last executing test programs: 5.389951615s ago: executing program 2 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x8a0, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x1, 0x5c4, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x3, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x0, 0xfffffffe}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a0}}, 0x0) connect(r0, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x80) 5.194805283s ago: executing program 0 (id=2741): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) sendmsg$nl_route_sched(r1, 0x0, 0x4000) (async) sendmsg$nl_route_sched(r1, 0x0, 0x20084084) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={&(0x7f0000001440)=ANY=[@ANYBLOB='L\'\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40804}, 0x20004854) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x101, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) (async, rerun: 64) sendto$inet6(r3, &(0x7f0000000180)="a7", 0x1, 0x2400c040, 0x0, 0x0) (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0xbcff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x20000000000001ca, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000000000000000862d0bfa997c45ac", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) 5.193196112s ago: executing program 2 (id=2742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000090000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x4d, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5472f800"], 0x54}}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r5, 0x0, 0x0, 0x63, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0xfc0, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f00000002c0)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB], 0x4d4}, 0x1, 0x0, 0x0, 0x42804}, 0x0) close(r4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket(0x18, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000001480), &(0x7f0000001100)=0xfffffffffffffc45) sendto$inet6(r10, &(0x7f0000000040)="95", 0x1, 0x4040004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100832948c2b34cfd6904af077b1c0001800c7d0000c38937107b5926b80501000000"], 0x30}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 5.070149551s ago: executing program 0 (id=2744): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000000)='#&,.%)\x00', &(0x7f0000000080)='%,\x00', 0x4}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 4.881423057s ago: executing program 2 (id=2748): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x1d, &(0x7f0000000940)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYRESHEX=r3], 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4.622050278s ago: executing program 2 (id=2752): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') close(r5) (async) close(r5) unshare(0x6a040000) (async) unshare(0x6a040000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0xa, 0x3, 0xff) (async) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="000000b814", 0x5}], 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.482696984s ago: executing program 0 (id=2753): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60) (async) socket(0x10, 0x803, 0x0) (async) socket(0x2a, 0x2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) unshare(0x22020600) (async) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6(0xa, 0x3, 0x7) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 3.121778428s ago: executing program 4 (id=2762): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5000000, 0x2010, r2, 0x4de4f000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x6, 0x10, r3, 0x8a1ef000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0xfffff000) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xc, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x4, 0x5, 0xc, 0x5}, {0x1, 0x1, 0xf, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x3, 0x1, 0x3, 0x8}, {0x2, 0x5, 0x2, 0x4}, {0x2, 0x5, 0xa, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x1, 0xa, 0x9}], 0x10, 0x4bac}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x2, 0x2001, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r6, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x4008008) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.598660475s ago: executing program 4 (id=2763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r6, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, r6, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, "da"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9587e9c5766016c004b18f9885"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8fc0ffe586"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c0e43e32c906a65ed02efaa12"}]}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "550f3a3b46"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0xc0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000240)=[{{0x0, 0x1}, {0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x4, 0x4}, {0x3, 0xfff3}}}, 0x24}}, 0x90) 2.389398219s ago: executing program 3 (id=2764): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xffff}}]}}]}, 0x6c}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.12835089s ago: executing program 4 (id=2766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) listen(r1, 0x10000) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) unshare(0x24020400) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket(0x1e, 0x805, 0x0) connect$tipc(r8, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x54d0}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15f15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_ADDRESS={0xa, 0x1, @random="baeead4459ac"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x406c041}, 0x8000) 1.817730728s ago: executing program 3 (id=2767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x51}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}}, 0x0) 1.658876654s ago: executing program 3 (id=2769): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={0x20, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x20}}, 0x80) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x80000}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc5, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x50774000) 1.370688976s ago: executing program 1 (id=2771): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002600010324bd7002ffdbdf2501000000512e082a207fea67a82c3739e965331e398809bcdb087cb6465fdfa6990b2120a35f16a16d4a331ad2f617323f3ed877ca88de1c053da167b341c282f6c5fe95293afef1e1460092f0e1b40b9332c1dde2bd10d8322ecf40c4e0045fdb486e85969c18a99daca148ecf06e3102eb8549dbea64e4b92c29141abb37a435daed1efdefed058ce2d18c86e5b0be0b2e789c07139b2c7373a511315d7e70d7a5613d3ba0ac3dcea6165a1357dce6859689081acc668c39f9384d593ad95623434f2e51ecfa4aea07a81d7408646b"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(0xffffffffffffffff) accept4(r3, &(0x7f0000000180)=@xdp, &(0x7f0000000100)=0x80, 0x80800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0xfffffffffffffe88) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029"], 0x18}, 0x0) write(r4, &(0x7f0000000340)="08000000010000", 0x688ba96c4f7c93f3) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x23, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) 1.162664338s ago: executing program 4 (id=2772): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nr0\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) ioctl$FITHAW(r0, 0xc0045878) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000280)=ANY=[], 0x84}}, 0x8004) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8971, &(0x7f00000001c0)={'gre0\x00', @ifru_ivalue=0x4}) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000140)={0x3}) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0xfffffffffffffffc, 0x7fc0000000000003, 0x1, 0x1004, 0x2000000000000007, 0x5}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'erspan0\x00', @remote}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES16], 0xfdef) 1.160388107s ago: executing program 3 (id=2773): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xffff}}]}}]}, 0x6c}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 920.104117ms ago: executing program 0 (id=2774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000004000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002480), &(0x7f0000000140)=r0}, 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000766c616e000400028008000500"/32, @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000680)={r0, &(0x7f0000000580)='%\\$^&\x00', 0x200000, &(0x7f00000005c0)={@_ha_fsid={[0x6f57d0fa, 0x2]}, {0x800, 0xa17, 0x4, 0x401}}, 0x3, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x8}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r10, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000002400)=ANY=[@ANYBLOB="1c0000f500000000000000000000a000002400a7b8a3ad38b354fb68000000219078ac1414bbd4f528c900000000000000001dbbefbc8dcf513bdd91b7d1b171131c082fd67be44ccec822e6ebd79d740bb5276f3f5a0c087029fe1b973ab8d4d01b8d62ed9c6b383ef829f01dda6502e82ca4ef749055bb75"], 0x32) syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r8, &(0x7f0000000340), &(0x7f0000000a00)=""/4096}, 0x20) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000b50000000004000000000000000000d5ad00e6f10900000071602b05e1f0e6f10000000058cc3a66b9c2000000"], 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000065b8c9ca8900040000000a00000000000000", @ANYRES32, @ANYBLOB="00f8ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000500"/28], 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10}, 0x18) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000020018ed981c00"/28], 0x50) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@allocspi={0x144, 0x16, 0x1, 0x70bd2d, 0x25dfdbff, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x8}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x1, 0x0, 0x88c}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2}}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3505, 0x4, 0x1, 0x9, 0x100, 0x8000, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup(r17, &(0x7f00000023c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xce}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x0, 0xa, 0x1, 0x2, 0x50, 0x8000000000000003}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xaa, 0xee, &(0x7f00000003c0)=""/238, 0x41100, 0xc2, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000500)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x2, 0x1, 0x3ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r7, r8, r12, r13, r14, 0x1, r15], &(0x7f0000000900)=[{0x4, 0x4, 0x7, 0x4}, {0x4, 0x1, 0x1, 0x7}, {0x1, 0x4, 0xd, 0x6}, {0x5, 0x2, 0x0, 0x3}, {0x0, 0x3, 0x1, 0x1}], 0x10, 0xb}, 0x94) 912.534448ms ago: executing program 3 (id=2775): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) close(0x3) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) r4 = socket(0x2, 0x80805, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0x4, 0x5, r7}, 0x10) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f00000000c0)={0x5, 0x467b, 0xffff, 0xbf, 0xfd, 0xe, 0xb, "12152333723ed1d8fadbbf2e96a11e783f338b63", "e9d86761602da34232239e6e2e47d38b55b454ad"}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xd0, &(0x7f00000005c0)=""/208, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x2}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair(0x6, 0x5, 0x200, &(0x7f0000000540)={0xffffffffffffffff}) (rerun: 32) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r10, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x9, 0x9, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000210405000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3ed40d1420cf7b00a9a24a4d77f76d3d6d4d7da79721b9cfa6b5aecdf76dc5993978669f3b3b10f21a03671bcd0f230e4227121589ced4072015801d96279b9430cba11a96fdca803aa3d593ff5518068e3d018f50bfbf1dff307467e1673974e5fe23aae82c513c299b22345f1c4e0362ad11a2268d8417e67df4d723770a28d185bb8cbbdd180fb9018e7695cfef64b213ce4b5d4253ea6c8d4f2b0734be20"], 0x20}}, 0xc080) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000004c0)=0x4) 673.44749ms ago: executing program 3 (id=2776): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x1000, &(0x7f0000000300)={@_ha_fsid={[0x5]}, {0xee, 0xff80, 0x44, 0x2}}, 0x6, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000500)=0x80}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000400)) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000580)={0x6, 0xfffffffb, 0x1, 0x2e1862f2}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000100)={0x8, 0xffffff7f, 0x8, 0x0, 0x4, 0x3, 0x0, &(0x7f00000000c0)=[{0x10, 0x101, 0x8}, {0xa, 0x101, 0x10001}, {0x0, 0x101, 0x2}]}) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000080), 0x10) pipe(&(0x7f0000000140)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1411, 0x4, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0xe}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000154}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) 657.974123ms ago: executing program 2 (id=2777): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xffff}}]}}]}, 0x6c}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 562.1893ms ago: executing program 2 (id=2778): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8d}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="7c89c7c2", 0x4}], 0x1}}], 0x1, 0x24040040) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340), &(0x7f0000000380)=0x8) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="e26598d64d7c141a21cbc8b9a045382413d8d46f3e0c020024cef9234b121447cbc03060ebc973870659f4876f573c393e3cba339120acf2d78db38221e4848b314ef35bd214098837ef61b0fc605c42ef69d3ea578d42db509dd62efe3310f7526ec34ca9eae3f270f2371d04f37281cba03b1328961cddde290b75a1640a76f941edf97abd7ac5219e86906e5c963815eb8f39007177c682500286f81a0454afedf81ff94faa2eb293821cf7b173bd89e5e1a3440742e091357d20be56887e7bc8b8683e0057cea342bf8372", 0xcd}], 0x21) 478.058071ms ago: executing program 0 (id=2779): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000100fcffdfff260000000e0001"], 0x34}, 0x1, 0x0, 0x0, 0x24044015}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 462.550997ms ago: executing program 1 (id=2780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000a00), 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r1, &(0x7f00000000c0)='\x00', 0x42001, &(0x7f0000000100)={@_ha_fsid={[0x800]}, {0x0, 0x4, 0x80000000, 0x8}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x401}, 0x6, &(0x7f0000000800)=[{0x0, 0x4, &(0x7f0000000240)='}/&^(\\\x00', &(0x7f00000002c0)="2923f202b8b15f25c93e5b7151fddbea3535469283e8ba3504156e7ff45990f394af9e15701f2fcdb3b4650816d525010f466b38e12bd2b0335b9da129f4f8e5a6c313252f65f854de267164d7cc6d80d2c2b6cc2b38c092b2b3dcabb3abcad85813f8a16cd6d97b6a275230a8a082914bca977f570f2433765b0b37671ade00990288ce343d9cc5fe50ff1b6f1c41e627e9c319f844c5d4275a9926725a8704ee6c03147039b99e0bd6", 0xaa, 0x18}, {0x2, 0xb821, &(0x7f0000000380)='@e}][j@\xbf(#&@---\x00', &(0x7f00000003c0)="c5d2dbff65533bfeac9af23545cba22d4a9c7ce4ff17954f7f364c2553f63408d661efef0072a9e80578507c1027eca5328eee89b290f3db5ac2cda3d2dc9964495e7a1ccb6f01f3a4f8acebb50fa74d132ca0288002be2590931ff4cba636565bb81ec4cbd380b22caf8c419e1eb922effd2b7d66841c90352d6b8ebd64c854ea6a72f6f045", 0x86, 0x1a}, {0x1, 0x9996, &(0x7f0000000480)='/^##-+(!%[&}{\x00', &(0x7f00000004c0)="19caa0280e372e31c1755da9049e1211a18e1aa09baf1f5e2cf46ccbae1ab006033e36c719c5a27a31a10c6dbd36209f757898c9385f4d4d19d708791c70f035f163ba443447d362579414e880d20d3180cc", 0x52, 0x3a}, {0x3, 0x7f, &(0x7f0000000540)='%\x00', &(0x7f0000000580)="b95a7ec75020616976f349c67327dfc685c26d3382f454be00901fc8f2b9609a8bd66dc60a4e9ff5ca2958146a7dea9412", 0x31, 0x2}, {0x2, 0x10, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="5214676a5a8aa2c3a4fa02c9decde917999177feb105df49c72a624e04d597777b3dd0beb800f75d420f934f7837ebb4f3b444f9bbe71e4239dafd1f8c340f816f2fb65a4f1d20441dfb8e167a66970dfa51ad7e99623dfd17831a6f954c9f76f6ac8c6d474e3e5419f09bcb8e7b6dda93b57134a94ac9135d21b2eb14d5b8a6fada", 0x82, 0x8}, {0x2, 0x5, &(0x7f00000006c0)='}\x00', &(0x7f0000000700)="a4b3b8948f948bb1820e67d997b247ad5df5932fe79cef0d3db33ea3489ff6d167ec1505cb5d28e7b82fd99516312e64a1eb0384af125cccef3bc525c6d97b1ac4315c5f68c8c0f7ec4b2d9cadf2d1f5ea0b0cb9eb5d44d4fda08a48036aef937c175374fabc8f1878868ea3fc9777a746f44ddccd5ad71bb65ec5e4765511c5979efb76ca83f9bfe6a5a39fda85e207edbbf56ef8a03eaed29889dd7dcbcbddf43c43dbb9d5096e16a44125394da25eca0f2a8a1bf27449c41a21cc450e66e1dec287da91f0e219", 0xc8, 0x20}]}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000940)={r0, 0xb3d, 0x7, "c045209159d2ef34d2fb3b31bdecd464b3bd08925a8b02528a711c1b61e73289302afd5a0dabe3a900d2e57a09ed3e8f5095200967b152e25d7d54bf2354679d28eeb942e27e660f96096747a7d7cbe51ed9ce4f0daffa66c4ee381d5bb78b783cdf71b788801daf"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100001007bbd700002c44777ca5fd60000000000001f", @ANYRESDEC=r0, @ANYBLOB="c790010000000000140003006c73723049a1e346156743df865a00000000000020000000040008000400c1b46d202309000000b0a706a6eb44b643614b4c7ff0"], 0x3c}}, 0x810) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="cfc850", 0x3, 0x3b00, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 404.178041ms ago: executing program 1 (id=2781): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@private, @in=@local}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000a40)=0xe8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socketpair(0x15, 0x5, 0x8, &(0x7f0000000a80)={0xffffffffffffffff}) (async, rerun: 32) r10 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r12 = getpid() (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r13, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r14, 0xee00, r16}}}], 0x20, 0x4}}], 0x1, 0x0) sendmmsg$unix(r11, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r2, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r12}}}], 0x40, 0x40004}}], 0x1, 0x0) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ac0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000bc0)=0xe8) (rerun: 64) r18 = gettid() r19 = getgid() r20 = gettid() sendmsg$netlink(r1, &(0x7f0000000d00)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc, &(0x7f0000000880)=[{&(0x7f0000000100)={0x1c, 0x29, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xc, 0x156, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @uid=r4}]}]}, 0x1c}, {&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000e00", @ANYRES32=r2, @ANYBLOB="9208c924584ab9d2585d99decc0f0e1e03e47ba10000000000000005f47c774a7e1cb5516fb7846ae8ab05233d729c9d739204c3da71ed3d3ff5c4e0118855760b0ce3951861c4d18474e109372cdfe138f4ac824d86850460f99fb7414aec97c3d94a3693945ee27ca6c388bf25be6e32449bcefb515701c4e72cf1216db328416dd138be0b609facec8847001c2655b0d47f8cce8e9632175562a291684611933817100dc58e32e6853939c7e4b6bb533e903d1271d5bc97245f472f45cf1c2cf98621e7039422904fb24f24602195f9519b3baed2d80400cf00000000"], 0x218}, {&(0x7f0000000780)={0xc4, 0x2c, 0x200, 0x70bd26, 0x25dfdbfc, "", [@generic="c9e45598683829cc2197c083272b05d0e43a610eb294a89ea1c01b37885fe550d43fe2676d42ae063187a0d22641f82f566e1831ba847d5d59d3f4032a9f8207173cd0069b684ad34968e6d1aa3725ad89e31755c71e4d96755ab5b41851ab00f4b37ed33f04f9dcddc0feb1326f71cd59f383b5c9c5b06c836f55e407aa83bb9c40eb9c2003cb6ecf7bbdcaafad27658bd30a3559167e17baf9264af5f42fb2e0f4b10e1cbb5a7256179cadb5c4ad4427a3e9"]}, 0xc4}], 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="285700000000023bd1b3841ead937229e4000000000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r17, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=0x0, @ANYRES32=r19, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x4021}, 0x8015) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 270.8733ms ago: executing program 0 (id=2782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073790064000000000800044000000000"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000980), 0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x34800000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, 0x0) getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x200000c5}, 0x48851) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r4) r7 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x5) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}}, 0x20000080) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 269.12367ms ago: executing program 1 (id=2783): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='/%\x00', 0x480700, &(0x7f0000000040)={@align=0x40, {0x5, 0x1e71, 0xeb4d, 0x6}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000028c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002880)={&(0x7f00000001c0)={0x2688, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x26c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x120, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xc63}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfffffffc}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x7f}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x991}, {0x8, 0x0, 0x2f}, {0x8, 0x0, 0x200}]}, @NL80211_ATTR_IE={0xc6, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xb1, 0x5}}, @preq={0x82, 0x83, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x7, 0x1, @broadcast, 0xffffffff, @value, 0x0, 0x0, 0x9, [{{0x1}, @device_b, 0x1}, {{}, @broadcast, 0xa5a}, {{}, @broadcast, 0x5}, {{0x1}, @device_a, 0x9}, {{}, @broadcast, 0x8}, {{0x1}, @device_b, 0xfff}, {{0x1}, @broadcast, 0xf}, {{}, @device_b, 0xfff}, {{}, @broadcast, 0x2}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x1f, 0x48}}, @supported_rates={0x1, 0x4, [{0xc, 0x1}, {0x3}, {0x36}, {0x18, 0x1}]}, @tim={0x5, 0x27, {0x4, 0x50, 0x3, "3869a3ad825de00495a7a0fc322e8eb273d32125005f2b62ba02ede00abbd36a760f44bb"}}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x2c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x9}}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x10c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xf3a}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xe4, 0x8, {0x101, 0x6, "674b6bc22748888a7849b503ba9775641e36aa1cc67b96e3179784a550f9a4f1976781678cac06202ef263b5e51673d14b905e69d3013531b40a5d35eafc54041c7c678b46347b5b19f8f3737324eb67a0bb39d6dcdf42f57d73a7d6c2d70314ee8259884b3ae57855c2f6f84534457b6b259d50776ebf2daa17ae37b9e0cb8f2426cd7207eb2133383e9825d4ad880020b0f59fedb1bc45f452705f02cfc0ad5169acb0cf22585896fee748621b807ebfa7ad43f9cd9066923854a95c7bdea02c6a19841918dc98e0e7626d05fcd4b8b029a7ab37e4240f"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5d0f8, 0x9, 0x2}}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1394, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1204, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x5a, 0xa, "f6a9dc2863392db0e7f34f7a8218316bd89120518ab0465cbb7cde855410c7655bbb34380a9448b138c99339316f7db58b544fcd86333bed46e984204b0f4407cba2c9f23e992aa401c9d7e02c1a86c8a9c1b579ed9b"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xc000}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x93, 0xb, "b2e1bf1379153c5e1a2267c71bdedaf1de258d4f4a0ddea5583ca1cd66db871a14f0a1abcaa26f51a248730209b5e2258efe712e19df74e9e0363d5fba8bb473b5b9faeee997df492217307620ce09ad375d7cce688af6e5786182554f4e402cfc1f18050c75cf5cdb0a02e76c066424d3b00356f7a728f04147b517794fc3ff598a38c2651131e355da0d248c27ff"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xd6, 0xb, "81c41f73bc27cada9e2a8b396fe8057cffcd37bd5001d9cf922a2ef355368e977649869603fc31e1afc43589df0b91977fe966f69887f5304d74ae8e57bd217634fa27e6ef2a84d4303adc91fe7125d8fb317f6f29d725b507b03e699c59a0110d213c14e4b84c85386a83d1ded4c0cf754ad3ef4b6972ca7943b9ca0fe14fb289e82fa88ae1120d17f00530245276a3cd00373addbd4cc9fbfee0b49ec355bec4da8d50e95e80a8f765a28d035f5180f27636976af769332ca2c5ac6fe25d109989fe6c09ee258d2073c7adbf3b60e48620"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xe}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x1004, 0x6, "54b1f161f8aab6660180444ddca82267e1f291a644bad45b4a57150adb7a921866e80ece792e0718414c8d5d12f2d4e8b44e8932e6185150d52d9abab7f49733f029ee3ec01df4bd7b280c56bd9e37d6ff99fc11b194724d39e2d0f970cf208e2b522ee22c3eb90b21ab2a8f4e05911de8f51a02015f6bac1f11ca753089c86fd575eac16298d182709f342b0b8d7a4b363a90f50780df1ba083330604aab3367f9a359f80101b6b96d0ca962e62004938f0f53f960c9961dede8623aa2718667d48850b38b176bd13f74d35270dac01e9b39df1371b450a271dd82947a6b8010a8905c5d7b568d95ee813b2dd6a81a553177802b2edfc2de1d1f0fa52026aac17f8e25f013a863c998084c93a087af0b435e82ec1b3366bdab7393f3cc64001b10309c11c6488dd0881b592d9430588fddf499124c97c48443d6ca6621e68a3458f598c19531fb674a9de9d10ae9bc0243171a4553a6db7bcd5b2441922af69b9547309353ebc710aadbe6343271a871f3a24afa64cb27532ec85c9b9da3e0106ee711acf381cbbaef9e05d9f5e7d1da5640d610ae92fd47fa281e4ef40175956c8d10fde6e7677a396b3817bb3380af3a1116a9aa7f60b951aa5fbd10af4ffbb5dc8f071157cc23804948dd3e891b5bf1d59932c75c55a765f7d86a0abde8bd6a983133c0a0b907499e8516d0071c7e35a3c8fad075df3ba70f52ba3e29ba5f8cabb4602e927daeb2d9aecf932b709706cb7a73a8f8a709b19297b2edc957d4f06b5daa4f74aa06244ea66e20272afe30f13a34a1bd191cc2e0fd505a0f1c5c45ec3cfb2cb9038479ee3a46d9fe4bf3d318f895d73c7113cccb4cd398c79f07115926a4e0ca16f3701238eed3b8a915b4afab7c40a9906c920b79aded63f806f2d089ddeae65f3c2c04998bc8ec3f2508f2058322189f2e949b3985137926d4794a2ce7fffa6abfd8bf93e82271716f253d983a350bcb059739024509b41635c22833ea853b318b6c0a9f4006228dcf4d55fc950dcc29cd40379c4179c57672aaadfbc2cfdf836faaa8b88131af615c5669f8b931b26ac14a7a0ecfc2037f06218fabc9fc972f3c48507248ea32bd395ed0952539c4b06b87151441311993451f677f059b04c9d67e84f5089dbde7e31edf7edf6ea0171be3b6d320d9a037d39e9d4eb58b3f42f7ae0e0ec40864645dc3d6176bcaef9710a389936a6d74bfcb7209091c4e3b06091c095efd5b37d2e255a44531d85787c2671415f542d3c3b94650c171c4ce7a2887eb290dee35e3d5fb8bf2d675af6aa302f67acb725310882a91b3aab51d8fd9bc7e7c446ecf7b69eb938f708ecb76380afd012603291d16a665c0ec15fc2c65d18d6d44c6a22609d80d22a8a5ac9e6053c8a63ce3f642eca66ef2f026c987195b560192394b9fdcb370beaa55bd277d97b8f7bc92b744dde97757df90a92c942c8281c9f342a2b927382946496d5070e6980d82e82a3e6305ede7b67cf5e840a4dff242da5c75952ab89a4651f0bc3fde46feffc6866b428b50033f8017a750ba68dda337e62e6d8757881f2b6a6ae9f700b84cfdc2c3e0f9884645fe488e49fa52492695de0bc686fc8ca204f534b7aba3cc4cc6a31cd34db34e84b6725dbc011d82462c7dd204aa7085632eddeb4d19754b831cfa8239c238871f8f7933e4814d3d54b9ce46f39113378ad726214c950942051c0dc69cc31238704aa5bef64a33dbd4debc3ed1c651e20185b668be615b3b4aa8beb928ea61eb0d8ef4e8ba64fd546f19231b4beebbe22518b5e82bb494db250b50101916d068be94c06cf03d3ba12a3e04167a0b71a18ceb6baec3cd2ed78b7e198874d16b12be817af8cc7b85d813b575f97bc90272e582a6b3387841116c0850df1043168b5a25d55056e896c8309f27d2c1bc740944f1ead8f1dac9289fa6a6fc4ffd231184b64aa6a33a7949927faafc22c19ead700abea4155f0ea38a4029132b2e05f217b6dedba34ca0bc5a0abe863ba2cc82ad34cd8e4162d43e5be654516091f93610a261d5894b184943e78158560fd994520f1699d76e24a79ad97989c90caa2f75c5ed3f4d55f3f69d4ceee02c31085400c7c268260a60392eb8a265852287d3a6d00feee0999a6919809c94b4a4dd4850ace997ebb0efb8d6c239ab35dd92569742988fa4aa20e939e486ca0bbca650e77a1af867fd3e51b4434b2accdfcc6dc78907c180413a639e3da4236081f403c86b1fdb4c9511c2cc09f852afeacbf299af19c01e8e89d35aa7a82d929101c0e1174d52f81fd0435ae7e3f5bc390453a9ee1e7f05845c832be25960137826695af206bb9d3b480c31ccbe1e0200a9452a65f2ff58e541517de6b5ce4dd3c85c5408630eb9ea3b9072d07601118bb60c02b4ec2e48aa4087663204c1d8b82a18518b0d5bcc8a03653706bb6241ee462f929a8d609439a75b3d78d53010b5894c347afa94eaf11240cd4069b23ddf8f9d0a83257e69339ca6559c9aa71005b7faf284cb5cf865d51d761412c656ed3bfcd7d9e0ce2928ee3462a5092d4c59152d3dcd73e524adec360537bb139d2de516ab9d390142abd9133060822ce11ec1ddf37de1c632db7c851c5cf6cd0dd27d0182bd43da4039e980ebef2544315bccf10b5f973574b359aeeebac7c1447309b055a1744d8023b0fa716f0e5df13dea914f059cd24c345be7f1356ade317e9ad4eac5ead33713036bb1a7b629e704838ed7d1292b779a06ad59ceb5d611646f22722968c9e740b27c3faab337bd95850afdfd9dddf901d2d03e1d2e54cefbd9bece9c31b09645d3a5e4e202de33d09bc62a414ea2bf92dd319b669c006e26b791030346ade18bbd7c4b7bc69564fa522cc1d81166e14d61e89cb9ee0b49093bd89d645a44a810af2904f76c78c630818dfbee63c83c5dd0890dec3ec229e6889af31b0cc13b28948972e427d754a571f5ee6df55f1bb2d4f7dbd2d6075f68e268ae036cd26fcd349615a8e1ab71eb1addae7c552f8b2ff2c043158a6b21d3a26433a3ef3bdf959c83937584d37dfac3f13a7099ec3ace85754dcc89cb3dcd9ba22a56d71d238697fa25a558db50358253400aa1376858e5cf65b9fa5614a3072d3de19137a9f17d515501fc487713254039cf8c60e9c7940d5413906f70b1e92ee90c6c935255850eb2977d41dce56534a0d557cefbde420562930004eedd25c62c1d30979800f45b185134d9e436730ba9661200882d2c304cc17ce8212af664e1adf65a1121c4d82aa18bc6b363118d63aac026deab75e63fb069ae571c502428894f07f1e3a90df1e31c4f87b332bd05edbff7c25d7961c9eca665b6e4427c7903dc5e92a8693a946689e60d0753e4fd6950553844eaaaaa286f4898bde7e2a78f4a8e58796465655c42c6b43700d031a78913d9cbdb91cb5e9911f153017f8e7371ec9803d1b5d5cfe96ae9ff9b9f201c1d09e8a00bb4471c7266addd37051093d4e17141e9c1be8afe3ba1d194127cd51715eaf3905c1c2cc340bb70c38ae1be1d0c84aac2156c627181ad5b53383475eeb8c7be3d86342d65bec067ca500a8ba89ee20f3a03ad18cce709626bfd974538a8319ebe4e19ce27463e4358f535123009413a995bdaf0092a7da625e4528f8bff5bf3f202f548f64ac29d11e029955b566ca2515ac8329e9d7ef2d28a65772c0e9acf1534748de38a764f5435c05c8b91737fc9c4dd90721b50191114549a7acdac0480f5e48261c2ff38eff15957bdf865e76defa206a135892a3bd3d11b5776dc29026241942e7cbd4cc1f3fb3e78c43c7e454e85f335edb77358ffdd73c29d9f6d0bbd98abd748c3dc6849928cee8cd71d36115d28c7e451b8aae58175c3601164123cd738f6101f5445d7b65c00f6ab878723c19100313b8f620dfb8baa47db0a100fd1f62daf5f490d7d8f0b83124f6fa8632b9cf8c5f442cb1a6aabc300e7c7deafbda77ed19a108f99df388ce2a9aef013501616ae59639392b4b17319c0e547fd7f6b6f79ec66d51ef0cf12ee54d0f2b49a729ac33027c1b2b571645734beb7b3edc8378d7a94b90e97a60eb41f9f1a2d95a967d7b0f94afdabe26d13be9fb006864a88a346568df2c25ae48bef70dcaba76059253600c6439c297e9ca3ebcd9da01ba50851e94e645d2013495a853704556de3a62fe009d7e1ab363b11b5e01f3b3c58ecc209ffd203b9d26535f897a0141291e44027c165b2e2d216c1b1c7e049cc7150a239ab4274cbf41be975c977892a0fba572034778f4f6feab2871952826aa301943cfef0717d78325baccfe5dfcb5117aefad82d99ac057bc24b13ef7f9e03a6933b57dbae4f9d3452d1998d3abbe310b33e22fc6ef64e67e63a0b0c301356c22f2cee7550c1cdf7b482fab45fe0fd1cc54f9f0994ef87ea9c925726e200316b3b0a87cc4e6e1046567eb254dcaabf40efd6825053d05e3052cddd33fbbcefa61b19ee801fdbebae5e57fb8b068f74f6497c4ad0824e4a307fe173d1f4adbb1bc257f0efd8f77feb4ef53695c04ea923fb2463a3db892ebe187fb9ab9248e859e57425da347d4ca9badb7abdbfad57b8f5d31e446c7e777e69c6fe8c2285e5811d30191abd70eb47fe3fa179e6eaf1fa7aee1d7c6dcc32d044ebe81b1ba796bcf719142fb5f8039c6907c5af55b8486a74ed3cdc64440b07af675a5891b71424e417446aaa7828ec88f86c71183782556f3e20d94161afae98650e60b620dbf264f905d9487fecf9ef7d6ddcad40548251813aea010b199901d492dcaa8d905c55c2bd2e051801c74a44f582c3ead635adf614e278017ef81e251e700c4b8c49517f606198d0c2f7ef52d13d5a026b4909beaca33182e5ac9396456af67609516d2e8b4baf953caf1162a61e549f60eb33841aa6613d4eb4a9f6b9146e07cc23c8b4330b59ea4d4e4d32ad5f44fa1099433071c1bc91810b496ae1f10838409e0f73d5d09f410a66ef467295fc7bbb1b91e373b5442c1d8f23cbcd51859be353d3b9427aac71159d557be03d78ff5dc6acf0f105daec2315424926f0dbae951a6464cf308646a9310047077e6b239b544ca57cf75d8c8eeaae50d8b63d9998249f0a80a595457d992461ec879ac5db2312a9708528b86a9f7108cfe0374041e8cf5071ac57793d7545c1ca62a7fb953f473df056da1a93c4126e246510c781797105d1b3220545d1c9a7a2592bef6c3f77747bdf57d748a931ea5f1140a0d48a75f8340d650f8aaa2f8e4a954bf392ce910c38103b278fc9316899882e85faabe5cb5059147183a5235c5b95cf1d48bbfa5b0486dba82aa00c2a76990c34903ba321b0919d984fdf5344f5f8807d3e9a0a5a54582ee9817a4863187733a7977d7382c35cacb4175c846a519d903ebfee88476d2e03db3f2e0d1f1772765149433ac2cb25731795dde0cd06d6ae23579afd72b92baf0db50307fec33a0450a4b89465c02a7838d48d1a5fcacfa13f840302bc86ee71d825b2751c7cf83f2172d24c36c9268d2c54d3a746b825a88fbab6d5fc2ce5e05280dcdc901a5c19bc2079568b98aacef3071ccc8edf4caca32ce0b791df2314d1b3de36d8186879f7e1d1388d5dc45f34d13816afb6fc519523361ba0d235088ea88c8eb25ae522ec4fe8915e2a4d383cfeca0e26eb5d7304cba8a1faadc86a8379a1ca41dc57e14b56aa2b6abc9d679e9009f2ed57c0ab777da9ea5fc4f2148334d375a8afec6e89ceabc8859603fd5b8892ecee816d06a492db018e393499fb68b1534d8ebfa55c52889"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @rand_addr=0x64010102}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x120, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x46, 0xb, "2ef48c2ce0f1efec1671ed353587ca964a4497a94bfb5bf6c369c081b045685c7f848e7a1405b948367cc5527236f87658b2e6559e5e78ce82fd33d4c9412a031a72"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xfffffffb, 0x1ff, 0x437e}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xff}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x2}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xb2, 0xb, "840235fb33e551b047aa902767cc9d45230e69fee4c938df2869d5d39be45f3ee4e4924f2e0b82b871691a4f457cc010138329c0c14f47e3cae73bddfcda05543597c9af8475d8ade2ea74a1474a047c1e451fea8618ff1e3921e6d39f19f3d6451b03dfbd001586fa7f0a5c12b7d14ba0b7676aff30150889651e74da61d909c1dbed34dccee184cd397422e5f22e11596c7437a811cc29dce344e121ff6e376243ebb4e7c5d98cbb1733b72420"}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x64, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x77}, {0x8, 0x0, 0x7}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1038, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x10, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1018, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x3}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x1004, 0xb, "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"}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x2688}, 0x1, 0x0, 0x0, 0x4}, 0x24008080) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000002900)=0xffff, 0x2) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002980), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000002b40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002b00)={&(0x7f00000029c0)={0x134, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40040}, 0x4000085) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000002d80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002d40)={&(0x7f0000002bc0)={0x150, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x96}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0xfd, 0x2a, [@random_vendor={0xdd, 0xf7, "8a1909beff06a3ec5d872a3c55a6fd811100caca420c88d2c8dd6b4c4ee61c1b731e4cd67272044d7a3b7e6f6aad0078102420b1089c85b925da1df5dc815bae4618dfcc0c8b300487bee314facf35b3b044f60a77a5195c3173ef78bf8febea3bdc3fdfa462eb05b75500476d609066cc07cf28efa1c4e0b6df8678812a179bbf73f80359483426f22079ebc4c869bbf17ff56e117b93f58c9aa8b52348cacad2743a348a736b4431fcef2ba1dcfcc867558fb03135d38dc635f426847ab7fbf5ebbb4eb350557be697e8967d74de26e6d362e6758ce6726b4dce124d40aa60603c012596acf23b3a974abbb2aac71b9584ee49da5f7b"}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) connect$inet(r0, &(0x7f0000002dc0)={0x2, 0x4e21, @multicast1}, 0x10) r3 = accept4$packet(r0, 0x0, &(0x7f0000002e00), 0x800) getsockname$packet(r3, &(0x7f0000002e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002e80)=0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000002fc0)={0xffffffffffffffff, &(0x7f0000002ec0)='$!/-\\(\x00', 0x541702, &(0x7f0000002f00)={@align=0x4, {0x7, 0x2, 0x3, 0x1}}, 0x4, &(0x7f0000002f40), &(0x7f0000002f80)=0x5b}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003340)={r0, 0xe0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003100)=[0x0, 0x0], 0x0, 0x62, &(0x7f0000003140)=[{}], 0x8, 0x10, &(0x7f0000003180), &(0x7f00000031c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000003200)}}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000003480)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003440)={&(0x7f0000003380)={0x90, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000003500), r0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x24, r8, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4804) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000003600)={r0, 0x15b6, 0x3ff, 0x8}) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000003700)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x30, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb7cc}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x5) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000003800)={&(0x7f0000003740), 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2040000}, 0x4000004) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003880), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r9, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x38, r11, 0x300, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6e5d}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40d0) r12 = socket$unix(0x1, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000003a80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003a40)={&(0x7f00000039c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000003ac0)={0x0, 0x4, 0x8, 0x3}) accept4$unix(r5, &(0x7f0000003b00), &(0x7f0000003b80)=0x6e, 0x800) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000003cc0)={&(0x7f0000003bc0)=""/251, 0x100000, 0x1000, 0xdbe, 0x2}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000003ec0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000003e80)={&(0x7f0000003d40)={0x130, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) bind$packet(r5, &(0x7f0000003f00)={0x11, 0x1a, r7, 0x1, 0x7f, 0x6, @multicast}, 0x14) 206.815265ms ago: executing program 1 (id=2784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000004000000a20000000000a01030000000000000000010000010900010073797a31000000f647000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 179.749222ms ago: executing program 4 (id=2785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210025bd7000fbdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="88cb8dd3ce08000008002c0009000000"], 0x2c}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008f6ff0000000000080000007111a9000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) ioctl$NILFS_IOCTL_RESIZE(r4, 0x40086e8b, &(0x7f0000000000)=0x80000000) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xe) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2f, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x48, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r9, &(0x7f0000000040)=[{&(0x7f00000000c0)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa7ec20007b00090080000efffeffe809000000ff0000f03ac7100003ffffffff9e17306a1a2bb2fbee00000000000000000200000000fb993dbd2d77b0c0c0ea65bd74fb47bab7d9f0f4ba06e74ae0ad465a9f37fb95dc1ba9b02e981c34422fc4d62066748d7bc883f3374380420947c033226ee1131d52c6ff2b2692d51d8aa86b67cddcc4e22b282493cf78ad9fadc4a1e505e6fad06b6a65710a490a659de2f10000000000000000e2401bdcb2d5a77b5a410a135937c5e33cdd0a4124ab5aa5d2aaa816a20412cae852", 0x6e}], 0x1b) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c810}, 0x4040010) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 46.848236ms ago: executing program 1 (id=2786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x160, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x14c, 0x1, [@m_simple={0x148, 0x18, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, 'tunn\xb1q_key\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'tunnel_key\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xfffffffe, 0x20000000, 0x4, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0xc7, 0x1, 0x6, 0x3}}]}, {0xba, 0x6, "2f3b1b28ee56e3d60a0e2da5ecbdf17294c420cddcfaec1a685f6847fa389e77d3e63fe6cecdc5aa9ed6079c4f6ff00ffebe17619dbf43f765ce2f0f51a7473211b33cfa387d3e9278a676a07ee145babf7a50ac95584fdb2f5c7b099bc9da51f6419a47d7dece77d67bcf74d22615d60f8ca20d3235db11645dab160acb82be97ab7ed7ca274fc6aa993c6c940e711a92ec968b2febbc652358e2ed1926b431c02e3a7dda7b93e0f55b5b9156eb84ceb9438e19746f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x160}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5f9d8116d30af9ffff281c2da040", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$igmp(0x2, 0x3, 0x2) 0s ago: executing program 4 (id=2787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a300000"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000980), 0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x34800000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, 0x0) getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x200000c5}, 0x48851) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r4) r7 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x5) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}}, 0x20000080) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): 1.1389'. [ 250.494452][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 250.856119][T10962] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1404'. [ 250.889484][T10962] bridge0: port 3(vlan2) entered disabled state [ 250.899596][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.907311][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.052561][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1406'. [ 251.061732][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1406'. [ 251.217513][T10969] tipc: Enabled bearer , priority 0 [ 251.232823][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.273317][T10965] tipc: Resetting bearer [ 251.427040][T10983] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1411'. [ 251.501355][T10974] syzkaller0: entered promiscuous mode [ 251.544273][T10974] syzkaller0: entered allmulticast mode [ 251.733794][T10964] tipc: Resetting bearer [ 251.857616][T10964] tipc: Disabling bearer [ 251.874550][T10999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1417'. [ 252.109191][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1417'. [ 252.212385][T11005] nbd: device at index 64 is going down [ 252.547256][T10153] udevd[10153]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 252.574435][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1426'. [ 252.585814][T11037] netlink: 'syz.2.1426': attribute type 48 has an invalid length. [ 252.602545][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 252.681054][T11041] netlink: 'syz.3.1425': attribute type 13 has an invalid length. [ 252.691701][T11038] macsec1: entered promiscuous mode [ 252.972091][T11038] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 253.055533][T11060] netlink: 'syz.4.1431': attribute type 61 has an invalid length. [ 253.083600][T11045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.294321][ T5830] net_ratelimit: 20 callbacks suppressed [ 253.294341][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.324618][T11067] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 253.354069][T11067] bond8 (unregistering): Released all slaves [ 253.477505][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.533739][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.647297][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.883008][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.891631][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.282807][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.432480][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.512905][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.595447][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.002487][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.487267][T11032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.499601][T11037] __nla_validate_parse: 4 callbacks suppressed [ 255.499623][T11037] netlink: 840 bytes leftover after parsing attributes in process `syz.2.1426'. [ 255.600343][T11089] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 255.715766][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.042875][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1440'. [ 256.109053][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 256.607924][T11121] syzkaller0: entered promiscuous mode [ 256.625982][T11121] syzkaller0: entered allmulticast mode [ 256.636679][T11125] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 256.649316][T11125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1450'. [ 257.006789][T11139] tipc: Enabling of bearer rejected, failed to enable media [ 257.621670][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 257.644731][T11166] netlink: 'syz.4.1462': attribute type 10 has an invalid length. [ 257.684777][T11166] netlink: 'syz.4.1462': attribute type 10 has an invalid length. [ 257.734532][T11166] dummy0: entered promiscuous mode [ 257.750499][T11172] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1464'. [ 257.778351][T11166] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 258.119978][T11185] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1466'. [ 258.220825][T11189] netlink: 'syz.0.1468': attribute type 1 has an invalid length. [ 258.280332][T11193] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1469'. [ 258.359418][T11189] 8021q: adding VLAN 0 to HW filter on device bond8 [ 258.383809][T10007] net_ratelimit: 23 callbacks suppressed [ 258.383827][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.424396][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.436424][T11203] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 258.447476][T11204] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 258.465800][T11196] vlan0: entered allmulticast mode [ 258.471174][T11196] bond8: entered allmulticast mode [ 258.547797][T11198] bond8: (slave geneve2): making interface the new active one [ 258.576701][T11198] geneve2: entered allmulticast mode [ 258.607927][T11198] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 258.634548][T10000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.659591][T10000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.688959][T11211] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1470'. [ 258.703762][T10000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.737567][T10000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.747217][T11211] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1470'. [ 258.753842][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.843711][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.234722][T11231] xt_hashlimit: size too large, truncated to 1048576 [ 259.274980][T11231] xt_hashlimit: invalid interval [ 259.516567][T11242] sctp: [Deprecated]: syz.4.1483 (pid 11242) Use of int in max_burst socket option. [ 259.516567][T11242] Use struct sctp_assoc_value instead [ 259.544198][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.557274][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.571766][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.794903][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.982658][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.676619][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.898538][T11278] netlink: 'syz.4.1491': attribute type 1 has an invalid length. [ 261.113550][T11278] bond9 (unregistering): Released all slaves [ 261.753767][T11313] __nla_validate_parse: 1 callbacks suppressed [ 261.753788][T11313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1498'. [ 261.985239][T11313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.153118][T11334] dvmrp0: entered allmulticast mode [ 263.712851][ T5830] net_ratelimit: 12 callbacks suppressed [ 263.712870][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.954684][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.032096][T11356] : renamed from bond0 (while UP) [ 264.063283][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.081932][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.330231][T11369] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1513'. [ 264.345686][T11369] openvswitch: netlink: Missing key (keys=40, expected=100) [ 264.375281][T11371] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 264.464492][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.501927][T11371] 8021q: adding VLAN 0 to HW filter on device bond9 [ 264.691004][T11374] vlan1: entered allmulticast mode [ 264.707061][T11374] bond9: entered allmulticast mode [ 264.951384][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1517'. [ 264.996103][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.087174][T11387] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1519'. [ 265.146983][T11387] geneve3: entered promiscuous mode [ 265.227544][T11392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1520'. [ 265.240453][ T9997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.268384][ T9997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.563368][T11403] syzkaller0: entered promiscuous mode [ 265.578702][T11403] syzkaller0: entered allmulticast mode [ 265.592922][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.629673][T11403] netlink: 'syz.2.1523': attribute type 2 has an invalid length. [ 265.763574][T11414] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 265.849877][T11414] 8021q: adding VLAN 0 to HW filter on device bond14 [ 265.896068][T11417] vlan5: entered allmulticast mode [ 265.901350][T11417] bond14: entered allmulticast mode [ 268.913667][ T9997] net_ratelimit: 12 callbacks suppressed [ 268.913690][ T9997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.154826][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.163006][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.692784][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.701122][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.797438][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.022749][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.193698][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.802581][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.810909][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.112875][T10007] net_ratelimit: 11 callbacks suppressed [ 274.112899][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.127126][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.354045][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.442704][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.232793][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.241178][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.393130][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.542566][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.876435][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.193074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.554304][ T5741] net_ratelimit: 14 callbacks suppressed [ 279.554325][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.642573][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.650926][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.942648][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.593650][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.782702][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.791061][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.042671][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.634551][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.892642][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.753939][ T5741] net_ratelimit: 11 callbacks suppressed [ 284.753961][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.992524][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.192603][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.200907][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.442887][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.793960][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.312619][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.320949][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.432586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.572556][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.780701][T11428] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1532'. [ 286.877152][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1535'. [ 286.890190][T11428] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 287.212895][T11428] netlink: 'syz.2.1532': attribute type 3 has an invalid length. [ 287.230399][T11428] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1532'. [ 287.347478][T11428] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.357707][T11428] bond6: (slave bond7): making interface the new active one [ 287.370700][T11428] bond6: (slave bond7): Enslaving as an active interface with an up link [ 287.485281][T11473] netlink: 'syz.0.1538': attribute type 16 has an invalid length. [ 287.493732][T11473] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1538'. [ 287.818342][T11482] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 287.858862][T11482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.881156][T11482] vlan3: entered allmulticast mode [ 287.886619][T11482] bond0: entered allmulticast mode [ 287.910339][T11482] bond0: (slave geneve3): making interface the new active one [ 287.918132][T11482] geneve3: entered allmulticast mode [ 287.926015][T11482] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 287.936744][ T9997] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.948679][ T9997] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 288.031533][ T9997] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 288.044811][ T9997] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 288.239156][T11490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1543'. [ 288.256084][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'. [ 288.265530][T11490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1543'. [ 288.277762][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'. [ 288.287554][T11490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1543'. [ 288.297789][T11490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1543'. [ 289.769154][T11429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.778957][T11443] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 289.789084][T11443] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 289.915829][ T9997] net_ratelimit: 15 callbacks suppressed [ 289.915849][ T9997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.952597][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.138124][T11524] tipc: Started in network mode [ 290.158405][T11524] tipc: Node identity 7f, cluster identity 4711 [ 290.178165][T11524] tipc: Node number set to 127 [ 290.288389][T11530] bridge3: entered allmulticast mode [ 290.529516][T11547] sit0: Caught tx_queue_len zero misconfig [ 290.787162][T11558] ip6gre2: entered promiscuous mode [ 290.793413][ T9997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.816942][T11558] ip6gre2: entered allmulticast mode [ 290.823062][ T9997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.993194][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.033677][ T9997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.215812][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.299791][T11566] syzkaller0: entered promiscuous mode [ 291.316534][T11566] syzkaller0: entered allmulticast mode [ 291.661034][T11588] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 291.719471][T11594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.973696][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.994473][T11604] __nla_validate_parse: 13 callbacks suppressed [ 291.994522][T11604] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1578'. [ 292.003126][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.064816][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.631860][T11626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1585'. [ 292.763533][T11632] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1587'. [ 292.902375][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'. [ 292.926644][T11640] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 293.005052][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'. [ 293.109259][T11648] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 293.160135][T11650] tunl0: entered allmulticast mode [ 293.188893][T11654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1588'. [ 293.201820][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 293.326351][T11662] smc: net device lo applied user defined pnetid SYZ2 [ 293.339493][T11662] smc: net device lo erased user defined pnetid SYZ2 [ 293.564947][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1600'. [ 293.580163][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1600'. [ 293.620508][T11683] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1602'. [ 293.815100][T11695] netlink: 'syz.3.1606': attribute type 1 has an invalid length. [ 293.944580][T11699] bond6: Unable to set up delay as MII monitoring is disabled [ 293.957040][T11699] bond6 (unregistering): Released all slaves [ 293.967652][T11695] nbd1: detected capacity change from 0 to 2 [ 294.001194][ T5641] block nbd1: Receive control failed (result -104) [ 294.268597][T11713] macsec0: entered allmulticast mode [ 294.297937][T11713] veth1_macvtap: entered allmulticast mode [ 294.317510][T11713] macsec0: left allmulticast mode [ 294.334942][T11713] veth1_macvtap: left allmulticast mode [ 294.575216][T11732] xt_hl: Unknown TTL match mode: 237 [ 294.588267][T11731] veth0_macvtap: left promiscuous mode [ 294.678335][T11738] sctp: [Deprecated]: syz.2.1620 (pid 11738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.678335][T11738] Use struct sctp_sack_info instead [ 294.880101][T11732] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 294.918500][T11732] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 294.959569][T11732] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 295.000556][T11732] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 295.078803][T11732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 295.152975][ T5650] net_ratelimit: 21 callbacks suppressed [ 295.152997][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.209531][T11755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.363697][ T9986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.379969][ T9986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.553913][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.564637][ T9986] smbdirect: ib_dev[syz2] removed [ 296.192735][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.260617][ T5741] IPVS: starting estimator thread 0... [ 296.267603][T11781] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 296.287889][T11781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.358849][T11786] netlink: 'syz.1.1639': attribute type 1 has an invalid length. [ 296.382491][T11782] IPVS: using max 27 ests per chain, 64800 per kthread [ 296.406543][T11786] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.465016][T11786] vlan4: entered allmulticast mode [ 296.475409][T11786] bond6: entered allmulticast mode [ 296.513364][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.531820][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.654243][T11799] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 297.235212][ T29] audit: type=1107 audit(1779948053.127:7): pid=11823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 297.294868][T11824] xt_hashlimit: size too large, truncated to 1048576 [ 297.299444][T11828] __nla_validate_parse: 14 callbacks suppressed [ 297.299496][T11828] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1653'. [ 297.606462][T11841] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1655'. [ 297.746549][ T9998] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.780355][ T9998] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.803769][ T9998] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.817703][T11849] netlink: 'syz.3.1657': attribute type 2 has an invalid length. [ 297.830109][T11848] FAULT_INJECTION: forcing a failure. [ 297.830109][T11848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.837554][ T9998] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.857972][T11848] CPU: 1 UID: 0 PID: 11848 Comm: syz.4.1658 Not tainted syzkaller #0 PREEMPT(full) [ 297.857998][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.858012][T11848] Call Trace: [ 297.858020][T11848] [ 297.858029][T11848] dump_stack_lvl+0xe8/0x150 [ 297.858060][T11848] should_fail_ex+0x412/0x560 [ 297.858089][T11848] _copy_to_user+0x31/0xb0 [ 297.858118][T11848] simple_read_from_buffer+0xe1/0x170 [ 297.858148][T11848] proc_fail_nth_read+0x1bb/0x230 [ 297.858178][T11848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.858208][T11848] ? rw_verify_area+0x2a6/0x4d0 [ 297.858236][T11848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.858263][T11848] vfs_read+0x20c/0xa70 [ 297.858295][T11848] ? __pfx___mutex_lock+0x10/0x10 [ 297.858318][T11848] ? __pfx_vfs_read+0x10/0x10 [ 297.858346][T11848] ? __fget_files+0x2a/0x420 [ 297.858374][T11848] ? __fget_files+0x3a0/0x420 [ 297.858396][T11848] ? __fget_files+0x2a/0x420 [ 297.858429][T11848] ksys_read+0x150/0x270 [ 297.858460][T11848] ? __pfx_ksys_read+0x10/0x10 [ 297.858508][T11848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.858530][T11848] do_syscall_64+0x174/0xf80 [ 297.858549][T11848] ? trace_irq_disable+0x3b/0x140 [ 297.858580][T11848] ? clear_bhb_loop+0x40/0x90 [ 297.858604][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.858625][T11848] RIP: 0033:0x7f7bb8f5d68e [ 297.858644][T11848] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.858661][T11848] RSP: 002b:00007f7bb9ecdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.858681][T11848] RAX: ffffffffffffffda RBX: 00007f7bb9ece6c0 RCX: 00007f7bb8f5d68e [ 297.858696][T11848] RDX: 000000000000000f RSI: 00007f7bb9ece0a0 RDI: 0000000000000004 [ 297.858708][T11848] RBP: 00007f7bb9ece090 R08: 0000000000000000 R09: 0000000000000000 [ 297.858720][T11848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.858732][T11848] R13: 00007f7bb9216038 R14: 00007f7bb9215fa0 R15: 00007ffc24aed728 [ 297.858765][T11848] [ 298.219249][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 298.236393][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 298.291399][T11863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1661'. [ 298.449548][T10007] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 46262 - 0 [ 298.496311][T10007] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.547146][T10007] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 46262 - 0 [ 298.547969][ T29] audit: type=1804 audit(1779948054.447:8): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1666" name="/newroot/347/cgroup.controllers" dev="tmpfs" ino=1786 res=1 errno=0 [ 298.593063][T10007] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.647627][ T29] audit: type=1800 audit(1779948054.447:9): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1666" name="cgroup.controllers" dev="tmpfs" ino=1786 res=0 errno=0 [ 298.747740][T10007] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 46262 - 0 [ 298.769650][T10007] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.790927][T10007] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 46262 - 0 [ 298.808766][T10007] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 299.185781][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'. [ 299.213139][T11905] netlink: 'syz.4.1675': attribute type 2 has an invalid length. [ 299.234635][T11905] netlink: 'syz.4.1675': attribute type 2 has an invalid length. [ 299.333636][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1675'. [ 299.354573][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1675'. [ 299.678137][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1680'. [ 299.857457][T11933] bridge1: port 1(gretap1) entered blocking state [ 299.864593][T11933] bridge1: port 1(gretap1) entered disabled state [ 299.871558][T11933] gretap1: entered allmulticast mode [ 299.880750][T11933] gretap1: entered promiscuous mode [ 299.978257][T11945] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1683'. [ 300.010457][T11941] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 300.168817][T11950] syzkaller0: entered promiscuous mode [ 300.175366][T11950] syzkaller0: entered allmulticast mode [ 300.184955][T10003] net_ratelimit: 17 callbacks suppressed [ 300.184974][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.352932][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.361106][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.585020][T11965] netlink: 'syz.1.1689': attribute type 1 has an invalid length. [ 300.717552][T11969] erspan2: entered allmulticast mode [ 300.792936][T11965] bond7: entered promiscuous mode [ 300.798343][T11965] bond7: entered allmulticast mode [ 300.805355][T11965] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.865191][T11974] syz.1.1689 (11974) used obsolete PPPIOCDETACH ioctl [ 301.176584][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.195387][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.339186][T11993] netlink: 'syz.4.1694': attribute type 58 has an invalid length. [ 301.348727][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.393164][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.794561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.813455][T12015] bond8: option mode: invalid value (7) [ 302.000920][T12015] bond8 (unregistering): Released all slaves [ 302.259079][T12039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.266410][T12039] IPv6: NLM_F_CREATE should be set when creating new route [ 302.323134][ T9986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.340850][ T9986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.377196][T12043] lo: Caught tx_queue_len zero misconfig [ 302.439140][T12050] __nla_validate_parse: 4 callbacks suppressed [ 302.439160][T12050] netlink: 968 bytes leftover after parsing attributes in process `syz.2.1711'. [ 302.588434][T12048] syzkaller0: entered promiscuous mode [ 302.604224][T12048] syzkaller0: entered allmulticast mode [ 302.658398][T12048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1710'. [ 312.034662][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 317.154463][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.154498][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.669154][T12085] bond8: (slave bond_slave_1): Device is not bonding slave [ 322.686510][T12085] bond8: option active_slave: invalid value (bond_slave_1) [ 322.697435][T12091] netlink: 210640 bytes leftover after parsing attributes in process `syz.1.1720'. [ 322.775127][T12085] bond8 (unregistering): Released all slaves [ 322.914299][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 322.987905][T12106] FAULT_INJECTION: forcing a failure. [ 322.987905][T12106] name failslab, interval 1, probability 0, space 0, times 0 [ 323.001682][T12106] CPU: 1 UID: 0 PID: 12106 Comm: syz.1.1726 Not tainted syzkaller #0 PREEMPT(full) [ 323.001711][T12106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.001729][T12106] Call Trace: [ 323.001741][T12106] [ 323.001751][T12106] dump_stack_lvl+0xe8/0x150 [ 323.001780][T12106] should_fail_ex+0x412/0x560 [ 323.001820][T12106] should_failslab+0xa8/0x100 [ 323.001843][T12106] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 323.001871][T12106] ? __alloc_skb+0x186/0x7d0 [ 323.001900][T12106] ? __alloc_skb+0x1d0/0x7d0 [ 323.001925][T12106] ? __local_bh_enable_ip+0xd0/0x130 [ 323.001951][T12106] __alloc_skb+0x1d0/0x7d0 [ 323.001980][T12106] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 323.002012][T12106] netlink_sendmsg+0x5d4/0xb40 [ 323.002045][T12106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.002071][T12106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 323.002101][T12106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.002127][T12106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.002152][T12106] __sys_sendto+0x672/0x710 [ 323.002184][T12106] ? __pfx___sys_sendto+0x10/0x10 [ 323.002211][T12106] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 323.002243][T12106] ? __fget_files+0x3a0/0x420 [ 323.002278][T12106] ? ksys_write+0x242/0x270 [ 323.002308][T12106] ? __pfx_ksys_write+0x10/0x10 [ 323.002341][T12106] __x64_sys_sendto+0xde/0x100 [ 323.002361][T12106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.002382][T12106] do_syscall_64+0x174/0xf80 [ 323.002400][T12106] ? trace_irq_disable+0x3b/0x140 [ 323.002431][T12106] ? clear_bhb_loop+0x40/0x90 [ 323.002463][T12106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.002483][T12106] RIP: 0033:0x7fee9b95d68e [ 323.002502][T12106] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 323.002519][T12106] RSP: 002b:00007fee9c8b3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 323.002540][T12106] RAX: ffffffffffffffda RBX: 00007fee9c8b56c0 RCX: 00007fee9b95d68e [ 323.002554][T12106] RDX: 0000000000000020 RSI: 00007fee9c8b4000 RDI: 0000000000000003 [ 323.002566][T12106] RBP: 0000000000000000 R08: 00007fee9c8b3f04 R09: 000000000000000c [ 323.002577][T12106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 323.002588][T12106] R13: 00007fee9c8b3f58 R14: 00007fee9c8b4000 R15: 0000000000000000 [ 323.002619][T12106] [ 323.487856][T12123] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 323.514989][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1730'. [ 323.561019][T12122] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1536) ! [ 323.598730][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 323.633162][T12113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1728'. [ 323.647589][T12126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1731'. [ 323.658030][T12128] bond0: Caught tx_queue_len zero misconfig [ 323.688230][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'. [ 323.719473][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'. [ 323.865999][T12134] netlink: 'syz.4.1733': attribute type 3 has an invalid length. [ 323.900041][T12134] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1733'. [ 324.201750][ T25] block nbd1: Possible stuck request ffff888026f8e000: control (read@0,1024B). Runtime 30 seconds [ 324.287248][T12155] FAULT_INJECTION: forcing a failure. [ 324.287248][T12155] name failslab, interval 1, probability 0, space 0, times 0 [ 324.314687][T12154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1739'. [ 324.344741][T12155] CPU: 0 UID: 0 PID: 12155 Comm: syz.0.1738 Not tainted syzkaller #0 PREEMPT(full) [ 324.344777][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.344789][T12155] Call Trace: [ 324.344797][T12155] [ 324.344806][T12155] dump_stack_lvl+0xe8/0x150 [ 324.344835][T12155] should_fail_ex+0x412/0x560 [ 324.344863][T12155] should_failslab+0xa8/0x100 [ 324.344885][T12155] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 324.344914][T12155] ? __alloc_skb+0x186/0x7d0 [ 324.344943][T12155] ? __alloc_skb+0x1d0/0x7d0 [ 324.344970][T12155] ? __local_bh_enable_ip+0xd0/0x130 [ 324.344999][T12155] __alloc_skb+0x1d0/0x7d0 [ 324.345029][T12155] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 324.345062][T12155] netlink_sendmsg+0x5d4/0xb40 [ 324.345095][T12155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.345120][T12155] ? aa_sock_msg_perm+0xf1/0x1b0 [ 324.345151][T12155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.345177][T12155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.345201][T12155] __sys_sendto+0x672/0x710 [ 324.345234][T12155] ? __pfx___sys_sendto+0x10/0x10 [ 324.345290][T12155] ? exc_page_fault+0x6a/0xc0 [ 324.345325][T12155] ? do_user_addr_fault+0xc6f/0x1340 [ 324.345352][T12155] __x64_sys_sendto+0xde/0x100 [ 324.345372][T12155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.345394][T12155] do_syscall_64+0x174/0xf80 [ 324.345412][T12155] ? trace_irq_disable+0x3b/0x140 [ 324.345441][T12155] ? clear_bhb_loop+0x40/0x90 [ 324.345466][T12155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.345486][T12155] RIP: 0033:0x7f3771d5d68e [ 324.345505][T12155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.345522][T12155] RSP: 002b:00007f3772babe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 324.345543][T12155] RAX: ffffffffffffffda RBX: 00007f3772bad6c0 RCX: 00007f3771d5d68e [ 324.345557][T12155] RDX: 0000000000000020 RSI: 00007f3772bac000 RDI: 0000000000000003 [ 324.345569][T12155] RBP: 0000000000000000 R08: 00007f3772babf04 R09: 000000000000000c [ 324.345582][T12155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 324.345594][T12155] R13: 00007f3772babf58 R14: 00007f3772bac000 R15: 0000000000000000 [ 324.345625][T12155] [ 324.731384][T12161] FAULT_INJECTION: forcing a failure. [ 324.731384][T12161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.749913][T12161] CPU: 0 UID: 0 PID: 12161 Comm: syz.1.1741 Not tainted syzkaller #0 PREEMPT(full) [ 324.749940][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.749982][T12161] Call Trace: [ 324.749990][T12161] [ 324.749999][T12161] dump_stack_lvl+0xe8/0x150 [ 324.750028][T12161] should_fail_ex+0x412/0x560 [ 324.750057][T12161] _copy_from_user+0x2d/0xb0 [ 324.750083][T12161] sctp_setsockopt+0x1c4/0x12c0 [ 324.750103][T12161] ? sock_common_setsockopt+0x36/0xc0 [ 324.750131][T12161] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 324.750162][T12161] do_sock_setsockopt+0x17c/0x1b0 [ 324.750187][T12161] __x64_sys_setsockopt+0x13d/0x1b0 [ 324.750210][T12161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.750232][T12161] do_syscall_64+0x174/0xf80 [ 324.750250][T12161] ? trace_irq_disable+0x3b/0x140 [ 324.750280][T12161] ? clear_bhb_loop+0x40/0x90 [ 324.750305][T12161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.750325][T12161] RIP: 0033:0x7fee9b99ce59 [ 324.750345][T12161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.750363][T12161] RSP: 002b:00007fee9c894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 324.750389][T12161] RAX: ffffffffffffffda RBX: 00007fee9bc16090 RCX: 00007fee9b99ce59 [ 324.750404][T12161] RDX: 0000000000000078 RSI: 0000000000000084 RDI: 0000000000000003 [ 324.750416][T12161] RBP: 00007fee9c894090 R08: 0000000000000004 R09: 0000000000000000 [ 324.750428][T12161] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 324.750440][T12161] R13: 00007fee9bc16128 R14: 00007fee9bc16090 R15: 00007ffe2b7ac9a8 [ 324.750472][T12161] [ 324.935208][T12164] FAULT_INJECTION: forcing a failure. [ 324.935208][T12164] name failslab, interval 1, probability 0, space 0, times 0 [ 324.948080][T12164] CPU: 0 UID: 0 PID: 12164 Comm: syz.0.1742 Not tainted syzkaller #0 PREEMPT(full) [ 324.948105][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.948117][T12164] Call Trace: [ 324.948126][T12164] [ 324.948136][T12164] dump_stack_lvl+0xe8/0x150 [ 324.948163][T12164] should_fail_ex+0x412/0x560 [ 324.948191][T12164] should_failslab+0xa8/0x100 [ 324.948230][T12164] __kmalloc_noprof+0xe8/0x760 [ 324.948260][T12164] ? bpf_test_init+0x9f/0x150 [ 324.948287][T12164] bpf_test_init+0x9f/0x150 [ 324.948313][T12164] bpf_prog_test_run_xdp+0x529/0x1160 [ 324.948354][T12164] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 324.948383][T12164] ? __fget_files+0x2a/0x420 [ 324.948413][T12164] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 324.948438][T12164] bpf_prog_test_run+0x2c7/0x340 [ 324.948463][T12164] __sys_bpf+0x643/0x950 [ 324.948495][T12164] ? __pfx___sys_bpf+0x10/0x10 [ 324.948543][T12164] ? ksys_write+0x242/0x270 [ 324.948574][T12164] ? __pfx_ksys_write+0x10/0x10 [ 324.948608][T12164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.948630][T12164] __x64_sys_bpf+0x7c/0x90 [ 324.948670][T12164] do_syscall_64+0x174/0xf80 [ 324.948697][T12164] ? trace_irq_disable+0x3b/0x140 [ 324.948722][T12164] ? clear_bhb_loop+0x40/0x90 [ 324.948744][T12164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.948762][T12164] RIP: 0033:0x7f3771d9ce59 [ 324.948779][T12164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.948794][T12164] RSP: 002b:00007f3772bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.948813][T12164] RAX: ffffffffffffffda RBX: 00007f3772015fa0 RCX: 00007f3771d9ce59 [ 324.948825][T12164] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 324.948836][T12164] RBP: 00007f3772bce090 R08: 0000000000000000 R09: 0000000000000000 [ 324.948847][T12164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.948857][T12164] R13: 00007f3772016038 R14: 00007f3772015fa0 R15: 00007ffeb93486b8 [ 324.948886][T12164] [ 325.519153][T12173] lo speed is unknown, defaulting to 1000 [ 325.582848][T12173] lo speed is unknown, defaulting to 1000 [ 325.699744][T12181] bridge0: port 1(vlan0) entered disabled state [ 326.047074][T12181] bond0: left promiscuous mode [ 326.084961][T12173] lo speed is unknown, defaulting to 1000 [ 326.095665][T10007] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.128502][T10007] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.157200][T10007] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.193681][T10007] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.225983][T10007] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.253867][T10007] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.317566][T10007] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.345828][T10007] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.466653][T12221] netlink: 'syz.2.1754': attribute type 6 has an invalid length. [ 326.613326][T12224] team1: entered promiscuous mode [ 326.619707][T12224] team1: entered allmulticast mode [ 326.627158][T12224] 8021q: adding VLAN 0 to HW filter on device team1 [ 326.661242][T12227] netlink: 'syz.4.1756': attribute type 4 has an invalid length. [ 326.681533][T12228] team2: entered promiscuous mode [ 326.687197][T12228] team2: entered allmulticast mode [ 326.693198][T12228] 8021q: adding VLAN 0 to HW filter on device team2 [ 326.724074][T12229] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 326.739266][T12173] infiniband syz0: set active [ 326.745127][T12193] lo speed is unknown, defaulting to 1000 [ 326.754197][T12173] infiniband syz0: added lo [ 326.831392][T12173] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 326.862893][T12173] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 326.933492][T12173] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 326.987744][T12240] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 327.023866][T12241] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 327.058257][T12173] RDS/IB: syz0: added [ 327.068672][T12240] vlan3: entered promiscuous mode [ 327.077914][T12240] bond_slave_1: entered promiscuous mode [ 327.085056][T12173] smc: adding ib device syz0 with port count 1 [ 327.094003][T12173] smc: ib device syz0 port 1 has no pnetid [ 327.117697][T12246] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 327.118620][T12188] lo speed is unknown, defaulting to 1000 [ 327.133442][T12244] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 327.141697][T12244] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 327.157532][T12173] lo speed is unknown, defaulting to 1000 [ 327.167105][T12246] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 327.305458][T12251] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 327.409087][T12255] netlink: 'syz.4.1764': attribute type 45 has an invalid length. [ 327.835223][T12268] xt_TCPMSS: Only works on TCP SYN packets [ 327.918778][T12173] lo speed is unknown, defaulting to 1000 [ 327.929099][T12279] FAULT_INJECTION: forcing a failure. [ 327.929099][T12279] name failslab, interval 1, probability 0, space 0, times 0 [ 327.962320][T12279] CPU: 0 UID: 0 PID: 12279 Comm: syz.1.1771 Not tainted syzkaller #0 PREEMPT(full) [ 327.962349][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 327.962362][T12279] Call Trace: [ 327.962371][T12279] [ 327.962380][T12279] dump_stack_lvl+0xe8/0x150 [ 327.962410][T12279] should_fail_ex+0x412/0x560 [ 327.962439][T12279] should_failslab+0xa8/0x100 [ 327.962462][T12279] __kmalloc_noprof+0xe8/0x760 [ 327.962491][T12279] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 327.962528][T12279] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 327.962560][T12279] ? kernel_text_address+0xa5/0xe0 [ 327.962595][T12279] genl_family_rcv_msg_doit+0xd9/0x330 [ 327.962624][T12279] ? __asan_memcpy+0x40/0x70 [ 327.962654][T12279] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 327.962688][T12279] ? __pfx_genl_get_cmd+0x10/0x10 [ 327.962712][T12279] ? stack_trace_save+0xa9/0x100 [ 327.962746][T12279] ? __lock_acquire+0x6b5/0x2cf0 [ 327.962779][T12279] genl_rcv_msg+0x61c/0x7a0 [ 327.962814][T12279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.962842][T12279] ? __pfx_ctrl_getfamily+0x10/0x10 [ 327.962899][T12279] netlink_rcv_skb+0x232/0x4b0 [ 327.962924][T12279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.962954][T12279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.962995][T12279] ? down_read+0x270/0x2e0 [ 327.963016][T12279] ? genl_rcv+0xd/0x40 [ 327.963045][T12279] genl_rcv+0x28/0x40 [ 327.963070][T12279] netlink_unicast+0x75c/0x8e0 [ 327.963103][T12279] netlink_sendmsg+0x813/0xb40 [ 327.963138][T12279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.963164][T12279] ? aa_sock_msg_perm+0xf1/0x1b0 [ 327.963196][T12279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.963223][T12279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.963247][T12279] __sys_sendto+0x672/0x710 [ 327.963283][T12279] ? __pfx___sys_sendto+0x10/0x10 [ 327.963311][T12279] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 327.963347][T12279] ? __fget_files+0x3a0/0x420 [ 327.963383][T12279] ? ksys_write+0x242/0x270 [ 327.963417][T12279] ? __pfx_ksys_write+0x10/0x10 [ 327.963453][T12279] __x64_sys_sendto+0xde/0x100 [ 327.963473][T12279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.963497][T12279] do_syscall_64+0x174/0xf80 [ 327.963515][T12279] ? trace_irq_disable+0x3b/0x140 [ 327.963546][T12279] ? clear_bhb_loop+0x40/0x90 [ 327.963572][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.963593][T12279] RIP: 0033:0x7fee9b95d68e [ 327.963613][T12279] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 327.963630][T12279] RSP: 002b:00007fee9c8b3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 327.963654][T12279] RAX: ffffffffffffffda RBX: 00007fee9c8b56c0 RCX: 00007fee9b95d68e [ 327.963669][T12279] RDX: 0000000000000020 RSI: 00007fee9c8b4000 RDI: 0000000000000003 [ 327.963682][T12279] RBP: 0000000000000000 R08: 00007fee9c8b3f04 R09: 000000000000000c [ 327.963694][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 327.963706][T12279] R13: 00007fee9c8b3f58 R14: 00007fee9c8b4000 R15: 0000000000000000 [ 327.963745][T12279] [ 328.983483][T12173] lo speed is unknown, defaulting to 1000 [ 329.073712][T12313] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 329.484820][T12334] __nla_validate_parse: 280 callbacks suppressed [ 329.484843][T12334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1788'. [ 329.586782][T12173] lo speed is unknown, defaulting to 1000 [ 329.864509][T12351] netlink: 'syz.0.1789': attribute type 1 has an invalid length. [ 330.049718][T12173] lo speed is unknown, defaulting to 1000 [ 330.778700][T12375] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 330.839101][T12378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1796'. [ 330.879740][T12378] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.906636][T12375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1796'. [ 330.906660][T12381] netlink: 49 bytes leftover after parsing attributes in process `syz.0.1797'. [ 330.931251][T12381] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1797'. [ 330.941426][T12381] netlink: 49 bytes leftover after parsing attributes in process `syz.0.1797'. [ 331.304956][T12395] lo speed is unknown, defaulting to 1000 [ 331.720333][T12416] netlink: 6292 bytes leftover after parsing attributes in process `syz.4.1806'. [ 331.756708][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 331.928827][T12419] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1807'. [ 331.954824][T12419] netlink: 'syz.4.1807': attribute type 1 has an invalid length. [ 332.031796][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 332.045789][T12419] bond9: entered promiscuous mode [ 332.065266][T12419] 8021q: adding VLAN 0 to HW filter on device bond9 [ 332.173967][T12419] bond9: (slave bridge5): making interface the new active one [ 332.192664][T12419] bridge5: entered promiscuous mode [ 332.206074][T12419] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 332.334949][T12409] smc: removing ib device syz0 [ 332.451598][T12409] smbdirect: ib_dev[syz0] removed [ 332.649134][T12444] netlink: 'syz.3.1814': attribute type 11 has an invalid length. [ 333.049920][T12442] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 333.069718][T12442] bond15 (unregistering): Released all slaves [ 334.472114][T12491] veth9: entered promiscuous mode [ 335.360614][T12517] __nla_validate_parse: 4 callbacks suppressed [ 335.360634][T12517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1833'. [ 335.738701][T12526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1836'. [ 335.960553][T12529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1838'. [ 336.010637][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1838'. [ 336.084396][T12536] netlink: 41 bytes leftover after parsing attributes in process `syz.2.1837'. [ 336.100703][T12536] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1837'. [ 336.122726][T12536] netlink: 41 bytes leftover after parsing attributes in process `syz.2.1837'. [ 336.151506][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1838'. [ 336.251936][T12542] IPv6: Can't replace route, no match found [ 336.476295][T12550] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1843'. [ 336.702327][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 337.004909][T12576] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 337.200632][T12580] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20000 [ 338.720139][T12633] syzkaller0: entered promiscuous mode [ 338.742427][T12633] syzkaller0: entered allmulticast mode [ 339.096004][T12642] syz_tun: left promiscuous mode [ 339.139813][T12642] vlan0: left promiscuous mode [ 339.192010][T12642] ip6gre1: left promiscuous mode [ 339.246773][T12642] ip6gre1: left allmulticast mode [ 339.294993][T12642] bond4: left promiscuous mode [ 339.344997][T12660] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 339.380409][T12642] geneve2: left promiscuous mode [ 339.405530][T12642] vlan3: left allmulticast mode [ 339.431678][T12642] bond0: left allmulticast mode [ 339.442707][T12642] geneve3: left allmulticast mode [ 339.458816][T12642] vlan4: left allmulticast mode [ 339.468782][T12642] bond6: left allmulticast mode [ 339.497101][T12642] bond7: left promiscuous mode [ 339.519425][T12642] bond7: left allmulticast mode [ 339.543107][T12642] team1: left promiscuous mode [ 339.557197][T12642] team1: left allmulticast mode [ 339.580431][T12642] team2: left promiscuous mode [ 339.590149][T12642] team2: left allmulticast mode [ 339.674032][T12661] bond0: (slave dummy0): Releasing backup interface [ 339.719242][T12661] bridge_slave_0: left allmulticast mode [ 339.737635][T12661] bridge_slave_0: left promiscuous mode [ 339.751782][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.783557][T12661] bridge_slave_1: left allmulticast mode [ 339.801955][T12661] bridge_slave_1: left promiscuous mode [ 339.827963][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.858520][T12661] bond0: (slave bond_slave_0): Releasing backup interface [ 339.883593][T12661] bond_slave_0: left promiscuous mode [ 339.917698][T12661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.937712][T12661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.967869][T12661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.996316][T12661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.020504][T12661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.084454][T12660] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 340.402490][T12689] __nla_validate_parse: 6 callbacks suppressed [ 340.402511][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 341.300921][T12718] syzkaller0: entered promiscuous mode [ 341.328987][T12718] syzkaller0: entered allmulticast mode [ 341.509918][T12724] xt_TCPMSS: Only works on TCP SYN packets [ 341.874579][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 341.907267][T12739] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 342.610700][T12769] Bluetooth: MGMT ver 1.23 [ 342.744477][T12773] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1894'. [ 342.768044][T12772] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1894'. [ 342.863820][T12777] syzkaller0: entered promiscuous mode [ 342.886267][T12777] syzkaller0: entered allmulticast mode [ 343.689475][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 343.950259][T12821] xt_CT: No such helper "syz0" [ 344.087058][T12832] syzkaller0: entered promiscuous mode [ 344.097920][T12832] syzkaller0: entered allmulticast mode [ 344.167976][T12837] tipc: Enabling of bearer rejected, failed to enable media [ 344.440865][T12836] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.474633][T12847] –: renamed from dummy0 [ 344.583919][T12849] IPVS: stopping backup sync thread 9534 ... [ 344.673681][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 344.676258][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 344.741100][ T29] audit: type=1800 audit(1779948100.637:10): pid=12854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1918" name="r" dev="tmpfs" ino=1985 res=0 errno=0 [ 344.804649][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'. [ 344.819440][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'. [ 345.238523][T12876] syzkaller0: entered promiscuous mode [ 345.252042][T12876] syzkaller0: entered allmulticast mode [ 345.290843][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 345.327030][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1928'. [ 345.336291][T12883] sit0: left promiscuous mode [ 345.448526][T12883] bridge0: port 3(vlan2) entered blocking state [ 345.455070][T12883] bridge0: port 3(vlan2) entered forwarding state [ 345.461937][T12883] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.469210][T12883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.476809][T12883] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.484061][T12883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.527293][T12883] bond3: left promiscuous mode [ 345.538735][T12883] bond4: left promiscuous mode [ 345.568691][T12883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.577333][T12883] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.589688][T12883] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.599621][T12883] 8021q: adding VLAN 0 to HW filter on device bond11 [ 345.609442][T12883] 8021q: adding VLAN 0 to HW filter on device bond12 [ 345.621242][T12883] 8021q: adding VLAN 0 to HW filter on device bond13 [ 345.633114][T12883] macsec1: left promiscuous mode [ 345.680276][T12883] ip6gre2: left promiscuous mode [ 345.710371][T12885] bond8: option ad_select: invalid value (34) [ 345.719493][T12885] bond8 (unregistering): Released all slaves [ 345.771685][T12891] xfrm1: entered allmulticast mode [ 345.797454][T12885] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1927'. [ 345.942761][T12901] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1931'. [ 346.067246][T12908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1934'. [ 346.354268][T12920] rdma_op ffff88805a80c1f0 conn xmit_rdma 0000000000000000 [ 346.366455][T12922] netlink: 'syz.1.1940': attribute type 1 has an invalid length. [ 346.388657][T12922] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1940'. [ 346.417831][T12925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.520779][T12932] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 346.558318][T12932] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 346.580146][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 346.717423][T12943] xt_l2tp: missing protocol rule (udp|l2tpip) [ 346.823405][T12951] sctp: [Deprecated]: syz.3.1949 (pid 12951) Use of int in maxseg socket option. [ 346.823405][T12951] Use struct sctp_assoc_value instead [ 346.914337][T12954] xt_hashlimit: max too large, truncated to 1048576 [ 346.923106][T12954] Cannot find set identified by id 1 to match [ 346.981848][T12956] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1951'. [ 346.992111][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 347.055636][T12959] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.194156][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 347.332427][T12957] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1950'. [ 347.592467][T12985] netlink: 'syz.0.1954': attribute type 31 has an invalid length. [ 347.679322][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1955'. [ 347.836737][T12996] syzkaller0: entered promiscuous mode [ 347.850947][T12996] syzkaller0: entered allmulticast mode [ 347.977853][T13005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.626611][T13038] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 349.353946][T13069] netlink: 'syz.1.1981': attribute type 1 has an invalid length. [ 349.521641][T13075] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.672620][T13085] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 349.720514][T13085] bond10 (unregistering): Released all slaves [ 350.814814][T13169] __nla_validate_parse: 11 callbacks suppressed [ 350.814837][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 350.854037][T13165] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 350.885579][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2004'. [ 350.930756][T13165] sctp: [Deprecated]: syz.1.2005 (pid 13165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.930756][T13165] Use struct sctp_sack_info instead [ 351.004795][T13171] sctp: [Deprecated]: syz.1.2005 (pid 13171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.004795][T13171] Use struct sctp_sack_info instead [ 351.299616][T13187] netlink: 'syz.1.2010': attribute type 15 has an invalid length. [ 351.309428][T13187] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2010'. [ 351.511834][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2011'. [ 351.773222][T13202] lo: entered allmulticast mode [ 351.786038][T13205] lo: left allmulticast mode [ 352.420711][T13230] netlink: 'syz.2.2020': attribute type 2 has an invalid length. [ 352.706169][T13252] netlink: 'syz.0.2027': attribute type 4 has an invalid length. [ 352.766672][T13257] netlink: 'syz.0.2027': attribute type 4 has an invalid length. [ 353.067081][T13266] syzkaller0: entered promiscuous mode [ 353.072923][T13266] syzkaller0: entered allmulticast mode [ 353.312333][ T5641] Bluetooth: hci4: command 0x0405 tx timeout [ 353.336745][T13275] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2034'. [ 353.566970][T13279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2037'. [ 353.608947][T13287] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 353.639288][T13281] bond15: option fail_over_mac: invalid value (127) [ 353.651757][T13281] bond15 (unregistering): Released all slaves [ 353.661798][T13288] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2037'. [ 354.125880][T13315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2048'. [ 354.136352][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2047'. [ 354.159089][T13312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2046'. [ 354.277020][ T25] block nbd1: Possible stuck request ffff888026f8e000: control (read@0,1024B). Runtime 60 seconds [ 354.348665][T13332] netlink: 'syz.1.2051': attribute type 2 has an invalid length. [ 354.357290][T13332] netlink: 'syz.1.2051': attribute type 9 has an invalid length. [ 355.118211][T13372] bridge0: port 3(vlan2) entered disabled state [ 355.124839][T13372] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.132304][T13372] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.492442][T13393] geneve4: entered promiscuous mode [ 355.509869][T13393] geneve4: entered allmulticast mode [ 355.559917][T10008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.580145][T10008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.627036][T10008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.640556][T10008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.983752][T13419] __nla_validate_parse: 11 callbacks suppressed [ 355.983774][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2071'. [ 356.448297][T13436] lo speed is unknown, defaulting to 1000 [ 356.525798][T13436] lo speed is unknown, defaulting to 1000 [ 356.558676][T13436] lo speed is unknown, defaulting to 1000 [ 357.139797][T13461] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2079'. [ 357.443650][T13474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2083'. [ 357.495677][T13436] infiniband syz0: set active [ 357.512080][T13436] infiniband syz0: added lo [ 357.530445][T13436] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 357.534860][T12198] lo speed is unknown, defaulting to 1000 [ 357.561950][T13436] infiniband syz0: Couldn't open port 1 [ 357.572417][T13436] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 357.589414][T13436] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 357.607390][T13436] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 357.765207][T13436] RDS/IB: syz0: added [ 357.776129][T13436] smc: adding ib device syz0 with port count 1 [ 357.785503][T13436] smc: ib device syz0 port 1 has no pnetid [ 357.824579][T12198] lo speed is unknown, defaulting to 1000 [ 357.833858][T13436] lo speed is unknown, defaulting to 1000 [ 357.901712][T13480] xt_HMARK: spi-set and port-set can't be combined [ 358.398566][T13491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2087'. [ 358.458011][T13488] lo speed is unknown, defaulting to 1000 [ 358.786795][T13498] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 359.025679][T13436] lo speed is unknown, defaulting to 1000 [ 359.385778][T13517] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 359.609886][T13517] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.659826][T13519] vlan3: entered allmulticast mode [ 359.683374][T13519] bond9: entered allmulticast mode [ 359.770458][T13521] bond9: (slave geneve2): making interface the new active one [ 359.780360][T13521] geneve2: entered allmulticast mode [ 359.788644][T13521] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 359.799359][T13523] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 359.831542][T13436] lo speed is unknown, defaulting to 1000 [ 359.831635][T10005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.855775][T10005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.876568][T10008] wlan1: Trigger new scan to find an IBSS to join [ 359.884341][T10005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.905905][T10005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.138983][T13532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.186620][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 360.528587][T13436] lo speed is unknown, defaulting to 1000 [ 361.015434][T13562] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 361.181225][T13564] sctp: [Deprecated]: syz.1.2108 (pid 13564) Use of int in max_burst socket option. [ 361.181225][T13564] Use struct sctp_assoc_value instead [ 361.197364][T13436] lo speed is unknown, defaulting to 1000 [ 361.542012][T13574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2110'. [ 361.738517][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 362.456169][T13602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.516535][T13606] netlink: 'syz.0.2122': attribute type 4 has an invalid length. [ 362.628579][T13613] syzkaller0: entered promiscuous mode [ 362.640405][T13613] syzkaller0: entered allmulticast mode [ 362.661648][T13613] tipc: Enabled bearer , priority 0 [ 362.765797][T13613] tipc: Resetting bearer [ 362.798670][T13612] tipc: Resetting bearer [ 362.838780][ T9985] wlan1: Trigger new scan to find an IBSS to join [ 362.852059][T13612] tipc: Disabling bearer [ 363.109734][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 363.217186][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2133'. [ 363.241606][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 363.258358][T13648] netlink: 'syz.4.2133': attribute type 4 has an invalid length. [ 363.292815][T13648] netlink: 'syz.4.2133': attribute type 4 has an invalid length. [ 363.451395][T13646] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 363.491887][T13646] bond10 (unregistering): Released all slaves [ 363.503592][T13653] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 363.559619][T13653] 8021q: adding VLAN 0 to HW filter on device bond10 [ 363.577827][T13655] vlan6: entered promiscuous mode [ 363.594455][T13655] bridge0: entered promiscuous mode [ 363.621661][T13657] vlan4: entered allmulticast mode [ 363.628244][T13657] bond10: entered allmulticast mode [ 363.837151][T13669] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 363.907155][T13672] SET target dimension over the limit! [ 364.203190][T13685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2143'. [ 364.298158][T13694] syzkaller1: entered promiscuous mode [ 364.304182][T13694] syzkaller1: entered allmulticast mode [ 364.338414][T13698] netlink: 'syz.2.2149': attribute type 1 has an invalid length. [ 364.450775][T13706] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2150'. [ 364.509020][T13698] 8021q: adding VLAN 0 to HW filter on device bond10 [ 364.596071][T13703] vlan4: entered allmulticast mode [ 364.613292][T13703] bond10: entered allmulticast mode [ 364.911018][T13733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.981428][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2158'. [ 365.009955][T13736] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 365.099321][T13740] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2158'. [ 365.789368][T13774] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2163'. [ 366.318561][T13796] tunl0: Caught tx_queue_len zero misconfig [ 366.763650][T13817] veth0: entered promiscuous mode [ 366.786834][T13817] vlan6: entered promiscuous mode [ 366.887585][T13824] __nla_validate_parse: 1 callbacks suppressed [ 366.887606][T13824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2176'. [ 366.922909][T13824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2176'. [ 366.940492][T13824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2176'. [ 366.950081][T13824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2176'. [ 367.250593][T13845] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2180'. [ 367.271001][T13845] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2180'. [ 367.360598][T13856] netlink: 'syz.3.2180': attribute type 13 has an invalid length. [ 367.464296][T13861] ip6tnl2: entered promiscuous mode [ 367.692534][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 367.728099][T13870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.797355][T10004] bond0: (slave geneve3): link status definitely down, disabling slave [ 367.847978][T10004] bond0: now running without any active interface! [ 368.499374][T12188] IPVS: starting estimator thread 0... [ 368.509154][T13907] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 368.632520][T13913] IPVS: using max 30 ests per chain, 72000 per kthread [ 368.689116][T13927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2198'. [ 368.755650][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'. [ 368.788316][ T50] block nbd2: Receive control failed (result -32) [ 368.805182][T13930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2198'. [ 368.989343][T13927] geneve1: entered promiscuous mode [ 369.239420][T13950] netlink: 'syz.2.2204': attribute type 1 has an invalid length. [ 369.426320][T13965] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 1, id = 0 [ 369.487343][T13958] lo speed is unknown, defaulting to 1000 [ 370.239567][T14000] netlink: 'syz.3.2216': attribute type 11 has an invalid length. [ 370.294142][T14002] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 371.508662][T14053] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.900827][T14075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.979277][T14070] __nla_validate_parse: 12 callbacks suppressed [ 371.979297][T14070] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2232'. [ 371.996975][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2237'. [ 372.019496][T14085] netlink: 'syz.3.2237': attribute type 7 has an invalid length. [ 372.028465][T14085] netlink: 'syz.3.2237': attribute type 8 has an invalid length. [ 372.044958][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2237'. [ 372.076408][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2237'. [ 372.091859][T14085] syz_tun: entered promiscuous mode [ 372.126169][T14085] syz_tun: left promiscuous mode [ 372.881019][T14136] FAULT_INJECTION: forcing a failure. [ 372.881019][T14136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.896147][T14121] lo speed is unknown, defaulting to 1000 [ 372.951790][T14136] CPU: 0 UID: 0 PID: 14136 Comm: syz.2.2249 Not tainted syzkaller #0 PREEMPT(full) [ 372.951818][T14136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.951832][T14136] Call Trace: [ 372.951840][T14136] [ 372.951847][T14136] dump_stack_lvl+0xe8/0x150 [ 372.951875][T14136] should_fail_ex+0x412/0x560 [ 372.951901][T14136] _copy_from_user+0x2d/0xb0 [ 372.951926][T14136] __sys_bpf+0x229/0x950 [ 372.951959][T14136] ? __pfx___sys_bpf+0x10/0x10 [ 372.952004][T14136] ? ksys_write+0x242/0x270 [ 372.952036][T14136] ? __pfx_ksys_write+0x10/0x10 [ 372.952069][T14136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.952091][T14136] __x64_sys_bpf+0x7c/0x90 [ 372.952122][T14136] do_syscall_64+0x174/0xf80 [ 372.952140][T14136] ? trace_irq_disable+0x3b/0x140 [ 372.952168][T14136] ? clear_bhb_loop+0x40/0x90 [ 372.952192][T14136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.952210][T14136] RIP: 0033:0x7ff715f9ce59 [ 372.952230][T14136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.952246][T14136] RSP: 002b:00007ff7141f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.952266][T14136] RAX: ffffffffffffffda RBX: 00007ff716215fa0 RCX: 00007ff715f9ce59 [ 372.952280][T14136] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 372.952292][T14136] RBP: 00007ff7141f6090 R08: 0000000000000000 R09: 0000000000000000 [ 372.952314][T14136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.952326][T14136] R13: 00007ff716216038 R14: 00007ff716215fa0 R15: 00007ffcf27387a8 [ 372.952359][T14136] [ 373.176830][T14144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2250'. [ 373.301819][T14149] FAULT_INJECTION: forcing a failure. [ 373.301819][T14149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.315377][T14149] CPU: 0 UID: 0 PID: 14149 Comm: syz.2.2253 Not tainted syzkaller #0 PREEMPT(full) [ 373.315403][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.315416][T14149] Call Trace: [ 373.315424][T14149] [ 373.315432][T14149] dump_stack_lvl+0xe8/0x150 [ 373.315461][T14149] should_fail_ex+0x412/0x560 [ 373.315488][T14149] _copy_from_user+0x2d/0xb0 [ 373.315514][T14149] ___sys_sendmsg+0x1c6/0x360 [ 373.315535][T14149] ? __lock_acquire+0x6b5/0x2cf0 [ 373.315579][T14149] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.315653][T14149] ? __fget_files+0x2a/0x420 [ 373.315676][T14149] ? __fget_files+0x3a0/0x420 [ 373.315709][T14149] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.315732][T14149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.315762][T14149] ? __pfx_ksys_write+0x10/0x10 [ 373.315806][T14149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.315827][T14149] do_syscall_64+0x174/0xf80 [ 373.315844][T14149] ? trace_irq_disable+0x3b/0x140 [ 373.315872][T14149] ? clear_bhb_loop+0x40/0x90 [ 373.315896][T14149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.315916][T14149] RIP: 0033:0x7ff715f9ce59 [ 373.315932][T14149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.315948][T14149] RSP: 002b:00007ff7141f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.315966][T14149] RAX: ffffffffffffffda RBX: 00007ff716215fa0 RCX: 00007ff715f9ce59 [ 373.315980][T14149] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005 [ 373.315992][T14149] RBP: 00007ff7141f6090 R08: 0000000000000000 R09: 0000000000000000 [ 373.316004][T14149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.316015][T14149] R13: 00007ff716216038 R14: 00007ff716215fa0 R15: 00007ffcf27387a8 [ 373.316047][T14149] [ 373.564624][T14152] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 373.611227][T14152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2252'. [ 374.280471][T14186] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2259'. [ 374.494639][T14193] FAULT_INJECTION: forcing a failure. [ 374.494639][T14193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.567840][T14193] CPU: 1 UID: 0 PID: 14193 Comm: syz.0.2260 Not tainted syzkaller #0 PREEMPT(full) [ 374.567869][T14193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.567883][T14193] Call Trace: [ 374.567891][T14193] [ 374.567900][T14193] dump_stack_lvl+0xe8/0x150 [ 374.567929][T14193] should_fail_ex+0x412/0x560 [ 374.567958][T14193] _copy_from_iter+0x1d3/0x1670 [ 374.567985][T14193] ? rcu_is_watching+0x15/0xb0 [ 374.568016][T14193] ? __pfx__copy_from_iter+0x10/0x10 [ 374.568048][T14193] ? netlink_sendmsg+0x650/0xb40 [ 374.568069][T14193] ? skb_put+0x11b/0x210 [ 374.568093][T14193] netlink_sendmsg+0x6c0/0xb40 [ 374.568126][T14193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.568153][T14193] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.568185][T14193] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.568215][T14193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.568237][T14193] sock_write_iter+0x49b/0x4f0 [ 374.568266][T14193] ? __pfx_sock_write_iter+0x10/0x10 [ 374.568302][T14193] ? bpf_lsm_file_permission+0x9/0x20 [ 374.568331][T14193] ? security_file_permission+0x75/0x260 [ 374.568366][T14193] vfs_write+0x61d/0xb90 [ 374.568406][T14193] ? __pfx_vfs_write+0x10/0x10 [ 374.568459][T14193] ? __fget_files+0x2a/0x420 [ 374.568490][T14193] ksys_write+0x150/0x270 [ 374.568519][T14193] ? __pfx_ksys_write+0x10/0x10 [ 374.568553][T14193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.568574][T14193] do_syscall_64+0x174/0xf80 [ 374.568592][T14193] ? trace_irq_disable+0x3b/0x140 [ 374.568629][T14193] ? clear_bhb_loop+0x40/0x90 [ 374.568653][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.568671][T14193] RIP: 0033:0x7f3771d9ce59 [ 374.568690][T14193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.568707][T14193] RSP: 002b:00007f3772bad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.568728][T14193] RAX: ffffffffffffffda RBX: 00007f3772016090 RCX: 00007f3771d9ce59 [ 374.568743][T14193] RDX: 0000000000000027 RSI: 0000200000005c00 RDI: 0000000000000008 [ 374.568755][T14193] RBP: 00007f3772bad090 R08: 0000000000000000 R09: 0000000000000000 [ 374.568767][T14193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.568779][T14193] R13: 00007f3772016128 R14: 00007f3772016090 R15: 00007ffeb93486b8 [ 374.568812][T14193] [ 374.896124][T14204] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2261'. [ 375.187995][T14197] bridge0: port 3(vlan2) entered blocking state [ 375.194547][T14197] bridge0: port 3(vlan2) entered forwarding state [ 375.201370][T14197] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.208638][T14197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.216215][T14197] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.223468][T14197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.241474][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 375.282358][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 375.291557][T14217] netlink: 'syz.2.2265': attribute type 15 has an invalid length. [ 375.336158][T14219] netlink: 'syz.2.2265': attribute type 15 has an invalid length. [ 375.344096][T14217] netlink: 'syz.2.2265': attribute type 25 has an invalid length. [ 375.415700][T14219] netlink: 'syz.2.2265': attribute type 25 has an invalid length. [ 375.544015][T14197] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 375.646551][T12209] lo speed is unknown, defaulting to 1000 [ 376.760416][ T29] audit: type=1800 audit(1779948132.657:11): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2272" name="r" dev="tmpfs" ino=2367 res=0 errno=0 [ 376.799632][T14265] FAULT_INJECTION: forcing a failure. [ 376.799632][T14265] name failslab, interval 1, probability 0, space 0, times 0 [ 376.814602][T14265] CPU: 0 UID: 0 PID: 14265 Comm: syz.4.2274 Not tainted syzkaller #0 PREEMPT(full) [ 376.814629][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.814642][T14265] Call Trace: [ 376.814651][T14265] [ 376.814660][T14265] dump_stack_lvl+0xe8/0x150 [ 376.814689][T14265] should_fail_ex+0x412/0x560 [ 376.814722][T14265] should_failslab+0xa8/0x100 [ 376.814742][T14265] ? skb_clone+0x212/0x3a0 [ 376.814766][T14265] kmem_cache_alloc_noprof+0x87/0x650 [ 376.814793][T14265] ? dev_queue_xmit_nit+0x2d/0xad0 [ 376.814834][T14265] skb_clone+0x212/0x3a0 [ 376.814856][T14265] ? dev_queue_xmit_nit+0x268/0xad0 [ 376.814890][T14265] dev_queue_xmit_nit+0x29a/0xad0 [ 376.814923][T14265] ? dev_queue_xmit_nit+0x2d/0xad0 [ 376.814965][T14265] dev_hard_start_xmit+0x1c1/0x830 [ 376.815008][T14265] __dev_queue_xmit+0x14d9/0x3950 [ 376.815040][T14265] ? ksys_write+0x150/0x270 [ 376.815078][T14265] ? __dev_queue_xmit+0x2b6/0x3950 [ 376.815119][T14265] ? __pfx___dev_queue_xmit+0x10/0x10 [ 376.815155][T14265] ? __copy_skb_header+0xa3/0x4a0 [ 376.815202][T14265] ? skb_clone+0x246/0x3a0 [ 376.815229][T14265] __netlink_deliver_tap+0x5ad/0x850 [ 376.815279][T14265] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.815303][T14265] netlink_deliver_tap+0x19c/0x1b0 [ 376.815327][T14265] netlink_unicast+0x730/0x8e0 [ 376.815359][T14265] netlink_sendmsg+0x813/0xb40 [ 376.815392][T14265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.815419][T14265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 376.815450][T14265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.815479][T14265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.815501][T14265] sock_write_iter+0x49b/0x4f0 [ 376.815530][T14265] ? __pfx_sock_write_iter+0x10/0x10 [ 376.815567][T14265] ? bpf_lsm_file_permission+0x9/0x20 [ 376.815595][T14265] ? security_file_permission+0x75/0x260 [ 376.815629][T14265] vfs_write+0x61d/0xb90 [ 376.815666][T14265] ? __pfx_vfs_write+0x10/0x10 [ 376.815724][T14265] ? __fget_files+0x2a/0x420 [ 376.815774][T14265] ksys_write+0x150/0x270 [ 376.815804][T14265] ? __pfx_ksys_write+0x10/0x10 [ 376.815843][T14265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.815865][T14265] do_syscall_64+0x174/0xf80 [ 376.815884][T14265] ? trace_irq_disable+0x3b/0x140 [ 376.815913][T14265] ? clear_bhb_loop+0x40/0x90 [ 376.815939][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.815959][T14265] RIP: 0033:0x7f7bb8f9ce59 [ 376.815995][T14265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.816021][T14265] RSP: 002b:00007f7bb9ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 376.816043][T14265] RAX: ffffffffffffffda RBX: 00007f7bb9216090 RCX: 00007f7bb8f9ce59 [ 376.816058][T14265] RDX: 0000000000000027 RSI: 0000200000005c00 RDI: 0000000000000008 [ 376.816070][T14265] RBP: 00007f7bb9ead090 R08: 0000000000000000 R09: 0000000000000000 [ 376.816082][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.816094][T14265] R13: 00007f7bb9216128 R14: 00007f7bb9216090 R15: 00007ffc24aed728 [ 376.816130][T14265] [ 377.455857][T14278] netlink: 'syz.2.2275': attribute type 14 has an invalid length. [ 378.018917][T14301] xt_TPROXY: Can be used only with -p tcp or -p udp [ 378.143677][T14298] syzkaller0: entered allmulticast mode [ 378.600964][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.801776][T14323] __nla_validate_parse: 4 callbacks suppressed [ 378.801797][T14323] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2284'. [ 378.844991][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 378.942033][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'. [ 380.065683][T14353] FAULT_INJECTION: forcing a failure. [ 380.065683][T14353] name failslab, interval 1, probability 0, space 0, times 0 [ 380.079943][T14353] CPU: 1 UID: 0 PID: 14353 Comm: syz.4.2289 Not tainted syzkaller #0 PREEMPT(full) [ 380.079970][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.079983][T14353] Call Trace: [ 380.079991][T14353] [ 380.079999][T14353] dump_stack_lvl+0xe8/0x150 [ 380.080028][T14353] should_fail_ex+0x412/0x560 [ 380.080056][T14353] should_failslab+0xa8/0x100 [ 380.080074][T14353] ? skb_clone+0x212/0x3a0 [ 380.080097][T14353] kmem_cache_alloc_noprof+0x87/0x650 [ 380.080127][T14353] ? __netlink_lookup+0xc6/0x8b0 [ 380.080158][T14353] skb_clone+0x212/0x3a0 [ 380.080194][T14353] __netlink_deliver_tap+0x404/0x850 [ 380.080231][T14353] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.080256][T14353] netlink_deliver_tap+0x19c/0x1b0 [ 380.080280][T14353] netlink_unicast+0x730/0x8e0 [ 380.080314][T14353] netlink_sendmsg+0x813/0xb40 [ 380.080346][T14353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.080372][T14353] ? aa_sock_msg_perm+0xf1/0x1b0 [ 380.080402][T14353] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.080432][T14353] ____sys_sendmsg+0x972/0x9f0 [ 380.080454][T14353] ? __might_fault+0xaf/0x130 [ 380.080489][T14353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.080522][T14353] ? import_iovec+0x73/0xa0 [ 380.080551][T14353] ___sys_sendmsg+0x2a5/0x360 [ 380.080573][T14353] ? __lock_acquire+0x6b5/0x2cf0 [ 380.080600][T14353] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.080663][T14353] ? __fget_files+0x2a/0x420 [ 380.080688][T14353] ? __fget_files+0x3a0/0x420 [ 380.080724][T14353] __x64_sys_sendmsg+0x1bd/0x2a0 [ 380.080750][T14353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.080783][T14353] ? __pfx_ksys_write+0x10/0x10 [ 380.080823][T14353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.080846][T14353] do_syscall_64+0x174/0xf80 [ 380.080865][T14353] ? trace_irq_disable+0x3b/0x140 [ 380.080901][T14353] ? clear_bhb_loop+0x40/0x90 [ 380.080927][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.080947][T14353] RIP: 0033:0x7f7bb8f9ce59 [ 380.080966][T14353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.080984][T14353] RSP: 002b:00007f7bb9ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.081006][T14353] RAX: ffffffffffffffda RBX: 00007f7bb9215fa0 RCX: 00007f7bb8f9ce59 [ 380.081021][T14353] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005 [ 380.081034][T14353] RBP: 00007f7bb9ece090 R08: 0000000000000000 R09: 0000000000000000 [ 380.081047][T14353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.081058][T14353] R13: 00007f7bb9216038 R14: 00007f7bb9215fa0 R15: 00007ffc24aed728 [ 380.081094][T14353] [ 380.559987][T14358] syzkaller1: entered promiscuous mode [ 380.566775][T14358] syzkaller1: entered allmulticast mode [ 380.593835][T14360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2291'. [ 380.624797][T14360] tipc: Invalid UDP bearer configuration [ 380.624853][T14360] tipc: Enabling of bearer rejected, failed to enable media [ 380.770646][T14374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2294'. [ 380.969702][T14377] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2295'. [ 381.012762][T14377] netlink: 'syz.2.2295': attribute type 3 has an invalid length. [ 381.096032][T14386] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2298'. [ 381.180638][T14387] sctp: [Deprecated]: syz.0.2297 (pid 14387) Use of int in max_burst socket option deprecated. [ 381.180638][T14387] Use struct sctp_assoc_value instead [ 381.286088][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2300'. [ 381.298299][T14397] netlink: 'syz.0.2297': attribute type 12 has an invalid length. [ 381.318188][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2300'. [ 381.341517][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2300'. [ 381.367447][T14402] FAULT_INJECTION: forcing a failure. [ 381.367447][T14402] name failslab, interval 1, probability 0, space 0, times 0 [ 381.405671][T14402] CPU: 1 UID: 0 PID: 14402 Comm: syz.3.2301 Not tainted syzkaller #0 PREEMPT(full) [ 381.405700][T14402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 381.405712][T14402] Call Trace: [ 381.405720][T14402] [ 381.405729][T14402] dump_stack_lvl+0xe8/0x150 [ 381.405757][T14402] should_fail_ex+0x412/0x560 [ 381.405788][T14402] should_failslab+0xa8/0x100 [ 381.405809][T14402] ? skb_clone+0x212/0x3a0 [ 381.405831][T14402] kmem_cache_alloc_noprof+0x87/0x650 [ 381.405860][T14402] ? __netlink_lookup+0xc6/0x8b0 [ 381.405891][T14402] skb_clone+0x212/0x3a0 [ 381.405940][T14402] __netlink_deliver_tap+0x404/0x850 [ 381.405977][T14402] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.406002][T14402] netlink_deliver_tap+0x19c/0x1b0 [ 381.406027][T14402] netlink_unicast+0x730/0x8e0 [ 381.406067][T14402] netlink_sendmsg+0x813/0xb40 [ 381.406101][T14402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.406129][T14402] ? aa_sock_msg_perm+0xf1/0x1b0 [ 381.406161][T14402] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.406193][T14402] ____sys_sendmsg+0x972/0x9f0 [ 381.406217][T14402] ? __might_fault+0xaf/0x130 [ 381.406250][T14402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.406284][T14402] ? import_iovec+0x73/0xa0 [ 381.406312][T14402] ___sys_sendmsg+0x2a5/0x360 [ 381.406333][T14402] ? __lock_acquire+0x6b5/0x2cf0 [ 381.406361][T14402] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.406423][T14402] ? __fget_files+0x2a/0x420 [ 381.406448][T14402] ? __fget_files+0x3a0/0x420 [ 381.406484][T14402] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.406510][T14402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.406543][T14402] ? __pfx_ksys_write+0x10/0x10 [ 381.406582][T14402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.406605][T14402] do_syscall_64+0x174/0xf80 [ 381.406625][T14402] ? trace_irq_disable+0x3b/0x140 [ 381.406655][T14402] ? clear_bhb_loop+0x40/0x90 [ 381.406680][T14402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.406701][T14402] RIP: 0033:0x7fee5079ce59 [ 381.406721][T14402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.406739][T14402] RSP: 002b:00007fee516f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.406761][T14402] RAX: ffffffffffffffda RBX: 00007fee50a15fa0 RCX: 00007fee5079ce59 [ 381.406776][T14402] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005 [ 381.406789][T14402] RBP: 00007fee516f6090 R08: 0000000000000000 R09: 0000000000000000 [ 381.406801][T14402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.406813][T14402] R13: 00007fee50a16038 R14: 00007fee50a15fa0 R15: 00007ffeb6dd11d8 [ 381.406847][T14402] [ 381.969357][T14410] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 382.040576][T14410] bond8 (unregistering): Released all slaves [ 382.154920][T14420] pimreg: entered allmulticast mode [ 382.175281][T14420] dvmrp0: left allmulticast mode [ 382.357537][T14429] hmac(sha2: entered promiscuous mode [ 382.391718][T14419] pimreg: left allmulticast mode [ 382.810299][T14443] netlink: 'syz.4.2306': attribute type 21 has an invalid length. [ 383.285081][T14474] netlink: 'syz.1.2313': attribute type 22 has an invalid length. [ 383.305061][T14475] netlink: 'syz.1.2313': attribute type 22 has an invalid length. [ 383.608885][T14481] syzkaller0: entered promiscuous mode [ 383.645854][T14481] syzkaller0: entered allmulticast mode [ 383.704407][T14489] tipc: Enabled bearer , priority 0 [ 383.768305][T14465] tipc: Resetting bearer [ 383.840341][T14465] tipc: Disabling bearer [ 383.964713][T14509] FAULT_INJECTION: forcing a failure. [ 383.964713][T14509] name failslab, interval 1, probability 0, space 0, times 0 [ 384.006726][T14509] CPU: 1 UID: 0 PID: 14509 Comm: syz.4.2319 Not tainted syzkaller #0 PREEMPT(full) [ 384.006755][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.006769][T14509] Call Trace: [ 384.006777][T14509] [ 384.006785][T14509] dump_stack_lvl+0xe8/0x150 [ 384.006814][T14509] should_fail_ex+0x412/0x560 [ 384.006842][T14509] should_failslab+0xa8/0x100 [ 384.006872][T14509] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 384.006899][T14509] ? __alloc_skb+0x186/0x7d0 [ 384.006927][T14509] ? __alloc_skb+0x1d0/0x7d0 [ 384.006953][T14509] ? __local_bh_enable_ip+0xd0/0x130 [ 384.006978][T14509] __alloc_skb+0x1d0/0x7d0 [ 384.007007][T14509] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 384.007044][T14509] netlink_sendmsg+0x5d4/0xb40 [ 384.007078][T14509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.007104][T14509] ? aa_sock_msg_perm+0xf1/0x1b0 [ 384.007136][T14509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.007163][T14509] ____sys_sendmsg+0x972/0x9f0 [ 384.007183][T14509] ? __might_fault+0xaf/0x130 [ 384.007216][T14509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.007246][T14509] ? import_iovec+0x73/0xa0 [ 384.007273][T14509] ___sys_sendmsg+0x2a5/0x360 [ 384.007292][T14509] ? __lock_acquire+0x6b5/0x2cf0 [ 384.007316][T14509] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.007393][T14509] ? __fget_files+0x2a/0x420 [ 384.007416][T14509] ? __fget_files+0x3a0/0x420 [ 384.007452][T14509] __x64_sys_sendmsg+0x1bd/0x2a0 [ 384.007477][T14509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.007510][T14509] ? __pfx_ksys_write+0x10/0x10 [ 384.007549][T14509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.007572][T14509] do_syscall_64+0x174/0xf80 [ 384.007604][T14509] ? trace_irq_disable+0x3b/0x140 [ 384.007634][T14509] ? clear_bhb_loop+0x40/0x90 [ 384.007659][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.007678][T14509] RIP: 0033:0x7f7bb8f9ce59 [ 384.007696][T14509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.007711][T14509] RSP: 002b:00007f7bb9ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.007732][T14509] RAX: ffffffffffffffda RBX: 00007f7bb9215fa0 RCX: 00007f7bb8f9ce59 [ 384.007747][T14509] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000006 [ 384.007760][T14509] RBP: 00007f7bb9ece090 R08: 0000000000000000 R09: 0000000000000000 [ 384.007772][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.007784][T14509] R13: 00007f7bb9216038 R14: 00007f7bb9215fa0 R15: 00007ffc24aed728 [ 384.007817][T14509] [ 384.360675][ T25] block nbd1: Possible stuck request ffff888026f8e000: control (read@0,1024B). Runtime 90 seconds [ 384.783484][T14541] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 385.112788][T14550] bond15: invalid ARP target 0.0.0.0 specified for addition [ 385.120383][T14550] bond15: option arp_ip_target: invalid value (0) [ 385.130500][T14550] bond15 (unregistering): Released all slaves [ 385.183924][T14554] netlink: 'syz.1.2328': attribute type 1 has an invalid length. [ 385.645112][T14569] netlink: 'syz.4.2332': attribute type 4 has an invalid length. [ 385.661855][T14569] __nla_validate_parse: 16 callbacks suppressed [ 385.661875][T14569] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2332'. [ 385.684380][T14569] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 385.696551][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2332'. [ 386.587487][T14610] netlink: 'syz.4.2343': attribute type 39 has an invalid length. [ 386.669706][ T29] audit: type=1800 audit(1779948142.567:12): pid=14608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2342" name="r" dev="tmpfs" ino=2403 res=0 errno=0 [ 386.850631][T14615] syzkaller1: entered promiscuous mode [ 386.868550][T14615] syzkaller1: entered allmulticast mode [ 386.891527][T14615] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 386.950783][T14615] syzkaller0: entered promiscuous mode [ 386.972337][T14615] syzkaller0: entered allmulticast mode [ 387.017623][T14623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2351'. [ 387.113734][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2352'. [ 387.218375][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2351'. [ 387.340431][T14632] geneve3: entered promiscuous mode [ 387.593174][T14638] syzkaller0: entered promiscuous mode [ 387.616399][T14638] syzkaller0: entered allmulticast mode [ 387.631810][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 387.716501][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2357'. [ 388.216916][T14670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.274652][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'. [ 388.292255][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'. [ 388.571320][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 388.686518][T14686] tipc: Enabled bearer , priority 0 [ 388.695041][T14686] syzkaller0: entered promiscuous mode [ 388.713772][T14686] syzkaller0: entered allmulticast mode [ 388.787084][T14686] syzkaller0: mtu less than device minimum [ 388.817926][T14684] tipc: Resetting bearer [ 388.909777][T14684] tipc: Disabling bearer [ 389.066084][T14705] x_tables: duplicate underflow at hook 2 [ 389.790343][T14738] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 390.256767][T14765] ip6gretap0: entered promiscuous mode [ 391.006257][T14798] __nla_validate_parse: 5 callbacks suppressed [ 391.006278][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 391.024154][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.055796][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2403'. [ 391.088828][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.101559][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.109038][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.116569][T14798] netlink: 'syz.2.2403': attribute type 15 has an invalid length. [ 391.161703][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.199144][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.241218][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.288165][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.313814][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.348870][T14796] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.121640][T14836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2416'. [ 392.131637][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2420'. [ 392.480405][T14874] tipc: Started in network mode [ 392.497734][T14874] tipc: Node identity 4ae544fd3357, cluster identity 4711 [ 392.515526][T14874] tipc: Enabled bearer , priority 0 [ 392.537702][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2427'. [ 392.548682][T14875] sctp: [Deprecated]: syz.3.2426 (pid 14875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.548682][T14875] Use struct sctp_sack_info instead [ 392.781302][T14896] netlink: 'syz.0.2432': attribute type 10 has an invalid length. [ 392.820031][T14896] team0: Failed to send options change via netlink (err -105) [ 392.836516][T14896] team0: Port device dummy0 added [ 392.844991][T14893] netlink: 'syz.0.2432': attribute type 10 has an invalid length. [ 392.855430][T14893] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 392.879827][T14893] team0: Failed to send options change via netlink (err -105) [ 392.896698][T14899] netlink: 'syz.1.2434': attribute type 1 has an invalid length. [ 392.919323][T14893] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 392.922755][T14899] netlink: 'syz.1.2434': attribute type 1 has an invalid length. [ 392.954198][T14893] team0: Port device dummy0 removed [ 393.211429][T14914] netlink: 'syz.3.2440': attribute type 13 has an invalid length. [ 393.260105][T14914] netlink: 'syz.3.2440': attribute type 17 has an invalid length. [ 393.421066][T14912] bridge0: port 3(vlan2) entered disabled state [ 393.427666][T14912] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.436227][T14912] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.448424][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 393.487813][T14925] sctp: [Deprecated]: syz.2.2444 (pid 14925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.487813][T14925] Use struct sctp_sack_info instead [ 393.928084][T12202] lo speed is unknown, defaulting to 1000 [ 393.941306][T14914] tunl0: left allmulticast mode [ 394.102567][T14914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.112832][T14914] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.158171][T14914] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.165517][T14914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.179822][T14914] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.187083][T14914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.388625][T12187] tipc: Node number set to 2041726205 [ 394.415212][ T9985] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.450898][ T9985] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.501863][T12202] lo speed is unknown, defaulting to 1000 [ 394.529736][T14939] geneve4: entered promiscuous mode [ 394.560000][ T9985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.605046][T12195] lo speed is unknown, defaulting to 1000 [ 394.607733][ T9985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.621895][T14941] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.820995][T14951] sctp: [Deprecated]: syz.4.2451 (pid 14951) Use of int in maxseg socket option. [ 394.820995][T14951] Use struct sctp_assoc_value instead [ 395.145648][T14962] netlink: 'syz.0.2455': attribute type 1 has an invalid length. [ 395.250024][T14962] bond12: (slave veth7): Enslaving as an active interface with a down link [ 395.289729][T14967] bond12: (slave dummy0): making interface the new active one [ 395.325483][T14967] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 395.357882][T14962] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 395.371478][T14962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2455'. [ 395.392740][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2457'. [ 395.402475][T14962] dummy0: entered promiscuous mode [ 395.427968][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2457'. [ 395.451674][T14962] bond12: (slave dummy0): Releasing active interface [ 395.622769][T14982] tipc: Enabled bearer , priority 0 [ 395.675960][T14982] tipc: Disabling bearer [ 395.989528][T15006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.021296][T15006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.035967][T15012] syzkaller0: entered promiscuous mode [ 396.041747][T15012] syzkaller0: entered allmulticast mode [ 396.044895][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'. [ 396.177207][T15016] bond13 (unregistering): Released all slaves [ 396.205463][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'. [ 397.487259][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2483'. [ 397.499371][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2483'. [ 398.266313][T15097] netlink: 'syz.4.2494': attribute type 10 has an invalid length. [ 398.295732][T15069] tipc: Enabled bearer , priority 0 [ 398.306616][T15096] netlink: 'syz.4.2494': attribute type 10 has an invalid length. [ 398.324181][T15078] lo speed is unknown, defaulting to 1000 [ 398.329453][T15069] syzkaller0: entered promiscuous mode [ 398.351882][T15097] netlink: 'syz.4.2494': attribute type 10 has an invalid length. [ 398.376910][T15069] syzkaller0: entered allmulticast mode [ 398.406387][T15096] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 398.676151][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 398.726358][T15068] tipc: Resetting bearer [ 398.741059][T15106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2495'. [ 398.757928][T15109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2495'. [ 398.788068][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 398.815708][T15106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2495'. [ 398.905747][T15068] tipc: Disabling bearer [ 399.010160][T15111] tipc: Enabling of bearer rejected, failed to enable media [ 399.138755][T15118] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 399.250449][T15103] lo speed is unknown, defaulting to 1000 [ 399.271431][T15129] net_ratelimit: 573 callbacks suppressed [ 399.271450][T15129] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 399.758284][T15149] netlink: 'syz.3.2505': attribute type 1 has an invalid length. [ 399.876518][T15147] bond11: entered promiscuous mode [ 399.882380][T15147] 8021q: adding VLAN 0 to HW filter on device bond11 [ 400.024266][T15149] 8021q: adding VLAN 0 to HW filter on device bond15 [ 400.083308][T15161] netlink: zone id is out of range [ 400.088845][T15161] netlink: zone id is out of range [ 400.094109][T15161] netlink: zone id is out of range [ 400.099459][T15161] netlink: zone id is out of range [ 400.104674][T15161] netlink: zone id is out of range [ 400.110030][T15161] netlink: zone id is out of range [ 400.115258][T15161] netlink: zone id is out of range [ 400.120620][T15161] netlink: zone id is out of range [ 400.125830][T15161] netlink: zone id is out of range [ 400.171658][T15157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2508'. [ 400.228471][T15155] vlan6: entered allmulticast mode [ 400.237795][T15155] bond15: entered allmulticast mode [ 400.521162][T15174] veth0_to_team: entered promiscuous mode [ 400.915878][T15191] xt_hashlimit: size too large, truncated to 1048576 [ 401.162988][T15181] lo speed is unknown, defaulting to 1000 [ 402.497432][T15213] netlink: 'syz.0.2520': attribute type 1 has an invalid length. [ 402.532609][T15217] netlink: 'syz.3.2521': attribute type 1 has an invalid length. [ 402.568531][T15217] 8021q: adding VLAN 0 to HW filter on device bond16 [ 402.580322][T15213] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 402.589211][T15217] vlan7: entered allmulticast mode [ 402.603243][T15217] bond16: entered allmulticast mode [ 402.970025][T15231] syzkaller0: entered promiscuous mode [ 403.006738][T15231] syzkaller0: entered allmulticast mode [ 403.310801][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2528'. [ 403.440631][T15241] bond11: entered allmulticast mode [ 403.533807][T15245] erspan2: entered allmulticast mode [ 403.581655][T15245] bond11: (slave erspan2): Enslaving as an active interface with an up link [ 403.735638][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 403.771485][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 403.979052][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 404.001025][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 404.017142][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 404.034037][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 404.046119][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 404.065764][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 404.075246][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 404.305445][T15274] tipc: Enabled bearer , priority 0 [ 404.400466][T15274] syzkaller0: entered promiscuous mode [ 404.416052][T15274] syzkaller0: entered allmulticast mode [ 404.431427][T15274] tipc: Resetting bearer [ 404.493261][T15273] tipc: Resetting bearer [ 404.711037][T15292] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 404.731568][T15292] netlink: 'syz.0.2542': attribute type 6 has an invalid length. [ 404.748926][T15292] netlink: 'syz.0.2542': attribute type 3 has an invalid length. [ 404.797414][T15169] net_ratelimit: 30 callbacks suppressed [ 404.797434][T15169] Set syz1 is full, maxelem 65536 reached [ 406.800789][T15273] tipc: Disabling bearer [ 406.848597][T15305] tap0: tun_chr_ioctl cmd 1074025676 [ 406.859577][T15305] tap0: owner set to 0 [ 407.167192][T15321] sctp: [Deprecated]: syz.4.2550 (pid 15321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.167192][T15321] Use struct sctp_sack_info instead [ 407.210635][T15321] netlink: 'syz.4.2550': attribute type 1 has an invalid length. [ 407.516326][T15336] lo speed is unknown, defaulting to 1000 [ 407.597165][T15347] bond12: option primary_reselect: invalid value (6) [ 408.104598][T15347] bond12 (unregistering): Released all slaves [ 408.444259][T15372] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 408.536426][T15377] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 408.598909][T15377] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 408.609793][T15382] –: renamed from dummy0 [ 408.619555][T15377] __nla_validate_parse: 37 callbacks suppressed [ 408.619574][T15377] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2562'. [ 408.658715][T15377] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 408.668194][T15377] netlink: 634 bytes leftover after parsing attributes in process `syz.2.2562'. [ 408.678897][T15377] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2562'. [ 408.836992][T15388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2564'. [ 409.421442][T15410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.461102][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 410.793323][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 410.885760][T15460] xt_l2tp: invalid flags combination: 8 [ 410.981695][T15468] netlink: 'syz.2.2585': attribute type 32 has an invalid length. [ 411.305683][T15482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.687058][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 411.728009][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 412.416180][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 412.777671][T15550] syzkaller1: entered promiscuous mode [ 412.783499][T15550] syzkaller1: entered allmulticast mode [ 412.841545][T15553] gre2: entered allmulticast mode [ 412.981421][T15557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2605'. [ 413.453138][T15575] bond13: entered promiscuous mode [ 413.462804][T15575] 8021q: adding VLAN 0 to HW filter on device bond13 [ 413.652337][T15583] __nla_validate_parse: 3 callbacks suppressed [ 413.652357][T15583] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2615'. [ 413.768035][T15592] netlink: 'syz.4.2617': attribute type 1 has an invalid length. [ 413.843892][T15572] 8021q: adding VLAN 0 to HW filter on device bond13 [ 413.867379][T15572] bond13: (slave sit1): The slave device specified does not support setting the MAC address [ 413.915509][T15572] bond13: (slave sit1): Error -95 calling set_mac_address [ 413.964828][T15592] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 414.179175][T15607] Set syz1 is full, maxelem 65536 reached [ 414.434619][ T25] block nbd1: Possible stuck request ffff888026f8e000: control (read@0,1024B). Runtime 120 seconds [ 414.473377][T15622] netlink: 'syz.3.2623': attribute type 4 has an invalid length. [ 414.600710][T12197] lo speed is unknown, defaulting to 1000 [ 414.619003][T12197] syz0: Port: 1 Link DOWN [ 414.633390][T15628] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 414.638336][T12195] lo speed is unknown, defaulting to 1000 [ 414.699894][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2625'. [ 414.737957][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2625'. [ 414.790740][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 414.829904][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 414.903154][T15642] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2629'. [ 414.998298][T15653] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2630'. [ 415.035079][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 415.154009][T15661] netlink: 5560 bytes leftover after parsing attributes in process `syz.3.2634'. [ 415.183762][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 415.355040][T15675] netlink: 'syz.1.2637': attribute type 29 has an invalid length. [ 415.376079][T15675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.763080][T15685] lo speed is unknown, defaulting to 1000 [ 416.217902][T15710] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.235013][T15711] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.271553][T15715] Set syz1 is full, maxelem 65536 reached [ 416.506708][T15725] netlink: 'syz.3.2651': attribute type 4 has an invalid length. [ 416.585004][T15728] bridge0: entered allmulticast mode [ 416.595221][T15728] vlan0: left allmulticast mode [ 416.603089][T15728] bridge_slave_1: left allmulticast mode [ 416.608951][T15728] vlan0: left promiscuous mode [ 416.614940][T15728] bridge_slave_1: left promiscuous mode [ 416.623793][T15728] bridge0: port 1(vlan0) entered disabled state [ 416.697327][T15735] C: renamed from veth1_to_team [ 416.706821][T15735] netlink: 'syz.1.2655': attribute type 3 has an invalid length. [ 416.714743][T15735] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 416.813327][ T50] block nbd4: Receive control failed (result -32) [ 416.859439][T15737] netlink: 'syz.1.2656': attribute type 3 has an invalid length. [ 417.416238][T15759] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 417.471456][T15763] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 418.114502][T15789] netlink: 'syz.2.2673': attribute type 1 has an invalid length. [ 418.193570][T15789] bond12: entered promiscuous mode [ 418.199496][T15789] 8021q: adding VLAN 0 to HW filter on device bond12 [ 418.894029][T15828] __nla_validate_parse: 11 callbacks suppressed [ 418.894050][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2683'. [ 419.131954][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2687'. [ 419.186125][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2687'. [ 419.247983][T15834] bond12: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 419.275121][T15834] bond12 (unregistering): Released all slaves [ 419.353081][T15852] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2689'. [ 419.418581][T15849] ip6erspan1: entered promiscuous mode [ 419.440702][T15849] ip6erspan1: entered allmulticast mode [ 419.472642][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 419.739291][T15867] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2694'. [ 419.865525][T15871] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2694'. [ 421.940029][T15867] gretap0: entered promiscuous mode [ 421.948223][T15871] 0ªî{X¹¦: renamed from gretap0 [ 421.956885][T15871] 0ªî{X¹¦: left promiscuous mode [ 421.962021][T15871] 0ªî{X¹¦: entered allmulticast mode [ 421.970371][T15871] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 422.310963][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'. [ 422.341093][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'. [ 422.460047][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2702'. [ 422.485507][T15901] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 422.503811][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 422.514349][T15901] tc_dump_action: action bad kind [ 423.459074][T15938] 0·: left allmulticast mode [ 423.472587][T15938] hsr_slave_0: left allmulticast mode [ 423.482772][T15938] hsr_slave_1: left allmulticast mode [ 423.642649][T15938] bond1: left promiscuous mode [ 423.648821][T15938] bond2: left promiscuous mode [ 423.664182][T15938] bond3: left promiscuous mode [ 423.685351][T15938] bond4: left promiscuous mode [ 423.700048][T15938] bond5: left promiscuous mode [ 423.719713][T15938] bond0: left promiscuous mode [ 423.737086][T15938] macvlan2: left promiscuous mode [ 423.762980][T15938] vlan2: left allmulticast mode [ 423.782526][T15938] bond6: left allmulticast mode [ 423.787503][T15938] geneve2: left allmulticast mode [ 423.807075][T15938] bond8: left promiscuous mode [ 423.834929][T15938] geneve3: left promiscuous mode [ 423.859395][T15938] bond9: left promiscuous mode [ 423.872721][T15938] bridge5: left promiscuous mode [ 423.896432][T15938] xfrm1: left allmulticast mode [ 423.924912][T15938] vlan4: left allmulticast mode [ 423.934438][T15938] bond10: left allmulticast mode [ 424.008815][T15938] bond11: left allmulticast mode [ 424.037007][T15938] erspan2: left allmulticast mode [ 424.081527][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 424.111372][T10001] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.157394][T10001] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.213449][T10001] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.273931][T10001] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.394250][T15964] macvlan0: mtu less than device minimum [ 425.387580][T15996] netlink: 'syz.3.2728': attribute type 1 has an invalid length. [ 425.402306][T15996] nbd: error processing sock list [ 425.874331][T16015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2733'. [ 425.893885][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'. [ 426.237775][T16034] veth0: entered promiscuous mode [ 426.257976][T16031] veth0: left promiscuous mode [ 426.490939][T16050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2743'. [ 426.540086][T16048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2742'. [ 426.582042][T16054] netlink: 'syz.3.2745': attribute type 1 has an invalid length. [ 426.597176][T16055] netlink: 'syz.3.2745': attribute type 1 has an invalid length. [ 426.769754][T16054] 8021q: adding VLAN 0 to HW filter on device bond17 [ 426.775567][T16064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2748'. [ 426.812432][T16068] netlink: 'syz.4.2749': attribute type 3 has an invalid length. [ 426.835647][T16068] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2749'. [ 426.881987][T16062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2747'. [ 427.050549][T16081] netlink: 'syz.2.2752': attribute type 3 has an invalid length. [ 427.067738][T16082] netlink: 'syz.2.2752': attribute type 3 has an invalid length. [ 427.077735][T16081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2752'. [ 427.100382][T16082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2752'. [ 427.427251][T16084] lo speed is unknown, defaulting to 1000 [ 427.434896][T16098] netlink: 'syz.1.2756': attribute type 15 has an invalid length. [ 427.577124][T16102] netlink: 'syz.4.2758': attribute type 11 has an invalid length. [ 427.770460][T16104] dummy0: left promiscuous mode [ 427.790283][T16104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.886169][T16104] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.919453][T16104] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.945458][T16104] veth1_vlan: left promiscuous mode [ 427.964514][T16104] veth0_vlan: left promiscuous mode [ 427.972752][T16104] veth0_vlan: entered promiscuous mode [ 427.994774][T16104] veth1_vlan: entered promiscuous mode [ 428.018963][T16104] veth1_macvtap: left promiscuous mode [ 428.033909][T16104] veth0_macvtap: left promiscuous mode [ 428.050961][T16104] veth0_macvtap: entered promiscuous mode [ 428.068395][T16104] veth1_macvtap: entered promiscuous mode [ 428.104376][T16104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.124245][T16104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.143621][T16104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.173609][T16104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.203046][T16104] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 428.272341][T16102] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 428.302980][T16102] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 428.409813][T16082] lo speed is unknown, defaulting to 1000 [ 428.443210][T10010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.456619][T10010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.478575][T16115] netlink: 'syz.1.2761': attribute type 11 has an invalid length. [ 428.493799][T10010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.038841][T10010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.424557][T16129] x_tables: duplicate underflow at hook 3 [ 429.665389][T16136] vlan5: entered promiscuous mode [ 429.670699][T16136] bridge0: entered promiscuous mode [ 429.681020][T16136] vlan5: entered allmulticast mode [ 429.690046][T16136] bridge0: entered allmulticast mode [ 429.906628][T16142] __nla_validate_parse: 3 callbacks suppressed [ 429.906658][T16142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2768'. [ 430.819471][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2774'. [ 431.123629][T16185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2780'. [ 431.297726][T16194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2782'. [ 431.400762][T16199] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2784'. [ 431.454921][T16201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2785'. [ 431.520372][T16201] xt_ipcomp: unknown flags 1D [ 431.561168][T16193] [ 431.563571][T16193] ====================================================== [ 431.570620][T16193] WARNING: possible circular locking dependency detected [ 431.577716][T16193] syzkaller #0 Not tainted [ 431.582167][T16193] ------------------------------------------------------ [ 431.589216][T16193] syz.0.2782/16193 is trying to acquire lock: [ 431.595314][T16193] ffff888054fd2368 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x100/0xc50 [ 431.606849][T16193] [ 431.606849][T16193] but task is already holding lock: [ 431.614245][T16193] ffff888054fd27e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 431.623450][T16193] [ 431.623450][T16193] which lock already depends on the new lock. [ 431.623450][T16193] [ 431.633890][T16193] [ 431.633890][T16193] the existing dependency chain (in reverse order) is: [ 431.642916][T16193] [ 431.642916][T16193] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 431.650673][T16193] lock_sock_nested+0x41/0x100 [ 431.655992][T16193] smc_listen_out+0x109/0x3e0 [ 431.661201][T16193] smc_listen_work+0x813/0x13f0 [ 431.666597][T16193] process_scheduled_works+0xb5d/0x1860 [ 431.672685][T16193] worker_thread+0xa53/0xfc0 [ 431.677811][T16193] kthread+0x389/0x470 [ 431.682415][T16193] ret_from_fork+0x514/0xb70 [ 431.687539][T16193] ret_from_fork_asm+0x1a/0x30 [ 431.692843][T16193] [ 431.692843][T16193] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 431.703026][T16193] __lock_acquire+0x15a5/0x2cf0 [ 431.708413][T16193] lock_acquire+0x106/0x350 [ 431.713452][T16193] __flush_work+0x700/0xc50 [ 431.718503][T16193] __cancel_work_sync+0xbe/0x110 [ 431.723982][T16193] smc_clcsock_release+0x60/0xf0 [ 431.729451][T16193] __smc_release+0x66b/0x7e0 [ 431.734585][T16193] smc_close_non_accepted+0xd5/0x1f0 [ 431.740411][T16193] smc_close_active+0xb67/0xf10 [ 431.745800][T16193] __smc_release+0x8d/0x7e0 [ 431.750846][T16193] smc_release+0x2ce/0x560 [ 431.755800][T16193] sock_close+0xc3/0x240 [ 431.760585][T16193] __fput+0x44f/0xa60 [ 431.765106][T16193] task_work_run+0x1d9/0x270 [ 431.770235][T16193] exit_to_user_mode_loop+0x193/0x680 [ 431.776137][T16193] do_syscall_64+0x353/0xf80 [ 431.781262][T16193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.787687][T16193] [ 431.787687][T16193] other info that might help us debug this: [ 431.787687][T16193] [ 431.797919][T16193] Possible unsafe locking scenario: [ 431.797919][T16193] [ 431.805379][T16193] CPU0 CPU1 [ 431.810749][T16193] ---- ---- [ 431.816120][T16193] lock(sk_lock-AF_SMC/1); [ 431.820649][T16193] lock((work_completion)(&new_smc->smc_listen_work)); [ 431.830123][T16193] lock(sk_lock-AF_SMC/1); [ 431.837173][T16193] lock((work_completion)(&new_smc->smc_listen_work)); [ 431.844127][T16193] [ 431.844127][T16193] *** DEADLOCK *** [ 431.844127][T16193] [ 431.852276][T16193] 3 locks held by syz.0.2782/16193: [ 431.857486][T16193] #0: ffff888055a99940 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 431.867697][T16193] #1: ffff888054fd27e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 431.877125][T16193] #2: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x100/0xc50 [ 431.886369][T16193] [ 431.886369][T16193] stack backtrace: [ 431.892277][T16193] CPU: 1 UID: 0 PID: 16193 Comm: syz.0.2782 Not tainted syzkaller #0 PREEMPT(full) [ 431.892296][T16193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.892320][T16193] Call Trace: [ 431.892328][T16193] [ 431.892337][T16193] dump_stack_lvl+0xe8/0x150 [ 431.892357][T16193] print_circular_bug+0x2e1/0x300 [ 431.892380][T16193] check_noncircular+0x12e/0x150 [ 431.892404][T16193] __lock_acquire+0x15a5/0x2cf0 [ 431.892424][T16193] ? do_raw_spin_lock+0x12b/0x2f0 [ 431.892452][T16193] ? __flush_work+0x100/0xc50 [ 431.892475][T16193] lock_acquire+0x106/0x350 [ 431.892491][T16193] ? __flush_work+0x100/0xc50 [ 431.892513][T16193] ? __flush_work+0x100/0xc50 [ 431.892531][T16193] __flush_work+0x700/0xc50 [ 431.892548][T16193] ? __flush_work+0x100/0xc50 [ 431.892566][T16193] ? __flush_work+0x100/0xc50 [ 431.892585][T16193] ? __pfx___flush_work+0x10/0x10 [ 431.892603][T16193] ? __pfx_wq_barrier_func+0x10/0x10 [ 431.892628][T16193] ? __cancel_work_sync+0x5c/0x110 [ 431.892647][T16193] __cancel_work_sync+0xbe/0x110 [ 431.892667][T16193] smc_clcsock_release+0x60/0xf0 [ 431.892685][T16193] __smc_release+0x66b/0x7e0 [ 431.892705][T16193] ? __local_bh_enable_ip+0xd0/0x130 [ 431.892734][T16193] smc_close_non_accepted+0xd5/0x1f0 [ 431.892760][T16193] smc_close_active+0xb67/0xf10 [ 431.892777][T16193] ? __pfx_sock_def_readable+0x10/0x10 [ 431.892800][T16193] __smc_release+0x8d/0x7e0 [ 431.892820][T16193] ? __local_bh_enable_ip+0xd0/0x130 [ 431.892837][T16193] smc_release+0x2ce/0x560 [ 431.892859][T16193] sock_close+0xc3/0x240 [ 431.892879][T16193] ? __pfx_sock_close+0x10/0x10 [ 431.892897][T16193] __fput+0x44f/0xa60 [ 431.892921][T16193] task_work_run+0x1d9/0x270 [ 431.892944][T16193] ? __pfx_task_work_run+0x10/0x10 [ 431.892971][T16193] exit_to_user_mode_loop+0x193/0x680 [ 431.892987][T16193] ? rcu_is_watching+0x15/0xb0 [ 431.893007][T16193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.893023][T16193] do_syscall_64+0x353/0xf80 [ 431.893038][T16193] ? trace_irq_disable+0x3b/0x140 [ 431.893062][T16193] ? clear_bhb_loop+0x40/0x90 [ 431.893080][T16193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.893096][T16193] RIP: 0033:0x7f3771d9ce59 [ 431.893111][T16193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.893126][T16193] RSP: 002b:00007ffeb9348818 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 431.893142][T16193] RAX: 0000000000000000 RBX: 00007ffeb9348900 RCX: 00007f3771d9ce59 [ 431.893153][T16193] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 431.893162][T16193] RBP: 0000000000069490 R08: 0000000000000001 R09: 0000000000000000 [ 431.893172][T16193] R10: 0000001b33c20000 R11: 0000000000000246 R12: 00007ffeb9348940 [ 431.893183][T16193] R13: 00007f3772015fac R14: 00000000000695c3 R15: 00007f3772015fa0 [ 431.893202][T16193] [ 432.201052][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2787'. [ 435.404978][ T5001] udevd[5001]: worker [11509] /devices/virtual/block/nbd1 is taking a long time [ 440.043222][ T1320] ieee802154 phy0 wpan0: encryption failed: -22