last executing test programs: 7.73461684s ago: executing program 3 (id=1575): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000003c0)=0x80, 0x800) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x4000) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0xffffffffffffff71, r2, 0x20, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @mss={0x2, 0x6}, @mss], 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=@ipv4_delrule={0x28, 0x21, 0x105, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x4010) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x388, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x34c}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x40c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.636972144s ago: executing program 4 (id=1610): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendfile(r2, r1, 0x0, 0xf03a0005) (async) sendfile(r2, r1, 0x0, 0xf03a0005) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) 3.30511738s ago: executing program 4 (id=1613): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:11 1', 0x1b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000000e00010000000000000000000500000a70000000180a0500000000000000000002000000440003804000038014000100776732000000000000000000000000001400010076657468aa5f746f5f627269646765001400010000000068305f766c616e00000001000900010073797a3000000000140000001100010000000000000000000300000a00"/152], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x4) read(r4, &(0x7f0000000080)=""/155, 0x9b) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000300)='syzkaller1\x00', 0xb) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@remote, @private0, @local, 0x9, 0x9afc, 0x8000, 0x500, 0x8001, 0x14, r0}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008000300000000003d0000003fffffffac1414aa00000000a02af371e3500bc5d83a95de819ec978d6427c82fef15b8d7d73249f4167f947c6fb1aa852124f1da28e321a37544946d633b7c089b90c7d8eb640000a69a033a35ddb0a61d3eb2654eb5c064e1fd3b4df311783c9cdb59e04c5f8700e893d22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84000600907800040a03000008d58838068b9100"], 0x42) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0) 2.785316033s ago: executing program 2 (id=1618): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7fffffff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) (rerun: 64) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000010002000400000000300000041000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000006299de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003, r7}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r7}, 0x20) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmmsg$sock(r3, &(0x7f0000001fc0), 0x0, 0x20000084) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) (async) socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) 2.543009932s ago: executing program 1 (id=1619): r0 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x1, 0xa, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}]}}}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x100}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000006180)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x6, @mcast1, 0xf9af}, 0x1c, 0x0}}, {{&(0x7f0000001440)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hopopts={{0x18, 0x29, 0x36, {0x2b}}}], 0x18}}], 0x2, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$inet6_sctp(0xa, 0x7, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r8, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000040)={0xd1b, 0x1, 0x1, 0x80000000, 0x8, 0x2, 0x0, 0x6, r11}, 0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000080)={r11, 0x5, 0x40, 0x989, 0x16, 0x4}, &(0x7f00000000c0)=0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r13, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.394516148s ago: executing program 3 (id=1620): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1403, 0x400, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004805}, 0x40001) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1407, 0x2, 0x70bd29, 0x7, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c040) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x9, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2}}}, {{0x2, 0x4e20, @private=0xa010102}}}, 0x108) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000400)=0x400, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2042}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004814}, 0x200400c0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x1) getpeername$inet(r2, &(0x7f0000000640)={0x2, 0x0, @remote}, &(0x7f0000000680)=0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000006c0), &(0x7f0000000700)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb4, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40683c29, 0x52}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xe, 0x3}, {0x3, 0x5}, {0x3, 0x2}, {0x8, 0x4}, {0x60, 0x2}, {0x1, 0x4}, {0x2, 0x5}, {0x3a, 0x1}], "d119d7f2959daf26"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x6, 0x5}, {0x74, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x40}, {0xb, 0x3}, {0x9}, {0x20, 0x1}, {0xa9, 0x7}, {0x4, 0x7}, {0x80, 0x4}, {0x4, 0x7}, {0xc8, 0x3}, {0xc1, 0x7}, {0x80, 0x5}, {0x3}, {0x5, 0x7}, {0xe, 0x7}], "6e9cbd2420c40b2d"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5}, {0x81, 0x6}, {0x8, 0x7}, {0x4, 0x5}, {0x1}, {0x7, 0x4}, {0x81, 0x6}, {0x7f, 0x6}, {0x12, 0x2}, {0x2, 0x7}, {0x6, 0x2}], "c69bdbe0e017b59e"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x1}, {0x9, 0x4}, {0x9, 0x4}, {0x89, 0x5}, {0x6, 0x1}, {0xfa, 0x1}, {0x0, 0x6}], "cd030c17a304b218"}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008040}, 0x1) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}}, 0x2000098) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r6) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000b40)={@private, @broadcast, 0x0}, &(0x7f0000000b80)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r6, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000c80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) getsockname$packet(r6, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000f00)=0x14) getpeername$packet(r6, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f80)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000fc0)={0x0, @initdev, @loopback}, &(0x7f0000001000)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000010c0)={'ip6_vti0\x00', &(0x7f0000001040)={'ip6tnl0\x00', 0x0, 0x0, 0xb, 0x7, 0x8, 0x4f, @remote, @loopback, 0x1, 0x20, 0x7, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001300)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001100)={0x1a0, r7, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000001340)={0x1, 'dvmrp1\x00'}, 0x18) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000013c0), r6) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000001480)={&(0x7f0000001380), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r14, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x1c}}, 0x40000) 2.283811626s ago: executing program 2 (id=1621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044800}, 0x24000090) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000040)={0x2, 0x1, '\x00', 0x6, 0xf}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x60) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000340)={0x8, 'veth1_macvtap\x00', {'veth0\x00'}, 0x5}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000000200), 0x40000d6, 0x80) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0xfc, 0xfffff036}]}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r11 = accept(r9, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c000180140003"], 0xe4}, 0x1, 0x0, 0x0, 0x92611a01cf6fda21}, 0x24040040) 2.159305016s ago: executing program 4 (id=1622): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000070210000000000850000005000000095000000a916000000000080"], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r2}, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a300000000014000280060001", 0x27}], 0x1}, 0x4008040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x68, &(0x7f0000000200)}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0x16, 0x0, &(0x7f00000005c0)="76389e89f0f4b500000000000000eb810074c8893043", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=[@dstopts={{0x18}}, @hopopts={{0x18, 0x29, 0x36, {0x62}}}], 0x30}}], 0x2, 0x4001c00) 2.157249834s ago: executing program 3 (id=1623): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@dellink={0x38, 0x11, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r4 = socket(0x8, 0x3, 0x3) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x42000004, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r7 = socket(0x10, 0x2, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000aa000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x0, 0x8, 0x80000001}}) 1.962086508s ago: executing program 0 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac91cbb3558797f3aa27c19a91695e2eb5f3d4056a935cf5155a411a207dc04cc99709a27e741f7dd5a66c4e26491386efc947d5d2640a790778555fc85288cfc4de0cb52478533d5ac7f43b0f9ffc7e6312eaffeb7479606615bcd90793466d0eadb061f09abc5770b5a7", @ANYRES16=r4, @ANYBLOB="010004000000010000000900000028000380140002007663616e30000000000000000000000008000100020000000600040009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window={0x3, 0xa}, @mss={0x2, 0xfff}, @timestamp, @window], 0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, 0x0, 0x40010) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0xc050) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) unshare(0x22020400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000700)=0xfffffffd, 0x4) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x80000000, 0x8}, 0xc) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) 1.833080646s ago: executing program 4 (id=1625): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002021, 0x0, 0xfffffe84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4082}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000880)={{0x3, 0x3}, 0x100, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000100154e0400000008008c"], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth0_to_bridge\x00', 0x3}, 0x18) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7bd4531b, 0xfffffff8, 0x7ec}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$802154_dgram(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$phonet(0xffffffffffffffff, &(0x7f0000000280)={0x23, 0x85, 0x9, 0xf8}, 0x10) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="040200002300020029bd7000fcdbdf250000000014000e00ffffffff0000000000000000000000000400260004002600cc01110000000000000000000000000000000000ff0100000000000000000000000000010a010100000000000000000000000000fe80000000000000000000000000002cff040000063500000a000200fc000000000000000000000000000000fbf100000000000000000000000000000a010101000000000000000000000000fc000000000000000000000000000001320100000000000002000200fc010000000000000000000000000000ac1414420000000000000000000000000000000000000000000000000000000164010101000000000000000000000000ff030000ff34000002000a0020010000000000000000000000000000fe880000000000000000000000000101ac1414bb000000000000000000000000ac1e000100000000000000000000000033030000063500000a000a00ac1414aa000000000000000000000000e0000001000000000000000000000000ac1414bb000000000000000000000000e0000001000000000000000000000000330000000535000002000a00fc010000000000000000000000000000fe8000000000000000000000000000aafe880000000000000000000000000101e0000001000000000000000000000000000400000000000002000200050019003c000000"], 0x204}}, 0x44050) 1.555161601s ago: executing program 1 (id=1626): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866207d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb96a9acd5261df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03ddbc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000300)) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x6, 0x7, 0x0, 0x1, 0x1e92}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000ff738af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000500080000000000000000692204000000000095"], 0x0, 0x5}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001480)=@assoc_value, &(0x7f0000001500)=0x8) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.394937377s ago: executing program 1 (id=1627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) (async) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) (async) r5 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)) 1.360620626s ago: executing program 0 (id=1628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000404000040"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x7, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000040)=0x8) 1.279929373s ago: executing program 2 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/221, 0xdd}], 0x4}, 0xff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x7, 0x0, 0x0) 1.22970894s ago: executing program 3 (id=1630): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) r3 = socket$inet6(0xa, 0x8000e, 0x0) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000000000000", @ANYRES8=r3], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=@acquire={0x1b4, 0x17, 0x10, 0x70bd26, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4d2, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {@in=@multicast2, @in=@local, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0xb0, 0x2, r4, r5}, {{@in=@loopback, @in6=@local, 0x4e20, 0x8, 0x4e24, 0x5, 0x2, 0x20, 0x20, 0x2f, 0x0, 0xee01}, {0x4, 0x100, 0x3a2, 0xd3, 0x1, 0x1, 0xae, 0x2}, {0x69, 0x101, 0x4109e51, 0x4}, 0x7f, 0x6e6bbe, 0x0, 0x0, 0x2}, 0xaaf, 0x3, 0x1000, 0x70bd25}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @tmpl={0x84, 0x5, [{{@in6=@local, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0x2, @in=@private=0xa010102, 0x0, 0x2, 0x0, 0x3e, 0x212, 0xf, 0x1000}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x20020052) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf8000000}, 0x94) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) 1.130985291s ago: executing program 1 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), 0xffffffffffffffff) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000019580)=""/102394, &(0x7f0000000040)=0x18ffa) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x8, 0x70bd28, 0x1f1, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x882, 0x1a}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x138}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0xd, 0x14, 0x0, 0x1, [@nested={0x4, 0x18}, @typed={0x4, 0x18, 0x0, 0x0, @binary}, @generic=')']}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x64, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 1.107035461s ago: executing program 0 (id=1632): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x70, "73a4585de10b2ea7fec560e8d94b7142b8991afcd3fba847bfc3f3abd0b6382123726ac1177224c8a67f3a90e87bd23cdc912f4b7ea50a19b7f356bc8272d045c5be9717c5f69ddb673cf2599ab422749ff11eb1598617d729e8259443923c01221cded1c79a1f179f5c993b221de637"}, &(0x7f0000000080)=0x78) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x4, 0x208, 0x5, 0x7ff, 0x9, 0x5b, 0xd9, r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r1, 0x6, 0x2b, 0xa, 0x3ff, 0x7}, &(0x7f0000000140)=0x14) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x58, 0x8}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000001c0)={0xd8fa, 0xd00e, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000200)="add83b6fb0f919225359d907bf5f381f5c40c812db3e9c75f58e6276a46a2de9491a42dcdee099b678eab74606f58febafb4f0bbc8c340a6e01e89d68fd6d1d146b71c4b5f23d7dcf0a294b8687bb682c5a2a9506de042e85f1e83ace94e2126ada039bde6eb8ecc0e89f8d64c72a797a2d8a6ceb0701b9fde526ad7765761d79898070ecfd765a339486916b0b5", &(0x7f00000002c0)=""/101, &(0x7f0000000340)="322ada9f0b5abe3995e2937407ea8a920c7defa2852fd60468c9098816c7c935bad173a00122e6e0a649fe3866d402dce1d9b3fff0a2dda0da25a2ab5d83fa576a8d6a94093d20368b56ef94e42ab8c58d72d1546b99d56e6e5346fe221a7e3340171de28c93c30873100161592da7ffda756eba30197e4b0b9d840b0f211f7ded1be30be57ff9da764d7b2ed37a83619558de406400efb595942fb14b8eb8b8735c1802b3f7700efd0f9a0419a997212dcbe16d8f01", &(0x7f0000000400)="6b303ea50f91dddc1138e816f55b83a8e3a6593bbbe3be396a5c31c6925c2ba577b6629e74895d3ff02da9fd0d83c5cb20b5732bd286164255c87880ea8011d63cb849b1e30949c669f2617634f0b1d673a9afe61c0ebcdaa5949cb77d7f87e0141c245d83bcc66e9eac3a212b3af0bb5b1fc60b88980efb79688a66f7bfc247e23b57d31bf7777bd2f8645876bab4cac24a37eff0c0fc79876b3b5ca45d38d6e7f02bb60111ef4d869fbac59c932d06d4e82fd77e7d61f6db82c13bd5670721a60e586d81b2897f1c95e67b5cfca17a2503a8c464864b6be19d49", 0xc, r3, 0x4}, 0x38) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f00000005c0)=0xc2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000600), &(0x7f0000000640)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000940)={&(0x7f0000000680)="970ac110e8a80dfe00ce2e686d9e45e3030bed592c8cf66f528f6c7b9c1c8df4ba3a2a69d6013bc9c49740a3b2fd6abbc31901866263f3c29eb157497e161847dcd0cf3619a9bad4efda29c64ee17532adc18d6b6aced7b00d89a7f226542677961bdef21a695cf81540941e6d3c2925ea9ca1fcf70f5cfef6a0b43732697c84e421b60e511fdf752d705d9362321b858959fcd6c71dd0612cbfbbf0d9d576a786ec10f120684d5f", &(0x7f0000000740)=""/63, &(0x7f0000000780)="733c2ddebd5eef73fafdddf764128f72df6a7e2495bafd1b0b72a5056a70a7f95743ebc859521317e509ff355e6c5cba00190b3acb73685e0fd77d1e656317da164453afde9f95c583ab8d3499c4c356db599d04c35198545f250ebf3dbc1abcef8baa6e699c7c18e6b30e91ab0a7a", &(0x7f0000000800)="d85f8e963dd3e6322a354ea5e6f94e53871666d0e08c63d93d4df58093dfa767c946decca618d61e9425c8999e468f98325de2a672d1f26cb7f823f0304143ec679e7363df147ebecc1c468198bbf0ddf515a2be07368dba7bd20603", 0x9, r5, 0x4}, 0x38) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000980)={'veth1_to_bond\x00'}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f00000009c0)={0x7, 'veth1_to_team\x00', {0x7}, 0x8}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'ipvlan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000b40)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b80)={{{@in=@loopback, @in6=@empty, 0x4e21, 0x1ff, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x2f, r8, r9}, {0x0, 0x4, 0x6, 0x3, 0x0, 0x8000, 0x1f, 0xe94d}, {0xa, 0x0, 0x0, 0x5}, 0x9, 0x6e6bbe, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d5, 0x3c}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x1, 0x6b, 0x7cefe5f2, 0xbbe0, 0x8001}}, 0xe8) ioctl$OCFS2_IOC_INFO(r4, 0x80106f05, &(0x7f0000006080)={&(0x7f0000005ec0)=[&(0x7f0000000c80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000000cc0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000d40)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000000d80)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000e00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000000e40)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000000e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x100000001}}, &(0x7f0000000ec0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000000f00)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000f80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000000fc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000001000)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000001040)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000001080)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000001100)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x0, 0x1}, {0x4, 0x7}, {0x5, 0x8b1}, {0x7, 0xf4d1d57}, {0x1, 0x7}, {0x80, 0x1}, {0x3, 0x9}, {0x44, 0x3}, {0xaa, 0x8}, {0xaf3, 0xd2e}, {0x200, 0x8000}, {0x7, 0x4}, {0x9, 0xee}, {0x2, 0x1}, {0x9, 0xe}, {0xbd61, 0x60}, {0x6}, {0x6}, {0x3, 0xffffffff}, {0x9, 0x7fffffffffffffff}, {0xe471, 0x5}, {0x219, 0xb}, {0x100000000, 0x6}, {0x2, 0x8}, {0x7, 0x8}, {0x2, 0x80000001}, {0x5, 0x40}, {0x80, 0x7fff}, {0xffff, 0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x5}, {0xff, 0x10000}, {0x6, 0x8000}, {0x101, 0x2}, {0x4}, {0x5, 0xc}, {0x80, 0xfffffffffffffffd}, {0x2, 0x2}, {0x2, 0x1}, {0x9}, {0x2, 0x60fc788f}, {0xfffffffffffffffa, 0xfffffffffffffffa}, {0x5, 0xffff}, {0x5, 0x7}, {0x2}, {0x43, 0x4}, {0x9, 0xe}, {0x3, 0x4}, {0x1a6, 0x7}, {0x8001, 0xa}, {0x80, 0xffff}, {0x0, 0x100000001}, {0xffffffffffffffc2, 0x7}, {0x9a17, 0x8d7}, {0x7fffffffffffffff, 0x9}, {0x4, 0xbab2}, {0x80000001, 0x5}, {0x7, 0xffffffffffffffff}, {0x5, 0x9}, {0x800, 0x7fffffffffffffff}, {0xc, 0x3ff}, {0x6}, {0xfffffffffffffffa, 0x7}, {0x8, 0x3}, {0x5, 0x39}, {0x6be1, 0xf}, {0x3, 0x200}, {0x7, 0x4}, {0x0, 0x3}, {0x7fffffff, 0x1}, {0x800, 0xb}, {0x7ff, 0x80000001}, {0x7, 0x3}, {0x7, 0x7}, {0x9, 0x8}, {0xfffffffffffffff8, 0x6}, {0x101, 0x1}, {0x7, 0xc4c9}, {0x9, 0x101}, {0x10000, 0x4}, {0x0, 0x7bd}, {0xffffffffffffffc4, 0x3}, {0x7, 0x6}, {0x49, 0x7}, {0x7, 0xd}, {0x6, 0x9}, {0x4, 0x5}, {0x7, 0x3ff}, {0xb23, 0x9}, {0x5, 0x4}, {0x3, 0x204}, {0x6, 0xfff}, {0x7, 0x3}, {0xb4, 0x1}, {0x7fff, 0xffffffffffffffff}, {0x1000, 0x9}, {0x7, 0x4}, {0x9, 0x2}, {0x8000, 0x7}, {0x8, 0x39df}, {0x0, 0x1ff}, {0x27, 0xf}, {0x1f1, 0x9}, {0x5, 0x8628}, {0x2, 0x8}, {0x1, 0x7ff}, {0x4, 0x3}, {0x3, 0x9}, {0x0, 0x8001}, {0x40, 0xffffffffffffffff}, {0x264b65f3, 0x1a}, {0x6fc9, 0x66}, {0x0, 0xb}, {0xb, 0x6}, {0x3, 0x7e450c17}, {0xc, 0x200}, {0xfffffffffffffffb, 0x2}, {0x5, 0x2}, {0x6, 0x9}, {0xd800000000000000, 0xd194}, {0x2}, {0x1, 0x4}, {0x9, 0x8000000000000000}, {0xd, 0x2}, {0x8, 0x10000}, {0x9, 0x7}, {0xf, 0xfffffffffffffff8}, {0x9, 0x7}, {0xffffffffffff914f, 0x4}, {0xa, 0x3}, {0x7, 0x7}, {0x81, 0xfffffffffffffff3}, {0x2, 0x400}, {0x1, 0x3}, {0x6d, 0x2f75}, {0x0, 0x2}, {0x3, 0x37386ac5}, {0x7, 0x80}, {0x80, 0xfffffffffffffff8}, {0x7b84, 0x401}, {0x2, 0x1}, {0x7, 0x100000000}, {0x6, 0x9b0}, {0x3, 0x7}, {0x7, 0x9}, {0x9, 0x8}, {0x8, 0x8f}, {0x3, 0x7fff}, {0x4, 0x1}, {0x101, 0xffff}, {0x5, 0xc172}, {0x9, 0x7fff}, {0x9, 0x7}, {0x1, 0x10001}, {0x71e2, 0xc4}, {0x80000001, 0xfffffffffffffffa}, {0x8001, 0x20}, {0x38, 0x9}, {0x0, 0x3}, {0xf9, 0xc}, {0xe, 0xfffffffffffffffd}, {0x8, 0x10001}, {0x5131, 0x20}, {0x6, 0xffffffffffffffff}, {0x4, 0xd95403a}, {0x9, 0xf1b}, {0x81, 0x100000001}, {0x1, 0x5}, {0x7, 0x8}, {0x435, 0x6}, {0x7f, 0xa6}, {0x1, 0xffffffffffffff38}, {0x6, 0xc951}, {0x9, 0xf}, {0x8, 0x18000000000}, {0x4f7, 0x2}, {0x0, 0x8000000000000000}, {0x138, 0x100000000}, {0x8000000000000000, 0x200}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0xffffffff, 0x10001}, {0xd8, 0x1}, {0x0, 0x4}, {0xd, 0x3}, {0xfffffffffffffffe, 0xf}, {0x9, 0x7}, {0x6, 0x10}, {0xfffffffffffffffb, 0x48c}, {0x0, 0x8001}, {0x5, 0x8}, {0x5, 0xf2}, {0xff, 0x8}, {0x1, 0x4}, {0x3, 0xffffffff}, {0x101}, {0x6e3b, 0x9}, {0xdd1c, 0xff}, {0xf, 0x7}, {0x54fa, 0x7}, {0x7}, {0xab}, {0xd}, {0x48}, {0x3, 0xfffffffffffffffc}, {0xfff, 0x100000001}, {}, {0x0, 0x4000000000000}, {0x9, 0x9}, {0x8, 0x8}, {0x3, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x9}, {0x7ff, 0x6}, {0x4, 0x9}, {0x2, 0xcc}, {0xffffffffc3d1393e, 0x7fffffffffffffff}, {0x4, 0x24}, {0x7, 0xffff}, {0x8, 0x78d}, {0x7, 0x6}, {0x0, 0xffffffffffff0cf1}, {0xb15, 0x5}, {0x5, 0x8}, {0x2, 0x5}, {0x0, 0x3}, {0x75b, 0x8000}, {0xfff, 0x5}, {0x8, 0xe581}, {0x3ff, 0x9969}, {0xa2a}, {0x804, 0x2}, {0x9, 0x100}, {0x6, 0x6}, {0x7, 0x1e20}, {0xb404, 0x1}, {0x59}, {0x6, 0x1}, {0x1af, 0xd}, {0x10000000000, 0x9}, {0x7fffffffffffffff, 0x9}, {0x5, 0xab}, {0x7, 0xb2}, {0x4, 0x4}, {0x7, 0x10000}, {0x2e, 0xfffffffffffffff9}, {0x7ff, 0x8}, {0x1, 0x7}, {0x3, 0x7}, {0x3c, 0x6}]}, &(0x7f0000002140)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x1ff}, &(0x7f0000002280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f00000022c0)=@features={{0x4f32494e, 0x6, 0x10, 0x100000001}}, &(0x7f0000002300)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002340)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000002380)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000002400)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0xd, 0x1}, {0x80, 0x1}, {0x8, 0x7ff}, {0x401, 0x2}, {0x7, 0xe737}, {0x751e2343, 0x7fff}, {0x9, 0x1}, {0x3, 0x5}, {0x6, 0x1ff}, {0xffffffffffffffff, 0xffffffffffffffff}, {0x3, 0x1}, {0x7, 0x10001}, {0x8, 0x7}, {0x8000, 0xa0ec}, {0x8, 0x6}, {0xcde0, 0x5}, {0x4, 0x7}, {0x36, 0x7}, {0x9, 0x3}, {0xe}, {0xb, 0x4}, {0x7, 0x6}, {0x3, 0x9}, {0x10000, 0x6}, {0x6, 0xffff}, {0x68fb, 0x8001}, {0x8, 0x4}, {0x0, 0xfff}, {0x5, 0x5c2}, {0x5, 0xffffffff7fffffff}, {0x7fff, 0x3}, {0x800, 0x7f}, {0x3ff, 0x6}, {0x5, 0xff}, {0x60, 0x8}, {0x1, 0x6}, {0xa, 0x9}, {0x7, 0x4}, {0x0, 0x5}, {0x9, 0x81e}, {0x0, 0x2}, {0x8, 0x101}, {0xfff, 0xfffffffffffffffe}, {0x3ff, 0xd0}, {0x7fffffffffffffff, 0x5}, {0x3, 0x3}, {0x9, 0xb}, {0x2, 0x5}, {0x48, 0x9}, {0xffffffffffffff8d, 0x84d4}, {0x35b, 0xfda4}, {0x8, 0x5}, {0x9bee, 0xfffffffffffff22a}, {0x3, 0xc}, {0x4, 0x1}, {0x3, 0x7ff}, {0xf, 0xf42d}, {0x7, 0x7fffffffffffffff}, {0x4, 0x7}, {0xf, 0x8}, {0x4264, 0xffff}, {0x9, 0x100000000}, {0x200, 0x8}, {0x8, 0x6}, {0x100, 0x7ff}, {0xd30, 0x3}, {0x24, 0x9}, {0x3, 0x803}, {0x8, 0x40}, {0x0, 0xfffffffffffffffc}, {0x1ff, 0x1ff}, {0x26, 0x100000001}, {0x97, 0x1}, {0x6, 0x34}, {0x7, 0xc6b}, {0x6, 0x1}, {0x0, 0x6d61}, {0x7, 0x5}, {0x5, 0x7ff}, {0x3ff, 0x64f}, {0x2, 0x5}, {0x1366, 0x5}, {0x8, 0x5}, {0x8, 0xeb}, {0xa3, 0x7}, {0x9, 0x2584}, {0x7, 0x7}, {0xf6d, 0x85c6}, {0x3, 0x2}, {0x8, 0x1ff}, {0x6, 0x1}, {0xe9fa, 0x1}, {0x7b29, 0x3}, {0x6, 0x2}, {0x9}, {0x8, 0xff}, {0x3, 0x7fff}, {0x4, 0x4}, {0x8, 0x433}, {0x8001, 0x9}, {0x9, 0x1}, {0x10000, 0x4276}, {0xc, 0xab}, {0x2, 0x4}, {0x6, 0xe}, {0x6, 0x4}, {0x7, 0x9}, {0x9, 0x10001}, {0x3, 0x7}, {0xee, 0x2}, {0x5, 0x4}, {0x6, 0x7}, {0x1ff, 0x80000001}, {0x8000000000000001, 0x7}, {0x9, 0x5}, {0x8, 0x7f}, {0x1, 0x9}, {0x8b, 0x4}, {0x2, 0x100000000}, {0x2, 0xd4b2}, {0x7db1, 0x9}, {0x8, 0x3}, {0x8001, 0x3}, {0x101, 0x80000001}, {0x4, 0x3}, {0x2, 0x1000}, {0x10, 0xa3e}, {0x9, 0xbed}, {0x3, 0x1000}, {0x7}, {0x200, 0x7}, {0x9bea, 0x81}, {0x2, 0x1}, {0x9, 0x4}, {0x82, 0x1}, {0x0, 0x10000}, {0xe, 0x7}, {0x101, 0x400}, {0x3ff, 0x3}, {0x5}, {0x4, 0xfffffffffffffffb}, {0x0, 0x100}, {0x0, 0x7f}, {0x6, 0x1}, {0x3d1, 0xffffffff}, {0x0, 0x5}, {0x2fe, 0xfffffffffffff7ab}, {0x3, 0x1}, {0x9, 0x101}, {0x7, 0x38979d01}, {0xb9, 0xa4}, {0x0, 0xe}, {0x5, 0x2}, {0x0, 0x6}, {0x10, 0x3}, {0xfffffffffffffffd, 0x9}, {0x8, 0x8}, {0x1, 0xde}, {0x3, 0x7}, {0x1, 0x6}, {0x1ff, 0x312}, {0xd454, 0x2}, {0x3, 0x7fffffffffffffff}, {0x10}, {0x85f, 0x5}, {0x101, 0x5}, {0x1, 0xaad}, {0x7ff, 0x200000000000}, {0x81, 0x6}, {0x8001, 0x7}, {0x1edc, 0x3}, {0x80, 0xc}, {0x4}, {0x0, 0x4}, {0x7, 0x4}, {0x3, 0x9}, {0x7c, 0x8}, {0x40, 0x3}, {0x6, 0x7}, {0x482, 0x9}, {0x3}, {0x3, 0x7ff}, {0x6, 0x401}, {0x4, 0xd334}, {0xffffffffffffa631, 0xfffffffffffffffe}, {0xd109, 0x5}, {0x8}, {0x1, 0x9}, {0x7, 0xaf1}, {0xe7a9, 0x6}, {0x2, 0x400}, {0x3, 0x80000000}, {0x3, 0x100000001}, {0x9, 0x9}, {0x8, 0x7}, {0x4, 0xe}, {0xae, 0x3}, {0xfff, 0x8000}, {0x1000000000, 0x2}, {0x0, 0xff}, {0x8, 0x7fffffff}, {0xfffffffffffffff3}, {0xbbe, 0x2}, {0x3, 0x9}, {0x5, 0xb}, {0x3, 0x8}, {0x8, 0x1}, {0x4c2, 0x7}, {0x400, 0x2}, {0x3, 0xfffffffffffffffa}, {0xf67e, 0xa6}, {0x7, 0xffffffff}, {0x2, 0x101}, {0x1, 0x9a}, {0x9, 0xee2}, {0x6645, 0x1}, {0x5, 0x5}, {0x5, 0x58188fb}, {0x8, 0x6}, {0xc1, 0x72}, {0x1, 0xffffffffffffb6d2}, {0x4, 0x8000}, {0x2, 0x200}, {0x2, 0xc87}, {0x1c000000, 0x4}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x8990}, {0x7fffffffffffffff, 0x2}, {0x4, 0x8}, {0x1000, 0x5}, {0x2, 0x5}, {0xf, 0x1}, {0x100000000, 0x2564058c}, {0x9, 0x2}, {0x400, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x101, 0x100000001}, {0xffff, 0x800}, {0xffffffff, 0x6}, {0x3ff, 0x7ff}, {0x4, 0x71b}, {0x1, 0x8}, {0x6, 0x9}, {0x81, 0x400}, {0x4, 0x8f}, {0xf8, 0x5}, {0xf, 0x7fffffff}, {0xb3b2, 0x8000}, {0x4, 0x5}, {0x1, 0xfffffffffffffffa}, {0x3, 0x100000001}, {0x0, 0x5}, {0x8, 0x9}]}, &(0x7f0000003440)=@journal={{0x4f32494e, 0x7, 0x10, 0x20000001}}, &(0x7f0000003480)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000003500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000003540)=@uuid={{0x4f32494e, 0x5, 0x10, 0x20000000}}, &(0x7f0000003580)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f00000035c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000003600)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000003640)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000003680)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000036c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000003700)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000003780)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x40, 0xd71}, {0x9, 0xcd}, {0x6}, {0x2}, {0x1, 0x8}, {0x4, 0x81}, {0x3ff, 0x8001}, {0x9, 0x4}, {0x81}, {0x7d, 0x5}, {}, {0x2}, {0x401}, {0x3, 0x4}, {0x8f91, 0x1}, {0x2, 0x4a3f}, {0x0, 0x9}, {0x6, 0x7}, {0xffff, 0xfffffffffffff8b8}, {0x8, 0x6}, {0x81, 0x4}, {0x8000000000000001, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x9, 0xff}, {0x9, 0x3}, {0xfff, 0x397c}, {0xffffffff, 0x7}, {0x9, 0x6}, {0x7, 0xc}, {0x3, 0x1ff}, {0x7fffffff, 0x400}, {0x0, 0x4}, {0x2, 0x5}, {0x23, 0x7}, {0x775, 0x8}, {0x7, 0x1}, {0x3, 0x2}, {0xc}, {0xfffffffffffff85a, 0x3}, {0x3}, {0xfffffffffffffffe, 0x3}, {0x7, 0xc6}, {0x4, 0x9}, {0x8, 0x800}, {0x8000000000000000, 0x9}, {0x6, 0x34}, {0x1ff, 0x1ff}, {0x422e, 0x4}, {0x401, 0x2}, {0x4, 0x80}, {0x800000000000, 0x3ff}, {0x9}, {0x8, 0xfffffffffffffff9}, {0x0, 0x7}, {0x6, 0x8000000000000001}, {0x7, 0x9}, {0x4, 0x3}, {0x3, 0x59f}, {0x1, 0x4}, {0x71ac, 0x8000}, {0x5, 0x9}, {0xe3, 0x9}, {0x7fff, 0x8000000000000001}, {0x6, 0x4}, {0xffffffff, 0x5}, {0x5, 0x80000000}, {0x6, 0x8000000000000001}, {0x101, 0x400000000000000}, {0x7f, 0x7}, {0xa, 0x3}, {0xffffffffffff0000, 0x580}, {0xfffffffffffffff8, 0x5}, {0x5, 0x5}, {0x0, 0x2}, {0x1ff, 0xb2}, {0x0, 0xe}, {0x2}, {0x200, 0x400}, {0x101, 0x3}, {0x1, 0x3}, {0x3, 0xfffffffffffffff8}, {0xd42, 0x9}, {0x4fe81007, 0x7}, {0x6, 0x20}, {0xff800000000, 0xffffffffffffffff}, {0x0, 0x2}, {0x8, 0x1}, {0x7ff, 0x4}, {0x86, 0x6}, {0x1, 0x7}, {0xfffffffffffffffd, 0x6}, {0x100000001, 0x2}, {0xfffffffffffffffd, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x3, 0x8000000000000001}, {0x7f}, {0x128086d4, 0x3}, {0x4, 0x2}, {0x100000000, 0x8}, {0x4, 0x9}, {0x80, 0xf}, {0x7, 0x9}, {0x3, 0xe}, {0x2, 0x38}, {0x7, 0x8}, {0xfff0000000000, 0xf}, {0x7}, {0x100000000, 0x8}, {0x2, 0x8001}, {0x4, 0x8001}, {0x280000, 0x8}, {0x10000, 0xf}, {0x8000000000000001}, {0x7, 0xc31}, {0x2, 0x9}, {0x0, 0x34}, {0x6, 0x20}, {0xbfee, 0x6}, {0x0, 0xfffffffffffffffa}, {0xfffffffffffffff7, 0x10000}, {0xd6f, 0xffffffffffffff98}, {0x5, 0x5}, {0x9, 0x2}, {0x8a, 0x4}, {0x0, 0x7}, {0x9, 0x7}, {0x200, 0x3}, {0x7fffffff, 0x300000000000000}, {0x5, 0x4}, {0xff}, {0xb, 0x4}, {0x81, 0x5}, {}, {0x8, 0x7}, {0x8, 0x3}, {0x5, 0x6}, {0x1b8, 0x5}, {0x7, 0x4a98122d}, {0x7fffffff, 0xe8}, {0x6, 0x41f}, {0x5}, {0x1ba, 0x6c7800eb}, {0x8, 0xda5}, {0x73, 0x1}, {0xa0c, 0x2}, {0x1, 0xff}, {0x5, 0x9}, {0x5, 0x4}, {0x8e0, 0xa06}, {0x4, 0x5}, {0x4, 0x400}, {0x1000, 0x4}, {0x3, 0x1}, {0x2, 0x2}, {0x81, 0x10}, {0xb0d6, 0xa9}, {0x2, 0x4}, {0x3ff, 0x5}, {0x1, 0x1}, {0x6, 0x8}, {0x8000000000000000, 0x48000000000000}, {0x9, 0x101}, {0x4, 0xbcea}, {0x7, 0x7}, {0x6, 0xffff}, {0x2, 0x3}, {0x7, 0x9}, {0xffff, 0x5}, {0x2, 0xe}, {0x80000001, 0x3}, {0x4, 0x80000001}, {0xf8a, 0xd05f}, {0x37d, 0xffffffff}, {0x5, 0x10}, {0x80000000}, {0x3, 0x700}, {0x7, 0x7}, {0xffffffff80000001, 0x7}, {0x5, 0xc39c0000000000}, {0x9, 0x4}, {0x5, 0x8}, {0x1, 0x7f}, {0x9, 0x1}, {0x3, 0x3}, {0x1, 0x3}, {0x6, 0x1}, {0x864b, 0x8000000000000001}, {0xd79f, 0x8}, {0x2, 0x7}, {0x3, 0xffffffffffffffcc}, {0x2, 0xd01}, {0x3, 0x7}, {0x4, 0x400}, {0x70000, 0x7}, {0x5, 0xfff}, {0x1}, {0x3e1, 0x4}, {0x4, 0x5}, {0x7, 0x93d6}, {0x9, 0x7e4}, {0x8000}, {0x4, 0x40}, {0xe31}, {0x2, 0x2}, {0x7, 0x1000}, {0x5, 0x7}, {0xa, 0x5}, {0x4, 0x4}, {0xffffffffffffffff, 0x1}, {0x4, 0x10}, {0x6d, 0x22c}, {0xff, 0x200}, {0x8, 0x5}, {0x5, 0x6}, {0x8, 0x1}, {0xf9, 0x100}, {0x7e1d4a5a, 0x400}, {0xda, 0x7}, {0x4, 0x4}, {0x8000000000000000, 0x2}, {0xfffffffffffffffe, 0x800}, {0xc8, 0x2}, {0x3, 0x5}, {0x800, 0x1}, {0xb681, 0xfffffffffffffffb}, {0x3, 0x7c97ef68}, {0xb6e0, 0xb823}, {0xa06b, 0x1}, {0x6, 0x1}, {0x80000000, 0x2}, {0xc9e, 0x10001}, {0x5eb, 0xd9}, {0x6, 0xa}, {0x1000, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x1000, 0x1d3}, {0x9, 0x3}, {0x7, 0x80}, {0x1, 0xecc}, {0x7d, 0x6}, {0x8001, 0x8000000000000001}, {0x5, 0x5}, {0x8, 0xe}, {0x5, 0x1}, {0x32ee, 0xb}, {0xffffffffffffff7f, 0xcc}, {0x3, 0x4}, {0x5, 0x100000000}, {0x6}, {0xbab8, 0x5}, {0xfffffffffffffff7, 0x8}, {0x7, 0xf}]}, &(0x7f00000047c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x2e1e9c7819ede112}}, &(0x7f0000004800)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000004840)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000004880)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x7}, &(0x7f00000049c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000004a00)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000004a80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000004ac0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000004b00)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004b80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000004bc0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004c40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x0, 0xa}, {0x3ff, 0x84}, {0x8, 0xc}, {0xffffffffffffffff, 0xd}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0x9}, {0xfffffffffffffffb, 0x8}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0xe28}, {0x4, 0x1}, {0x98b9, 0x1}, {0x8, 0x83}, {0x0, 0x4}, {0x6, 0x10}, {0x1}, {0x1, 0x5}, {0xe006, 0x2}, {0x7ff, 0x3}, {0x3ff, 0xd}, {0x1, 0x4}, {0xffffffffffffffff, 0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x4}, {0x19, 0x8001}, {0x4, 0x4}, {0x4, 0x81}, {0x1, 0xffffffff7fffffff}, {0x4, 0x8}, {0xbe, 0x2}, {0x1, 0x7}, {0x3756, 0x7}, {0x730, 0x7}, {0x5}, {0x3, 0x10}, {0x7f, 0x1}, {0x7, 0x7}, {0x9, 0x53}, {0x8, 0x2}, {0x100, 0x2}, {0x0, 0x9549}, {0x8, 0x401}, {0xfa3}, {0x5, 0xfffffffffffffffc}, {0xfffffffffffffff9, 0xd0d}, {0x4, 0xc71}, {0x400, 0x3}, {0x6, 0x4}, {0x5c, 0x2}, {0x1000, 0x8000000000000000}, {0x7, 0xd}, {0x1, 0xf532}, {0xfffffffffffff000, 0x6}, {0x80000000, 0x3}, {0x401, 0x101}, {0x6, 0x1}, {0xa6}, {0x0, 0x5c}, {0x7, 0xdb}, {0x2, 0x5}, {0x8}, {0x101, 0xcdfd}, {0xd, 0x7ff}, {0x1, 0x3ff}, {0x0, 0x10000}, {0x4, 0x9}, {0x5, 0x80d}, {0xffffffffffffc356, 0xfffffffffffffff9}, {0x7, 0x3677}, {0x1, 0x6}, {0x10, 0xfffffffffffffeff}, {0xa, 0x47976862}, {0x7, 0x6}, {0x8633, 0x8b3}, {0x7, 0x6}, {0x6, 0x9}, {0x7, 0x100000001}, {0x17e, 0x4}, {0x0, 0x1000}, {0xfffffffffffffff7, 0xae}, {0xfffffffffffffffb, 0x1000}, {0x8, 0x5}, {0x7, 0x100}, {0x0, 0x8}, {0x5, 0x4}, {0x3ff, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x64e, 0xff}, {0x0, 0xc9}, {0x5, 0x7}, {0x10001, 0x4}, {0x9, 0x9}, {0x8000, 0x81}, {0x8, 0xfffffffffffffff9}, {0x9, 0x5}, {0x8, 0x3}, {0x7, 0x1}, {0xfff, 0x5}, {0x4, 0xe254}, {0x4, 0xf}, {0x55e, 0x2}, {0x8, 0x6}, {0x5, 0x3}, {0x7, 0x6}, {0x8, 0x6}, {0x3, 0x7457fd91}, {0x6, 0x3}, {0x10001, 0x6}, {0x4, 0xd815}, {0x7}, {0x1, 0x2}, {0x7, 0x4}, {0x8000000000000001, 0x800}, {0x8000000000000000, 0xff}, {0x5, 0xff}, {0x7db58aab, 0x7}, {0x8, 0x10001}, {0xffff, 0x1}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x7fffffffffffffff}, {0x3, 0xe}, {0x4b, 0x9}, {0x7fffffff}, {0x2, 0x7fff}, {0x3, 0x43c}, {0xe, 0x81}, {0x25d6, 0x4000000000000000}, {0x6942, 0x7fffffff}, {0x80, 0x7}, {0x100000000, 0x1}, {0xfffffffffffffffa, 0x81}, {0x1, 0xfffffffffffffffc}, {0xe, 0x2}, {0x7, 0xca50}, {0x4, 0x1000}, {0xffffffff00000000, 0x6}, {0x4, 0xa5}, {0x200}, {0x71, 0x9}, {0x842, 0x6}, {0x3, 0x800}, {0x1, 0x4}, {0x510e0, 0x6}, {0xfffffffffffffffa, 0xb97}, {0x4, 0x6}, {0x9, 0x8000}, {0x9, 0x9}, {0x9, 0x400}, {0x6, 0x2}, {0x1, 0x839c}, {0x4, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x1b, 0x6d85}, {0xac, 0x9}, {0x7, 0x7fff}, {0xfffffffffffffffd, 0xb}, {0xffffffff99f2ea4b, 0x4}, {0x5d5}, {0x1, 0x2}, {0xd, 0x40}, {0x7, 0x5}, {0x0, 0x7}, {0x80000001}, {0x0, 0x7}, {0x9, 0x8000000000000001}, {0xffff, 0x4}, {0x7, 0x2}, {0x5, 0xffffffffffffffff}, {0x5, 0x52f8}, {0x8, 0x8}, {0x6, 0x9}, {0x2, 0x4}, {0x4, 0x1}, {0x3, 0x2}, {0x8, 0xe}, {0x1b, 0x4}, {0x7, 0x6}, {0x7ff, 0x1}, {0x7, 0x2}, {0x9, 0x5}, {0x1, 0x3}, {0x5}, {0x6, 0x4}, {0x6, 0x5}, {0xe, 0x9}, {0x2, 0x2a}, {0x10}, {0x10001, 0x7}, {0xffffffffffffffff, 0xe100000000000}, {0x3, 0x6000000000}, {0xe, 0x3}, {0x9, 0xf2}, {0x7, 0x4}, {0x0, 0x2}, {0x2, 0x7fffffff}, {0x0, 0x7fffffffffffffff}, {0x3, 0x40}, {0x9e2e, 0x604}, {0x2, 0x1}, {0x2}, {0x4, 0x7b7e}, {0x9, 0x7}, {0x4, 0x2}, {0x8, 0x2}, {0x2, 0xfffffffffffffe01}, {0xfff}, {0x4, 0x50}, {0x5, 0x3}, {0x1, 0x9}, {0x100, 0x9}, {0x2, 0xffffffff}, {0x3dfc, 0x88}, {0x3, 0x2}, {0x6, 0x8000000000000000}, {0x1, 0x6089}, {0x7, 0x3}, {0x0, 0x4}, {0x5, 0x2}, {0x8000000000000000, 0x5}, {0xdcd, 0x9}, {0x54d, 0xf8}, {0xc7, 0x7}, {0xd, 0x3}, {0x1, 0x3}, {0x4, 0x1}, {0x9, 0x7fffffffffffffff}, {0x9, 0x2b}, {0x4a69, 0x7f}, {0x7, 0x8000}, {0x7, 0x400}, {0x6, 0x7}, {0x7}, {0x7, 0x8}, {0xf, 0x2}, {0x10000, 0x3}, {0x97b, 0x9}, {0x7, 0xe54b}, {0x8829, 0x9}, {0x20ee, 0x2}, {0x1, 0x34}, {0x52}, {0xe, 0xd6}, {0x8, 0x1}, {0x1ff, 0x8}, {0x1, 0x172}, {0x80, 0xffffffffffffd4a1}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x7}, {0xfff, 0x7}]}, &(0x7f0000005c80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000005cc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000005d00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x53112c00}, &(0x7f0000005e40)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}], 0x32}) bpf$LINK_DETACH(0x22, &(0x7f00000060c0)=r3, 0x4) syz_80211_join_ibss(&(0x7f0000006100)='wlan1\x00', &(0x7f0000006140)=@random="71fc25b15160c394df9a0ed4ec86e12c385e182227", 0x15, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000006180)={'vxcan1\x00'}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r10, 0x6, 0x10, &(0x7f00000061c0), &(0x7f0000006200)=0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000006240)=0xa8, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000006280)={0x0, 0x4, 0x7fff, 0x540}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000001, 0x80010, r2, 0x281ea000) 977.772711ms ago: executing program 3 (id=1633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x1, 0x2}]}]}}, &(0x7f0000000f40)=""/4073, 0x2e, 0xfe9, 0x9}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4050) 948.697191ms ago: executing program 0 (id=1634): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109080, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/229, 0xe5}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0xd00, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1776b4318bae1944}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e21, 0x1002, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfffffffe}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000001000000000000017c0000000000"], 0x30, 0x180}], 0x1, 0x54) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a210100000000000000000100ffff0900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000005f000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000308000b40000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000280)=0x4) 640.564499ms ago: executing program 2 (id=1635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x22060600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000440)=r1}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480080002400000001208"], 0xa4}}, 0x0) 513.327066ms ago: executing program 0 (id=1636): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xfb, 0xa4, 0xfd, 0x0, 0x0, 0x1, 0x28, 0x0, 0x0, 0x7, 0xf7}, 0xe) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) listen(r7, 0x5) connect$inet(r8, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) accept(r7, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) 471.308153ms ago: executing program 4 (id=1637): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2b, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000007480), 0x29e15b2, 0x0) connect$can_j1939(r0, &(0x7f0000000280)={0x1d, r2, 0xb6, {0x0, 0xf}}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4fbff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000019000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0xa}, 0x10}, 0x94) syz_init_net_socket$x25(0x9, 0x2, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000598fbeff39d10ceb00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x19, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRESHEX=r4, @ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xa70bd7370c62f7a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x0, 0x2000002022, &(0x7f0000000300)={0x0, 0x3938700}) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000040)=0x80000004, 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r10 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f00000000c0)={{r10}, 0x1, 0x9, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) 423.913476ms ago: executing program 1 (id=1638): write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x2000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 408.627666ms ago: executing program 2 (id=1639): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="136e7016", 0x4}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000007c0)="a6e82f4006baa3c5c1fb8096a9b98e5cde8466bd", 0x14}], 0x1}}], 0x2, 0x800) shutdown(r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) 281.496033ms ago: executing program 2 (id=1640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040)={0x32, 0xf, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0xed, 0x2, [0x101, 0x8, 0x3, 0x2, 0x7, 0x1320000000, 0x1, 0x4, 0x8]}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x2, 0x1, [0x8000, 0xfa, 0x0, 0x3]}}]}, 0x88) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 147.558004ms ago: executing program 1 (id=1641): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000580)="0bc3ff", 0x3}, {&(0x7f0000000600)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x42, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0xf4, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) 146.892778ms ago: executing program 3 (id=1642): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060805000000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40) 141.296316ms ago: executing program 0 (id=1643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000002d00000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c00048018000180080001006c6f67000c00028008000540ffffff0820000180070001007274000014000280080002400000000108000140000000100900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000002d00000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c00048018000180080001006c6f67000c00028008000540ffffff0820000180070001007274000014000280080002400000000108000140000000100900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (async) 0s ago: executing program 4 (id=1644): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000ff000000000000000000000000000000000008ffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff00000000000000000000000084000500ac1414bb000000000000000000000000000004d22b0000000a00000000000000000000000000000000010000000000000201010005000000020000000100008064010102000000000000000000000000000004d42b"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0xf35, 0x0, 0x7, 0x8, 0x14, 0xa85}, &(0x7f0000000440)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000500)={r8, @in6={{0xa, 0x4e24, 0x8, @private0}}, 0xa, 0x3ff}, &(0x7f00000005c0)=0x90) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x800) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.998475][ T9357] RIP: 0033:0x7f48ffb9e159 [ 212.998496][ T9357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.998515][ T9357] RSP: 002b:00007f4900b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.998539][ T9357] RAX: ffffffffffffffda RBX: 00007f48ffe25fa0 RCX: 00007f48ffb9e159 [ 212.998555][ T9357] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 212.998570][ T9357] RBP: 00007f4900b18090 R08: 0000000000000000 R09: 0000000000000000 [ 212.998583][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.998597][ T9357] R13: 00007f48ffe26038 R14: 00007f48ffe25fa0 R15: 00007fffc88a8688 [ 212.998653][ T9357] [ 213.425499][ T9359] xt_limit: Overflow, try lower: 0/0 [ 213.467782][ T9362] tc_dump_action: action bad kind [ 213.669272][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 213.940772][ T9378] net_ratelimit: 3 callbacks suppressed [ 213.940792][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.941000][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.943215][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.961193][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.961844][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.962275][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.962816][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.963249][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.963663][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.964130][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.114168][ T9382] pim6reg99999999: entered allmulticast mode [ 214.413829][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 214.653185][ T9405] netlink: 32 bytes leftover after parsing attributes in process `syz.0.845'. [ 215.381636][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 215.780457][ T9446] netlink: 'syz.2.854': attribute type 12 has an invalid length. [ 215.780480][ T9446] netlink: 'syz.2.854': attribute type 29 has an invalid length. [ 215.780494][ T9446] netlink: 148 bytes leftover after parsing attributes in process `syz.2.854'. [ 215.780514][ T9446] netlink: 59 bytes leftover after parsing attributes in process `syz.2.854'. [ 216.127580][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 216.148657][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 216.444267][ T9477] macsec0: entered promiscuous mode [ 216.460870][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 216.602429][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 217.513302][ T9521] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 218.718562][ T9560] __nla_validate_parse: 4 callbacks suppressed [ 218.718586][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 218.718671][ T9560] batadv1: left allmulticast mode [ 218.718692][ T9560] batadv1: left promiscuous mode [ 218.719079][ T9560] bridge0: port 4(batadv1) entered disabled state [ 218.758842][ T9560] bond0: left promiscuous mode [ 218.758867][ T9560] bond_slave_0: left promiscuous mode [ 218.773154][ T9560] bond_slave_1: left promiscuous mode [ 218.775370][ T9560] bridge0: port 3(bond0) entered disabled state [ 218.812898][ T9560] bridge_slave_1: left allmulticast mode [ 218.812996][ T9560] bridge_slave_1: left promiscuous mode [ 218.813214][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.842268][ T9560] bridge_slave_0: left allmulticast mode [ 218.842297][ T9560] bridge_slave_0: left promiscuous mode [ 218.844773][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.905660][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 218.905696][ T9563] netlink: 64 bytes leftover after parsing attributes in process `syz.3.883'. [ 218.906128][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 218.906147][ T9563] netlink: 188 bytes leftover after parsing attributes in process `syz.3.883'. [ 219.041501][ T8094] net_ratelimit: 15 callbacks suppressed [ 219.041522][ T8094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.136180][ T9567] netlink: 48 bytes leftover after parsing attributes in process `syz.3.884'. [ 219.305439][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.341197][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.443251][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 219.444696][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.886'. [ 219.575901][ T9582] netlink: 'syz.2.889': attribute type 1 has an invalid length. [ 219.595082][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 219.629676][ T9593] netlink: 'syz.2.889': attribute type 1 has an invalid length. [ 219.629698][ T9593] netlink: 228 bytes leftover after parsing attributes in process `syz.2.889'. [ 219.756119][ T9593] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 219.814978][ T9593] macvlan3: entered promiscuous mode [ 219.815013][ T9593] macvlan3: entered allmulticast mode [ 219.815683][ T9593] bond3: entered promiscuous mode [ 219.815702][ T9593] bridge5: entered promiscuous mode [ 219.847417][ T9593] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 219.859606][ T9605] netlink: 'syz.2.889': attribute type 1 has an invalid length. [ 219.874048][ T9602] netlink: 'syz.2.889': attribute type 1 has an invalid length. [ 219.892120][ T9593] bond3: left promiscuous mode [ 219.892144][ T9593] bridge5: left promiscuous mode [ 219.977226][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.003699][ T8115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.004460][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.029487][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.072133][ T9608] bond3: (slave bridge6): Enslaving as a backup interface with a down link [ 220.097034][ T9612] macvlan3: entered promiscuous mode [ 220.097059][ T9612] macvlan3: entered allmulticast mode [ 220.098101][ T9612] bond3: entered promiscuous mode [ 220.098121][ T9612] bridge5: entered promiscuous mode [ 220.098354][ T9612] bridge6: entered promiscuous mode [ 220.099627][ T9612] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 220.136381][ T9612] bond3: left promiscuous mode [ 220.136406][ T9612] bridge5: left promiscuous mode [ 220.138550][ T9612] bridge6: left promiscuous mode [ 220.151189][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.373278][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.646276][ T9633] nbd: must specify at least one socket [ 220.782984][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.137591][ T9658] xfrm0: left allmulticast mode [ 221.151441][ T9658] geneve2: left promiscuous mode [ 221.199715][ T9658] bond3: left promiscuous mode [ 221.270146][ T3008] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 45709 - 0 [ 221.270198][ T3008] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 45709 - 0 [ 221.270236][ T3008] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 45709 - 0 [ 221.270272][ T3008] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 45709 - 0 [ 221.650441][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 222.409211][ T9670] syzkaller1: entered promiscuous mode [ 222.409237][ T9670] syzkaller1: entered allmulticast mode [ 222.540091][ T9695] vlan3: entered promiscuous mode [ 222.888248][ T9704] netlink: 'syz.0.917': attribute type 2 has an invalid length. [ 222.967809][ T9704] : entered promiscuous mode [ 223.006949][ T9704] netlink: 'syz.0.917': attribute type 2 has an invalid length. [ 223.008794][ T9707] netlink: 'syz.1.918': attribute type 5 has an invalid length. [ 223.050463][ T8094] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.050515][ T8094] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.050554][ T8094] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.050591][ T8094] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.337472][ T9712] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 223.476454][ T9718] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 223.495652][ T9718] bond4 (unregistering): Released all slaves [ 223.565942][ T9719] batadv_slave_1: entered promiscuous mode [ 223.638669][ T9729] bridge3: entered promiscuous mode [ 223.706331][ T9729] bond3: (slave bridge3): making interface the new active one [ 223.709030][ T9729] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 223.762032][ T9740] __nla_validate_parse: 11 callbacks suppressed [ 223.762070][ T9740] netlink: 68 bytes leftover after parsing attributes in process `syz.2.925'. [ 223.763831][ T9746] netlink: 'syz.4.926': attribute type 29 has an invalid length. [ 224.213619][ T9715] batadv_slave_1: left promiscuous mode [ 224.592817][ T3008] net_ratelimit: 7 callbacks suppressed [ 224.592836][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.615288][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.770172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.093500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.650313][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.690350][ T8094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.593719][ T9736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.692339][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.694835][ T9770] netlink: 56 bytes leftover after parsing attributes in process `syz.1.930'. [ 226.790650][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.855144][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.025528][ T9785] FAULT_INJECTION: forcing a failure. [ 227.025528][ T9785] name failslab, interval 1, probability 0, space 0, times 0 [ 227.025565][ T9785] CPU: 1 UID: 0 PID: 9785 Comm: syz.2.935 Not tainted syzkaller #0 PREEMPT(full) [ 227.025588][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.025602][ T9785] Call Trace: [ 227.025610][ T9785] [ 227.025619][ T9785] dump_stack_lvl+0xe8/0x150 [ 227.025658][ T9785] should_fail_ex+0x410/0x560 [ 227.025687][ T9785] ? __alloc_skb+0x1db/0x7a0 [ 227.025712][ T9785] should_failslab+0xa8/0x100 [ 227.025741][ T9785] ? __alloc_skb+0x1db/0x7a0 [ 227.025762][ T9785] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 227.025808][ T9785] ? __alloc_skb+0x18d/0x7a0 [ 227.025833][ T9785] ? __alloc_skb+0x1db/0x7a0 [ 227.025889][ T9785] __alloc_skb+0x1db/0x7a0 [ 227.025924][ T9785] alloc_skb_with_frags+0xc6/0x760 [ 227.025965][ T9785] sock_alloc_send_pskb+0x878/0x990 [ 227.026027][ T9785] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 227.026058][ T9785] ? kasan_quarantine_put+0xbb/0x1f0 [ 227.026081][ T9785] ? lockdep_hardirqs_on+0x7b/0x110 [ 227.026109][ T9785] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 227.026142][ T9785] ? kmem_cache_free+0x182/0x650 [ 227.026167][ T9785] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 227.026202][ T9785] unix_dgram_sendmsg+0x4da/0x17b0 [ 227.026237][ T9785] ? __lock_acquire+0x747/0x2de0 [ 227.026277][ T9785] ? __lock_acquire+0x747/0x2de0 [ 227.026300][ T9785] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 227.026338][ T9785] ? aa_sock_msg_perm+0x129/0x210 [ 227.026372][ T9785] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 227.026410][ T9785] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 227.026445][ T9785] sock_sendmsg_nosec+0x13a/0x180 [ 227.026484][ T9785] ____sys_sendmsg+0x54e/0x850 [ 227.026520][ T9785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.026559][ T9785] ? import_iovec+0x73/0xa0 [ 227.026591][ T9785] ___sys_sendmsg+0x2a5/0x360 [ 227.026620][ T9785] ? __lock_acquire+0x747/0x2de0 [ 227.026656][ T9785] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.026683][ T9785] ? __lock_acquire+0x747/0x2de0 [ 227.026712][ T9785] ? kstrtouint+0x6e/0xe0 [ 227.026797][ T9785] __sys_sendmmsg+0x273/0x4d0 [ 227.026854][ T9785] ? __pfx___sys_sendmmsg+0x10/0x10 [ 227.026894][ T9785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.026936][ T9785] ? ksys_write+0x242/0x270 [ 227.026972][ T9785] ? __pfx_ksys_write+0x10/0x10 [ 227.027014][ T9785] __x64_sys_sendmmsg+0xa0/0xc0 [ 227.027046][ T9785] do_syscall_64+0x166/0x520 [ 227.027070][ T9785] ? trace_irq_disable+0x3b/0x140 [ 227.027093][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.027116][ T9785] ? clear_bhb_loop+0x70/0xc0 [ 227.027144][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.027167][ T9785] RIP: 0033:0x7f999c79e159 [ 227.027188][ T9785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.027207][ T9785] RSP: 002b:00007f999d6df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 227.027233][ T9785] RAX: ffffffffffffffda RBX: 00007f999ca25fa0 RCX: 00007f999c79e159 [ 227.027249][ T9785] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 227.027264][ T9785] RBP: 00007f999d6df090 R08: 0000000000000000 R09: 0000000000000000 [ 227.027279][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.027292][ T9785] R13: 00007f999ca26038 R14: 00007f999ca25fa0 R15: 00007fffb1e0e488 [ 227.027328][ T9785] [ 227.674618][ T9801] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 227.688329][ T9795] x_tables: duplicate underflow at hook 3 [ 227.733623][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.751399][ T9801] bond2: entered promiscuous mode [ 227.751792][ T9801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.778203][ T9801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 228.087603][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.942'. [ 228.087981][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.942'. [ 228.237980][ T9806] bond2: (slave bridge1): making interface the new active one [ 228.238010][ T9806] bridge1: entered promiscuous mode [ 228.274321][ T9806] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 228.674809][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 228.783342][ T9845] block nbd5: Unsupported socket: should be TCP or UNIX. [ 228.801299][ T9845] block nbd5: Unsupported socket: should be TCP or UNIX. [ 228.812889][ T9845] block nbd5: Unsupported socket: should be TCP or UNIX. [ 228.833923][ T9845] block nbd5: Unsupported socket: should be TCP or UNIX. [ 228.869382][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 228.877166][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 228.905388][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 228.912165][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 228.936381][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 228.960790][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 228.967281][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 228.985133][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 228.993610][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.008522][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.019308][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.034077][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.047699][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.063254][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.067927][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.103409][ T9845] block nbd6: Unsupported socket: should be TCP or UNIX. [ 229.121284][ T9845] block nbd5: Unsupported socket: should be TCP or UNIX. [ 229.183303][ T9845] block nbd7: Unsupported socket: should be TCP or UNIX. [ 229.185237][ T9845] block nbd7: Unsupported socket: should be TCP or UNIX. [ 229.221839][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.247823][ T9845] block nbd6: Unsupported socket: should be TCP or UNIX. [ 229.302134][ T9867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 229.315465][ T9845] block nbd7: Unsupported socket: should be TCP or UNIX. [ 229.352411][ T9845] block nbd7: Unsupported socket: should be TCP or UNIX. [ 229.390550][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.392894][ T9845] block nbd4: Unsupported socket: should be TCP or UNIX. [ 229.656136][ T9878] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 229.675656][ T9879] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 229.810766][ T7419] net_ratelimit: 4 callbacks suppressed [ 229.810790][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.813902][ T9886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.954'. [ 229.890936][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.893992][ T9878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.000025][ T9882] bond4: (slave ip6erspan0): making interface the new active one [ 230.002275][ T9882] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 230.042456][ T9890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.043260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.090300][ T8091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.188316][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 230.214777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.385318][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 230.551315][ T9906] netlink: 64 bytes leftover after parsing attributes in process `syz.2.960'. [ 230.665575][ T9914] FAULT_INJECTION: forcing a failure. [ 230.665575][ T9914] name failslab, interval 1, probability 0, space 0, times 0 [ 230.665612][ T9914] CPU: 0 UID: 0 PID: 9914 Comm: syz.3.962 Not tainted syzkaller #0 PREEMPT(full) [ 230.665638][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.665652][ T9914] Call Trace: [ 230.665661][ T9914] [ 230.665671][ T9914] dump_stack_lvl+0xe8/0x150 [ 230.665710][ T9914] should_fail_ex+0x410/0x560 [ 230.665739][ T9914] ? __alloc_skb+0x1db/0x7a0 [ 230.665765][ T9914] should_failslab+0xa8/0x100 [ 230.665794][ T9914] ? __alloc_skb+0x1db/0x7a0 [ 230.665816][ T9914] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 230.665852][ T9914] ? __alloc_skb+0x18d/0x7a0 [ 230.665878][ T9914] ? __alloc_skb+0x1db/0x7a0 [ 230.665910][ T9914] __alloc_skb+0x1db/0x7a0 [ 230.665940][ T9914] alloc_skb_with_frags+0xc6/0x760 [ 230.665981][ T9914] sock_alloc_send_pskb+0x878/0x990 [ 230.666037][ T9914] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 230.666068][ T9914] ? kasan_quarantine_put+0xbb/0x1f0 [ 230.666090][ T9914] ? lockdep_hardirqs_on+0x7b/0x110 [ 230.666120][ T9914] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 230.666154][ T9914] ? kmem_cache_free+0x182/0x650 [ 230.666179][ T9914] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 230.666215][ T9914] unix_dgram_sendmsg+0x4da/0x17b0 [ 230.666252][ T9914] ? __lock_acquire+0x747/0x2de0 [ 230.666293][ T9914] ? __lock_acquire+0x747/0x2de0 [ 230.666316][ T9914] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 230.666355][ T9914] ? aa_sock_msg_perm+0x129/0x210 [ 230.666397][ T9914] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 230.666436][ T9914] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 230.666471][ T9914] sock_sendmsg_nosec+0x13a/0x180 [ 230.666511][ T9914] ____sys_sendmsg+0x54e/0x850 [ 230.666546][ T9914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.666585][ T9914] ? import_iovec+0x73/0xa0 [ 230.666618][ T9914] ___sys_sendmsg+0x2a5/0x360 [ 230.666646][ T9914] ? __lock_acquire+0x747/0x2de0 [ 230.666674][ T9914] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.666701][ T9914] ? __lock_acquire+0x747/0x2de0 [ 230.666729][ T9914] ? kstrtouint+0x6e/0xe0 [ 230.666807][ T9914] __sys_sendmmsg+0x273/0x4d0 [ 230.666843][ T9914] ? __pfx___sys_sendmmsg+0x10/0x10 [ 230.666882][ T9914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.666923][ T9914] ? ksys_write+0x242/0x270 [ 230.666960][ T9914] ? __pfx_ksys_write+0x10/0x10 [ 230.667001][ T9914] __x64_sys_sendmmsg+0xa0/0xc0 [ 230.667034][ T9914] do_syscall_64+0x166/0x520 [ 230.667059][ T9914] ? trace_irq_disable+0x3b/0x140 [ 230.667082][ T9914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.667106][ T9914] ? clear_bhb_loop+0x70/0xc0 [ 230.667133][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.667156][ T9914] RIP: 0033:0x7f768099e159 [ 230.667177][ T9914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.667197][ T9914] RSP: 002b:00007f7681799028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 230.667222][ T9914] RAX: ffffffffffffffda RBX: 00007f7680c25fa0 RCX: 00007f768099e159 [ 230.667239][ T9914] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 230.667255][ T9914] RBP: 00007f7681799090 R08: 0000000000000000 R09: 0000000000000000 [ 230.667270][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.667284][ T9914] R13: 00007f7680c26038 R14: 00007f7680c25fa0 R15: 00007ffeb98857a8 [ 230.667319][ T9914] [ 230.853546][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.191600][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.222415][ T9921] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.223126][ T9921] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.269779][ T9938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.966'. [ 231.567682][ T9948] netlink: 'syz.1.970': attribute type 4 has an invalid length. [ 231.611959][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.969'. [ 231.716635][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 231.795168][ T9958] Cannot find del_set index 17 as target [ 231.871024][ T9956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.971'. [ 231.871067][ T9956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.971'. [ 231.901718][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.903692][ T9968] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 231.903809][ T9968] syzkaller1: linktype set to 769 [ 231.927940][ T9964] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 232.065590][ T9983] FAULT_INJECTION: forcing a failure. [ 232.065590][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.065625][ T9983] CPU: 1 UID: 0 PID: 9983 Comm: syz.4.975 Not tainted syzkaller #0 PREEMPT(full) [ 232.065650][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.065664][ T9983] Call Trace: [ 232.065672][ T9983] [ 232.065682][ T9983] dump_stack_lvl+0xe8/0x150 [ 232.065720][ T9983] should_fail_ex+0x410/0x560 [ 232.065750][ T9983] _copy_from_user+0x2d/0xb0 [ 232.065780][ T9983] ___sys_sendmsg+0x1c6/0x360 [ 232.065808][ T9983] ? __lock_acquire+0x747/0x2de0 [ 232.065835][ T9983] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.065862][ T9983] ? __lock_acquire+0x747/0x2de0 [ 232.065890][ T9983] ? kstrtouint+0x6e/0xe0 [ 232.065966][ T9983] __sys_sendmmsg+0x273/0x4d0 [ 232.066001][ T9983] ? __pfx___sys_sendmmsg+0x10/0x10 [ 232.066044][ T9983] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.066087][ T9983] ? ksys_write+0x242/0x270 [ 232.066124][ T9983] ? __pfx_ksys_write+0x10/0x10 [ 232.066165][ T9983] __x64_sys_sendmmsg+0xa0/0xc0 [ 232.066198][ T9983] do_syscall_64+0x166/0x520 [ 232.066222][ T9983] ? trace_irq_disable+0x3b/0x140 [ 232.066245][ T9983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.066277][ T9983] ? clear_bhb_loop+0x70/0xc0 [ 232.066306][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.066329][ T9983] RIP: 0033:0x7f8cdc99e159 [ 232.066347][ T9983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.066364][ T9983] RSP: 002b:00007f8cdd88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 232.066385][ T9983] RAX: ffffffffffffffda RBX: 00007f8cdcc25fa0 RCX: 00007f8cdc99e159 [ 232.066398][ T9983] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 232.066410][ T9983] RBP: 00007f8cdd88d090 R08: 0000000000000000 R09: 0000000000000000 [ 232.066433][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.066443][ T9983] R13: 00007f8cdcc26038 R14: 00007f8cdcc25fa0 R15: 00007ffca0e972b8 [ 232.066470][ T9983] [ 232.083951][ T10] syzkaller1: tun_net_xmit 90 [ 232.296378][ T8091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.031040][T10056] netlink: 'syz.0.984': attribute type 5 has an invalid length. [ 234.106308][T10052] netlink: 'syz.4.983': attribute type 4 has an invalid length. [ 234.290401][T10065] macsec1: entered allmulticast mode [ 234.290433][T10065] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 234.290868][T10065] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 234.299379][T10069] FAULT_INJECTION: forcing a failure. [ 234.299379][T10069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.299416][T10069] CPU: 0 UID: 0 PID: 10069 Comm: syz.1.987 Not tainted syzkaller #0 PREEMPT(full) [ 234.299441][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.299455][T10069] Call Trace: [ 234.299464][T10069] [ 234.299473][T10069] dump_stack_lvl+0xe8/0x150 [ 234.299513][T10069] should_fail_ex+0x410/0x560 [ 234.299551][T10069] _copy_from_user+0x2d/0xb0 [ 234.299582][T10069] ___sys_sendmsg+0x1c6/0x360 [ 234.299610][T10069] ? __lock_acquire+0x747/0x2de0 [ 234.299639][T10069] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.299666][T10069] ? __lock_acquire+0x747/0x2de0 [ 234.299694][T10069] ? kstrtouint+0x6e/0xe0 [ 234.299774][T10069] __sys_sendmmsg+0x273/0x4d0 [ 234.299811][T10069] ? __pfx___sys_sendmmsg+0x10/0x10 [ 234.299851][T10069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 234.299897][T10069] ? ksys_write+0x242/0x270 [ 234.299934][T10069] ? __pfx_ksys_write+0x10/0x10 [ 234.299975][T10069] __x64_sys_sendmmsg+0xa0/0xc0 [ 234.300008][T10069] do_syscall_64+0x166/0x520 [ 234.300032][T10069] ? trace_irq_disable+0x3b/0x140 [ 234.300054][T10069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.300079][T10069] ? clear_bhb_loop+0x70/0xc0 [ 234.300107][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.300130][T10069] RIP: 0033:0x7f48ffb9e159 [ 234.300151][T10069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.300171][T10069] RSP: 002b:00007f4900b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 234.300197][T10069] RAX: ffffffffffffffda RBX: 00007f48ffe25fa0 RCX: 00007f48ffb9e159 [ 234.300214][T10069] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 234.300230][T10069] RBP: 00007f4900b18090 R08: 0000000000000000 R09: 0000000000000000 [ 234.300244][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.300258][T10069] R13: 00007f48ffe26038 R14: 00007f48ffe25fa0 R15: 00007fffc88a8688 [ 234.300294][T10069] [ 234.567458][ T5277] veth1_vlan: left promiscuous mode [ 234.937743][T10079] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 235.013091][ T7420] net_ratelimit: 8 callbacks suppressed [ 235.013115][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.037022][T10071] syzkaller0: entered promiscuous mode [ 235.037051][T10071] syzkaller0: entered allmulticast mode [ 235.178651][T10092] netlink: 'syz.4.996': attribute type 9 has an invalid length. [ 235.249855][T10098] netlink: 'syz.4.996': attribute type 9 has an invalid length. [ 235.333535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.337418][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.670725][ T8094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.061174][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.787361][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.094876][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.872292][ T5277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.887859][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.907169][T10127] pim6reg: entered allmulticast mode [ 237.983840][T10135] FAULT_INJECTION: forcing a failure. [ 237.983840][T10135] name failslab, interval 1, probability 0, space 0, times 0 [ 237.983876][T10135] CPU: 1 UID: 0 PID: 10135 Comm: syz.1.1002 Not tainted syzkaller #0 PREEMPT(full) [ 237.983903][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.983917][T10135] Call Trace: [ 237.983924][T10135] [ 237.983933][T10135] dump_stack_lvl+0xe8/0x150 [ 237.983971][T10135] should_fail_ex+0x410/0x560 [ 237.983999][T10135] ? alloc_slab_obj_exts+0x5c/0x180 [ 237.984033][T10135] should_failslab+0xa8/0x100 [ 237.984063][T10135] ? alloc_slab_obj_exts+0x5c/0x180 [ 237.984093][T10135] __kmalloc_flags_noprof+0x128/0x7a0 [ 237.984130][T10135] ? alloc_slab_obj_exts+0x5c/0x180 [ 237.984173][T10135] alloc_slab_obj_exts+0x5c/0x180 [ 237.984209][T10135] __memcg_slab_post_alloc_hook+0x64e/0xf80 [ 237.984255][T10135] ? __alloc_skb+0x1db/0x7a0 [ 237.984280][T10135] kmem_cache_alloc_node_noprof+0x406/0x610 [ 237.984317][T10135] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 237.984350][T10135] ? __alloc_skb+0x1db/0x7a0 [ 237.984373][T10135] ? __alloc_skb+0x1db/0x7a0 [ 237.984404][T10135] __alloc_skb+0x1db/0x7a0 [ 237.984434][T10135] alloc_skb_with_frags+0xc6/0x760 [ 237.984474][T10135] sock_alloc_send_pskb+0x878/0x990 [ 237.984526][T10135] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 237.984556][T10135] ? kasan_quarantine_put+0xbb/0x1f0 [ 237.984579][T10135] ? lockdep_hardirqs_on+0x7b/0x110 [ 237.984608][T10135] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 237.984640][T10135] ? kmem_cache_free+0x182/0x650 [ 237.984671][T10135] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 237.984706][T10135] unix_dgram_sendmsg+0x4da/0x17b0 [ 237.984743][T10135] ? __lock_acquire+0x747/0x2de0 [ 237.984782][T10135] ? __lock_acquire+0x747/0x2de0 [ 237.984804][T10135] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 237.984843][T10135] ? aa_sock_msg_perm+0x129/0x210 [ 237.984875][T10135] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 237.984913][T10135] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 237.984948][T10135] sock_sendmsg_nosec+0x13a/0x180 [ 237.984985][T10135] ____sys_sendmsg+0x54e/0x850 [ 237.985021][T10135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.985059][T10135] ? import_iovec+0x73/0xa0 [ 237.985090][T10135] ___sys_sendmsg+0x2a5/0x360 [ 237.985126][T10135] ? __lock_acquire+0x747/0x2de0 [ 237.985154][T10135] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.985181][T10135] ? __lock_acquire+0x747/0x2de0 [ 237.985209][T10135] ? kstrtouint+0x6e/0xe0 [ 237.985288][T10135] __sys_sendmmsg+0x273/0x4d0 [ 237.985324][T10135] ? __pfx___sys_sendmmsg+0x10/0x10 [ 237.985364][T10135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.985407][T10135] ? ksys_write+0x242/0x270 [ 237.985445][T10135] ? __pfx_ksys_write+0x10/0x10 [ 237.985487][T10135] __x64_sys_sendmmsg+0xa0/0xc0 [ 237.985520][T10135] do_syscall_64+0x166/0x520 [ 237.985544][T10135] ? trace_irq_disable+0x3b/0x140 [ 237.985567][T10135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.985591][T10135] ? clear_bhb_loop+0x70/0xc0 [ 237.985619][T10135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.985643][T10135] RIP: 0033:0x7f48ffb9e159 [ 237.985663][T10135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.985683][T10135] RSP: 002b:00007f4900b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 237.985709][T10135] RAX: ffffffffffffffda RBX: 00007f48ffe25fa0 RCX: 00007f48ffb9e159 [ 237.985727][T10135] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 237.985742][T10135] RBP: 00007f4900b18090 R08: 0000000000000000 R09: 0000000000000000 [ 237.985756][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.985770][T10135] R13: 00007f48ffe26038 R14: 00007f48ffe25fa0 R15: 00007fffc88a8688 [ 237.985806][T10135] [ 238.139213][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.379715][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.424765][T10128] pim6reg: left allmulticast mode [ 238.658037][T10127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.073898][T10163] netlink: 'syz.4.1008': attribute type 1 has an invalid length. [ 239.299583][T10171] syzkaller0: entered promiscuous mode [ 239.299609][T10171] syzkaller0: entered allmulticast mode [ 239.319098][T10173] syzkaller0: entered promiscuous mode [ 239.319124][T10173] syzkaller0: entered allmulticast mode [ 239.497662][T10179] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 239.819295][T10179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.908373][T10183] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 240.124922][ T8103] net_ratelimit: 2 callbacks suppressed [ 240.124945][ T8103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.210752][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.523475][T10235] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 240.523518][T10235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.843287][T10242] batadv_slave_1: entered allmulticast mode [ 240.988067][T10247] syzkaller0: entered promiscuous mode [ 240.988092][T10247] syzkaller0: entered allmulticast mode [ 241.221704][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.238373][T10242] team0: entered allmulticast mode [ 241.238398][T10242] team_slave_0: entered allmulticast mode [ 241.238418][T10242] team_slave_1: entered allmulticast mode [ 241.238644][T10257] batadv_slave_1: left allmulticast mode [ 241.265249][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.344791][T10241] team0: left allmulticast mode [ 241.344815][T10241] team_slave_0: left allmulticast mode [ 241.344839][T10241] team_slave_1: left allmulticast mode [ 241.411484][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.851633][T10290] __nla_validate_parse: 7 callbacks suppressed [ 241.851654][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1036'. [ 242.036526][T10295] sctp: [Deprecated]: syz.1.1038 (pid 10295) Use of int in maxseg socket option. [ 242.036526][T10295] Use struct sctp_assoc_value instead [ 242.089288][T10303] bridge0: entered promiscuous mode [ 242.115025][T10303] macvlan2: entered promiscuous mode [ 242.206014][T10310] netlink: 'syz.1.1041': attribute type 10 has an invalid length. [ 242.322529][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.327301][T10311] netlink: 'syz.1.1041': attribute type 10 has an invalid length. [ 242.350736][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.364806][T10310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.367763][T10310] team0: Port device netdevsim1 added [ 242.394231][T10317] syzkaller0: entered promiscuous mode [ 242.394259][T10317] syzkaller0: entered allmulticast mode [ 242.424347][T10311] team0: Port device netdevsim1 removed [ 242.427927][T10311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.443463][T10311] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 242.449229][T10311] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 242.476451][T10324] netlink: 'syz.4.1045': attribute type 1 has an invalid length. [ 242.534572][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1045'. [ 242.534599][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 242.626514][T10324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.751366][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1045'. [ 242.752442][T10330] netlink: 'syz.1.1046': attribute type 1 has an invalid length. [ 242.789286][T10335] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1049'. [ 242.966541][T10335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.204702][T10355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1054'. [ 243.208859][T10355] xt_socket: unknown flags 0x4c [ 243.280188][T10363] x_tables: duplicate underflow at hook 1 [ 243.334242][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.554338][T10375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1057'. [ 243.671851][T10381] syzkaller1: entered allmulticast mode [ 243.766723][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 243.852161][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 244.161953][T10386] syzkaller0: entered promiscuous mode [ 244.161979][T10386] syzkaller0: entered allmulticast mode [ 244.370226][T10413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1067'. [ 245.411616][ T7422] net_ratelimit: 17 callbacks suppressed [ 245.411642][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.571158][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.575216][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.577731][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.578329][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.700354][ T8091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.455973][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.811921][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.006012][T10448] __nla_validate_parse: 1 callbacks suppressed [ 247.006034][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1072'. [ 247.104054][T10452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.104238][T10452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.189653][T10451] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1075'. [ 248.050139][T10495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1085'. [ 248.287529][T10468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.688057][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 249.097666][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1097'. [ 249.099700][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1097'. [ 249.189572][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 249.326041][T10551] netlink: 'syz.4.1100': attribute type 8 has an invalid length. [ 249.326066][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 249.358041][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 249.531299][T10558] syzkaller1: entered promiscuous mode [ 249.531323][T10558] syzkaller1: entered allmulticast mode [ 250.464835][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327ca000: rx timeout, send abort [ 250.612302][ T7422] net_ratelimit: 267 callbacks suppressed [ 250.612323][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.806566][T10592] 8021q: VLANs not supported on xfrm0 [ 250.964985][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327b8400: rx timeout, send abort [ 250.966218][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327ca000: abort rx timeout. Force session deactivation [ 251.280232][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.403630][T10611] ipvlan2: entered promiscuous mode [ 251.418362][T10611] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 251.418619][T10611] team0: Device ipvlan2 failed to register rx_handler [ 251.465061][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327b8400: abort rx timeout. Force session deactivation [ 251.628770][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 251.660455][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.730463][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.998816][T10638] ip6t_ah: unknown flags 4 [ 252.143305][T10649] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1118'. [ 252.231317][T10643] TC_ACT_REPEAT abuse ? [ 252.331186][T10656] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1120'. [ 252.380932][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.453969][T10659] netlink: 'syz.2.1119': attribute type 5 has an invalid length. [ 252.459438][T10662] netlink: 'syz.2.1119': attribute type 5 has an invalid length. [ 252.692064][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.199512][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 253.323580][T10689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.323948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.325410][T10689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.446971][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'. [ 254.826023][T10754] netlink: 4384 bytes leftover after parsing attributes in process `syz.3.1133'. [ 254.828509][T10755] netlink: 4384 bytes leftover after parsing attributes in process `syz.3.1133'. [ 254.862553][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 255.333699][T10766] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 255.384849][T10771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1137'. [ 255.411522][T10766] team0: Port device dummy0 added [ 255.701728][ T8091] net_ratelimit: 8 callbacks suppressed [ 255.701751][ T8091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.793659][T10801] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1141'. [ 255.812686][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.825448][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.407416][T10826] openvswitch: netlink: Message has 8 unknown bytes. [ 256.407458][T10826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.529552][T10832] netlink: 'syz.2.1147': attribute type 12 has an invalid length. [ 256.671512][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 256.762553][T10833] sctp: [Deprecated]: syz.2.1147 (pid 10833) Use of int in max_burst socket option. [ 256.762553][T10833] Use struct sctp_assoc_value instead [ 256.834902][ T8115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.854534][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.224030][T10861] FAULT_INJECTION: forcing a failure. [ 257.224030][T10861] name failslab, interval 1, probability 0, space 0, times 0 [ 257.224068][T10861] CPU: 0 UID: 0 PID: 10861 Comm: syz.2.1156 Not tainted syzkaller #0 PREEMPT(full) [ 257.224094][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.224108][T10861] Call Trace: [ 257.224117][T10861] [ 257.224127][T10861] dump_stack_lvl+0xe8/0x150 [ 257.224165][T10861] should_fail_ex+0x410/0x560 [ 257.224194][T10861] ? __alloc_skb+0x1db/0x7a0 [ 257.224220][T10861] should_failslab+0xa8/0x100 [ 257.224250][T10861] ? __alloc_skb+0x1db/0x7a0 [ 257.224282][T10861] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 257.224317][T10861] ? __alloc_skb+0x18d/0x7a0 [ 257.224343][T10861] ? __alloc_skb+0x1db/0x7a0 [ 257.224375][T10861] __alloc_skb+0x1db/0x7a0 [ 257.224405][T10861] alloc_skb_with_frags+0xc6/0x760 [ 257.224446][T10861] sock_alloc_send_pskb+0x878/0x990 [ 257.224495][T10861] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 257.224524][T10861] ? kasan_quarantine_put+0xbb/0x1f0 [ 257.224546][T10861] ? lockdep_hardirqs_on+0x7b/0x110 [ 257.224574][T10861] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 257.224607][T10861] ? kmem_cache_free+0x182/0x650 [ 257.224632][T10861] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 257.224670][T10861] unix_dgram_sendmsg+0x4da/0x17b0 [ 257.224706][T10861] ? __lock_acquire+0x747/0x2de0 [ 257.224746][T10861] ? __lock_acquire+0x747/0x2de0 [ 257.224768][T10861] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 257.224807][T10861] ? aa_sock_msg_perm+0x129/0x210 [ 257.224841][T10861] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 257.224878][T10861] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 257.224913][T10861] sock_sendmsg_nosec+0x13a/0x180 [ 257.224952][T10861] ____sys_sendmsg+0x54e/0x850 [ 257.224987][T10861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.225026][T10861] ? import_iovec+0x73/0xa0 [ 257.225059][T10861] ___sys_sendmsg+0x2a5/0x360 [ 257.225087][T10861] ? __lock_acquire+0x747/0x2de0 [ 257.225114][T10861] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.225141][T10861] ? __lock_acquire+0x747/0x2de0 [ 257.225170][T10861] ? kstrtouint+0x6e/0xe0 [ 257.225248][T10861] __sys_sendmmsg+0x273/0x4d0 [ 257.225293][T10861] ? __pfx___sys_sendmmsg+0x10/0x10 [ 257.225333][T10861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 257.225376][T10861] ? ksys_write+0x242/0x270 [ 257.225414][T10861] ? __pfx_ksys_write+0x10/0x10 [ 257.225456][T10861] __x64_sys_sendmmsg+0xa0/0xc0 [ 257.225488][T10861] do_syscall_64+0x166/0x520 [ 257.225513][T10861] ? trace_irq_disable+0x3b/0x140 [ 257.225535][T10861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.225560][T10861] ? clear_bhb_loop+0x70/0xc0 [ 257.225588][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.225612][T10861] RIP: 0033:0x7f999c79e159 [ 257.225633][T10861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.225653][T10861] RSP: 002b:00007f999d6df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 257.225678][T10861] RAX: ffffffffffffffda RBX: 00007f999ca25fa0 RCX: 00007f999c79e159 [ 257.225695][T10861] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 257.225709][T10861] RBP: 00007f999d6df090 R08: 0000000000000000 R09: 0000000000000000 [ 257.225724][T10861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.225738][T10861] R13: 00007f999ca26038 R14: 00007f999ca25fa0 R15: 00007fffb1e0e488 [ 257.225773][T10861] [ 257.715402][T10866] __nla_validate_parse: 1 callbacks suppressed [ 257.715427][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 257.811210][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.896179][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.941089][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.934432][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.851258][ T5722] net_ratelimit: 3 callbacks suppressed [ 260.851277][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.014581][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.260347][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.054384][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.056641][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.058412][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.058863][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.210247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.370348][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.103665][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.211683][ T7422] net_ratelimit: 7 callbacks suppressed [ 266.211708][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.780372][ T8115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.930614][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.254578][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.880363][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.294133][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.980339][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.331174][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.970368][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.080494][ T8115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.414473][ T7420] net_ratelimit: 2 callbacks suppressed [ 271.414491][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.280870][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.454334][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.012865][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.380818][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.494087][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.732146][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.480401][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.534230][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.580475][ T8115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.614423][ T7419] net_ratelimit: 2 callbacks suppressed [ 276.614442][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.680197][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.654925][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.780378][ T8115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.693797][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.880343][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.091286][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.734257][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.990275][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.774412][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.814227][ T7419] net_ratelimit: 1 callbacks suppressed [ 281.814246][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.130337][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.200514][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.854492][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.310502][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.331650][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.893771][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.410405][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.930475][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.170723][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.014167][ T7420] net_ratelimit: 3 callbacks suppressed [ 287.014186][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.710370][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.053690][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.210870][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.820525][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.093982][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.920486][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.133763][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.030397][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.174397][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.140384][ T1096] net_ratelimit: 1 callbacks suppressed [ 292.140408][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.214104][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.931522][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.250554][ T8094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.254040][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.290307][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.293930][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.350336][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.334069][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.450566][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.330484][ T5729] net_ratelimit: 2 callbacks suppressed [ 297.330503][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.414207][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.650861][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.455150][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.750416][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.494753][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.850456][ T8094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.370308][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.533787][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.950778][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.532943][ T5729] net_ratelimit: 2 callbacks suppressed [ 302.532962][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.613750][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.150369][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.410245][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.653785][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.250388][ T8115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.694262][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.350350][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.734946][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.450427][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.550340][ T1096] net_ratelimit: 2 callbacks suppressed [ 307.550359][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.813855][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.660344][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.854365][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.490287][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.770213][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.893673][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.870339][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.934047][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.970475][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.014414][ T7422] net_ratelimit: 3 callbacks suppressed [ 313.014432][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.070251][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.055164][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.180228][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.295821][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 314.367172][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 314.432033][T10883] bond0 (unregistering): Released all slaves [ 314.490998][T10879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1160'. [ 314.551665][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 314.823715][T10879] xt_IDLETIMER: label is empty or not nul-terminated [ 315.054764][T10911] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 315.095828][T10895] udevd[10895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 315.127180][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.142461][T10919] FAULT_INJECTION: forcing a failure. [ 315.142461][T10919] name failslab, interval 1, probability 0, space 0, times 0 [ 315.142500][T10919] CPU: 1 UID: 0 PID: 10919 Comm: syz.1.1167 Not tainted syzkaller #0 PREEMPT(full) [ 315.142527][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.142556][T10919] Call Trace: [ 315.142565][T10919] [ 315.142575][T10919] dump_stack_lvl+0xe8/0x150 [ 315.142615][T10919] should_fail_ex+0x410/0x560 [ 315.142646][T10919] ? alloc_slab_obj_exts+0x5c/0x180 [ 315.142680][T10919] should_failslab+0xa8/0x100 [ 315.142712][T10919] ? alloc_slab_obj_exts+0x5c/0x180 [ 315.142743][T10919] __kmalloc_flags_noprof+0x128/0x7a0 [ 315.142770][T10919] ? alloc_slab_obj_exts+0x5c/0x180 [ 315.142817][T10919] alloc_slab_obj_exts+0x5c/0x180 [ 315.142855][T10919] __memcg_slab_post_alloc_hook+0x64e/0xf80 [ 315.142904][T10919] ? __alloc_skb+0x1db/0x7a0 [ 315.142930][T10919] kmem_cache_alloc_node_noprof+0x406/0x610 [ 315.142967][T10919] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 315.143001][T10919] ? __alloc_skb+0x1db/0x7a0 [ 315.143024][T10919] ? __alloc_skb+0x1db/0x7a0 [ 315.143056][T10919] __alloc_skb+0x1db/0x7a0 [ 315.143087][T10919] alloc_skb_with_frags+0xc6/0x760 [ 315.143128][T10919] sock_alloc_send_pskb+0x878/0x990 [ 315.143181][T10919] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 315.143211][T10919] ? kasan_quarantine_put+0xbb/0x1f0 [ 315.143235][T10919] ? lockdep_hardirqs_on+0x7b/0x110 [ 315.143263][T10919] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 315.143297][T10919] ? kmem_cache_free+0x182/0x650 [ 315.143322][T10919] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 315.143357][T10919] unix_dgram_sendmsg+0x4da/0x17b0 [ 315.143393][T10919] ? __lock_acquire+0x747/0x2de0 [ 315.143434][T10919] ? __lock_acquire+0x747/0x2de0 [ 315.143457][T10919] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 315.143496][T10919] ? aa_sock_msg_perm+0x129/0x210 [ 315.143529][T10919] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 315.143567][T10919] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 315.143601][T10919] sock_sendmsg_nosec+0x13a/0x180 [ 315.143640][T10919] ____sys_sendmsg+0x54e/0x850 [ 315.143676][T10919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.143716][T10919] ? import_iovec+0x73/0xa0 [ 315.143748][T10919] ___sys_sendmsg+0x2a5/0x360 [ 315.143776][T10919] ? __lock_acquire+0x747/0x2de0 [ 315.143804][T10919] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.143840][T10919] ? __lock_acquire+0x747/0x2de0 [ 315.143868][T10919] ? kstrtouint+0x6e/0xe0 [ 315.143948][T10919] __sys_sendmmsg+0x273/0x4d0 [ 315.143984][T10919] ? __pfx___sys_sendmmsg+0x10/0x10 [ 315.144025][T10919] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 315.144067][T10919] ? ksys_write+0x242/0x270 [ 315.144104][T10919] ? __pfx_ksys_write+0x10/0x10 [ 315.144147][T10919] __x64_sys_sendmmsg+0xa0/0xc0 [ 315.144179][T10919] do_syscall_64+0x166/0x520 [ 315.144203][T10919] ? trace_irq_disable+0x3b/0x140 [ 315.144225][T10919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.144249][T10919] ? clear_bhb_loop+0x70/0xc0 [ 315.144278][T10919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.144301][T10919] RIP: 0033:0x7f48ffb9e159 [ 315.144321][T10919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.144341][T10919] RSP: 002b:00007f4900b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.144366][T10919] RAX: ffffffffffffffda RBX: 00007f48ffe25fa0 RCX: 00007f48ffb9e159 [ 315.144384][T10919] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 315.144399][T10919] RBP: 00007f4900b18090 R08: 0000000000000000 R09: 0000000000000000 [ 315.144414][T10919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.144428][T10919] R13: 00007f48ffe26038 R14: 00007f48ffe25fa0 R15: 00007fffc88a8688 [ 315.144464][T10919] [ 315.332310][ T8094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.570245][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.684316][T10927] ip6gretap0: entered promiscuous mode [ 315.881583][T10924] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 315.885494][T10924] bond5 (unregistering): Released all slaves [ 316.154111][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.157302][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 316.286611][T10953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.462591][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.604413][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 316.664119][T10976] veth1_to_team: entered promiscuous mode [ 316.679580][T10976] veth1_to_team: left promiscuous mode [ 317.014850][T10984] syzkaller1: entered promiscuous mode [ 317.014877][T10984] syzkaller1: entered allmulticast mode [ 317.192878][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.252135][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.275577][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 317.588680][T11009] IPv6: NLM_F_REPLACE set, but no existing node found! [ 318.237128][ T5614] net_ratelimit: 2 callbacks suppressed [ 318.237152][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.610702][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.708973][ T8115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.828072][T11058] syzkaller0: entered promiscuous mode [ 318.828097][T11058] syzkaller0: entered allmulticast mode [ 318.868480][T11058] tc_dump_action: action bad kind [ 319.072104][T11077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.072336][T11077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.081352][T11077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.165679][T11079] ipvlan2: entered promiscuous mode [ 319.279011][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.654708][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 319.687299][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1214'. [ 319.697050][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1214'. [ 319.726247][T11099] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1214'. [ 319.726372][T11099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1214'. [ 319.830327][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.163190][T11112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.163423][T11112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.209446][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 320.209477][T11117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'. [ 320.209495][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 320.209511][T11117] netlink: 'syz.0.1220': attribute type 5 has an invalid length. [ 320.315893][T11118] bridge18: entered promiscuous mode [ 320.315924][T11118] bridge18: entered allmulticast mode [ 320.435799][T11128] netlink: 'syz.1.1222': attribute type 11 has an invalid length. [ 320.888038][T11148] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 320.911220][T11148] bond6 (unregistering): Released all slaves [ 321.066760][T11158] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 321.096552][T11158] bond6 (unregistering): Released all slaves [ 321.163533][T11174] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 321.416896][T11181] FAULT_INJECTION: forcing a failure. [ 321.416896][T11181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.416935][T11181] CPU: 1 UID: 0 PID: 11181 Comm: syz.3.1234 Not tainted syzkaller #0 PREEMPT(full) [ 321.416961][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.416976][T11181] Call Trace: [ 321.416985][T11181] [ 321.416994][T11181] dump_stack_lvl+0xe8/0x150 [ 321.417032][T11181] should_fail_ex+0x410/0x560 [ 321.417062][T11181] _copy_from_user+0x2d/0xb0 [ 321.417092][T11181] ___sys_sendmsg+0x1c6/0x360 [ 321.417120][T11181] ? __lock_acquire+0x747/0x2de0 [ 321.417149][T11181] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.417176][T11181] ? __lock_acquire+0x747/0x2de0 [ 321.417204][T11181] ? kstrtouint+0x6e/0xe0 [ 321.417283][T11181] __sys_sendmmsg+0x273/0x4d0 [ 321.417322][T11181] ? __pfx___sys_sendmmsg+0x10/0x10 [ 321.417362][T11181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.417404][T11181] ? ksys_write+0x242/0x270 [ 321.417441][T11181] ? __pfx_ksys_write+0x10/0x10 [ 321.417482][T11181] __x64_sys_sendmmsg+0xa0/0xc0 [ 321.417514][T11181] do_syscall_64+0x166/0x520 [ 321.417538][T11181] ? trace_irq_disable+0x3b/0x140 [ 321.417561][T11181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.417585][T11181] ? clear_bhb_loop+0x70/0xc0 [ 321.417613][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.417635][T11181] RIP: 0033:0x7f768099e159 [ 321.417656][T11181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.417676][T11181] RSP: 002b:00007f7681799028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.417702][T11181] RAX: ffffffffffffffda RBX: 00007f7680c25fa0 RCX: 00007f768099e159 [ 321.417725][T11181] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 321.417741][T11181] RBP: 00007f7681799090 R08: 0000000000000000 R09: 0000000000000000 [ 321.417755][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 321.417769][T11181] R13: 00007f7680c26038 R14: 00007f7680c25fa0 R15: 00007ffeb98857a8 [ 321.417805][T11181] [ 322.164108][T11201] xt_hashlimit: size too large, truncated to 1048576 [ 322.231781][T11207] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 322.231809][T11207] pim6reg0: persist disabled [ 323.441268][ T5614] net_ratelimit: 14 callbacks suppressed [ 323.441295][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.678159][T11280] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 323.699672][T11280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'. [ 323.714066][T11280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1256'. [ 323.734940][T11270] veth1_vlan: entered promiscuous mode [ 323.769345][T11270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.769635][T11270] batman_adv: batadv0: Interface activated: netdevsim0 [ 323.827197][T11270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.832362][T11291] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 323.857935][T11270] bond2: left promiscuous mode [ 323.857967][T11270] veth0_to_bond: left promiscuous mode [ 323.874134][T11270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.881432][T11270] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 323.916497][T11270] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 323.935186][T11270] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 324.057164][ T44] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 324.088742][T11298] pim6reg1: entered promiscuous mode [ 324.088770][T11298] pim6reg1: entered allmulticast mode [ 324.251836][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.470745][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.672415][T11337] xt_hashlimit: size too large, truncated to 1048576 [ 324.707006][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.914897][T11341] bridge_slave_0 (unregistering): left allmulticast mode [ 324.914932][T11341] bridge_slave_0 (unregistering): left promiscuous mode [ 324.915029][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.127496][T11349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.170778][T11349] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 325.170806][T11349] __nla_validate_parse: 5 callbacks suppressed [ 325.170820][T11349] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1266'. [ 325.305534][T11359] IPVS: length: 28 != 18456 [ 325.355320][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 325.381955][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.495504][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.602674][T11369] syzkaller0: create flow: hash 2145678059 index 2 [ 325.905890][T11381] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 326.021392][T11386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1274'. [ 326.046174][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.046197][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.078991][T11378] syzkaller0: delete flow: hash 2145678059 index 2 [ 326.186703][T11382] bond5: (slave geneve3): making interface the new active one [ 326.197219][T11382] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 326.197444][ T8094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.223033][T11386] 8021q: adding VLAN 0 to HW filter on device bond5 [ 326.240477][ T8094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.240533][ T8094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.240573][ T8094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.260309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.389258][T11391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1276'. [ 326.455515][T11392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1276'. [ 326.635589][T11395] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1276'. [ 328.050125][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.615467][ T7422] net_ratelimit: 19 callbacks suppressed [ 328.615488][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.715371][ T8115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.768201][T11402] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 328.768249][T11402] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 328.768273][T11402] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 328.850358][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.885152][T11414] sctp: [Deprecated]: syz.1.1282 (pid 11414) Use of int in max_burst socket option. [ 328.885152][T11414] Use struct sctp_assoc_value instead [ 328.918052][T11412] netlink: Failed to add filter helper -22 [ 328.918095][T11412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.168478][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 329.492397][T11416] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.641048][T11451] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1284'. [ 329.679334][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.736882][T11456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1286'. [ 329.841381][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.890248][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.890426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.891742][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.442246][T11416] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.471869][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 330.471896][T11472] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 330.474239][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 330.474260][T11475] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 330.592589][T11475] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1288'. [ 330.592735][T11472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1288'. [ 330.598752][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1290'. [ 330.626337][T11477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1291'. [ 330.699045][T11416] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.739006][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 330.739033][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1290'. [ 330.809288][T11486] veth9: entered allmulticast mode [ 330.896418][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 330.925267][T11492] tipc: Can't bind to reserved service type 2 [ 331.005650][T11490] bond4: option lacp_active: invalid value (5) [ 331.036255][T11490] bond4 (unregistering): Released all slaves [ 331.111048][T11416] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 331.155391][T11416] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 331.211062][T11503] macsec0: entered promiscuous mode [ 331.213351][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 331.217377][T11503] veth1_macvtap: left promiscuous mode [ 331.251872][T11503] macsec0 (unregistering): left promiscuous mode [ 331.306715][T11504] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 331.704042][T11519] netlink: 'syz.0.1302': attribute type 1 has an invalid length. [ 331.821678][ T3008] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 331.832807][ T8115] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 331.834585][ T3008] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 331.834831][ T3008] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 332.319953][T11552] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 332.467458][T11561] netlink: 'syz.1.1311': attribute type 25 has an invalid length. [ 332.505932][T11550] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.531633][T11550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.816010][T11550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.903812][T11550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.948467][T11550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.948498][T11550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.017038][T11550] veth1_vlan: left promiscuous mode [ 333.036312][T11550] veth0_vlan: left promiscuous mode [ 333.038831][T11550] veth0_vlan: entered promiscuous mode [ 333.054777][T11550] veth1_vlan: entered promiscuous mode [ 333.096067][T11550] veth1_macvtap: left promiscuous mode [ 333.114398][T11550] veth0_macvtap: left promiscuous mode [ 333.122577][T11550] veth0_macvtap: entered promiscuous mode [ 333.166250][T11550] veth1_macvtap: entered promiscuous mode [ 333.247758][T11550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.269291][T11550] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 333.290372][T11566] xt_l2tp: v2 sid > 0xffff: 33554432 [ 333.297071][T11550] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 333.345215][T11550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.503005][T11550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.535166][T11550] bridge18: left promiscuous mode [ 333.556342][T11550] 8021q: adding VLAN 0 to HW filter on device eth0 [ 333.585379][T11550] 8021q: adding VLAN 0 to HW filter on device eth1 [ 333.604027][T11550] 8021q: adding VLAN 0 to HW filter on device eth2 [ 333.629365][T11550] 8021q: adding VLAN 0 to HW filter on device eth3 [ 333.641975][ T8115] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 333.642016][ T8115] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 38276 - 0 [ 333.642758][ T8115] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 333.642789][ T8115] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 38276 - 0 [ 333.642832][ T8115] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 333.664200][ T8115] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 38276 - 0 [ 333.808145][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.808259][ T8085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.828794][ T7420] net_ratelimit: 20 callbacks suppressed [ 333.828815][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.834718][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.890731][ T8103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.891236][ T8103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.891458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.050196][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.244614][T11572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.249187][ T8115] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 334.278343][T11572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 334.292812][T11572] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 334.294832][T11572] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.313883][ T8103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.351584][ T8103] bond3: (slave bridge5): link status up again after 0 ms [ 334.371404][ T8115] bond3: (slave bridge5): link status up again after 0 ms [ 334.740720][ T3008] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 334.740759][ T3008] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 38276 - 0 [ 335.022447][T11615] netlink: 'syz.1.1323': attribute type 1 has an invalid length. [ 335.108592][T11615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.174150][T11615] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 335.203612][T11615] bond3: (slave batadv3): making interface the new active one [ 335.207618][T11615] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 335.248169][T11617] bond3 (unregistering): (slave batadv3): Releasing active interface [ 335.296584][T11617] bond3 (unregistering): Released all slaves [ 335.385542][T11620] netlink: 'syz.3.1324': attribute type 4 has an invalid length. [ 335.601943][T11630] __nla_validate_parse: 9 callbacks suppressed [ 335.601966][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 335.601987][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 335.602005][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 335.905922][ T5618] block nbd4: Receive control failed (result -32) [ 336.083777][T11672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1331'. [ 336.201772][ T5618] block nbd5: Receive control failed (result -32) [ 336.427880][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1335'. [ 336.450107][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.517196][T11714] SET target dimension over the limit! [ 337.684736][T11639] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 338.454234][T11824] tc_dump_action: action bad kind [ 338.488468][T11824] netlink: 'syz.3.1344': attribute type 2 has an invalid length. [ 338.488493][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 338.626108][ T8091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.626130][ T8091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.737502][ T8091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.737527][ T8091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.778412][T11835] FAULT_INJECTION: forcing a failure. [ 338.778412][T11835] name failslab, interval 1, probability 0, space 0, times 0 [ 338.778452][T11835] CPU: 0 UID: 0 PID: 11835 Comm: syz.3.1347 Not tainted syzkaller #0 PREEMPT(full) [ 338.778476][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.778489][T11835] Call Trace: [ 338.778498][T11835] [ 338.778508][T11835] dump_stack_lvl+0xe8/0x150 [ 338.778547][T11835] should_fail_ex+0x410/0x560 [ 338.778577][T11835] ? __alloc_skb+0x1db/0x7a0 [ 338.778602][T11835] should_failslab+0xa8/0x100 [ 338.778637][T11835] ? __alloc_skb+0x1db/0x7a0 [ 338.778659][T11835] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 338.778695][T11835] ? __alloc_skb+0x18d/0x7a0 [ 338.778720][T11835] ? __alloc_skb+0x1db/0x7a0 [ 338.778751][T11835] __alloc_skb+0x1db/0x7a0 [ 338.778779][T11835] alloc_skb_with_frags+0xc6/0x760 [ 338.778818][T11835] sock_alloc_send_pskb+0x878/0x990 [ 338.778870][T11835] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 338.778899][T11835] ? kasan_quarantine_put+0xbb/0x1f0 [ 338.778922][T11835] ? lockdep_hardirqs_on+0x7b/0x110 [ 338.778950][T11835] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 338.778982][T11835] ? kmem_cache_free+0x182/0x650 [ 338.779007][T11835] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 338.779041][T11835] unix_dgram_sendmsg+0x4da/0x17b0 [ 338.779095][T11835] ? __lock_acquire+0x747/0x2de0 [ 338.779118][T11835] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 338.779157][T11835] ? aa_sock_msg_perm+0x129/0x210 [ 338.779191][T11835] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 338.779230][T11835] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 338.779265][T11835] sock_sendmsg_nosec+0x13a/0x180 [ 338.779303][T11835] ____sys_sendmsg+0x54e/0x850 [ 338.779336][T11835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.779382][T11835] ? import_iovec+0x73/0xa0 [ 338.779415][T11835] ___sys_sendmsg+0x2a5/0x360 [ 338.779443][T11835] ? __lock_acquire+0x747/0x2de0 [ 338.779469][T11835] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.779496][T11835] ? __lock_acquire+0x747/0x2de0 [ 338.779524][T11835] ? kstrtouint+0x6e/0xe0 [ 338.779603][T11835] __sys_sendmmsg+0x273/0x4d0 [ 338.779639][T11835] ? __pfx___sys_sendmmsg+0x10/0x10 [ 338.779679][T11835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 338.779721][T11835] ? ksys_write+0x242/0x270 [ 338.779757][T11835] ? __pfx_ksys_write+0x10/0x10 [ 338.779798][T11835] __x64_sys_sendmmsg+0xa0/0xc0 [ 338.779829][T11835] do_syscall_64+0x166/0x520 [ 338.779852][T11835] ? trace_irq_disable+0x3b/0x140 [ 338.779876][T11835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.779900][T11835] ? clear_bhb_loop+0x70/0xc0 [ 338.779927][T11835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.779950][T11835] RIP: 0033:0x7f768099e159 [ 338.779979][T11835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.779999][T11835] RSP: 002b:00007f7681799028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 338.780024][T11835] RAX: ffffffffffffffda RBX: 00007f7680c25fa0 RCX: 00007f768099e159 [ 338.780041][T11835] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 338.780056][T11835] RBP: 00007f7681799090 R08: 0000000000000000 R09: 0000000000000000 [ 338.780071][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.780084][T11835] R13: 00007f7680c26038 R14: 00007f7680c25fa0 R15: 00007ffeb98857a8 [ 338.780120][T11835] [ 338.894451][ T1096] net_ratelimit: 63 callbacks suppressed [ 338.894547][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.012818][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.015288][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.021274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.223027][T11837] batman_adv: batadv0: Adding interface: macvlan3 [ 339.223049][T11837] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.223085][T11837] batman_adv: batadv0: Interface activated: macvlan3 [ 339.264290][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 339.280294][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.387658][T11849] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1349'. [ 339.492733][T11846] bond7: entered allmulticast mode [ 339.521891][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 339.651484][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.651714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.652246][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.005987][T11867] xt_hashlimit: max too large, truncated to 1048576 [ 340.018130][T11878] netlink: 'syz.0.1355': attribute type 4 has an invalid length. [ 340.438748][T11872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.438804][T11872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.438835][T11872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40165 - 0 [ 340.553977][T11890] nbd: socks must be embedded in a SOCK_ITEM attr [ 340.935096][T11896] FAULT_INJECTION: forcing a failure. [ 340.935096][T11896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.935134][T11896] CPU: 0 UID: 0 PID: 11896 Comm: syz.1.1360 Not tainted syzkaller #0 PREEMPT(full) [ 340.935159][T11896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.935172][T11896] Call Trace: [ 340.935180][T11896] [ 340.935192][T11896] dump_stack_lvl+0xe8/0x150 [ 340.935223][T11896] should_fail_ex+0x410/0x560 [ 340.935249][T11896] _copy_from_user+0x2d/0xb0 [ 340.935274][T11896] ___sys_sendmsg+0x1c6/0x360 [ 340.935302][T11896] ? __lock_acquire+0x747/0x2de0 [ 340.935327][T11896] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.935353][T11896] ? __lock_acquire+0x747/0x2de0 [ 340.935381][T11896] ? kstrtouint+0x6e/0xe0 [ 340.935457][T11896] __sys_sendmmsg+0x273/0x4d0 [ 340.935493][T11896] ? __pfx___sys_sendmmsg+0x10/0x10 [ 340.935533][T11896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.935576][T11896] ? ksys_write+0x242/0x270 [ 340.935614][T11896] ? __pfx_ksys_write+0x10/0x10 [ 340.935665][T11896] __x64_sys_sendmmsg+0xa0/0xc0 [ 340.935691][T11896] do_syscall_64+0x166/0x520 [ 340.935711][T11896] ? trace_irq_disable+0x3b/0x140 [ 340.935729][T11896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.935749][T11896] ? clear_bhb_loop+0x70/0xc0 [ 340.935772][T11896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.935793][T11896] RIP: 0033:0x7f48ffb9e159 [ 340.935812][T11896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.935830][T11896] RSP: 002b:00007f4900b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 340.935853][T11896] RAX: ffffffffffffffda RBX: 00007f48ffe25fa0 RCX: 00007f48ffb9e159 [ 340.935869][T11896] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 340.935881][T11896] RBP: 00007f4900b18090 R08: 0000000000000000 R09: 0000000000000000 [ 340.935893][T11896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.935906][T11896] R13: 00007f48ffe26038 R14: 00007f48ffe25fa0 R15: 00007fffc88a8688 [ 340.935937][T11896] [ 341.191693][T11872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.191738][T11872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.191770][T11872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40165 - 0 [ 341.427425][T11872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.439963][T11872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.440000][T11872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40165 - 0 [ 341.487164][T11901] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 341.487239][T11901] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1361'. [ 341.488552][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1362'. [ 341.637383][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 342.293885][ T8116] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.293923][ T8116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 40165 - 0 [ 342.293951][ T8116] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.294611][ T1096] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.294698][ T1096] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 40165 - 0 [ 342.294775][ T1096] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.367924][T11935] Bluetooth: ISO socket layer initialized [ 342.461542][ T8116] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.461584][ T8116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 40165 - 0 [ 342.461613][ T8116] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.461653][ T8116] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.461682][ T8116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 40165 - 0 [ 342.461817][ T8116] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.604192][T11929] syzkaller1: entered promiscuous mode [ 342.604219][T11929] syzkaller1: entered allmulticast mode [ 342.740685][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 343.662020][T11958] bond6: option arp_interval: invalid value (18446744073709551615) [ 343.662049][T11958] bond6: option arp_interval: allowed values 0 - 2147483647 [ 343.709188][T11958] bond6 (unregistering): Released all slaves [ 343.930835][ T8116] net_ratelimit: 100 callbacks suppressed [ 343.930860][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 344.130950][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.131146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.190115][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 344.296447][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.329944][ T59] bond3: (slave bridge5): failed to get link speed/duplex [ 344.440197][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 344.450962][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.555110][ T59] bond3: (slave bridge5): failed to get link speed/duplex [ 344.601399][ T8091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.970456][ T1096] net_ratelimit: 58 callbacks suppressed [ 348.970482][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 349.000440][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.018462][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.080333][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 349.170519][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.170733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.190946][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 349.300316][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 349.410384][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 349.491195][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.093620][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 354.040085][ T44] net_ratelimit: 63 callbacks suppressed [ 354.040126][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 354.150413][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 354.260165][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 354.370456][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 354.370794][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.370995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.480323][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 354.510356][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.590217][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 354.690927][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.110250][ T44] net_ratelimit: 59 callbacks suppressed [ 359.110274][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 359.220307][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 359.330480][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 359.440164][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 359.490490][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.490653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.550214][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 359.660106][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 359.770324][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 359.880109][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 364.180478][ T1096] net_ratelimit: 60 callbacks suppressed [ 364.180504][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 364.211013][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.211144][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.290438][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 364.400300][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 364.440383][ T8091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.510274][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 364.610901][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.621248][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 364.730325][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 369.240389][ T8091] net_ratelimit: 61 callbacks suppressed [ 369.240416][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 369.256110][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.350263][ T7801] bond3: (slave bridge5): failed to get link speed/duplex [ 369.411687][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.460324][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 369.570352][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 369.650916][ T8091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.680374][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 369.790304][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 369.900364][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 374.300182][ T8116] net_ratelimit: 63 callbacks suppressed [ 374.300207][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 374.340498][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.410146][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 374.450372][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.520248][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 374.612070][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.640054][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 374.750097][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 374.870236][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 374.980003][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 378.691821][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.390030][ T8085] net_ratelimit: 65 callbacks suppressed [ 379.390049][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 379.500034][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 379.609992][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 379.650146][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.650463][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.720033][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 379.810317][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.830009][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 379.880270][ T8091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.940084][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 384.450468][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.470016][ T8091] net_ratelimit: 66 callbacks suppressed [ 384.470034][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 384.580083][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 384.690420][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 384.800288][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 384.850778][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.910108][ T8116] bond3: (slave bridge5): failed to get link speed/duplex [ 385.010858][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.022957][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 385.130183][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 385.240063][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 389.540092][ T1096] net_ratelimit: 59 callbacks suppressed [ 389.540118][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 389.650204][ T7801] bond3: (slave bridge5): failed to get link speed/duplex [ 389.760358][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 389.780219][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.880190][ T7801] bond3: (slave bridge5): failed to get link speed/duplex [ 389.891187][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.989996][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 390.050386][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.100206][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 390.210842][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.585647][T12011] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1382'. [ 394.611300][ T8091] net_ratelimit: 57 callbacks suppressed [ 394.611322][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 394.693423][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.693669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.694518][ T8091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.694741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.735039][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 394.840539][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 394.952495][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 395.167249][T12045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1388'. [ 395.210389][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 395.250872][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.521629][T12054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1390'. [ 395.597940][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1390'. [ 395.693865][T12058] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 395.895211][T12068] block nbd6: server does not support multiple connections per device. [ 395.896344][T12068] block nbd6: shutting down sockets [ 395.978810][T12070] tipc: Enabling of bearer rejected, failed to enable media [ 396.179035][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1400'. [ 396.364175][T12099] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 396.364202][T12099] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1403'. [ 396.551317][T12108] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1407'. [ 396.723798][T12121] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1405'. [ 397.403890][T12139] can: request_module (can-proto-4) failed. [ 397.625710][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1416'. [ 397.639218][T12154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1416'. [ 397.787615][T12160] siw: device registration error -23 [ 398.065683][T12169] netlink: 'syz.0.1419': attribute type 1 has an invalid length. [ 398.177174][T12170] tipc: Enabled bearer , priority 0 [ 398.326070][T12170] syzkaller0: entered promiscuous mode [ 398.326098][T12170] syzkaller0: entered allmulticast mode [ 398.344580][T12170] tipc: Resetting bearer [ 398.650580][T12196] x_tables: duplicate underflow at hook 1 [ 398.714392][ T44] tipc: Resetting bearer [ 398.761130][T12192] tipc: Started in network mode [ 398.761165][T12192] tipc: Node identity ac1414aa, cluster identity 4711 [ 398.801939][T12192] tipc: New replicast peer: 172.20.20.187 [ 398.805294][T12192] tipc: Enabled bearer , priority 10 [ 398.806169][T12167] tipc: Resetting bearer [ 399.762955][ T44] net_ratelimit: 50 callbacks suppressed [ 399.762979][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.452858][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.453094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.453642][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.453906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.455989][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.618604][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.881149][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.490472][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.657734][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.741235][T12167] tipc: Disabling bearer [ 401.747336][ T5617] tipc: Node number set to 2030508714 [ 401.851415][T12222] netlink: 'syz.2.1429': attribute type 2 has an invalid length. [ 401.852499][T12229] __nla_validate_parse: 1 callbacks suppressed [ 401.852516][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1429'. [ 401.856874][ T7422] tipc: Node number set to 2886997162 [ 401.957753][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'. [ 402.379194][T12257] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 402.395908][T12257] bond6 (unregistering): Released all slaves [ 402.550807][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 402.550834][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.550853][T12267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.666894][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1438'. [ 402.679562][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1438'. [ 403.245786][T12279] nftables ruleset with unbound set [ 403.352952][T12281] netlink: 'syz.3.1442': attribute type 32 has an invalid length. [ 403.427479][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 403.629087][T12291] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 403.629742][T12291] batman_adv: batadv0: Adding interface: gretap1 [ 403.629754][T12291] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.629783][T12291] batman_adv: batadv0: Interface activated: gretap1 [ 403.819117][T12296] sctp: [Deprecated]: syz.1.1447 (pid 12296) Use of int in maxseg socket option. [ 403.819117][T12296] Use struct sctp_assoc_value instead [ 403.942367][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 404.775859][ T7419] net_ratelimit: 36 callbacks suppressed [ 404.775877][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.800453][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 404.910574][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 405.020148][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 405.051189][T12237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.120897][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.129960][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 405.240387][ T3008] bond3: (slave bridge5): failed to get link speed/duplex [ 405.300862][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.351907][ T59] bond3: (slave bridge5): failed to get link speed/duplex [ 405.373042][T12307] netlink: 'syz.4.1451': attribute type 2 has an invalid length. [ 405.373065][T12307] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1451'. [ 405.461529][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 405.872515][T12351] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.882083][T12343] bond4: entered allmulticast mode [ 405.887284][T12343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.927783][T12353] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1458'. [ 406.033447][T12351] syzkaller0: entered promiscuous mode [ 406.033474][T12351] syzkaller0: entered allmulticast mode [ 408.956981][T12403] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1469'. [ 409.053590][T12390] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 409.059586][T12408] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 409.308997][T12390] bond6 (unregistering): Released all slaves [ 409.823877][ T7419] net_ratelimit: 45 callbacks suppressed [ 409.823898][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.824073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.837905][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 409.839533][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 409.881241][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 409.995666][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.006438][ T59] bond3: (slave bridge5): failed to get link speed/duplex [ 410.031187][T12446] tc action pedit 'at' offset 5 out of bounds [ 410.110141][ T59] bond3: (slave bridge5): failed to get link speed/duplex [ 410.118238][T12457] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.312174][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 410.475259][ T7801] bond3: (slave bridge5): failed to get link speed/duplex [ 410.580338][ T7801] bond3: (slave bridge5): failed to get link speed/duplex [ 410.691841][ T7801] bond3: (slave bridge5): failed to get link speed/duplex [ 410.800742][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 411.145694][T12487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1492'. [ 411.145724][T12487] nbd: must specify at least one socket [ 411.174770][T12491] batadv_slave_0: entered promiscuous mode [ 411.175314][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 411.175438][T12491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.216743][T12491] batadv_slave_0 (unregistering): left promiscuous mode [ 411.216828][T12491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.347014][T12492] ip6gretap1: entered allmulticast mode [ 411.359634][T12492] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 411.376269][T12492] batman_adv: batadv0: Adding interface: ip6gretap1 [ 411.376284][T12492] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.376307][T12492] batman_adv: batadv0: Interface activated: ip6gretap1 [ 411.385702][T12495] netlink: 'syz.1.1497': attribute type 4 has an invalid length. [ 411.434204][T12490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1494'. [ 411.434604][T12490] 8021q: VLANs not supported on ip6gre0 [ 411.454831][T12498] netlink: 'syz.1.1497': attribute type 4 has an invalid length. [ 411.680190][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 411.723460][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 411.726766][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 411.944795][T12023] udevd[12023]: setting mode of /dev/rfcomm2 to 020660 failed: No such file or directory [ 411.944929][T12023] udevd[12023]: setting owner of /dev/rfcomm2 to uid=0, gid=18 failed: No such file or directory [ 411.965474][T12524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 412.047730][T12527] tc_dump_action: action bad kind [ 412.157129][T12534] netlink: 'syz.2.1506': attribute type 25 has an invalid length. [ 412.545221][T12546] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 414.256294][T12598] __nla_validate_parse: 37 callbacks suppressed [ 414.256316][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1520'. [ 414.296578][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1520'. [ 414.518313][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1520'. [ 414.714314][T12622] xt_CONNSECMARK: invalid mode: 254 [ 415.091635][ T5617] net_ratelimit: 82 callbacks suppressed [ 415.091659][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.091879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.147234][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 415.176273][ T7801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.176533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.177153][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.271245][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.310411][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 415.310986][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.450938][T12650] netlink: 'syz.4.1534': attribute type 3 has an invalid length. [ 415.450964][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1534'. [ 415.471754][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 415.626914][T12643] syzkaller0: entered promiscuous mode [ 415.626935][T12643] syzkaller0: entered allmulticast mode [ 415.676506][T12654] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 415.677453][T12654] batman_adv: batadv0: Adding interface: macvlan4 [ 415.677468][T12654] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.677498][T12654] batman_adv: batadv0: Interface activated: macvlan4 [ 415.698673][T12658] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 415.773278][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 416.029225][T12674] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 416.099292][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 416.156041][T12683] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1541'. [ 418.756936][T12674] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 418.962407][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 418.968092][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 419.117139][T12710] can: request_module (can-proto-4) failed. [ 419.273904][T12723] __nla_validate_parse: 1 callbacks suppressed [ 419.273925][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 419.318265][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 419.567042][T12735] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1550'. [ 420.120257][ T8085] net_ratelimit: 34 callbacks suppressed [ 420.120282][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 420.221374][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.227607][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1556'. [ 420.291272][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.291455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.293129][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.350045][ T8115] bond3: (slave bridge5): failed to get link speed/duplex [ 420.460689][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 420.494873][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.571438][ T8115] bond3: (slave bridge5): failed to get link speed/duplex [ 420.733209][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 420.893436][T12789] netlink: 'syz.0.1560': attribute type 3 has an invalid length. [ 420.893461][T12789] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 420.893475][T12789] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1560'. [ 421.078606][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 421.078630][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 421.122275][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 421.141189][T12796] SET target dimension over the limit! [ 422.058718][T12830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1572'. [ 422.477030][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1576'. [ 422.683130][T12853] wg1 speed is unknown, defaulting to 1000 [ 422.783301][T12853] wg1 speed is unknown, defaulting to 1000 [ 422.784185][T12853] wg1 speed is unknown, defaulting to 1000 [ 423.481742][T12889] xfrm1: entered allmulticast mode [ 423.589972][ T5722] wg1 speed is unknown, defaulting to 1000 [ 423.600400][T12853] infiniband syz2: set active [ 423.600425][T12853] infiniband syz2: added wg1 [ 423.624519][T12853] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 423.632493][T12853] infiniband syz2: Couldn't open port 1 [ 423.632752][T12853] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 423.632785][T12853] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 423.632828][T12853] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 423.751943][T12853] RDS/IB: syz2: added [ 423.752002][T12853] smc: adding ib device syz2 with port count 1 [ 423.752308][T12853] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 423.752407][ T5722] wg1 speed is unknown, defaulting to 1000 [ 423.755157][T12853] wg1 speed is unknown, defaulting to 1000 [ 424.296994][T12904] __nla_validate_parse: 7 callbacks suppressed [ 424.297015][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 424.326545][ T1096] IPVS: starting estimator thread 0... [ 424.388133][T12916] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 424.411268][T12908] IPVS: using max 39 ests per chain, 93600 per kthread [ 424.486785][T12914] IPVS: stopping master sync thread 12916 ... [ 424.546064][T12914] batadv2: entered promiscuous mode [ 424.546089][T12914] batadv2: entered allmulticast mode [ 424.736433][T12853] wg1 speed is unknown, defaulting to 1000 [ 425.192821][T12853] wg1 speed is unknown, defaulting to 1000 [ 425.208307][ T44] net_ratelimit: 61 callbacks suppressed [ 425.208328][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 425.310576][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 425.331291][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.420571][ T59] bond3: (slave bridge5): failed to get link speed/duplex [ 425.492855][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.493089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.531236][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 425.740013][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 425.828116][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.851823][ T1096] bond3: (slave bridge5): failed to get link speed/duplex [ 425.940239][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 425.940267][T12956] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1605'. [ 426.346104][T12853] wg1 speed is unknown, defaulting to 1000 [ 426.617252][T12984] syzkaller1: entered promiscuous mode [ 426.617278][T12984] syzkaller1: entered allmulticast mode [ 426.644699][T12984] syzkaller1: left promiscuous mode [ 426.930967][T13000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1611'. [ 427.006816][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1613'. [ 427.155707][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'. [ 427.243431][T13011] bond3: (slave syz_tun): Removing an active aggregator [ 427.246439][T13011] bond3: (slave syz_tun): Releasing backup interface [ 427.282825][T13013] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1616'. [ 427.306130][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'. [ 427.343831][T12853] wg1 speed is unknown, defaulting to 1000 [ 427.372208][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'. [ 428.045512][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 428.045777][T13041] veth1_vlan: left allmulticast mode [ 428.046230][T13041] macvlan0: left promiscuous mode [ 428.046250][T13041] macvlan0: left allmulticast mode [ 428.078442][T13041] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 428.120012][T13045] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.332739][T13045] bridge_slave_1 (unregistering): left allmulticast mode [ 428.332771][T13045] bridge_slave_1 (unregistering): left promiscuous mode [ 428.332904][T13045] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.334393][T13089] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 429.338317][T13089] __nla_validate_parse: 1 callbacks suppressed [ 429.338338][T13089] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1634'. [ 429.355345][T13089] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1634'. [ 429.426397][T13077] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.525750][T13077] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 429.571528][T13086] bridge_slave_0: left allmulticast mode [ 429.571557][T13086] bridge_slave_0: left promiscuous mode [ 429.571782][T13086] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.624427][T13098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1635'. [ 429.800186][T13105] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 429.800212][T13105] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1636'. [ 429.895284][T13108] vcan0: tx drop: invalid da for name 0x00000000000000b6 [ 430.005009][T13108] block nbd6: shutting down sockets [ 430.095128][T13115] nbd: nbd2 already in use [ 430.095413][T13115] block nbd2: NBD_DISCONNECT [ 430.114549][T13115] block nbd2: Send disconnect failed -104 [ 430.114589][T13115] block nbd2: shutting down sockets [ 430.189783][T13123] netlink: 'syz.3.1642': attribute type 12 has an invalid length. [ 430.227538][T13123] [ 430.229937][T13123] ====================================================== [ 430.236997][T13123] WARNING: possible circular locking dependency detected [ 430.244033][T13123] syzkaller #0 Not tainted [ 430.248475][T13123] ------------------------------------------------------ [ 430.255512][T13123] syz.3.1642/13123 is trying to acquire lock: [ 430.261588][T13123] ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 430.270948][T13123] [ 430.270948][T13123] but task is already holding lock: [ 430.278314][T13123] ffff88807a20b530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 430.287591][T13123] [ 430.287591][T13123] which lock already depends on the new lock. [ 430.287591][T13123] [ 430.298024][T13123] [ 430.298024][T13123] the existing dependency chain (in reverse order) is: [ 430.307054][T13123] [ 430.307054][T13123] -> #8 (&idev->mc_lock){+.+.}-{4:4}: [ 430.314653][T13123] __mutex_lock+0x19d/0x1550 [ 430.319780][T13123] __ipv6_dev_mc_inc+0x4e/0xaf0 [ 430.325205][T13123] addrconf_join_solict+0x104/0x190 [ 430.330985][T13123] __ipv6_dev_ac_inc+0x8fd/0xb90 [ 430.336492][T13123] ipv6_sock_ac_join+0x665/0x820 [ 430.342028][T13123] do_ipv6_setsockopt+0x1e35/0x2960 [ 430.347785][T13123] ipv6_setsockopt+0x59/0x170 [ 430.353027][T13123] do_sock_setsockopt+0x17c/0x1b0 [ 430.358601][T13123] __x64_sys_setsockopt+0x13d/0x1b0 [ 430.364346][T13123] do_syscall_64+0x166/0x520 [ 430.369479][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.376003][T13123] [ 430.376003][T13123] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 430.383776][T13123] lock_sock_nested+0x41/0x100 [ 430.389104][T13123] tls_sw_sendmsg+0x15f/0x2b50 [ 430.394423][T13123] sock_sendmsg_nosec+0x90/0x180 [ 430.400002][T13123] sock_write_iter+0x2de/0x3e0 [ 430.405323][T13123] do_iter_readv_writev+0x612/0x8c0 [ 430.411063][T13123] vfs_writev+0x343/0x990 [ 430.415933][T13123] do_writev+0x154/0x2e0 [ 430.420716][T13123] do_syscall_64+0x166/0x520 [ 430.425853][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.432283][T13123] [ 430.432283][T13123] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 430.439779][T13123] __mutex_lock+0x19d/0x1550 [ 430.444916][T13123] tls_sw_sendmsg+0x13a/0x2b50 [ 430.450227][T13123] sock_sendmsg_nosec+0x90/0x180 [ 430.455709][T13123] sock_sendmsg+0x1ca/0x2d0 [ 430.460766][T13123] __sock_xmit+0x245/0x4f0 [ 430.465726][T13123] nbd_disconnect+0x3ad/0x560 [ 430.470942][T13123] nbd_disconnect_and_put+0x32/0x280 [ 430.476762][T13123] nbd_genl_disconnect+0x4af/0x590 [ 430.482424][T13123] genl_family_rcv_msg_doit+0x233/0x340 [ 430.488514][T13123] genl_rcv_msg+0x614/0x7a0 [ 430.493563][T13123] netlink_rcv_skb+0x226/0x4a0 [ 430.498873][T13123] genl_rcv+0x28/0x40 [ 430.503401][T13123] netlink_unicast+0x7bd/0x940 [ 430.508710][T13123] netlink_sendmsg+0x813/0xb40 [ 430.514021][T13123] sock_sendmsg_nosec+0x13a/0x180 [ 430.519603][T13123] ____sys_sendmsg+0x54e/0x850 [ 430.524911][T13123] ___sys_sendmsg+0x2a5/0x360 [ 430.530137][T13123] __x64_sys_sendmsg+0x1b1/0x290 [ 430.535628][T13123] do_syscall_64+0x166/0x520 [ 430.540845][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.547280][T13123] [ 430.547280][T13123] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 430.554950][T13123] __mutex_lock+0x19d/0x1550 [ 430.560083][T13123] nbd_queue_rq+0x373/0xff0 [ 430.565124][T13123] blk_mq_dispatch_rq_list+0x499/0x1990 [ 430.571217][T13123] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 430.578093][T13123] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 430.584612][T13123] blk_mq_run_work_fn+0x16c/0x300 [ 430.590175][T13123] process_scheduled_works+0xc3d/0x1630 [ 430.596264][T13123] worker_thread+0xa47/0xfb0 [ 430.601398][T13123] kthread+0x38b/0x480 [ 430.606008][T13123] ret_from_fork+0x514/0xb70 [ 430.611162][T13123] ret_from_fork_asm+0x1a/0x30 [ 430.616472][T13123] [ 430.616472][T13123] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 430.623737][T13123] __mutex_lock+0x19d/0x1550 [ 430.628878][T13123] nbd_queue_rq+0xc1/0xff0 [ 430.633850][T13123] blk_mq_dispatch_rq_list+0x499/0x1990 [ 430.639937][T13123] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 430.646812][T13123] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 430.653424][T13123] blk_mq_run_work_fn+0x16c/0x300 [ 430.658999][T13123] process_scheduled_works+0xc3d/0x1630 [ 430.665089][T13123] worker_thread+0xa47/0xfb0 [ 430.670223][T13123] kthread+0x38b/0x480 [ 430.674830][T13123] ret_from_fork+0x514/0xb70 [ 430.679961][T13123] ret_from_fork_asm+0x1a/0x30 [ 430.685360][T13123] [ 430.685360][T13123] -> #3 (set->srcu){.+.+}-{0:0}: [ 430.692511][T13123] __synchronize_srcu+0xc9/0x2f0 [ 430.698000][T13123] elevator_switch+0x1e8/0x7b0 [ 430.703309][T13123] elevator_change+0x2fa/0x480 [ 430.708611][T13123] elevator_set_default+0x375/0x440 [ 430.714346][T13123] blk_register_queue+0x3f3/0x4e0 [ 430.719939][T13123] __add_disk+0x6b8/0xdb0 [ 430.724822][T13123] add_disk_fwnode+0x100/0x3a0 [ 430.730132][T13123] nbd_dev_add+0x733/0xb60 [ 430.735113][T13123] nbd_init+0x168/0x1f0 [ 430.739821][T13123] do_one_initcall+0x250/0x870 [ 430.745220][T13123] do_initcall_level+0x10a/0x1a0 [ 430.750694][T13123] do_initcalls+0x59/0xa0 [ 430.755562][T13123] kernel_init_freeable+0x29d/0x3e0 [ 430.761300][T13123] kernel_init+0x22/0x1d0 [ 430.766178][T13123] ret_from_fork+0x514/0xb70 [ 430.771307][T13123] ret_from_fork_asm+0x1a/0x30 [ 430.776616][T13123] [ 430.776616][T13123] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 430.784464][T13123] __mutex_lock+0x19d/0x1550 [ 430.789636][T13123] elevator_change+0x1af/0x480 [ 430.794947][T13123] elevator_set_none+0xb5/0x140 [ 430.800337][T13123] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 430.806714][T13123] nbd_start_device+0x189/0xb30 [ 430.812107][T13123] nbd_genl_connect+0x167d/0x1cd0 [ 430.817688][T13123] genl_family_rcv_msg_doit+0x233/0x340 [ 430.823772][T13123] genl_rcv_msg+0x614/0x7a0 [ 430.828816][T13123] netlink_rcv_skb+0x226/0x4a0 [ 430.834121][T13123] genl_rcv+0x28/0x40 [ 430.838641][T13123] netlink_unicast+0x7bd/0x940 [ 430.843953][T13123] netlink_sendmsg+0x813/0xb40 [ 430.849260][T13123] sock_sendmsg_nosec+0x13a/0x180 [ 430.854839][T13123] ____sys_sendmsg+0x54e/0x850 [ 430.860144][T13123] ___sys_sendmsg+0x2a5/0x360 [ 430.865362][T13123] __x64_sys_sendmsg+0x1b1/0x290 [ 430.870842][T13123] do_syscall_64+0x166/0x520 [ 430.875973][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.882408][T13123] [ 430.882408][T13123] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 430.891044][T13123] blk_alloc_queue+0x544/0x690 [ 430.896349][T13123] __blk_mq_alloc_disk+0x194/0x390 [ 430.902004][T13123] nbd_dev_add+0x494/0xb60 [ 430.907045][T13123] nbd_init+0x168/0x1f0 [ 430.911747][T13123] do_one_initcall+0x250/0x870 [ 430.917057][T13123] do_initcall_level+0x10a/0x1a0 [ 430.922534][T13123] do_initcalls+0x59/0xa0 [ 430.927404][T13123] kernel_init_freeable+0x29d/0x3e0 [ 430.933143][T13123] kernel_init+0x22/0x1d0 [ 430.938022][T13123] ret_from_fork+0x514/0xb70 [ 430.943149][T13123] ret_from_fork_asm+0x1a/0x30 [ 430.948459][T13123] [ 430.948459][T13123] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 430.955706][T13123] __lock_acquire+0x164c/0x2de0 [ 430.961103][T13123] lock_acquire+0x115/0x350 [ 430.966148][T13123] fs_reclaim_acquire+0x71/0x100 [ 430.971630][T13123] __kmalloc_cache_noprof+0x61/0x600 [ 430.977457][T13123] __ipv6_dev_mc_inc+0x447/0xaf0 [ 430.982952][T13123] pndisc_constructor+0xe0/0x150 [ 430.988437][T13123] pneigh_create+0x253/0x4e0 [ 430.993573][T13123] neigh_add+0x77a/0x1090 [ 430.998450][T13123] rtnetlink_rcv_msg+0x7b9/0xc00 [ 431.003932][T13123] netlink_rcv_skb+0x226/0x4a0 [ 431.009240][T13123] netlink_unicast+0x7bd/0x940 [ 431.014544][T13123] netlink_sendmsg+0x813/0xb40 [ 431.019852][T13123] sock_sendmsg_nosec+0x13a/0x180 [ 431.025433][T13123] sock_write_iter+0x2de/0x3e0 [ 431.030748][T13123] vfs_write+0x612/0xba0 [ 431.035549][T13123] ksys_write+0x150/0x270 [ 431.040425][T13123] do_syscall_64+0x166/0x520 [ 431.045563][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.051992][T13123] [ 431.051992][T13123] other info that might help us debug this: [ 431.051992][T13123] [ 431.062237][T13123] Chain exists of: [ 431.062237][T13123] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 431.062237][T13123] [ 431.074866][T13123] Possible unsafe locking scenario: [ 431.074866][T13123] [ 431.082328][T13123] CPU0 CPU1 [ 431.087715][T13123] ---- ---- [ 431.093096][T13123] lock(&idev->mc_lock); [ 431.097472][T13123] lock(sk_lock-AF_INET6); [ 431.104530][T13123] lock(&idev->mc_lock); [ 431.111394][T13123] lock(fs_reclaim); [ 431.115397][T13123] [ 431.115397][T13123] *** DEADLOCK *** [ 431.115397][T13123] [ 431.123640][T13123] locks held by syz.3.1642/13123: 3, last CPU#0: [ 431.130010][T13123] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 431.139447][T13123] #1: ffff8880207ed3f8 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x49/0x4e0 [ 431.148960][T13123] #2: ffff88807a20b530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 431.158673][T13123] [ 431.158673][T13123] stack backtrace: [ 431.164592][T13123] CPU: 0 UID: 0 PID: 13123 Comm: syz.3.1642 Not tainted syzkaller #0 PREEMPT(full) [ 431.173977][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.184054][T13123] Call Trace: [ 431.187361][T13123] [ 431.190310][T13123] dump_stack_lvl+0xe8/0x150 [ 431.194922][T13123] print_circular_bug+0x2e2/0x300 [ 431.199977][T13123] check_noncircular+0x12f/0x150 [ 431.204942][T13123] __lock_acquire+0x164c/0x2de0 [ 431.209830][T13123] ? preempt_schedule_common+0x7f/0xd0 [ 431.215314][T13123] ? preempt_schedule_thunk+0x16/0x40 [ 431.220712][T13123] ? __mutex_lock+0x321/0x1550 [ 431.225503][T13123] lock_acquire+0x115/0x350 [ 431.230025][T13123] ? __kmalloc_cache_noprof+0x61/0x600 [ 431.235508][T13123] ? __pfx___mutex_lock+0x10/0x10 [ 431.240554][T13123] fs_reclaim_acquire+0x71/0x100 [ 431.245506][T13123] ? __kmalloc_cache_noprof+0x61/0x600 [ 431.250981][T13123] __kmalloc_cache_noprof+0x61/0x600 [ 431.256282][T13123] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 431.261419][T13123] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 431.266591][T13123] __ipv6_dev_mc_inc+0x447/0xaf0 [ 431.271560][T13123] pndisc_constructor+0xe0/0x150 [ 431.276530][T13123] ? __pfx_pndisc_constructor+0x10/0x10 [ 431.282107][T13123] ? __kmalloc_noprof+0x1ab/0x720 [ 431.287151][T13123] ? pneigh_create+0x12c/0x4e0 [ 431.291968][T13123] ? pneigh_create+0x148/0x4e0 [ 431.296753][T13123] pneigh_create+0x253/0x4e0 [ 431.301365][T13123] neigh_add+0x77a/0x1090 [ 431.305727][T13123] ? __pfx_neigh_add+0x10/0x10 [ 431.310516][T13123] ? __dev_queue_xmit+0x29b/0x3820 [ 431.315663][T13123] ? __pfx_neigh_add+0x10/0x10 [ 431.320450][T13123] rtnetlink_rcv_msg+0x7b9/0xc00 [ 431.325424][T13123] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 431.330563][T13123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 431.336038][T13123] ? ref_tracker_free+0x689/0x830 [ 431.341090][T13123] ? __pfx_ref_tracker_free+0x10/0x10 [ 431.346493][T13123] netlink_rcv_skb+0x226/0x4a0 [ 431.351288][T13123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 431.356824][T13123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.362147][T13123] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.367375][T13123] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.372601][T13123] netlink_unicast+0x7bd/0x940 [ 431.377419][T13123] netlink_sendmsg+0x813/0xb40 [ 431.382224][T13123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.387549][T13123] ? apparmor_socket_sendmsg+0x98/0x360 [ 431.393117][T13123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.398430][T13123] sock_sendmsg_nosec+0x13a/0x180 [ 431.403499][T13123] sock_write_iter+0x2de/0x3e0 [ 431.408294][T13123] ? __pfx_sock_write_iter+0x10/0x10 [ 431.413608][T13123] ? bpf_lsm_file_permission+0x9/0x20 [ 431.419004][T13123] ? security_file_permission+0x75/0x260 [ 431.424678][T13123] vfs_write+0x612/0xba0 [ 431.428960][T13123] ? __pfx_vfs_write+0x10/0x10 [ 431.433759][T13123] ? __fget_files+0x2a/0x420 [ 431.438388][T13123] ksys_write+0x150/0x270 [ 431.442762][T13123] ? __pfx_ksys_write+0x10/0x10 [ 431.447650][T13123] do_syscall_64+0x166/0x520 [ 431.452267][T13123] ? trace_irq_disable+0x3b/0x140 [ 431.457337][T13123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.463430][T13123] ? clear_bhb_loop+0x70/0xc0 [ 431.468141][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.474067][T13123] RIP: 0033:0x7f768099e159 [ 431.478534][T13123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.498167][T13123] RSP: 002b:00007f7681799028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.506605][T13123] RAX: ffffffffffffffda RBX: 00007f7680c25fa0 RCX: 00007f768099e159 [ 431.514617][T13123] RDX: 00000000000000fc RSI: 0000200000000240 RDI: 0000000000000003 [ 431.522605][T13123] RBP: 00007f7680a3506b R08: 0000000000000000 R09: 0000000000000000 [ 431.530600][T13123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.538586][T13123] R13: 00007f7680c26038 R14: 00007f7680c25fa0 R15: 00007ffeb98857a8 [ 431.546614][T13123] [ 431.555467][ T5614] net_ratelimit: 413 callbacks suppressed [ 431.555489][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.555645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.555844][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.596995][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.597163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.614726][T13131] netlink: 'syz.3.1642': attribute type 1 has an invalid length. [ 431.700090][ T8115] bond3: (slave bridge5): failed to get link speed/duplex [ 431.811114][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 431.811179][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.920411][ T8091] bond3: (slave bridge5): failed to get link speed/duplex [ 432.040138][ T8115] bond3: (slave bridge5): failed to get link speed/duplex [ 436.580147][ T8115] net_ratelimit: 61 callbacks suppressed [ 436.580172][ T8115] bond3: (slave bridge5): failed to get link speed/duplex [ 436.690192][ T8085] bond3: (slave bridge5): failed to get link speed/duplex [ 436.774335][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.774468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.774834][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.810133][ T44] bond3: (slave bridge5): failed to get link speed/duplex [ 436.920176][ T59] bond3: (slave bridge5): failed to get link speed/duplex [ 436.930353][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.930523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.040600][ T59] bond3: (slave bridge5): failed to get link speed/duplex [ 440.131172][ T1309] ieee802154 phy1 wpan1: encryption failed: -22