last executing test programs: 3.099608396s ago: executing program 3 (id=13063): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x5d, &(0x7f0000000240), &(0x7f0000000300)=0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xe, 0xffff}, {0x8}}}, 0x170}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r7, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$igmp(0x2, 0x3, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2c, &(0x7f0000000180)=0x57b9, 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r10 = socket(0x15, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 2.697457194s ago: executing program 2 (id=13067): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0xffffffff}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 2.615754393s ago: executing program 4 (id=13070): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2.546620251s ago: executing program 3 (id=13071): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe}, 0x94) 2.463758768s ago: executing program 2 (id=13072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) (async) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x40}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe4) sendmsg$inet_sctp(r2, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) close(r2) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f000000aec0)={&(0x7f000000ad00)=[&(0x7f0000000000)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000000640)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f00000006c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000000700)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000000740)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f00000022c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0x4, 0x1}, {0x6, 0x9}, {0x5, 0x4}, {0x7fffffffffffffff, 0x9}, {0x2d1, 0x3}, {0xfffffffffffffff6, 0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x80, 0x8}, {0xffffffffffff8b48, 0x1c5}, {0x989, 0x8f3}, {0x7ff, 0x2}, {0x2, 0x4}, {0xfffffffffffffffa, 0x5}, {0x6, 0x39}, {0x10, 0xfffffffffffffff8}, {0xf, 0x4}, {0xb84, 0x9}, {0x3, 0xfc}, {0x9, 0x6}, {0xfffffffffffffffa, 0x3}, {0x80000001, 0x8000000000000000}, {0x7, 0x4}, {0xffe7, 0xf}, {0xec, 0x1}, {0x34a7aa7d, 0x1}, {0x400, 0x33c}, {0x1, 0xffffffff}, {0x0, 0x1}, {0x34c3478, 0x100000000}, {0x0, 0x2}, {0x0, 0x9}, {0xfff, 0x101}, {0x6b215107, 0x5}, {0xe, 0x65eb9f42}, {0xfffffffffffffff9, 0x8}, {0x6, 0x8}, {0x2}, {0x9, 0xfffffffffffffff7}, {0x800, 0x4}, {0x5, 0xe3}, {0x5, 0xffffffffffffffc0}, {0x4, 0x40}, {0x9}, {0x7, 0x8}, {0x100000000, 0x7}, {0x1, 0xffffffffeaa3ac34}, {0x9, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x81800000000, 0xf6}, {0x2, 0x8}, {0x200, 0x9}, {0x800, 0x6}, {0x10001}, {0x4, 0x24d}, {0x1ff, 0x6}, {0xa, 0x81}, {0x6, 0xe}, {0x2, 0x8}, {0x74, 0x10}, {0x5e6, 0x7}, {0x965, 0x200}, {0x3, 0xffffffff}, {0x8, 0xf052}, {0x3, 0x4}, {0x2, 0x9}, {0x75, 0x3}, {0x9, 0x1000}, {0xa, 0x8}, {0x5, 0x6}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x2f}, {0x7, 0xe0}, {0x9, 0x1}, {0x8, 0x8}, {0x17, 0x3}, {0x1c000000, 0xfffffffffffff5dd}, {0x8b, 0x5}, {0x5, 0x8}, {0x256}, {0x2, 0x9}, {0x7fffffff, 0x5}, {0x100000000, 0x4}, {0xd674, 0x3}, {0xb, 0x7fff}, {0x6ac5681d, 0x9}, {0xffffffff, 0x4}, {0x36, 0x7}, {0x800, 0xd}, {0x0, 0x1}, {0x4, 0x10000}, {0x1, 0x10000}, {0xfffffffffffffffc, 0x1}, {0x86, 0xe6a}, {0x6, 0x99}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x429f116f}, {0x0, 0x9}, {0x3, 0xfffffffffffffff8}, {0x3, 0x64}, {0x4, 0x2}, {0x94, 0x7}, {0x7, 0x7fffffffffffffff}, {0x5, 0x2}, {0x3, 0x4d02}, {}, {0xfffffffffffffff5, 0x7}, {0x1, 0x9}, {0x100, 0x2}, {0x665, 0xfff}, {0x8000, 0x9}, {0x0, 0xa8}, {0x2, 0x6}, {0x4, 0x72c25c74}, {0xb, 0x3}, {0x9, 0x8001}, {0x9, 0xd}, {0x0, 0x3013}, {0x5, 0x9}, {0x2, 0x7fffffff}, {0x1, 0x1ff}, {0x0, 0x1ff}, {0x1, 0x4}, {0x400000, 0x6}, {0x3, 0xb}, {0x7ff, 0x4}, {0x0, 0xfff}, {0x2, 0x20}, {0xceb, 0x6}, {0x7, 0x3}, {0x2, 0x4}, {0x8001, 0x3}, {0x1, 0x8000000000000000}, {0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x800, 0x1}, {0x1, 0x200}, {0x8, 0xe}, {0x3ff}, {0x5, 0x3}, {0xf8, 0x4000000000000}, {0x3, 0x8000}, {0x6c9, 0x7dc}, {0x40, 0x898}, {0x4, 0x23c47259}, {0x8000, 0x6}, {0x4, 0x4}, {0x10, 0x40}, {0x1b5, 0x8}, {0x1, 0x9}, {0x7, 0x7fffffffffffffff}, {0xe0f}, {0x7, 0xffffffffffffffff}, {0x7f, 0x8}, {0x4}, {0x8000, 0x3}, {0x5, 0x5}, {0x80, 0x3}, {0x1, 0xf}, {0x9}, {0x9, 0xffffffffffffff00}, {0x80000001, 0x7fff}, {0x5000000, 0x6a}, {0x9, 0x3}, {0x7fffffff, 0x4}, {0x101, 0x7f}, {0x9, 0xffffffff7fffffff}, {0xfffffffffffffb23}, {0x8}, {0x1}, {0x53dc, 0xa}, {0xffff, 0x4}, {0x2e2, 0x6}, {0x3, 0x5}, {0x101}, {0x2, 0x24}, {0x10, 0x4}, {0x80000001, 0x1000}, {0xffff, 0x8}, {0x5, 0x2}, {0xa, 0x689b98e1}, {0x100, 0x9}, {0xc, 0x1}, {0xfffffffffffffffd}, {0xa800000, 0x5}, {0x9, 0x7}, {0xd, 0x9}, {0x4, 0x100}, {0x241b30df, 0x5}, {0x5}, {0x1, 0x4}, {0x1, 0xfffffffffffffffb}, {0x7, 0xfffffffffffffffb}, {0x101, 0xd167}, {0x5, 0xfffffffffffff708}, {0x5e6f, 0x2}, {0x100000001, 0x8000000000000001}, {0x5, 0x5}, {0x101, 0x6d}, {0x1c, 0x8}, {0x200, 0x7}, {0x7de, 0x1d566912}, {0x8000000000000001, 0x100000000}, {0x7fffffff, 0x18a9}, {0x200000000000, 0x85}, {0x1, 0x7}, {0x6, 0x2}, {0x101, 0xd}, {0x4}, {0xff57, 0x5}, {0xb, 0x5}, {0x5, 0xffffffffffff26c1}, {0x7, 0x8}, {0x4000000, 0x2b18000000000000}, {0x5, 0x9}, {0x8, 0x81}, {0x961b, 0x3}, {0x8001, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0xa20}, {0x5, 0x6}, {0x101, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x302a, 0x2}, {0x2, 0x5}, {0xffdf, 0x5227}, {0x7, 0x3}, {0x584, 0x4}, {0x0, 0x89}, {0x7, 0x3}, {0x1}, {0xe9, 0xfffffffffffffffd}, {0x3ff, 0x6}, {0x6, 0x9}, {0x2, 0x6}, {0x9, 0x7}, {0x1}, {0xdd, 0x7}, {0x5, 0x6}, {0xd, 0x20000000}, {0x9, 0x1}, {0x5b01, 0xb}, {0x1, 0x1606}, {0x80000001, 0xc000000000}, {0x4354, 0x3}, {0x5, 0x3ff}, {0x0, 0x8}, {0xff, 0xffffffff00000001}, {0x6, 0x6}]}, &(0x7f0000003300)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}}, &(0x7f0000003440)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x9, 0x3}, {0xfff, 0xfffffffffffffffd}, {0x2, 0xd8}, {0x8, 0x8}, {0x3, 0x10001}, {0x27, 0x3}, {0x4, 0x24a}, {0x1000, 0xc680}, {0xe, 0x1}, {0x0, 0x38eab78f}, {0x4, 0x1}, {0x7f, 0x2}, {0x8, 0x6}, {0xa0f1, 0x7ff}, {0x58da, 0x40000000000}, {0x1, 0x9c0}, {0x3, 0x13}, {0xfffffffffffffdb1, 0x1}, {0x6, 0x2}, {0x9, 0xfffffffffffff259}, {0x1, 0x16d82a8a}, {0x100000000, 0x7dd0}, {0x0, 0x6}, {0x4, 0x7}, {0x3, 0x2}, {0x4, 0x2}, {0x74, 0x8}, {0x55f, 0x9}, {0x2, 0x6}, {0x2724, 0x6}, {0x8bcc, 0x8}, {0x2, 0x1000}, {0x2, 0x9b}, {0x3, 0x2}, {0x9, 0x3d4}, {0x6, 0x7}, {0x400, 0x401}, {0x2, 0xb7}, {0xfffffffffffffc01, 0x6}, {0x8, 0x7fffffff}, {0x8, 0x907}, {0xfffffffffffffff7, 0x1ff}, {0x5, 0x2}, {0x4, 0x80}, {0x2, 0x8000000000000000}, {0x1, 0x525b}, {0x7, 0x1}, {0x2, 0x6400}, {0x1f, 0x1}, {0x1, 0xffffffffffff0001}, {0x100, 0x3}, {0x7, 0x2}, {0x400, 0x201}, {0x2, 0x6}, {0x19, 0x80000001}, {0xffffffff00000000, 0x5}, {0x9, 0x2}, {0x1}, {0x2, 0x6}, {0x30, 0x4}, {0x81, 0x80000000}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x7fffffff}, {0x7, 0x9}, {0x30000000000, 0x1}, {0x9, 0x2}, {0xffffffffffffff70, 0x5}, {0x1, 0x9}, {0xffff, 0x7fff}, {0xa184, 0x5}, {0x2, 0xa0}, {0x0, 0x4}, {}, {0xfff, 0x6}, {0xfff, 0x5}, {0x5, 0xd17}, {0x4, 0x7}, {0x9, 0x400}, {0x1}, {0x649, 0x7}, {0x3, 0x4}, {0x6688, 0x40000000000}, {0x9, 0x8}, {0x35540000000, 0x9c4}, {0x1, 0x97}, {0x8, 0x67}, {0x0, 0x6}, {0x80000001, 0x7}, {0x9, 0x1000000000000}, {0x2, 0xc2a1}, {0x3, 0x1a}, {0x1ff, 0x401}, {0xbb, 0x8}, {0x8, 0x5}, {0x2, 0x2}, {0x9, 0xffffffff00000001}, {0x2, 0x1}, {0x3, 0x92}, {0x76c87d54, 0x8}, {0x3, 0xffffffffffff4e9a}, {0x81, 0x14}, {0x7, 0xfffffffffffff801}, {0x7f, 0x5}, {0x7, 0xb78}, {0x0, 0x4}, {0x80000001, 0x3}, {0x6f, 0x3}, {0x5, 0x4}, {0xfffffffffffffffb, 0xfffffffffffffff7}, {0x100000001, 0x9}, {0x5, 0x8}, {0x0, 0x4}, {0x4, 0x80000000}, {0x3}, {0x3, 0x401}, {0x8, 0x2}, {0x0, 0xca}, {0x3, 0x4d3}, {0x9cea, 0xfff}, {0x101, 0xd5}, {0xa, 0x8}, {0x1, 0x401}, {0x5, 0x8001}, {0x130a, 0x3}, {0x3, 0x2}, {0x5, 0x8}, {0x3, 0xe000000000}, {0xffffffff, 0x3}, {0x4, 0x5}, {0x3, 0x7}, {0xab1, 0x99b}, {0x6, 0xfffffffffffffff7}, {0x2, 0x3}, {0x0, 0x101}, {0x6, 0x7fffffff}, {0x9, 0x80}, {0xd4, 0x8000000000000001}, {0x1, 0x9000000}, {0xd, 0x6}, {0x2, 0x7}, {0xfffffffffffff801, 0x5}, {0x5}, {0x8, 0x1}, {0x10000}, {0x0, 0x1}, {0x7, 0xb}, {0x546, 0x8}, {0x325, 0xffffffffb458a345}, {0xfffffffffffffff9, 0x1}, {0x101, 0x3}, {0x8000, 0x1}, {0x8, 0x6}, {0x7, 0xef9}, {0x8, 0x400}, {0x1, 0x99db}, {0x0, 0x10001}, {0x3}, {0x1, 0x3}, {0x7}, {0x0, 0x1}, {0x93e3, 0x5}, {0x3, 0xa}, {0xf50d, 0x6}, {0x800, 0x7fffffff}, {0x9017, 0x3}, {0x3, 0x2}, {0xf3, 0x8000000000000001}, {0x9, 0x40}, {0x9, 0xc63}, {0x2, 0xff}, {0x8, 0x9}, {0x2}, {0x3, 0xea}, {0x3, 0x5}, {0x8, 0x8000}, {0x3, 0x7fffffffffffffff}, {0xfe6d, 0xffffffffffffffab}, {0x0, 0x1}, {0x6, 0xc7}, {0x2, 0xfbab}, {0x81, 0x6}, {0x0, 0xf00f}, {0x7f, 0x5}, {0x9, 0x8}, {0x6, 0x800}, {0xfffffffffffffff7, 0x9}, {0x6, 0x6}, {0x5, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x9, 0x2}, {0xece9, 0xfffffffffffffffc}, {0x2, 0x1}, {0x9, 0x264}, {0xffffffffffffff42, 0x10}, {0xd75}, {0x3, 0x800}, {0x1, 0x9}, {0x9, 0x8e2}, {0xfffffffffffffff8, 0x8000000000000}, {0x9, 0x7}, {0x0, 0x5}, {0x0, 0xfffffffffffffff8}, {0x3}, {0x7, 0x8}, {0x0, 0x8000}, {0x4, 0x3}, {0x7}, {0x3, 0x7}, {0x9, 0x101}, {0x3}, {0x1, 0x7fffffffffffffff}, {0x7ff, 0x5}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x6}, {0x3, 0x200}, {0x8000, 0xfffffffffffffffd}, {0x1, 0x3ff}, {0xffffffffa681de45, 0x401}, {0x9ad1, 0x6}, {0x0, 0x8}, {0x3}, {0x0, 0x5}, {0x4}, {0x7}, {0x8000, 0x1}, {0x5, 0x8}, {0x80000001, 0x2}, {0x7, 0x4}, {0x2, 0x40}, {0x3, 0x3}, {0x62685cb1, 0x6af8}, {0x8, 0x80}, {0xff, 0xfffffffffffffffd}, {0x3ff}, {0xbb02, 0x8}, {0x101, 0x6}, {0x3, 0xf7}, {0x33c3, 0xe1e}, {0x5}, {0x6, 0x9}, {0x44, 0xffffffff80000001}, {0x1, 0x7000000000000}, {0x9, 0x80}, {0xfffffffffffffff7, 0xff}, {0x4d1, 0x8eb}, {0x2, 0xe9}, {0x1, 0x5}, {0xbe, 0x4}, {0x8}, {0x8, 0x4000400}, {0x7f, 0x5}, {0xfffffffffffffff7, 0x3}]}, &(0x7f0000004480)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000004500)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000004540)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000004580)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f00000045c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004600)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000004680)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f00000046c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000004700)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000001}, {}, 0xd}, &(0x7f0000004840)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004880)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f00000048c0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000004900)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f0000004940)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000004980)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f00000049c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x8}, {0xffffffffffffffff, 0x6}, {0x1, 0x2}, {0x5, 0xe}, {0x3, 0x3}, {0x8, 0x74dc}, {}, {0x0, 0x6}, {0xfffffffffffffffc, 0x7}, {0xa8, 0x6c}, {0x6, 0x2}, {0x18c, 0x1}, {0x400, 0xffffffff}, {0x8, 0xec00000000000000}, {0x6, 0x98ac}, {0x6, 0x2000000000000}, {0x59d58694, 0x100000001}, {0x3, 0xed}, {0x5, 0x100000000}, {0x7, 0x8}, {0x9, 0xfffffffffffff346}, {0x8, 0x2}, {0x3, 0xffffffffffff3ce6}, {0x3ff800, 0x4}, {0x1ff, 0x100000000}, {0x8, 0x1}, {0x7, 0xad}, {0x7fff, 0x5}, {0x9, 0x4}, {0x4, 0x5}, {0x4, 0x2}, {0x10001, 0x6}, {0x3, 0x81}, {0x9, 0x2}, {0x1, 0x4d09}, {0xbbdb, 0x15}, {0x7, 0x3ff}, {0x3, 0x7}, {0x9, 0x4}, {0x8, 0x1}, {0x80000000, 0x9}, {0xee, 0xffffffff}, {0x2, 0x9}, {0x0, 0x9}, {0xffffffff00000001, 0x2}, {0x1, 0x8}, {0x9, 0x4}, {0x1, 0x6}, {0x0, 0x7}, {0xf, 0x1}, {0xff, 0x2}, {0x800, 0x7}, {0x3, 0x9}, {0xaf, 0x1400000}, {0x6e45, 0x8000000000000000}, {0x8, 0x7ff}, {0x9, 0xd}, {0xc2cae5f, 0x3ff}, {0x3, 0x1}, {0x1, 0x10}, {0x4, 0x8}, {0x6, 0xa}, {0xfff, 0x10000}, {0x1, 0x81}, {0x5, 0x800}, {0xfffffffffffff001, 0x1}, {0x401, 0x2}, {0xc, 0x3ff}, {0x228a, 0x2}, {0x9, 0xfffffffffffffffe}, {0x6, 0x6}, {0x0, 0x5}, {0x8001000000000, 0xff}, {0x8, 0x80}, {0x3, 0x7}, {0xff, 0x1}, {0x7, 0x3}, {0x8}, {0x2, 0x4c6e}, {0x3, 0x9}, {0x200, 0x80000000}, {0x401, 0x6}, {0x9, 0x660e}, {0xc70b, 0x5}, {0x4, 0x40000000000}, {0x5, 0x81}, {0x401, 0x3}, {0x9, 0x2}, {0xfffffffffffffff8, 0xfff}, {0xb9, 0x100000001}, {0x4, 0x5}, {0x0, 0x1}, {0xfffffffffffffff9, 0xfffffffffffffffa}, {0x40, 0x3ff}, {0x3, 0xd}, {0xfffffffffffffffb, 0x3}, {0x3, 0x8}, {0x4, 0x2}, {0x3, 0x1000}, {0x29b, 0xbdea}, {0xcb}, {0x10, 0x7}, {0x100000000, 0x2}, {0x200, 0x3}, {0xe1, 0x1042ff6d}, {0x0, 0x1}, {0xff, 0x2}, {0x2}, {0x7ff}, {0x0, 0x40}, {0x2, 0xffffffffffffffff}, {0x6, 0xc}, {0x3, 0x5}, {0x2, 0x4}, {0x94, 0x6}, {0x5, 0x400}, {0x80, 0x5}, {0x8000000000000000, 0x100}, {0x401, 0x10000}, {0x100000000, 0x6}, {0xffff, 0x2}, {0xffffffffffffffff, 0x2}, {0x3, 0xffffffffffff73bb}, {0xfffffffffffffffe, 0xffffffff}, {0x7, 0x7fffffff}, {0x2, 0x4}, {0x3, 0x2}, {0x6741, 0x8}, {0x6, 0x65d3}, {0x0, 0xfffffffffffffb60}, {0x4, 0x8000000000000000}, {0x800, 0x7}, {0x80000001, 0x3}, {0x8, 0x4}, {0x0, 0x193c}, {0x40}, {0x5000000, 0xe}, {0x6, 0x9}, {0x6, 0x81}, {0xffff}, {0xcaaf, 0xfffffffffffffff9}, {0x401, 0x5}, {0x5, 0x9}, {0x101, 0x1}, {0x3, 0x5}, {0x1, 0x3a0}, {0x6, 0x8000}, {0xc75, 0x101}, {0x6, 0x7}, {0x8, 0x5}, {0x5, 0xffff}, {0x100, 0x5}, {0x2}, {0xfffffffffffffff8, 0xa48b}, {0x2, 0xa}, {0x10000, 0x1082000000000000}, {0x9, 0x4}, {0x1000, 0x1ff}, {0x5, 0xfffffffffffffc8b}, {0xe4, 0x2}, {0x3ff, 0x9}, {0x7, 0x4ad9}, {0x7, 0x7}, {0x1, 0x810a}, {0xfc, 0x7ff}, {0xfffffffffffffff1, 0x9}, {0x9, 0x4cac}, {0x7fff, 0x6}, {0x7, 0x10000}, {0x401, 0x1}, {0x9a, 0x3d0330a9}, {0x800, 0x1}, {0xa89d, 0xffffffffffffffff}, {0x7, 0x5}, {0x5, 0x7}, {0x1, 0x7fff}, {0x101, 0x6}, {0x8, 0x200}, {0xfffffffffffffffb, 0xb02e}, {0x4, 0x8}, {0x7, 0x200}, {0x7, 0x8}, {0xf, 0x1}, {0x6, 0x8}, {0x1ff, 0xfffffffffffffff8}, {0x0, 0x2}, {0x2, 0x400}, {0x40, 0x100000000}, {0xfffffffffffffffa, 0x3}, {0x9, 0x1}, {0x2, 0x2e}, {0x100000001, 0x2}, {0x2, 0x9f}, {0xff, 0xcaef}, {0x1, 0x7fffffffffffffff}, {0x5, 0xc}, {0x5, 0xe7ad}, {0x3d71, 0x1ff}, {0x4, 0xb65}, {0x8, 0x1}, {0x8, 0x55}, {0x9, 0x9}, {0x4, 0x8000000000000000}, {0x1, 0x100}, {0x5, 0x2}, {0x6572, 0x7f}, {0x3ff, 0x6}, {0x5, 0x4}, {0x5, 0x8}, {0x4582, 0xae2b}, {0x0, 0x1000000000000}, {0x5, 0xfff}, {0x9}, {0xe, 0x6}, {0x6, 0xae48}, {0x393b, 0x8}, {0x6, 0x100000000}, {0x4, 0x7}, {0x18, 0x9}, {0x9f29, 0x3}, {0x8, 0x7}, {0x100000000, 0x5}, {0x5, 0x8}, {0x5}, {0x74d, 0x59d}, {0x100, 0x5}, {0x1, 0xe}, {0x1a0000000000, 0x4}, {0x819b, 0x9}, {0xb, 0x9}, {0x6, 0x3}, {0x8, 0x4}, {0xd6d, 0x1}, {0x3, 0x10}, {0x100000001, 0x502}, {0x8000, 0x7715}, {0x3f9fd0b7, 0x3}, {0x3, 0x9}, {0x4, 0x2}, {0x0, 0x2cc}, {0x5, 0x7}, {0xec4, 0x3}, {0x101, 0x1000000000}, {0x3, 0x8}, {0x1, 0x7}, {0xff, 0x4}, {0xfffffffffffffe1d, 0x5}, {0x4, 0x9}, {0x9, 0x1}, {0x4, 0xfffffffffffffffd}, {0xdfc, 0x3ff}, {0xea, 0x10000}, {0x78, 0x4}, {0x8, 0x20000000000}, {0x9, 0xfffffffffffffff7}]}, &(0x7f0000005a00)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000005a40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f0000005a80)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000005ac0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000005b00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000001}, [{0x1, 0x4}, {0x4, 0x8}, {0x5, 0x8}, {0x1, 0x7fff}, {0x7, 0x3}, {0x3, 0x40}, {0x5, 0xfd8e}, {0x200, 0x4fb}, {0x2, 0x5}, {0x0, 0x9}, {0x3, 0x2}, {0x7fff, 0xfffffffffffffffb}, {0xd0, 0x8000}, {0x7fffffffffffffff, 0xaa}, {0x7ff, 0x3}, {0x2, 0x7}, {0x482, 0x8}, {0x0, 0x400}, {0x40, 0x10001}, {0x65d, 0x8}, {0xfffffffffffffffe, 0x8a}, {0xfffffffffffffff8, 0x8}, {0x8, 0xf3d3}, {0xe6, 0x9}, {0x9, 0x4}, {0x4, 0x100000000}, {0xbddd, 0x4}, {0x9, 0xfffffffffffff7e0}, {0x40, 0x2}, {0x6, 0xb1b3}, {0x4, 0x3}, {0x3, 0x148}, {0x80000001, 0x401}, {0x5, 0xe47}, {0x80000001, 0x9}, {0xff, 0x1}, {0x9, 0x9}, {0x2, 0x6}, {0x80, 0xae7}, {0x8, 0x3}, {0x100000000, 0x2}, {0x0, 0x4}, {0x4, 0x8}, {0x9}, {0xc66, 0x4}, {0x4, 0x7e42}, {0x8, 0xfffffffffffffffa}, {0x100000000, 0x1ff}, {0x2, 0x7fffffff}, {0x1d0, 0x4}, {0x9, 0x7cd}, {0xf, 0x1}, {0x8, 0xfffffffffffffff8}, {0x400, 0xaad}, {0x4, 0x5}, {0x2a8, 0x18000000000000}, {0x0, 0x2}, {0xfffffffffffffffc, 0xffff}, {0x7, 0x48}, {0x1, 0x6}, {0x40, 0x6}, {0x0, 0x101}, {0xe305, 0xd}, {0x1, 0x8}, {0x4, 0xfff}, {0x7, 0x3800000}, {0x7, 0x9}, {0xffffffffffffffff, 0x9112}, {0x200, 0x100}, {0x7fffffffffffffff, 0xc53}, {0x3, 0x5}, {0x3, 0xf}, {0xfff, 0x8}, {0xffff, 0x100000000}, {0x101, 0xffff}, {0x3, 0x4}, {0x1, 0x3cd}, {0x8, 0xfffffffffffffff7}, {0x6, 0x9}, {0x7, 0xd4}, {0x7, 0x4}, {0xd}, {0x2, 0xf7}, {0xa398, 0xffff000000000}, {0xffffffffffffff01, 0x5a2}, {0x9, 0x3}, {0x8d, 0x1}, {0x9, 0x9ee3}, {0x0, 0x8001}, {0x3, 0x1}, {0x0, 0x4}, {0x5, 0x7}, {0x1825, 0x3}, {0x3}, {0x8, 0x200}, {0x6, 0xcd9}, {0x63, 0x5c1}, {0x7b, 0x8}, {0x1ff, 0xb6f}, {0x5, 0x101}, {0xc1, 0x7}, {0x563, 0x7}, {0x8000000000000000, 0x1}, {0xff, 0x9}, {0x3, 0x2}, {0x9, 0x3}, {0x7, 0x80000001}, {0x4, 0x2}, {0xffffffffffffffff, 0x4}, {0x4, 0x8}, {0x4, 0x8}, {0xd, 0x4}, {0xffffffffffffffff, 0x5}, {0x1702394a, 0x7}, {0x4}, {}, {0x8, 0x100000000}, {0x4, 0x1}, {0x5, 0x19d}, {0xfffffffffffffff7, 0x4}, {0x5, 0x7fffffff}, {0x1d7}, {0x8, 0xd8}, {0xece, 0x100000000}, {0x8, 0xf7}, {0x7fffffffffffffff, 0x49}, {0x6, 0x8}, {0x1, 0x4ae4}, {0x6, 0x8}, {0x3, 0x9}, {0x30}, {0x9, 0x6}, {0x7fff, 0xf}, {0x1, 0x9}, {0x83, 0x80000001}, {0x8, 0x9}, {0x0, 0x3}, {0x800, 0x2}, {0x8, 0x8}, {0x6, 0xfffffffffffffff7}, {0x0, 0x1}, {0x7fffffff, 0x7}, {0x1, 0x9}, {0xfff, 0x401}, {0x5, 0xfffffffffffffff9}, {0x7, 0x7ff}, {0x0, 0x81}, {0xd, 0x5}, {0x1, 0x8}, {0x989}, {0x7, 0x4}, {0x1000, 0x7}, {0x101, 0x7}, {0x0, 0x6b31}, {0x8, 0xffffffffffffff80}, {0x8, 0xff}, {0x100, 0x6}, {0xf453, 0x53fa857c}, {0x86e5, 0x8}, {0x250, 0x1000}, {0x10001, 0x3}, {0x7fffffff, 0x9}, {0x40000000, 0x1}, {0x9, 0x7}, {0x60000, 0x1}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x81}, {0x1, 0x5cc2}, {0x9, 0x4}, {0xcd7e, 0x4}, {0x40, 0x2}, {0x6, 0x6}, {0x7f}, {0x8, 0x2}, {0x8000000000000000}, {0x20000, 0x50000000000000}, {0x1, 0x1}, {0x4, 0x4}, {0x2, 0x10001}, {0xffffffffffffffff, 0x7fff}, {0x7, 0x2208}, {0xfffffffffffffff9, 0xfffffffffffffffe}, {0xa3, 0x1}, {0x2, 0x7}, {0x2, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x80000001, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x81, 0x3484}, {0x4, 0x8}, {0x100000000, 0x2}, {0x80000001, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x6, 0x1}, {0x8, 0x5}, {0x3, 0xfffffffffffff00e}, {0x8529, 0x400}, {0x5, 0x5}, {0x5a3, 0x6}, {0x0, 0x7fffffff}, {0x3, 0xa}, {0x0, 0xe1c8}, {0x9, 0x1}, {0x6, 0x3ff}, {0x1000000000, 0x6}, {0x6, 0x6}, {0x8, 0x5}, {0x10001, 0xffffffffffffff38}, {0x40000000000000, 0xffffffffffffff00}, {0x4, 0x6}, {0x5, 0x4}, {0x7b2, 0x6}, {0x4, 0x6}, {0x8, 0x6}, {0x8, 0x1}, {0x6, 0x2e}, {0xee08, 0x2}, {0xfffffffffffffffd, 0x83c}, {0xd93e, 0x2}, {0x2, 0x1000}, {0x4e, 0x2a974966}, {0x1, 0x5}, {0x8a, 0xff}, {0x4, 0x2}, {0x5, 0xffffffffffffdb78}, {0x8, 0x10001}, {0x4, 0x1}, {0x34, 0x5}, {0x1, 0x6}, {0x3, 0xe}, {0x0, 0x3}, {0xfffffffffffffffc, 0x1}, {0x0, 0x2c87}, {0xfe7, 0x4}, {0xe5f1, 0x7}, {0xfffffffffffffffe, 0x5}, {0x5, 0x1}, {0xfffffffffffffff7, 0x6}, {0x1, 0x3}, {0x80, 0x1}, {0x7, 0x6}, {0x635, 0x9}, {0x10, 0x7fff}, {0x491, 0x6ba}, {0xfffffffffffffffd, 0xffffffffffffffff}, {0x3, 0xffffffffffffffeb}, {0x7, 0x100000000}, {0xff, 0x9}, {0x0, 0x4}, {0x5309, 0xf}]}, &(0x7f0000006b40)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000006bc0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000006c00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000006c40)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000006c80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x4d}, &(0x7f0000006dc0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000006e00)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000006e40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0x2, 0x1}, {0xffffffffffffffff, 0x2}, {0xfcd, 0x6}, {0x4, 0x8000}, {0x2, 0x3}, {0x7b4, 0x3ff}, {0xffffffffffffffff, 0x6}, {0xfff, 0x8}, {0x42d, 0x7}, {0x80000000, 0x4}, {0x3, 0x947}, {0x8, 0x7}, {0x10}, {0x3, 0x2}, {0x1, 0x9}, {0x8675, 0x8}, {0x7fffffffffffffff, 0x6}, {0x6, 0x7}, {0x6, 0x100}, {0xfffffffffffffffc, 0x2}, {0x2466e273, 0xff}, {0xe, 0xffffffffffffffff}, {0x2, 0x1}, {0xac7a, 0x8}, {0x8, 0x80000000}, {0x80000001, 0x2}, {0x4, 0x6000000000}, {0x1ff, 0xc94}, {0xb, 0x3f6}, {0x180000, 0x12000}, {0x8, 0x7}, {0x8, 0x2}, {0x200, 0x2}, {0x7, 0x8}, {0x3, 0x10}, {0x4, 0xc4}, {0x6, 0x5}, {0x0, 0xfff}, {0x100000000, 0x7}, {0xfffffffffffffff7, 0xf}, {0x9}, {0x6, 0x800}, {0x5}, {0xfffffffffffffff9, 0x9}, {0x8000000000000001, 0x3}, {0x3, 0x1000}, {0x6}, {0xd6e000, 0x1}, {0x5, 0x3}, {0x9, 0x1ff}, {0x2, 0x4}, {0x5973, 0xa92}, {0xc14, 0x1000}, {0x4, 0x8}, {0x6, 0x3}, {0x9, 0x4}, {0xe, 0x10000}, {0x1, 0x5}, {0x9, 0x81}, {0x6}, {0x9, 0x1b}, {0x3, 0x2}, {0x3, 0x5}, {0x3, 0xffffffff}, {0x0, 0x8000000000000001}, {0x9, 0x96d4}, {0x81, 0x3ff}, {0xbfbb, 0x4}, {0x705, 0x401}, {0x1, 0x5}, {0x9, 0x7}, {0x100000001, 0xda}, {0x1, 0x99}, {0x4, 0x9}, {0xb, 0x40}, {0x5, 0x2}, {0x1d44, 0x4}, {0x1ff, 0xf20400000}, {0x8, 0x4000000000000000}, {0x9, 0xb9}, {0x7fffffff, 0x80}, {0x7, 0x8001}, {0x4, 0x1}, {0x7, 0x800}, {0x101}, {0x8, 0xff}, {0x100000000, 0x1ff}, {0x7, 0x100}, {0x72, 0x70}, {0x7fffffff, 0x7fffffffffffffff}, {0x46e, 0x4}, {0x7ff, 0xfffffffffffffffa}, {0x18}, {0x3, 0x4}, {0x81, 0x1}, {0x3, 0x9}, {0x6, 0x1}, {0x10000, 0x1}, {0x2, 0x2}, {0xe, 0xf2}, {0x2, 0x8}, {0x1e, 0x9}, {0x4}, {0x3, 0x81}, {0x1, 0x42}, {0xf1, 0x8}, {0x1, 0x8}, {0x8, 0xdad}, {0x5, 0x1}, {0xfffffffffffffff8, 0x1}, {0x80000001, 0x838}, {0x4c4}, {0xd6d8, 0x5}, {0x1, 0x1}, {0xd, 0x2}, {0x7}, {0x3ff, 0x5}, {0x4, 0xffffffffffffffff}, {0x9, 0x10001}, {0x100000001, 0x4}, {0x9e, 0xb8}, {0xa95, 0x37aa}, {0x5, 0x2}, {0x81, 0x10000}, {0x4a800000, 0x7}, {0x3, 0x4}, {0x473eea19, 0x2}, {0x4, 0xbe1}, {0xc, 0x8}, {0x7, 0x1000}, {0x967, 0x9}, {0x80, 0x7}, {0x8000000000000001, 0x8}, {0x8000000000000001, 0x9}, {0x100000001, 0x6}, {0xffffffffffffffff, 0xfffffffffffffffc}, {0x6, 0xff}, {0x4, 0x6}, {0x2}, {0xc, 0x9}, {0xa, 0x1}, {0x7fffffffffffffff, 0x401}, {0x7f, 0xf031}, {0x0, 0x7}, {0x2, 0x100000001}, {0xffff}, {0x0, 0x5}, {0x4, 0x4}, {0x40, 0x4}, {0x9, 0x1}, {0xffff, 0x80000000}, {0x9, 0x630}, {0x8000000000000000, 0x25}, {0x1, 0x4}, {0x8, 0x3}, {0x1}, {0x9, 0x7}, {0x8}, {0xfffffffffffffffd, 0x3}, {0x572, 0x6}, {0x6, 0x9}, {0x5b, 0x3}, {0x25, 0x586}, {0x3000000, 0x8000000000000001}, {0x0, 0x7}, {0xfff, 0x4}, {0xff, 0x9}, {0x7fff}, {0x7, 0x7}, {0x8, 0x8940}, {0x8, 0x5b20}, {0x60000, 0x6}, {0x1, 0x7}, {0x200, 0x1}, {0x9, 0x8}, {0xd98, 0x5}, {0x60, 0x8}, {0x5, 0x8}, {0x3, 0x7f}, {0x7, 0x9}, {0x4, 0x7}, {0xe3, 0x5}, {0x4, 0x6}, {0x0, 0x101}, {0xffffffffffffff81, 0x2ea5}, {0x8, 0x401}, {0x1ff}, {0x8, 0xd4}, {0x3, 0x8}, {0x3, 0x1}, {0xc, 0xfff}, {0x7, 0xffffffffffff6192}, {0x81, 0x10000}, {0xe64}, {0x5, 0x8}, {0x9, 0xffffffff}, {0x3d, 0x1}, {0x10000, 0x101}, {0x7}, {0x7, 0x87b}, {0x7, 0xd2a0}, {0x8, 0x2}, {0x7, 0x8bbb}, {0x4, 0x1}, {0x6, 0x3}, {0x9, 0x1}, {0x80, 0x6}, {0xfffffffffffffffc, 0x1000}, {0x7, 0x80}, {0x8}, {0x1}, {0xa, 0x6}, {0x5, 0x7}, {0x3f, 0x3}, {0x5, 0x61b}, {0x2, 0x20000000}, {0x7fffffffffffffff, 0x5}, {0x1, 0x8}, {0x4f7, 0x6}, {0x9, 0x6}, {0xffffffffffffffff, 0x2}, {0x6, 0x401}, {0xfffffffffffffff8, 0x1000}, {0x6, 0x4e3}, {0x6, 0x1}, {0x80000000, 0x8}, {0x751, 0x5}, {0x403, 0x8}, {0x0, 0x6}, {0x2, 0xc}, {0x164, 0x4}, {0xffffffffffffff00, 0x7f}, {0x7, 0x25}, {0x6, 0xd}, {0x7fffffffffffffff, 0x8000000000000001}, {0x0, 0x7}, {0x2, 0x400}, {0x6, 0x6322}, {0x5, 0x9}, {0x7, 0x5}, {0xf2d, 0xb}, {0xd, 0x9}, {0x0, 0x79}, {0x5, 0x616}, {0x4, 0xf}, {0x1, 0x7f}, {0x971b, 0x6}, {0x1, 0x40cd}, {0xffffffffffffffff, 0x800}, {0x9, 0x4}, {0x80, 0x10}, {0x8000000000000000, 0x2}, {0x6e, 0x80000000}, {0x4, 0x8}, {0x8, 0x7}]}, &(0x7f0000007e80)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000007f00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000007f40)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000007f80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x101, 0xc42c}, {0xf1e, 0x8000000000000000}, {0x3714a42b}, {0x8001, 0x8}, {0x5, 0x9}, {0xffffffffffffffff, 0xcce5}, {0x7, 0x4dae8353}, {0x400, 0x800}, {0x7, 0x6022}, {0x4, 0x1}, {0x9, 0xd}, {0x0, 0x3eb}, {0x4, 0x80}, {0x7fffffff, 0x4}, {0x6, 0x2}, {0xa2c, 0xffffffff}, {0x5, 0x2}, {0x7, 0x9}, {0x10000, 0x100}, {0xa35, 0x865afaa}, {0x0, 0x4}, {0x7da, 0x21fdf2a0}, {0x5b, 0xc}, {0x715, 0x4}, {0x1, 0x2d82}, {0x4, 0x9}, {0x8, 0x6}, {0x7, 0x7}, {0x8, 0x8}, {0x7, 0xcfbc}, {0x2ad, 0xe5f8}, {0x7fffffff, 0x80000000}, {0x8, 0x8}, {0x927, 0x7}, {0x6, 0x9}, {0x7, 0x8000000000000001}, {0x5, 0x9}, {0x4, 0xfffffffffffffffc}, {0x0, 0x2}, {0xffffffff, 0x60000000}, {0x5}, {0x40, 0x9}, {0x2, 0x6}, {0xffffffffffffff16, 0x3}, {0x5, 0x8}, {0x401, 0x7fffffffffffffff}, {0xc0fd1c, 0x3}, {0x28, 0xfffffffffffffffe}, {0x100000000, 0x100000000}, {0xab1, 0x1}, {0x800, 0x3}, {0xb81a, 0x400}, {0x3, 0x7e12}, {0x7ff, 0xb}, {0x7, 0x6}, {0x7ef}, {0x1}, {0x6c1a, 0x7fff}, {0x7, 0x5}, {0x1548}, {0xd25, 0x5}, {0xffffffff, 0x1}, {0x5, 0x6}, {0x2, 0x6fb}, {0x1, 0x100000000}, {0xc, 0x179}, {0x3, 0x27e}, {0x1000, 0xf4}, {0xffffffffffffffff, 0x10001}, {0x1, 0x80000000}, {0x2, 0x6}, {0x8cc, 0x7}, {0x3, 0x8}, {0x9, 0x8}, {0xffff, 0x5}, {0x3, 0x4}, {0x87, 0x74f}, {0x4, 0xffffffff}, {0x5, 0x2162}, {0x7f, 0x8}, {0x0, 0x5}, {0x10001, 0x9}, {0xda0, 0x3225}, {0x8, 0x81}, {0x4, 0x6}, {0x10, 0x1}, {0x4, 0xfffffffffffffffe}, {0x5, 0x100}, {0x4033, 0x2b4b}, {0x149, 0x8}, {0x4, 0x12f}, {0x9, 0x5}, {0x4d, 0x1}, {0x100000000}, {0x7, 0x965e}, {0x4, 0x3e7}, {0x8fb0, 0x197}, {0x46e7, 0xe22}, {0x9, 0x80000001}, {0x8, 0x6}, {0x5, 0x2}, {0x7, 0x2bfd}, {0x3, 0xe5}, {0x9, 0x8000000000000000}, {0x4, 0x208}, {0x6d, 0x62b2b39a}, {0x7f, 0x4}, {0x10001, 0x8}, {0x8000000000000001, 0x3}, {0xb, 0x9}, {0x9, 0x9adb}, {0x10000, 0x76b4}, {0x400, 0xfffffffffffffff8}, {0x2, 0x3}, {0x29, 0x7fffffffffffffff}, {0x7, 0x1}, {0x8000000000000000, 0x7}, {0x8, 0x8}, {0xc, 0xed8}, {0x80000000, 0x8000000000000000}, {0xe2e, 0x1}, {0x5000, 0xfba3}, {0xdb, 0x2}, {0x1a34, 0x5}, {0x2, 0x7fffffff}, {0x6, 0xc}, {0x6, 0x6}, {0xfff, 0x401}, {0x0, 0x5}, {0x401, 0x2}, {0x7, 0x9}, {0x80000000000, 0x8}, {0xc01, 0x1}, {0x4, 0xde6}, {0x3, 0x80000000}, {0x100, 0xc}, {0x6, 0x9}, {0x4, 0x4}, {0xffffffff, 0x2400}, {0x2, 0x2ff2}, {0x3, 0x59}, {0x7, 0x8}, {0x800, 0xa8aa}, {0x10, 0x86}, {0x4, 0xfffc000000000000}, {0xffffffff, 0xc29}, {0xffffffffffffffff, 0x9}, {0xfffffffffffffffa, 0x8}, {0x5, 0x40}, {0xbf2, 0x5}, {0x5, 0x7}, {0x9, 0x9}, {0x4, 0x8}, {0x2, 0x5}, {0xe99, 0x100000}, {0xffff, 0x3}, {0xfffffffffffffffc, 0x101}, {0x1, 0x100000000}, {0xb, 0x7}, {0x4, 0x7fffffff}, {0x0, 0x5}, {0x7fffffffffffffff, 0x7f}, {0xfffffffffffffff7, 0x8}, {0x80, 0x9}, {0xfffffffffffff2df, 0x9}, {0x0, 0xffffffff}, {0xf, 0x2}, {0x7, 0x7}, {0x8, 0x7f}, {0x1, 0x100000001}, {0x80000001, 0x5}, {0x67, 0x7fffffff}, {0x6, 0x7}, {0x9, 0x86}, {0x2, 0x40e}, {0x5, 0x1}, {0x7, 0x1}, {0x24e9, 0x9}, {0x2, 0x716}, {0x7}, {0x800, 0x8}, {0x3, 0xc}, {0x3, 0x6}, {0x1, 0x100000000}, {0x3, 0x7}, {0x2, 0x1c15}, {0x1000, 0x8000000000000000}, {0x401, 0x6}, {0x8, 0x5}, {0x5, 0xe4e8}, {0x7, 0x8}, {0x7f, 0x9}, {0x80000000, 0x9}, {0x4, 0x4}, {0x3fe0000000000, 0xffff}, {0x100000000, 0x800}, {0xc4c, 0x4}, {0xffffffffffff5fbc, 0x9b}, {0x8, 0x7fffffff}, {0x0, 0x1ff}, {0x1, 0x40}, {0x7, 0x2}, {0xffffffffffffffff}, {0xd1, 0x6}, {0x8, 0x1}, {0xffffffffffffffff, 0x1}, {0xe987, 0x2}, {0x800, 0x7}, {0x8001, 0x81}, {0x7f, 0x3ff}, {0x10000, 0x4}, {0x3, 0x1}, {0x1, 0x7f}, {0x9, 0xffffffffffffff25}, {0xb24a, 0x7}, {0x6, 0xfffffffffffffff0}, {0x3, 0x5}, {0x88, 0xa}, {0x1, 0xb42b}, {0x0, 0xfffffffffffffffe}, {0x5b87, 0x2}, {0x9, 0x2}, {0x4, 0x9}, {0x100000001, 0x3}, {0x5591, 0x9}, {0xffff, 0x1}, {0x8, 0x401}, {0x7, 0x5}, {0x4, 0x7}, {0x80000001, 0x9}, {0x4}, {0x9, 0x8001}, {0x270, 0x1000}, {0x4, 0xfc2}, {0x80, 0x4}, {0xfffffffffffffff9, 0x5}, {0xca, 0xc}, {0x1, 0x4}, {0x77af, 0x7}, {0x1, 0xff}, {0xfffffffffffffffa, 0x3}, {0x3, 0x100000001}, {0x7, 0xfffffffffffffffd}, {0x80000001, 0x4}, {0xffffffffffffffbe, 0x3}, {0x0, 0x3}, {0x4, 0xfffffffffffffff9}, {0x10001, 0x4}, {0xb7, 0x7bd}, {0x4, 0x9}, {0x3, 0x5}, {0x3, 0x200}, {0xaef, 0x3}, {0x8000000000000001, 0x9}, {0x0, 0x5}]}, &(0x7f0000008fc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000009000)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8000}, &(0x7f0000009140)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f00000091c0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000009200)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000009b80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x0, 0x5}, {0x8, 0x8}, {0xc, 0x9}, {0xf}, {0xb, 0xffffffffffffdffd}, {0x7, 0x3}, {0x1, 0xfffffffffffff801}, {0x9, 0x8}, {0x2, 0x4}, {0x4, 0xe5}, {0x7, 0x7f}, {0xffffffffffffffff, 0x7fffffffffffffff}, {0x5, 0xffffffffffffff71}, {0x40, 0x10}, {0x7, 0x6}, {0x400, 0xfc9}, {0x82f1, 0x7}, {0x7, 0x7fffffffffffffff}, {0x6, 0xf8fc}, {0x0, 0x5}, {0x1, 0x23}, {0x55, 0x330000000000000}, {0xa4, 0x100}, {0x0, 0x1}, {0xffffffffffff23cb, 0x89e}, {0x40, 0x8}, {0x3, 0x3ff}, {0x7, 0x7}, {0xfffffffffffffffa, 0x5}, {0xd, 0x9}, {0xfff, 0x81}, {0x10, 0x1}, {0x0, 0x6}, {0x5, 0x7fffffffffffffff}, {0x8, 0xac}, {0x5, 0xffffffffffff69ab}, {0x0, 0x9}, {0x5cb, 0x1}, {0x8000000000000001, 0x5}, {0x0, 0x70}, {0x5, 0x200}, {0xfff, 0x9}, {0x3, 0x3fe7}, {0xda, 0x2}, {0x1ff, 0x4}, {0x5a3, 0x7}, {0x9, 0x3}, {0x2000, 0x6}, {0x95ec, 0x6}, {0x8, 0xfff}, {0x22, 0x10000}, {0x1, 0x3}, {0x6f, 0x100000001}, {0x6}, {0x6}, {0xd, 0x8}, {0xd, 0xfffffffffffffff7}, {0x8, 0x80}, {0x800, 0x401}, {0x2, 0x9779}, {0x208, 0x6}, {0x9, 0x61c}, {0x3ad, 0x1}, {0x1ff, 0xfffffffffffffff8}, {0x0, 0x5}, {0x10000, 0x7fffffff}, {0x6, 0x9a0}, {0x3, 0x4}, {0x7, 0xfffffffffffffffd}, {0x680, 0x7}, {0x3, 0xe18}, {0xfffffffffffffffe, 0xffffffffffffff59}, {0xc9f, 0x3}, {0x5, 0x7}, {0x3, 0x3}, {0x353, 0x4}, {0x9, 0xc2}, {0xfffffffffffffff8, 0xffffffff}, {0x3, 0x8000000000000001}, {0x10001, 0xff}, {0x10, 0xd}, {0x10, 0x81}, {0x0, 0x3}, {0x9, 0x401}, {0x8}, {0x8, 0x101}, {0x1, 0xff}, {0x2, 0x1}, {0x7493314d, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x0, 0x70000}, {0x6, 0x53f}, {0x7, 0x4}, {0x3, 0x4}, {0x100, 0xd700000000000000}, {0x0, 0x5}, {0x5, 0x80}, {0x7, 0x8001}, {0x10, 0x4}, {0x5, 0x7}, {0x1, 0x7}, {0xffff, 0x3}, {0x400, 0x3}, {0xf0, 0x10001}, {0x4, 0xfff}, {0x3, 0x4}, {0xfff, 0x9}, {0xf7, 0x100000000}, {0x6, 0x4}, {0xa8, 0xfffffffffffff322}, {0x4, 0x7}, {0xb5bd, 0x2}, {0xfffffffffffffe01, 0x5}, {0x200, 0x8000000000000001}, {0x9, 0x6}, {0x5}, {0x7, 0x4b598dfc}, {0x401, 0x5}, {0x1}, {0x0, 0x401}, {0x8000000000000000, 0x7}, {0x1, 0x9}, {0x7fffffffffffffff, 0x5}, {0x200, 0x4}, {0x3, 0x8000000000000001}, {0x1, 0x892d}, {0x7, 0x4}, {0x8001, 0xa}, {0x0, 0x9}, {0x3, 0x46}, {0x10, 0x33}, {0x261, 0x8}, {0x4, 0x2}, {0x6, 0xff}, {0xfffffffffffffffb, 0xb1af}, {0xd8, 0x2}, {0x40, 0x61f2991}, {0x9, 0x8000}, {0x9, 0x5}, {0x0, 0x49f8}, {0xc6b4, 0x1}, {0x7, 0x5}, {0xffffffffffffff8f, 0x100000001}, {0x2, 0x3}, {0x52, 0x5}, {0x6, 0x5}, {0x800, 0xffff}, {}, {0x80000000, 0x3}, {0x101, 0x3}, {0x2, 0x67}, {0xfffffffffffffffd, 0x80a}, {0x4, 0x7}, {0x8001, 0xd}, {0x7ff, 0x1000}, {0xa, 0x401}, {0x3, 0x3}, {0x1, 0x6000000}, {0xd5, 0xffffffffffff680b}, {0x9, 0x58}, {0x800, 0xffffffffffff8001}, {0x40, 0x6}, {0xd63, 0x5}, {0xd5d, 0x8}, {0x7f, 0x9}, {0x1000, 0x4}, {}, {0x4, 0x100000000}, {0x2f87, 0x9}, {0x2d, 0xa3}, {0x100, 0x7}, {0x9, 0x6}, {0x7, 0x1}, {0x5, 0xe51}, {0x6, 0x5}, {0x8, 0x1}, {0x3, 0x7}, {0xfffffffffffffc01, 0x9}, {0x1, 0x1}, {0x8000, 0x5}, {0x3, 0x6}, {0x10, 0x6}, {0x59, 0x3e}, {0x1}, {0xd, 0xfffffffffffffe01}, {0x0, 0x2}, {0x0, 0x10}, {0x7fffffffffffffff, 0x7fffffff}, {0x7, 0xef}, {0xd4}, {0x800, 0x5}, {0x4, 0x46}, {0x9c2d, 0xa}, {0x1, 0xfff}, {0xdb45, 0x3}, {0x8, 0x3}, {0x4, 0x4}, {0xfffffffffffffffa, 0x9}, {0x280, 0x6}, {0x8, 0x9}, {0xd, 0xfffffffffffffff7}, {0x5, 0x5}, {0xf42, 0xc3d2}, {}, {0x100000001, 0xe49a}, {0xfffffffffffffff3, 0x5}, {0x6, 0xfffffffffffff7f5}, {0x80, 0x6}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x1ff, 0x8}, {0xf345, 0x9}, {0x3c5, 0xb5}, {0x0, 0x172f}, {0x4, 0xfa9}, {0x2, 0x4}, {0x3, 0x8}, {0x80000000}, {0x1, 0x6}, {0x7, 0xe}, {0x7ff, 0xffff}, {0x4, 0x9}, {0x6, 0x8}, {0x243d85ef}, {0x80b1, 0x8000000000000001}, {0x9, 0x75e}, {0x8, 0x7}, {0x900, 0xfffffffffffffffa}, {0x1ff, 0x2}, {0x1, 0x4}, {0x8, 0x6}, {0x1c, 0x2}, {0x2, 0x9c3f}, {0xe0, 0x6}, {0x4, 0x95}, {0x7, 0xe}, {0x4, 0x3}, {0x2, 0x8}, {0x8, 0xffffffff}, {0xffffffff, 0x9b}, {0x1}, {0x5, 0x6994637f}, {0x68, 0x2}, {0x9, 0x4ba}, {0x2, 0x5}, {0x8000000000000001, 0x996}, {0x8, 0x3}, {0x9, 0x7d64}, {0x9, 0x77}, {0x9, 0x9}, {0x3, 0xfa}, {0xf, 0xfc7d}, {0x0, 0x9}]}, &(0x7f000000abc0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f000000ac40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f000000ac80)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}], 0x32}) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.349688732s ago: executing program 3 (id=13074): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="05000000010001", 0x7) write(r0, &(0x7f0000000140)="0d009b2bd1c401", 0x7) read(r0, &(0x7f0000000400)=""/128, 0x80) write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_netfilter(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000000) read(r0, &(0x7f0000000400)=""/128, 0x80) write(r0, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) 2.2347046s ago: executing program 4 (id=13075): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0x7, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x6, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0xa, 0x4040}}, {0x4}}]}]}, 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001640)={&(0x7f0000000300)=ANY=[@ANYBLOB="14130000", @ANYRES16=r2, @ANYBLOB="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"], 0x1314}, 0x1, 0x0, 0x0, 0x4884}, 0xcc050c6d337d26a4) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a00114006", 0x35}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000111401fffc0000000000000008004a000100000008000300feffff7f08004a000100000008004b0013000000080001"], 0x48}, 0x1, 0x0, 0x0, 0x24000844}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f00000005c0)="dc9b709847", &(0x7f00000003c0)=""/79}, 0x20) write(r0, &(0x7f0000000000)="4c00000011000f140011000200001d0002000000200000", 0x17) 1.960604558s ago: executing program 4 (id=13078): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900feefa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 1.874497171s ago: executing program 1 (id=13080): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000001000370425bd70000059b06f06000000", @ANYRESDEC=r0, @ANYBLOB="83040500000000004c00f0eab0579b1ddb3df548f18d12800e614f5327c43acd617000003c00028008000100", @ANYRES32=r1, @ANYBLOB="080015008e1a01000500160002000000080006000a01010005000900de000000050009000700"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00075f12f5f5000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 1.816699765s ago: executing program 0 (id=13081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="dbaa000000008500"/17], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000a029}, 0x94) 1.721328538s ago: executing program 1 (id=13082): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000003fc0)=[{&(0x7f00000049c0)="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", 0x105}, {&(0x7f0000003b80)="38d7", 0x2}], 0x2, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x2000000002ffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100088026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f00000000c0)) getsockopt$inet_mptcp_buf(r9, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000080)) write$cgroup_devices(r3, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r10, 0x6, 0x24, 0x0, &(0x7f00000003c0)) r11 = socket(0x10, 0x2, 0x0) write(r11, &(0x7f0000000100)="200000001a005f0400f9f4070009040580022000000009000000000008000100", 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000ffff27bd7000fedb00001000", @ANYRES32=0x0, @ANYBLOB="150c000010030100140012800a00010069706f6962000000040002800a000100aaaaaaaaaa140000"], 0x40}, 0x1, 0x0, 0x0, 0x4028841}, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) socket$inet_tcp(0x2, 0x1, 0x0) 1.614428626s ago: executing program 4 (id=13083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001880)={0x4c, r4, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'pimreg\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) accept(r0, &(0x7f0000000440)=@in={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x1, {0xffff}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xffffffffffffff09, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_INDEV={0x0, 0x3, 'team0\x00'}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@deltfilter={0x48, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) nanosleep(&(0x7f0000000f00)={0x1}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0xc) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x120008c) pwritev(r8, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="c95234ae04d0ea5a73f73fca1ca3d1f196c033f49c25a2f72fec1fda9133e82fd365b9dcf0", 0x25}], 0x1, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xf5, [@dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @loopback, @multicast1, @remote]}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x7, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@empty, 0x10001}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x98}, 0x40000) pwritev(r8, 0x0, 0x0, 0x0, 0x20000007) sendto$packet(r6, &(0x7f0000000200)='E', 0x1, 0x0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040812) 1.56244335s ago: executing program 0 (id=13084): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000000c0)={0xfb0, 0x80000000, 0x2, 0x800d, 0xad}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000500)=0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x2010, 0xffffffffffffffff, 0xa110c000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f0000002640)=0xfdc) shutdown(r1, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r0) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8a30318ef4"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a9d8106d78"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}}, 0x4040074) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket(0x29, 0x80805, 0x0) 1.447867519s ago: executing program 2 (id=13085): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x15) syz_genetlink_get_family_id$tipc2(0x0, r5) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40480, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) setsockopt$X25_QBITINCL(r9, 0x106, 0x1, &(0x7f0000000340), 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f00000006c0)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x2}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x4, "91ec"}]}]}}}}}}}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="0200000508fcff85ddffff1144ee", 0xe}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r1}, 0x41) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 1.330248852s ago: executing program 0 (id=13086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x800) 1.268533524s ago: executing program 3 (id=13087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="dbaa00fe10010000715030000000000095"], 0x0, 0xa}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1e0000000000000000400000050000004c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000089000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0xc1100, 0x10}, 0x94) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x4000005, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) r2 = socket(0x2, 0xa, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) unshare(0x20000400) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'lblc\x00', 0x0, 0x455}, 0x2c) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) (async) r5 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg(r5, &(0x7f0000001740)={&(0x7f0000000000)=@in6={0xa, 0x4622, 0x9, @remote, 0x400}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000001640)=[{0x58, 0x88, 0xff, "f79bd3c1e791c990eec584d27bede30a1487bc09a13f0aa65ecd697f3134bed34860ee16317e9e735e35e1a1e5bb0497f3ab1ac8bcad731e2e23f166e4610973e3b2"}, {0x78, 0x10e, 0x6, "71cbdab101f2b857d2ebcdae87d0cade2f00affe1bad04f2a72f8912e4a00fe704a028f121c4df58845891a7e28c1e28439638a08d31bcf92138a1a13c58f48862c22602ebcbc281086a7d67910e8bdd371f79c0bebe5fa1555a50000ec92d2c2a"}], 0xd0}, 0x4004) socket(0x1, 0x803, 0x0) 1.057801697s ago: executing program 0 (id=13088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000180)=0x4c, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#'], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 1.030424204s ago: executing program 2 (id=13089): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf}, 0x94) 982.282287ms ago: executing program 1 (id=13090): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000004a00000300000000020000000be9bce402000000000000000000"], 0x0, 0x32, 0x0, 0x3}, 0x28) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0xb3, 0x69, &(0x7f00000000c0)="a885e5d713c37c980c16f6c758ca16fa173c858b8fe53ef3d99423ebc28b53b2ec86c96b6db233c2fd17fe9bb81765b4ed475a0a116e4e4c4cb6592046379162a8876f9e8ed8e651b4f2144acfbc95e9473fd3e9dcecdfe61f0830ae581d6d7dfd51d651884379e040e8f95f9b5a873a14f5813789109668a11a7352acb7a911b430d22fc602b0664f997fd1b6b6ee22902fbbea497ed9633a13ef96fa6afaf63a81da55d80bf09f968cfb4234c323ec202292", &(0x7f0000000180)=""/105, 0x6, 0x0, 0xae, 0x1000, &(0x7f0000000200)="b3caf8487d33c217a7344e4d5d048f00c08f8d19b1510fc03d9e26ea5a98fd4571c1cbd0c2078ce4d6fabc45ff1cb000a5ae325b37f5b2abf4eba81c61ee503d6aa324d1c4b79336c1f5bb133537ff959f5c82b8f80100d38dc4a3680858f5bca74f34f64ceab9624ecc33923487e011853697d63fdb7e47ce24bcec40ebd3e4623908b2fff67771245503c46f1a4d3da3ddf6cefff4f6011548b2d60dbf681be42965183c0ff7b1b169fe3ec7ff", &(0x7f00000002c0)="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", 0x1, 0x0, 0x6}, 0x50) 812.94449ms ago: executing program 1 (id=13091): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x5d, &(0x7f0000000240), &(0x7f0000000300)=0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xe, 0xffff}, {0x8}}}, 0x170}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r7, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$igmp(0x2, 0x3, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2c, &(0x7f0000000180)=0x57b9, 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0), 0x4) r10 = socket(0x15, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 725.149404ms ago: executing program 0 (id=13092): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x5d, &(0x7f0000000240), &(0x7f0000000300)=0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xe, 0xffff}, {0x8}}}, 0x170}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r7, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$igmp(0x2, 0x3, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2c, &(0x7f0000000180)=0x57b9, 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r10 = socket(0x15, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 605.778331ms ago: executing program 1 (id=13093): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x103}, 0x94) 575.209224ms ago: executing program 4 (id=13094): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x0, 0x4000000, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2000000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e20000008000700000003e80c00058008000100524153000c000d80080001007f000002"], 0x9c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000100)="280000010000007f00000106b7", 0xd, 0x0, &(0x7f0000000200)={0x2, 0x6b7, @loopback}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r7, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x3, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'macvlan1\x00', {}, 0x3}) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002142, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) 572.985554ms ago: executing program 2 (id=13095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x200000, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 460.39494ms ago: executing program 0 (id=13096): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1d\x00'}]}, 0x1c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e24, 0x1, 0x4e22, 0xfbfd, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x4000003}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x4, 0x98410313d8738712, 0x4, 0xfffffe01}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x22c00000000) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x18, r5, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040000}, 0x40040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8c1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, 0x0, 0x200840c4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r9, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 406.480063ms ago: executing program 1 (id=13097): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="05000000010001", 0x7) write(r0, &(0x7f0000000140)="0d009b2bd1c401", 0x7) read(r0, &(0x7f0000000400)=""/128, 0x80) write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_netfilter(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000000) read(r0, &(0x7f0000000400)=""/128, 0x80) write(r0, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) 142.39068ms ago: executing program 3 (id=13098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000180)={r0, &(0x7f0000000040)='\x00', 0x422400, &(0x7f0000000080)={@align=0x4000000000000000, {0x100, 0x401, 0xff, 0x5}}, 0x724, &(0x7f00000000c0), &(0x7f0000000140)=0x6}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x148}}, 0x0) 100.87032ms ago: executing program 2 (id=13099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbfb, "", [@address_filter={0x28, 0x1a, {@in=@local, @in=@private=0xa010101, 0xa, 0x1, 0xb0}}]}, 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f000000fec0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000140)='lp', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)='Y`w', 0x3}], 0x1, &(0x7f0000000e00)=[{0x10, 0x10a, 0x8000}, {0x10, 0x1, 0x9}], 0x20}}], 0x2, 0x20008010) (async) sendmmsg(r2, &(0x7f000000fec0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000140)='lp', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)='Y`w', 0x3}], 0x1, &(0x7f0000000e00)=[{0x10, 0x10a, 0x8000}, {0x10, 0x1, 0x9}], 0x20}}], 0x2, 0x20008010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000007dc0)=@newtfilter={0x8b4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x874, 0x2, [@TCA_CGROUP_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x9, 0x3, 0x5, {0x7, 0x2, 0x3, 0x6, 0x4824, 0x94}, {0x4, 0x1, 0x5, 0xfffa, 0x1, 0x7}, 0x6, 0xa1aa, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x1, 0x0, 0xe3a1, 0x9, 0x2, 0x1693, 0x9, 0xffffffff, 0xffffffff, 0x1, 0x80, 0xfffffe01, 0x3, 0x1ff, 0x5, 0x8, 0x5, 0x2, 0x80000000, 0x1, 0x7, 0x3, 0xb3, 0xfffffbff, 0xc, 0xfc4, 0x5, 0x2, 0x5, 0x9, 0x34e, 0x3, 0x8, 0x3ff, 0x3, 0x9, 0x7, 0x7fffffff, 0x4, 0x6, 0x97f, 0xde, 0xd, 0x7, 0x2, 0x481d, 0x7fffffff, 0x0, 0x5, 0x4a09, 0xa63, 0x7fe, 0x3, 0x9, 0xcb, 0x3, 0x7, 0xffff45cc, 0x7, 0x8, 0x1, 0x5, 0xcbb, 0x8, 0x8662, 0x3, 0x9, 0x5, 0xffff, 0x27, 0xfffffffa, 0x8000, 0x1, 0xc, 0xfff, 0x8, 0x5, 0x1, 0x2, 0x40, 0x48, 0xa64, 0x40, 0x8, 0x2, 0xf, 0x0, 0x2, 0x7, 0x9, 0x400, 0x10000, 0x0, 0x5, 0x9, 0x7, 0x2, 0x6, 0x0, 0x3, 0x4, 0x2, 0x1, 0x2, 0x17141ccd, 0x3, 0x80000001, 0xfffffffb, 0xffffffe7, 0xff, 0x0, 0x20000000, 0x2, 0x6, 0x5, 0x9, 0x4b, 0x6, 0x8, 0x8, 0x200, 0x218d, 0x4, 0x4, 0x3ff, 0x1, 0xff, 0x3, 0x0, 0x2, 0x4, 0x1000, 0x6, 0x2, 0xffff2238, 0x9, 0x5, 0x4, 0x8, 0x6, 0x9, 0xfe0c, 0xfffffffd, 0xffffff81, 0x7, 0x9, 0x8001, 0x1000, 0xfff, 0x9, 0x1, 0x5, 0xfffffff7, 0x37, 0x78, 0x4, 0x9, 0x5, 0x5, 0x2, 0xfffffffb, 0x800, 0x62e, 0x5, 0xbb, 0x84, 0x3, 0x6, 0xc17e, 0x3, 0x6, 0xffffffff, 0xb, 0x3, 0x8, 0x1, 0x0, 0xef, 0xfffffffd, 0x8, 0x6, 0x9ad1, 0x5, 0x3, 0x4, 0x5, 0xb, 0xe, 0xfffffc01, 0x5, 0x39, 0x2, 0xb, 0x7fff, 0x74, 0x200, 0x3, 0x0, 0xe1, 0x974, 0x2, 0x9, 0xfffffff9, 0x2, 0x9, 0x7, 0x2e, 0xfffffffa, 0x5fb, 0x7fffffff, 0x271a, 0x5, 0x2, 0x7, 0x56, 0x2, 0x5, 0xdd3, 0x4, 0x9, 0x9, 0x1, 0x4, 0xf, 0x400, 0x2, 0x800, 0x7, 0x0, 0xfffffffe, 0x1, 0x3, 0x3, 0x8, 0x3718, 0x6, 0xf, 0x8, 0x6, 0x1ff, 0x20000, 0x8, 0x7, 0x3, 0xfffffff8, 0x4, 0x0, 0x6, 0x5d, 0x49, 0x2, 0x6, 0x2, 0x3ff, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x8, 0x4d2a, 0x1, 0x5, 0x9, 0x0, 0x3, 0x8000, 0xffffba77, 0x9, 0x5, 0x4, 0x7, 0x3, 0xf, 0x4f0c, 0x4, 0x8000, 0x5, 0x10001, 0x1000, 0x0, 0x2, 0x3, 0x2, 0x4cc, 0xec, 0x800, 0x7f, 0x7, 0x1, 0x8, 0x0, 0xebe, 0x4, 0x5, 0x8e0, 0xfffffff9, 0x402a, 0x5, 0x1, 0x80000000, 0xcfc, 0x8, 0xffffff01, 0x9, 0x6, 0x1, 0x8001, 0xffffffff, 0x8, 0x9, 0xffffffff, 0x7, 0xb90f, 0x7ff, 0x20, 0x0, 0x1, 0x5, 0x4, 0x2, 0xb1, 0x11d, 0x7e, 0x3, 0x800, 0x1, 0x2, 0x3, 0xccb, 0x7, 0x2, 0x9, 0xfffffff7, 0x6, 0x7b, 0x80, 0x304, 0x3, 0xc7, 0x8, 0x5, 0x1, 0x9, 0xff, 0x5, 0x0, 0x7, 0xfffffffa, 0x2, 0xa2, 0x8001, 0x3, 0xa, 0xd563, 0x7fff, 0x1, 0x53e468b3, 0x5, 0x3, 0x314, 0x400, 0x4, 0xffff, 0x800, 0xb, 0x5, 0x1, 0x7d, 0x0, 0xea34, 0x0, 0x7, 0x68d, 0x2, 0x6, 0x200, 0x10000, 0x793d, 0x7, 0x876d, 0xfffff800, 0x5, 0xfff, 0x6, 0x5, 0x0, 0xfffffff9, 0x1, 0x5, 0x5c88, 0x6, 0x80, 0x75e, 0x9, 0x8, 0x1ff, 0x7fffffff, 0x7, 0x81, 0xffffffff, 0x35, 0x0, 0x81, 0x101, 0x100, 0x52, 0x0, 0x9, 0x0, 0xfffffc00, 0xfffffffc, 0x6, 0x7fffffff, 0x9, 0x5, 0x6, 0x400, 0x6, 0x8001, 0x7, 0xfffff144, 0x5, 0x6, 0x200, 0x5, 0x4, 0x9, 0x5, 0x1, 0x9, 0xfff, 0xe, 0x7, 0x4, 0x3, 0x601f, 0x800, 0x6, 0x9, 0x7, 0x3, 0x7, 0x400, 0x9, 0x3, 0x8, 0x9, 0x9, 0x9, 0x3, 0x0, 0x3ee, 0x4, 0x62cb, 0x3ff, 0x2, 0x52, 0xfffffff9, 0xffffffff, 0xb62, 0x1, 0x10000, 0x9c8, 0x1, 0x80000001, 0x6eb, 0x4cc7, 0x2, 0x4, 0xbd9e, 0xfff, 0x7, 0x8, 0x2, 0x4, 0x1, 0x400, 0x3, 0xbf, 0x5, 0x5, 0x80000000, 0x2, 0x8, 0xfffffb1a, 0x81, 0x3, 0x7, 0x9e80, 0x100, 0x10, 0xc, 0x0, 0x2, 0x1, 0x5000000, 0x80000001, 0x8, 0x8d80, 0x4609, 0x3, 0x46b, 0x9, 0x4, 0x7, 0x6, 0x2, 0x200, 0x8, 0x8, 0x0, 0x1ff]}]}, @TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcaaf}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 472.049µs ago: executing program 4 (id=13100): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000004c0)={{0x3c, @remote, 0x4e20, 0x0, 'wrr\x00', 0x2, 0x8, 0x10}, {@remote, 0x4e22, 0x1, 0x5, 0x1, 0x1ff}}, 0x44) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000000540)=r6, 0x12) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x43}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) 0s ago: executing program 3 (id=13101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000340)=""/38, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x678eba39, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000050010000400000008001b000001f900"], 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) r14 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r13) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r14, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) (async, rerun: 64) r15 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) (rerun: 64) kernel console output (not intermixed with test programs): ive one [ 1512.686139][T15859] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1512.724537][T15881] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1512.805685][ T171] bond5: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 1512.944881][ T171] bond5: active interface up! [ 1513.027021][T15894] netlink: 'syz.0.12278': attribute type 1 has an invalid length. [ 1513.189785][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12282'. [ 1513.241054][T15915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12280'. [ 1513.286094][T15894] bond7: (slave veth17): Enslaving as an active interface with a down link [ 1513.344604][T15899] bond6: (slave veth0_to_bond): Releasing active interface [ 1513.365213][T15899] bond7: (slave veth0_to_bond): making interface the new active one [ 1513.375469][T15899] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1513.388802][T15916] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1513.447216][T15919] netlink: 'syz.2.12283': attribute type 61 has an invalid length. [ 1513.447237][T15919] netlink: 'syz.2.12283': attribute type 62 has an invalid length. [ 1513.448709][T15919] netlink: 'syz.2.12283': attribute type 1 has an invalid length. [ 1513.697889][ T4022] Bluetooth: hci4: ISO packet for unknown connection handle 3684 [ 1513.850068][T15938] syzkaller0: entered promiscuous mode [ 1513.850096][T15938] syzkaller0: entered allmulticast mode [ 1514.233595][ T4022] Bluetooth: hci3: ISO packet for unknown connection handle 3684 [ 1514.403070][T15956] vlan2: entered promiscuous mode [ 1514.403100][T15956] veth0_to_bridge: entered promiscuous mode [ 1514.461429][T15963] x_tables: duplicate underflow at hook 1 [ 1514.842383][T15984] netlink: 'syz.4.12305': attribute type 10 has an invalid length. [ 1515.165320][T15985] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1515.503158][T16011] vlan2: entered promiscuous mode [ 1515.503187][T16011] veth0_to_bridge: entered promiscuous mode [ 1515.809218][ T171] net_ratelimit: 68 callbacks suppressed [ 1515.809243][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1515.920315][ T4919] bond5: (slave dummy0): failed to get link speed/duplex [ 1515.952258][ T4022] Bluetooth: hci2: ISO packet for unknown connection handle 3684 [ 1516.027612][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1516.136619][ T4902] bond5: (slave dummy0): failed to get link speed/duplex [ 1516.377940][ T4912] bond5: (slave dummy0): failed to get link speed/duplex [ 1516.491156][ T4919] bond5: (slave dummy0): failed to get link speed/duplex [ 1516.596632][ T4902] bond5: (slave dummy0): failed to get link speed/duplex [ 1516.706667][ T4902] bond5: (slave dummy0): failed to get link speed/duplex [ 1516.832896][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1516.946596][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1517.198030][T16075] FAULT_INJECTION: forcing a failure. [ 1517.198030][T16075] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.198066][T16075] CPU: 0 UID: 0 PID: 16075 Comm: syz.2.12334 Not tainted syzkaller #0 PREEMPT(full) [ 1517.198096][T16075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1517.198110][T16075] Call Trace: [ 1517.198119][T16075] [ 1517.198130][T16075] dump_stack_lvl+0xe8/0x150 [ 1517.198167][T16075] should_fail_ex+0x410/0x560 [ 1517.198200][T16075] should_failslab+0xa8/0x100 [ 1517.198228][T16075] ? skb_clone+0x212/0x3a0 [ 1517.198260][T16075] kmem_cache_alloc_noprof+0xa1/0x600 [ 1517.198297][T16075] ? skb_clone+0x212/0x3a0 [ 1517.198335][T16075] skb_clone+0x212/0x3a0 [ 1517.198371][T16075] __netlink_deliver_tap+0x355/0x6e0 [ 1517.198407][T16075] ? netlink_deliver_tap+0x2e/0x1b0 [ 1517.198432][T16075] netlink_deliver_tap+0x19c/0x1b0 [ 1517.198457][T16075] netlink_unicast+0x781/0x940 [ 1517.198502][T16075] netlink_sendmsg+0x813/0xb40 [ 1517.198536][T16075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.198568][T16075] ? apparmor_socket_sendmsg+0x98/0x360 [ 1517.198598][T16075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.198628][T16075] sock_sendmsg_nosec+0x14e/0x190 [ 1517.198655][T16075] ____sys_sendmsg+0x54e/0x850 [ 1517.198692][T16075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1517.198733][T16075] ? import_iovec+0x73/0xa0 [ 1517.198766][T16075] ___sys_sendmsg+0x2a5/0x360 [ 1517.198795][T16075] ? __lock_acquire+0x747/0x2de0 [ 1517.198823][T16075] ? __pfx____sys_sendmsg+0x10/0x10 [ 1517.198892][T16075] ? __fget_files+0x2a/0x420 [ 1517.198922][T16075] ? __fget_files+0x3a2/0x420 [ 1517.198963][T16075] __x64_sys_sendmsg+0x1b1/0x290 [ 1517.198997][T16075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1517.199051][T16075] do_syscall_64+0x166/0x520 [ 1517.199083][T16075] ? trace_irq_disable+0x3b/0x140 [ 1517.199105][T16075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.199129][T16075] ? clear_bhb_loop+0x70/0xc0 [ 1517.199156][T16075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.199178][T16075] RIP: 0033:0x7f209c19e199 [ 1517.199199][T16075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.199218][T16075] RSP: 002b:00007f209d0ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1517.199243][T16075] RAX: ffffffffffffffda RBX: 00007f209c425fa0 RCX: 00007f209c19e199 [ 1517.199259][T16075] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000001c [ 1517.199274][T16075] RBP: 00007f209d0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.199289][T16075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.199303][T16075] R13: 00007f209c426038 R14: 00007f209c425fa0 R15: 00007ffc07b947a8 [ 1517.199339][T16075] [ 1517.199573][T16075] __nla_validate_parse: 9 callbacks suppressed [ 1517.199588][T16075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12334'. [ 1517.259807][T16075] vlan2: entered promiscuous mode [ 1517.782568][T16089] xt_hashlimit: max too large, truncated to 1048576 [ 1517.784108][ T4022] Bluetooth: hci4: ISO packet for unknown connection handle 3684 [ 1518.448533][T16108] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12342'. [ 1518.594067][T16111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12342'. [ 1518.753062][T16121] FAULT_INJECTION: forcing a failure. [ 1518.753062][T16121] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.753100][T16121] CPU: 1 UID: 0 PID: 16121 Comm: syz.0.12346 Not tainted syzkaller #0 PREEMPT(full) [ 1518.753140][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1518.753161][T16121] Call Trace: [ 1518.753170][T16121] [ 1518.753180][T16121] dump_stack_lvl+0xe8/0x150 [ 1518.753218][T16121] should_fail_ex+0x410/0x560 [ 1518.753251][T16121] should_failslab+0xa8/0x100 [ 1518.753279][T16121] ? skb_clone+0x212/0x3a0 [ 1518.753313][T16121] kmem_cache_alloc_noprof+0xa1/0x600 [ 1518.753351][T16121] ? skb_clone+0x212/0x3a0 [ 1518.753390][T16121] skb_clone+0x212/0x3a0 [ 1518.753427][T16121] __netlink_deliver_tap+0x355/0x6e0 [ 1518.753464][T16121] ? netlink_deliver_tap+0x2e/0x1b0 [ 1518.753491][T16121] netlink_deliver_tap+0x19c/0x1b0 [ 1518.753517][T16121] netlink_unicast+0x781/0x940 [ 1518.753564][T16121] netlink_sendmsg+0x813/0xb40 [ 1518.753597][T16121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1518.753631][T16121] ? apparmor_socket_sendmsg+0x98/0x360 [ 1518.753662][T16121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1518.753707][T16121] sock_sendmsg_nosec+0x14e/0x190 [ 1518.753736][T16121] ____sys_sendmsg+0x54e/0x850 [ 1518.753774][T16121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1518.753817][T16121] ? import_iovec+0x73/0xa0 [ 1518.753851][T16121] ___sys_sendmsg+0x2a5/0x360 [ 1518.753885][T16121] ? __lock_acquire+0x747/0x2de0 [ 1518.753914][T16121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1518.753987][T16121] ? __fget_files+0x2a/0x420 [ 1518.754026][T16121] ? __fget_files+0x3a2/0x420 [ 1518.754070][T16121] __x64_sys_sendmsg+0x1b1/0x290 [ 1518.754106][T16121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1518.754163][T16121] do_syscall_64+0x166/0x520 [ 1518.754196][T16121] ? trace_irq_disable+0x3b/0x140 [ 1518.754220][T16121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.754243][T16121] ? clear_bhb_loop+0x70/0xc0 [ 1518.754272][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.754295][T16121] RIP: 0033:0x7f49ced9e199 [ 1518.754316][T16121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.754336][T16121] RSP: 002b:00007f49ccff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1518.754361][T16121] RAX: ffffffffffffffda RBX: 00007f49cf025fa0 RCX: 00007f49ced9e199 [ 1518.754379][T16121] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000001c [ 1518.754394][T16121] RBP: 00007f49ccff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.754409][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.754423][T16121] R13: 00007f49cf026038 R14: 00007f49cf025fa0 R15: 00007ffebc1ae148 [ 1518.754461][T16121] [ 1518.755563][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12346'. [ 1519.095399][T16127] netlink: 'syz.2.12348': attribute type 1 has an invalid length. [ 1519.095424][T16127] netlink: 756 bytes leftover after parsing attributes in process `syz.2.12348'. [ 1519.288205][T16121] vlan2: entered promiscuous mode [ 1519.288230][T16121] veth0_to_bridge: entered promiscuous mode [ 1519.519478][T16139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12350'. [ 1519.627596][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12352'. [ 1519.865814][T16151] netlink: 'syz.1.12354': attribute type 11 has an invalid length. [ 1520.015619][ T4022] Bluetooth: hci3: ISO packet for unknown connection handle 3684 [ 1520.307813][T16177] netlink: 'syz.0.12366': attribute type 5 has an invalid length. [ 1520.307838][T16177] netlink: 'syz.0.12366': attribute type 9 has an invalid length. [ 1520.307855][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12366'. [ 1520.313616][T16177] netlink: 'syz.0.12366': attribute type 5 has an invalid length. [ 1520.313725][T16177] netlink: 'syz.0.12366': attribute type 9 has an invalid length. [ 1520.313741][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12366'. [ 1520.314057][T16177] netlink: 'syz.0.12366': attribute type 5 has an invalid length. [ 1520.314076][T16177] netlink: 'syz.0.12366': attribute type 9 has an invalid length. [ 1520.314092][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12366'. [ 1520.621432][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.621457][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.695598][T16186] syzkaller1: entered promiscuous mode [ 1520.695625][T16186] syzkaller1: entered allmulticast mode [ 1520.839024][ T171] net_ratelimit: 21 callbacks suppressed [ 1520.839049][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1520.891860][T16200] netlink: 'syz.3.12372': attribute type 18 has an invalid length. [ 1520.947708][ T171] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1520.947788][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1520.949012][ T171] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1520.949054][ T171] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1520.949088][ T171] netdevsim netdevsim3 €Â: set [0, 0] type 1 family 0 port 4352 - 0 [ 1521.061773][ T4902] bond5: (slave dummy0): failed to get link speed/duplex [ 1521.171069][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1521.279048][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1521.568761][ T4912] bond5: (slave dummy0): failed to get link speed/duplex [ 1521.648400][ T4912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.648424][ T4912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.677943][ T4912] bond5: (slave dummy0): failed to get link speed/duplex [ 1521.863066][ T4022] Bluetooth: hci1: ISO packet for unknown connection handle 3684 [ 1521.932915][T16229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.933667][T16229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.210845][T16245] __nla_validate_parse: 7 callbacks suppressed [ 1522.211820][T16245] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12388'. [ 1522.267815][T16229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.270197][T16249] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12388'. [ 1522.302868][T16229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.510240][T16229] gretap0: left allmulticast mode [ 1522.549458][ T4912] bond5: (slave dummy0): failed to get link speed/duplex [ 1522.549527][ T4922] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.549572][ T4922] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.549611][ T4922] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.549648][ T4922] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.657104][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1522.748258][T16254] netlink: 'syz.1.12391': attribute type 1 has an invalid length. [ 1522.768117][ T4919] bond5: (slave dummy0): failed to get link speed/duplex [ 1522.901119][T16258] netlink: 112 bytes leftover after parsing attributes in process `syz.0.12390'. [ 1522.978490][ T4902] wlan0: Trigger new scan to find an IBSS to join [ 1523.127776][T16268] netlink: 112 bytes leftover after parsing attributes in process `syz.3.12394'. [ 1523.373930][T16277] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12396'. [ 1523.422136][T16273] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12396'. [ 1523.634661][T16290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12397'. [ 1523.906293][T16297] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12400'. [ 1523.916566][T16297] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12400'. [ 1524.020080][ T171] wlan0: Trigger new scan to find an IBSS to join [ 1524.132148][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12402'. [ 1524.208534][T16301] bond1: option lacp_active: invalid value (5) [ 1524.211729][T16301] bond1 (unregistering): Released all slaves [ 1524.436159][T16315] veth0_macvtap: left promiscuous mode [ 1524.706000][T16323] vlan2: entered promiscuous mode [ 1524.977130][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1525.389456][T16345] netlink: 'syz.0.12414': attribute type 2 has an invalid length. [ 1525.487212][T16351] netlink: 'syz.1.12417': attribute type 1 has an invalid length. [ 1525.751538][T16362] vlan2: entered promiscuous mode [ 1525.917875][ T4902] net_ratelimit: 21 callbacks suppressed [ 1525.917901][ T4902] bond5: (slave dummy0): failed to get link speed/duplex [ 1526.142763][T16372] ip6erspan0: entered promiscuous mode [ 1526.142791][T16372] ip6erspan0: left allmulticast mode [ 1526.177868][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1526.257788][ T4022] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1526.287131][ T4919] bond5: (slave dummy0): failed to get link speed/duplex [ 1526.462649][T16377] syzkaller0: entered promiscuous mode [ 1526.462682][T16377] syzkaller0: entered allmulticast mode [ 1526.482559][ T4918] bond5: (slave dummy0): failed to get link speed/duplex [ 1526.667726][T16391] netlink: 'syz.4.12428': attribute type 23 has an invalid length. [ 1527.285965][T16417] __nla_validate_parse: 19 callbacks suppressed [ 1527.285990][T16417] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12436'. [ 1527.304020][T16417] xt_hashlimit: size too large, truncated to 1048576 [ 1527.304043][T16417] xt_hashlimit: max too large, truncated to 1048576 [ 1527.545706][T16430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12439'. [ 1527.612042][T16432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12439'. [ 1529.058836][ T4916] wlan0: Trigger new scan to find an IBSS to join [ 1530.102913][ T4912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.737620][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1531.556575][ T4902] bond5: (slave dummy0): failed to get link speed/duplex [ 1531.667190][ T4900] bond5: (slave dummy0): failed to get link speed/duplex [ 1531.779301][ T4916] bond5: (slave dummy0): failed to get link speed/duplex [ 1531.785137][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.841534][T16445] macvlan3: entered allmulticast mode [ 1531.841560][T16445] gretap0: entered allmulticast mode [ 1531.888937][ T4902] bond5: (slave dummy0): failed to get link speed/duplex [ 1531.941796][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12440'. [ 1531.941831][T16449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12440'. [ 1531.997292][ T4902] bond5: (slave dummy0): failed to get link speed/duplex [ 1532.106579][ T4918] bond5: (slave dummy0): failed to get link speed/duplex [ 1532.217736][ T4912] bond5: (slave dummy0): failed to get link speed/duplex [ 1532.234282][T16452] netlink: 'syz.0.12443': attribute type 16 has an invalid length. [ 1532.234309][T16452] netlink: 'syz.0.12443': attribute type 17 has an invalid length. [ 1532.358192][ T4900] bond5: (slave dummy0): link status up again after 0 ms [ 1532.376629][ T4900] bond5: (slave dummy0): link status up again after 0 ms [ 1532.396692][ T4918] bond5: (slave dummy0): link status up again after 0 ms [ 1532.523468][T16481] netlink: 'syz.2.12448': attribute type 1 has an invalid length. [ 1532.630961][T16485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12448'. [ 1532.743834][T16452] ip6erspan0: left promiscuous mode [ 1532.938484][T16489] bond1 (unregistering): Released all slaves [ 1533.022162][T16495] block nbd0: reconnected socket [ 1533.022258][T16495] block nbd0: reconnected socket [ 1533.039210][T17556] block nbd0: Receive control failed (result -32) [ 1533.039272][ T4022] block nbd0: Receive control failed (result -32) [ 1533.098725][ T4912] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1533.099647][ T4912] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1533.107691][ T9601] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1533.108046][ T9601] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1533.179059][ T4922] bond6: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 1533.206516][ T4922] bond6: (slave veth15): making interface the new active one [ 1533.213816][ T4922] bond6: active interface up! [ 1533.282835][ T171] bond7: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 1533.372002][ T4922] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1533.398514][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12452'. [ 1533.532384][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12453'. [ 1533.585803][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12453'. [ 1533.636897][ T5733] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1533.673136][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12455'. [ 1533.696967][ T5733] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1533.814566][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12453'. [ 1533.893776][T16509] macvlan3: entered allmulticast mode [ 1534.019511][ T9601] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1534.058800][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12453'. [ 1534.094174][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12454'. [ 1534.417104][ T4916] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1534.923448][T16538] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12462'. [ 1534.995234][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12467'. [ 1535.037499][T16549] macvlan4: entered allmulticast mode [ 1536.047244][T16574] macvtap0: entered allmulticast mode [ 1536.047273][T16574] veth0_to_bridge: entered allmulticast mode [ 1536.130214][T16574] veth0_to_bridge: left allmulticast mode [ 1536.677213][ T4916] net_ratelimit: 57 callbacks suppressed [ 1536.677240][ T4916] bond5: (slave dummy0): failed to get link speed/duplex [ 1536.788008][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1536.907979][ T4902] bond5: (slave dummy0): failed to get link speed/duplex [ 1537.018476][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1537.113923][T16621] macvlan5: entered allmulticast mode [ 1537.128002][ T4916] bond5: (slave dummy0): failed to get link speed/duplex [ 1537.140203][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1537.140278][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1537.203002][T16623] Bluetooth: hci0: Invalid link key type 28 for 66:55:44:33:22:11 [ 1537.236544][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1537.356726][ T4916] bond5: (slave dummy0): failed to get link speed/duplex [ 1537.469682][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1537.576972][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1537.727133][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1537.746240][T16634] __nla_validate_parse: 2 callbacks suppressed [ 1537.746272][T16634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12494'. [ 1537.746307][T16634] netlink: 'syz.3.12494': attribute type 7 has an invalid length. [ 1537.746326][T16634] netlink: 'syz.3.12494': attribute type 8 has an invalid length. [ 1537.746342][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12494'. [ 1537.956580][ T4022] Bluetooth: hci3: command 0x0406 tx timeout [ 1538.049133][T16641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12496'. [ 1538.049477][T16641] 8021q: VLANs not supported on wg1 [ 1538.141689][T16643] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12497'. [ 1538.162185][T16640] netlink: 348 bytes leftover after parsing attributes in process `syz.4.12497'. [ 1538.231634][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12501'. [ 1538.257038][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1538.286334][T16649] macvlan6: entered allmulticast mode [ 1538.471232][T16663] FAULT_INJECTION: forcing a failure. [ 1538.471232][T16663] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.471271][T16663] CPU: 1 UID: 0 PID: 16663 Comm: syz.1.12505 Not tainted syzkaller #0 PREEMPT(full) [ 1538.471297][T16663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1538.471310][T16663] Call Trace: [ 1538.471320][T16663] [ 1538.471329][T16663] dump_stack_lvl+0xe8/0x150 [ 1538.471367][T16663] should_fail_ex+0x410/0x560 [ 1538.471398][T16663] ? __alloc_skb+0x1db/0x7a0 [ 1538.471426][T16663] should_failslab+0xa8/0x100 [ 1538.471458][T16663] ? __alloc_skb+0x1db/0x7a0 [ 1538.471483][T16663] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1538.471520][T16663] ? __alloc_skb+0x18d/0x7a0 [ 1538.471548][T16663] ? __alloc_skb+0x1db/0x7a0 [ 1538.471584][T16663] __alloc_skb+0x1db/0x7a0 [ 1538.471617][T16663] ctrl_getfamily+0x3d0/0x5c0 [ 1538.471715][T16663] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1538.471767][T16663] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1538.471808][T16663] genl_family_rcv_msg_doit+0x233/0x340 [ 1538.471852][T16663] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1538.471908][T16663] genl_rcv_msg+0x614/0x7a0 [ 1538.471948][T16663] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1538.471977][T16663] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1538.472023][T16663] netlink_rcv_skb+0x226/0x4a0 [ 1538.472048][T16663] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1538.472080][T16663] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1538.472122][T16663] ? down_read+0x2be/0x330 [ 1538.472214][T16663] genl_rcv+0x28/0x40 [ 1538.472252][T16663] netlink_unicast+0x7bd/0x940 [ 1538.472310][T16663] netlink_sendmsg+0x813/0xb40 [ 1538.472348][T16663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1538.472410][T16663] ? apparmor_socket_sendmsg+0x98/0x360 [ 1538.472441][T16663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1538.472465][T16663] sock_sendmsg_nosec+0x14e/0x190 [ 1538.472493][T16663] __sys_sendto+0x408/0x5a0 [ 1538.472531][T16663] ? __pfx___sys_sendto+0x10/0x10 [ 1538.472591][T16663] ? do_user_addr_fault+0xc4c/0x1340 [ 1538.472633][T16663] __x64_sys_sendto+0xde/0x100 [ 1538.472666][T16663] do_syscall_64+0x166/0x520 [ 1538.472699][T16663] ? trace_irq_disable+0x3b/0x140 [ 1538.472722][T16663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.472746][T16663] ? clear_bhb_loop+0x70/0xc0 [ 1538.472775][T16663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.472798][T16663] RIP: 0033:0x7fd87ff5e9ce [ 1538.472819][T16663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1538.472840][T16663] RSP: 002b:00007fd880ecbe28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1538.472865][T16663] RAX: ffffffffffffffda RBX: 00007fd880ecd6c0 RCX: 00007fd87ff5e9ce [ 1538.472883][T16663] RDX: 0000000000000020 RSI: 00007fd880ecbfe0 RDI: 0000000000000004 [ 1538.472899][T16663] RBP: 0000000000000000 R08: 00007fd880ecbea4 R09: 000000000000000c [ 1538.472919][T16663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1538.472934][T16663] R13: 00007fd880ecbef8 R14: 00007fd880ecbfe0 R15: 0000000000000000 [ 1538.472972][T16663] [ 1538.870371][T16668] netlink: 'syz.4.12506': attribute type 30 has an invalid length. [ 1538.927038][T16668] bond1: option arp_missed_max: invalid value (0) [ 1538.927067][T16668] bond1: option arp_missed_max: allowed values 1 - 255 [ 1538.935200][T16668] bond1 (unregistering): Released all slaves [ 1539.201769][T16678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12509'. [ 1539.347662][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12512'. [ 1539.380418][T16684] vlan2: entered promiscuous mode [ 1539.754191][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12518'. [ 1540.317005][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12524'. [ 1540.381472][T16726] syzkaller0: entered promiscuous mode [ 1540.381497][T16726] syzkaller0: entered allmulticast mode [ 1540.404381][T16725] tipc: Started in network mode [ 1540.404414][T16725] tipc: Node identity a6aa3c4a48d1, cluster identity 4711 [ 1540.404567][T16725] tipc: Enabled bearer , priority 0 [ 1540.430724][T16719] tipc: Resetting bearer [ 1540.525056][T16719] tipc: Disabling bearer [ 1540.696663][T16742] FAULT_INJECTION: forcing a failure. [ 1540.696663][T16742] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.696700][T16742] CPU: 0 UID: 0 PID: 16742 Comm: syz.0.12532 Not tainted syzkaller #0 PREEMPT(full) [ 1540.696725][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1540.696740][T16742] Call Trace: [ 1540.696750][T16742] [ 1540.696759][T16742] dump_stack_lvl+0xe8/0x150 [ 1540.696797][T16742] should_fail_ex+0x410/0x560 [ 1540.696831][T16742] should_failslab+0xa8/0x100 [ 1540.696859][T16742] ? skb_clone+0x212/0x3a0 [ 1540.696893][T16742] kmem_cache_alloc_noprof+0xa1/0x600 [ 1540.696929][T16742] ? skb_clone+0x212/0x3a0 [ 1540.696969][T16742] skb_clone+0x212/0x3a0 [ 1540.697004][T16742] __netlink_deliver_tap+0x355/0x6e0 [ 1540.697040][T16742] ? netlink_deliver_tap+0x2e/0x1b0 [ 1540.697074][T16742] netlink_deliver_tap+0x19c/0x1b0 [ 1540.697096][T16742] netlink_sendskb+0x68/0x140 [ 1540.697131][T16742] netlink_rcv_skb+0x2a4/0x4a0 [ 1540.697156][T16742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1540.697188][T16742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1540.697228][T16742] ? down_read+0x2be/0x330 [ 1540.697257][T16742] genl_rcv+0x28/0x40 [ 1540.697285][T16742] netlink_unicast+0x7bd/0x940 [ 1540.697332][T16742] netlink_sendmsg+0x813/0xb40 [ 1540.697368][T16742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1540.697402][T16742] ? apparmor_socket_sendmsg+0x98/0x360 [ 1540.697429][T16742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1540.697452][T16742] sock_sendmsg_nosec+0x14e/0x190 [ 1540.697479][T16742] __sys_sendto+0x408/0x5a0 [ 1540.697515][T16742] ? __pfx___sys_sendto+0x10/0x10 [ 1540.697576][T16742] ? rcu_is_watching+0x16/0xb0 [ 1540.697613][T16742] __x64_sys_sendto+0xde/0x100 [ 1540.697645][T16742] do_syscall_64+0x166/0x520 [ 1540.697682][T16742] ? trace_irq_disable+0x3b/0x140 [ 1540.697705][T16742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.697729][T16742] ? clear_bhb_loop+0x70/0xc0 [ 1540.697757][T16742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.697779][T16742] RIP: 0033:0x7f49ced5e9ce [ 1540.697801][T16742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1540.697821][T16742] RSP: 002b:00007f49ccff4e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1540.697845][T16742] RAX: ffffffffffffffda RBX: 00007f49ccff66c0 RCX: 00007f49ced5e9ce [ 1540.697863][T16742] RDX: 0000000000000020 RSI: 00007f49ccff4fe0 RDI: 0000000000000004 [ 1540.697877][T16742] RBP: 0000000000000000 R08: 00007f49ccff4ea4 R09: 000000000000000c [ 1540.697891][T16742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1540.697905][T16742] R13: 00007f49ccff4ef8 R14: 00007f49ccff4fe0 R15: 0000000000000000 [ 1540.697942][T16742] [ 1541.223202][T16754] ip6tnl2: entered allmulticast mode [ 1541.225157][ T4922] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1541.225394][ T4922] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1541.249073][ T9601] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1541.688226][ T171] net_ratelimit: 34 callbacks suppressed [ 1541.688250][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1541.766644][ T5733] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1541.799699][ T4926] bond5: (slave dummy0): failed to get link speed/duplex [ 1541.909968][ T4926] bond5: (slave dummy0): failed to get link speed/duplex [ 1541.939756][ T5733] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1541.974570][T16786] FAULT_INJECTION: forcing a failure. [ 1541.974570][T16786] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.974610][T16786] CPU: 1 UID: 0 PID: 16786 Comm: syz.0.12547 Not tainted syzkaller #0 PREEMPT(full) [ 1541.974636][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1541.974650][T16786] Call Trace: [ 1541.974660][T16786] [ 1541.974670][T16786] dump_stack_lvl+0xe8/0x150 [ 1541.974709][T16786] should_fail_ex+0x410/0x560 [ 1541.974741][T16786] ? __alloc_skb+0x1db/0x7a0 [ 1541.974771][T16786] should_failslab+0xa8/0x100 [ 1541.974801][T16786] ? __alloc_skb+0x1db/0x7a0 [ 1541.974827][T16786] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1541.974863][T16786] ? __alloc_skb+0x18d/0x7a0 [ 1541.974892][T16786] ? __alloc_skb+0x1db/0x7a0 [ 1541.974927][T16786] __alloc_skb+0x1db/0x7a0 [ 1541.974960][T16786] netlink_ack+0x136/0xb30 [ 1541.974990][T16786] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1541.975040][T16786] netlink_rcv_skb+0x2a4/0x4a0 [ 1541.975092][T16786] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1541.975123][T16786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1541.975163][T16786] ? down_read+0x2be/0x330 [ 1541.975190][T16786] genl_rcv+0x28/0x40 [ 1541.975220][T16786] netlink_unicast+0x7bd/0x940 [ 1541.975267][T16786] netlink_sendmsg+0x813/0xb40 [ 1541.975302][T16786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1541.975337][T16786] ? apparmor_socket_sendmsg+0x98/0x360 [ 1541.975368][T16786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1541.975392][T16786] sock_sendmsg_nosec+0x14e/0x190 [ 1541.975419][T16786] __sys_sendto+0x408/0x5a0 [ 1541.975456][T16786] ? __pfx___sys_sendto+0x10/0x10 [ 1541.975518][T16786] ? do_user_addr_fault+0xc4c/0x1340 [ 1541.975560][T16786] __x64_sys_sendto+0xde/0x100 [ 1541.975593][T16786] do_syscall_64+0x166/0x520 [ 1541.975627][T16786] ? trace_irq_disable+0x3b/0x140 [ 1541.975651][T16786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.975675][T16786] ? clear_bhb_loop+0x70/0xc0 [ 1541.975704][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.975727][T16786] RIP: 0033:0x7f49ced5e9ce [ 1541.975751][T16786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1541.975771][T16786] RSP: 002b:00007f49ccff4e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1541.975796][T16786] RAX: ffffffffffffffda RBX: 00007f49ccff66c0 RCX: 00007f49ced5e9ce [ 1541.975813][T16786] RDX: 0000000000000020 RSI: 00007f49ccff4fe0 RDI: 0000000000000004 [ 1541.975829][T16786] RBP: 0000000000000000 R08: 00007f49ccff4ea4 R09: 000000000000000c [ 1541.975843][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1541.975856][T16786] R13: 00007f49ccff4ef8 R14: 00007f49ccff4fe0 R15: 0000000000000000 [ 1541.975893][T16786] [ 1542.028471][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1542.147160][ T4918] bond5: (slave dummy0): failed to get link speed/duplex [ 1542.274029][ T4919] bond5: (slave dummy0): failed to get link speed/duplex [ 1542.377394][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1542.489402][ T4900] bond5: (slave dummy0): failed to get link speed/duplex [ 1542.560889][T16793] ip_tables: iptables: counters copy to user failed while replacing table [ 1542.596984][ T4900] bond5: (slave dummy0): failed to get link speed/duplex [ 1542.735226][T16802] tipc: Enabling of bearer rejected, failed to enable media [ 1542.905843][T16811] __nla_validate_parse: 3 callbacks suppressed [ 1542.905870][T16811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12553'. [ 1543.038475][T16813] veth0: entered promiscuous mode [ 1543.060685][T16812] veth0: left promiscuous mode [ 1543.185873][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12556'. [ 1543.250855][T16822] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1543.346000][T16817] team0: Port device team_slave_0 removed [ 1543.521304][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12559'. [ 1544.402095][T16865] netlink: 'syz.4.12571': attribute type 1 has an invalid length. [ 1544.532959][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12573'. [ 1544.624334][T16866] veth5: entered allmulticast mode [ 1544.672330][T16871] macvlan4: entered allmulticast mode [ 1544.705113][T16885] FAULT_INJECTION: forcing a failure. [ 1544.705113][T16885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.705151][T16885] CPU: 1 UID: 0 PID: 16885 Comm: syz.0.12575 Not tainted syzkaller #0 PREEMPT(full) [ 1544.705177][T16885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1544.705191][T16885] Call Trace: [ 1544.705201][T16885] [ 1544.705212][T16885] dump_stack_lvl+0xe8/0x150 [ 1544.705252][T16885] should_fail_ex+0x410/0x560 [ 1544.705286][T16885] _copy_from_iter+0x1d3/0x1660 [ 1544.705324][T16885] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1544.705358][T16885] ? __pfx_policy_nodemask+0x10/0x10 [ 1544.705388][T16885] ? lock_acquire+0x115/0x350 [ 1544.705414][T16885] ? __pfx__copy_from_iter+0x10/0x10 [ 1544.705444][T16885] ? alloc_pages_mpol+0x256/0x390 [ 1544.705484][T16885] copy_page_from_iter+0x219/0x2d0 [ 1544.705516][T16885] tun_get_user+0x1c16/0x44d0 [ 1544.705546][T16885] ? tun_get_user+0x70a/0x44d0 [ 1544.705588][T16885] ? aa_file_perm+0x4ed/0x15f0 [ 1544.705622][T16885] ? __pfx_tun_get_user+0x10/0x10 [ 1544.705649][T16885] ? __lock_acquire+0x747/0x2de0 [ 1544.705689][T16885] ? ref_tracker_alloc+0x172/0x530 [ 1544.705717][T16885] ? lock_acquire+0x115/0x350 [ 1544.705742][T16885] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1544.705773][T16885] ? lock_acquire+0x115/0x350 [ 1544.705796][T16885] ? tun_get+0x1c/0x2f0 [ 1544.705827][T16885] ? tun_get+0x1c/0x2f0 [ 1544.705854][T16885] ? tun_get+0x1c/0x2f0 [ 1544.705883][T16885] tun_chr_write_iter+0x113/0x200 [ 1544.705912][T16885] vfs_write+0x612/0xba0 [ 1544.705956][T16885] ? __pfx_vfs_write+0x10/0x10 [ 1544.706001][T16885] ? __fget_files+0x2a/0x420 [ 1544.706044][T16885] ksys_write+0x150/0x270 [ 1544.706080][T16885] ? __pfx_ksys_write+0x10/0x10 [ 1544.706137][T16885] do_syscall_64+0x166/0x520 [ 1544.706172][T16885] ? trace_irq_disable+0x3b/0x140 [ 1544.706195][T16885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.706219][T16885] ? clear_bhb_loop+0x70/0xc0 [ 1544.706246][T16885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.706270][T16885] RIP: 0033:0x7f49ced5e9ce [ 1544.706291][T16885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1544.706320][T16885] RSP: 002b:00007f49ccff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1544.706346][T16885] RAX: ffffffffffffffda RBX: 00007f49ccff66c0 RCX: 00007f49ced5e9ce [ 1544.706363][T16885] RDX: 000000000000002a RSI: 0000200000000080 RDI: 00000000000000c8 [ 1544.706377][T16885] RBP: 00007f49ccff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.706392][T16885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.706406][T16885] R13: 00007f49cf026038 R14: 00007f49cf025fa0 R15: 00007ffebc1ae148 [ 1544.706443][T16885] [ 1544.980269][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1545.030355][T16862] bond1: (slave veth0_to_bond): making interface the new active one [ 1545.031406][T16862] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1545.296611][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1545.485996][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12576'. [ 1545.756256][T16916] netlink: 'syz.0.12582': attribute type 1 has an invalid length. [ 1545.756281][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12582'. [ 1545.780286][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12583'. [ 1545.782434][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12583'. [ 1546.079744][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12586'. [ 1546.099912][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1546.100545][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1546.127497][T16929] netlink: 'syz.1.12587': attribute type 1 has an invalid length. [ 1546.127524][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12587'. [ 1546.394894][T16939] netlink: 'syz.3.12589': attribute type 6 has an invalid length. [ 1546.454399][T16939] ip6gretap1: entered promiscuous mode [ 1546.550688][T16938] 8021q: VLANs not supported on wg0 [ 1546.699981][ T4900] net_ratelimit: 25 callbacks suppressed [ 1546.700008][ T4900] bond5: (slave dummy0): failed to get link speed/duplex [ 1546.808823][ T4926] bond5: (slave dummy0): failed to get link speed/duplex [ 1546.872419][T16950] netlink: 'syz.4.12592': attribute type 1 has an invalid length. [ 1546.922794][ T4926] bond5: (slave dummy0): failed to get link speed/duplex [ 1547.031371][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1547.139293][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1547.251760][ T4926] bond5: (slave dummy0): failed to get link speed/duplex [ 1547.357925][ T4926] bond5: (slave dummy0): failed to get link speed/duplex [ 1547.468314][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1547.578214][ T4919] bond5: (slave dummy0): failed to get link speed/duplex [ 1547.707349][ T4922] bond5: (slave dummy0): failed to get link speed/duplex [ 1548.019775][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1548.052418][T16992] __nla_validate_parse: 6 callbacks suppressed [ 1548.052444][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12604'. [ 1548.906852][T16995] netlink: 'syz.0.12605': attribute type 10 has an invalid length. [ 1548.937889][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1548.939765][T16995] team0: Port device netdevsim1 added [ 1548.943751][T16995] netlink: 'syz.0.12605': attribute type 10 has an invalid length. [ 1548.978214][T16995] team0: Port device netdevsim1 removed [ 1548.985763][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1549.003324][T16995] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1549.812293][T16952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1550.123234][T17004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1550.125494][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1550.125640][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1550.125755][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1550.125879][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1550.125992][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1550.126104][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1550.126220][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1550.136535][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1550.365870][T17022] netlink: 'syz.3.12612': attribute type 1 has an invalid length. [ 1550.493995][T17022] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1550.566887][T17027] netlink: 'syz.4.12613': attribute type 10 has an invalid length. [ 1550.655426][T17027] team0 (unregistering): Port device team_slave_1 removed [ 1550.713171][T17022] bridge5: entered promiscuous mode [ 1550.728042][T17022] bond25: (slave bridge5): making interface the new active one [ 1550.728969][T17022] bond25: (slave bridge5): Enslaving as an active interface with an up link [ 1550.856224][T17035] batman_adv: batadv0: Adding interface: dummy0 [ 1550.856243][T17035] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.856275][T17035] batman_adv: batadv0: Interface activated: dummy0 [ 1551.148415][T17044] tipc: Started in network mode [ 1551.148452][T17044] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1551.148615][T17044] tipc: Enabled bearer , priority 0 [ 1551.327562][T17058] netlink: 'syz.1.12621': attribute type 4 has an invalid length. [ 1551.386219][T17062] netlink: 'syz.1.12621': attribute type 4 has an invalid length. [ 1551.607382][T17067] IPv6: NLM_F_CREATE should be specified when creating new route [ 1551.716681][ T4918] net_ratelimit: 63 callbacks suppressed [ 1551.716705][ T4918] bond5: (slave dummy0): failed to get link speed/duplex [ 1551.827339][ T4926] bond5: (slave dummy0): failed to get link speed/duplex [ 1551.914958][T17079] netlink: 'syz.4.12627': attribute type 1 has an invalid length. [ 1551.940176][ T4926] bond5: (slave dummy0): failed to get link speed/duplex [ 1552.046612][ T4918] bond5: (slave dummy0): failed to get link speed/duplex [ 1552.088325][T17088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.122554][T17088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.217502][ T4900] bond5: (slave dummy0): failed to get link speed/duplex [ 1552.287227][ T9] tipc: Node number set to 8432298 [ 1552.329456][ T4900] bond5: (slave dummy0): failed to get link speed/duplex [ 1552.334389][T17096] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1552.360233][T17096] x_tables: duplicate underflow at hook 1 [ 1552.419292][T17099] FAULT_INJECTION: forcing a failure. [ 1552.419292][T17099] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.419330][T17099] CPU: 1 UID: 0 PID: 17099 Comm: syz.0.12633 Not tainted syzkaller #0 PREEMPT(full) [ 1552.419356][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1552.419370][T17099] Call Trace: [ 1552.419379][T17099] [ 1552.419389][T17099] dump_stack_lvl+0xe8/0x150 [ 1552.419425][T17099] should_fail_ex+0x410/0x560 [ 1552.419466][T17099] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1552.419492][T17099] should_failslab+0xa8/0x100 [ 1552.419522][T17099] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1552.419544][T17099] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1552.419580][T17099] ? sock_alloc_inode+0x2c/0x1a0 [ 1552.419601][T17099] ? sock_alloc_inode+0x2c/0x1a0 [ 1552.419629][T17099] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1552.419652][T17099] sock_alloc_inode+0x2c/0x1a0 [ 1552.419675][T17099] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1552.419696][T17099] alloc_inode+0x6a/0x1b0 [ 1552.419728][T17099] __sock_create+0x12d/0x9d0 [ 1552.419764][T17099] __sys_socket+0xd6/0x1b0 [ 1552.419793][T17099] __x64_sys_socket+0x7a/0x90 [ 1552.419819][T17099] do_syscall_64+0x166/0x520 [ 1552.419853][T17099] ? trace_irq_disable+0x3b/0x140 [ 1552.419876][T17099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.419899][T17099] ? clear_bhb_loop+0x70/0xc0 [ 1552.419927][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.419951][T17099] RIP: 0033:0x7f49ced9fa07 [ 1552.419972][T17099] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.419992][T17099] RSP: 002b:00007f49ccff4e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1552.420017][T17099] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f49ced9fa07 [ 1552.420034][T17099] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1552.420049][T17099] RBP: 0000000000000026 R08: 00007f49ccff4f70 R09: 0000000000000000 [ 1552.420065][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.420079][T17099] R13: 00007f49ccff4f90 R14: 00007f49ccff4f90 R15: 0000200000000040 [ 1552.420116][T17099] [ 1552.420127][T17099] socket: no more sockets [ 1552.442951][ T4918] bond5: (slave dummy0): failed to get link speed/duplex [ 1552.500394][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1552.550899][ T4926] bond5: (slave dummy0): failed to get link speed/duplex [ 1552.682802][T17102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.702207][T17102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.716061][T17102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.736457][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1553.045801][T17100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1553.182489][T17118] __nla_validate_parse: 19 callbacks suppressed [ 1553.182516][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12635'. [ 1553.364765][T17120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12639'. [ 1553.386240][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12639'. [ 1553.420507][T17130] netlink: 'syz.3.12640': attribute type 1 has an invalid length. [ 1553.484352][T17130] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1553.493876][T17130] bond26: (slave bond27): making interface the new active one [ 1553.494421][T17130] bond26: (slave bond27): Enslaving as an active interface with an up link [ 1553.538692][T17130] bond26: (slave gretap3): Enslaving as a backup interface with an up link [ 1553.580874][T17130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1553.581990][T17130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1553.990782][T17151] FAULT_INJECTION: forcing a failure. [ 1553.990782][T17151] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.990820][T17151] CPU: 0 UID: 0 PID: 17151 Comm: syz.4.12645 Not tainted syzkaller #0 PREEMPT(full) [ 1553.990846][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1553.990861][T17151] Call Trace: [ 1553.990871][T17151] [ 1553.990882][T17151] dump_stack_lvl+0xe8/0x150 [ 1553.990920][T17151] should_fail_ex+0x410/0x560 [ 1553.990954][T17151] should_failslab+0xa8/0x100 [ 1553.990982][T17151] ? sk_prot_alloc+0x57/0x210 [ 1553.991013][T17151] kmem_cache_alloc_noprof+0xa1/0x600 [ 1553.991050][T17151] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1553.991083][T17151] ? sk_prot_alloc+0x57/0x210 [ 1553.991118][T17151] sk_prot_alloc+0x57/0x210 [ 1553.991146][T17151] ? sk_alloc+0x27/0x390 [ 1553.991178][T17151] sk_alloc+0x3a/0x390 [ 1553.991211][T17151] unix_create1+0xb0/0x7c0 [ 1553.991402][T17151] unix_create+0x14c/0x1d0 [ 1553.991439][T17151] __sock_create+0x4b3/0x9d0 [ 1553.991475][T17151] __sys_socket+0xd6/0x1b0 [ 1553.991507][T17151] __x64_sys_socket+0x7a/0x90 [ 1553.991535][T17151] do_syscall_64+0x166/0x520 [ 1553.991568][T17151] ? trace_irq_disable+0x3b/0x140 [ 1553.991593][T17151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.991617][T17151] ? clear_bhb_loop+0x70/0xc0 [ 1553.991646][T17151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.991669][T17151] RIP: 0033:0x7f242dd9fa07 [ 1553.991691][T17151] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.991712][T17151] RSP: 002b:00007f242ec88e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1553.991737][T17151] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f242dd9fa07 [ 1553.991754][T17151] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1553.991769][T17151] RBP: 0000000000000026 R08: 00007f242ec88f70 R09: 0000000000000000 [ 1553.991785][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.991799][T17151] R13: 00007f242ec88f90 R14: 00007f242ec88f90 R15: 0000200000000040 [ 1553.991836][T17151] [ 1554.165940][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12644'. [ 1554.235331][T17154] netlink: 'syz.0.12646': attribute type 1 has an invalid length. [ 1554.235360][T17154] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12646'. [ 1554.235379][T17154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12646'. [ 1554.478850][T17165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12647'. [ 1554.583685][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12648'. [ 1554.583713][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12648'. [ 1554.997833][T17191] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1555.057606][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1555.207819][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12651'. [ 1555.418664][T17185] tipc: Enabled bearer , priority 0 [ 1555.459000][T17188] syzkaller0: entered promiscuous mode [ 1555.459029][T17188] syzkaller0: entered allmulticast mode [ 1555.613537][T17188] tipc: Resetting bearer [ 1555.658283][T17188] tipc: Disabling bearer [ 1556.737226][ T171] net_ratelimit: 28 callbacks suppressed [ 1556.737251][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1556.848182][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1556.956796][ T4916] bond5: (slave dummy0): failed to get link speed/duplex [ 1557.066637][ T4919] bond5: (slave dummy0): failed to get link speed/duplex [ 1557.176944][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1557.286713][ T171] bond5: (slave dummy0): failed to get link speed/duplex [ 1557.396645][ T4919] bond5: (slave dummy0): failed to get link speed/duplex [ 1557.506863][ T4916] bond5: (slave dummy0): failed to get link speed/duplex [ 1557.618683][ T4916] bond5: (slave dummy0): failed to get link speed/duplex [ 1557.726561][ T4918] bond5: (slave dummy0): failed to get link speed/duplex [ 1559.159264][T17239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1559.495645][T17302] FAULT_INJECTION: forcing a failure. [ 1559.495645][T17302] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.495681][T17302] CPU: 0 UID: 0 PID: 17302 Comm: syz.4.12681 Not tainted syzkaller #0 PREEMPT(full) [ 1559.495707][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1559.495721][T17302] Call Trace: [ 1559.495732][T17302] [ 1559.495742][T17302] dump_stack_lvl+0xe8/0x150 [ 1559.495784][T17302] should_fail_ex+0x410/0x560 [ 1559.495817][T17302] should_failslab+0xa8/0x100 [ 1559.495966][T17302] ? skb_clone+0x212/0x3a0 [ 1559.496002][T17302] kmem_cache_alloc_noprof+0xa1/0x600 [ 1559.496042][T17302] ? skb_clone+0x212/0x3a0 [ 1559.496083][T17302] skb_clone+0x212/0x3a0 [ 1559.496119][T17302] __netlink_deliver_tap+0x355/0x6e0 [ 1559.496164][T17302] ? netlink_deliver_tap+0x2e/0x1b0 [ 1559.496190][T17302] netlink_deliver_tap+0x19c/0x1b0 [ 1559.496216][T17302] netlink_unicast+0x781/0x940 [ 1559.496265][T17302] netlink_sendmsg+0x813/0xb40 [ 1559.496301][T17302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.496336][T17302] ? apparmor_socket_sendmsg+0x98/0x360 [ 1559.496374][T17302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.496395][T17302] sock_sendmsg_nosec+0x14e/0x190 [ 1559.496422][T17302] ____sys_sendmsg+0x54e/0x850 [ 1559.496461][T17302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1559.496502][T17302] ? import_iovec+0x73/0xa0 [ 1559.496535][T17302] ___sys_sendmsg+0x2a5/0x360 [ 1559.496567][T17302] ? __lock_acquire+0x747/0x2de0 [ 1559.496597][T17302] ? __pfx____sys_sendmsg+0x10/0x10 [ 1559.496637][T17302] ? kstrtouint+0x6e/0xe0 [ 1559.496688][T17302] ? __fget_files+0x2a/0x420 [ 1559.496721][T17302] ? __fget_files+0x3a2/0x420 [ 1559.496861][T17302] __sys_sendmmsg+0x273/0x4d0 [ 1559.496904][T17302] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1559.496944][T17302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1559.496993][T17302] ? ksys_write+0x242/0x270 [ 1559.497032][T17302] ? __pfx_ksys_write+0x10/0x10 [ 1559.497074][T17302] __x64_sys_sendmmsg+0xa0/0xc0 [ 1559.497115][T17302] do_syscall_64+0x166/0x520 [ 1559.497148][T17302] ? trace_irq_disable+0x3b/0x140 [ 1559.497171][T17302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.497195][T17302] ? clear_bhb_loop+0x70/0xc0 [ 1559.497222][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.497245][T17302] RIP: 0033:0x7f242dd9e199 [ 1559.497268][T17302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.497288][T17302] RSP: 002b:00007f242ec8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1559.497402][T17302] RAX: ffffffffffffffda RBX: 00007f242e025fa0 RCX: 00007f242dd9e199 [ 1559.497419][T17302] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1559.497435][T17302] RBP: 00007f242ec8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.497449][T17302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.497463][T17302] R13: 00007f242e026038 R14: 00007f242e025fa0 R15: 00007ffcfc698908 [ 1559.497500][T17302] [ 1559.824792][T17309] __nla_validate_parse: 4 callbacks suppressed [ 1559.824818][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12683'. [ 1559.880057][T17309] gretap0: entered promiscuous mode [ 1559.882635][T17309] macvlan2: entered allmulticast mode [ 1559.882660][T17309] gretap0: entered allmulticast mode [ 1559.892707][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12684'. [ 1560.069173][T17317] sctp: [Deprecated]: syz.4.12688 (pid 17317) Use of int in max_burst socket option. [ 1560.069173][T17317] Use struct sctp_assoc_value instead [ 1560.151258][T17314] netlink: 'syz.1.12686': attribute type 1 has an invalid length. [ 1560.187968][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12686'. [ 1560.187996][T17329] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12686'. [ 1560.300012][T17314] bond7: option mode: invalid value (97) [ 1560.313480][T17314] bond7 (unregistering): Released all slaves [ 1560.404384][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12691'. [ 1560.506197][T17332] ip6gretap0: entered promiscuous mode [ 1560.506541][T17332] macsec0: entered allmulticast mode [ 1560.506560][T17332] ip6gretap0: entered allmulticast mode [ 1560.543469][T17345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12693'. [ 1560.645531][T17349] FAULT_INJECTION: forcing a failure. [ 1560.645531][T17349] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.645568][T17349] CPU: 0 UID: 0 PID: 17349 Comm: syz.0.12697 Not tainted syzkaller #0 PREEMPT(full) [ 1560.645594][T17349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1560.645608][T17349] Call Trace: [ 1560.645624][T17349] [ 1560.645635][T17349] dump_stack_lvl+0xe8/0x150 [ 1560.645673][T17349] should_fail_ex+0x410/0x560 [ 1560.645706][T17349] should_failslab+0xa8/0x100 [ 1560.645736][T17349] ? skb_clone+0x212/0x3a0 [ 1560.645769][T17349] kmem_cache_alloc_noprof+0xa1/0x600 [ 1560.645817][T17349] ? skb_clone+0x212/0x3a0 [ 1560.645857][T17349] skb_clone+0x212/0x3a0 [ 1560.645893][T17349] __netlink_deliver_tap+0x355/0x6e0 [ 1560.645924][T17349] ? netlink_deliver_tap+0x2e/0x1b0 [ 1560.645944][T17349] netlink_deliver_tap+0x19c/0x1b0 [ 1560.645964][T17349] netlink_unicast+0x781/0x940 [ 1560.646001][T17349] netlink_sendmsg+0x813/0xb40 [ 1560.646028][T17349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.646054][T17349] ? apparmor_socket_sendmsg+0x98/0x360 [ 1560.646081][T17349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.646100][T17349] sock_sendmsg_nosec+0x14e/0x190 [ 1560.646125][T17349] ____sys_sendmsg+0x54e/0x850 [ 1560.646161][T17349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1560.646203][T17349] ? import_iovec+0x73/0xa0 [ 1560.646236][T17349] ___sys_sendmsg+0x2a5/0x360 [ 1560.646267][T17349] ? __lock_acquire+0x747/0x2de0 [ 1560.646297][T17349] ? __pfx____sys_sendmsg+0x10/0x10 [ 1560.646336][T17349] ? kstrtouint+0x6e/0xe0 [ 1560.646385][T17349] ? __fget_files+0x2a/0x420 [ 1560.646416][T17349] ? __fget_files+0x3a2/0x420 [ 1560.646459][T17349] __sys_sendmmsg+0x273/0x4d0 [ 1560.646496][T17349] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1560.646536][T17349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1560.646586][T17349] ? ksys_write+0x242/0x270 [ 1560.646622][T17349] ? __pfx_ksys_write+0x10/0x10 [ 1560.646665][T17349] __x64_sys_sendmmsg+0xa0/0xc0 [ 1560.646699][T17349] do_syscall_64+0x166/0x520 [ 1560.646731][T17349] ? trace_irq_disable+0x3b/0x140 [ 1560.646754][T17349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.646786][T17349] ? clear_bhb_loop+0x70/0xc0 [ 1560.646815][T17349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.646839][T17349] RIP: 0033:0x7f49ced9e199 [ 1560.646861][T17349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.646881][T17349] RSP: 002b:00007f49ccff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1560.646906][T17349] RAX: ffffffffffffffda RBX: 00007f49cf025fa0 RCX: 00007f49ced9e199 [ 1560.646924][T17349] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1560.646941][T17349] RBP: 00007f49ccff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.646957][T17349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1560.646971][T17349] R13: 00007f49cf026038 R14: 00007f49cf025fa0 R15: 00007ffebc1ae148 [ 1560.647009][T17349] [ 1561.037167][T17351] FAULT_INJECTION: forcing a failure. [ 1561.037167][T17351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.037206][T17351] CPU: 1 UID: 0 PID: 17351 Comm: syz.2.12696 Not tainted syzkaller #0 PREEMPT(full) [ 1561.037233][T17351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1561.037257][T17351] Call Trace: [ 1561.037267][T17351] [ 1561.037277][T17351] dump_stack_lvl+0xe8/0x150 [ 1561.037315][T17351] should_fail_ex+0x410/0x560 [ 1561.037349][T17351] _copy_to_user+0x31/0xb0 [ 1561.037382][T17351] simple_read_from_buffer+0xe1/0x170 [ 1561.037421][T17351] proc_fail_nth_read+0x1bb/0x230 [ 1561.037443][T17351] ? common_file_perm+0x20e/0x2b0 [ 1561.037475][T17351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1561.037502][T17351] ? rw_verify_area+0x24a/0x4c0 [ 1561.037539][T17351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1561.037561][T17351] vfs_read+0x213/0xa80 [ 1561.037601][T17351] ? __pfx___mutex_lock+0x10/0x10 [ 1561.037636][T17351] ? __pfx_vfs_read+0x10/0x10 [ 1561.037672][T17351] ? __fget_files+0x2a/0x420 [ 1561.037708][T17351] ? __fget_files+0x3a2/0x420 [ 1561.037739][T17351] ? __fget_files+0x2a/0x420 [ 1561.037780][T17351] ksys_read+0x150/0x270 [ 1561.037816][T17351] ? __pfx_ksys_read+0x10/0x10 [ 1561.037862][T17351] do_syscall_64+0x166/0x520 [ 1561.037895][T17351] ? trace_irq_disable+0x3b/0x140 [ 1561.037918][T17351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.037941][T17351] ? clear_bhb_loop+0x70/0xc0 [ 1561.037970][T17351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.037993][T17351] RIP: 0033:0x7f209c15e9ce [ 1561.038014][T17351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1561.038034][T17351] RSP: 002b:00007f209d0eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1561.038058][T17351] RAX: ffffffffffffffda RBX: 00007f209d0ef6c0 RCX: 00007f209c15e9ce [ 1561.038076][T17351] RDX: 000000000000000f RSI: 00007f209d0ef0a0 RDI: 0000000000000006 [ 1561.038091][T17351] RBP: 00007f209d0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.038109][T17351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.038122][T17351] R13: 00007f209c426038 R14: 00007f209c425fa0 R15: 00007ffc07b947a8 [ 1561.038157][T17351] [ 1561.205513][T17353] syzkaller1: entered promiscuous mode [ 1561.205587][T17353] syzkaller1: entered allmulticast mode [ 1561.316053][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.316079][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.459818][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1561.874408][T17392] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.12705'. [ 1562.132756][T17353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.133216][T17353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.681957][T17353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.731893][T17353] batman_adv: batadv0: Interface deactivated: 76žÿ [ 1563.758050][T17353] ip6tnl2: left allmulticast mode [ 1563.765672][T17353] gretap0: left allmulticast mode [ 1563.765811][T17353] macvlan2: left allmulticast mode [ 1563.798611][T17353] syzkaller1: left promiscuous mode [ 1563.798631][T17353] syzkaller1: left allmulticast mode [ 1563.843019][T17383] netlink: 'syz.1.12705': attribute type 2 has an invalid length. [ 1563.843399][T17383] net_ratelimit: 31 callbacks suppressed [ 1563.843415][T17383] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1563.846764][ T4918] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.846820][ T4918] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.846861][ T4918] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.846917][ T4918] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.969601][T17395] netlink: 'syz.3.12706': attribute type 39 has an invalid length. [ 1564.019967][ T4922] wlan0: Trigger new scan to find an IBSS to join [ 1564.121916][T17400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12708'. [ 1564.273416][T17408] syzkaller0: entered promiscuous mode [ 1564.273442][T17408] syzkaller0: entered allmulticast mode [ 1564.299065][T17406] FAULT_INJECTION: forcing a failure. [ 1564.299065][T17406] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.299101][T17406] CPU: 1 UID: 0 PID: 17406 Comm: syz.0.12710 Not tainted syzkaller #0 PREEMPT(full) [ 1564.299127][T17406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1564.299142][T17406] Call Trace: [ 1564.299152][T17406] [ 1564.299162][T17406] dump_stack_lvl+0xe8/0x150 [ 1564.299200][T17406] should_fail_ex+0x410/0x560 [ 1564.299235][T17406] should_failslab+0xa8/0x100 [ 1564.299267][T17406] __kmalloc_noprof+0xfe/0x720 [ 1564.299292][T17406] ? seg6_build_state+0x240/0x960 [ 1564.299406][T17406] ? seg6_build_state+0x240/0x960 [ 1564.299445][T17406] seg6_build_state+0x240/0x960 [ 1564.299478][T17406] ? pcpu_chunk_relocate+0x1d0/0x430 [ 1564.299531][T17406] ? __pfx_seg6_build_state+0x10/0x10 [ 1564.299561][T17406] ? lock_acquire+0x115/0x350 [ 1564.299596][T17406] ? lwtunnel_build_state+0xe2/0x4c0 [ 1564.299664][T17406] lwtunnel_build_state+0x384/0x4c0 [ 1564.299695][T17406] ? lwtunnel_build_state+0xe2/0x4c0 [ 1564.299726][T17406] fib_nh_common_init+0x130/0x3d0 [ 1564.299764][T17406] ? __pfx_fib_nh_common_init+0x10/0x10 [ 1564.299793][T17406] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 1564.299828][T17406] ? __kmalloc_noprof+0x38c/0x720 [ 1564.299855][T17406] fib_nh_init+0x9e/0x410 [ 1564.299889][T17406] fib_create_info+0x1b9b/0x3170 [ 1564.299927][T17406] ? trace_contention_end+0x3d/0x140 [ 1564.299974][T17406] fib_table_insert+0xcb/0x1b10 [ 1564.300006][T17406] ? __pfx___mutex_lock+0x10/0x10 [ 1564.300063][T17406] ? fib_new_table+0x14b/0x3f0 [ 1564.300093][T17406] inet_rtm_newroute+0x14f/0x250 [ 1564.300124][T17406] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1564.300174][T17406] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1564.300200][T17406] rtnetlink_rcv_msg+0x802/0xc00 [ 1564.300228][T17406] ? netlink_sendmsg+0x5d4/0xb40 [ 1564.300255][T17406] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1564.300283][T17406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1564.300313][T17406] ? __lock_acquire+0x747/0x2de0 [ 1564.300352][T17406] netlink_rcv_skb+0x226/0x4a0 [ 1564.300377][T17406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1564.300407][T17406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1564.300444][T17406] ? netlink_deliver_tap+0x2e/0x1b0 [ 1564.300468][T17406] ? netlink_deliver_tap+0x2e/0x1b0 [ 1564.300497][T17406] netlink_unicast+0x7bd/0x940 [ 1564.300543][T17406] netlink_sendmsg+0x813/0xb40 [ 1564.300583][T17406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.300618][T17406] ? apparmor_socket_sendmsg+0x98/0x360 [ 1564.300650][T17406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.300674][T17406] sock_sendmsg_nosec+0x14e/0x190 [ 1564.300703][T17406] ____sys_sendmsg+0x54e/0x850 [ 1564.300741][T17406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1564.300784][T17406] ? import_iovec+0x73/0xa0 [ 1564.300818][T17406] ___sys_sendmsg+0x2a5/0x360 [ 1564.300849][T17406] ? __lock_acquire+0x747/0x2de0 [ 1564.300878][T17406] ? __pfx____sys_sendmsg+0x10/0x10 [ 1564.300915][T17406] ? kstrtouint+0x6e/0xe0 [ 1564.300967][T17406] ? __fget_files+0x2a/0x420 [ 1564.300999][T17406] ? __fget_files+0x3a2/0x420 [ 1564.301052][T17406] __sys_sendmmsg+0x273/0x4d0 [ 1564.301089][T17406] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1564.301132][T17406] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1564.301183][T17406] ? ksys_write+0x242/0x270 [ 1564.301219][T17406] ? __pfx_ksys_write+0x10/0x10 [ 1564.301261][T17406] __x64_sys_sendmmsg+0xa0/0xc0 [ 1564.301296][T17406] do_syscall_64+0x166/0x520 [ 1564.301328][T17406] ? trace_irq_disable+0x3b/0x140 [ 1564.301352][T17406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.301377][T17406] ? clear_bhb_loop+0x70/0xc0 [ 1564.301406][T17406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.301429][T17406] RIP: 0033:0x7f49ced9e199 [ 1564.301453][T17406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.301473][T17406] RSP: 002b:00007f49ccff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1564.301498][T17406] RAX: ffffffffffffffda RBX: 00007f49cf025fa0 RCX: 00007f49ced9e199 [ 1564.301515][T17406] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1564.301531][T17406] RBP: 00007f49ccff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.301547][T17406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.301561][T17406] R13: 00007f49cf026038 R14: 00007f49cf025fa0 R15: 00007ffebc1ae148 [ 1564.301599][T17406] [ 1564.870142][T17556] Bluetooth: hci4: ISO packet for unknown connection handle 3684 [ 1564.956792][T17421] netlink: 63 bytes leftover after parsing attributes in process `syz.4.12718'. [ 1565.032988][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12717'. [ 1565.033023][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12717'. [ 1565.156764][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12719'. [ 1565.156791][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12719'. [ 1565.223146][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12719'. [ 1565.223173][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12719'. [ 1565.244869][T23994] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.244921][T23994] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.244957][T23994] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.253524][T23994] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.290523][T17435] ip_tables: iptables: counters copy to user failed while replacing table [ 1565.315652][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12720'. [ 1565.775072][T17459] FAULT_INJECTION: forcing a failure. [ 1565.775072][T17459] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.775109][T17459] CPU: 1 UID: 0 PID: 17459 Comm: syz.3.12725 Not tainted syzkaller #0 PREEMPT(full) [ 1565.775138][T17459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1565.775153][T17459] Call Trace: [ 1565.775163][T17459] [ 1565.775173][T17459] dump_stack_lvl+0xe8/0x150 [ 1565.775212][T17459] should_fail_ex+0x410/0x560 [ 1565.775246][T17459] should_failslab+0xa8/0x100 [ 1565.775277][T17459] __kmalloc_noprof+0xfe/0x720 [ 1565.775299][T17459] ? seg6_build_state+0x240/0x960 [ 1565.775331][T17459] ? seg6_build_state+0x240/0x960 [ 1565.775369][T17459] seg6_build_state+0x240/0x960 [ 1565.775403][T17459] ? pcpu_chunk_relocate+0x1d0/0x430 [ 1565.775444][T17459] ? __pfx_seg6_build_state+0x10/0x10 [ 1565.775474][T17459] ? lock_acquire+0x115/0x350 [ 1565.775509][T17459] ? lwtunnel_build_state+0xe2/0x4c0 [ 1565.775541][T17459] lwtunnel_build_state+0x384/0x4c0 [ 1565.775570][T17459] ? lwtunnel_build_state+0xe2/0x4c0 [ 1565.775601][T17459] fib_nh_common_init+0x130/0x3d0 [ 1565.775639][T17459] ? __pfx_fib_nh_common_init+0x10/0x10 [ 1565.775669][T17459] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 1565.775703][T17459] ? __kmalloc_noprof+0x38c/0x720 [ 1565.775729][T17459] fib_nh_init+0x9e/0x410 [ 1565.775761][T17459] fib_create_info+0x1b9b/0x3170 [ 1565.775797][T17459] ? trace_contention_end+0x3d/0x140 [ 1565.775836][T17459] ? lockdep_hardirqs_on+0x7b/0x110 [ 1565.775874][T17459] fib_table_insert+0xcb/0x1b10 [ 1565.775907][T17459] ? __pfx___mutex_lock+0x10/0x10 [ 1565.775960][T17459] ? fib_new_table+0x14b/0x3f0 [ 1565.775987][T17459] inet_rtm_newroute+0x14f/0x250 [ 1565.776011][T17459] ? lockdep_hardirqs_on+0x7b/0x110 [ 1565.776043][T17459] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1565.776090][T17459] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1565.776114][T17459] rtnetlink_rcv_msg+0x802/0xc00 [ 1565.776155][T17459] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1565.776185][T17459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1565.776217][T17459] ? __copy_skb_header+0xa3/0x4a0 [ 1565.776261][T17459] netlink_rcv_skb+0x226/0x4a0 [ 1565.776286][T17459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1565.776316][T17459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1565.776352][T17459] ? netlink_deliver_tap+0x2e/0x1b0 [ 1565.776376][T17459] ? netlink_deliver_tap+0x2e/0x1b0 [ 1565.776406][T17459] netlink_unicast+0x7bd/0x940 [ 1565.776452][T17459] netlink_sendmsg+0x813/0xb40 [ 1565.776486][T17459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1565.776519][T17459] ? apparmor_socket_sendmsg+0x98/0x360 [ 1565.776548][T17459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1565.776570][T17459] sock_sendmsg_nosec+0x14e/0x190 [ 1565.776597][T17459] ____sys_sendmsg+0x54e/0x850 [ 1565.776634][T17459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1565.776674][T17459] ? import_iovec+0x73/0xa0 [ 1565.776707][T17459] ___sys_sendmsg+0x2a5/0x360 [ 1565.776735][T17459] ? __lock_acquire+0x747/0x2de0 [ 1565.776763][T17459] ? __pfx____sys_sendmsg+0x10/0x10 [ 1565.776800][T17459] ? kstrtouint+0x6e/0xe0 [ 1565.776851][T17459] ? __fget_files+0x2a/0x420 [ 1565.776881][T17459] ? __fget_files+0x3a2/0x420 [ 1565.776922][T17459] __sys_sendmmsg+0x273/0x4d0 [ 1565.776966][T17459] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1565.777007][T17459] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1565.777057][T17459] ? ksys_write+0x242/0x270 [ 1565.777092][T17459] ? __pfx_ksys_write+0x10/0x10 [ 1565.777133][T17459] __x64_sys_sendmmsg+0xa0/0xc0 [ 1565.777165][T17459] do_syscall_64+0x166/0x520 [ 1565.777197][T17459] ? trace_irq_disable+0x3b/0x140 [ 1565.777219][T17459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.777244][T17459] ? clear_bhb_loop+0x70/0xc0 [ 1565.777272][T17459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.777296][T17459] RIP: 0033:0x7f6d7899e199 [ 1565.777319][T17459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.777338][T17459] RSP: 002b:00007f6d797e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1565.777362][T17459] RAX: ffffffffffffffda RBX: 00007f6d78c25fa0 RCX: 00007f6d7899e199 [ 1565.777379][T17459] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1565.777395][T17459] RBP: 00007f6d797e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.777410][T17459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1565.777424][T17459] R13: 00007f6d78c26038 R14: 00007f6d78c25fa0 R15: 00007ffeca80f8f8 [ 1565.777461][T17459] [ 1565.893664][T17458] syzkaller1: entered promiscuous mode [ 1565.893731][T17458] syzkaller1: entered allmulticast mode [ 1566.325119][T17462] netlink: 'syz.3.12727': attribute type 1 has an invalid length. [ 1566.387010][T17464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12727'. [ 1566.493999][T17465] bond28: (slave geneve4): making interface the new active one [ 1566.510060][T17465] bond28: (slave geneve4): Enslaving as an active interface with an up link [ 1566.515290][T17464] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1566.809235][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.810018][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.874464][T17477] batman_adv: batadv0: Interface deactivated: dummy0 [ 1566.958202][T17487] netlink: 'syz.1.12733': attribute type 8 has an invalid length. [ 1566.958227][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12733'. [ 1567.032463][T17496] netlink: 'syz.0.12735': attribute type 4 has an invalid length. [ 1567.074851][T17477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.094441][T17477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.200559][T17477] gretap0: left allmulticast mode [ 1567.219335][T17556] Bluetooth: hci4: ISO packet for unknown connection handle 3684 [ 1567.226701][T17487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.266860][ T4919] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.266901][ T4919] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.266957][ T4919] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.266986][ T4919] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.267023][ T4919] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.267053][ T4919] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.267089][ T4919] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.267118][ T4919] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.267155][ T4919] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1567.267193][ T4919] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1567.267229][ T4919] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1567.267266][ T4919] netdevsim netdevsim3 €Â: set [1, 1] type 2 family 0 port 20004 - 0 [ 1567.816324][T17518] netlink: 'syz.1.12743': attribute type 1 has an invalid length. [ 1567.879366][T17518] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1568.028499][ T5715] page_pool_release_retry() stalled pool shutdown: id 26, 1 inflight 1449 sec [ 1568.237323][T17540] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1568.513978][T17557] FAULT_INJECTION: forcing a failure. [ 1568.513978][T17557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.514014][T17557] CPU: 0 UID: 0 PID: 17557 Comm: syz.4.12750 Not tainted syzkaller #0 PREEMPT(full) [ 1568.514039][T17557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1568.514052][T17557] Call Trace: [ 1568.514061][T17557] [ 1568.514071][T17557] dump_stack_lvl+0xe8/0x150 [ 1568.514109][T17557] should_fail_ex+0x410/0x560 [ 1568.514144][T17557] _copy_from_user+0x2d/0xb0 [ 1568.514181][T17557] kstrtouint_from_user+0xd6/0x180 [ 1568.514211][T17557] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1568.514246][T17557] ? lock_acquire+0x115/0x350 [ 1568.514274][T17557] proc_fail_nth_write+0x8e/0x210 [ 1568.514300][T17557] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1568.514332][T17557] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1568.514356][T17557] vfs_write+0x296/0xba0 [ 1568.514399][T17557] ? __pfx_vfs_write+0x10/0x10 [ 1568.514435][T17557] ? __fget_files+0x2a/0x420 [ 1568.514472][T17557] ? __fget_files+0x3a2/0x420 [ 1568.514503][T17557] ? __fget_files+0x2a/0x420 [ 1568.514544][T17557] ksys_write+0x150/0x270 [ 1568.514581][T17557] ? __pfx_ksys_write+0x10/0x10 [ 1568.514629][T17557] do_syscall_64+0x166/0x520 [ 1568.514663][T17557] ? trace_irq_disable+0x3b/0x140 [ 1568.514687][T17557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.514711][T17557] ? clear_bhb_loop+0x70/0xc0 [ 1568.514739][T17557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.514771][T17557] RIP: 0033:0x7f242dd5e9ce [ 1568.514792][T17557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1568.514814][T17557] RSP: 002b:00007f242ec89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1568.514839][T17557] RAX: ffffffffffffffda RBX: 00007f242ec8a6c0 RCX: 00007f242dd5e9ce [ 1568.514856][T17557] RDX: 0000000000000001 RSI: 00007f242ec8a0a0 RDI: 0000000000000004 [ 1568.514872][T17557] RBP: 00007f242ec8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.514887][T17557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.514902][T17557] R13: 00007f242e026038 R14: 00007f242e025fa0 R15: 00007ffcfc698908 [ 1568.514940][T17557] [ 1568.980463][ T171] wlan0: Trigger new scan to find an IBSS to join [ 1569.601931][T17590] netlink: 'syz.3.12758': attribute type 1 has an invalid length. [ 1569.869510][ T4916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.140582][T17609] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1570.141062][T17609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1570.142128][T17609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1570.269417][T17600] syzkaller0: entered promiscuous mode [ 1570.269443][T17600] syzkaller0: entered allmulticast mode [ 1570.352270][T17611] __nla_validate_parse: 15 callbacks suppressed [ 1570.352286][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12764'. [ 1570.495094][T17620] netlink: 'syz.4.12767': attribute type 1 has an invalid length. [ 1570.535484][T17620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1570.541791][T17623] macvlan5: entered promiscuous mode [ 1570.541809][T17623] macvlan5: entered allmulticast mode [ 1570.542675][T17623] bond3: entered promiscuous mode [ 1570.543108][T17623] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1570.579688][T17623] bond3: left promiscuous mode [ 1570.600844][T17620] macvlan5: entered promiscuous mode [ 1570.600868][T17620] macvlan5: entered allmulticast mode [ 1570.601485][T17620] bond3: entered promiscuous mode [ 1570.602178][T17620] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1570.603097][T17620] bond3: left promiscuous mode [ 1570.665076][T17620] macvlan5: entered promiscuous mode [ 1570.665101][T17620] macvlan5: entered allmulticast mode [ 1570.665713][T17620] bond3: entered promiscuous mode [ 1570.683581][T17620] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1570.684602][T17620] bond3: left promiscuous mode [ 1570.754523][T17620] macvlan5: entered promiscuous mode [ 1570.754570][T17620] macvlan5: entered allmulticast mode [ 1570.755258][T17620] bond3: entered promiscuous mode [ 1570.755859][T17620] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1570.781832][T17620] bond3: left promiscuous mode [ 1570.824449][T17620] macvlan5: entered promiscuous mode [ 1570.824476][T17620] macvlan5: entered allmulticast mode [ 1570.825084][T17620] bond3: entered promiscuous mode [ 1570.825906][T17620] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1570.851788][T17620] bond3: left promiscuous mode [ 1571.701523][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1572.108164][T17576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1575.426531][T17620] macvlan5: entered promiscuous mode [ 1575.426555][T17620] macvlan5: entered allmulticast mode [ 1575.427234][T17620] bond3: entered promiscuous mode [ 1575.427852][T17620] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1575.428807][T17620] bond3: left promiscuous mode [ 1575.647335][T17653] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12775'. [ 1575.682829][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12778'. [ 1575.682867][T17658] netlink: 'syz.0.12778': attribute type 21 has an invalid length. [ 1575.785998][T17661] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12779'. [ 1575.887672][T17661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.889557][T17661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.894001][T17672] netlink: 'syz.3.12783': attribute type 1 has an invalid length. [ 1575.896242][T17661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.939510][T17670] sctp: [Deprecated]: syz.0.12782 (pid 17670) Use of int in maxseg socket option. [ 1575.939510][T17670] Use struct sctp_assoc_value instead [ 1576.004415][T17661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.015396][T17661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.038984][T17661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1576.039015][T17661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1576.045228][T17661] veth1_vlan: left promiscuous mode [ 1576.048959][T17661] veth0_vlan: left promiscuous mode [ 1576.053839][T17661] veth0_vlan: entered promiscuous mode [ 1576.062611][T17661] veth1_vlan: entered promiscuous mode [ 1576.113165][T17661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1576.116266][T17661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1576.125205][T17661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1576.131061][T17661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1576.262512][T17672] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1576.277837][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.277964][ T4916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.279820][T17681] netlink: 'syz.0.12785': attribute type 1 has an invalid length. [ 1576.332388][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.332525][ T4916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.365016][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12785'. [ 1576.398492][T17674] bond24: (slave veth0_to_bond): Releasing active interface [ 1576.416122][T17674] bond29: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1576.599980][T17681] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1576.667903][T23994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.669327][ T4919] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.669527][ T4919] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.669569][ T4919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.794917][T17703] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12788'. [ 1576.831090][T17691] netlink: 'syz.0.12785': attribute type 3 has an invalid length. [ 1576.831313][T17691] netlink: 'syz.0.12785': attribute type 3 has an invalid length. [ 1576.996691][T17692] syzkaller0: entered promiscuous mode [ 1576.996718][T17692] syzkaller0: entered allmulticast mode [ 1577.170780][T16248] openvswitch: cpu_id mismatch with handler threads [ 1577.193578][T17733] netlink: 'syz.3.12796': attribute type 1 has an invalid length. [ 1577.222609][T16248] openvswitch: cpu_id mismatch with handler threads [ 1582.709493][T17736] veth0_macvtap: left promiscuous mode [ 1582.870766][T17736] smc: adding net device macvtap0 with user defined pnetid SYZ0 [ 1582.940545][T17739] syzkaller0: entered promiscuous mode [ 1582.940575][T17739] syzkaller0: entered allmulticast mode [ 1584.027334][ T4022] Bluetooth: hci4: command 0x0406 tx timeout [ 1587.860700][T17795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12810'. [ 1587.939312][T17801] IPv6: NLM_F_CREATE should be specified when creating new route [ 1588.060378][T17801] IPv6: Can't replace route, no match found [ 1588.133363][T17797] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12809'. [ 1588.133394][T17797] openvswitch: netlink: Message has 512 unknown bytes. [ 1588.580050][T17831] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.12815'. [ 1588.672330][ T4916] openvswitch: cpu_id mismatch with handler threads [ 1588.695964][ T4916] openvswitch: cpu_id mismatch with handler threads [ 1588.795961][ T5281] veth0_macvtap: entered promiscuous mode [ 1588.931351][T17841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12817'. [ 1589.073362][T17846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12817'. [ 1589.317212][ T4022] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1589.321050][ T4022] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1589.323511][ T4022] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1589.326295][ T4022] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1589.358392][ T4022] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1589.618590][ T9585] openvswitch: cpu_id mismatch with handler threads [ 1589.638423][T17860] syzkaller0: entered promiscuous mode [ 1589.638451][T17860] syzkaller0: entered allmulticast mode [ 1590.532160][ T30] audit: type=1800 audit(1791263052.337:27): pid=17879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12825" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1088 res=0 errno=0 [ 1590.721489][ T4926] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1590.721529][ T4926] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.721558][ T4926] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1590.724328][T17885] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12827'. [ 1591.073960][T17906] xt_hashlimit: size too large, truncated to 1048576 [ 1591.073982][T17906] xt_hashlimit: invalid rate [ 1591.215295][ T4926] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1591.215334][ T4926] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.215363][ T4926] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1591.403696][ T4926] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1591.403737][ T4926] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.403768][ T4926] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1591.459220][T17556] Bluetooth: hci5: command tx timeout [ 1591.704406][ T4926] netdevsim netdevsim3 €Â (unregistering): left allmulticast mode [ 1591.704441][ T4926] netdevsim netdevsim3 €Â (unregistering): left promiscuous mode [ 1591.707466][ T4926] bridge0: port 1(€Â) entered disabled state [ 1591.811692][T17933] netlink: 'syz.1.12831': attribute type 4 has an invalid length. [ 1592.069822][ T4926] netdevsim netdevsim3 €Â (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1592.069868][ T4926] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.069898][ T4926] netdevsim netdevsim3 €Â (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1592.141242][T17925] veth0: entered promiscuous mode [ 1592.211082][T17921] veth0: left promiscuous mode [ 1592.402017][T17944] dvmrp8: entered allmulticast mode [ 1592.668957][T17959] netlink: 'syz.2.12840': attribute type 1 has an invalid length. [ 1592.668982][T17959] netlink: 'syz.2.12840': attribute type 3 has an invalid length. [ 1592.668996][T17959] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12840'. [ 1592.893878][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12843'. [ 1592.895189][T17964] netlink: 'syz.2.12841': attribute type 1 has an invalid length. [ 1592.896971][ C1] openvswitch: cpu_id mismatch with handler threads [ 1592.932210][T17968] netlink: 'syz.0.12842': attribute type 1 has an invalid length. [ 1592.932237][T17968] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12842'. [ 1592.932255][T17968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12842'. [ 1593.104196][T17964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1593.138248][T17970] bond2: (slave geneve2): making interface the new active one [ 1593.140199][T17970] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1593.258610][T17981] xt_l2tp: invalid flags combination: 8 [ 1593.464458][T17983] netlink: zone id is out of range [ 1593.464474][T17983] netlink: zone id is out of range [ 1593.464482][T17983] netlink: zone id is out of range [ 1593.464490][T17983] netlink: zone id is out of range [ 1593.464497][T17983] netlink: zone id is out of range [ 1593.464504][T17983] netlink: zone id is out of range [ 1593.464512][T17983] netlink: zone id is out of range [ 1593.464520][T17983] netlink: zone id is out of range [ 1593.464529][T17983] netlink: zone id is out of range [ 1593.464537][T17983] netlink: set zone limit has 4 unknown bytes [ 1593.538435][ T4022] Bluetooth: hci5: command tx timeout [ 1593.635696][ T4926] ip6gretap0 (unregistering): left allmulticast mode [ 1593.867468][T17991] FAULT_INJECTION: forcing a failure. [ 1593.867468][T17991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.867505][T17991] CPU: 1 UID: 0 PID: 17991 Comm: syz.1.12850 Not tainted syzkaller #0 PREEMPT(full) [ 1593.867532][T17991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1593.867546][T17991] Call Trace: [ 1593.867556][T17991] [ 1593.867566][T17991] dump_stack_lvl+0xe8/0x150 [ 1593.867613][T17991] should_fail_ex+0x410/0x560 [ 1593.867647][T17991] _copy_to_user+0x31/0xb0 [ 1593.867680][T17991] simple_read_from_buffer+0xe1/0x170 [ 1593.867724][T17991] proc_fail_nth_read+0x1bb/0x230 [ 1593.867746][T17991] ? common_file_perm+0x20e/0x2b0 [ 1593.867779][T17991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1593.867807][T17991] ? rw_verify_area+0x24a/0x4c0 [ 1593.867842][T17991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1593.867865][T17991] vfs_read+0x213/0xa80 [ 1593.867905][T17991] ? __pfx___mutex_lock+0x10/0x10 [ 1593.867941][T17991] ? __pfx_vfs_read+0x10/0x10 [ 1593.867976][T17991] ? __fget_files+0x2a/0x420 [ 1593.868013][T17991] ? __fget_files+0x3a2/0x420 [ 1593.868042][T17991] ? __fget_files+0x2a/0x420 [ 1593.868082][T17991] ksys_read+0x150/0x270 [ 1593.868118][T17991] ? __pfx_ksys_read+0x10/0x10 [ 1593.868165][T17991] do_syscall_64+0x166/0x520 [ 1593.868197][T17991] ? trace_irq_disable+0x3b/0x140 [ 1593.868222][T17991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.868246][T17991] ? clear_bhb_loop+0x70/0xc0 [ 1593.868273][T17991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.868297][T17991] RIP: 0033:0x7fd87ff5e9ce [ 1593.868319][T17991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1593.868339][T17991] RSP: 002b:00007fd880eccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1593.868364][T17991] RAX: ffffffffffffffda RBX: 00007fd880ecd6c0 RCX: 00007fd87ff5e9ce [ 1593.868383][T17991] RDX: 000000000000000f RSI: 00007fd880ecd0a0 RDI: 0000000000000005 [ 1593.868398][T17991] RBP: 00007fd880ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.868413][T17991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.868428][T17991] R13: 00007fd880226038 R14: 00007fd880225fa0 R15: 00007ffc55b26ea8 [ 1593.868465][T17991] [ 1594.061715][ T4926] gretap0 (unregistering): left allmulticast mode [ 1594.260332][ T4022] Bluetooth: hci2: command 0x0406 tx timeout [ 1594.369352][ T4926] bond26 (unregistering): (slave gretap3): Releasing backup interface [ 1594.605804][ T4926] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1594.689473][ T4926] bond28 (unregistering): (slave geneve4): Releasing active interface [ 1594.798098][ T4926] bond9 (unregistering): (slave bridge1): Releasing backup interface [ 1594.798127][ T4926] bond9 (unregistering): (slave bridge1): the permanent HWaddr of slave - 0e:00:6e:92:91:f2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1594.798156][ T4926] bridge1 (unregistering): left promiscuous mode [ 1594.798171][ T4926] bridge1 (unregistering): left allmulticast mode [ 1594.798186][ T4926] bond9 (unregistering): (slave bridge2): making interface the new active one [ 1594.798198][ T4926] bridge2 (unregistering): entered promiscuous mode [ 1594.798210][ T4926] bridge2 (unregistering): entered allmulticast mode [ 1594.854713][ T4926] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 1594.854809][ T4926] bridge2 (unregistering): left promiscuous mode [ 1594.854864][ T4926] bridge2 (unregistering): left allmulticast mode [ 1594.900872][ T4926] bond18 (unregistering): (slave bridge3): Releasing backup interface [ 1594.900904][ T4926] bridge3 (unregistering): left promiscuous mode [ 1594.964579][ T4926] bond25 (unregistering): (slave bridge5): Releasing backup interface [ 1594.985425][ T4926] bond0 (unregistering): Released all slaves [ 1595.002223][ T4926] bond1 (unregistering): Released all slaves [ 1595.028577][ T4926] bond2 (unregistering): (slave veth3): Releasing active interface [ 1595.029611][ T4926] bond2 (unregistering): Released all slaves [ 1595.069586][ T4926] bond3 (unregistering): (slave veth5): Releasing active interface [ 1595.070699][ T4926] bond3 (unregistering): Released all slaves [ 1595.107921][ T4926] bond4 (unregistering): (slave veth7): Releasing active interface [ 1595.128047][ T4926] bond4 (unregistering): Released all slaves [ 1595.170191][ T4926] bond5 (unregistering): Released all slaves [ 1595.215561][ T4926] bond6 (unregistering): (slave veth9): Releasing active interface [ 1595.221518][ T4926] bond6 (unregistering): Released all slaves [ 1595.248564][ T4926] bond7 (unregistering): Released all slaves [ 1595.271329][ T4926] bond8 (unregistering): Released all slaves [ 1595.304100][ T4926] bond9 (unregistering): Released all slaves [ 1595.330420][ T4926] bond10 (unregistering): (slave veth11): Releasing active interface [ 1595.331464][ T4926] bond10 (unregistering): Released all slaves [ 1595.381076][ T4926] bond11 (unregistering): (slave veth13): Releasing active interface [ 1595.382605][ T4926] bond11 (unregistering): Released all slaves [ 1595.420489][ T4926] bond12 (unregistering): (slave veth15): Releasing active interface [ 1595.422474][ T4926] bond12 (unregistering): Released all slaves [ 1595.462534][ T4926] bond13 (unregistering): (slave veth17): Releasing active interface [ 1595.463501][ T4926] bond13 (unregistering): Released all slaves [ 1595.493425][ T4926] bond14 (unregistering): Released all slaves [ 1595.513022][ T4926] bond15 (unregistering): (slave veth19): Releasing active interface [ 1595.528047][ T4926] bond15 (unregistering): Released all slaves [ 1595.548535][ T4926] bond16 (unregistering): (slave veth21): Releasing active interface [ 1595.550175][ T4926] bond16 (unregistering): Released all slaves [ 1595.579816][ T4926] bond17 (unregistering): (slave veth23): Releasing active interface [ 1595.582022][ T4926] bond17 (unregistering): Released all slaves [ 1595.610534][ T4926] bond18 (unregistering): Released all slaves [ 1595.617122][T17556] Bluetooth: hci5: command tx timeout [ 1595.641776][ T4926] bond19 (unregistering): Released all slaves [ 1595.663517][ T4926] bond20 (unregistering): (slave veth25): Releasing active interface [ 1595.665181][ T4926] bond20 (unregistering): Released all slaves [ 1595.693361][ T4926] bond21 (unregistering): (slave veth27): Releasing active interface [ 1595.695036][ T4926] bond21 (unregistering): Released all slaves [ 1595.722472][ T4926] bond22 (unregistering): Released all slaves [ 1595.739462][ T4926] bond23 (unregistering): Released all slaves [ 1595.770264][ T4926] bond24 (unregistering): (slave veth31): Releasing active interface [ 1595.771857][ T4926] bond24 (unregistering): Released all slaves [ 1595.795941][ T4926] bond25 (unregistering): Released all slaves [ 1595.815302][ T4926] bond26 (unregistering): (slave bond27): Releasing backup interface [ 1595.816071][ T4926] bond26 (unregistering): Released all slaves [ 1595.841100][ T4926] bond27 (unregistering): Released all slaves [ 1595.861859][ T4926] bond28 (unregistering): Released all slaves [ 1595.884084][ T4926] bond29 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1595.885849][ T4926] bond29 (unregistering): Released all slaves [ 1596.264998][ T4926] tipc: Left network mode [ 1596.701012][T17852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.701129][T17852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.701309][T17852] bridge_slave_0: entered allmulticast mode [ 1596.703477][T17852] bridge_slave_0: entered promiscuous mode [ 1596.770253][T17852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.770371][T17852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.770566][T17852] bridge_slave_1: entered allmulticast mode [ 1596.809350][T17852] bridge_slave_1: entered promiscuous mode [ 1596.934759][T17852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1597.069060][T17852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1597.213911][T17852] team0: Port device team_slave_0 added [ 1597.243232][T17852] team0: Port device team_slave_1 added [ 1597.361691][T17852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.361713][T17852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.361742][T17852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.363882][T17852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.363901][T17852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.363930][T17852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.703578][T17556] Bluetooth: hci5: command tx timeout [ 1597.738631][T17852] hsr_slave_0: entered promiscuous mode [ 1597.739673][T17852] hsr_slave_1: entered promiscuous mode [ 1597.740411][T17852] debugfs: 'hsr0' already exists in 'hsr' [ 1597.740433][T17852] Cannot create hsr debugfs directory [ 1598.201407][T18070] netlink: 'syz.1.12865': attribute type 1 has an invalid length. [ 1598.208295][T18091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12866'. [ 1598.359073][T18094] netlink: 'syz.0.12866': attribute type 1 has an invalid length. [ 1598.359099][T18094] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12866'. [ 1598.359116][T18094] netlink: 'syz.0.12866': attribute type 1 has an invalid length. [ 1598.545735][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1598.743692][ T4926] hsr_slave_0: left promiscuous mode [ 1598.744538][ T4926] hsr_slave_1: left promiscuous mode [ 1598.769069][ T4926] veth1_vlan: left promiscuous mode [ 1598.769149][ T4926] veth0_vlan: left promiscuous mode [ 1598.964137][T18116] netlink: 'syz.0.12871': attribute type 6 has an invalid length. [ 1599.325513][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12873'. [ 1599.357341][ T4926] smc: removing net device macvtap0 with user defined pnetid SYZ0 [ 1600.009388][T18140] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12875'. [ 1600.009415][T18140] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12875'. [ 1600.009436][T18140] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12875'. [ 1600.009452][T18140] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12875'. [ 1600.009469][T18140] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12875'. [ 1600.312384][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12878'. [ 1600.900222][ T4926] IPVS: stop unused estimator thread 0... [ 1601.220294][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1601.267822][T18172] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12880'. [ 1601.777316][ C1] openvswitch: cpu_id mismatch with handler threads [ 1602.412352][T18211] veth0: entered promiscuous mode [ 1602.671172][T17852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1602.691211][T17852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1602.733088][T17852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1602.752923][T17852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1602.771650][T17852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1602.836261][T17852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1602.856225][T17852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1602.913826][T17852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1603.106278][T18205] veth0: left promiscuous mode [ 1603.481790][T17852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.527596][T18243] __nla_validate_parse: 11 callbacks suppressed [ 1603.527620][T18243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12891'. [ 1603.558609][T17852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1603.581411][T18243] netlink: 'syz.1.12891': attribute type 21 has an invalid length. [ 1603.581430][T18243] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12891'. [ 1603.583937][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.584045][ T4902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.585969][T18243] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12891'. [ 1603.652700][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.652888][ T4916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.679786][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12891'. [ 1604.029984][T18265] netlink: 'syz.2.12894': attribute type 1 has an invalid length. [ 1604.112188][T18265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1604.181712][T18272] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1604.207939][T18275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12897'. [ 1604.247682][T18275] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12897'. [ 1604.822808][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12901'. [ 1604.947278][T18301] macvlan5: entered allmulticast mode [ 1605.333275][T18311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12902'. [ 1605.754048][T17852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.983861][T17852] veth0_vlan: entered promiscuous mode [ 1606.018440][T17852] veth1_vlan: entered promiscuous mode [ 1606.065858][T17852] veth0_macvtap: entered promiscuous mode [ 1606.095037][T17852] veth1_macvtap: entered promiscuous mode [ 1606.122700][T17852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.166027][T17852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.218088][ T4921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.218941][ T4921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.219121][ T4921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.219162][ T4921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.329897][T18332] tipc: Enabling of bearer rejected, failed to enable media [ 1606.625417][ T4921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.625443][ T4921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.740812][T18348] netlink: 'syz.2.12908': attribute type 8 has an invalid length. [ 1606.740840][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12908'. [ 1606.740874][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12908'. [ 1606.851139][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.851208][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.860395][T18348] net_ratelimit: 2 callbacks suppressed [ 1606.860437][T18348] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1607.062991][T18353] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1607.151782][T18357] netlink: 'syz.2.12911': attribute type 1 has an invalid length. [ 1607.151810][T18357] NCSI netlink: No device for ifindex 0 [ 1607.604469][T18385] netlink: 'syz.3.12916': attribute type 1 has an invalid length. [ 1607.810847][T18370] tc action pedit 'at' offset -2147483645 out of bounds [ 1607.977747][T18396] netlink: 'syz.3.12918': attribute type 4 has an invalid length. [ 1608.706973][T18413] __nla_validate_parse: 5 callbacks suppressed [ 1608.706999][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1608.707196][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1608.707349][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1608.707848][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1608.708005][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1608.708167][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1608.708318][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1608.821821][T18413] netlink: 'syz.0.12921': attribute type 4 has an invalid length. [ 1608.849144][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12924'. [ 1608.991110][T18424] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1609.100205][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12926'. [ 1609.382450][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12928'. [ 1609.430670][T18381] tipc: New replicast peer: 127.0.0.1 [ 1609.446512][T18381] tipc: Enabled bearer , priority 26 [ 1609.446703][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.447130][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.447364][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.448798][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.449033][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.449262][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.449471][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.449689][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.452320][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.452547][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.452766][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.452982][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.455507][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.455768][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.455991][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.456255][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.492761][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.531520][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.606060][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.609007][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.609635][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.610038][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.610305][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.627606][T17556] Bluetooth: hci1: ISO packet for unknown connection handle 3684 [ 1609.667764][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.668003][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.668284][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.668504][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.668740][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.668962][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.688809][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.689866][T18381] tipc: Enabling of bearer rejected, already enabled [ 1609.705797][T18381] tipc: Enabling of bearer rejected, already enabled [ 1610.401561][T18469] bond7: option updelay: invalid value (18446744073709518847) [ 1610.401590][T18469] bond7: option updelay: allowed values 0 - 2147483647 [ 1610.470719][T18469] bond7 (unregistering): Released all slaves [ 1610.540664][T18477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.081433][T18494] netlink: 'syz.3.12937': attribute type 1 has an invalid length. [ 1611.459949][T17556] Bluetooth: hci5: command tx timeout [ 1611.487728][T18512] syzkaller1: entered promiscuous mode [ 1611.487755][T18512] syzkaller1: entered allmulticast mode [ 1611.595126][T18521] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1612.460137][T18561] ip6tnl2: entered allmulticast mode [ 1612.594940][T18574] netlink: 'syz.1.12951': attribute type 1 has an invalid length. [ 1612.691946][T18574] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1612.719470][T18577] bond6: (slave veth0_to_bond): Releasing active interface [ 1612.745067][T18577] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1613.517498][T18613] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1613.518897][T18613] syz_tun: entered allmulticast mode [ 1613.629906][T18612] syz_tun: left allmulticast mode [ 1613.681727][T18618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1613.754310][T18615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1613.780707][T18623] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1613.784024][T18623] netlink: 'syz.0.12963': attribute type 1 has an invalid length. [ 1613.807179][T18618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1613.849761][T18623] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1613.948304][T18623] bond9: (slave geneve2): making interface the new active one [ 1613.955133][T18629] netlink: 'syz.3.12965': attribute type 1 has an invalid length. [ 1613.955669][T18623] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 1614.027491][ T4921] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.027544][ T4921] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.027582][ T4921] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.027621][ T4921] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.444111][ T30] audit: type=1804 audit(1791263076.247:28): pid=18639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12966" name="/newroot/188/cgroup.controllers" dev="tmpfs" ino=983 res=1 errno=0 [ 1614.444277][ T30] audit: type=1800 audit(1791263076.247:29): pid=18639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12966" name="cgroup.controllers" dev="tmpfs" ino=983 res=0 errno=0 [ 1614.544895][T18640] __nla_validate_parse: 34 callbacks suppressed [ 1614.544922][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12966'. [ 1614.816573][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1617.075920][T18648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1617.109135][T18652] syzkaller0: entered promiscuous mode [ 1617.109153][T18652] syzkaller0: entered allmulticast mode [ 1617.112420][T18647] tipc: Started in network mode [ 1617.112444][T18647] tipc: Node identity 5afe84771c9b, cluster identity 4711 [ 1617.112556][T18647] tipc: Enabled bearer , priority 0 [ 1617.112918][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12969'. [ 1617.190514][T18650] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1617.229031][T18652] tipc: Resetting bearer [ 1617.258232][T18658] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1617.261393][T18658] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 1617.265686][T18643] tipc: Resetting bearer [ 1617.349809][T18643] tipc: Disabling bearer [ 1617.533247][T18673] openvswitch: netlink: Actions may not be safe on all matching packets [ 1617.535069][T18673] netlink: 'syz.0.12975': attribute type 12 has an invalid length. [ 1617.535092][T18673] netlink: 'syz.0.12975': attribute type 29 has an invalid length. [ 1617.535108][T18673] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12975'. [ 1617.535147][T18673] netlink: 59 bytes leftover after parsing attributes in process `syz.0.12975'. [ 1618.168815][T18677] netlink: 332 bytes leftover after parsing attributes in process `syz.3.12976'. [ 1618.894819][T18701] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1619.057620][ C1] openvswitch: cpu_id mismatch with handler threads [ 1619.059373][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1619.421972][T18722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12983'. [ 1620.541904][T18722] xt_IDLETIMER: label is empty or not nul-terminated [ 1620.958598][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12987'. [ 1620.961564][T18741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1621.002074][T18744] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12987'. [ 1621.099860][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12989'. [ 1621.311098][T18757] netlink: 'syz.0.12990': attribute type 1 has an invalid length. [ 1621.313111][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12990'. [ 1621.313138][T18756] netlink: 'syz.0.12990': attribute type 1 has an invalid length. [ 1621.422854][T18764] netlink: 'syz.1.12993': attribute type 1 has an invalid length. [ 1621.441686][T18755] syzkaller0: entered promiscuous mode [ 1621.441710][T18755] syzkaller0: entered allmulticast mode [ 1621.467036][T18755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12991'. [ 1621.618992][T18767] bond11 (unregistering): Released all slaves [ 1621.924395][T18783] bridge_slave_0: left allmulticast mode [ 1621.924425][T18783] bridge_slave_0: left promiscuous mode [ 1621.924657][T18783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.972160][T18783] bridge_slave_1: left allmulticast mode [ 1621.972191][T18783] bridge_slave_1: left promiscuous mode [ 1621.972428][T18783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.010841][T18783] bond0: (slave bond_slave_0): Releasing backup interface [ 1622.054864][T18783] bond0: (slave bond_slave_1): Releasing backup interface [ 1622.075343][T18783] team0: Port device team_slave_0 removed [ 1622.100680][T18783] team0: Port device team_slave_1 removed [ 1622.103268][T18783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.103295][T18783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.129703][T18783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.129730][T18783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.153828][T18783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1622.241334][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13007'. [ 1622.338452][T18799] macvlan6: entered allmulticast mode [ 1623.057749][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1623.627105][T18902] netlink: Setting conntrack mark requires 'commit' flag. [ 1623.627143][T18902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1623.787001][T18919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13019'. [ 1624.227519][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13023'. [ 1624.283042][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13027'. [ 1624.489415][T18951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1624.601241][T18955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13029'. [ 1624.743729][T18969] syzkaller0: entered promiscuous mode [ 1624.743755][T18969] syzkaller0: entered allmulticast mode [ 1625.071666][T18990] syzkaller0: entered promiscuous mode [ 1625.071693][T18990] syzkaller0: entered allmulticast mode [ 1625.263607][T18998] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 1625.528356][T19007] netlink: 'syz.0.13043': attribute type 4 has an invalid length. [ 1625.533784][T19007] .`: renamed from bond0 [ 1625.585115][T19006] bond7: (slave veth0_to_bond): Releasing backup interface [ 1625.645244][T19019] x_tables: duplicate underflow at hook 3 [ 1626.418889][T19058] __nla_validate_parse: 4 callbacks suppressed [ 1626.418913][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13059'. [ 1626.434417][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13059'. [ 1626.446618][T19058] openvswitch: netlink: Message has 8 unknown bytes. [ 1626.559208][T19059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13060'. [ 1626.613038][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13060'. [ 1626.613096][T19060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13060'. [ 1626.613579][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13060'. [ 1626.613606][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13060'. [ 1626.736643][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1627.017066][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13064'. [ 1627.219776][T19072] macvlan7: entered allmulticast mode [ 1627.492120][T19092] TC_ACT_REPEAT abuse ? [ 1627.580615][T19096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13073'. [ 1627.580842][T19096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13073'. [ 1627.846237][T19107] Bluetooth: hci0: unsupported parameter 5135 [ 1627.846268][T19107] Bluetooth: hci0: unsupported parameter 8192 [ 1627.846286][T19107] Bluetooth: hci0: unsupported parameter 5135 [ 1627.846302][T19107] Bluetooth: hci0: unsupported parameter 8192 [ 1627.934885][T19110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1628.209313][T19118] macvlan5: entered allmulticast mode [ 1628.209341][T19118] gretap0: entered allmulticast mode [ 1628.419662][T18849] page_pool_release_retry() stalled pool shutdown: id 26, 1 inflight 1509 sec [ 1628.563342][T19130] pimreg: entered allmulticast mode [ 1628.741252][T19133] syzkaller0: entered promiscuous mode [ 1628.741280][T19133] syzkaller0: entered allmulticast mode [ 1629.094187][T19151] netlink: 'syz.2.13089': attribute type 1 has an invalid length. [ 1629.339295][T19156] bond7: (slave veth0_to_bond): Releasing active interface [ 1629.340012][T19156] bond7: (slave veth17): making interface the new active one [ 1629.482842][T19161] nbd4: detected capacity change from 0 to 63 [ 1629.483860][T19161] block nbd4: NBD_DISCONNECT [ 1629.545071][T19161] block nbd4: Disconnected due to user request. [ 1629.560219][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1629.560525][ T26] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1629.560812][ T26] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1629.560845][ T26] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1629.560864][ T26] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1629.560881][ T26] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1629.565519][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1629.565555][ T26] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1629.565576][ T26] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1629.565593][ T26] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1629.565611][ T26] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1629.565780][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1629.565809][ T26] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1629.565826][ T26] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1629.565986][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1629.566515][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1629.566789][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1629.567000][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1629.567192][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1629.567296][T19128] ldm_validate_partition_table(): Disk read failed. [ 1629.567437][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1629.567984][T19128] Dev nbd4: unable to read RDB block 0 [ 1629.568969][T19128] nbd4: unable to read partition table [ 1629.589241][T19161] block nbd4: shutting down sockets [ 1629.615887][T19128] ldm_validate_partition_table(): Disk read failed. [ 1629.617779][T19128] Dev nbd4: unable to read RDB block 0 [ 1629.634518][T19128] nbd4: unable to read partition table [ 1629.777694][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1630.011061][T19128] [ 1630.013472][T19128] ====================================================== [ 1630.020566][T19128] WARNING: possible circular locking dependency detected [ 1630.027747][T19128] syzkaller #0 Not tainted [ 1630.032203][T19128] ------------------------------------------------------ [ 1630.039282][T19128] udevd/19128 is trying to acquire lock: [ 1630.045022][T19128] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610 [ 1630.055226][T19128] [ 1630.055226][T19128] but task is already holding lock: [ 1630.062633][T19128] ffffffff905f2d40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1630.073374][T19128] [ 1630.073374][T19128] which lock already depends on the new lock. [ 1630.073374][T19128] [ 1630.083894][T19128] [ 1630.083894][T19128] the existing dependency chain (in reverse order) is: [ 1630.092937][T19128] [ 1630.092937][T19128] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 1630.100997][T19128] __mutex_lock+0x19d/0x1550 [ 1630.106162][T19128] kobject_uevent_net_broadcast+0x27e/0x560 [ 1630.112629][T19128] kobject_uevent_env+0x566/0x9e0 [ 1630.118471][T19128] device_add+0x544/0xb80 [ 1630.123488][T19128] device_create+0x269/0x300 [ 1630.128634][T19128] msr_device_create+0x33/0x50 [ 1630.133957][T19128] cpuhp_invoke_callback+0x434/0x810 [ 1630.139882][T19128] cpuhp_thread_fun+0x362/0x780 [ 1630.145282][T19128] smpboot_thread_fn+0x565/0xa70 [ 1630.150802][T19128] kthread+0x38b/0x480 [ 1630.155550][T19128] ret_from_fork+0x514/0xb70 [ 1630.160978][T19128] ret_from_fork_asm+0x1a/0x30 [ 1630.166314][T19128] [ 1630.166314][T19128] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 1630.173973][T19128] cpuhp_thread_fun+0x127/0x780 [ 1630.179400][T19128] smpboot_thread_fn+0x565/0xa70 [ 1630.184905][T19128] kthread+0x38b/0x480 [ 1630.189523][T19128] ret_from_fork+0x514/0xb70 [ 1630.194678][T19128] ret_from_fork_asm+0x1a/0x30 [ 1630.200003][T19128] [ 1630.200003][T19128] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 1630.207768][T19128] cpus_read_lock+0x42/0x160 [ 1630.212918][T19128] static_key_slow_inc+0x12/0x30 [ 1630.218456][T19128] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1630.224856][T19128] nbd_genl_foreach_sock+0x265/0x450 [ 1630.230694][T19128] nbd_genl_reconfigure+0xbbb/0x1040 [ 1630.236528][T19128] genl_family_rcv_msg_doit+0x233/0x340 [ 1630.242626][T19128] genl_rcv_msg+0x614/0x7a0 [ 1630.247686][T19128] netlink_rcv_skb+0x226/0x4a0 [ 1630.253023][T19128] genl_rcv+0x28/0x40 [ 1630.257582][T19128] netlink_unicast+0x7bd/0x940 [ 1630.263025][T19128] netlink_sendmsg+0x813/0xb40 [ 1630.268433][T19128] sock_sendmsg_nosec+0x14e/0x190 [ 1630.274123][T19128] ____sys_sendmsg+0x54e/0x850 [ 1630.279528][T19128] ___sys_sendmsg+0x2a5/0x360 [ 1630.284781][T19128] __x64_sys_sendmsg+0x1b1/0x290 [ 1630.290281][T19128] do_syscall_64+0x166/0x520 [ 1630.295755][T19128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.302195][T19128] [ 1630.302195][T19128] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1630.309864][T19128] __mutex_lock+0x19d/0x1550 [ 1630.315016][T19128] nbd_queue_rq+0x373/0xff0 [ 1630.320059][T19128] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1630.326361][T19128] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1630.333299][T19128] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1630.339936][T19128] blk_mq_run_work_fn+0x16c/0x300 [ 1630.345546][T19128] process_scheduled_works+0xc3d/0x1630 [ 1630.351682][T19128] worker_thread+0xa47/0xfb0 [ 1630.357294][T19128] kthread+0x38b/0x480 [ 1630.361923][T19128] ret_from_fork+0x514/0xb70 [ 1630.367093][T19128] ret_from_fork_asm+0x1a/0x30 [ 1630.372438][T19128] [ 1630.372438][T19128] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1630.379707][T19128] __mutex_lock+0x19d/0x1550 [ 1630.384874][T19128] nbd_queue_rq+0xc1/0xff0 [ 1630.389867][T19128] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1630.395962][T19128] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1630.402862][T19128] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1630.409396][T19128] blk_mq_run_work_fn+0x16c/0x300 [ 1630.414972][T19128] process_scheduled_works+0xc3d/0x1630 [ 1630.421070][T19128] worker_thread+0xa47/0xfb0 [ 1630.426205][T19128] kthread+0x38b/0x480 [ 1630.430827][T19128] ret_from_fork+0x514/0xb70 [ 1630.435994][T19128] ret_from_fork_asm+0x1a/0x30 [ 1630.441323][T19128] [ 1630.441323][T19128] -> #3 (set->srcu){.+.+}-{0:0}: [ 1630.448498][T19128] __synchronize_srcu+0xc9/0x2f0 [ 1630.454069][T19128] elevator_switch+0x1e8/0x7b0 [ 1630.459473][T19128] elevator_change+0x2fa/0x480 [ 1630.464811][T19128] elevator_set_default+0x375/0x440 [ 1630.470579][T19128] blk_register_queue+0x3f3/0x4e0 [ 1630.476253][T19128] __add_disk+0x6b8/0xdb0 [ 1630.481224][T19128] add_disk_fwnode+0x100/0x3a0 [ 1630.486541][T19128] nbd_dev_add+0x733/0xb60 [ 1630.491507][T19128] nbd_init+0x168/0x1f0 [ 1630.496399][T19128] do_one_initcall+0x250/0x870 [ 1630.501724][T19128] do_initcall_level+0x10a/0x1a0 [ 1630.507416][T19128] do_initcalls+0x59/0xa0 [ 1630.512334][T19128] kernel_init_freeable+0x29d/0x3e0 [ 1630.518145][T19128] kernel_init+0x22/0x1d0 [ 1630.523038][T19128] ret_from_fork+0x514/0xb70 [ 1630.528269][T19128] ret_from_fork_asm+0x1a/0x30 [ 1630.533592][T19128] [ 1630.533592][T19128] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1630.541438][T19128] __mutex_lock+0x19d/0x1550 [ 1630.546589][T19128] elevator_change+0x1af/0x480 [ 1630.551967][T19128] elevator_set_none+0xb5/0x140 [ 1630.557385][T19128] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1630.563754][T19128] nbd_start_device+0x189/0xb30 [ 1630.569182][T19128] nbd_genl_connect+0x167d/0x1cd0 [ 1630.574774][T19128] genl_family_rcv_msg_doit+0x233/0x340 [ 1630.580877][T19128] genl_rcv_msg+0x614/0x7a0 [ 1630.585934][T19128] netlink_rcv_skb+0x226/0x4a0 [ 1630.591326][T19128] genl_rcv+0x28/0x40 [ 1630.595858][T19128] netlink_unicast+0x7bd/0x940 [ 1630.601193][T19128] netlink_sendmsg+0x813/0xb40 [ 1630.606534][T19128] sock_sendmsg_nosec+0x14e/0x190 [ 1630.612135][T19128] ____sys_sendmsg+0x54e/0x850 [ 1630.617477][T19128] ___sys_sendmsg+0x2a5/0x360 [ 1630.622726][T19128] __x64_sys_sendmsg+0x1b1/0x290 [ 1630.628232][T19128] do_syscall_64+0x166/0x520 [ 1630.633387][T19128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.639828][T19128] [ 1630.639828][T19128] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1630.648544][T19128] blk_alloc_queue+0x544/0x690 [ 1630.653861][T19128] __blk_mq_alloc_disk+0x194/0x390 [ 1630.659524][T19128] nbd_dev_add+0x494/0xb60 [ 1630.664664][T19128] nbd_init+0x168/0x1f0 [ 1630.669397][T19128] do_one_initcall+0x250/0x870 [ 1630.674710][T19128] do_initcall_level+0x10a/0x1a0 [ 1630.680204][T19128] do_initcalls+0x59/0xa0 [ 1630.685080][T19128] kernel_init_freeable+0x29d/0x3e0 [ 1630.690845][T19128] kernel_init+0x22/0x1d0 [ 1630.695755][T19128] ret_from_fork+0x514/0xb70 [ 1630.700927][T19128] ret_from_fork_asm+0x1a/0x30 [ 1630.706258][T19128] [ 1630.706258][T19128] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1630.713510][T19128] __lock_acquire+0x164c/0x2de0 [ 1630.718913][T19128] lock_acquire+0x115/0x350 [ 1630.724012][T19128] fs_reclaim_acquire+0x71/0x100 [ 1630.729534][T19128] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 1630.735921][T19128] __alloc_skb+0x27a/0x7a0 [ 1630.740911][T19128] alloc_uevent_skb+0x7d/0x230 [ 1630.746252][T19128] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1630.752721][T19128] kobject_uevent_env+0x566/0x9e0 [ 1630.758304][T19128] nbd_config_put+0x2c8/0x7e0 [ 1630.763525][T19128] nbd_release+0xfe/0x140 [ 1630.768429][T19128] bdev_release+0x571/0x690 [ 1630.773565][T19128] blkdev_release+0x15/0x20 [ 1630.778617][T19128] __fput+0x418/0xa50 [ 1630.783176][T19128] fput_close_sync+0x11f/0x240 [ 1630.788495][T19128] __x64_sys_close+0x7e/0x110 [ 1630.793746][T19128] do_syscall_64+0x166/0x520 [ 1630.798904][T19128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.805436][T19128] [ 1630.805436][T19128] other info that might help us debug this: [ 1630.805436][T19128] [ 1630.815693][T19128] Chain exists of: [ 1630.815693][T19128] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 1630.815693][T19128] [ 1630.828537][T19128] Possible unsafe locking scenario: [ 1630.828537][T19128] [ 1630.836126][T19128] CPU0 CPU1 [ 1630.841567][T19128] ---- ---- [ 1630.846959][T19128] lock(uevent_sock_mutex); [ 1630.851607][T19128] lock(cpuhp_state-up); [ 1630.858492][T19128] lock(uevent_sock_mutex); [ 1630.865624][T19128] lock(fs_reclaim); [ 1630.869630][T19128] [ 1630.869630][T19128] *** DEADLOCK *** [ 1630.869630][T19128] [ 1630.877792][T19128] locks held by udevd/19128: 3, last CPU#0: [ 1630.883830][T19128] #0: ffff888027b89350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 1630.893503][T19128] #1: ffff8880266c7a60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 1630.904267][T19128] #2: ffffffff905f2d40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1630.915384][T19128] [ 1630.915384][T19128] stack backtrace: [ 1630.921298][T19128] CPU: 0 UID: 0 PID: 19128 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1630.930349][T19128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1630.940618][T19128] Call Trace: [ 1630.943949][T19128] [ 1630.946918][T19128] dump_stack_lvl+0xe8/0x150 [ 1630.951545][T19128] print_circular_bug+0x2e2/0x300 [ 1630.956605][T19128] check_noncircular+0x12f/0x150 [ 1630.961583][T19128] __lock_acquire+0x164c/0x2de0 [ 1630.966464][T19128] ? __x64_sys_close+0x7e/0x110 [ 1630.971622][T19128] lock_acquire+0x115/0x350 [ 1630.976160][T19128] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 1630.982188][T19128] ? __alloc_skb+0x27a/0x7a0 [ 1630.986824][T19128] fs_reclaim_acquire+0x71/0x100 [ 1630.991813][T19128] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 1630.997827][T19128] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 1631.003688][T19128] ? __alloc_skb+0x18d/0x7a0 [ 1631.008316][T19128] ? preempt_schedule_thunk+0x16/0x40 [ 1631.013803][T19128] ? __alloc_skb+0x27a/0x7a0 [ 1631.018417][T19128] ? __alloc_skb+0x18d/0x7a0 [ 1631.023144][T19128] __alloc_skb+0x27a/0x7a0 [ 1631.027601][T19128] alloc_uevent_skb+0x7d/0x230 [ 1631.032576][T19128] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1631.038515][T19128] kobject_uevent_env+0x566/0x9e0 [ 1631.043576][T19128] nbd_config_put+0x2c8/0x7e0 [ 1631.048300][T19128] ? __pfx_nbd_config_put+0x10/0x10 [ 1631.053620][T19128] ? do_raw_spin_unlock+0xf5/0x200 [ 1631.058775][T19128] nbd_release+0xfe/0x140 [ 1631.063229][T19128] ? __pfx_nbd_release+0x10/0x10 [ 1631.068205][T19128] bdev_release+0x571/0x690 [ 1631.072758][T19128] ? __pfx_blkdev_release+0x10/0x10 [ 1631.077996][T19128] blkdev_release+0x15/0x20 [ 1631.082536][T19128] __fput+0x418/0xa50 [ 1631.086556][T19128] fput_close_sync+0x11f/0x240 [ 1631.091401][T19128] ? __pfx_fput_close_sync+0x10/0x10 [ 1631.096722][T19128] __x64_sys_close+0x7e/0x110 [ 1631.101431][T19128] do_syscall_64+0x166/0x520 [ 1631.106048][T19128] ? trace_irq_disable+0x3b/0x140 [ 1631.111105][T19128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.117201][T19128] ? clear_bhb_loop+0x70/0xc0 [ 1631.121912][T19128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.127913][T19128] RIP: 0033:0x7f57342a7407 [ 1631.132360][T19128] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1631.152002][T19128] RSP: 002b:00007ffcf976d200 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1631.160465][T19128] RAX: ffffffffffffffda RBX: 00007f5734ab4880 RCX: 00007f57342a7407 [ 1631.168484][T19128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1631.176596][T19128] RBP: 00007f5734ab46e8 R08: 0000000000000000 R09: 0000000000000000 [ 1631.184625][T19128] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1631.192641][T19128] R13: 0000557dfe0f8190 R14: 0000000000000008 R15: 0000557dfe0ff830 [ 1631.200676][T19128] [ 1631.266026][T19190] netlink: 'syz.4.13100': attribute type 12 has an invalid length. [ 1631.279228][T19190] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 1631.946493][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -110