0xffffffff, 0x5fc, 0x10, 0x3, 0x9, 0x5, 0x0, 0xa0, 0xe, 0x5, 0x1, 0x0, 0x0, 0x46a, 0xd1, 0x9, 0xff, 0x8, 0xe, 0x81, 0x80000000, 0x101, 0x1ff, 0x9, 0x8, 0x7, 0x3, 0x6, 0x4, 0xd, 0x9, 0xe, 0x2, 0x101, 0x5, 0x7, 0x2, 0x80, 0xffffffff, 0x100, 0x6, 0x2, 0xe0, 0x3ff, 0x6, 0xb, 0x9, 0x9, 0x839, 0x4, 0x0, 0x0, 0xedd, 0x197, 0x8, 0x6, 0x0, 0x7, 0x3, 0x6, 0x8, 0x8000, 0x4, 0x400, 0xb50, 0x2, 0x1ff, 0x4, 0x7f, 0x3, 0x3, 0x7afeadae, 0x3, 0xfffffffc, 0x1, 0xd36, 0x6880d4aa, 0x2, 0xfffffeea, 0x9, 0x5, 0x100, 0x6, 0x9, 0x3, 0x7f, 0x0, 0x2, 0x3, 0x8, 0x5, 0xb, 0x7, 0x8, 0x8001, 0x81, 0x6, 0x3, 0xab8, 0xffffb3e7, 0x9, 0x6, 0x3ff, 0x8, 0x66b5, 0x1, 0x3, 0x0, 0x2, 0x4, 0xc38, 0x3, 0x0, 0x7, 0x400, 0x1, 0x20, 0x8, 0x9, 0x3, 0x0, 0x5751, 0x0, 0x2, 0x8, 0x4, 0x7, 0x1, 0xb, 0x1, 0x8, 0x100, 0x3, 0x9, 0x7, 0xd, 0x3cc, 0x0, 0x7, 0x7, 0x4, 0x7, 0x2, 0x1, 0x0, 0x11be4894, 0x3, 0xffffffff, 0x3, 0x9, 0x7, 0x2, 0x9, 0x9, 0xffffffff, 0x4, 0x3, 0x7, 0x7c0, 0xe, 0x0, 0x1ff, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_RATE={0x404, 0x2, [0xcf0, 0xca8cf634, 0x1, 0x6, 0x9, 0x2, 0x3, 0x80000001, 0x0, 0x8, 0x9, 0xfffffffe, 0xff, 0x9, 0x4, 0xfffffff7, 0x8, 0x8, 0x6, 0xffffffff, 0x8000, 0x47, 0x9, 0x5, 0x80000000, 0x8, 0x145, 0x3ff, 0x10, 0x5, 0x2, 0x2, 0x8000, 0x400, 0x8, 0x7, 0x9000, 0x6, 0x3ff, 0x514a, 0x4, 0x6, 0x421, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5f6a, 0x9, 0xb42, 0x5, 0x2, 0x17, 0x1, 0x8, 0x8, 0x5, 0x5, 0x1, 0x401, 0x2, 0x6, 0x3, 0xfffffffe, 0x69, 0x3, 0x6, 0x699d, 0x7, 0x0, 0x80000000, 0x7e96, 0x3, 0xff, 0x1f, 0x2, 0x80, 0x2, 0xf, 0x6, 0x8, 0xdab8, 0x7bd, 0x2, 0xfffffe01, 0xf, 0xffffffc0, 0xb95, 0x4, 0x5, 0xe, 0x8, 0x8, 0x9, 0x100, 0x151, 0x0, 0x9, 0x0, 0x10001, 0x2, 0xe6f, 0x1, 0xfffff757, 0x0, 0xff, 0x6, 0x4, 0x800, 0x3ee0, 0x8, 0x1, 0x7, 0x8001, 0x3, 0xb, 0x7f, 0x1, 0x1, 0x3, 0x1a4, 0x7, 0x0, 0x4, 0x8, 0xa, 0x401, 0x8, 0x3, 0x3, 0xab, 0x200, 0x5, 0xfffffffb, 0xff, 0x1, 0xff, 0x9, 0x1, 0xf, 0x200, 0x5, 0xf, 0x8, 0xa0, 0xcf, 0x0, 0xd3d, 0x1, 0x9, 0x0, 0xfffffff9, 0xcd, 0xffff, 0x3, 0x200, 0x3, 0x42, 0x7fffffff, 0x2, 0x1, 0x5, 0x7, 0xb8dc, 0x4, 0x1, 0x9, 0x5, 0x6, 0x0, 0x50, 0x101, 0x6, 0x80000000, 0xa, 0x3ff, 0xfffffff9, 0x9, 0x0, 0x9, 0xe257, 0x6, 0x10001, 0x4, 0xff, 0x4326, 0x8, 0x5, 0x8000, 0x8, 0x800, 0x6, 0x9, 0x6, 0x3ff, 0x51b, 0x5, 0x8, 0xaa7, 0x5, 0x6d78, 0x4, 0x7, 0x1000, 0x2, 0x9, 0x5, 0x6d0008c, 0x3, 0xae, 0x1, 0x4, 0x8000, 0x8, 0x5, 0x40e8b54c, 0x7, 0x3ff, 0x1, 0x9, 0xe, 0xa, 0x0, 0x8, 0x2dcfa12e, 0x7ff, 0x10, 0x6, 0xfff, 0x9, 0x6, 0x0, 0x5, 0x995, 0x1, 0x8000, 0x4, 0x1000, 0xb, 0x7fff, 0x80000001, 0x200, 0x5, 0x3, 0x80, 0x4, 0x800, 0x5c, 0xffff8001, 0xb, 0x2, 0x8000, 0xfb, 0x6, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x729d2cbd, 0x1ff, 0xd, 0x9, 0x4, 0x4, 0x6, 0x6, 0x101, 0x282, 0xfff, 0x0, 0x501a4f, 0x5, 0x8001, 0x4c5468d3, 0xa, 0x67b, 0x7, 0xef, 0x4, 0x2, 0x926, 0x0, 0x7, 0xfffff800, 0x401, 0xb0fd, 0x4, 0x2, 0x49, 0xffffffff, 0x80000001, 0x40, 0x6, 0x2, 0x400, 0x8, 0x9, 0x9d9, 0x4, 0x4c0, 0x2, 0x9, 0x6, 0x7, 0xffff8e35, 0xc, 0x80000000, 0x9, 0x81, 0x8, 0xf, 0x5, 0x23, 0x3, 0xfffffbff, 0x1, 0xbc67, 0x8, 0x4, 0x9, 0x401, 0x4, 0x8, 0x7fff, 0x10, 0x2d, 0xb, 0x9, 0xbcf, 0x2, 0x3, 0xfffe0000, 0x0, 0x9, 0x66, 0x100, 0x9, 0x9337, 0x10000, 0x9, 0xfffffe01, 0x3, 0x330, 0x2, 0x0, 0x10, 0xd, 0x2, 0x2, 0xc, 0x38000000, 0x7fff, 0x80000000, 0x8000, 0x5, 0x101, 0x1d2, 0xe, 0x1, 0x3, 0x5, 0xf, 0x8468, 0x9, 0x400, 0x775b02b8, 0x3ac, 0x1, 0x8, 0x3, 0x1, 0x3, 0x9f28, 0xff, 0xfffffffb, 0x7, 0x2, 0x51, 0x6, 0xf375, 0xff, 0x2, 0x9, 0x0, 0x2, 0x0, 0xfe0, 0x7, 0x498, 0x7, 0x1a00000, 0x800, 0x827, 0xc931, 0xd, 0xffffffff, 0x9, 0x7fffffff, 0x6, 0xab, 0x5, 0x80000000, 0x9, 0x2, 0x4460, 0x7fffffff, 0x2, 0xc, 0x4, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x83, 0xac0a, 0x8, 0x80, 0x12d2, 0x2, 0x7, 0x6, 0x1000, 0x2, 0x1, 0x1, 0x77, 0x2, 0x0, 0x3, 0x4, 0xe6b, 0xfffffc01, 0xfffffc00, 0x6, 0x1, 0x9, 0x3e75, 0x5d, 0x3, 0x5, 0x0, 0x7, 0x0, 0xfffffffc, 0xd, 0xbd, 0x4, 0x4, 0x4, 0xf3, 0x2, 0x9, 0x1ff, 0x8, 0x7, 0x3, 0xfffffffc, 0xfff, 0x3, 0x5124, 0x7, 0xb2, 0x2, 0x7, 0x0, 0x80000000, 0x1, 0x15a2, 0x216aa1cd, 0x6, 0xffff9c8c, 0x3, 0x5, 0x9, 0x8, 0xfffffffc, 0x5, 0x8b, 0x9, 0x4, 0x3, 0x0, 0x2696, 0xbcd3, 0x5, 0x6, 0x2, 0x920, 0x9, 0xf, 0x1, 0x1462, 0x69, 0x7, 0x8000, 0x0, 0x81, 0x100, 0x2b17, 0x2, 0xc, 0x8, 0x7ec, 0x6, 0x2, 0x1ffe000, 0x7ff, 0x9, 0x0, 0x8e79, 0x199b, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x10b8}}, 0x0) (async) sendmmsg$alg(r5, &(0x7f0000000640), 0x492492492492627, 0x0) (async) sendmsg$key(r4, &(0x7f0000000080)={0xa, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x8) (async) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4b, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000150640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='P\b\r\x00\x00\x00\x00\x00\x00'], 0x0) 2m34.035596048s ago: executing program 33 (id=2741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r1, &(0x7f0000004000)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}, {&(0x7f0000002f80)="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", 0x1000}], 0x8}}], 0x1, 0x8800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000440)=0x40) 2m30.502013775s ago: executing program 34 (id=2742): r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="591a", 0x2}], 0x1}}], 0x2, 0x20040060) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m27.026150052s ago: executing program 35 (id=2743): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x40, r6, 0x205, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async, rerun: 64) r7 = socket(0x11, 0x2, 0x0) (rerun: 64) setsockopt(r7, 0x107, 0x1, &(0x7f0000000000)="010000000000060000071a80010061cc", 0x10) (async) close(r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) 2m21.274558058s ago: executing program 36 (id=2744): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000780)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000007c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)={0x30, r3, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) (fail_nth: 3) 0s ago: executing program 5 (id=2745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000040)='\x00', 0x800, &(0x7f00000002c0)={@_ha_fsid={[0x7fffffff, 0x8]}, {0x7b0d, 0x0, 0xfffffff8, 0x2}}, 0x8001, &(0x7f00000003c0), &(0x7f0000000400)=0xffffff7e}, {[0x1, 0x9, 0x5, 0x1]}, 0x4, 0x66, &(0x7f0000000440)=""/102}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="6da8a103000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc8200000000020000000000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x129642, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x202000, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x4, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x434, 0x28, 0x400, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x0, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0xa, 0x7, 0x4, 0x2, 0x8000, 0x6, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x2008fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x5, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x2, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x7, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0x8, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x4, 0x1000, 0x2, 0xf, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0x358, 0x274, 0x7, 0x8, 0x4, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000010c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r15, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0xe, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0xa44, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000015c0)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) kernel console output (not intermixed with test programs): process `syz.1.1433'. [ 319.247858][T10504] ip_tables: iptables: counters copy to user failed while replacing table [ 320.061061][T10519] sctp: [Deprecated]: syz.1.1435 (pid 10519) Use of int in max_burst socket option. [ 320.061061][T10519] Use struct sctp_assoc_value instead [ 322.812772][T10532] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 322.972268][T10540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1441'. [ 323.067140][T10540] x_tables: duplicate underflow at hook 1 [ 323.130226][T10541] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 323.130257][T10541] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 323.591751][T10546] bond0 (unregistering): Released all slaves [ 324.180298][T10570] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 324.249050][T10571] veth0_macvtap: left promiscuous mode [ 324.675543][T10583] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 324.678117][T10583] bond1 (unregistering): Released all slaves [ 324.863631][T10591] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 324.884411][T10591] bond1 (unregistering): Released all slaves [ 325.831104][T10618] bridge1: entered promiscuous mode [ 325.831169][T10618] bridge1: entered allmulticast mode [ 325.868229][T10618] bridge2: entered promiscuous mode [ 325.869666][T10618] bridge2: entered allmulticast mode [ 326.865025][T10564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.867953][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 327.240045][T10631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1467'. [ 327.351364][T10635] netlink: 'syz.2.1468': attribute type 2 has an invalid length. [ 327.726950][T10641] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 327.760817][T10641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.848006][T10656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.328515][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'. [ 329.647340][T10699] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1483'. [ 329.748372][T10702] ip6t_srh: unknown srh match flags 4000 [ 329.827133][T10705] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 329.915012][T10706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1486'. [ 330.133000][T10710] netlink: 'syz.1.1488': attribute type 24 has an invalid length. [ 331.410554][T10748] tipc: Failed to remove unknown binding: 66,0,0/0:1729895031/1729895033 [ 331.410590][T10748] tipc: Failed to remove unknown binding: 66,0,0/0:1729895031/1729895032 [ 331.412112][T10748] tipc: Failed to remove unknown binding: 66,0,0/0:1729895031/1729895033 [ 331.412142][T10748] tipc: Failed to remove unknown binding: 66,0,0/0:1729895031/1729895032 [ 331.486217][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 331.486243][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 331.678955][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 331.805283][T10752] syz_tun (unregistering): left allmulticast mode [ 331.945024][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'. [ 332.518230][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 332.973556][T10786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1508'. [ 333.373307][T10789] GUP no longer grows the stack in syz.4.1510 (10789): 200000003000-20000000a000 (200000001000) [ 333.373348][T10789] CPU: 1 UID: 0 PID: 10789 Comm: syz.4.1510 Not tainted syzkaller #0 PREEMPT(full) [ 333.373375][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 333.373390][T10789] Call Trace: [ 333.373400][T10789] [ 333.373411][T10789] dump_stack_lvl+0xe8/0x150 [ 333.373455][T10789] __get_user_pages+0x23b1/0x2750 [ 333.373500][T10789] ? lock_acquire+0x115/0x350 [ 333.373546][T10789] ? __gup_longterm_locked+0xcb2/0x16f0 [ 333.373582][T10789] __gup_longterm_locked+0xe24/0x16f0 [ 333.373636][T10789] gup_fast_fallback+0x1d92/0x20e0 [ 333.373701][T10789] ? __pfx_gup_fast_fallback+0x10/0x10 [ 333.373744][T10789] ? is_valid_gup_args+0x11f/0x200 [ 333.373794][T10789] ? get_user_pages_fast+0x4d/0xb0 [ 333.373821][T10789] __iov_iter_get_pages_alloc+0x378/0xa40 [ 333.373862][T10789] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 333.373893][T10789] ? __fget_files+0x2a/0x420 [ 333.373924][T10789] iov_iter_get_pages2+0x5e/0xa0 [ 333.373960][T10789] __se_sys_vmsplice+0x844/0x16f0 [ 333.374014][T10789] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 333.374044][T10789] ? __pfx_futex_wait+0x10/0x10 [ 333.374157][T10789] do_syscall_64+0x166/0x520 [ 333.374189][T10789] ? trace_irq_disable+0x3b/0x140 [ 333.374217][T10789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.374242][T10789] ? clear_bhb_loop+0x70/0xc0 [ 333.374272][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.374296][T10789] RIP: 0033:0x7f32c4b9f559 [ 333.374319][T10789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.374339][T10789] RSP: 002b:00007f32c2dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 333.374365][T10789] RAX: ffffffffffffffda RBX: 00007f32c4e26090 RCX: 00007f32c4b9f559 [ 333.374383][T10789] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 000000000000000a [ 333.374398][T10789] RBP: 00007f32c4c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 333.374413][T10789] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 333.374426][T10789] R13: 00007f32c4e26128 R14: 00007f32c4e26090 R15: 00007fffcb2bff58 [ 333.374466][T10789] [ 333.642359][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1510'. [ 333.671224][T10789] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 333.671224][T10789] Please contact the netfilter-devel mailing list or update your nftables rules. [ 333.897700][T10788] lo speed is unknown, defaulting to 1000 [ 334.058285][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 334.307701][T10808] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1515'. [ 334.457030][T10800] syz_tun: entered allmulticast mode [ 334.608014][T10800] dvmrp8: entered allmulticast mode [ 334.985438][T10828] netlink: 'syz.1.1518': attribute type 11 has an invalid length. [ 335.141455][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 335.169033][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 335.169062][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 335.169143][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 335.263836][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 335.263867][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 335.263948][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 336.342535][T10849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.891748][T10938] syzkaller1: entered promiscuous mode [ 340.891774][T10938] syzkaller1: entered allmulticast mode [ 341.216945][T10952] x_tables: duplicate underflow at hook 2 [ 341.617931][T10961] __nla_validate_parse: 13 callbacks suppressed [ 341.617957][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1556'. [ 341.800259][T10962] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1556'. [ 341.835301][T10967] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 342.525384][T10985] SET target dimension over the limit! [ 342.785854][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1565'. [ 342.875264][T10991] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1565'. [ 343.204832][T10997] bond3: option mode: unable to set because the bond device is up [ 343.207455][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'. [ 343.207477][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 343.250610][T10997] bond0: left allmulticast mode [ 343.295740][T10997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.376106][T10997] bond3: (slave bond0): Enslaving as an active interface with a down link [ 343.667732][T11003] bond3 (unregistering): (slave bond0): Releasing active interface [ 343.709968][T11003] bond3 (unregistering): Released all slaves [ 344.496028][T11033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.804380][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1583'. [ 346.367346][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'. [ 346.994397][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 347.627852][T11099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1598'. [ 347.899008][T11114] netlink: 'syz.1.1601': attribute type 1 has an invalid length. [ 348.327067][T11114] bond0: entered promiscuous mode [ 348.340772][T11114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.306437][T11148] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1612'. [ 349.483670][T11155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1616'. [ 350.145182][T11177] netlink: 'syz.3.1619': attribute type 11 has an invalid length. [ 350.842614][T11198] xt_l2tp: v2 doesn't support IP mode [ 351.091984][ T30] audit: type=1107 audit(1792826829.281:2): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 351.172015][T11203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.172102][T11203] IPv6: NLM_F_CREATE should be set when creating new route [ 351.610223][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 351.885086][T11211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.048796][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 352.737604][T11233] xt_hashlimit: size too large, truncated to 1048576 [ 353.410431][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'. [ 353.557092][T11259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 353.570137][T11255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 353.777403][T11272] tipc: Enabled bearer , priority 10 [ 354.354105][T11280] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 354.406068][T11280] TCP: TCP_TX_DELAY enabled [ 354.437705][T11280] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 354.606932][T11284] netlink: 'syz.1.1647': attribute type 4 has an invalid length. [ 355.005598][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1650'. [ 355.005626][T11296] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1650'. [ 355.005644][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1650'. [ 355.081696][T11296] netlink: 'syz.4.1650': attribute type 1 has an invalid length. [ 355.265572][T11302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1650'. [ 355.397106][T11307] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 355.397139][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1654'. [ 355.455419][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 355.518123][T11301] bond1: (slave geneve3): making interface the new active one [ 355.554190][T11301] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 355.576163][T11302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.629613][ T51] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.629915][ T51] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.629958][ T51] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.629997][ T51] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.375878][T11323] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 356.398058][T11323] netlink: 'syz.3.1660': attribute type 2 has an invalid length. [ 357.347598][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1668'. [ 357.347634][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1668'. [ 357.406672][T11353] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1668'. [ 357.406698][T11353] tc_dump_action: action bad kind [ 357.518031][T11353] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1668'. [ 357.518056][T11353] tc_dump_action: action bad kind [ 357.536202][T11358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1668'. [ 357.536233][T11358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1668'. [ 358.473064][T11374] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 358.697457][T11374] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1672'. [ 359.332451][T11399] syz_tun: left allmulticast mode [ 359.332584][T11399] dvmrp8: left allmulticast mode [ 359.436526][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 359.576113][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 360.214677][T11430] sctp: Trying to GSO but underlying device doesn't support it. [ 360.493583][T11434] netlink: 'syz.2.1687': attribute type 4 has an invalid length. [ 361.415722][T11453] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 361.450346][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 362.123368][T11480] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 362.194516][T11480] bond2 (unregistering): Released all slaves [ 362.360901][T11497] netlink: 'syz.4.1705': attribute type 28 has an invalid length. [ 362.360924][T11497] netlink: 'syz.4.1705': attribute type 3 has an invalid length. [ 362.360938][T11497] __nla_validate_parse: 1 callbacks suppressed [ 362.360949][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.362063][T11497] netlink: 'syz.4.1705': attribute type 28 has an invalid length. [ 362.362082][T11497] netlink: 'syz.4.1705': attribute type 3 has an invalid length. [ 362.362095][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.366804][T11497] netlink: 'syz.4.1705': attribute type 28 has an invalid length. [ 362.366824][T11497] netlink: 'syz.4.1705': attribute type 3 has an invalid length. [ 362.366838][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.371552][T11497] netlink: 'syz.4.1705': attribute type 28 has an invalid length. [ 362.371603][T11497] netlink: 'syz.4.1705': attribute type 3 has an invalid length. [ 362.371645][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.391115][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.399423][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.404234][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.411917][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.422753][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.432990][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 363.366772][T11511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.484623][T11516] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.526698][T11516] bond0: (slave team0): Enslaving as an active interface with an up link [ 363.688460][T11528] x_tables: duplicate underflow at hook 3 [ 364.445954][T11546] lo: entered promiscuous mode [ 364.446141][T11546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.548119][T11573] ip_tables: iptables: counters copy to user failed while replacing table [ 365.600918][T11572] validate_nla: 124 callbacks suppressed [ 365.600940][T11572] netlink: 'syz.0.1725': attribute type 4 has an invalid length. [ 366.128296][T11582] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 366.241258][T11582] geneve2: entered promiscuous mode [ 366.241288][T11582] geneve2: entered allmulticast mode [ 367.578504][T11612] netlink: 'syz.1.1737': attribute type 4 has an invalid length. [ 367.638924][T11615] syzkaller1: entered promiscuous mode [ 367.638950][T11615] syzkaller1: entered allmulticast mode [ 368.202972][T11628] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 368.319817][T11635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.389190][T11628] 8021q: adding VLAN 0 to HW filter on device bond10 [ 368.570730][T11631] bond10: (slave geneve5): making interface the new active one [ 368.572182][T11631] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 368.604282][T11634] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 368.960469][T11647] __nla_validate_parse: 96 callbacks suppressed [ 368.960500][T11647] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1747'. [ 369.051629][T11649] syzkaller1: entered promiscuous mode [ 369.051655][T11649] syzkaller1: entered allmulticast mode [ 369.220899][T11654] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1749'. [ 369.282462][T11656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1748'. [ 369.665213][T11660] netlink: 'syz.1.1751': attribute type 4 has an invalid length. [ 369.868073][T11676] netlink: 604 bytes leftover after parsing attributes in process `syz.1.1757'. [ 369.911096][T11677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1756'. [ 370.065441][T11667] vlan5: entered allmulticast mode [ 370.065467][T11667] bond0: entered allmulticast mode [ 370.065483][T11667] bond_slave_0: entered allmulticast mode [ 370.065502][T11667] bond_slave_1: entered allmulticast mode [ 370.453012][T11691] ipt_ECN: cannot use operation on non-tcp rule [ 371.162959][T11707] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.185725][ T5630] Bluetooth: hci2: connection err: -111 [ 371.221587][T11702] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1763'. [ 371.243295][T11706] netlink: 'syz.2.1767': attribute type 4 has an invalid length. [ 371.259042][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1765'. [ 371.454337][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 371.534519][T11716] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.534901][T11716] netlink: 'syz.1.1768': attribute type 1 has an invalid length. [ 372.443058][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 373.292695][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'. [ 373.826817][T11772] xt_hashlimit: size too large, truncated to 1048576 [ 374.046860][T11776] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 374.308178][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 374.655062][T11779] bond7 (unregistering): Released all slaves [ 374.707417][T11792] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 374.725215][T11793] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 374.913943][T11792] 8021q: VLANs not supported on ip_vti0 [ 375.848044][T11828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1806'. [ 375.848088][T11828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1806'. [ 376.393925][T11836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1809'. [ 376.450420][T11836] xt_bpf: check failed: parse error [ 376.544629][T11830] bond2: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 376.673307][T11830] bond2 (unregistering): Released all slaves [ 377.279892][T11864] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1814'. [ 377.520179][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1814'. [ 377.520509][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 378.026966][T11872] IPVS: Scheduler module ip_vs_sip not found [ 378.365785][T11873] IPVS: Scheduler module ip_vs_sip not found [ 378.549974][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.550034][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.914976][T11898] xt_hashlimit: size too large, truncated to 1048576 [ 378.974467][T11905] netlink: 'syz.0.1825': attribute type 2 has an invalid length. [ 378.974490][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 380.086603][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1835'. [ 380.248909][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 380.325344][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 380.343002][ T9131] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.343052][ T9131] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.343091][ T9131] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.343128][ T9131] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.554515][T11937] syzkaller1: entered promiscuous mode [ 380.554543][T11937] syzkaller1: entered allmulticast mode [ 380.617546][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 382.621864][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1847'. [ 382.936470][T11922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.373492][T11979] IPv6: sit2: Disabled Multicast RS [ 383.417346][T11982] bond0: entered promiscuous mode [ 383.435899][T11982] batadv0: entered promiscuous mode [ 383.450050][T11982] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 383.456817][T11982] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 383.815441][T12000] netlink: 'syz.4.1856': attribute type 4 has an invalid length. [ 384.135743][T12004] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1858'. [ 384.135842][T12004] ksmbd: Unknown IPC event: 0, ignore. [ 384.360423][T12013] xt_hashlimit: size too large, truncated to 1048576 [ 384.584697][T12018] xt_hashlimit: size too large, truncated to 1048576 [ 385.706790][T12034] sctp: [Deprecated]: syz.1.1867 (pid 12034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.706790][T12034] Use struct sctp_sack_info instead [ 386.127268][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1869'. [ 386.127313][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 386.830913][T12063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1875'. [ 386.945421][T12065] netlink: 'syz.4.1876': attribute type 5 has an invalid length. [ 388.003551][T12026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.579489][T12079] xt_hashlimit: size too large, truncated to 1048576 [ 389.072113][T12077] syzkaller1: entered promiscuous mode [ 389.072141][T12077] syzkaller1: entered allmulticast mode [ 389.590599][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1886'. [ 389.628676][T12100] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 389.857877][T12115] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1887'. [ 390.359742][T12126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1891'. [ 390.391693][T12126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1891'. [ 391.021181][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 391.102864][T12146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1897'. [ 391.190218][T12147] xt_hashlimit: size too large, truncated to 1048576 [ 391.265577][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'. [ 391.265607][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'. [ 391.424583][T12157] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 391.463536][T12157] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.482224][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1900'. [ 391.482949][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 391.898055][T12157] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 392.504084][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1906'. [ 392.534794][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1906'. [ 392.770959][T12172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.064624][T12186] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1909'. [ 393.190489][T12190] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 393.452783][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 393.594293][T12198] bond3: option xmit_hash_policy: invalid value (64) [ 393.624012][T12198] bond3 (unregistering): Released all slaves [ 393.917848][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1917'. [ 394.299123][T12211] FAULT_INJECTION: forcing a failure. [ 394.299123][T12211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.299169][T12211] CPU: 0 UID: 0 PID: 12211 Comm: syz.4.1918 Not tainted syzkaller #0 PREEMPT(full) [ 394.299195][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 394.299215][T12211] Call Trace: [ 394.299228][T12211] [ 394.299239][T12211] dump_stack_lvl+0xe8/0x150 [ 394.299280][T12211] should_fail_ex+0x410/0x560 [ 394.299317][T12211] _copy_from_user+0x2d/0xb0 [ 394.299350][T12211] ___sys_sendmsg+0x1c6/0x360 [ 394.299378][T12211] ? __lock_acquire+0x747/0x2de0 [ 394.299409][T12211] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.299481][T12211] ? __fget_files+0x3a2/0x420 [ 394.299505][T12211] ? __fget_files+0x2a/0x420 [ 394.299540][T12211] __x64_sys_sendmsg+0x1b1/0x290 [ 394.299574][T12211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.299642][T12211] do_syscall_64+0x166/0x520 [ 394.299673][T12211] ? trace_irq_disable+0x3b/0x140 [ 394.299699][T12211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.299723][T12211] ? clear_bhb_loop+0x70/0xc0 [ 394.299751][T12211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.299774][T12211] RIP: 0033:0x7f32c4b9f559 [ 394.299795][T12211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.299813][T12211] RSP: 002b:00007f32c2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.299838][T12211] RAX: ffffffffffffffda RBX: 00007f32c4e25fa0 RCX: 00007f32c4b9f559 [ 394.299854][T12211] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 394.299869][T12211] RBP: 00007f32c2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.299883][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.299897][T12211] R13: 00007f32c4e26038 R14: 00007f32c4e25fa0 R15: 00007fffcb2bff58 [ 394.299935][T12211] [ 394.961588][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961632][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961663][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961694][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961723][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961752][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961781][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961810][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961840][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961884][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961914][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961943][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.961972][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962002][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962031][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962060][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962090][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962119][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962148][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962179][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962208][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962238][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962267][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962296][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962324][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962353][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962382][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962411][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962440][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962476][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962505][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962534][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962563][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962592][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962621][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962650][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962679][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962708][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962737][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962766][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962795][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962824][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962854][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962882][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962911][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962940][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962969][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.962998][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.963027][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.963056][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.963085][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 394.963114][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.299782][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.299836][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.299870][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.299900][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.299931][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.299961][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.299991][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.300021][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.300051][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.300081][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.300111][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.300141][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 395.300171][T12230] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 396.039243][T12234] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 396.167048][T12258] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 396.248516][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1928'. [ 396.607550][T12258] 8021q: adding VLAN 0 to HW filter on device bond11 [ 397.001823][T12282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1931'. [ 397.855485][T12299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1938'. [ 397.910946][T12303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1938'. [ 397.976438][T12305] FAULT_INJECTION: forcing a failure. [ 397.976438][T12305] name failslab, interval 1, probability 0, space 0, times 0 [ 397.976477][T12305] CPU: 1 UID: 0 PID: 12305 Comm: syz.3.1939 Not tainted syzkaller #0 PREEMPT(full) [ 397.976504][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 397.976519][T12305] Call Trace: [ 397.976528][T12305] [ 397.976539][T12305] dump_stack_lvl+0xe8/0x150 [ 397.976580][T12305] should_fail_ex+0x410/0x560 [ 397.976617][T12305] ? __alloc_skb+0x1db/0x7a0 [ 397.976644][T12305] should_failslab+0xa8/0x100 [ 397.976681][T12305] ? __alloc_skb+0x1db/0x7a0 [ 397.976707][T12305] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 397.976736][T12305] ? __alloc_skb+0x18d/0x7a0 [ 397.976764][T12305] ? __alloc_skb+0x1db/0x7a0 [ 397.976800][T12305] __alloc_skb+0x1db/0x7a0 [ 397.976832][T12305] netlink_sendmsg+0x5cd/0xb20 [ 397.976866][T12305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.976897][T12305] ? aa_sock_msg_perm+0x144/0x210 [ 397.976934][T12305] ? apparmor_socket_sendmsg+0x98/0x360 [ 397.976960][T12305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.976984][T12305] sock_sendmsg_nosec+0x14e/0x190 [ 397.977027][T12305] ____sys_sendmsg+0x54e/0x850 [ 397.977065][T12305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.977108][T12305] ? import_iovec+0x73/0xa0 [ 397.977143][T12305] ___sys_sendmsg+0x2a5/0x360 [ 397.977172][T12305] ? __lock_acquire+0x747/0x2de0 [ 397.977213][T12305] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.977288][T12305] ? __fget_files+0x3a2/0x420 [ 397.977313][T12305] ? __fget_files+0x2a/0x420 [ 397.977350][T12305] __x64_sys_sendmsg+0x1b1/0x290 [ 397.977385][T12305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.977442][T12305] do_syscall_64+0x166/0x520 [ 397.977473][T12305] ? trace_irq_disable+0x3b/0x140 [ 397.977501][T12305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.977526][T12305] ? clear_bhb_loop+0x70/0xc0 [ 397.977555][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.977580][T12305] RIP: 0033:0x7f20db79f559 [ 397.977602][T12305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.977622][T12305] RSP: 002b:00007f20dc5a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.977648][T12305] RAX: ffffffffffffffda RBX: 00007f20dba25fa0 RCX: 00007f20db79f559 [ 397.977666][T12305] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 397.977681][T12305] RBP: 00007f20dc5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 397.977697][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.977710][T12305] R13: 00007f20dba26038 R14: 00007f20dba25fa0 R15: 00007ffe30755ad8 [ 397.977748][T12305] [ 398.587597][T12314] xt_TPROXY: Can be used only with -p tcp or -p udp [ 398.783991][T12308] tc action pedit offset must be on 32 bit boundaries [ 398.806350][T12308] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 399.738138][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1945'. [ 400.442394][T12344] netlink: 'syz.4.1951': attribute type 29 has an invalid length. [ 400.450385][T12344] netlink: 'syz.4.1951': attribute type 29 has an invalid length. [ 400.942912][T12362] FAULT_INJECTION: forcing a failure. [ 400.942912][T12362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.942949][T12362] CPU: 1 UID: 0 PID: 12362 Comm: syz.4.1955 Not tainted syzkaller #0 PREEMPT(full) [ 400.942985][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.943003][T12362] Call Trace: [ 400.943011][T12362] [ 400.943021][T12362] dump_stack_lvl+0xe8/0x150 [ 400.943061][T12362] should_fail_ex+0x410/0x560 [ 400.943098][T12362] _copy_from_iter+0x1d3/0x1660 [ 400.943127][T12362] ? __alloc_skb+0x27a/0x7a0 [ 400.943155][T12362] ? __alloc_skb+0x27a/0x7a0 [ 400.943184][T12362] ? __alloc_skb+0x27a/0x7a0 [ 400.943209][T12362] ? __pfx__copy_from_iter+0x10/0x10 [ 400.943234][T12362] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 400.943261][T12362] ? __alloc_skb+0x27a/0x7a0 [ 400.943284][T12362] ? __alloc_skb+0x27a/0x7a0 [ 400.943318][T12362] ? netlink_sendmsg+0x64f/0xb20 [ 400.943341][T12362] ? skb_put+0x112/0x210 [ 400.943372][T12362] netlink_sendmsg+0x6bb/0xb20 [ 400.943403][T12362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.943432][T12362] ? aa_sock_msg_perm+0x144/0x210 [ 400.943465][T12362] ? apparmor_socket_sendmsg+0x98/0x360 [ 400.943492][T12362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.943516][T12362] sock_sendmsg_nosec+0x14e/0x190 [ 400.943558][T12362] ____sys_sendmsg+0x54e/0x850 [ 400.943596][T12362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.943639][T12362] ? import_iovec+0x73/0xa0 [ 400.943675][T12362] ___sys_sendmsg+0x2a5/0x360 [ 400.943704][T12362] ? __lock_acquire+0x747/0x2de0 [ 400.943736][T12362] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.943811][T12362] ? __fget_files+0x3a2/0x420 [ 400.943836][T12362] ? __fget_files+0x2a/0x420 [ 400.943884][T12362] __x64_sys_sendmsg+0x1b1/0x290 [ 400.943918][T12362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.943982][T12362] do_syscall_64+0x166/0x520 [ 400.944012][T12362] ? trace_irq_disable+0x3b/0x140 [ 400.944040][T12362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.944064][T12362] ? clear_bhb_loop+0x70/0xc0 [ 400.944092][T12362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.944116][T12362] RIP: 0033:0x7f32c4b9f559 [ 400.944138][T12362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.944158][T12362] RSP: 002b:00007f32c2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.944184][T12362] RAX: ffffffffffffffda RBX: 00007f32c4e25fa0 RCX: 00007f32c4b9f559 [ 400.944201][T12362] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 400.944216][T12362] RBP: 00007f32c2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.944230][T12362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.944244][T12362] R13: 00007f32c4e26038 R14: 00007f32c4e25fa0 R15: 00007fffcb2bff58 [ 400.944281][T12362] [ 400.944860][T12361] FAULT_INJECTION: forcing a failure. [ 400.944860][T12361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.944888][T12361] CPU: 1 UID: 0 PID: 12361 Comm: syz.3.1956 Not tainted syzkaller #0 PREEMPT(full) [ 400.944914][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.944929][T12361] Call Trace: [ 400.944938][T12361] [ 400.944947][T12361] dump_stack_lvl+0xe8/0x150 [ 400.944994][T12361] should_fail_ex+0x410/0x560 [ 400.945031][T12361] _copy_to_user+0x31/0xb0 [ 400.945064][T12361] simple_read_from_buffer+0xe1/0x170 [ 400.945097][T12361] proc_fail_nth_read+0x1bb/0x230 [ 400.945133][T12361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.945168][T12361] ? rw_verify_area+0x24a/0x4c0 [ 400.945197][T12361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.945228][T12361] vfs_read+0x213/0xa80 [ 400.945261][T12361] ? __pfx___mutex_lock+0x10/0x10 [ 400.945293][T12361] ? __pfx_vfs_read+0x10/0x10 [ 400.945322][T12361] ? __fget_files+0x2a/0x420 [ 400.945345][T12361] ? __fget_files+0x3a2/0x420 [ 400.945371][T12361] ? __fget_files+0x2a/0x420 [ 400.945401][T12361] ? fdget+0x1ac/0x250 [ 400.945434][T12361] ksys_read+0x150/0x270 [ 400.945464][T12361] ? __pfx_ksys_read+0x10/0x10 [ 400.945505][T12361] do_syscall_64+0x166/0x520 [ 400.945535][T12361] ? trace_irq_disable+0x3b/0x140 [ 400.945561][T12361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.945585][T12361] ? clear_bhb_loop+0x70/0xc0 [ 400.945615][T12361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.945638][T12361] RIP: 0033:0x7f20db75fd8e [ 400.945659][T12361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.945677][T12361] RSP: 002b:00007f20dc5a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.945700][T12361] RAX: ffffffffffffffda RBX: 00007f20dc5a66c0 RCX: 00007f20db75fd8e [ 400.945736][T12361] RDX: 000000000000000f RSI: 00007f20dc5a60a0 RDI: 0000000000000006 [ 400.945751][T12361] RBP: 00007f20dc5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.945767][T12361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.945781][T12361] R13: 00007f20dba26038 R14: 00007f20dba25fa0 R15: 00007ffe30755ad8 [ 400.945820][T12361] [ 401.131242][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1957'. [ 402.064167][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 402.064194][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1964'. [ 402.064223][T12386] netlink: 'syz.3.1964': attribute type 15 has an invalid length. [ 402.148761][ T9134] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 402.149951][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 402.149972][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1964'. [ 402.150000][T12386] netlink: 'syz.3.1964': attribute type 15 has an invalid length. [ 402.199579][ T31] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 402.199630][ T31] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 402.199669][ T31] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 402.258777][T12388] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1965'. [ 403.137472][T12336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.450559][T12405] FAULT_INJECTION: forcing a failure. [ 403.450559][T12405] name failslab, interval 1, probability 0, space 0, times 0 [ 403.450597][T12405] CPU: 0 UID: 0 PID: 12405 Comm: syz.4.1972 Not tainted syzkaller #0 PREEMPT(full) [ 403.450624][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 403.450639][T12405] Call Trace: [ 403.450648][T12405] [ 403.450657][T12405] dump_stack_lvl+0xe8/0x150 [ 403.450708][T12405] should_fail_ex+0x410/0x560 [ 403.450745][T12405] should_failslab+0xa8/0x100 [ 403.450781][T12405] ? skb_clone+0x212/0x3a0 [ 403.450814][T12405] kmem_cache_alloc_noprof+0x9c/0x600 [ 403.450845][T12405] ? skb_clone+0x212/0x3a0 [ 403.450885][T12405] skb_clone+0x212/0x3a0 [ 403.450922][T12405] __netlink_deliver_tap+0x355/0x6e0 [ 403.450960][T12405] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.450987][T12405] netlink_deliver_tap+0x19c/0x1b0 [ 403.451013][T12405] netlink_unicast+0x8c1/0xa80 [ 403.451069][T12405] netlink_sendmsg+0x7f0/0xb20 [ 403.451102][T12405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.451131][T12405] ? aa_sock_msg_perm+0x144/0x210 [ 403.451165][T12405] ? apparmor_socket_sendmsg+0x98/0x360 [ 403.451192][T12405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.451222][T12405] sock_sendmsg_nosec+0x14e/0x190 [ 403.451263][T12405] ____sys_sendmsg+0x54e/0x850 [ 403.451301][T12405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.451344][T12405] ? import_iovec+0x73/0xa0 [ 403.451380][T12405] ___sys_sendmsg+0x2a5/0x360 [ 403.451408][T12405] ? __lock_acquire+0x747/0x2de0 [ 403.451441][T12405] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.451515][T12405] ? __fget_files+0x3a2/0x420 [ 403.451540][T12405] ? __fget_files+0x2a/0x420 [ 403.451576][T12405] __x64_sys_sendmsg+0x1b1/0x290 [ 403.451612][T12405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.451688][T12405] do_syscall_64+0x166/0x520 [ 403.451736][T12405] ? trace_irq_disable+0x3b/0x140 [ 403.451764][T12405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.451788][T12405] ? clear_bhb_loop+0x70/0xc0 [ 403.451829][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.451851][T12405] RIP: 0033:0x7f32c4b9f559 [ 403.451872][T12405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.451891][T12405] RSP: 002b:00007f32c2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.451942][T12405] RAX: ffffffffffffffda RBX: 00007f32c4e25fa0 RCX: 00007f32c4b9f559 [ 403.451960][T12405] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 403.451988][T12405] RBP: 00007f32c2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 403.452003][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.452017][T12405] R13: 00007f32c4e26038 R14: 00007f32c4e25fa0 R15: 00007fffcb2bff58 [ 403.452054][T12405] [ 403.830645][T12406] netlink: 'syz.2.1970': attribute type 32 has an invalid length. [ 403.830673][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 404.066116][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 404.066156][T12414] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1974'. [ 404.136262][T12406] bond12: Setting coupled_control to off (0) [ 404.215851][T12419] sock: sock_timestamping_bind_phc: sock not bind to device [ 405.298730][T12446] xt_LOG: level 8 >= 8 [ 406.084480][T12459] FAULT_INJECTION: forcing a failure. [ 406.084480][T12459] name failslab, interval 1, probability 0, space 0, times 0 [ 406.084520][T12459] CPU: 1 UID: 0 PID: 12459 Comm: syz.4.1987 Not tainted syzkaller #0 PREEMPT(full) [ 406.084546][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 406.084561][T12459] Call Trace: [ 406.084570][T12459] [ 406.084580][T12459] dump_stack_lvl+0xe8/0x150 [ 406.084621][T12459] should_fail_ex+0x410/0x560 [ 406.084658][T12459] should_failslab+0xa8/0x100 [ 406.084696][T12459] __kmalloc_cache_noprof+0x9e/0x600 [ 406.084727][T12459] ? gred_change+0x93d/0x1d90 [ 406.084760][T12459] ? gred_change+0x93d/0x1d90 [ 406.084801][T12459] gred_change+0x93d/0x1d90 [ 406.084849][T12459] ? __pfx___nla_validate_parse+0x10/0x10 [ 406.084886][T12459] ? __lock_acquire+0x747/0x2de0 [ 406.084912][T12459] ? __pfx_gred_change+0x10/0x10 [ 406.084982][T12459] ? lock_acquire+0x115/0x350 [ 406.085024][T12459] ? nla_strcmp+0xf8/0x130 [ 406.085062][T12459] tc_modify_qdisc+0x1aa0/0x2390 [ 406.085108][T12459] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 406.085139][T12459] ? __pfx_hook_capable+0x10/0x10 [ 406.085200][T12459] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 406.085230][T12459] rtnetlink_rcv_msg+0x7b9/0xc00 [ 406.085279][T12459] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 406.085307][T12459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.085340][T12459] ? __copy_skb_header+0xa3/0x4a0 [ 406.085387][T12459] netlink_rcv_skb+0x226/0x4a0 [ 406.085412][T12459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.085452][T12459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.085492][T12459] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.085516][T12459] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.085547][T12459] netlink_unicast+0x8ef/0xa80 [ 406.085602][T12459] netlink_sendmsg+0x7f0/0xb20 [ 406.085634][T12459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.085663][T12459] ? aa_sock_msg_perm+0x144/0x210 [ 406.085695][T12459] ? apparmor_socket_sendmsg+0x98/0x360 [ 406.085721][T12459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.085745][T12459] sock_sendmsg_nosec+0x14e/0x190 [ 406.085785][T12459] ____sys_sendmsg+0x54e/0x850 [ 406.085823][T12459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.085864][T12459] ? import_iovec+0x73/0xa0 [ 406.085919][T12459] ___sys_sendmsg+0x2a5/0x360 [ 406.085947][T12459] ? __lock_acquire+0x747/0x2de0 [ 406.085979][T12459] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.086055][T12459] ? __fget_files+0x3a2/0x420 [ 406.086081][T12459] ? __fget_files+0x2a/0x420 [ 406.086119][T12459] __x64_sys_sendmsg+0x1b1/0x290 [ 406.086154][T12459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.086213][T12459] do_syscall_64+0x166/0x520 [ 406.086244][T12459] ? trace_irq_disable+0x3b/0x140 [ 406.086272][T12459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.086297][T12459] ? clear_bhb_loop+0x70/0xc0 [ 406.086327][T12459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.086351][T12459] RIP: 0033:0x7f32c4b9f559 [ 406.086373][T12459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.086393][T12459] RSP: 002b:00007f32c2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.086418][T12459] RAX: ffffffffffffffda RBX: 00007f32c4e25fa0 RCX: 00007f32c4b9f559 [ 406.086437][T12459] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 406.086460][T12459] RBP: 00007f32c2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.086475][T12459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.086489][T12459] R13: 00007f32c4e26038 R14: 00007f32c4e25fa0 R15: 00007fffcb2bff58 [ 406.086529][T12459] [ 406.739949][T12463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 406.741802][T12463] team0: Device ipvlan2 is already an upper device of the team interface [ 407.838954][T12487] hsr0: entered allmulticast mode [ 407.838982][T12487] hsr_slave_0: entered allmulticast mode [ 407.839003][T12487] hsr_slave_1: entered allmulticast mode [ 407.959113][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 407.965093][T12487] hsr0: entered promiscuous mode [ 408.122243][T12490] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 408.175344][T12491] hsr_slave_0: left promiscuous mode [ 408.177950][T12491] hsr_slave_1: left promiscuous mode [ 408.370107][T12491] hsr0 (unregistering): left allmulticast mode [ 408.370546][T12491] hsr0 (unregistering): left promiscuous mode [ 409.183803][T12520] netlink: 'syz.1.2009': attribute type 1 has an invalid length. [ 409.227282][T12520] bond3: entered promiscuous mode [ 409.227752][T12520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 409.251044][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2010'. [ 409.272553][T12520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 409.272962][T12520] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 409.272984][T12520] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 409.278109][T12520] bond3: (slave xfrm1): making interface the new active one [ 409.278133][T12520] xfrm1: entered promiscuous mode [ 409.322591][T12520] xfrm1: left promiscuous mode [ 409.882022][T12539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2015'. [ 410.321850][T12554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2019'. [ 410.357234][T12554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2019'. [ 410.805673][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 410.983977][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 411.047968][T12572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.251901][T12576] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2025'. [ 411.396485][T12583] netlink: 'syz.4.2025': attribute type 178 has an invalid length. [ 411.484948][T12585] netlink: ct_mark mask cannot be 0 [ 411.484985][T12585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.691277][T12610] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 412.691362][T12610] syzkaller1: linktype set to 823 [ 412.870098][T12608] bridge0: port 1(vlan2) entered blocking state [ 412.870228][T12608] bridge0: port 1(vlan2) entered disabled state [ 412.870442][T12608] vlan2: entered allmulticast mode [ 412.870461][T12608] bridge0: entered allmulticast mode [ 412.946466][T12608] vlan2: left allmulticast mode [ 412.946493][T12608] bridge0: left allmulticast mode [ 413.297040][T12633] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 413.498326][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 413.782129][T12640] syzkaller0: entered promiscuous mode [ 413.782155][T12640] syzkaller0: entered allmulticast mode [ 413.966783][T12644] macvlan0: entered promiscuous mode [ 414.127010][T12653] tipc: Started in network mode [ 414.127035][T12653] tipc: Node identity 7f, cluster identity 4711 [ 414.127049][T12653] tipc: Node number set to 127 [ 414.241350][T12649] gtp0: entered promiscuous mode [ 414.241581][T12649] gtp0: entered allmulticast mode [ 414.512239][T12663] bond15: entered promiscuous mode [ 414.740642][T12669] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 414.764643][T12669] bond4 (unregistering): Released all slaves [ 414.925714][T12690] FAULT_INJECTION: forcing a failure. [ 414.925714][T12690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.925753][T12690] CPU: 0 UID: 0 PID: 12690 Comm: syz.4.2049 Not tainted syzkaller #0 PREEMPT(full) [ 414.925780][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 414.925794][T12690] Call Trace: [ 414.925803][T12690] [ 414.925814][T12690] dump_stack_lvl+0xe8/0x150 [ 414.925854][T12690] should_fail_ex+0x410/0x560 [ 414.925892][T12690] _copy_to_user+0x31/0xb0 [ 414.925926][T12690] simple_read_from_buffer+0xe1/0x170 [ 414.925964][T12690] proc_fail_nth_read+0x1bb/0x230 [ 414.926000][T12690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.926036][T12690] ? rw_verify_area+0x24a/0x4c0 [ 414.926065][T12690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.926095][T12690] vfs_read+0x213/0xa80 [ 414.926140][T12690] ? __pfx___mutex_lock+0x10/0x10 [ 414.926173][T12690] ? __pfx_vfs_read+0x10/0x10 [ 414.926203][T12690] ? __fget_files+0x2a/0x420 [ 414.926226][T12690] ? __fget_files+0x3a2/0x420 [ 414.926250][T12690] ? __fget_files+0x2a/0x420 [ 414.926280][T12690] ? fdget+0x1ac/0x250 [ 414.926314][T12690] ksys_read+0x150/0x270 [ 414.926343][T12690] ? __pfx_ksys_read+0x10/0x10 [ 414.926385][T12690] do_syscall_64+0x166/0x520 [ 414.926415][T12690] ? trace_irq_disable+0x3b/0x140 [ 414.926442][T12690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.926467][T12690] ? clear_bhb_loop+0x70/0xc0 [ 414.926496][T12690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.926520][T12690] RIP: 0033:0x7f32c4b5fd8e [ 414.926542][T12690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 414.926562][T12690] RSP: 002b:00007f32c2d71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.926587][T12690] RAX: ffffffffffffffda RBX: 00007f32c2d726c0 RCX: 00007f32c4b5fd8e [ 414.926605][T12690] RDX: 000000000000000f RSI: 00007f32c2d720a0 RDI: 0000000000000008 [ 414.926620][T12690] RBP: 00007f32c2d72090 R08: 0000000000000000 R09: 0000000000000000 [ 414.926634][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.926648][T12690] R13: 00007f32c4e263f8 R14: 00007f32c4e26360 R15: 00007fffcb2bff58 [ 414.926687][T12690] [ 415.400542][T12695] FAULT_INJECTION: forcing a failure. [ 415.400542][T12695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.400581][T12695] CPU: 0 UID: 0 PID: 12695 Comm: syz.3.2050 Not tainted syzkaller #0 PREEMPT(full) [ 415.400607][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.400621][T12695] Call Trace: [ 415.400630][T12695] [ 415.400640][T12695] dump_stack_lvl+0xe8/0x150 [ 415.400679][T12695] should_fail_ex+0x410/0x560 [ 415.400718][T12695] _copy_from_user+0x2d/0xb0 [ 415.400751][T12695] kstrtouint_from_user+0xd6/0x180 [ 415.400779][T12695] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 415.400816][T12695] ? lock_acquire+0x115/0x350 [ 415.400847][T12695] proc_fail_nth_write+0x8e/0x210 [ 415.400873][T12695] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 415.400906][T12695] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 415.400930][T12695] vfs_write+0x296/0xba0 [ 415.400960][T12695] ? __pfx_vfs_write+0x10/0x10 [ 415.400983][T12695] ? __fget_files+0x2a/0x420 [ 415.401003][T12695] ? __fget_files+0x3a2/0x420 [ 415.401024][T12695] ? __fget_files+0x2a/0x420 [ 415.401047][T12695] ? fdget+0x1ac/0x250 [ 415.401073][T12695] ksys_write+0x150/0x270 [ 415.401104][T12695] ? __pfx_ksys_write+0x10/0x10 [ 415.401137][T12695] do_syscall_64+0x166/0x520 [ 415.401161][T12695] ? trace_irq_disable+0x3b/0x140 [ 415.401183][T12695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.401202][T12695] ? clear_bhb_loop+0x70/0xc0 [ 415.401225][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.401243][T12695] RIP: 0033:0x7f20db75fd8e [ 415.401261][T12695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.401278][T12695] RSP: 002b:00007f20d9992fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.401303][T12695] RAX: ffffffffffffffda RBX: 00007f20d99936c0 RCX: 00007f20db75fd8e [ 415.401320][T12695] RDX: 0000000000000001 RSI: 00007f20d99930a0 RDI: 0000000000000006 [ 415.401334][T12695] RBP: 00007f20d9993090 R08: 0000000000000000 R09: 0000000000000000 [ 415.401348][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.401362][T12695] R13: 00007f20dba264e8 R14: 00007f20dba26450 R15: 00007ffe30755ad8 [ 415.401392][T12695] [ 416.529779][T12705] netlink: 'syz.4.2056': attribute type 3 has an invalid length. [ 416.529804][T12705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2056'. [ 416.598792][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 416.692200][T12711] syzkaller1: entered promiscuous mode [ 416.692225][T12711] syzkaller1: entered allmulticast mode [ 417.270661][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2064'. [ 417.412295][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2064'. [ 417.481223][T12744] ip6t_srh: unknown srh invflags 4000 [ 417.630583][T12748] ip_tables: iptables: counters copy to user failed while replacing table [ 417.650267][T12748] --map-set only usable from mangle table [ 417.762751][T12751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2068'. [ 417.810829][T12759] --map-set only usable from mangle table [ 417.891536][T12753] ip_tables: iptables: counters copy to user failed while replacing table [ 418.355012][T12765] netlink: 'syz.0.2072': attribute type 11 has an invalid length. [ 418.971830][T12783] netlink: 'syz.2.2076': attribute type 8 has an invalid length. [ 421.756843][T12814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2079'. [ 421.829853][T12815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2080'. [ 421.862464][T12815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2080'. [ 423.398703][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 423.398732][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'. [ 423.404626][T12853] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 423.843967][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2095'. [ 423.941888][T12867] xt_hashlimit: size too large, truncated to 1048576 [ 424.043986][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2093'. [ 424.064269][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2093'. [ 424.446175][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 424.446492][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 424.929748][T12880] netlink: 'syz.4.2100': attribute type 8 has an invalid length. [ 425.012111][T12882] netlink: 'syz.4.2100': attribute type 8 has an invalid length. [ 426.701433][T12931] xt_hashlimit: size too large, truncated to 1048576 [ 426.905191][T12936] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 427.197292][T12941] __nla_validate_parse: 4 callbacks suppressed [ 427.197315][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2114'. [ 428.022256][T12948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2118'. [ 428.046758][T12948] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2118'. [ 428.414549][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2121'. [ 428.435923][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2121'. [ 428.569420][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 428.804992][T12965] vlan2: entered allmulticast mode [ 428.805021][T12965] bridge2: entered allmulticast mode [ 428.919989][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'. [ 428.960073][T12970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2124'. [ 429.171615][T12975] tipc: Can't bind to reserved service type 3 [ 429.173457][T12975] tipc: Failed to remove unknown binding: 66,0,2/2886997057:4288845393/4288845394 [ 429.173897][T12975] tipc: Failed to remove unknown binding: 66,0,2/2886997057:4288845393/4288845394 [ 429.357029][T12981] xt_hashlimit: size too large, truncated to 1048576 [ 429.405729][T12987] FAULT_INJECTION: forcing a failure. [ 429.405729][T12987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.405778][T12987] CPU: 0 UID: 0 PID: 12987 Comm: syz.0.2130 Not tainted syzkaller #0 PREEMPT(full) [ 429.405804][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 429.405819][T12987] Call Trace: [ 429.405828][T12987] [ 429.405838][T12987] dump_stack_lvl+0xe8/0x150 [ 429.405878][T12987] should_fail_ex+0x410/0x560 [ 429.405916][T12987] _copy_from_iter+0x1d3/0x1660 [ 429.405949][T12987] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 429.405987][T12987] ? __pfx_policy_nodemask+0x10/0x10 [ 429.406024][T12987] ? lock_acquire+0x115/0x350 [ 429.406049][T12987] ? __pfx__copy_from_iter+0x10/0x10 [ 429.406080][T12987] ? alloc_pages_mpol+0x256/0x390 [ 429.406131][T12987] copy_page_from_iter+0x219/0x2d0 [ 429.406165][T12987] tun_get_user+0x212d/0x4470 [ 429.406201][T12987] ? tun_get_user+0x6f9/0x4470 [ 429.406252][T12987] ? aa_file_perm+0x4ed/0x15f0 [ 429.406291][T12987] ? __pfx_tun_get_user+0x10/0x10 [ 429.406327][T12987] ? __lock_acquire+0x747/0x2de0 [ 429.406369][T12987] ? ref_tracker_alloc+0x172/0x530 [ 429.406400][T12987] ? lock_acquire+0x115/0x350 [ 429.406426][T12987] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 429.406462][T12987] ? lock_acquire+0x115/0x350 [ 429.406487][T12987] ? tun_get+0x1c/0x2f0 [ 429.406525][T12987] ? tun_get+0x1c/0x2f0 [ 429.406555][T12987] ? tun_get+0x1c/0x2f0 [ 429.406592][T12987] tun_chr_write_iter+0x113/0x200 [ 429.406627][T12987] vfs_write+0x612/0xba0 [ 429.406664][T12987] ? __pfx_vfs_write+0x10/0x10 [ 429.406696][T12987] ? __fget_files+0x3a2/0x420 [ 429.406719][T12987] ? __fget_files+0x2a/0x420 [ 429.406748][T12987] ? fdget+0x1ac/0x250 [ 429.406789][T12987] ksys_write+0x150/0x270 [ 429.406820][T12987] ? __pfx_ksys_write+0x10/0x10 [ 429.406860][T12987] do_syscall_64+0x166/0x520 [ 429.406891][T12987] ? trace_irq_disable+0x3b/0x140 [ 429.406918][T12987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.406942][T12987] ? clear_bhb_loop+0x70/0xc0 [ 429.406970][T12987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.406993][T12987] RIP: 0033:0x7f1de8d5fd8e [ 429.407014][T12987] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 429.407034][T12987] RSP: 002b:00007f1de6ff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.407067][T12987] RAX: ffffffffffffffda RBX: 00007f1de6ff66c0 RCX: 00007f1de8d5fd8e [ 429.407085][T12987] RDX: 000000000000004a RSI: 0000200000000440 RDI: 00000000000000c8 [ 429.407100][T12987] RBP: 00007f1de6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.407114][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.407128][T12987] R13: 00007f1de9026128 R14: 00007f1de9026090 R15: 00007ffc835b7db8 [ 429.407165][T12987] [ 429.957329][T12991] tc_dump_action: action bad kind [ 430.037174][T12991] xt_hashlimit: size too large, truncated to 1048576 [ 430.699023][T12999] netlink: 'syz.4.2135': attribute type 4 has an invalid length. [ 430.881770][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 431.042203][T13006] hsr0: entered allmulticast mode [ 431.042230][T13006] hsr_slave_0: entered allmulticast mode [ 431.042251][T13006] hsr_slave_1: entered allmulticast mode [ 431.084753][T13005] hsr0: left allmulticast mode [ 431.084789][T13005] hsr_slave_0: left allmulticast mode [ 431.085172][T13005] hsr_slave_1: left allmulticast mode [ 431.146687][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2138'. [ 431.543981][T13015] vlan2: entered allmulticast mode [ 431.544007][T13015] bridge12: entered allmulticast mode [ 431.545540][T13018] bridge12: port 1(erspan0) entered blocking state [ 431.572664][T13018] bridge12: port 1(erspan0) entered disabled state [ 431.572965][T13018] erspan0: entered allmulticast mode [ 431.611080][T13018] erspan0: entered promiscuous mode [ 431.612379][T13018] bridge12: port 1(erspan0) entered blocking state [ 431.612507][T13018] bridge12: port 1(erspan0) entered forwarding state [ 432.177444][T13037] netlink: 'syz.1.2148': attribute type 4 has an invalid length. [ 432.709736][T13049] xt_hashlimit: size too large, truncated to 1048576 [ 432.907888][T13048] xt_hashlimit: size too large, truncated to 1048576 [ 433.036430][T13054] hsr0: entered allmulticast mode [ 433.036458][T13054] hsr_slave_0: entered allmulticast mode [ 433.036891][T13054] hsr_slave_1: entered allmulticast mode [ 433.086865][T13053] hsr0: left allmulticast mode [ 433.086891][T13053] hsr_slave_0: left allmulticast mode [ 433.087310][T13053] hsr_slave_1: left allmulticast mode [ 435.962362][T13104] __nla_validate_parse: 1 callbacks suppressed [ 435.962387][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'. [ 436.425628][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 436.425655][T13111] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2166'. [ 436.425676][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 436.427734][ T30] audit: type=1107 audit(1792826914.661:3): pid=13106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‰éïk8ÏÆÖüL¯Ù<>=šh31ò¾UÒ§­(µ®n€Cý¹ID›t)eshï°¹bÌj°Ã­­©Àó=RÃð%_Äï…4ø¨y£ÒhCìTç:u;ùÏåwolh[ÜŒp}~]•·€9Ø9÷¡, priority 0 [ 527.649833][T15055] tipc: Resetting bearer [ 527.805884][T15055] tipc: Disabling bearer [ 527.899266][T13771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.145321][T15063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2670'. [ 528.775302][T15074] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2672'. [ 528.775339][T15074] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2672'. [ 529.338603][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 530.312844][T15107] netlink: 'syz.1.2679': attribute type 4 has an invalid length. [ 530.312872][T15107] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2679'. [ 530.600360][ T12] net_ratelimit: 14 callbacks suppressed [ 530.600386][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.849011][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2682'. [ 531.259035][T13771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.265396][T15126] tipc: Enabling of bearer rejected, failed to enable media [ 531.393439][T15133] netlink: 'syz.2.2688': attribute type 5 has an invalid length. [ 531.701316][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.962901][T15133] macvtap3: entered promiscuous mode [ 531.966203][T15133] macvtap3: entered allmulticast mode [ 532.082498][T15142] __nla_validate_parse: 1 callbacks suppressed [ 532.082522][T15142] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2691'. [ 532.196754][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 532.196797][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 532.196868][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 532.299087][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.324890][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'. [ 532.477380][T15146] syzkaller0: entered promiscuous mode [ 532.477407][T15146] syzkaller0: entered allmulticast mode [ 532.634791][T15154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.635005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.803520][T15156] netlink: 'syz.0.2694': attribute type 64 has an invalid length. [ 532.803546][T15156] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2694'. [ 532.876262][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.939048][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.939250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.016398][T15158] FAULT_INJECTION: forcing a failure. [ 533.016398][T15158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.016439][T15158] CPU: 1 UID: 0 PID: 15158 Comm: syz.4.2697 Not tainted syzkaller #0 PREEMPT(full) [ 533.016466][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 533.016481][T15158] Call Trace: [ 533.016491][T15158] [ 533.016501][T15158] dump_stack_lvl+0xe8/0x150 [ 533.016543][T15158] should_fail_ex+0x410/0x560 [ 533.016581][T15158] _copy_from_user+0x2d/0xb0 [ 533.016615][T15158] ___sys_sendmsg+0x1c6/0x360 [ 533.016646][T15158] ? __lock_acquire+0x747/0x2de0 [ 533.016679][T15158] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.016757][T15158] ? __fget_files+0x3a2/0x420 [ 533.016782][T15158] ? __fget_files+0x2a/0x420 [ 533.016819][T15158] __x64_sys_sendmsg+0x1b1/0x290 [ 533.016856][T15158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.016920][T15158] do_syscall_64+0x166/0x520 [ 533.016953][T15158] ? trace_irq_disable+0x3b/0x140 [ 533.016982][T15158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.017007][T15158] ? clear_bhb_loop+0x70/0xc0 [ 533.017037][T15158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.017061][T15158] RIP: 0033:0x7f32c4b9f559 [ 533.017082][T15158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.017104][T15158] RSP: 002b:00007f32c2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.017130][T15158] RAX: ffffffffffffffda RBX: 00007f32c4e25fa0 RCX: 00007f32c4b9f559 [ 533.017148][T15158] RDX: 0000000024000890 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 533.017164][T15158] RBP: 00007f32c2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 533.017179][T15158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.017193][T15158] R13: 00007f32c4e26038 R14: 00007f32c4e25fa0 R15: 00007fffcb2bff58 [ 533.017240][T15158] [ 533.340423][T13771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.578448][T15162] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 533.630219][T15164] tipc: Enabled bearer , priority 0 [ 533.693627][T15167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2698'. [ 533.845282][T15171] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2702'. [ 533.947000][T15172] bridge3: entered promiscuous mode [ 533.947056][T15172] bridge3: entered allmulticast mode [ 534.001331][T15174] netlink: 'syz.2.2701': attribute type 4 has an invalid length. [ 534.056928][T15176] netlink: 'syz.2.2701': attribute type 4 has an invalid length. [ 534.291260][ T5640] Bluetooth: hci1: ACL packet for unknown connection handle 3484 [ 534.342233][T15188] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2703'. [ 534.736460][T15181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2703'. [ 535.855000][T15210] tipc: Enabling of bearer rejected, failed to enable media [ 536.127213][T15208] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 536.190256][T15208] bond4 (unregistering): Released all slaves [ 536.277006][T15227] net_ratelimit: 5 callbacks suppressed [ 536.277031][T15227] netlink: NAT attribute has 8 unknown bytes [ 536.277062][T15227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.500609][T15214] veth0: entered promiscuous mode [ 536.616526][T15218] syzkaller0: entered promiscuous mode [ 536.616553][T15218] syzkaller0: entered allmulticast mode [ 536.694543][T15211] veth0: left promiscuous mode [ 537.504900][T15250] __nla_validate_parse: 5 callbacks suppressed [ 537.504923][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 537.946455][T15256] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 538.090675][T15261] Bluetooth: ISO socket layer initialized [ 538.111435][T15264] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2727'. [ 538.142474][T15258] syzkaller0: entered promiscuous mode [ 538.142499][T15258] syzkaller0: entered allmulticast mode [ 538.165804][T15266] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2727'. [ 538.427800][T15268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2729'. [ 538.538401][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 539.012661][T15287] batman_adv: batadv0: Adding interface: syzkaller0 [ 539.012681][T15287] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.013477][T15287] batman_adv: batadv0: Interface activated: syzkaller0 [ 539.107530][T15289] batman_adv: batadv0: Adding interface: macvtap1 [ 539.107552][T15289] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.107583][T15289] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 539.169052][T15281] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 539.241657][T15281] batman_adv: batadv0: Removing interface: syzkaller0 [ 542.968181][ C0] sched: DL replenish lagged too much [ 556.458435][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 562.862777][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.658300][T15336] Bluetooth: hci4: command 0x0406 tx timeout [ 582.939818][T15336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 582.944347][T15336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 582.945686][T15336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 582.973207][T15336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 582.974867][T15336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 583.886000][T15336] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 583.937969][T15336] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 584.107208][T15336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 584.144556][T15336] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 584.167618][T15336] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 585.018470][T15336] Bluetooth: hci5: command tx timeout [ 586.155619][ T5640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 586.251421][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 586.358278][T15352] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 586.457263][T15352] Bluetooth: hci6: command tx timeout [ 586.651822][T15352] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 586.783480][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 587.108657][ T5630] Bluetooth: hci5: command tx timeout [ 588.659606][ T5630] Bluetooth: hci6: command tx timeout [ 589.245341][ T5630] Bluetooth: hci5: command tx timeout [ 589.673254][ T5630] Bluetooth: hci7: command tx timeout [ 590.698271][ T5630] Bluetooth: hci6: command tx timeout [ 591.348222][ T5630] Bluetooth: hci5: command tx timeout [ 591.658611][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 591.806459][ T5630] Bluetooth: hci7: command tx timeout [ 591.989243][T15336] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 591.991173][T15336] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 591.992715][T15336] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 591.999222][T15336] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 592.882168][T15336] Bluetooth: hci6: command tx timeout [ 592.949695][T15336] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 593.878007][T15336] Bluetooth: hci7: command tx timeout [ 595.898917][ T5630] Bluetooth: hci7: command tx timeout [ 596.378289][T15336] Bluetooth: hci8: command tx timeout [ 597.100849][T15336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.147387][T15336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.148774][T15336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.151008][T15336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.153433][T15336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 598.596020][ T5630] Bluetooth: hci8: command tx timeout [ 600.818356][T15352] Bluetooth: hci8: command tx timeout [ 601.082815][T15352] Bluetooth: hci1: command tx timeout [ 602.933452][T15352] Bluetooth: hci8: command tx timeout [ 603.108258][T15352] Bluetooth: hci1: command tx timeout [ 605.178270][T15352] Bluetooth: hci1: command tx timeout [ 607.258370][T15352] Bluetooth: hci1: command tx timeout [ 617.184469][ T5626] batman_adv: batadv0: Interface deactivated: syz_tun [ 619.919659][ T5626] batman_adv: batadv0: Removing interface: syz_tun [ 624.335862][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 645.515170][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.729440][T15336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 646.089090][T15336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.112032][T15336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 646.134746][T15336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 646.828591][T15336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 646.829502][T15336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.841297][T15336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.935574][T15336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 647.040753][T15336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 647.042283][T15336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 653.126529][T15407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 653.211841][T15407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 653.221047][T15407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 653.258235][T15407] Bluetooth: hci0: command tx timeout [ 653.315303][T15407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 653.511821][T15407] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 653.511961][T15407] Bluetooth: hci2: command tx timeout [ 655.388368][T15336] Bluetooth: hci0: command tx timeout [ 655.670625][T15336] Bluetooth: hci2: command tx timeout [ 656.384482][T15336] Bluetooth: hci3: command tx timeout [ 656.970794][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 657.055034][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 657.056842][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 657.075747][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 657.308957][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 657.470250][T15336] Bluetooth: hci0: command tx timeout [ 657.809507][ T5640] Bluetooth: hci2: command tx timeout [ 658.458428][ T5640] Bluetooth: hci3: command tx timeout [ 659.628722][ T5640] Bluetooth: hci4: command tx timeout [ 659.629666][ T5640] Bluetooth: hci0: command tx timeout [ 659.958756][T15336] Bluetooth: hci2: command tx timeout [ 660.138317][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 660.578429][T15336] Bluetooth: hci3: command tx timeout [ 661.661337][T15336] Bluetooth: hci4: command tx timeout [ 662.678202][ T5640] Bluetooth: hci3: command tx timeout [ 662.980364][ T5640] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 663.331711][ T5640] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 663.422039][ T5640] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 663.744602][ T5640] Bluetooth: hci4: command tx timeout [ 664.485875][ T5640] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 664.526495][ T5640] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 665.818320][ T5640] Bluetooth: hci4: command tx timeout [ 669.240916][T15336] Bluetooth: hci9: command tx timeout [ 670.635102][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.258199][T15336] Bluetooth: hci9: command tx timeout [ 673.338210][T15336] Bluetooth: hci9: command tx timeout [ 675.466302][T15336] Bluetooth: hci9: command tx timeout [ 685.911660][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.100226][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.436715][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.449412][T15407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 709.572381][T15407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 709.574788][T15407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 709.665250][T15407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 710.131473][T15407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 710.149995][T15336] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 713.373362][T15336] Bluetooth: hci5: command tx timeout [ 715.903867][T15336] Bluetooth: hci5: command tx timeout [ 717.896875][T15407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 718.118722][T15407] Bluetooth: hci5: command tx timeout [ 718.120409][T15407] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 718.127613][T15407] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 718.297076][T15407] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 719.020905][T15407] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 719.022596][T15407] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 719.715099][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 720.015913][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 720.037841][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 720.086825][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 720.171283][T15336] Bluetooth: hci5: command tx timeout [ 722.477389][T15336] Bluetooth: hci1: command tx timeout [ 722.481035][T15336] Bluetooth: hci6: command tx timeout [ 724.546284][T15336] Bluetooth: hci6: command tx timeout [ 724.546326][T15336] Bluetooth: hci1: command tx timeout [ 726.618763][T15336] Bluetooth: hci1: command tx timeout [ 726.618802][T15336] Bluetooth: hci6: command tx timeout [ 726.751099][T15407] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 726.854897][T15407] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 726.865551][T15407] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 727.414080][T15407] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 727.602364][T15407] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 728.700324][ T5640] Bluetooth: hci6: command tx timeout [ 728.700373][ T5640] Bluetooth: hci1: command tx timeout [ 729.910542][T15407] Bluetooth: hci7: command tx timeout [ 732.018934][T15407] Bluetooth: hci7: command tx timeout [ 734.218226][T15407] Bluetooth: hci7: command tx timeout [ 736.429295][T15407] Bluetooth: hci7: command tx timeout [ 747.670782][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.235308][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.241515][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.247349][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.263345][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.293218][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 776.053729][T15407] Bluetooth: hci0: command tx timeout [ 777.797800][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 778.119087][ T5640] Bluetooth: hci0: command tx timeout [ 778.778696][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 778.783033][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 778.935356][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 778.948661][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.248913][ T5640] Bluetooth: hci0: command tx timeout [ 781.429584][ T5640] Bluetooth: hci2: command tx timeout [ 782.663951][ T5640] Bluetooth: hci0: command tx timeout [ 783.533422][ T5640] Bluetooth: hci2: command tx timeout [ 785.134388][T15336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 785.153089][T15336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 785.154355][T15336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 785.157880][T15336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 785.159702][T15336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 785.291457][T15407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 785.305665][T15407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 785.307541][T15407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 785.583781][T15336] Bluetooth: hci2: command tx timeout [ 786.124773][T15336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 786.306334][T15336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 787.428547][ T5640] Bluetooth: hci4: command tx timeout [ 787.811406][ T5640] Bluetooth: hci2: command tx timeout [ 788.698492][ T5640] Bluetooth: hci3: command tx timeout [ 789.520837][ T5640] Bluetooth: hci4: command tx timeout [ 790.168705][T15336] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 790.328618][T15336] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 790.596327][T15336] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 790.778521][T15336] Bluetooth: hci3: command tx timeout [ 791.065906][T15336] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 791.428562][T15336] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 791.596798][T15336] Bluetooth: hci4: command tx timeout [ 792.858452][T15407] Bluetooth: hci3: command tx timeout [ 793.258350][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 793.658560][T15407] Bluetooth: hci8: command tx timeout [ 793.659296][T15407] Bluetooth: hci4: command tx timeout [ 794.949207][ T5640] Bluetooth: hci3: command tx timeout [ 795.856544][ T5640] Bluetooth: hci8: command tx timeout [ 797.918323][ T5640] Bluetooth: hci8: command tx timeout [ 799.997245][ T5640] Bluetooth: hci8: command tx timeout [ 808.632019][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 836.539402][T15407] Bluetooth: hci5: command 0x0406 tx timeout [ 840.068846][T15407] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 840.138485][T15407] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 840.242334][T15407] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 840.560921][T15407] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 840.567545][T15407] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 841.630575][ T5640] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 842.170330][ T5640] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 842.343059][ T5640] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 842.689690][ T5640] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 842.691167][ T5640] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 842.699647][T15407] Bluetooth: hci9: command tx timeout [ 844.788250][ T5630] Bluetooth: hci10: command tx timeout [ 844.788902][T15336] Bluetooth: hci9: command tx timeout [ 845.599684][ T5630] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 845.828386][ T5630] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 846.230824][ T5630] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 846.262338][ T5630] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 846.263884][ T5630] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 846.798947][ T5630] Bluetooth: hci6: command 0x0406 tx timeout [ 846.798994][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 846.918208][T15352] Bluetooth: hci9: command tx timeout [ 846.918251][T15352] Bluetooth: hci10: command tx timeout [ 848.378555][ T5630] Bluetooth: hci11: command tx timeout [ 848.859203][T15336] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 848.938480][T15336] Bluetooth: hci10: command tx timeout [ 848.938526][T15336] Bluetooth: hci9: command tx timeout [ 849.379244][ T5630] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 850.558349][T15336] Bluetooth: hci11: command tx timeout [ 850.614645][T15336] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 850.617264][T15336] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 851.034934][T15336] Bluetooth: hci10: command tx timeout [ 851.050373][T15407] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 851.059380][T15407] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 851.672901][ T5640] Bluetooth: hci7: command 0x0406 tx timeout [ 852.638201][ T5640] Bluetooth: hci11: command tx timeout [ 853.707296][T15407] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 853.878837][T15407] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 853.940249][T15407] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 853.971095][T15407] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 853.972653][T15407] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 854.701354][T15407] Bluetooth: hci11: command tx timeout [ 854.701439][T15407] Bluetooth: hci12: command tx timeout [ 856.845791][ T5640] Bluetooth: hci12: command tx timeout [ 858.858908][ T5630] Bluetooth: hci12: command tx timeout [ 859.498844][ T5630] Bluetooth: hci13: command tx timeout [ 860.938195][ T5630] Bluetooth: hci12: command tx timeout [ 861.588748][ T5630] Bluetooth: hci13: command tx timeout [ 863.658916][ T5630] Bluetooth: hci13: command tx timeout [ 865.758516][ T5630] Bluetooth: hci13: command tx timeout [ 870.072060][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.460279][ T33] INFO: task dhcpcd:5288 blocked for more than 143 seconds. [ 878.460312][ T33] Not tainted syzkaller #0 [ 878.460325][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 878.460356][ T33] task:dhcpcd state:D stack:25288 pid:5288 tgid:5288 ppid:1 task_flags:0x400140 flags:0x00080000 [ 878.460428][ T33] Call Trace: [ 878.460438][ T33] [ 878.460456][ T33] __schedule+0x17dd/0x5820 [ 878.460527][ T33] ? __pfx___schedule+0x10/0x10 [ 878.460578][ T33] ? schedule+0x90/0x2b0 [ 878.460612][ T33] schedule+0x164/0x2b0 [ 878.460644][ T33] schedule_preempt_disabled+0x13/0x30 [ 878.460673][ T33] __mutex_lock+0x7c4/0x15a0 [ 878.460712][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 878.460749][ T33] ? vlan_ioctl_handler+0xf0/0x630 [ 878.460789][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 878.460846][ T33] vlan_ioctl_handler+0xf0/0x630 [ 878.460883][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 878.460917][ T33] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 878.460971][ T33] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 878.461007][ T33] sock_ioctl+0x612/0x7e0 [ 878.461047][ T33] ? __pfx_sock_ioctl+0x10/0x10 [ 878.461096][ T33] ? bpf_lsm_file_ioctl+0x9/0x20 [ 878.461122][ T33] ? __pfx_sock_ioctl+0x10/0x10 [ 878.461157][ T33] __se_sys_ioctl+0xfc/0x170 [ 878.461195][ T33] do_syscall_64+0x166/0x520 [ 878.461228][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.461253][ T33] ? clear_bhb_loop+0x70/0xc0 [ 878.461284][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.461309][ T33] RIP: 0033:0x7f1ae97fe378 [ 878.461331][ T33] RSP: 002b:00007fff68656e38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.461356][ T33] RAX: ffffffffffffffda RBX: 000055784a0edd60 RCX: 00007f1ae97fe378 [ 878.461374][ T33] RDX: 00007fff68656e40 RSI: 0000000000008982 RDI: 000000000000000f [ 878.461391][ T33] RBP: 00007fff68656e40 R08: 0000000000000000 R09: 0000000000000000 [ 878.461406][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.461421][ T33] R13: 000055784a01fdf8 R14: 00007fff68667250 R15: 000055784a0edd60 [ 878.461461][ T33] [ 878.461512][ T33] INFO: task kworker/u8:13:8131 blocked for more than 143 seconds. [ 878.461530][ T33] Not tainted syzkaller #0 [ 878.461542][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 878.461559][ T33] task:kworker/u8:13 state:D stack:23640 pid:8131 tgid:8131 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 878.461627][ T33] Workqueue: events_unbound linkwatch_event [ 878.461651][ T33] Call Trace: [ 878.461659][ T33] [ 878.461674][ T33] __schedule+0x17dd/0x5820 [ 878.461737][ T33] ? __pfx___schedule+0x10/0x10 [ 878.461778][ T33] ? schedule+0x90/0x2b0 [ 878.461812][ T33] schedule+0x164/0x2b0 [ 878.461844][ T33] schedule_preempt_disabled+0x13/0x30 [ 878.461873][ T33] __mutex_lock+0x7c4/0x15a0 [ 878.461910][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 878.461948][ T33] ? linkwatch_event+0xe/0x60 [ 878.461973][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 878.462007][ T33] ? lock_acquire+0x115/0x350 [ 878.462045][ T33] ? rcu_is_watching+0x16/0xb0 [ 878.462080][ T33] ? process_scheduled_works+0x97a/0x1630 [ 878.462111][ T33] linkwatch_event+0xe/0x60 [ 878.462158][ T33] process_scheduled_works+0xc3d/0x1630 [ 878.462228][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 878.462270][ T33] ? assign_work+0x3cf/0x5d0 [ 878.462309][ T33] worker_thread+0xa47/0xfb0 [ 878.462376][ T33] kthread+0x38b/0x480 [ 878.462401][ T33] ? __pfx_worker_thread+0x10/0x10 [ 878.462432][ T33] ? __pfx_kthread+0x10/0x10 [ 878.462458][ T33] ret_from_fork+0x514/0xb70 [ 878.462489][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 878.462515][ T33] ? __switch_to+0xc78/0x1410 [ 878.462562][ T33] ? __pfx_kthread+0x10/0x10 [ 878.462588][ T33] ret_from_fork_asm+0x1a/0x30 [ 878.462633][ T33] [ 878.462665][ T33] INFO: task syz-executor:15465 blocked for more than 143 seconds. [ 878.462682][ T33] Not tainted syzkaller #0 [ 878.462694][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 878.462706][ T33] task:syz-executor state:D stack:26616 pid:15465 tgid:15465 ppid:1 task_flags:0x400140 flags:0x00080002 [ 878.462772][ T33] Call Trace: [ 878.462781][ T33] [ 878.462795][ T33] __schedule+0x17dd/0x5820 [ 878.462859][ T33] ? __pfx___schedule+0x10/0x10 [ 878.462899][ T33] ? schedule+0x90/0x2b0 [ 878.462933][ T33] schedule+0x164/0x2b0 [ 878.462964][ T33] schedule_preempt_disabled+0x13/0x30 [ 878.462993][ T33] __mutex_lock+0x7c4/0x15a0 [ 878.463030][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 878.463068][ T33] ? inet_rtm_newaddr+0x470/0x19f0 [ 878.463099][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 878.463148][ T33] ? __nla_parse+0x40/0x60 [ 878.463190][ T33] inet_rtm_newaddr+0x470/0x19f0 [ 878.463222][ T33] ? kernel_text_address+0xa5/0xe0 [ 878.463249][ T33] ? __pfx_hook_capable+0x10/0x10 [ 878.463278][ T33] ? unwind_get_return_address+0x4d/0x90 [ 878.463309][ T33] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 878.463339][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 878.463394][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 878.463421][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 878.463458][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 878.463488][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 878.463521][ T33] ? __lock_acquire+0x747/0x2de0 [ 878.463571][ T33] netlink_rcv_skb+0x226/0x4a0 [ 878.463599][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 878.463633][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 878.463675][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 878.463700][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 878.463733][ T33] netlink_unicast+0x8ef/0xa80 [ 878.463790][ T33] netlink_sendmsg+0x7f0/0xb20 [ 878.463825][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.463856][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 878.463890][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 878.463918][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.463943][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 878.463985][ T33] __sys_sendto+0x408/0x5a0 [ 878.464022][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 878.464085][ T33] ? do_user_addr_fault+0xd3f/0x1480 [ 878.464120][ T33] __x64_sys_sendto+0xde/0x100 [ 878.464154][ T33] do_syscall_64+0x166/0x520 [ 878.464184][ T33] ? trace_irq_disable+0x3b/0x140 [ 878.464213][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.464238][ T33] ? clear_bhb_loop+0x70/0xc0 [ 878.464268][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.464293][ T33] RIP: 0033:0x7f8b6415fd8e [ 878.464313][ T33] RSP: 002b:00007fff0f813ca8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 878.464338][ T33] RAX: ffffffffffffffda RBX: 0000555556439500 RCX: 00007f8b6415fd8e [ 878.464356][ T33] RDX: 0000000000000028 RSI: 00007f8b64f54670 RDI: 0000000000000003 [ 878.464372][ T33] RBP: 0000000000000001 R08: 00007fff0f813d24 R09: 000000000000000c [ 878.464387][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 878.464402][ T33] R13: 0000000000000000 R14: 00007f8b64f54670 R15: 0000000000000000 [ 878.464440][ T33] [ 878.464488][ T33] [ 878.464488][ T33] Showing all locks held in the system: [ 878.464499][ T33] locks held by kworker/u8:0/12: 4, last CPU#1: [ 878.464517][ T33] #0: ffff88802473b148 ((wq_completion)krds_cp_wq#1/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.464603][ T33] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.464671][ T33] #2: ffff888023f54380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 878.464735][ T33] #3: ffff8880659b1de0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 878.464800][ T33] locks held by kworker/u8:1/13: 4, last CPU#0: [ 878.464818][ T33] #0: ffff88801d2de148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.464884][ T33] #1: ffffc90000127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.464950][ T33] #2: ffffffff91272f28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 878.465013][ T33] #3: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8f0 [ 878.465077][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 878.465094][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 878.465157][ T33] locks held by kworker/u8:4/62: 2, last CPU#1: [ 878.465174][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.465241][ T33] #1: ffffc9000204fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.465316][ T33] locks held by kworker/u8:11/1289: 3, last CPU#1: [ 878.465334][ T33] #0: ffff88802473c148 ((wq_completion)krds_cp_wq#1/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.465400][ T33] #1: ffffc900057f7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.465478][ T33] #2: ffff888023f54980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 878.465560][ T33] locks held by dhcpcd/5288: 2, on CPU#1: [ 878.465577][ T33] #0: ffffffff91262860 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 878.465662][ T33] #1: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 878.465732][ T33] locks held by getty/5383: 2, on CPU#1: [ 878.465748][ T33] #0: ffff888032c1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 878.465810][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 878.465881][ T33] locks held by kworker/0:4/5631: 2, last CPU#0: [ 878.465898][ T33] #0: ffff88801c069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.465967][ T33] #1: ffffc9000449fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.466033][ T33] locks held by syz-executor/5632: 1, on CPU#0: [ 878.466051][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x7a8/0x1090 [ 878.466124][ T33] locks held by kworker/0:7/5821: 3, on CPU#0: [ 878.466141][ T33] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.466207][ T33] #1: ffffc90005177c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.466300][ T33] #2: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 878.466358][ T33] locks held by kworker/u8:13/8131: 3, on CPU#1: [ 878.466375][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.466442][ T33] #1: ffffc9000e607c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.466508][ T33] #2: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 878.466572][ T33] locks held by kworker/u8:16/9134: 4, last CPU#1: [ 878.466589][ T33] #0: ffff88802473a948 ((wq_completion)krds_cp_wq#1/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.466656][ T33] #1: ffffc9001d547c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.466723][ T33] #2: ffff888023f54080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 878.466787][ T33] #3: ffff888050ee9de0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 878.466849][ T33] locks held by kworker/u8:17/9135: 4, last CPU#1: [ 878.466867][ T33] #0: ffff88802473d948 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.466933][ T33] #1: ffffc90004fb7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 878.467001][ T33] #2: ffff888023f55280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 878.467064][ T33] #3: ffff888050ee9020 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 878.467129][ T33] locks held by kworker/u8:19/15374: 3, on CPU#1: [ 878.467147][ T33] #0: ffff88801e7a1948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.467214][ T33] #1: ffffc90006a7fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.467282][ T33] #2: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 878.467352][ T33] locks held by kworker/u8:20/15394: 3, last CPU#0: [ 878.467369][ T33] #0: ffff8880339cc148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.467435][ T33] #1: ffffc900054d7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.467503][ T33] #2: ffff8880b8428618 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10 [ 878.467582][ T33] locks held by kworker/u8:21/15436: 4, last CPU#1: [ 878.467600][ T33] #0: ffff88802473a148 ((wq_completion)krds_cp_wq#1/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.467667][ T33] #1: ffffc90002f0fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 878.467735][ T33] #2: ffff88805326bc80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 878.467800][ T33] #3: ffff888050eeaba0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 878.467862][ T33] locks held by syz-executor/15460: 1, on CPU#1: [ 878.467879][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 878.467943][ T33] locks held by syz-executor/15465: 1, on CPU#1: [ 878.467960][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138061][ T33] locks held by syz-executor/15466: 1, on CPU#1: [ 879.138087][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138163][ T33] locks held by syz-executor/15475: 1, on CPU#0: [ 879.138180][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138243][ T33] locks held by syz-executor/15491: 1, on CPU#0: [ 879.138260][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138328][ T33] locks held by syz-executor/15496: 1, on CPU#0: [ 879.138346][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138407][ T33] locks held by syz-executor/15500: 1, on CPU#1: [ 879.138424][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138493][ T33] locks held by syz-executor/15501: 1, on CPU#0: [ 879.138510][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138577][ T33] locks held by syz-executor/15508: 1, on CPU#0: [ 879.138595][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138658][ T33] locks held by syz-executor/15522: 1, on CPU#1: [ 879.138676][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138737][ T33] locks held by syz-executor/15524: 1, on CPU#0: [ 879.138754][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138815][ T33] locks held by syz-executor/15529: 1, on CPU#0: [ 879.138832][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138894][ T33] locks held by syz-executor/15533: 1, on CPU#1: [ 879.138910][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.138971][ T33] locks held by syz-executor/15542: 1, on CPU#1: [ 879.138988][ T33] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 879.139072][ T33] [ 879.139092][ T33] ============================================= [ 879.139092][ T33] [ 879.139120][ T33] NMI backtrace for cpu 1 [ 879.139136][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 879.139161][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 879.139182][ T33] Call Trace: [ 879.139192][ T33] [ 879.139203][ T33] dump_stack_lvl+0xe8/0x150 [ 879.139240][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 879.139267][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 879.139295][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 879.139326][ T33] sys_info+0x135/0x170 [ 879.139348][ T33] watchdog+0xfd2/0x1030 [ 879.139384][ T33] ? watchdog+0x1c7/0x1030 [ 879.139421][ T33] kthread+0x38b/0x480 [ 879.139444][ T33] ? __pfx_watchdog+0x10/0x10 [ 879.139469][ T33] ? __pfx_kthread+0x10/0x10 [ 879.139501][ T33] ret_from_fork+0x514/0xb70 [ 879.139530][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 879.139554][ T33] ? __switch_to+0xc78/0x1410 [ 879.139590][ T33] ? __pfx_kthread+0x10/0x10 [ 879.139615][ T33] ret_from_fork_asm+0x1a/0x30 [ 879.139655][ T33] [ 879.139664][ T33] Sending NMI from CPU 1 to CPUs 0: [ 879.139752][ C0] NMI backtrace for cpu 0 [ 879.139766][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 879.139786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 879.139799][ C0] Workqueue: krds_cp_wq#1/5 rds_connect_worker [ 879.139830][ C0] RIP: 0010:__hrtimer_run_queues+0x138/0xa10 [ 879.139861][ C0] Code: 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3c b3 84 00 89 6c 24 24 48 8b 44 24 10 4e 8d 3c 30 49 83 c7 60 48 8b 03 <48> 03 44 24 60 48 89 44 24 30 4c 89 f8 48 c1 e8 03 48 89 84 24 80 [ 879.139877][ C0] RSP: 0018:ffffc90000007c48 EFLAGS: 00000082 [ 879.139892][ C0] RAX: 0000000000000000 RBX: ffff8880b8428728 RCX: ffff88801f288000 [ 879.139906][ C0] RDX: 8000000001000101 RSI: 0000000001000101 RDI: 0000000000000021 [ 879.139919][ C0] RBP: 0000000000000001 R08: 0000000001000101 R09: 1ffffffff22f9957 [ 879.139931][ C0] R10: dffffc0000000000 R11: fffffbfff22f9958 R12: ffff8880b8428600 [ 879.139946][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8428720 [ 879.139959][ C0] FS: 0000000000000000(0000) GS:ffff888123a52000(0000) knlGS:0000000000000000 [ 879.139974][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 879.139994][ C0] CR2: 00007f1b88c35ff8 CR3: 000000007f62a000 CR4: 00000000003526f0 [ 879.140010][ C0] Call Trace: [ 879.140017][ C0] [ 879.140026][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 879.140053][ C0] ? trace_softirq_raise+0x3b/0x130 [ 879.140079][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 879.140125][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 879.140151][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 879.140176][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 879.140196][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 879.140218][ C0] Code: f7 e8 0d e0 a9 f5 f7 c3 00 02 00 00 74 05 e8 e0 72 d6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 d9 9a f5 65 48 8b 05 1c 9d a2 08 48 85 c0 74 18 5b 41 5e c3 [ 879.140235][ C0] RSP: 0018:ffffc90000007f48 EFLAGS: 00000206 [ 879.140249][ C0] RAX: 0000000000000006 RBX: 0000000000000287 RCX: 8000000000000102 [ 879.140261][ C0] RDX: 0000000000000002 RSI: ffffffff8e492305 RDI: 0000000000000001 [ 879.140273][ C0] RBP: 8000000000000101 R08: ffffffff917ccabf R09: 1ffffffff22f9957 [ 879.140287][ C0] R10: dffffc0000000000 R11: fffffbfff22f9958 R12: 0000000000000008 [ 879.140300][ C0] R13: 0000000000000009 R14: ffff8880b8428600 R15: 0000000000000000 [ 879.140324][ C0] handle_softirqs+0x265/0x8d0 [ 879.140353][ C0] ? __inet6_bind+0x386/0xf30 [ 879.140374][ C0] do_softirq+0x77/0xd0 [ 879.140395][ C0] [ 879.140401][ C0] [ 879.140407][ C0] __local_bh_enable_ip+0x100/0x140 [ 879.140430][ C0] __inet6_bind+0x386/0xf30 [ 879.140459][ C0] kernel_bind+0x13e/0x1c0 [ 879.140493][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 879.140532][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 879.140562][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 879.140598][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 879.140629][ C0] ? lock_acquire+0x115/0x350 [ 879.140655][ C0] rds_connect_worker+0x1d8/0x290 [ 879.140684][ C0] ? process_scheduled_works+0x97a/0x1630 [ 879.140709][ C0] process_scheduled_works+0xc3d/0x1630 [ 879.140752][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 879.140781][ C0] ? assign_work+0x3cf/0x5d0 [ 879.140807][ C0] worker_thread+0xa47/0xfb0 [ 879.140849][ C0] kthread+0x38b/0x480 [ 879.140866][ C0] ? __pfx_worker_thread+0x10/0x10 [ 879.140889][ C0] ? __pfx_kthread+0x10/0x10 [ 879.140908][ C0] ret_from_fork+0x514/0xb70 [ 879.140928][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 879.140946][ C0] ? __switch_to+0xc78/0x1410 [ 879.140974][ C0] ? __pfx_kthread+0x10/0x10 [ 879.141048][ C0] ret_from_fork_asm+0x1a/0x30 [ 879.141075][ C0] [ 879.663904][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 881.384638][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 881.393770][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 881.403878][ T33] Call Trace: [ 881.407209][ T33] [ 881.410174][ T33] vpanic+0x56d/0xa60 [ 881.414204][ T33] ? __pfx___schedule+0x10/0x10 [ 881.419107][ T33] ? __pfx_vpanic+0x10/0x10 [ 881.423762][ T33] panic+0xc5/0xd0 [ 881.427543][ T33] ? __pfx_panic+0x10/0x10 [ 881.432008][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 881.437516][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 881.442933][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 881.449131][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 881.455336][ T33] watchdog+0x102b/0x1030 [ 881.459730][ T33] ? watchdog+0x1c7/0x1030 [ 881.464196][ T33] kthread+0x38b/0x480 [ 881.468296][ T33] ? __pfx_watchdog+0x10/0x10 [ 881.473007][ T33] ? __pfx_kthread+0x10/0x10 [ 881.477637][ T33] ret_from_fork+0x514/0xb70 [ 881.482265][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 881.487419][ T33] ? __switch_to+0xc78/0x1410 [ 881.492144][ T33] ? __pfx_kthread+0x10/0x10 [ 881.496776][ T33] ret_from_fork_asm+0x1a/0x30 [ 881.501605][ T33] [ 881.504885][ T33] Kernel Offset: disabled [ 881.509230][ T33] Rebooting in 86400 seconds..