last executing test programs: 3.038591891s ago: executing program 4 (id=2238): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x40, 0x4) syz_emit_ethernet(0x70, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61b341af003a00fffe880000000000000000000000000101fc000000009f00000000000000000000016c010000000000000500070800000001000ec200000000005a341544b872763a3adb82f2dc46ca6b9ca3ff8ba64aecd7fb09a66da7912c5fde"], 0x0) r1 = socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r5, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r7}, 0x10) r8 = socket(0x10, 0x803, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x3c, 0x1, 0x40, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac07}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000600)=@ethtool_gstrings={0x1b, 0x3}}) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r10, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) 2.616188434s ago: executing program 4 (id=2242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x94}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}]}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f088a8233786dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000380)=[{0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x0, r3}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)=ANY=[@ANYRES32, @ANYBLOB="1b00000024"], 0x20) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1e}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.37706958s ago: executing program 0 (id=2243): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000004c0)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24000800) (rerun: 32) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022dbd7000ffdbdf250100000005000d000800000005000d00210000000008000700000000000000005a", @ANYRES32=r1, @ANYBLOB="05000d0010000000060006000400000005000d0009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x80) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390466170000fcffffff00000000", @ANYRES32=r10, @ANYBLOB="01980000000000002800128008000100677265001c00028008000600ac14140c050013000100000005000a"], 0x48}}, 0x0) (async) r12 = socket$igmp(0x2, 0x3, 0x2) (async) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r13) (async) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r12, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1=0xe00003e8}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) (async) getsockopt$sock_timeval(r7, 0x1, 0x15, 0x0, &(0x7f0000000080)) 2.02602318s ago: executing program 0 (id=2245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000a00)}, 0x5}], 0x3, 0x2142, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000000000ffffe00000010000000032000000e0000002000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000001d00000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c00000000000000680002006362632874776f6669736829000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 2.025508615s ago: executing program 0 (id=2246): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000b80)=""/252, &(0x7f0000000c80)=0xfc) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080), 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x310, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x2db, 0x142, 0x0, 0x1, [@typed={0x4, 0x115}, @generic="78062f2173eb12b0a3cebe061e353222ba734c3fddf3a65e25ad779d05196d0a5d1d2cf9e33b5c7149ac6b30b3be0d90832e84134ea76c7f2d19938ac6858c5ab068ec7cbdd1f400b2f284cae7e92422740cbb89b071f610d9e4247cc8f6750e9f8529fba6d9e053aa86c6a67e6d30ce78f1e5b34098a3d2d5c6f2eeca3d5d74fa5443c976b27cee37409aa623ac64", @nested={0x235, 0xed, 0x0, 0x1, [@typed={0x87, 0x12b, 0x0, 0x0, @binary="3fb37747115f621050adaace513f05b8fcbc80283731c9fa4a67e683a18d93ec9b1038a58508741bd7262f08ff7dd2b019c0012162527e5c0317c9a8b692d6924ef71bfa244890c91fed73b4c87f3faf6b62be2f8e8d606c007ee583a6f820a3d747f25a1badd44d43131dbf1d4047e1bf2ea242f8935ba5399aa2157fbcbee9d09c37"}, @generic="9d28942b58def7386011ca02e87eb8f1239ec1a0fb10fa709dfd9d0d555eb80d6135729407a067f27d1adf0fe01a0d6d0aa908429808ff5b4b6a5fae2d11d8766d407f8e82a3f8bdd16812237b9a9c985f6ac6f382d12cef22a966fd2e19b13e9627bb9544fa8286ca3fc3c1921472a247f3e102443b4165b112ee3098ecf0dc25a8256a3a39f14404", @generic="7362c410be439d5863e3af416797d5fba8d61e9bf92462157fd93614c9", @typed={0x8, 0x48, 0x0, 0x0, @uid=0xee01}, @generic="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"]}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x77c6}]}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x5, 0x1c, 0x0, 0x1, [@generic="b5"]}]}, @nested={0x4, 0x2}]}, 0x310}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newneigh={0x30, 0x1c, 0x605, 0x70bd26, 0x0, {0xa, 0x0, 0x0, 0x1, 0x2, 0xb2}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a80)={'vxcan1\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmmsg$inet(r1, &(0x7f0000000b40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000200)="e095f9f8a522fd665be1ebb4a8bca18f72bd911599ec51ca6f99d6b8c71d2feb4dfbedb0ae8ed355cba3593f80af1b637aae9ca576d676f45c4775494264e678ff2c27f911ad5a562ae05aa8c2807c81de90fd98d39ba9af933b042473385b5d3989bdbdf0cba4243957e6e0d4725613ffe40b8ecff04a3415a6f4404e9438f8b3d4930854d4aeddd6b722935984b99ddd6ec3fbb0a2efc3d26a35f9f592af89c74012bb45434692d88bf703710e07ed6b2737c0636a18c71774f49170c663dcb7eb40a6266ca2", 0xc7}, {&(0x7f0000000300)="bfc6e71411db1b788bba3e276b18504a4e74e3e1b6e9b92bb4b49b86e6900c0928bd02696d34d8025f3f40378a371482f263adafbb77bf431aa5f96d16780df3b3451043f7a06a7b33", 0x49}, {&(0x7f0000000380)="e6a5f2b4aa680578129c7d23b420e3318791118711d10236fbdeec3008f04858df783fe4686a3b5fe3a2af5cdda9e2fe8536d636b021e237e3c593266e5b8d210d55267642602513c4ae60245ec541c3bd2bcd378df1c1c63ae6fd8fb304fa53f59c192e47a977740c0ba8fe158e0d360d0baad2c6f29989c396a528c93d4a256e93bb8cfb8a3606df92db0fca384331ff83cc5b0132286598addf22f46bcc1ddb78b611434511b7a06345602dd156952f", 0xb1}, {&(0x7f0000000440)="707ceb038eb2", 0x6}, {&(0x7f0000000480)="cf6178558c4d700ff283c06f89a57a26196d0f843596ac0a34d24e1ab806ee3dad55542529527d2f84b1b1a2cde87b2735e5e853ad6ac04a7ddbeb33d894e8c1250d1f70b720", 0x46}, {&(0x7f0000000500)="269c29cc954949beb1a757776dbb95884660f9158e4a60253e423d28ba792f257a9e4a8cc71133d0a3e2800763985f321739ed17af8901c6aa832bb25621ed561490ffc35a8c1f147d8b876837122aea1cc7a3366cf239f7b1928d2cc5a4ef540ef0b288e2ea3f6292cda9c13f726dc75992d786b944a38c65842a69531f1c08567f02c2c2cc21dbeba57b98741535be0bb288be22d9a89dd3ece193bfd07f746b83c3d2369ddfe436714114d09cf118b868ca9f4751eefcc1a1", 0xba}, {&(0x7f00000005c0)="ab", 0x1}, {&(0x7f0000000600)="24fc418657a79aa40f552c43700468773d", 0x11}, {&(0x7f0000000640)="6975d7bb5dd3579fcca5ffc681d8e2f818aa82f19ce7feb44a81a092b89f0ef51f3b8ba0feb06a215f52bb443ec7ebc3d48fe892af39e500df2991ce38774545210388e51dbfa8c2bb2f786afd49b34042fefbab24d34932e236318ee7d2228f265173082e1a958955fc0de2d2b0ac5ac92ffb33c1fc39a60967fd9a0b31693f8e277cc664307a1de17a2f632f63215a21131c2939249eb3d676f18b0acf9fb8eada88ba7246e9a6a7dda9273d3587e396ed858bebbb009f0341ff403a4595e93127affcf8faa20fb6765ad2cf61e9e3809ee9619018afca4dc1413aa56ac061eaa1d9382b0d5b421746698dc473739e5ddffc32cead74", 0xf7}, {&(0x7f0000000740)="e048d4bba1695094f2c012a311b93ffa3a6f56cf395cc2a1b808bbe0a0b2a0ffcd655f2eb804ec8376a0cc159d10f78f9357321be46e22f19220cf59687192dc3ebfd2f08a8a09a4f060e83b875510d2ac523dc11dbf6c3b71986a525554ccf001c785b550a17df05450d14d26c76166e7e331b5bb9eb75c365c5bdb8555d4d2d8f816aa45941bef3c1aa3781c9c50c48d9ac4d8c7b2884cd8231edc9e35", 0x9e}], 0xa, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @multicast2}}}], 0x58}}], 0x1, 0x4008000) 1.895985325s ago: executing program 1 (id=2247): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x10, 0x20, 0x3, 0x8000, {{0x1a, 0x4, 0x3, 0x9, 0x68, 0x68, 0x0, 0xdc, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x49, [@local, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0x87, 0x3, 0x4, [{@broadcast, 0x8}, {@multicast2, 0xff}, {@empty, 0x1}, {@multicast2, 0xff4e}]}, @rr={0x7, 0x13, 0x64, [@dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @broadcast, @loopback]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x10) 1.812231903s ago: executing program 0 (id=2249): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x10a8, 0x30, 0x800, 0x0, 0x0, {}, [{0x1094, 0x1, [@m_tunnel_key={0x1090, 0x3, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x82c, 0x1, 0x1, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x1f92, 0x6, 0x3, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x10a8}, 0x1, 0x0, 0x0, 0x40040}, 0x4008014) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xe7ebfe6d06ed52a9, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xf) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r9, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x200448c0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000010101030000000000000000000000021c0019800833b32f9ed01dd930000200510200000800020000090000"], 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) splice(r11, 0x0, r2, 0x0, 0x40000002008d, 0x4) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000340)=0xfc) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[], 0x32600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000202000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) 1.801249059s ago: executing program 2 (id=2250): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000080)=[0x0, 0x8]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x40007, 0x3, 0x4100000000000000, 0xfffffffffffffffd, 0xfdb1, 0x4000000000000, 0x7, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000e40000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x407}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffe}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fa"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 1.775086589s ago: executing program 1 (id=2251): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001380)=ANY=[@ANYBLOB="20ef2d85ee735a92e48d0803bdeb406400003d435192ef4eb629da81c121247e41b1221039631f1b63a53bb48c0b3e5f147090f60f7fab6cce0b3ab929780f0af88350042fa46c1db7eb10bf04432efc37ca6e20d990c88c254b62f510680c0b50b5d305336e2fcb80eb05c02ca2e1e018c2ef4e98759568132eed0a78ac5304d88367cb"], 0x20}}, 0x80c0) r1 = socket$kcm(0x2, 0x2, 0x84) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001c00)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001600)=@newchain={0x5bc, 0x64, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {0xd, 0x4}, {0x10, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xe}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4cc, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x7}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_POLICE={0x498, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffffd, 0x7, 0xc68, 0x8, 0x2, 0x200, 0x8, 0x2, 0xda5, 0xbb5b, 0x2, 0x4, 0x3, 0x5, 0x0, 0x9, 0x1fd02f36, 0x6, 0x800, 0x32, 0x0, 0x0, 0xb8, 0x80, 0xffffffd4, 0x0, 0xb8, 0x1ff, 0x3, 0xfff, 0x6, 0xa, 0x48, 0x0, 0x240c, 0x8, 0x0, 0x81, 0x6, 0xc34, 0x2, 0x9257, 0x8, 0xef7, 0x100, 0x7, 0x9, 0x1, 0x6, 0x7, 0x101, 0xd2a, 0x0, 0x6, 0x80, 0x6, 0x6, 0xfff, 0x7ff, 0x8, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1, 0xfff, 0x10, 0x3, 0x7, 0x7fff, 0x6, 0xa68, 0xa, 0x9, 0x3, 0x3, 0x2, 0x3, 0x1, 0x1, 0x7, 0x6, 0xf6b, 0x7, 0x7, 0x7, 0x2, 0xb6, 0xeb, 0xc, 0xd, 0x0, 0x4, 0x955, 0x5, 0xef0, 0x9, 0x74170585, 0x7, 0x80000001, 0xffff0001, 0x5, 0x0, 0x4a42, 0x1, 0x7f, 0xe4000000, 0x5, 0x7a0000, 0x9, 0x6, 0x4, 0x6, 0x7fffffff, 0x2, 0x1, 0x9, 0x7e000, 0x23, 0x8, 0x3, 0x2, 0xb, 0x8, 0x5, 0xf, 0x9, 0x7, 0xe, 0x8, 0x7, 0x8, 0x1, 0x7, 0x9a6, 0x48ae2d2a, 0x8000, 0x8, 0x2, 0x1, 0x7fff, 0x9, 0x6, 0x80000001, 0x1c74e77c, 0x10000, 0x5, 0x9, 0x7fffffff, 0x9e9d784, 0xfffffff0, 0x4, 0x8, 0x6, 0xfff, 0x2, 0x10, 0x101, 0x8001, 0x1, 0x5, 0x9, 0x2, 0x4, 0x1, 0xfffff47a, 0x5, 0xfffffff7, 0x0, 0xbe, 0xa8, 0x6, 0x8, 0xc, 0x58d, 0x5a, 0x0, 0x7, 0x1, 0x3, 0x0, 0x3, 0x7f, 0x3, 0x8, 0x2, 0x8, 0xdb4, 0x7f, 0x3, 0x7, 0x9, 0xd5, 0x3, 0x9, 0x6, 0x1, 0x73e, 0x6, 0x7, 0x6, 0x7, 0x25, 0x8, 0x7, 0x60, 0x2, 0x3244, 0xd948, 0x2a6, 0x1, 0x40, 0x1, 0x4, 0x71, 0x40, 0x3ea4, 0x8, 0x3, 0xa, 0x2, 0x5, 0x1, 0x5, 0xfffffffe, 0x5, 0xef1d, 0xffffffff, 0x7, 0xfee, 0x3, 0x3, 0x3, 0x3, 0x800, 0x8, 0x3, 0x6, 0x5, 0x3, 0x4, 0x6, 0x8, 0x7, 0x1, 0x1, 0x95e2, 0x6, 0x2, 0x0, 0x1, 0x5, 0x2, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x8, 0x7, 0x7, 0x6, {0xf, 0x2, 0xf001, 0x1, 0x0, 0x6}, {0x80, 0x3, 0x5, 0xa7, 0x6, 0xfffffffc}, 0x5, 0xffffffff, 0xa1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x1, 0x3e1f, 0x1, {0x2, 0x2, 0x5, 0x0, 0xffff}, {0xa9, 0x0, 0x7, 0x0, 0xff, 0xc9}, 0x4, 0x5483e2ab, 0x6}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0xfff3}}, @TCA_FLOW_MASK={0x8, 0x6, 0x401}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b9aa}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_basic={{0xa}, {0x88, 0x2, [@TCA_BASIC_POLICE={0x1c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x280}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff6}]}, @TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x2}, {0xfb96, 0x7, 0x0, "ac9d0620621575"}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x9}, {0x100, 0x3, 0x2, "4e6ccb"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x5}}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0xe08abce79c1c93b}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$cgroup_int(r7, &(0x7f0000000140), 0xfffffdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8}, 0x94) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000011c0), r6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x68, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6bd}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40880) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0xc, 0x400, 0x5, 0x25c, 0x20820, r6, 0x3, '\x00', r8, r7, 0x0, 0x2, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0xd, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba}, [@jmp={0x5, 0x1, 0x0, 0x7, 0x6, 0x30, 0xfffffffffffffffc}, @exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, &(0x7f0000001540)='GPL\x00', 0xffff, 0x0, &(0x7f0000001580), 0x40f00, 0x2, '\x00', r8, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c40)={0x2, 0x8, 0xff, 0x662a2b69}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001d00)=[r7, r3, r6, r7, r10, r6], &(0x7f0000001d40)=[{0x5, 0x3, 0xd, 0xc}], 0x10, 0x24c6}, 0x94) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000015c0)="0d113311", 0x4}], 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}}}], 0x20}, 0x0) 1.721525843s ago: executing program 4 (id=2252): syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0xffffffff) syz_emit_ethernet(0x7c, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x11, 0x4, 0x2, 0x5, 0x6e, 0x66, 0x0, 0x46, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x3, "ce"}, @rr={0x7, 0x2b, 0x22, [@remote, @rand_addr=0x64010100, @local, @private=0xa010100, @multicast1, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1]}, @noop]}}, @payload_named={{{{{0x2a, 0x0, 0x0, 0x1, 0x1, 0xa, 0x2, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x2, 0x7, 0x9, 0x4, 0x4e23, 0x4e22}, 0x2, 0x2}, 0x1, 0x2}}, [0x0, 0x0]}}}}}, 0x0) unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x8d, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @local, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@x25={0x805, {0x3, 0x90, 0x27, "e4c4a703125cf8494f3c56e7897b0395822b3c0b7d1d5947f959e5f08bc14c8745442a1568e7937b0e064677892a52615b2e3f97a286c427c11a1d1faa3afd2b0e223a464ce9bf3bc7915d385807a135be95e60ad9f232d955ed397abaa91f8210fde945670fe8259076b90552e16c4c07088c3c9e68e760"}}}}, &(0x7f0000000300)={0x1, 0x3, [0x8b2, 0x95, 0x4c3, 0xe07]}) r1 = socket(0x2b, 0x1, 0x1) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x198}}, 0x0) 1.627283673s ago: executing program 4 (id=2253): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000007c0)=0x4, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000440)='&/:,\x00', 0x80, &(0x7f0000000480)={@_ha_fsid={[0xfff, 0xcb]}, {0x7, 0x1, 0x2, 0x800}}, 0x80000001, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0xff}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f00000006c0)=0xe8) r11 = getgid() r12 = gettid() syz_open_procfs$namespace(r12, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xfffffffffffffdb3) sendmsg$netlink(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="680000002e00010025bd7000000000000800ee00", @ANYRES32=r15, @ANYBLOB="9c9b110daecabf3f377f8055bef67476d1722876284de2eb986e5ec2f08d640cebf882fdfe6db98f7d71e4414ac62f03aaedbd651f16f718e7b8cb37af34f770dbca5fa510dceddd24a1dfe1f48303006b5d3c6eb948e38b3ca74b744434b85d7331e743a691daffb71ea2dae304bbbc6fe95cb8a30be8a14d21408d1308b58170bcac58726f497681287c73a3badc7198d34902330046f5c800d515ab3faf3f1017e328fdc93ed1462e21c1cd4959f0f0beec50b9020712aa508d4f518c7bb2057f2e9f0a77fab03a3d8ac20377e8791bbf00f5659e56f94990057e6c0991667c4f40"], 0x68}], 0x1}, 0x0) r17 = socket$unix(0x1, 0x3, 0x0) connect$unix(r17, 0x0, 0x0) r18 = getpid() r19 = getuid() getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="394e8037857d431d200a0d987efe45365acae06b0560703cba41e9e6eb3236d39f7fbd21a0c57871f06ee8a0cc", 0x2d}, {&(0x7f00000002c0)="9bf90ffad6256eb22875ac98fdd367bab7665b5e1f358ddf60f7d7f59ffb121076b7eaa8cccf", 0x26}, {0x0}, {&(0x7f0000000580)="3fe1ef4299cd0644bda3015117426307d67e2bcf252668d5a45524fee5fc5970cc15df1f03b1a5ffd02b3213bfa04d97a04f2c5620a1083230281674dd0231588284e73fdccb6baad2f926eabad77375c224b6837eabf836bdb1421b0b175e05f45f1eed89747e50efccab259c5f07db6e06e0e38c13ff26dcfca78ddd198e3e0fc13dae49098aff055cb3b1f36bfa04643a6d30e3e29e51d072bc62ad1d94557f33b7fbb0788287a8", 0xa9}, {&(0x7f0000000640)="c9e07db553caa1f43222d27df491d5fc6cdf3065e453e685ce34099e9bad06b9d20f0decf840b8efec566b92d6afa92110cceab21fbf0a211a9ab264e99d35597462d4aab357c8206714b6c709d8f91af947842dd27f8b1e1d17d9f2b41e59", 0x5f}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r17, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r17, @ANYRES32, @ANYRES32=r17, @ANYRES32=r17, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r17, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r17, @ANYRES32, @ANYRES32=r17, @ANYRES32, @ANYBLOB, @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x8800}}], 0x1, 0x4) r22 = socket$inet_udp(0x2, 0x2, 0x0) r23 = getpid() socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(r4, &(0x7f0000001440)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001500)="a7a909fc5130b7448716658d1f495dc413634a9b545332dded5a96992b2cb02ebed1efb0069b0fd09387af16c1e824dbc6e24b6f7c9c2c5d6ee292a8413a1eed162adc6e27022cf1bde15a1ed91466d2fc2c9bde4026383ff208806872224430e0cf45d7eb2c9b1621091a2df32e133b02d3108c63f5e753674c34734306842cfc19cd98bcfdf369c0907c30d3c2318b05c678b3f2f02e6f4b399190e545fc0c4969d45d9a1cc252a48893fc56806df8750f1b7020509ee87837efffb0d04b13609f86e4dd76daa3757eb30943d30625589bde3544f2df5d83282cc6c89d9149", 0xe0}, {&(0x7f0000001600)="f5504b35dc22be4fa2dfe1a7a5d469f0180b847cca1cc96d371c5df0bf2b76bfc7237cb760c558053e473246a0556a1162d96e3e5c83525a45c215f7f9a11500ae0c2426ebde538504106a69423d8667962f75e63228e191c5d151303675b0a9a14cca6a9e216a3fd9192d48e0bab19502524697e32d15662d786685a452f10aeb7de4fb9d819d4ebff55a67d553aaec8adf3c72f9f29945a59c8ed87db2ab73f81de50ee106", 0xa6}], 0x2, &(0x7f0000001700)=ANY=[@ANYBLOB="13000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRESDEC=r14, @ANYRES32=r20, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r22, @ANYRES64=r21, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r23, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x1}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r19, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r22, @ANYRES32, @ANYRES32=r2, @ANYBLOB="00001c0000000000000001000000020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x8000}}, {{&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000d80)="bff450c9f46b7b023bb4cb7e3cc38f971555228f5e4e5513992525524cc0a2191f5970803dd7f19629edc100cec8b709e09f4a32d240c0d009c1ce83", 0x3c}, {&(0x7f0000000dc0)="9ce39d2fd49140a816fd126ddda1ea6f9592bfca4ef643cc3f98be336cc3f557e2475d3122873381b9ef14cf079b9041673f30", 0x33}, {&(0x7f0000000e80)="bad8b61d77c1f7b6b8a214570d2ee2674120c3eb7d579d1f4100fd10f37ff50ff01d33e73e63c68a002b306d2ce9263679df2fc1fc4fd6b853f6a0dc7c56eb9efe524ea922704a9a58750b223deddb3c9153605cd356dfbabca2f76bab814cd01ae890ce84cff288a34b17ac38bf5139c9093aece150182b6e3db3c0727af1e3739c6e876a4b356290b85f80857884c581cf3a0ad9faf721cd1592e35fc56830aa5830be9dd9c53ba5a519ccd0a0969adbf3bec72e213e7f9cd7111d1127829945b470", 0xc3}, {&(0x7f0000000f80)="9b0f4659f61410205f761f4c5248657303f82c28d99fecc05bc51c39cd58939670011099bd3ab440d796cdd282972d9dad", 0x31}, {&(0x7f0000000fc0)="9567a6deac8019540fbddbf131156984ad87327fdc8315d0e070167cc75f641721abde08332598cabe5b2098d213f0cd1be0409156222ddea4294186f24e857d3f5478c18388f879b00d960b28a897a7c9347d6a4d750d55be482826b0ede1b55b", 0x61}, {&(0x7f0000001040)="39604a1128975e01f99cfb5722e8c556cf11fe4fcc4bb20ee4f172c524a6cb4fead187f75882cbde8ea69a1d005b4ac542554520c91d0960c4aad8d443e734834b0b358022b003f052fed8a18a0a95d26ab3bc4fd8b24144269f06ac70b000607718c7ae6daa19a14cb1464b288d8920bcd49054a144c1d5b9810537135b832487ee38503165c3a7dbe8c868e8ceefb5b5c6411e74822411d33491a8af125c439f25ece16ca8bd80ea6e36f481eed7261b8472af7efc7edbc0f9cd72654dd164511d43e6d9a13f9a17379201fabfdab39a", 0xd1}, {&(0x7f0000001140)="c8d0c8fd3abc838660dbab8e879aef6c76635dae4ae7a567c49c859a49b709b269c4dd9ea6b8eafee6fa061d2e074ec372350a20dc6990f60c68cfa3397b810dfda5eefc213a9cf9681567ba66c02e32360bae7999e41da232508ff18663b1b6b954d1a296e29d3af97cb2366441a793caec8d54fb1c20e4f681d410c0dd5e96ddf607e2ab0ea1cf0c358ce1a2859c4d1d5d8134cccaeb1d58a970529a4022019b4ffb31ccbaeffa0c9b087a032f71", 0xaf}, {&(0x7f0000001200)="8ff7374a3965b898d408ea08", 0xc}], 0x8, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r16, @ANYBLOB="0000000018000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r23, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x42}}], 0x3, 0x0) connect$unix(r4, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'batadv_slave_0\x00', @link_local}) 1.547291855s ago: executing program 3 (id=2254): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="331e49166f3564076b19e29a2c0f3883cdd7b0d885687107136948a2c106d1736edbc8a55b14f377df5fc5", @ANYRESOCT=r0, @ANYBLOB="64fcf7954965a8674847ac15a337e7b0706af5196b519ba8c65703a568f521baf950b45e997c076d38aac4d3d9660cf6c716485c11ef9706e85ad4565e399dddc590f712ba15acc70bd734945727707c710e89e2b790723d5d5a9d1362436db032bec140db3c8a894fffa4bde71f7fac7ff67b0fe50ff71eb6aabe10da93f55d6c01aa390bf0717e8b4ddbb821bfc70e13134bca", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x0, 0x8e}, 0x28) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f00000000c0)={0x2, 0x100000001, 0x3, 0x3, 0x0, [0x92a6, 0xc, 0x8401c000, 0x2]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0xd81b, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000280)=0xfffffffffffffefd) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x23, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xa, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r10, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x23, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @multicast2, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x20000000) write$tun(r4, &(0x7f00000001c0)=ANY=[], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.425044259s ago: executing program 2 (id=2255): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) recvfrom$unix(r0, &(0x7f0000000100)=""/239, 0xef, 0x42, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.417498509s ago: executing program 4 (id=2256): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socketpair(0x25, 0x7899bbb01cc2aa14, 0xffff, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) read$alg(r5, &(0x7f0000000300)=""/74, 0x4a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000002900)=r8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000040000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c009900410000005700000008002600fd1600000800270003"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 1.377551534s ago: executing program 3 (id=2257): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d16080600000000000000f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.294009894s ago: executing program 3 (id=2258): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)="06", 0x40000}], 0x2}}], 0x1, 0x890) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000440), &(0x7f0000000480)=@udp=r5}, 0x20) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 1.168352195s ago: executing program 2 (id=2259): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000040801010000008a92fd637c9a1ea5cfc72e56b28f7ad100000000000a0000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) r2 = socket(0x2, 0x80805, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)={0x168, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2877}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x95}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf37}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x11, 0x3, "b4d3ebe789fec81a7421304679"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000002c0)={0x1, [0x0]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000002c0)={0x1, [0x0]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) (async) syz_genetlink_get_family_id$nl802154(0x0, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) (async) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7004ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7004ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r9) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r9) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x30, r10, 0x303, 0x0, 0x0, {0x13}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r9], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r11) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x80000000}, 0x1, 0x5, 0x9, 0xff, 0x12, 'syz1\x00', "83536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d3", "5d606f739128a0826de95fedb865085504ce24b573cf03e6bb5bcc31c9eff265", [{0x800, 0x7, {0x0, 0x8}}, {0x1, 0xd, {0x0, 0x2}}, {0x74, 0x4, {0x2, 0x10001}}, {0x20, 0x8000, {0x0, 0x4}}, {0x64a, 0x8, {0x2, 0x2}}, {0x9, 0x9, {0x2, 0xf2a8}}, {0x8000, 0x80, {0x2, 0x4c}}, {0x3, 0xe, {0x0, 0x8000}}, {0x7, 0x2, {0x2, 0x9}}, {0x4, 0x1, {0x3, 0x2}}, {0x38, 0x3, {0x0, 0x4}}, {0xd, 0x6, {0x1, 0x2a}}, {0x0, 0x2, {0x0, 0xb}}, {0x9, 0x50d, {0x0, 0x7}}, {0x8, 0x9, {0x2, 0x9}}, {0x9230, 0x3, {0x3, 0xe000000}}, {0x9, 0xa2bc, {0x3, 0x3}}, {0x1, 0x2, {0x1, 0x85}}, {0x4e, 0x2, {0x3, 0x6}}, {0x2, 0xf, {0x0, 0x5}}, {0x1, 0x4, {0x2}}, {0x6, 0x0, {0x2, 0x5}}, {0x5, 0x7, {0x2, 0x3}}, {0x7, 0x9, {0x2, 0x6}}, {0x2, 0x9, {0x0, 0x10000}}, {0x7, 0x5, {0x2, 0x1}}, {0xfa4, 0x3d, {0x0, 0xfad}}, {0x2, 0xb, {0x0, 0x7}}, {0x6, 0x9, {0x2, 0x9}}, {0x7, 0xff, {0x3, 0x7}}, {0x4, 0x7, {0x1, 0x81}}, {0x7, 0x40, {0x1}}, {0x4, 0x800, {0x2, 0x8}}, {0x8001, 0xe, {0x0, 0xffff}}, {0x6d, 0x5, {0x3, 0x3}}, {0x5bd5, 0x2, {0x1, 0x6}}, {0x1, 0xa0e8, {0x2, 0x2}}, {0x5, 0x7, {0x0, 0x524}}, {0x2, 0x1b3, {0x3}}, {0xe6cb, 0x7, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x80000000}, 0x1, 0x5, 0x9, 0xff, 0x12, 'syz1\x00', "83536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d3", "5d606f739128a0826de95fedb865085504ce24b573cf03e6bb5bcc31c9eff265", [{0x800, 0x7, {0x0, 0x8}}, {0x1, 0xd, {0x0, 0x2}}, {0x74, 0x4, {0x2, 0x10001}}, {0x20, 0x8000, {0x0, 0x4}}, {0x64a, 0x8, {0x2, 0x2}}, {0x9, 0x9, {0x2, 0xf2a8}}, {0x8000, 0x80, {0x2, 0x4c}}, {0x3, 0xe, {0x0, 0x8000}}, {0x7, 0x2, {0x2, 0x9}}, {0x4, 0x1, {0x3, 0x2}}, {0x38, 0x3, {0x0, 0x4}}, {0xd, 0x6, {0x1, 0x2a}}, {0x0, 0x2, {0x0, 0xb}}, {0x9, 0x50d, {0x0, 0x7}}, {0x8, 0x9, {0x2, 0x9}}, {0x9230, 0x3, {0x3, 0xe000000}}, {0x9, 0xa2bc, {0x3, 0x3}}, {0x1, 0x2, {0x1, 0x85}}, {0x4e, 0x2, {0x3, 0x6}}, {0x2, 0xf, {0x0, 0x5}}, {0x1, 0x4, {0x2}}, {0x6, 0x0, {0x2, 0x5}}, {0x5, 0x7, {0x2, 0x3}}, {0x7, 0x9, {0x2, 0x6}}, {0x2, 0x9, {0x0, 0x10000}}, {0x7, 0x5, {0x2, 0x1}}, {0xfa4, 0x3d, {0x0, 0xfad}}, {0x2, 0xb, {0x0, 0x7}}, {0x6, 0x9, {0x2, 0x9}}, {0x7, 0xff, {0x3, 0x7}}, {0x4, 0x7, {0x1, 0x81}}, {0x7, 0x40, {0x1}}, {0x4, 0x800, {0x2, 0x8}}, {0x8001, 0xe, {0x0, 0xffff}}, {0x6d, 0x5, {0x3, 0x3}}, {0x5bd5, 0x2, {0x1, 0x6}}, {0x1, 0xa0e8, {0x2, 0x2}}, {0x5, 0x7, {0x0, 0x524}}, {0x2, 0x1b3, {0x3}}, {0xe6cb, 0x7, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020003000000080004"], 0x38}}, 0x0) 1.100073891s ago: executing program 3 (id=2260): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000300)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003090000000001010101", 0x2e}, {&(0x7f0000000400)="519d87615ef485a2ebfb0b2c59cf31cadfb0b5b6b3e3d8285a52bfa01e99f916906f8d943ee8d61bcc36e7e92aad98ba81bda4b77bc170235c7ee6d00f155b5fdc89c2fb01ddd2e60a07a698517b4ada563d77528558cda3167069bcf7b1c6de705513abd184707cdd3957527b23697ce4d59116dba4b20bbae19167dd03189b9d2eb5c4631c45433c5c71809a63253b8e0ec5ddb6a3a3682a515991022c2f60542ac83bbd9618e38ae2d89e99c9394466ee64a4d84144c39d2578785466c1372cee936ac55e6f61514b4dea62110ed840d3", 0xd2}], 0x2, 0x0, 0x6) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000014000b0000400600000a0000010a00000200500050000000020000ffff601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 1.052290608s ago: executing program 2 (id=2261): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) unshare(0xc040480) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x14, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x180000}}, @alu={0x7, 0x0, 0xc, 0x7, 0xb, 0x20}], &(0x7f0000000280)='syzkaller\x00', 0xd, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001300)={0x4, 0x200, 0x101}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001340)=[0x1], &(0x7f0000001380)=[{0x3, 0x2, 0xa, 0x5}, {0x0, 0x5, 0xc, 0x9}, {0x0, 0x1, 0xc}, {0x0, 0x2, 0xc, 0x5}, {0x0, 0x2, 0x3, 0xa}], 0x10, 0x8}, 0x94) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001500)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3a1b5}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_MTU={0x8, 0x4, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) (async) unshare(0xc040480) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x14, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x180000}}, @alu={0x7, 0x0, 0xc, 0x7, 0xb, 0x20}], &(0x7f0000000280)='syzkaller\x00', 0xd, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001300)={0x4, 0x200, 0x101}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001340)=[0x1], &(0x7f0000001380)=[{0x3, 0x2, 0xa, 0x5}, {0x0, 0x5, 0xc, 0x9}, {0x0, 0x1, 0xc}, {0x0, 0x2, 0xc, 0x5}, {0x0, 0x2, 0x3, 0xa}], 0x10, 0x8}, 0x94) (async) pipe(&(0x7f00000014c0)) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001500)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3a1b5}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_MTU={0x8, 0x4, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) (async) 905.049622ms ago: executing program 3 (id=2262): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7ff}]}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$MRT(r5, 0x0, 0xce, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000001580)={'erspan0\x00', r4, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x15}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x851}, 0x4040080) socket(0x2b, 0x1, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050028bd7000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800058003000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000080004000010000008000500", @ANYRES32=r13, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="935c5794dea7c41ae9f4924ca987e44bce924a5ed1531fdbcbe1a80279cbeac1966db99bacdbbdfe4a3e2698989f6f6caaf0ee4129f78081b244bc996d4aabcf8a876da1b3c873820e648a2e2c1bffe179a517eea3a207f87a37342ec3e804bcf0cc09883fca90b40addd56e56da9785e5f55150a6c1b7e011bdd19aab87bffdb24f4f765a5226feac1f63daaffc17950018fb0bdfa6e2074e064fb4b126d19df5f74c3cb022678274cba03dd2d6730638cc4fe8c6522ee23d7f"], 0x38}, 0x1, 0x0, 0x0, 0x2004d918}, 0x0) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r14, &(0x7f00000000c0), 0x12) close(r14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="4005006415760200000051f71dcdda0c3ca04000000000140012800b"], 0x34}, 0x1, 0x0, 0x0, 0x24000804}, 0x2004c0c0) 853.672202ms ago: executing program 0 (id=2263): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x28}}, 0x4000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080fffbff00000000010000001c00048005000300010000000500030000000000050003008000000008000100030000000800020002000000"], 0x40}}, 0x4080) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x28}}, 0x4000) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080fffbff00000000010000001c00048005000300010000000500030000000000050003008000000008000100030000000800020002000000"], 0x40}}, 0x4080) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async) 813.940053ms ago: executing program 1 (id=2264): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000ffd0000000000001030000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb019, &(0x7f0000000140)=""/234}, 0x78) 612.582811ms ago: executing program 0 (id=2265): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001100)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYBLOB="e005d830911775627dec7c4bdfaa77ccbfb158e82bc178c36b9df899682b2fa18cbbcec1c23840e30cbd6cc7bb7db0bb269199e8dd0553db3534fcd6350ac98bac3eadb6881a939f4d706b4d81bfed30c5e954337df35eae507237185fe469c978783678b0acd6f68def964863e23307bfd1c3e24b96e50d00380945c8f3b5cc82d84b71f28a5fa0b9685f4632e267f5e89c4a9dcdb6ec852d11abcb2bd12dd96a5b41a2e4b1399981c875bcd4e97d09188848d9be", @ANYRESHEX=r0, @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x44084}, 0x0) (async) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000100000000010000003000000101000008dbb8d6125ae15afd6b54affbba6c7d18e9bffb4b0d5efaf434747b48a7a44b699cc1b9183c33dbf451ea50f024bd7189a82c730ff1110f717fe22af686421bac2fb55b2fe8d5730044e122854ac4b291beeb447", @ANYRES32=r3, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000500"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/135}, 0x2042) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000000fc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)}, {&(0x7f0000000040)=@in6={0xa, 0x4e20, 0xff, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000a00)="d50cc045953ef4d55fd05d5f64b876", 0xf}, {&(0x7f0000000e80)="cedb713aa65ce185c1c54ac3da76df20ec791f92ed98d43c80fc234a4ca142dba676796aea4a35600580b3a7b8d42ba2a8fd0a8107e7fde98706e44778bd3f6052a4dc5cbbf82fe9468b9ab3363770fc248495c0d107a985f8f81a4ee52a5524693b919c63891ebb5718e8a810abbc7014aedb4a857c4edf251709a43423866e981d747fc52a1c76e6500979552eeebaa4b9367494347d50704a0ce8827d723594e097a5c59ad1edcdfa1765c8223a447a1e7d7a6e762e6bb9bdd371e37f617669b6e546523b82a49e71aa6ea100b45b702693ad07834fb2e19f0f1ef05f67396f406c26deda732a1c8afe7c1ae2e22430ca48b6712d", 0xf6}], 0x2}], 0x2, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000d40)={&(0x7f0000000540)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000580)="8898ff903192db87c17e6cd263bc8d73cd5a9dc234cda4b651b8ccf3621420b4340a5db630309bdb3aa4f55cc58862dd6505fb10266d75eaa262b1baf048c0618f27602bc5484a8b06ab60e42238c0c21340b967f00ee278d4ca1841af922650dabe81146c4f07695601f962d436a53ac8eead2b27b2dbf12a29d8cd987110584c043556bbf067582c4efd01103badc3d09e07da85cd422f1588b04f5c35b919a8bc3ed8cdfa4c3b2c73a207ab46299f33d26bd886e4d9a607553982d0b5fe2d42bfa3a1be6260b928b65c9ab617f97f737073ca1a45ed2aa45f284523fc300532d0d0b84670449f58169c", 0xeb}, {&(0x7f0000000680)="fe93b06e947074f15d3bf3ef7c47ef941d1bd041dea7c3e680a9f44855d0d15ee63a6cae86c520b2e5ae3acb4d68f64efd564429012ba782bf725c2c9b782b977c97b3cf1dbfe89985c4083c1db48a6179c65b6a9dea3a6b5b469aeef6b918ed8d94d9732d4ac8de2d27423511726612fc68851e6f", 0x75}, {&(0x7f0000000700)="e7742da2d5f11abd1ab5d20c86fcc4fb6c5ece0b55ded5d652b020628845b79e481a0532de1b5c6eb593bba99195bb878af5a120e432ac12e74c2c0d2c41c2ad75edad8dd144591a0a175b180b5a6d581f821c36ee7e27467a090f5602213bce2a8a48f317b0f4e895019707f56f2a32b92469f9f7fdde9efcf6d95e26b02a4da3f2c4aac6e5e55c2531ede9462e33f1381d7d44e5863fd644d137d95f8651d8a75adebd0df2e604357df0fe8050d34578c0e784466374fc", 0xb8}, {&(0x7f00000007c0)="519bd6c9f61154fa04b4789780097234c476", 0x12}, {&(0x7f0000000800)="c10e4856f91a5bb328a25fb3980289aa95941f9b44ba47ce119a9c790ad70d7c4a71f9adfcf61cc4d9152dd9045edca466efa5ae07742ff485c9c223e1a3795f6e392cfa9638053a724fbf30c2b72d5fd7a603c4671b6638b3b7b51b72afb22d89ea7cb6edcf641cd044bb1cd456dd051390a10205076a6dd4fa8ce5751d4fa4264ab8c5cf80d67f6be5d6dc2d77aa75c175831599c2b5cc8042f7bd822ad317bf54b420c1af210441e106cc5eb060928be57366fa07398c61cc94e039ac", 0xbe}, {&(0x7f00000008c0)="b87b74fa231a9f75cded2bc11328802c65911f4b91cd687578a4a3b1e56a2a7fafb0173fdea7e432783c939f3eb234ffa177441ffc7b6e7b85bb851cb51bb620b6b3234ad874c7853c42057dbc4c3e5d1a24e4aa588f5947d810f3230df4e6e688839ce2344e64e9e1dc7a20cebd8e263fb94f7dcd5502fe45c3b39e25", 0x7d}, {&(0x7f0000000940)="a0baf217fdc22c4bcaf3c44e882538d2cb65c772c1cf81d1251edcefaa50b224e0e22079f17ce0fe0f215305ad1a0e7323d9727005bdf1b1aab8e8669d350b2d55c6b2756c1966d55a19fb9130d5361853ed", 0x52}, {&(0x7f0000000b00)="3df1343ef25cd9f17316d39081d9f36f99077ca0a4800239c91b31c486923c1e1ed798fd8a98611938ea882d055899a71a21d88ddac121fb5af35b2a454cb9533d25b6d1e6f9862f6c4802499b809e72d7477185cfa6c4edb394b5c7a3c7c734c73de6c9803203ca716b59699a6f42fd9a776455e4e2364703bea8e5607a092f359af873258933b1ad855cda5e0a6aea2ed42b7eb2707a74e69b41c445918fc83884e1d9e05ccbf414364f0ec3ffb3f2c9674e11965f8a681b23164da56f6bae7dcc9f808e69a04847e7461a215fe2cd75f72330d9b6df7855e546447b27dac0c08d7a9b892c2a132a", 0xe9}, {&(0x7f0000000c00)="d0d5698dca9607de83bd4742419bfad204cd26a5619f30987dfa9f0b904370454d84c6bc23b040f46eb41406514bbdd654e9f45aa74dbf32bc172fb5675206ae7b7462a03bee1b53195fee3f1f4b7b29300a5f0314ef1b64734fde70a0803d14f014cc90d2a90b8cad147130a4", 0x6d}], 0x9}, 0x10) (async) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) (async) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x14, &(0x7f0000000100), 0x120) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r10, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r10}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x20, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x80}, @exit, @ldst={0x1, 0x0, 0x4, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r9, 0x29, 0x15, &(0x7f00000000c0), 0xb9) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) socket(0x10, 0x3, 0x0) 582.919156ms ago: executing program 3 (id=2266): r0 = socket$inet6(0xa, 0x80802, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x40, @remote, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000004d40)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}], 0x28}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, 0x0}}], 0x1, 0x401c040) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/70, 0x46}], 0x2, 0x4, 0xfffffffe) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) (async) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0, 0x30}, {&(0x7f0000000180)=""/111, 0x6f}], 0x2, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723020001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x0, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xf, 0x8}, {0xfff3, 0x15}, {0xa, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYRESHEX=r6], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@mpls_newroute={0xcc, 0x18, 0x800, 0x70bd2b, 0x25dfdbff, {0x1c, 0x20, 0x0, 0x7, 0xff, 0x3, 0x0, 0x8, 0x1c00}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x80}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5}, @RTA_NEWDST={0x84, 0x13, [{0xeb9, 0x0, 0x1}, {0x40}, {0x6, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x2, 0x0, 0x1}, {0x5}, {0x1}, {0x2}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x81}, {0x1, 0x0, 0x1}, {0x2}, {0x9, 0x0, 0x1}, {}, {0x9}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x5}, {0x5, 0x0, 0x1}, {0x8}, {0x5b1}, {0x3}, {0x401}, {0xfcd48, 0x0, 0x1}, {0x633}, {0x1}, {0x3}, {0x6, 0x0, 0x1}, {0x3}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xb}, @RTA_MULTIPATH={0xc, 0x9, {0xffff, 0x6, 0x97, r7}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 570.839783ms ago: executing program 2 (id=2267): r0 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xc, 0xffff}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0xffffffed, 0x25dfdbfe, {0x2, 0x3f}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e24, 0x5, @mcast1={0xff, 0x7}, 0x20000000}}, {{0xa, 0x3, 0xfffffffe, @private1}}}, 0x108) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001000ffff28bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="ba0a0500230807000a0022002d37d25332d9000002e1de17310cf5cdeb8eb1add405921fe33d699261815d94310778fca9927374a075fda7d3b027285ce5879fbedce3340bd6d4e5cb988f269984"], 0x2c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) 452.892251ms ago: executing program 1 (id=2268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x2, 0x0, 0x1, 0x1}}, 0x80) (async) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) (async) recvmmsg$unix(r2, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xfd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000440)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, &(0x7f0000000a40)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc8}}, 0x0) 432.612347ms ago: executing program 4 (id=2269): unshare(0x2a060480) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="d38193bc1001000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x12, &(0x7f00000000c0)=""/18, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4f46, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000020201040000000000000001030297629e0cc49b912d915b24570009"], 0x14}, 0x1, 0x0, 0x0, 0x24040010}, 0x40108c4) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x200080, 0x0) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000300)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x2}, 0x6) write(r3, &(0x7f0000000000), 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x8, 0x167, 0x0, 0x0, @u32=0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020002000000000006001200040000000c000880050004000100000008000600f2000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x39, 0x1, 0x8, 0x0, {0x2}}, 0x14}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="029d14f4d32700f8ffffffffffffff1280090001007866726d004000"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 267.136883ms ago: executing program 1 (id=2270): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x6, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@deltaction={0x178, 0x31, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x664}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffeffff}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000000}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40055}, 0x4c050) 66.628416ms ago: executing program 2 (id=2271): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x200000, &(0x7f0000000040)={@_ha_fsid={[0x19d, 0x9]}, {0x8, 0x3ff, 0xff}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x7}, {[0x6, 0x2]}, 0x81, 0xda, &(0x7f0000000100)=""/218}) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000007840)={&(0x7f0000007680)=[&(0x7f0000000280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x100000001}}, &(0x7f00000002c0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000000340)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f00000003c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000000480)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f00000004c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x44b, 0x3}, {0x80000000, 0xfe07}, {0xe, 0x9}, {0xffffffffffffffff, 0x6}, {0x6, 0x401}, {0x0, 0x2}, {0x2, 0x80000001}, {0x1, 0x2}, {0xffffffffffffd9c8, 0x7acd}, {0x100, 0x7fffffff}, {0xf, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x5, 0x3}, {0x3, 0xfffffffffffff46b}, {0x1, 0x7}, {0x9, 0x2}, {0x9, 0x6}, {0x1, 0x800}, {0x9, 0xfffffffffffffffe}, {0x101, 0x100}, {0x5, 0xff}, {0xfffffffffffffffc, 0x7}, {0x81, 0x1b}, {0x100000000, 0x2000000000}, {0xba16, 0x6}, {0x6, 0x4}, {0x9, 0x6}, {0x6, 0x4}, {0xe, 0x6}, {0x5, 0x8}, {0x6, 0x81}, {0x8, 0xff}, {0x7, 0xda7}, {0x81, 0xfffffffffffffff9}, {0xfff, 0x6}, {0x8001, 0xffffffffffffffff}, {0x8, 0x1d6}, {0x38, 0x1000}, {0x3, 0x8}, {0x3, 0xb}, {0x2d38, 0x2}, {0xddb2, 0x3}, {0x8, 0x1}, {0x21, 0x5}, {0x3a, 0x7fffffffffffffff}, {0xfffffffffffffffa, 0x5}, {0x80000000, 0xc7}, {0xb}, {0x8, 0xea36}, {0x3, 0xc9}, {0x7}, {0xfffffffffffffffb, 0xb2}, {0x8, 0x9}, {0x2, 0x5}, {0x3, 0x7ff}, {0xe9b, 0x3}, {0x7754, 0x6fe}, {0x6, 0x3}, {0x5, 0x9}, {0x5, 0x5}, {0x9, 0x10001}, {0x10000, 0x12}, {0x2, 0xb}, {0x9dee, 0x1}, {0x348, 0x3}, {0x4, 0x5}, {0x4, 0x4}, {0x4, 0x2}, {0x401, 0x200}, {0x4, 0xa}, {0x5, 0xfffffffffffffffb}, {0x68}, {0xb, 0x8000000000000001}, {0x5, 0x1}, {0x3, 0x6}, {0xba, 0x5}, {0xffffffffffffff7f, 0x40}, {0x8}, {0x2, 0x8}, {0x3, 0xcc44}, {0x5, 0x2f67}, {0xb, 0x8}, {0x177, 0x7}, {0x2}, {0xd, 0x68d}, {0xffff, 0x80000000}, {0x8, 0x2}, {0x5, 0x9}, {0x0, 0x7fff}, {0x80000001, 0x8}, {0x7, 0x31cc}, {0x10001, 0x7}, {0x3cd, 0xffffffffc7175fbe}, {0x8, 0xf}, {0xcd, 0x5}, {0x400, 0x5}, {0x0, 0x9}, {0x9eb9}, {0x1000, 0xd134}, {0x2, 0x5}, {0x1, 0x81}, {0x8000000000000000, 0x9}, {0x1ff, 0xfffffffffffffffa}, {0x8, 0xfffffffffffffff9}, {0x5, 0x9}, {0x7, 0x1}, {0x8000, 0x80000000}, {0x0, 0x44c}, {0x5, 0x5}, {0x1, 0x7fffffff}, {0x20000000, 0x10000}, {0xffffffff, 0x1}, {0x5, 0x1}, {0x400, 0x5}, {0x80000000, 0x80}, {0x272}, {0x0, 0x7}, {0x995d, 0xca82}, {0xa768, 0x3}, {0x3}, {0x5e, 0xffff}, {0x89, 0x101}, {0xffffffff7fffffff, 0x8000000000000000}, {0x7, 0x1}, {0x5be, 0x2}, {0x2, 0xd}, {0x419, 0xe4f}, {0x4, 0x6}, {0x38e}, {0x3, 0xcfc8}, {0xfffffffffffffffa, 0x800}, {0x8000000000000000, 0x1ff}, {0x3, 0x100}, {0x2fb, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x789f, 0x6}, {0x2, 0x3000000000}, {0x7c49, 0x800}, {0x3, 0x6}, {0x6, 0x7c77}, {0xfffffffffffffffb, 0x2f}, {0x8000, 0x8000000000000000}, {0x1, 0x8}, {0x7fffffff, 0x631a941a}, {0x21fe}, {0xf83, 0xfff}, {0x4, 0xfffffffffffffff7}, {0x24420000000000, 0x7fffffffffffffff}, {0x1, 0x9}, {0x2, 0x8}, {0x3, 0x5}, {0x9, 0x9583}, {0x3, 0x8}, {0xa, 0x1}, {0x5, 0xf}, {0x1, 0x7}, {0xaf, 0xffffffff}, {0x0, 0x8}, {0x0, 0x1ff}, {0xfffffffffffffff4, 0x3ff}, {0x7fff, 0x7}, {0x1000, 0x3b91}, {0x8, 0x2}, {0x8, 0x1}, {0x5, 0x5}, {0x9, 0x169}, {0x7, 0x4019}, {0x4, 0x8000000000000001}, {0x101}, {0x7c3c, 0xb}, {0x5, 0x8}, {0x2c9d4eaa, 0x3ff}, {0xa8, 0x3}, {0x5, 0xfffffffffffffffd}, {0x0, 0x800}, {0x61, 0x80}, {0x8000000000000001, 0x8000000000000001}, {0x6, 0xffffffffffffffff}, {0x3, 0x8}, {0x8, 0x7f}, {0xfffffffffffffff9, 0x363e}, {0x3, 0x9}, {0x9, 0xff9}, {0x8, 0x5ca}, {0x7, 0x85cc}, {0x8, 0x1}, {0x80000000, 0xc}, {0x9, 0x7}, {0xff, 0x3}, {0x9, 0x9}, {0x1, 0x72}, {0x9, 0xc541}, {0x5, 0x22}, {0x4}, {0x1, 0x1}, {0x4}, {0x8001, 0x2}, {0x80000000, 0x2}, {0xffffffffffff6c44, 0xe6e8}, {0x100000001, 0xa547}, {0x3c58, 0x7}, {0xf8f, 0x3ff}, {0x4, 0x9}, {0x6, 0xb00}, {0x61b, 0x3}, {0x3, 0xeb73}, {0x4, 0x2}, {0x7, 0x9}, {0x5}, {0x0, 0x7}, {0x7f, 0x6}, {0x5c, 0x66a}, {0x5}, {0xf3cd, 0x9}, {0x5, 0x1}, {0x0, 0x1}, {0x7fff, 0x2}, {0x100000000, 0x7}, {0x7, 0x1000000}, {0x5, 0xfffffffffffffffd}, {0x9, 0x1a3}, {0xaff9, 0x1}, {0x5, 0x4}, {0x8001, 0x5}, {0x8000, 0x4}, {0x20, 0xc1}, {0xfffffffffffffffd, 0x227}, {0x614d, 0x5}, {0x101, 0x8000000000000000}, {0x581b, 0x8b8}, {0xf, 0x3}, {0x2}, {0x10001, 0x81}, {0x7ff, 0x2}, {0x7, 0xffff}, {0xfff, 0x414a}, {0x8, 0x3c2bfed5}, {0x9, 0x2}, {0x1, 0x3}, {0xffffffffffff2e6e, 0x5}, {0xae, 0x8000000000000000}, {0x7fff, 0x1}, {0x10001, 0x7}, {0x3, 0x6000000000}, {0x4, 0x100}, {0x4, 0x9}, {0xfffffffffffffffc}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x7}, {0x5, 0x401}, {0x70, 0x3ff}, {0x3, 0xffffffffffff66a5}]}, &(0x7f0000001500)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000001580)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f00000015c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000001600)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000001640)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f00000016c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x10000, 0xb7f}, {0x40, 0x6}, {0x7, 0xeb}, {0xff, 0x9}, {0x1, 0x7}, {0x9, 0x2}, {0x81, 0x4}, {0x9, 0x3}, {0xe, 0x7}, {0x97fb, 0x1}, {0x9, 0x80000001}, {0xb7, 0x7f}, {0x7fffffff, 0xa4c}, {0x5, 0xffff}, {0x0, 0x8}, {0x4, 0x4}, {0x9, 0x18f3}, {0x401, 0x6c9}, {0x4, 0xd013}, {0x9, 0x9}, {0x1, 0xfffffffffffff191}, {0xdb7ecc5, 0x6}, {0x1, 0x8000000000000001}, {0x1, 0xe5bd}, {0x4, 0x2}, {0xe, 0x7}, {0x7ff, 0x5}, {0x7fffffff, 0x81}, {0x4, 0x3}, {0x1, 0xc}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x7f}, {0x5, 0x48000000000000}, {0x4, 0xfffffffffffffffe}, {0x0, 0xc8b7}, {0x0, 0x8}, {0xfffffffffffffffa, 0x6}, {0x6, 0x6}, {0x2, 0x7}, {0x8, 0x9}, {0x4, 0xfffffffffffffff8}, {0x1, 0x4}, {0xfffffffffffffffc, 0x904}, {0x3, 0x40}, {0x9, 0x2}, {0xfffffffffffffffb, 0x8}, {0x7, 0x7fffffffffffffff}, {0x1, 0x80000000000}, {0xfffffffffffffe01, 0x7}, {0x8000000000000000, 0x10001}, {0x578524ab, 0xf345}, {0x80000001, 0x80000000}, {0x8000000000000000, 0xb3e7}, {0x2, 0x9}, {0x7ff, 0x5}, {0xd}, {0x8, 0x2}, {0x6, 0xd}, {0x7, 0x3}, {0x400, 0x1}, {0x8, 0x32cd50cb}, {0x40, 0x6}, {0x7}, {0x0, 0x8}, {0x2d29, 0x5}, {0x9, 0x4}, {0x4, 0x2}, {0xffff, 0x3}, {0x15b0000000000000, 0xffffffffffffffff}, {0x1, 0xc0}, {0x1, 0x7fffffffffffffff}, {0x400, 0x1}, {0x29, 0x7ff}, {0x80, 0xffffffffffffffff}, {0xfff, 0x7}, {0x4, 0x8}, {0x1ff, 0x1}, {0x5, 0x6e3}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0x3ce5}, {0x660, 0x8}, {0x7fffffffffffffff, 0x7ff}, {0x3, 0x78e5}, {0x7fffffffffffffff}, {0x4, 0x4}, {0xfffffffffffffccb, 0xffffffff}, {0x1}, {0x5, 0x9}, {0x100000001, 0x80}, {0x200}, {0xa63, 0xd8b2}, {0x3, 0xffffffffffff0000}, {0x100000001, 0xe9c9}, {0xf, 0x1}, {0x6, 0x66b}, {0xffffffffffffffff, 0x3}, {0x2, 0x5}, {0x0, 0xe0}, {0x3, 0x8}, {0xaa, 0x40}, {0x9836, 0x744b660000000000}, {0xb3a, 0xd}, {0x5, 0x44}, {0x97, 0x948}, {0x7e4cf538, 0x2}, {0x9, 0xffff}, {0x80000001}, {0x5, 0xffffffff}, {0x8, 0x8000000000000000}, {0x101, 0x5}, {0x0, 0x8}, {0x7, 0x1}, {0x6, 0xb}, {0x2, 0x4c9}, {0x6}, {0x73d, 0xad}, {0x9, 0x3b8}, {0x2}, {0x8, 0x1000}, {0xffffffff, 0xff}, {0x9, 0xcace}, {0x1, 0xfffffffffffffff7}, {0x5, 0x2b}, {0x29, 0x8}, {0x100000000, 0x41}, {0xfff, 0x4}, {0x151, 0x8}, {0x80000001, 0x3ff}, {0x80000001}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0x92}, {0x2, 0x6}, {0x7dd8, 0x4}, {0x7, 0x89000000}, {0x8, 0xf}, {0x81, 0x4}, {0x6, 0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x22100, 0x80000000}, {0x8, 0x3}, {0x400, 0x1}, {0x5, 0xe521}, {0x4, 0x7fff}, {0x8, 0x2}, {0xd, 0x4}, {0x0, 0x6}, {0x1, 0x7fff}, {0x8, 0xa97}, {0x6, 0x40}, {0x8}, {0x81, 0x6f}, {0x5}, {0x9, 0x8}, {0x7, 0x80000000}, {0x3ff, 0x3}, {0x987, 0x9}, {0x100000001, 0x1000}, {0x344b9eab, 0x4}, {0x5, 0x2}, {0x1000, 0x6}, {0xfff, 0x7}, {0xb, 0x8000000000000001}, {0x101, 0x6}, {0x6752, 0xe550}, {0x0, 0x401}, {0x0, 0x9}, {0x5, 0x80000001}, {0x4, 0x10000}, {0x5, 0x9}, {0x1, 0x10}, {0x8, 0x7ff}, {0x6, 0x1000}, {0x5, 0xf}, {0x80000000, 0x3ff}, {0x8001, 0x8000000000000001}, {0x2, 0x7}, {0x7, 0x10001}, {0xfffffffffffffffa, 0x9}, {0xb, 0x5}, {0x8000, 0xc}, {0x124, 0x10}, {0x3, 0xb}, {0x2d, 0xd2c}, {0x8, 0x8b}, {0x0, 0x4}, {0x8, 0x8}, {0x1, 0x6}, {0x2, 0x7}, {0xfffffffffffffc01, 0x1}, {0xe024}, {0x4, 0x4}, {0x8001, 0x4}, {0x8, 0x2}, {0x1, 0x7ff}, {0x8, 0x1}, {0xffffffffffffffff, 0x4}, {0xffff, 0x8000000000000000}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x2, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x8000, 0x8}, {0x59, 0x3}, {0x7fff, 0xfffffffffffffff7}, {0x1, 0x6}, {0xf, 0x5}, {0x3, 0x8}, {0x0, 0x653}, {0xa, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x8000000000000001}, {0xffff, 0x6}, {0xa040, 0x5}, {0x2, 0x4}, {0x4, 0xfffffffffffffffb}, {0x1, 0x6}, {0x6, 0x100}, {0x8000, 0x7}, {0x9d, 0x1}, {0x1, 0xe0000000000}, {0x8, 0x1}, {0x1, 0x9}, {0x1, 0x400}, {0x9, 0x3b68}, {0x4bb003bb, 0x72d}, {0x3, 0x14c}, {0x1ac0, 0xbba2}, {0x1, 0x5}, {0x3, 0x22}, {0x7, 0x8}, {0x100000001, 0x2}, {0x9, 0x9}, {0x8000000000000000}, {0xf16d, 0x7e}, {0x400, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0xc}, {0xe, 0xda0}, {0x9, 0x3}, {0xffff, 0x8000000000000001}, {0xe, 0xfe8}, {0xaba, 0x9}, {0xfff, 0x7}, {0x0, 0x5}, {0x24, 0x6}]}, &(0x7f0000002700)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000002780)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000027c0)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000002800)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000002840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000002880)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f00000028c0)=@label={{0x4f32494e, 0x4, 0x10, 0x3b8756dea2b77bb7}}, &(0x7f0000002940)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000002980)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x2}, &(0x7f0000002ac0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000002b00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000002b40)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002b80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000002bc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x24}, {0x40, 0x1}, {0x400, 0x5}, {0x8, 0xfffffffffffffffc}, {0x3, 0x8}, {0x6, 0x200}, {0x1, 0xc}, {0x4, 0xffffffffffffffff}, {0x6d91c047, 0x7fffffffffffffff}, {0x3, 0x6}, {0x0, 0x10001}, {0x7fff, 0xfffffffffffffff8}, {0x1, 0xfffffffffffffff2}, {0x6, 0xfffffffffffffffa}, {0x582, 0x9}, {0x2, 0x7fff}, {0xffffffffffffffff, 0x9}, {0xb, 0x4}, {0xce3, 0x4}, {0x8, 0x80000001}, {0xe7, 0x5}, {0xffffffffffffffff, 0x7dd}, {0x1, 0x7}, {0x4, 0xc8f}, {0xfbe, 0x8}, {0xf0d6, 0x1}, {0xfc, 0x1}, {0x8, 0xfffffffffffff709}, {0x1455, 0x3}, {0xffffffffffff8001, 0x2}, {0x9, 0x6}, {0x1ff, 0x6}, {0x2, 0x6}, {0x4, 0x8}, {0x6a31, 0x8}, {0x3, 0xff}, {0x7ec8991, 0x6}, {0x9, 0xffffffff00000}, {0x5, 0x5}, {0xa0a, 0x8}, {0xb9, 0x9}, {0xffffffff, 0xbc5c}, {0x7, 0xf}, {0x7, 0xe}, {0x10000, 0x8}, {0x3, 0x8}, {0x8, 0xff}, {0x1ff, 0x2}, {0x5, 0x8}, {0x0, 0x6}, {0x8, 0x5}, {0x25f, 0x5}, {0x9, 0x9ce1}, {0x4000000000000000, 0x68b1}, {0x6, 0x9}, {0x4, 0x24}, {0xdf8c, 0x9}, {0xffffffffffffffff, 0x3}, {0x3cc, 0x99}, {0x8, 0xf95c}, {0x225f, 0x4}, {0x6, 0xffffffff00000000}, {0xffffffffffffffff, 0xa9bc}, {0xf2d, 0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x7}, {0x0, 0x3}, {0xd0, 0x1}, {0xdaf, 0x1}, {0x6, 0x1ff}, {0xffffffffffffffff, 0x4}, {0x7fffffff, 0x2}, {0x7fffffffffffffff}, {0x1, 0x39}, {0x10001, 0xd}, {0x3f2, 0x2}, {0x3, 0x8000}, {0x0, 0x6}, {0x1000, 0xb6}, {0x6885, 0x200}, {0xad0, 0x4}, {0x5, 0x2}, {0xe}, {0xb, 0x7}, {0x6, 0x3ff}, {0x4, 0x8}, {0x80, 0x4}, {0x8a1, 0x6dc}, {0xffffffffffffffff, 0x846f}, {0x332, 0x5}, {0x200000000000, 0x5}, {0x1, 0x1}, {0x6, 0xd}, {0x7fff, 0x3}, {0x81a3, 0x7fffffffffffffff}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0xed}, {0xa}, {0x4, 0x1000}, {0xbc, 0x5}, {0xfffffffffffffbff, 0x2}, {0x0, 0x1}, {0x9, 0xfffffffffffffff7}, {0x2, 0x3}, {0x97c, 0x4}, {0x2, 0x8000000000000000}, {0x9, 0x9}, {0x8e40, 0x200}, {0x8, 0x4}, {0x0, 0x6}, {0x6, 0xfffffffffffffffe}, {0x2c0000000000, 0x9}, {0x7, 0x8}, {0x7, 0x100}, {0x9, 0x3}, {0xf5ca, 0x80}, {0xffffffffffffffa8, 0x57d8}, {0x0, 0xff}, {0x8000, 0x4}, {0x8, 0x1}, {0x8000, 0x40}, {0x3, 0x7}, {0xfffffffffffffffb, 0x6}, {0x7ff, 0xf}, {0x9, 0x7}, {0x3, 0x1000}, {0xfffffffffffffffe, 0x3c2f}, {0x8, 0x1}, {0x5}, {0x5134, 0x3}, {0x4, 0x6}, {0x4, 0x1}, {0x8, 0xe1}, {0x6, 0x6}, {0xf, 0xfffffffffffffff7}, {0x7ff, 0x4}, {0x2, 0x8a}, {0xade}, {0x4, 0x8000000000000000}, {0x9, 0xfffffffffffffffc}, {0xfffffffffffffff7, 0x7}, {0xfffffffffffffffe, 0x6}, {0x0, 0x80000000}, {0xfff, 0x9}, {0x1, 0xcf}, {0xe72}, {0x6, 0x9}, {0x7fffffff, 0x7}, {0x9, 0x7f}, {0x5, 0x100000001}, {0x100000001, 0xb}, {0x8, 0xffffffffffffffff}, {0x10, 0x4}, {0x9, 0x5}, {0x1ff, 0x2}, {0x8000000000000000, 0x9}, {0x7fffffffffffffff, 0x100000001}, {0x7, 0x6}, {0x0, 0x750}, {0x8, 0x560}, {0x0, 0x4}, {0x9, 0xffffffffffffffff}, {0xb1, 0x3}, {0x81, 0x2}, {0x7ff, 0x3f7}, {0x8}, {0x2, 0xe45}, {0xc, 0xf41}, {0x100000001, 0x6}, {0x1, 0x7}, {0x6, 0xfffffffffffff0c5}, {0x5, 0x2}, {0x2, 0xb}, {0x5, 0xfffffffffffffff8}, {0x6}, {0x8000000000000001, 0x4}, {0x9, 0x8}, {0x6, 0x3}, {0x8, 0x6356}, {0x94e, 0x9}, {0x400, 0xe}, {0x0, 0x100000000}, {0x9, 0x1a}, {0x1, 0x1}, {0x9, 0x3ff}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x735}, {0x9, 0x3}, {0x6, 0x5}, {0x7fffffffffffffff, 0x9}, {0x9, 0x77c8ac88}, {0x9, 0x6}, {0x4, 0x573}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0x8}, {0x913b, 0xfffffffffffffffe}, {0x8, 0x7}, {0x3, 0xffffffffffffffff}, {0x5, 0x80000000}, {0x6, 0x2}, {0x4, 0xd211}, {0x7, 0x3}, {0x4d62, 0x2}, {0x8, 0x5}, {0x8, 0xffffffffffffffff}, {0x8, 0x100000000}, {0xffffffff, 0xffffffffffff0000}, {0x6, 0x800}, {0x2, 0x7}, {0xf, 0x7}, {0x2, 0x1}, {0x40000000, 0x7}, {0x2a1e, 0x5}, {0x3c}, {0x3, 0x1}, {0x5, 0x8001}, {0x8001}, {0x100000000, 0x400}, {0x9, 0xff}, {0x2b, 0x7fffffff}, {0x1, 0x9}, {0xc1e4, 0x3}, {0xa, 0x6}, {0x2, 0x12d600000000000}, {0x4c0, 0x6}, {0x0, 0x9}, {0xb8bd, 0x7}, {0xff, 0x5}, {0x0, 0x7}, {0x7, 0x6}, {0x200, 0x8000000000000001}, {0x4, 0x1}, {0x2, 0x2}, {0x6}, {0x7f, 0x100}, {0xfffffffffffffffc, 0x5}, {0x6, 0x7}, {0x4, 0xd7}, {0x0, 0x7fff}, {0xd41, 0x7}, {0x80, 0x7}, {0x3, 0x1c7}, {0x8000000000, 0xffff}, {0x3, 0xf55}, {0x100, 0x2}, {0x6879, 0x13}, {0x4, 0x6}, {0x5, 0xd}, {0x8000000000000001, 0x8001}, {0xffffffffffff0000, 0x2}, {0x1ff, 0x5}]}, &(0x7f0000003c00)=@features={{0x4f32494e, 0x6, 0x10, 0x100000001}}, &(0x7f0000003c40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x3}, &(0x7f0000003d80)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000003dc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000000}, [{0xe5, 0x400}, {0xfff, 0x8}, {0xa9, 0x5}, {0x7, 0x8f03}, {0x2, 0x7}, {0x1, 0x3}, {0x4, 0x7fffffff}, {0x7, 0x4}, {0x5, 0x9}, {0x9, 0x8}, {0xcc0, 0x5}, {0xe72c, 0x7}, {0x9, 0x2}, {0x8000000000000001, 0xb08}, {0x4, 0xed4}, {0x1, 0x3}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x7fffffff}, {0x101, 0x3}, {0x60, 0x9}, {0x8, 0x6}, {0x5, 0x80000001}, {0xe, 0x3}, {0xc, 0x7fffffffffffffff}, {0x3, 0x8001}, {0x8000000000000001, 0x8}, {0x1, 0x80}, {0x8, 0x400}, {0xf}, {0x2, 0x7}, {0x6, 0x7fffffffffffffff}, {0x10000, 0x4}, {0x2, 0x3}, {0x5}, {0x0, 0x1}, {0x100, 0xa}, {0x0, 0xa5c7}, {0x2aa7, 0x8}, {0x6, 0x5}, {0x3, 0x7fff}, {0xffffffffe3220334, 0x9ddf}, {0x7fffffffffffffff, 0x8658}, {0x200, 0x4}, {0x1ff}, {0x5, 0x7}, {0x9, 0x2}, {0x2, 0x1}, {0x40, 0x7fffffffffffffff}, {0x8, 0xc4d}, {0x1, 0x1}, {0x7, 0x1}, {0x7}, {0x8, 0xfffffffffffeffff}, {0x6, 0x9}, {0x8, 0xdf4}, {0x6, 0x53}, {0x4}, {0x9, 0x7}, {0x0, 0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x7}, {0x8, 0x7}, {0xb, 0x2}, {0x3, 0xfff}, {0xffff, 0x1}, {0x4, 0x7}, {0x0, 0xfffffffffffffffc}, {0x6, 0x4}, {0x8, 0x7}, {0x7, 0xffffffff}, {0x3, 0x40}, {0x1000, 0x6}, {0x8001, 0x4}, {0x5, 0x7}, {0x6, 0x401}, {0xfc, 0xffffffffffffffff}, {0x8}, {0x9, 0xf8}, {0x1}, {0x1, 0x81}, {0x40, 0x7fff}, {0x3, 0xffffffffffffffff}, {0x6}, {0xa, 0x9}, {0x12000000000, 0x8}, {0x200, 0x3}, {0x8, 0x1000}, {0x6e, 0x6}, {0x3, 0x3}, {0x6, 0x9}, {0xa, 0x5}, {0x0, 0x1}, {0x9, 0x3}, {0x5, 0x1}, {0xfffffffffffffffe, 0x3a6}, {0x401, 0xd}, {0x10000, 0x8}, {0x9, 0x10}, {0x6}, {0xd, 0x8}, {0x61, 0x3ff}, {0x5, 0x21}, {0x8000000000000001, 0x1}, {0x80, 0x2}, {0x0, 0x7}, {0x6, 0x42}, {0x2, 0x6}, {0x0, 0x8}, {0x9, 0x8}, {0x587, 0xfffffffffffffffa}, {0x5, 0x5}, {0x20000000000000, 0x672}, {0xc000000, 0x100000000}, {0x80, 0x9}, {0x8, 0x10001}, {0x3, 0xd}, {0xfff, 0x4}, {0x500000, 0xfffffffffffffffa}, {0xffff, 0x10000}, {0x10, 0x7}, {0xff}, {0x4, 0x1}, {0x1e9980, 0x9}, {0x3, 0x4}, {0x1, 0x6}, {0x23e3, 0x3}, {0x9, 0x5}, {0x4, 0x2}, {0x1f32, 0x3}, {0x4, 0x100000001}, {0x5, 0xa}, {0x6, 0x8000000000000000}, {0x3ff, 0x7}, {0xffffffffffffff00, 0x6e}, {0x4, 0xa}, {0x8e49, 0x1}, {0xf, 0x6}, {0x530000000000000, 0x3}, {0x0, 0x100000001}, {0x0, 0x101}, {0x5, 0x6}, {0x8, 0x2}, {0x4, 0x5}, {0x3, 0xc8}, {0x6, 0x5}, {0x5, 0x800}, {0x0, 0x25}, {0x7, 0x16b68eab}, {0x400, 0x2}, {0x9, 0x9}, {0x101, 0x3}, {0x0, 0x2}, {0xfd, 0x1}, {0xfffffffffffffffd, 0x7}, {0x4, 0x4}, {0x3, 0x3}, {0xd, 0x3}, {0x1, 0x9}, {0x60000000000, 0x3}, {0x1, 0xc2ac}, {0x7b98, 0x7f}, {0x2, 0x9}, {0xfffffffffffffffa, 0x9}, {0x6, 0xdf}, {0x4, 0xa18}, {0x6e, 0x8}, {0xffffffffffffe476, 0xdd2}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0x8}, {0x7f, 0xc}, {0x6, 0x8}, {0x222, 0x7}, {0x10000, 0xd6ab44a}, {0x7, 0x9a8d}, {0xf02c, 0xe}, {0x80000001, 0xf}, {0x3ff, 0x2a91}, {0x10001, 0xf000000000000000}, {0xde86, 0x1}, {0x3, 0xc93}, {0x6, 0x4}, {0x1}, {0x3, 0x8000000000000001}, {0x6, 0x2}, {0x0, 0x33c3}, {0x0, 0x129}, {0x2, 0x1}, {0x80000000, 0x9}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x7, 0x5}, {0x9, 0x2}, {0x9, 0x5}, {0x0, 0x8}, {0x5, 0x741}, {0x8d6d, 0x7ed}, {0xff, 0x6}, {0x687, 0x401}, {0x3, 0x1}, {0x6, 0x9899}, {0xfffffffffffffffe, 0x8}, {0x0, 0x9d5}, {0x2d8, 0xfb}, {0x8000000000000000, 0x8}, {0x4, 0x4}, {0x3, 0xfff}, {0x1, 0x4}, {0x9, 0x1}, {0xc, 0x1}, {0x6, 0x7}, {0x3, 0x3}, {0x200, 0x7}, {0x2, 0x100000001}, {0x1, 0x50}, {0x5, 0x1}, {0x9, 0x3}, {0x1, 0x8000000000000001}, {0x3, 0x24ab}, {0x6, 0x5}, {0x1, 0x9}, {0x4000000000000, 0x100000001}, {0x4, 0x6}, {0xfffffffffffffffb, 0xd4}, {0x1}, {0x3, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x7f, 0x8}, {0xc8, 0x6}, {0x9, 0x899}, {0x81, 0x9}, {0x9, 0x7fffffff}, {0x2, 0x60000000}, {0x7, 0x1000}, {0x27e3, 0x1}, {0x200, 0x8}, {0x8, 0x7f}, {0x1, 0x80000001}, {0x1bb779e1, 0x1}, {0x78, 0xaef}, {0x6, 0xfffffffffffffe00}, {0x9, 0x1}, {0x2, 0x100000000}, {0x9, 0x7fff}, {0x96, 0x9}, {0x800, 0xc348}, {0x9, 0x8}, {0x4, 0x400}]}, &(0x7f0000004e00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000004e40)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000004e80)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004f00)=@freefrag={{0x4f32494e, 0x9, 0x10}}, &(0x7f0000005040)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0xfffffdb0}, &(0x7f0000005180)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f00000051c0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005200)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000005240)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x58}, &(0x7f0000005380)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f00000053c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x6, 0xe}, {0x101, 0xffffffffffffff30}, {0x5, 0x7}, {0xff, 0x4f2e}, {0x4, 0x101}, {0x81, 0x3}, {0x0, 0x95f4}, {0x4, 0x5}, {0x2, 0x198}, {0x1, 0xdb}, {0x4, 0x8}, {0x81, 0x5dd}, {0x5, 0x8}, {0x7, 0x2}, {0xfffffffffffffe00, 0x1}, {0xf, 0x8000000000000000}, {0x9, 0x2d8c}, {0x8, 0x8}, {0x1000, 0xa78}, {0x8, 0x2}, {0x0, 0x7}, {0xfffffffffffff001, 0x6}, {0x100000001, 0x70}, {0x5}, {0x7, 0x92}, {0x3, 0x227d}, {0x66e11905, 0xffffffffffffffff}, {0x92, 0x1000}, {0x7, 0x1}, {0x6, 0x326621a3}, {0x5, 0x40}, {0x2, 0xa741}, {0xffffffffffffffff, 0x2}, {0xffffffff00000001, 0x2}, {0x7, 0x1000}, {0xfffffffffffffffb, 0x8}, {0x401, 0xfffffffffffffffc}, {0x8000000000000001, 0xc2a8}, {0x8, 0xfffffffffffffffc}, {0x1af31d89, 0x6}, {0x9, 0x1}, {0xfffffffffffffeff, 0x4}, {0x8000000000, 0x60460b67}, {0xfffffffffffffff7, 0x9}, {0x8, 0xd}, {0x10000, 0x1}, {0x2, 0x80}, {0xf, 0x4}, {0x80000001, 0x9}, {0x8, 0xe6}, {0x6, 0x8000000000000001}, {0xffffffffffff9c05, 0x6}, {0xffff, 0x1ff}, {0x5}, {0x1, 0x2}, {0xc, 0x3}, {0x100, 0x1000}, {0x9, 0x9}, {0x400, 0x40d}, {0x9, 0x5}, {0x9, 0x8}, {0xf, 0x5}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x6, 0x8d}, {0x4, 0x80}, {0x9, 0x1}, {0x8, 0xffff}, {0xc1, 0x8}, {0x9, 0x9}, {0x8, 0x101}, {0x94, 0x1}, {0x7, 0x5}, {0x7d, 0x3}, {0x3, 0x9}, {0x101, 0x2}, {0x8, 0x87}, {0xc, 0x3}, {0x10001, 0x10}, {0x5}, {0x184, 0x5}, {0xa8, 0x6}, {0x0, 0x3}, {0x9, 0x9}, {0xffff, 0x9}, {0x9, 0x7}, {0x7, 0x40}, {0xb9, 0xffffffffffff4daa}, {0x7, 0x10000}, {0xffffffff, 0xe52}, {0x1, 0x9}, {}, {0x2, 0x800}, {0x0, 0x2}, {0x0, 0x5}, {0x8, 0x8}, {0x0, 0x6}, {0xb3, 0x80000000}, {0xdbad}, {0xff, 0x5}, {0x3d70, 0xb1}, {0x42, 0x15c9}, {0x6, 0xd}, {0xfff, 0x5}, {0x9, 0xffffffffcdd68e71}, {0xf05, 0xe}, {0x62, 0x3}, {0x6, 0xa3}, {0x5, 0x4c84}, {0x60f, 0x4}, {0xb5, 0xfffffffffffffff4}, {0x591e1b08}, {0x90, 0xf}, {0x80000000, 0x2}, {0x453, 0xfffffffffffffff9}, {0x400, 0xffffffff}, {0x5, 0x1}, {0x5, 0xfffffffffffffff9}, {0x4, 0x6}, {0xffffffffffffff8b, 0x7}, {0x7a}, {0x1, 0x7}, {0x101, 0x2}, {0xd, 0x7fffffff}, {0x7f, 0x1000}, {0x0, 0xb59}, {0xa1, 0x7}, {0x4, 0x4}, {0x7fffffff, 0xc}, {0x80, 0x401}, {0xffffffff, 0x1}, {0x8, 0x7}, {0x4, 0xd89}, {0x2, 0x2}, {0xf, 0x55ce17bd}, {0x9, 0x3ff}, {0x8, 0x21e460e5}, {0x9, 0x4}, {0x2}, {0xfffffffffffffffb, 0xb}, {0x7, 0x1}, {0x0, 0x2}, {0x10000000000, 0x7fff}, {}, {0xbdf, 0x1}, {0x81, 0x2}, {0x1d3c60000, 0xfffffffffffffffb}, {0x0, 0x6}, {0x0, 0x9}, {0xc, 0x6}, {0x9, 0x7c4}, {0x3, 0x2}, {0x8, 0xc00000000000000}, {0xffffffffffffff39, 0x33}, {0x3, 0x2}, {0xa86, 0x4}, {0xffffffffffffffff, 0x44}, {0x100000001, 0x2}, {0x9, 0x3}, {0x7865}, {0x7ff, 0xc0000000}, {0x7, 0x10001}, {0x3, 0x7}, {0x0, 0xfffffffffffffff9}, {0x100000000, 0xd2b}, {0x4, 0x3ff}, {0x4, 0xfffffffffffffffa}, {0xff, 0x8000000000000001}, {0x0, 0x2}, {0xdf0, 0x8}, {0x1000, 0x1}, {0x7fffffffffffffff, 0x8}, {0x1, 0x1}, {0xd63, 0xd}, {0x4, 0x9}, {0x4, 0x351}, {0xd, 0x2}, {0xffffffffffffff00, 0x5}, {0x4}, {0x27, 0x54}, {0x1, 0x18}, {0x4, 0x5}, {0x2, 0x200}, {0x8, 0x4}, {0x3, 0x6}, {0x8}, {0x7, 0x2}, {0x3e99004e, 0x8}, {0x8000000000000000, 0x2}, {0x4, 0x4}, {0x2, 0x8b7}, {0x2e32678c, 0x6}, {0xffffffff}, {0x10002000000, 0x4}, {0x6, 0x101}, {0x400, 0x10001}, {0x9c74, 0x3}, {0x3, 0xffffffffffffffff}, {0x1ff, 0xfffffffffffffff7}, {0x41e3, 0x7}, {0xfffffffffffffc01, 0x7}, {0x9, 0xfffffffffffffc00}, {0x101, 0xaf}, {0x7}, {0xa970, 0x6}, {0x8, 0x4}, {0x7fff, 0x6a8}, {0x1ff, 0x6601fd14}, {0x6}, {0x9, 0xa25}, {0xfffffffeffffffff, 0x10001}, {0xb, 0xfffffffffffffffc}, {0x8001, 0x21}, {0x1, 0x6}, {0x371b, 0x7fffffffffffffff}, {0x5, 0x3ff}, {0x6, 0x800000000}, {0x71}, {0x7d7, 0x3}, {0x7, 0x9}, {0x100000000, 0x5}, {0x1, 0x5}, {0x26, 0x200}, {0xe6dc, 0x3}, {0xfff, 0xd56}, {0x1, 0x3}, {0x1, 0xc}, {0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x810000, 0x7ff}, {0x5d7, 0x2}, {0x5, 0xb}, {0x8, 0x8}, {0x81, 0xd3}, {0x9, 0x4}, {0x3}, {0x7f, 0x8}, {0x0, 0xbf}, {0x7, 0xa}, {0x4, 0x40}, {0x7, 0x8001}, {0x8, 0x2}, {0x8, 0x5}, {0x101, 0xf460}, {0xfffffffffffffffc, 0x7}, {0x7fffffff, 0x5c8a}, {0x6, 0x8}, {0x3, 0x7fff}, {0x80, 0x8000}, {0x5, 0x3}, {0xfffffffffffffff8, 0x80000000}, {0x5, 0x800}, {0x4, 0x7}]}, &(0x7f0000006400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000006480)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000006500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000006540)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000006580)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f00000065c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x100000000}}, &(0x7f0000006600)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x123c, 0x2}, {0x3, 0x1000}, {0x6, 0x5}, {0x3}, {0xfffffffffffffffc, 0x4d09}, {0x800, 0x2}, {0x7, 0x7}, {0x400, 0x4}, {0x5, 0x4}, {0xfffffffffffffff7, 0x91}, {0x1813, 0xde9}, {0x3c26, 0x101}, {0x2, 0x2}, {0x2, 0x3}, {0x401, 0xc3ad}, {0x5, 0x2}, {0x7, 0x6}, {0x1, 0x9}, {0xfffffffffffff001, 0xad33}, {0x5, 0x5}, {0x6, 0x100}, {0x8, 0xa8}, {0x1, 0x60}, {0x5800000000000000, 0x3}, {0x8, 0xfffffffffffffffd}, {0x800000010}, {0x9, 0x8}, {0x6}, {0xffffffffffffffff, 0xfffffffffffff792}, {0x3, 0x1}, {0x8}, {0x8, 0x7fffffffffffffff}, {0x5, 0x5}, {0x7, 0x1}, {0x8000000000000000, 0xd}, {0x3, 0x7}, {0x81, 0x7}, {0x9, 0x3}, {0x9, 0x2}, {0x8, 0x67e3fe8d}, {0x5, 0x7}, {0x2, 0x4}, {0x0, 0x4}, {0xfffffffffffffffe, 0x2}, {0x533, 0x8000000000000000}, {0xa, 0x7}, {0x2, 0xe35e}, {0xfff, 0xc}, {0x2040000, 0x3ff}, {0x8000000000000000, 0x101}, {0xe1c, 0x10}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x4866}, {0x7, 0x157680000000}, {0x50a2, 0x7}, {0x1, 0x7}, {0x9, 0x4}, {0x2, 0x54d6}, {0xb151, 0x2}, {0x1, 0x9}, {0x4, 0x6}, {0x2, 0x339f}, {0x8, 0x6}, {0x9, 0x4}, {0xffffffff, 0x20000000000000}, {0x8, 0x5}, {0x9, 0x4cd}, {0x6, 0x1}, {0x1}, {0xe, 0x1}, {0x3}, {0x6, 0x8}, {0x3, 0x401}, {0x9, 0x4}, {0xcdf, 0x100}, {0x1, 0xfffffffffffffffd}, {0x6457, 0x100000000000000}, {0x8ea, 0x6}, {0x6, 0x3}, {0x5}, {0xf, 0xe}, {0x9, 0x5b}, {0x1, 0xffffffffffffffe5}, {0x4, 0x2000}, {0x4, 0x8000000000000001}, {0x0, 0x6210}, {0x101, 0x4}, {0x8, 0x9}, {0x2, 0xce1f}, {0x0, 0x6}, {0x300, 0x1}, {0x9, 0x6}, {0xffffffffffffffff, 0x2}, {0x6, 0x9}, {0x7, 0x3}, {0xffff, 0xfffffffffffffff7}, {0x4, 0x9}, {0x1, 0x1}, {0x100, 0xa57}, {0x4, 0x746}, {0x8000, 0xffff}, {0x0, 0x7}, {0x4, 0x8}, {0x81, 0x7}, {0xd75, 0x9}, {0x5a, 0xffffffffffffffff}, {0x6, 0xa3}, {0x100000001, 0x7}, {0x7, 0x6}, {0x3, 0x6}, {0x3, 0x7}, {0x7fffffff}, {0xfffffffffffffff7, 0x7fffffffffffffff}, {0x4, 0x3}, {0x6, 0x100}, {0x5, 0x8}, {0x8000000000000000, 0x1}, {0x5, 0x5}, {0x5, 0xfffffffffffffff9}, {0x9, 0x3ffc}, {0x8, 0x7}, {0x2ea, 0xfffffffffffff02c}, {0x2003, 0x981e}, {0x6, 0x6}, {0x3, 0xa42f}, {0x4, 0x7}, {0x781, 0x1}, {0x8}, {0x1000, 0x3}, {0x8000000000000000, 0x2}, {0x4, 0x2}, {0x71, 0x8}, {0x6, 0x3}, {0xffff, 0x3000000}, {0x200, 0x8000000000000001}, {0x7fff, 0x6}, {0x100, 0x7f}, {0x80000001, 0x9}, {0x8eb, 0x6}, {0x100000000, 0x6}, {0x4, 0x1}, {0x8d, 0x7f}, {0xd, 0x2}, {0xff, 0x8001}, {0x6, 0xffffffff}, {0x7}, {0x1, 0xfff}, {0x8001, 0x9}, {0x407, 0x83}, {0x722, 0x2}, {0x9, 0x80000001}, {0xbf5f}, {0x4, 0x3}, {0x12, 0x100000001}, {0x3, 0x10000}, {0x7fff, 0x7ff}, {0x7}, {0x5, 0x9}, {0xffffffffffffff67, 0x1}, {0x10, 0x1}, {0x0, 0x5}, {0x6}, {0x6, 0x7}, {0x800, 0x7}, {0x7, 0x5}, {0x73, 0x8a7b}, {0x81, 0x3}, {0x0, 0xffffffff}, {0x2, 0x3ec}, {0x12a137b1}, {0x6f3, 0x857}, {0x401, 0x9}, {0x5, 0x7}, {0x1, 0x698}, {0x9, 0xffff}, {0x4, 0x400}, {0xa48d, 0xd}, {0x18000000000, 0x23}, {0x2, 0x100}, {0x4, 0x2}, {0xb09, 0xfff}, {0x4, 0x6f8}, {0xfffffffffffff7f2, 0xe6b}, {0x260e, 0x1}, {0x2, 0xa4ba}, {0x3, 0x8}, {0xd}, {0x800, 0x10000}, {0xfffffffffffff62b, 0x80000001}, {0x81, 0x1}, {0x3, 0xee}, {0x0, 0x100000001}, {0x10001, 0x91bc}, {0x27, 0x70}, {0x5, 0x16}, {0x8, 0x80000001}, {0xfff, 0xdaad}, {0x5, 0xe}, {0x3}, {0x5b65, 0x2}, {0x3916, 0x1}, {0x7fffffffffffffff, 0x4}, {0x0, 0xfffffffffffffffc}, {0x3, 0x4}, {0xfffffffffffffff8, 0x2}, {0xa, 0x8}, {0x9c, 0xfffffffffffff11c}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0xc1a4}, {0x8, 0x8}, {0x0, 0x7}, {0x0, 0x1000}, {0x7, 0x7}, {0x4, 0xd}, {0x80, 0x80000001}, {0xfff, 0xc6b8}, {0x3, 0x8e1}, {0x7ff, 0xb}, {0x6, 0xc}, {0x1e2d, 0x3}, {0x4, 0x2}, {0xc, 0x2}, {0x800, 0x69}, {0x6}, {0x6, 0x3ff}, {0x6, 0xfffffffffffffffe}, {0x6, 0xd}, {0x2, 0x8000}, {0xd5b4, 0x3}, {0x6b, 0xfffffffffffffff3}, {0xe1c, 0x10001}, {0x7, 0x2}, {0x3, 0x6}, {0x8000, 0x100000001}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x8d, 0x221}, {0x2, 0x8}, {0x8, 0xb5}, {0x9, 0x7fffffff}, {0x4, 0x10}, {0x7, 0x9}, {0x2, 0x1c}, {0x100}, {0x9, 0x10000}, {0x9, 0x8}, {0x81, 0x100000000}, {0x7f, 0xcb40}, {0x0, 0x5}, {0x1, 0xffffffff}]}, &(0x7f0000007640)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}], 0x32}) r1 = socket(0x25, 0x6, 0x40) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000078c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000007980)={&(0x7f0000007880)={0x10, 0x0, 0x0, 0x48000004}, 0xc, &(0x7f0000007940)={&(0x7f0000007900)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000801) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000007a00)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000007ac0)={&(0x7f00000079c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000007a80)={&(0x7f0000007a40)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x24008000) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000007c00)={&(0x7f0000007b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007bc0)={&(0x7f0000007b40)={0x44, 0x1407, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000007c40)={0x0, r1, r1, 0x0, 0x3, '\x00', {0x2, 0x8, 0xff, 0x3, 0x1000, 0x2, 0x6, 0x8, {0xfffffffffffff6cf, 0x8000}, {0x8, 0x4}, {0x2}, 0x3d72, 0xfffffffe, 0x4ae, 0x0, 0x3, 0x0, 0x4, 0x200, 0x220, 0x6, '\x00', 0x5, 0xc, 0x64, 0xc}}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000007d00)=""/228, &(0x7f0000007e00)=0xe4) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000007e40)={@local, @multicast1, 0x1, "35c9e7c32471b7776fd43d8191b378b482d85ded66cfd43328c58f9f754e3297", 0x9, 0x4, 0x1, 0xfffffffc}, 0x3c) (async, rerun: 32) syz_emit_ethernet(0xea, &(0x7f0000007e80)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x800, @dccp={{0x28, 0x4, 0x1, 0x6, 0xd4, 0x68, 0x0, 0xfc, 0x21, 0x0, @empty, @private=0xa010102, {[@lsrr={0x83, 0x1b, 0x3f, [@dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @generic={0x12, 0x4, "adc7"}, @generic={0x44, 0x2}, @lsrr={0x83, 0x7, 0xf4, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x33, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x4e8e}, {@local, 0x6}, {@multicast2, 0x24000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x562}, {@local, 0x155c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@empty, 0x90}]}, @timestamp_addr={0x44, 0x24, 0xe9, 0x1, 0xa, [{@empty, 0x5}, {@multicast1, 0xb78}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}]}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x4, "f2bccb", 0x8, "3896f0"}, "d6b7030ba910bc9a8eec564943280ea4e78157502da3cb6eab42195d552ae7618db7cf6c"}}}}}, &(0x7f0000007f80)={0x0, 0x1, [0x46c, 0x75, 0xca8, 0xbfb]}) (rerun: 32) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000007fc0)=""/4096, &(0x7f0000008fc0)=0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f00000090c0)={&(0x7f0000009000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009080)={&(0x7f0000009040)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x800}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000009200)={&(0x7f0000009100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000091c0)={&(0x7f0000009140)={0x78, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x4000084) (async) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000009240), &(0x7f0000009280)=0xe) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f000000a3c0)={&(0x7f00000092c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbb, 0xbb, 0x9, [@ptr={0xe, 0x0, 0x0, 0x2, 0x5}, @datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0xae0e}], "3b9fdb"}, @var={0xf, 0x0, 0x0, 0xe, 0x2}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x15}, @fwd={0x7}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x4, 0x3}, {0xd}, {0xd, 0x4}, {0x7, 0x10001}, {0xd, 0xc}, {0x2, 0x5}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0xa, 0x2}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x3}, @const={0x1, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x5f, 0x5f, 0x61, 0x2e]}}, &(0x7f00000093c0)=""/4096, 0xdd, 0x1000, 0x0, 0xfb7}, 0x28) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000a440), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f000000a480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f000000a540)={&(0x7f000000a400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000a500)={&(0x7f000000a4c0)={0x34, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000) (async, rerun: 64) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000a780)={0x18, 0x6, &(0x7f000000a580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x30}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f000000a5c0)='GPL\x00', 0x9, 0x54, &(0x7f000000a600)=""/84, 0x60980, 0x4, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f000000a680)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f000000a6c0)=[r0, r0, r0], &(0x7f000000a700)=[{0x5, 0x1, 0x6, 0x8}, {0x5, 0x5, 0xe}, {0x2, 0x5, 0x9, 0xb}, {0x0, 0x2, 0x2, 0x4}, {0x5, 0x4}], 0x10, 0x8}, 0x94) (async, rerun: 64) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$NILFS_IOCTL_RESIZE(r9, 0x40086e8b, &(0x7f000000a840)=0x7) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000abc0)={0x11, 0x18, &(0x7f000000a880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @generic={0x2, 0x2, 0x2, 0x6c2, 0x2}, @ldst={0x0, 0x0, 0x6, 0x2, 0x1, 0x8, 0x10}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1d}}]}, &(0x7f000000a940)='syzkaller\x00', 0x6, 0xe9, &(0x7f000000a980)=""/233, 0xa2939c8b95e8b92b, 0x32, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f000000aa80)={0x9, 0x5}, 0x8, 0x10, &(0x7f000000aac0)={0x2, 0x4, 0x80000000, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f000000ab00)=[r9, r0], &(0x7f000000ab40)=[{0x1, 0x3, 0xe, 0x2}, {0x0, 0x4, 0xf, 0xb}, {0x5, 0x5, 0xd, 0x2}, {0x0, 0x5, 0xa}, {0x4, 0x5, 0x6, 0x4}], 0x10, 0x424d}, 0x94) ioctl$OCFS2_IOC_REFLINK(r10, 0x40186f04, &(0x7f000000ad00)={&(0x7f000000ac80)='\xff\xff', &(0x7f000000acc0)=']@\x00'}) (async, rerun: 64) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f000000ad40)={0x0, 0x4}, 0x2) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f000000ad80), r0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f000000af40)={&(0x7f000000adc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000af00)={&(0x7f000000ae40)={0x90, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x90}}, 0x80) 0s ago: executing program 1 (id=2272): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x7fff, @private2, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x4000000) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x3ee6, @private0, 0xfffffffa}}, [0x3, 0x3af, 0x8, 0x1000, 0x3, 0x3, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x101, 0x100000000, 0x3, 0x6, 0xd, 0x81, 0x80]}, &(0x7f0000000500)=0x100) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x437, 0x800000, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x504c3, 0x26492}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) kernel console output (not intermixed with test programs): allmulticast mode [ 211.985822][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 212.110588][T11189] geneve3: entered promiscuous mode [ 212.110610][T11189] geneve3: entered allmulticast mode [ 212.149033][T11192] netlink: 'syz.1.1268': attribute type 29 has an invalid length. [ 212.149058][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 212.196857][T11194] geneve2: entered promiscuous mode [ 212.213857][T11168] netlink: 'syz.1.1268': attribute type 29 has an invalid length. [ 212.213884][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 212.355777][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 212.419008][T11201] netlink: 'syz.2.1275': attribute type 13 has an invalid length. [ 212.878511][T11222] xt_CT: No such helper "snmp" [ 212.966727][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 213.120030][T11247] x_tables: duplicate underflow at hook 1 [ 213.344162][T11260] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 213.490106][T11272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.492456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.952915][T11290] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 213.953687][T11290] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 214.062204][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.062452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.249007][T11303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 214.249788][T11303] bridge0: port 3(bond7) entered blocking state [ 214.249961][T11303] bridge0: port 3(bond7) entered disabled state [ 214.250099][T11303] bond7: entered allmulticast mode [ 214.260461][T11303] bond7: entered promiscuous mode [ 214.263634][T11303] bridge0: port 3(bond7) entered blocking state [ 214.263747][T11303] bridge0: port 3(bond7) entered forwarding state [ 214.379380][T11316] pim6reg: entered allmulticast mode [ 214.486954][T11327] bond9: option broadcast_neighbor: invalid value (3) [ 214.492244][T11327] bond9 (unregistering): Released all slaves [ 214.523487][T11329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.570284][T11329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.586895][T11335] veth0: entered promiscuous mode [ 214.670680][T11335] bond0: entered promiscuous mode [ 214.670704][T11335] bond_slave_0: entered promiscuous mode [ 214.670885][T11335] @0: entered promiscuous mode [ 214.692295][ T171] bridge0: port 3(bond7) entered disabled state [ 214.735868][T11335] block nbd0: Unsupported socket: should be TCP or UNIX. [ 214.773422][T11330] bond0: left promiscuous mode [ 214.773446][T11330] bond_slave_0: left promiscuous mode [ 214.773735][T11330] @0: left promiscuous mode [ 214.785435][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.785646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.787344][T11330] veth0: left promiscuous mode [ 214.946395][T11354] x_tables: duplicate underflow at hook 3 [ 215.249584][T11378] syzkaller1: entered promiscuous mode [ 215.249606][T11378] syzkaller1: entered allmulticast mode [ 216.377644][T11418] xt_l2tp: missing protocol rule (udp|l2tpip) [ 218.380153][T11433] __nla_validate_parse: 22 callbacks suppressed [ 218.380177][T11433] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1339'. [ 218.636527][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 218.767507][T11460] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.248969][T11462] syzkaller1: entered promiscuous mode [ 219.248994][T11462] syzkaller1: entered allmulticast mode [ 219.313049][T11486] Bluetooth: hci0: unsupported parameter 5135 [ 219.313075][T11486] Bluetooth: hci0: unsupported parameter 65 [ 219.313092][T11486] Bluetooth: hci0: unsupported parameter 5135 [ 219.313104][T11486] Bluetooth: hci0: unsupported parameter 65 [ 219.845887][T11514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.886406][ T5730] wlan1: No legacy rates in association response [ 219.909876][ T8316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.913009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.950577][T11514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.027094][T11520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.039880][T11526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.040905][T11526] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 220.549947][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 220.601066][T11548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.664602][T11544] team0: Port device team_slave_0 removed [ 220.686817][T11552] netlink: 'syz.4.1363': attribute type 11 has an invalid length. [ 220.705297][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 220.824900][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 220.849372][T11554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'. [ 221.065255][T11574] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1368'. [ 221.312471][T11573] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 221.448101][T11581] Cannot find set identified by id 65535 to match [ 221.523544][T11589] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 221.524840][T11589] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 221.525670][T11589] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 221.526622][T11589] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 221.527494][T11589] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 221.528574][T11589] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 221.555583][T11589] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1373'. [ 221.555606][T11589] tc_dump_action: action bad kind [ 221.555820][T11589] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1373'. [ 221.555833][T11589] tc_dump_action: action bad kind [ 221.556077][T11589] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1373'. [ 221.556090][T11589] tc_dump_action: action bad kind [ 221.556270][T11589] tc_dump_action: action bad kind [ 221.556447][T11589] tc_dump_action: action bad kind [ 221.556621][T11589] tc_dump_action: action bad kind [ 221.556794][T11589] tc_dump_action: action bad kind [ 221.575341][T11590] tc_dump_action: action bad kind [ 221.577115][T11589] tc_dump_action: action bad kind [ 221.577304][T11589] tc_dump_action: action bad kind [ 221.577470][T11589] tc_dump_action: action bad kind [ 221.577690][T11589] tc_dump_action: action bad kind [ 221.577898][T11589] tc_dump_action: action bad kind [ 221.578076][T11589] tc_dump_action: action bad kind [ 221.578238][T11589] tc_dump_action: action bad kind [ 221.578402][T11589] tc_dump_action: action bad kind [ 221.578562][T11589] tc_dump_action: action bad kind [ 221.610338][T11589] tc_dump_action: action bad kind [ 221.610577][T11589] tc_dump_action: action bad kind [ 221.610745][T11589] tc_dump_action: action bad kind [ 221.610907][T11589] tc_dump_action: action bad kind [ 221.611084][T11589] tc_dump_action: action bad kind [ 221.611250][T11589] tc_dump_action: action bad kind [ 221.625275][T11589] tc_dump_action: action bad kind [ 221.625494][T11589] tc_dump_action: action bad kind [ 221.625671][T11589] tc_dump_action: action bad kind [ 221.626796][T11589] tc_dump_action: action bad kind [ 222.265092][T11626] xt_REDIRECT: bad rangesize 26624. [ 223.250301][T11683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.250547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.268725][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.268967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.490954][T11699] __nla_validate_parse: 28 callbacks suppressed [ 223.490978][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1393'. [ 223.510658][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 223.613905][T11699] veth7: entered allmulticast mode [ 224.160589][T11727] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 224.429100][T11714] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 224.445755][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1395'. [ 224.559134][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 224.600715][T11743] FAULT_INJECTION: forcing a failure. [ 224.600715][T11743] name failslab, interval 1, probability 0, space 0, times 1 [ 224.600751][T11743] CPU: 1 UID: 0 PID: 11743 Comm: syz.0.1401 Not tainted syzkaller #0 PREEMPT(full) [ 224.600794][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.600819][T11743] Call Trace: [ 224.600834][T11743] [ 224.600851][T11743] dump_stack_lvl+0xe8/0x150 [ 224.600907][T11743] should_fail_ex+0x410/0x560 [ 224.600935][T11743] should_failslab+0xa8/0x100 [ 224.600961][T11743] __kmalloc_cache_node_noprof+0xaa/0x620 [ 224.600984][T11743] ? __get_vm_area_node+0x155/0x2f0 [ 224.601012][T11743] ? __get_vm_area_node+0x155/0x2f0 [ 224.601044][T11743] __get_vm_area_node+0x155/0x2f0 [ 224.601074][T11743] __vmalloc_node_range_noprof+0x343/0x1540 [ 224.601102][T11743] ? bpf_prog_calc_tag+0x51/0x370 [ 224.601127][T11743] ? lock_acquire+0x115/0x350 [ 224.601162][T11743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.601185][T11743] ? bpf_verifier_vlog+0x58d/0x900 [ 224.601209][T11743] ? bpf_prog_calc_tag+0x51/0x370 [ 224.601230][T11743] __vmalloc_noprof+0xd2/0x120 [ 224.601259][T11743] ? bpf_prog_calc_tag+0x51/0x370 [ 224.601285][T11743] bpf_prog_calc_tag+0x51/0x370 [ 224.601313][T11743] check_and_resolve_insns+0xbb/0x21d0 [ 224.601337][T11743] ? add_subprog+0x2e2/0x3f0 [ 224.601360][T11743] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 224.601389][T11743] bpf_check+0x18f9/0x2ef0 [ 224.601424][T11743] ? __pfx_bpf_check+0x10/0x10 [ 224.601446][T11743] ? bpf_obj_name_cpy+0x194/0x1e0 [ 224.601479][T11743] bpf_prog_load+0x14d6/0x1c20 [ 224.601513][T11743] ? __pfx_bpf_prog_load+0x10/0x10 [ 224.601555][T11743] __sys_bpf+0xd0d/0xd90 [ 224.601586][T11743] ? __pfx___sys_bpf+0x10/0x10 [ 224.601619][T11743] ? __fget_files+0x2a/0x420 [ 224.601663][T11743] ? ksys_write+0x242/0x270 [ 224.601701][T11743] ? __pfx_ksys_write+0x10/0x10 [ 224.601736][T11743] __x64_sys_bpf+0xba/0xd0 [ 224.601759][T11743] do_syscall_64+0x166/0x520 [ 224.601787][T11743] ? trace_irq_disable+0x3b/0x140 [ 224.601806][T11743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.601826][T11743] ? clear_bhb_loop+0x70/0xc0 [ 224.601849][T11743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.601869][T11743] RIP: 0033:0x7fbed599e159 [ 224.601887][T11743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.601905][T11743] RSP: 002b:00007fbed687a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.601926][T11743] RAX: ffffffffffffffda RBX: 00007fbed5c25fa0 RCX: 00007fbed599e159 [ 224.601940][T11743] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 224.601954][T11743] RBP: 00007fbed687a090 R08: 0000000000000000 R09: 0000000000000000 [ 224.601966][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.601978][T11743] R13: 00007fbed5c26038 R14: 00007fbed5c25fa0 R15: 00007ffebabf7d28 [ 224.602008][T11743] [ 224.610996][T11743] syz.0.1401: vmalloc error: size 152, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 224.611063][T11743] CPU: 1 UID: 0 PID: 11743 Comm: syz.0.1401 Not tainted syzkaller #0 PREEMPT(full) [ 224.611085][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.611096][T11743] Call Trace: [ 224.611103][T11743] [ 224.611111][T11743] dump_stack_lvl+0xe8/0x150 [ 224.611142][T11743] warn_alloc+0x24d/0x270 [ 224.611162][T11743] ? __kasan_kmalloc+0x22/0xb0 [ 224.611187][T11743] ? __pfx_warn_alloc+0x10/0x10 [ 224.611212][T11743] ? __get_vm_area_node+0x155/0x2f0 [ 224.611246][T11743] ? __get_vm_area_node+0x2a9/0x2f0 [ 224.611278][T11743] __vmalloc_node_range_noprof+0x36b/0x1540 [ 224.611307][T11743] ? lock_acquire+0x115/0x350 [ 224.611352][T11743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.611381][T11743] ? bpf_verifier_vlog+0x58d/0x900 [ 224.611406][T11743] ? bpf_prog_calc_tag+0x51/0x370 [ 224.611427][T11743] __vmalloc_noprof+0xd2/0x120 [ 224.611454][T11743] ? bpf_prog_calc_tag+0x51/0x370 [ 224.611479][T11743] bpf_prog_calc_tag+0x51/0x370 [ 224.611505][T11743] check_and_resolve_insns+0xbb/0x21d0 [ 224.611532][T11743] ? add_subprog+0x2e2/0x3f0 [ 224.611556][T11743] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 224.611588][T11743] bpf_check+0x18f9/0x2ef0 [ 224.611631][T11743] ? __pfx_bpf_check+0x10/0x10 [ 224.611655][T11743] ? bpf_obj_name_cpy+0x194/0x1e0 [ 224.611686][T11743] bpf_prog_load+0x14d6/0x1c20 [ 224.611718][T11743] ? __pfx_bpf_prog_load+0x10/0x10 [ 224.611763][T11743] __sys_bpf+0xd0d/0xd90 [ 224.611791][T11743] ? __pfx___sys_bpf+0x10/0x10 [ 224.611822][T11743] ? __fget_files+0x2a/0x420 [ 224.611864][T11743] ? ksys_write+0x242/0x270 [ 224.611894][T11743] ? __pfx_ksys_write+0x10/0x10 [ 224.611926][T11743] __x64_sys_bpf+0xba/0xd0 [ 224.611948][T11743] do_syscall_64+0x166/0x520 [ 224.611975][T11743] ? trace_irq_disable+0x3b/0x140 [ 224.611994][T11743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.612012][T11743] ? clear_bhb_loop+0x70/0xc0 [ 224.612035][T11743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.612054][T11743] RIP: 0033:0x7fbed599e159 [ 224.612072][T11743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.612088][T11743] RSP: 002b:00007fbed687a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.612105][T11743] RAX: ffffffffffffffda RBX: 00007fbed5c25fa0 RCX: 00007fbed599e159 [ 224.612119][T11743] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 224.612132][T11743] RBP: 00007fbed687a090 R08: 0000000000000000 R09: 0000000000000000 [ 224.612144][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.612155][T11743] R13: 00007fbed5c26038 R14: 00007fbed5c25fa0 R15: 00007ffebabf7d28 [ 224.612185][T11743] [ 224.612228][T11743] Mem-Info: [ 224.612238][T11743] active_anon:11816 inactive_anon:0 isolated_anon:0 [ 224.612238][T11743] active_file:3 inactive_file:43101 isolated_file:0 [ 224.612238][T11743] unevictable:0 dirty:139 writeback:0 [ 224.612238][T11743] slab_reclaimable:11599 slab_unreclaimable:108761 [ 224.612238][T11743] mapped:32367 shmem:6250 pagetables:1216 [ 224.612238][T11743] sec_pagetables:0 bounce:0 [ 224.612238][T11743] kernel_misc_reclaimable:0 [ 224.612238][T11743] free:1309622 free_pcp:12888 free_cma:0 [ 224.612289][T11743] Node 0 active_anon:47264kB inactive_anon:0kB active_file:12kB inactive_file:172204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129468kB dirty:556kB writeback:0kB shmem:25000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13784kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 224.612344][T11743] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 224.612394][T11743] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.616081][T11743] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 224.616120][T11743] Node 0 DMA32 free:1279424kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47264kB inactive_anon:0kB active_file:12kB inactive_file:172204kB unevictable:0kB writepending:556kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:51552kB local_pcp:24936kB free_cma:0kB [ 224.616181][T11743] lowmem_reserve[]: 0 0 0 0 0 [ 224.616212][T11743] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.616266][T11743] lowmem_reserve[]: 0 0 0 0 0 [ 224.616302][T11743] Node 1 Normal free:3943704kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.616356][T11743] lowmem_reserve[]: 0 0 0 0 0 [ 224.616387][T11743] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 224.616495][T11743] Node 0 DMA32: 454*4kB (UME) 1073*8kB (UME) 149*16kB (UME) 465*32kB (UE) 267*64kB (UME) 174*128kB (UME) 122*256kB (UM) 55*512kB (UME) 12*1024kB (UM) 3*2048kB (M) 277*4096kB (UM) = 1279440kB [ 224.616773][T11743] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 224.616868][T11743] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 6*16kB (UM) 5*32kB (UM) 6*64kB (UM) 3*128kB (UM) 3*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943704kB [ 224.617035][T11743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.617053][T11743] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.617068][T11743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.617084][T11743] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.617100][T11743] 49350 total pagecache pages [ 224.617108][T11743] 0 pages in swap cache [ 224.617115][T11743] Free swap = 124996kB [ 224.617122][T11743] Total swap = 124996kB [ 224.617130][T11743] 2097051 pages RAM [ 224.617137][T11743] 0 pages HighMem/MovableOnly [ 224.617144][T11743] 428661 pages reserved [ 224.617150][T11743] 0 pages cma reserved [ 224.925019][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 225.031738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.032105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.036411][ T8316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.036683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.078844][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 225.303994][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 225.610650][T11764] smc: net device vlan1 applied user defined pnetid SYZ2 [ 225.985009][T11777] netlink: 'syz.0.1411': attribute type 2 has an invalid length. [ 225.985035][T11777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1411'. [ 226.026089][T11777] : entered promiscuous mode [ 226.187005][T11787] FAULT_INJECTION: forcing a failure. [ 226.187005][T11787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 226.187034][T11787] CPU: 0 UID: 0 PID: 11787 Comm: syz.2.1414 Not tainted syzkaller #0 PREEMPT(full) [ 226.187051][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.187060][T11787] Call Trace: [ 226.187066][T11787] [ 226.187072][T11787] dump_stack_lvl+0xe8/0x150 [ 226.187098][T11787] should_fail_ex+0x410/0x560 [ 226.187119][T11787] prepare_alloc_pages+0x223/0x600 [ 226.187140][T11787] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 226.187160][T11787] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 226.187179][T11787] ? __pfx_policy_nodemask+0x10/0x10 [ 226.187197][T11787] ? __get_vm_area_node+0x155/0x2f0 [ 226.187215][T11787] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 226.187236][T11787] ? __vmalloc_noprof+0xd2/0x120 [ 226.187255][T11787] ? bpf_prog_calc_tag+0x51/0x370 [ 226.187272][T11787] ? check_and_resolve_insns+0xbb/0x21d0 [ 226.187293][T11787] ? bpf_prog_load+0x14d6/0x1c20 [ 226.187309][T11787] ? __sys_bpf+0xd0d/0xd90 [ 226.187325][T11787] ? __x64_sys_bpf+0xba/0xd0 [ 226.187338][T11787] ? do_syscall_64+0x166/0x520 [ 226.187358][T11787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.187376][T11787] alloc_pages_mpol+0x21e/0x390 [ 226.187400][T11787] alloc_pages_noprof+0xb1/0x2b0 [ 226.187421][T11787] get_free_pages_noprof+0xf/0x80 [ 226.187440][T11787] __kasan_populate_vmalloc+0x38/0x1c0 [ 226.187457][T11787] ? do_raw_spin_unlock+0xf5/0x200 [ 226.187484][T11787] alloc_vmap_area+0xd1a/0x1420 [ 226.187519][T11787] ? __pfx_alloc_vmap_area+0x10/0x10 [ 226.187536][T11787] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 226.187552][T11787] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 226.187566][T11787] ? __get_vm_area_node+0x155/0x2f0 [ 226.187588][T11787] __get_vm_area_node+0x200/0x2f0 [ 226.187614][T11787] __vmalloc_node_range_noprof+0x343/0x1540 [ 226.187639][T11787] ? bpf_prog_calc_tag+0x51/0x370 [ 226.187659][T11787] ? lock_acquire+0x115/0x350 [ 226.187694][T11787] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 226.187722][T11787] ? bpf_verifier_vlog+0x58d/0x900 [ 226.187744][T11787] ? bpf_prog_calc_tag+0x51/0x370 [ 226.187764][T11787] __vmalloc_noprof+0xd2/0x120 [ 226.187789][T11787] ? bpf_prog_calc_tag+0x51/0x370 [ 226.187812][T11787] bpf_prog_calc_tag+0x51/0x370 [ 226.187836][T11787] check_and_resolve_insns+0xbb/0x21d0 [ 226.187861][T11787] ? add_subprog+0x2e2/0x3f0 [ 226.187882][T11787] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 226.187912][T11787] bpf_check+0x18f9/0x2ef0 [ 226.187948][T11787] ? __pfx_bpf_check+0x10/0x10 [ 226.187983][T11787] ? bpf_obj_name_cpy+0x194/0x1e0 [ 226.188012][T11787] bpf_prog_load+0x14d6/0x1c20 [ 226.188044][T11787] ? __pfx_bpf_prog_load+0x10/0x10 [ 226.188086][T11787] __sys_bpf+0xd0d/0xd90 [ 226.188113][T11787] ? __pfx___sys_bpf+0x10/0x10 [ 226.188144][T11787] ? __fget_files+0x2a/0x420 [ 226.188183][T11787] ? ksys_write+0x242/0x270 [ 226.188214][T11787] ? __pfx_ksys_write+0x10/0x10 [ 226.188247][T11787] __x64_sys_bpf+0xba/0xd0 [ 226.188270][T11787] do_syscall_64+0x166/0x520 [ 226.188297][T11787] ? trace_irq_disable+0x3b/0x140 [ 226.188317][T11787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.188337][T11787] ? clear_bhb_loop+0x70/0xc0 [ 226.188361][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.188381][T11787] RIP: 0033:0x7fcd14f9e159 [ 226.188399][T11787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.188416][T11787] RSP: 002b:00007fcd15e31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.188438][T11787] RAX: ffffffffffffffda RBX: 00007fcd15225fa0 RCX: 00007fcd14f9e159 [ 226.188453][T11787] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 226.188465][T11787] RBP: 00007fcd15e31090 R08: 0000000000000000 R09: 0000000000000000 [ 226.188478][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.188490][T11787] R13: 00007fcd15226038 R14: 00007fcd15225fa0 R15: 00007ffd1619d998 [ 226.188521][T11787] [ 226.190067][T11779] bond8 (unregistering): Released all slaves [ 226.272464][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.272643][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.273977][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.274144][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.274291][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.274441][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.274586][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.277771][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.277951][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.278111][T11791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 226.888156][T11805] netlink: 'syz.3.1418': attribute type 2 has an invalid length. [ 226.930803][T11809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1419'. [ 226.952238][T11809] netlink: 'syz.2.1419': attribute type 4 has an invalid length. [ 226.952260][T11809] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1419'. [ 227.305103][T11815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.380379][T11815] xt_policy: output policy not valid in PREROUTING and INPUT [ 227.636951][T11824] netlink: 'syz.0.1424': attribute type 11 has an invalid length. [ 227.864160][T11832] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.146843][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.147480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.464816][T11863] __nla_validate_parse: 3 callbacks suppressed [ 231.464838][T11863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1433'. [ 231.464853][T11863] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1433'. [ 231.464904][T11863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1433'. [ 231.991816][T11880] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1439'. [ 231.994356][T11892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1442'. [ 232.228813][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 232.228851][T11901] netlink: 'syz.1.1444': attribute type 30 has an invalid length. [ 232.263422][T11901] vxlan2: entered promiscuous mode [ 232.263451][T11901] vxlan2: entered allmulticast mode [ 232.289805][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 232.289841][T11902] netlink: 'syz.1.1444': attribute type 30 has an invalid length. [ 232.437177][T11902] vxlan2: entered promiscuous mode [ 232.437205][T11902] vxlan2: entered allmulticast mode [ 232.505751][T11907] bridge4: entered promiscuous mode [ 232.505812][T11907] bridge4: entered allmulticast mode [ 232.508783][T11910] C: renamed from veth1_to_team (while UP) [ 232.530996][T11910] netlink: 'syz.3.1446': attribute type 3 has an invalid length. [ 232.531020][T11910] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1446'. [ 232.531036][T11910] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 232.569027][T11910] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1446'. [ 232.848648][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 233.733941][ T50] bond0: (slave team0): link status definitely down, disabling slave [ 233.771303][ T50] bond0: now running without any active interface! [ 233.847344][T11977] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 233.896796][T11977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.976591][ T981] IPVS: starting estimator thread 0... [ 234.049991][ T7245] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.061946][T11983] IPVS: using max 32 ests per chain, 76800 per kthread [ 234.120160][T11977] bond5: (slave veth7): Enslaving as an active interface with a down link [ 234.150638][T11982] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 234.167688][T11982] bond5: (slave batadv2): making interface the new active one [ 234.169113][T11982] batadv2: entered promiscuous mode [ 234.170645][T11982] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 234.306970][ T7247] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.335955][T11990] ip_tables: iptables: counters copy to user failed while replacing table [ 234.621703][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.090292][T12025] netlink: 'syz.1.1475': attribute type 30 has an invalid length. [ 235.147383][T12015] tipc: Resetting bearer [ 235.147802][T12015] tipc: Resetting bearer [ 235.151745][ T50] bond5: (slave gretap2): link status up again after 0 ms [ 235.171525][ T50] bond5: (slave gretap2): link status up again after 0 ms [ 235.191720][ T50] bond5: (slave gretap2): link status up again after 0 ms [ 235.214066][ T981] bond5: (slave gretap2): link status up again after 0 ms [ 235.231693][ T40] bond5: (slave gretap2): link status up again after 0 ms [ 235.253550][ T981] bond5: (slave gretap2): link status up again after 0 ms [ 235.253582][ T981] bond5: (slave gretap2): failed to get link speed/duplex [ 235.254230][T12025] netlink: 'syz.1.1475': attribute type 30 has an invalid length. [ 235.361918][ T981] bond5: (slave gretap2): failed to get link speed/duplex [ 235.472034][ T40] bond5: (slave gretap2): failed to get link speed/duplex [ 235.537112][T12047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.585045][ T40] bond5: (slave gretap2): failed to get link speed/duplex [ 236.402813][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.402933][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.403033][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.403340][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.403460][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.450514][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.450608][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.450704][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.450782][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.450859][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.450936][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.451017][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.451096][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.451174][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.451253][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.517987][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.518088][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.518181][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.518258][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.518352][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.518435][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.518690][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.518791][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.518869][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.518948][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.519035][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.519114][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.519212][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.519293][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.519371][T12067] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 236.586207][T12067] __nla_validate_parse: 10 callbacks suppressed [ 236.586228][T12067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1485'. [ 236.672883][T12072] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 236.672999][T12072] syzkaller1: linktype set to 825 [ 237.181199][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 237.298713][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'. [ 237.300956][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'. [ 237.903025][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 237.923036][T12135] tipc: Enabling of bearer rejected, failed to enable media [ 237.976370][T12133] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1505'. [ 237.976591][T12133] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1505'. [ 237.976617][T12133] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 238.226774][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 238.277754][T12147] vlan2: entered allmulticast mode [ 238.278104][T12147] bridge0: port 1(vlan2) entered blocking state [ 238.278283][T12147] bridge0: port 1(vlan2) entered disabled state [ 238.288208][T12147] vlan2: entered promiscuous mode [ 238.288236][T12147] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 238.479881][T12159] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1513'. [ 238.479916][T12159] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1513'. [ 238.919985][T12191] bridge0: port 3(bridge_slave_0) entered blocking state [ 238.920121][T12191] bridge0: port 3(bridge_slave_0) entered disabled state [ 238.920322][T12191] bridge_slave_0: entered allmulticast mode [ 238.946142][T12191] bridge_slave_0: entered promiscuous mode [ 238.950671][T12191] bridge0: port 3(bridge_slave_0) entered blocking state [ 238.950783][T12191] bridge0: port 3(bridge_slave_0) entered forwarding state [ 238.987752][T12191] bridge_slave_0: left allmulticast mode [ 238.987797][T12191] bridge_slave_0: left promiscuous mode [ 238.988053][T12191] bridge0: port 3(bridge_slave_0) entered disabled state [ 239.668549][T12237] Bluetooth: hci0: unsupported parameter 5135 [ 239.668575][T12237] Bluetooth: hci0: unsupported parameter 8192 [ 239.668591][T12237] Bluetooth: hci0: unsupported parameter 5135 [ 239.668605][T12237] Bluetooth: hci0: unsupported parameter 8192 [ 239.871975][T12247] netlink: 'syz.3.1530': attribute type 16 has an invalid length. [ 239.871998][T12247] netlink: 'syz.3.1530': attribute type 17 has an invalid length. [ 240.000326][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.034939][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.112628][T12246] tipc: Resetting bearer [ 240.112901][T12246] tipc: Resetting bearer [ 240.218483][T12247] gre0: left promiscuous mode [ 240.218504][T12247] gre0: left allmulticast mode [ 240.262049][T12257] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 240.281362][T12247] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.281550][T12247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.293613][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.293725][T12247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.351543][T12247] 0: left allmulticast mode [ 240.351568][T12247] hsr_slave_0: left allmulticast mode [ 240.351582][T12247] hsr_slave_1: left allmulticast mode [ 240.353026][T12247] net_ratelimit: 37 callbacks suppressed [ 240.353043][T12247] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 240.360214][ T6228] bond5: (slave gretap2): failed to get link speed/duplex [ 240.480181][T12262] netlink: 'syz.2.1534': attribute type 1 has an invalid length. [ 240.582241][ T6228] bond5: (slave gretap2): failed to get link speed/duplex [ 240.698694][ T6228] bond5: (slave gretap2): failed to get link speed/duplex [ 240.804054][ T171] bond5: (slave gretap2): failed to get link speed/duplex [ 240.873019][T12278] xt_LOG: level 125 >= 8 [ 240.944465][ T1291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.944726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.714779][T12292] __nla_validate_parse: 74 callbacks suppressed [ 241.714836][T12292] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1541'. [ 241.731502][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 241.864416][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 241.991154][ T6232] bond5: (slave gretap2): failed to get link speed/duplex [ 242.098793][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1547'. [ 242.291169][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 242.520991][T12336] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1557'. [ 242.573943][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'. [ 242.573973][T12336] block nbd1: Unsupported socket: should be TCP or UNIX. [ 242.617181][T12340] tipc: Resetting bearer [ 242.702404][T12345] 8021q: VLANs not supported on ip6tnl0 [ 242.934967][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 243.131872][T12366] syzkaller0: entered promiscuous mode [ 243.131896][T12366] syzkaller0: entered allmulticast mode [ 243.251379][T12377] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1568'. [ 243.286733][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 243.421129][T12377] bond0: (slave bond_slave_0): Releasing backup interface [ 243.491214][T12381] syzkaller0: left promiscuous mode [ 243.491238][T12381] syzkaller0: left allmulticast mode [ 243.495338][T12381] tipc: Resetting bearer [ 243.496289][T12383] tipc: Enabling of bearer rejected, already enabled [ 243.618688][T12400] xt_IDLETIMER: timeout value is too big [ 243.635379][T12401] xt_IDLETIMER: timeout value is too big [ 244.039904][T12412] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1577'. [ 244.128406][T12408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1575'. [ 244.137377][T12413] x_tables: duplicate underflow at hook 3 [ 244.893302][T12455] tipc: Failed to remove unknown binding: 66,0,0/0:2258381759/2258381762 [ 244.893333][T12455] tipc: Failed to remove unknown binding: 66,0,0/0:2258381759/2258381761 [ 244.893363][T12455] tipc: Failed to remove unknown binding: 66,0,0/0:2258381759/2258381760 [ 244.947662][T12456] tipc: Failed to remove unknown binding: 66,0,0/0:2258381759/2258381762 [ 244.947879][T12456] tipc: Failed to remove unknown binding: 66,0,0/0:2258381759/2258381761 [ 244.947902][T12456] tipc: Failed to remove unknown binding: 66,0,0/0:2258381759/2258381760 [ 245.224356][T12465] smbdirect: ib_dev[s`z1] removed [ 245.332428][ T171] batadv2: left promiscuous mode [ 245.432692][ T171] net_ratelimit: 35 callbacks suppressed [ 245.432715][ T171] bond5: (slave gretap2): failed to get link speed/duplex [ 245.451614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.502970][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.541566][ T981] bond5: (slave gretap2): failed to get link speed/duplex [ 245.620222][T12486] xfrm1: entered allmulticast mode [ 245.651704][ T171] bond5: (slave gretap2): failed to get link speed/duplex [ 245.788052][T12492] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 245.821931][ T981] bond5: (slave gretap2): failed to get link speed/duplex [ 245.931718][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 246.041965][ T171] bond5: (slave gretap2): failed to get link speed/duplex [ 246.142474][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.753145][T12526] tipc: New replicast peer: 255.255.255.255 [ 246.753542][T12526] tipc: Enabled bearer , priority 10 [ 246.757155][T12526] __nla_validate_parse: 3 callbacks suppressed [ 246.757173][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 246.764018][T12526] netlink: 'syz.3.1604': attribute type 1 has an invalid length. [ 246.902166][T12526] bond2: entered promiscuous mode [ 246.907776][T12526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.925507][T12530] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1605'. [ 246.951798][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1604'. [ 246.951940][T12526] bond2: entered allmulticast mode [ 247.023314][T12526] bond2: (slave bridge4): making interface the new active one [ 247.023340][T12526] bridge4: entered promiscuous mode [ 247.030693][T12526] bridge4: entered allmulticast mode [ 247.055642][T12526] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 247.304058][T12546] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.410336][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 247.429801][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 247.429836][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 247.561612][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1610'. [ 247.562046][T12563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1610'. [ 247.602868][ T5619] block nbd1: Receive control failed (result -32) [ 247.605417][ T5618] block nbd1: Receive control failed (result -32) [ 247.718449][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 247.918452][ T31] audit: type=1800 audit(1791150050.869:4): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1620" name=B702 dev="tmpfs" ino=1704 res=0 errno=0 [ 248.849958][T12602] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1628'. [ 248.995140][T12614] netlink: 'syz.4.1631': attribute type 1 has an invalid length. [ 249.086918][T12614] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.127476][T12626] bond8: entered promiscuous mode [ 249.127503][T12626] bond8: entered allmulticast mode [ 249.936712][T12672] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 250.143935][T12680] netlink: 'syz.0.1646': attribute type 3 has an invalid length. [ 250.148441][T12679] macvtap0: entered promiscuous mode [ 250.369725][T12689] netlink: 'syz.4.1648': attribute type 10 has an invalid length. [ 250.449163][T12689] team0 (unregistering): Port device team_slave_0 removed [ 250.523652][T12689] team0 (unregistering): Port device team_slave_1 removed [ 250.560589][T12694] netlink: 'syz.2.1649': attribute type 2 has an invalid length. [ 250.611823][ T981] net_ratelimit: 41 callbacks suppressed [ 250.611845][ T981] bond5: (slave gretap2): failed to get link speed/duplex [ 250.723617][ T171] bond5: (slave gretap2): failed to get link speed/duplex [ 250.765378][T12694] netlink: 'syz.2.1649': attribute type 2 has an invalid length. [ 250.834036][ T6232] bond5: (slave gretap2): failed to get link speed/duplex [ 250.886428][T12713] FAULT_INJECTION: forcing a failure. [ 250.886428][T12713] name failslab, interval 1, probability 0, space 0, times 0 [ 250.886461][T12713] CPU: 1 UID: 0 PID: 12713 Comm: syz.1.1653 Not tainted syzkaller #0 PREEMPT(full) [ 250.886484][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.886524][T12713] Call Trace: [ 250.886532][T12713] [ 250.886540][T12713] dump_stack_lvl+0xe8/0x150 [ 250.886574][T12713] should_fail_ex+0x410/0x560 [ 250.886602][T12713] should_failslab+0xa8/0x100 [ 250.886629][T12713] __kvmalloc_node_noprof+0x176/0x820 [ 250.886651][T12713] ? kasan_save_track+0x3e/0x80 [ 250.886671][T12713] ? __kvmalloc_node_noprof+0x50f/0x820 [ 250.886691][T12713] ? bpf_stack_liveness_init+0x29/0x90 [ 250.886713][T12713] ? bpf_check+0x2641/0x2ef0 [ 250.886732][T12713] ? bpf_compute_const_regs+0x18f/0x3450 [ 250.886755][T12713] ? bpf_compute_const_regs+0x18f/0x3450 [ 250.886786][T12713] bpf_compute_const_regs+0x18f/0x3450 [ 250.886833][T12713] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 250.886856][T12713] ? check_attach_btf_id+0x325/0x1a30 [ 250.886883][T12713] ? rcu_is_watching+0x16/0xb0 [ 250.886905][T12713] ? bpf_stack_liveness_init+0x29/0x90 [ 250.886925][T12713] ? trace_kmalloc+0x2a/0xf0 [ 250.886942][T12713] ? __pfx_check_attach_btf_id+0x10/0x10 [ 250.886965][T12713] ? bpf_stack_liveness_init+0x29/0x90 [ 250.886986][T12713] ? __kvmalloc_node_noprof+0x52f/0x820 [ 250.887017][T12713] ? __asan_memset+0x22/0x50 [ 250.887039][T12713] bpf_check+0x26ae/0x2ef0 [ 250.887077][T12713] ? __pfx_bpf_check+0x10/0x10 [ 250.887102][T12713] ? bpf_obj_name_cpy+0x194/0x1e0 [ 250.887133][T12713] bpf_prog_load+0x14d6/0x1c20 [ 250.887168][T12713] ? __pfx_bpf_prog_load+0x10/0x10 [ 250.887215][T12713] __sys_bpf+0xd0d/0xd90 [ 250.887291][T12713] ? __pfx___sys_bpf+0x10/0x10 [ 250.887322][T12713] ? __fget_files+0x2a/0x420 [ 250.887363][T12713] ? ksys_write+0x242/0x270 [ 250.887393][T12713] ? __pfx_ksys_write+0x10/0x10 [ 250.887425][T12713] __x64_sys_bpf+0xba/0xd0 [ 250.887447][T12713] do_syscall_64+0x166/0x520 [ 250.887473][T12713] ? trace_irq_disable+0x3b/0x140 [ 250.887492][T12713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.887513][T12713] ? clear_bhb_loop+0x70/0xc0 [ 250.887536][T12713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.887555][T12713] RIP: 0033:0x7f1e7cf9e159 [ 250.887574][T12713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.887591][T12713] RSP: 002b:00007f1e7ddec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.887613][T12713] RAX: ffffffffffffffda RBX: 00007f1e7d225fa0 RCX: 00007f1e7cf9e159 [ 250.887628][T12713] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 250.887642][T12713] RBP: 00007f1e7ddec090 R08: 0000000000000000 R09: 0000000000000000 [ 250.887654][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.887665][T12713] R13: 00007f1e7d226038 R14: 00007f1e7d225fa0 R15: 00007fffa98cfa18 [ 250.887696][T12713] [ 250.942219][ T171] bond5: (slave gretap2): failed to get link speed/duplex [ 251.052523][ T981] bond5: (slave gretap2): failed to get link speed/duplex [ 251.162495][ T6232] bond5: (slave gretap2): failed to get link speed/duplex [ 251.261943][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.276863][ T6225] bond5: (slave gretap2): failed to get link speed/duplex [ 251.385972][ T59] bond5: (slave gretap2): failed to get link speed/duplex [ 251.408215][T12727] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 251.538140][ T1291] bond5: (slave gretap2): failed to get link speed/duplex [ 251.873088][T12729] netlink: 'syz.1.1655': attribute type 6 has an invalid length. [ 251.888627][T12744] __nla_validate_parse: 5 callbacks suppressed [ 251.888655][T12744] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1659'. [ 251.899751][T12739] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1659'. [ 252.530143][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1667'. [ 252.637975][T12779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1667'. [ 252.638011][T12779] bond9: entered allmulticast mode [ 252.662848][T12779] bridge2: entered allmulticast mode [ 252.663244][T12779] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 252.716122][T12784] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1671'. [ 253.193065][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 253.523228][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'. [ 253.548753][T12811] netlink: 'syz.0.1677': attribute type 21 has an invalid length. [ 253.548778][T12811] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1677'. [ 253.616270][T12810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1678'. [ 253.826861][T12808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.826890][T12808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.160402][T12808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.160425][T12808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.196857][T12811] netlink: 'syz.0.1677': attribute type 5 has an invalid length. [ 254.196880][T12811] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1677'. [ 255.565824][T12862] netlink: 'syz.3.1695': attribute type 16 has an invalid length. [ 255.613209][T12865] IPVS: length: 59 != 24 [ 255.642578][ T1291] net_ratelimit: 32 callbacks suppressed [ 255.642599][ T1291] bond5: (slave gretap2): failed to get link speed/duplex [ 255.747419][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.747477][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.753438][ T50] bond5: (slave gretap2): failed to get link speed/duplex [ 255.862949][ T6228] bond5: (slave gretap2): failed to get link speed/duplex [ 255.905606][T12875] ip_tables: iptables: counters copy to user failed while replacing table [ 255.972275][ T1291] bond5: (slave gretap2): failed to get link speed/duplex [ 256.075906][T12890] A link change request failed with some changes committed already. Interface 26t may have been left with an inconsistent configuration, please check. [ 256.092482][ T6228] bond5: (slave gretap2): failed to get link speed/duplex [ 256.201668][ T1291] bond5: (slave gretap2): failed to get link speed/duplex [ 256.258264][T12895] netlink: 'syz.0.1702': attribute type 3 has an invalid length. [ 256.312559][ T6228] bond5: (slave gretap2): failed to get link speed/duplex [ 256.421796][ T6228] bond5: (slave gretap2): failed to get link speed/duplex [ 257.968979][T12949] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.995321][T12956] __nla_validate_parse: 8 callbacks suppressed [ 257.995344][T12956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1720'. [ 257.999733][T12952] netlink: 'syz.4.1718': attribute type 2 has an invalid length. [ 258.663448][T12989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1727'. [ 258.735147][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 259.600768][T13013] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1733'. [ 259.628018][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1739'. [ 260.079466][T13068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1743'. [ 260.250436][T13076] syzkaller0: entered promiscuous mode [ 260.250460][T13076] syzkaller0: entered allmulticast mode [ 260.251006][T13076] tipc: Resetting bearer [ 260.342246][T13079] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1748'. [ 260.342761][T13079] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1748'. [ 260.365435][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1748'. [ 260.563683][T13091] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1749'. [ 260.748264][T13093] : renamed from virt_wifi0 [ 260.772637][ T6226] net_ratelimit: 42 callbacks suppressed [ 260.772660][ T6226] bond5: (slave gretap2): failed to get link speed/duplex [ 260.882079][ T6232] bond5: (slave gretap2): failed to get link speed/duplex [ 260.948907][T13109] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 261.111615][ T6232] bond5: (slave gretap2): failed to get link speed/duplex [ 261.160315][T13114] netlink: 'syz.3.1760': attribute type 11 has an invalid length. [ 261.207865][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.208035][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.208140][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.208528][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.208668][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.208819][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.580449][T13126] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 261.841234][T13144] FAULT_INJECTION: forcing a failure. [ 261.841234][T13144] name failslab, interval 1, probability 0, space 0, times 0 [ 261.841267][T13144] CPU: 1 UID: 0 PID: 13144 Comm: syz.4.1767 Not tainted syzkaller #0 PREEMPT(full) [ 261.841290][T13144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.841301][T13144] Call Trace: [ 261.841308][T13144] [ 261.841318][T13144] dump_stack_lvl+0xe8/0x150 [ 261.841348][T13144] should_fail_ex+0x410/0x560 [ 261.841373][T13144] should_failslab+0xa8/0x100 [ 261.841396][T13144] __kvmalloc_node_noprof+0x176/0x820 [ 261.841419][T13144] ? bpf_compute_scc+0xb8/0xb10 [ 261.841436][T13144] ? bpf_compute_scc+0xb8/0xb10 [ 261.841460][T13144] bpf_compute_scc+0xb8/0xb10 [ 261.841493][T13144] bpf_check+0x2720/0x2ef0 [ 261.841527][T13144] ? __pfx_bpf_check+0x10/0x10 [ 261.841551][T13144] ? bpf_obj_name_cpy+0x194/0x1e0 [ 261.841582][T13144] bpf_prog_load+0x14d6/0x1c20 [ 261.841613][T13144] ? __pfx_bpf_prog_load+0x10/0x10 [ 261.841657][T13144] __sys_bpf+0xd0d/0xd90 [ 261.841684][T13144] ? __pfx___sys_bpf+0x10/0x10 [ 261.841724][T13144] ? __fget_files+0x2a/0x420 [ 261.841767][T13144] ? ksys_write+0x242/0x270 [ 261.841797][T13144] ? __pfx_ksys_write+0x10/0x10 [ 261.841831][T13144] __x64_sys_bpf+0xba/0xd0 [ 261.841853][T13144] do_syscall_64+0x166/0x520 [ 261.841879][T13144] ? trace_irq_disable+0x3b/0x140 [ 261.841897][T13144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.841915][T13144] ? clear_bhb_loop+0x70/0xc0 [ 261.841936][T13144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.841953][T13144] RIP: 0033:0x7f9c17b9e159 [ 261.841971][T13144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.841986][T13144] RSP: 002b:00007f9c18a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.842005][T13144] RAX: ffffffffffffffda RBX: 00007f9c17e26090 RCX: 00007f9c17b9e159 [ 261.842018][T13144] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 261.842029][T13144] RBP: 00007f9c18a94090 R08: 0000000000000000 R09: 0000000000000000 [ 261.842040][T13144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.842051][T13144] R13: 00007f9c17e26128 R14: 00007f9c17e26090 R15: 00007ffeb61a1fb8 [ 261.842078][T13144] [ 262.699247][T13176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.855203][T13187] syzkaller0: entered promiscuous mode [ 262.855224][T13187] syzkaller0: entered allmulticast mode [ 262.855533][T13187] tipc: Resetting bearer [ 262.859698][T13184] t: entered promiscuous mode [ 262.863579][T13184] tunl0: entered promiscuous mode [ 262.888998][T13184] gre0: entered promiscuous mode [ 262.926688][T13184] gretap0: entered promiscuous mode [ 262.943251][T13184] erspan0: entered promiscuous mode [ 262.948035][T13184] ip_vti0: entered promiscuous mode [ 262.950700][T13184] ip6_vti0: entered promiscuous mode [ 262.979609][T13184] sit0: entered promiscuous mode [ 262.990302][T13184] ip6tnl0: entered promiscuous mode [ 262.999997][T13184] ip6gre0: entered promiscuous mode [ 263.020193][T13184] syz_tun: entered promiscuous mode [ 263.034396][T13184] ip6gretap0: entered promiscuous mode [ 263.065369][T13184] vcan0: entered promiscuous mode [ 263.067445][T13184] bond0: entered promiscuous mode [ 263.100497][T13184] team0: entered promiscuous mode [ 263.119576][T13184] nlmon0: entered promiscuous mode [ 263.131550][T13184] batadv0: entered promiscuous mode [ 263.149706][T13184] vxcan0: entered promiscuous mode [ 263.171558][T13184] vxcan1: entered promiscuous mode [ 263.172931][T13184] veth0: entered promiscuous mode [ 263.179546][T13184] veth1: entered promiscuous mode [ 263.195755][T13184] wg0: entered promiscuous mode [ 263.217965][T13184] wg1: entered promiscuous mode [ 263.234610][T13184] wg2: entered promiscuous mode [ 263.237913][T13184] veth0_to_bridge: entered promiscuous mode [ 263.261254][T13184] bridge_slave_0: entered promiscuous mode [ 263.280768][T13184] veth1_to_bridge: entered promiscuous mode [ 263.303166][T13184] bridge_slave_1: entered promiscuous mode [ 263.305560][T13184] veth0_to_bond: entered promiscuous mode [ 263.305744][T13184] bond_slave_0: entered promiscuous mode [ 263.306103][T13184] veth1_to_bond: entered promiscuous mode [ 263.308849][T13184] bond_slave_1: entered promiscuous mode [ 263.309270][T13184] veth0_to_team: entered promiscuous mode [ 263.357445][T13184] team_slave_0: entered promiscuous mode [ 263.360294][T13184] veth1_to_team: entered promiscuous mode [ 263.376782][T13184] team_slave_1: entered promiscuous mode [ 263.377335][T13184] veth0_to_batadv: entered promiscuous mode [ 263.380483][T13184] batadv_slave_0: entered promiscuous mode [ 263.408086][T13184] veth1_to_batadv: entered promiscuous mode [ 263.411041][T13184] batadv_slave_1: entered promiscuous mode [ 263.429895][T13184] xfrm0: entered promiscuous mode [ 263.441220][T13184] veth0_to_hsr: entered promiscuous mode [ 263.454401][T13184] veth1_to_hsr: entered promiscuous mode [ 263.460149][T13184] hsr0: entered promiscuous mode [ 263.463350][T13184] veth1_virt_wifi: entered promiscuous mode [ 263.465858][T13184] veth0_virt_wifi: entered promiscuous mode [ 263.468250][T13184] virt_wifi0: entered promiscuous mode [ 263.473810][T13184] vlan1: entered promiscuous mode [ 263.486142][T13184] macvlan0: entered promiscuous mode [ 263.499250][T13184] macvlan1: entered promiscuous mode [ 263.507150][T13184] ipvlan0: entered promiscuous mode [ 263.507332][T13184] ipvlan1: entered promiscuous mode [ 263.528719][T13184] macvtap0: entered promiscuous mode [ 263.541907][T13184] macsec0: entered promiscuous mode [ 263.550217][T13184] geneve0: entered promiscuous mode [ 263.563350][T13184] geneve1: entered promiscuous mode [ 263.578668][T13184] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 263.603840][T13184] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 263.626305][T13184] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 263.646282][T13184] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 263.648450][T13184] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 263.648641][T13184] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 263.648792][T13184] veth2: entered promiscuous mode [ 263.648940][T13184] veth3: entered promiscuous mode [ 263.649083][T13184] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 263.649339][T13184] syztnl0: entered promiscuous mode [ 263.649488][T13184] bond1: entered promiscuous mode [ 263.649615][T13184] geneve2: entered promiscuous mode [ 263.649757][T13184] batadv1: entered promiscuous mode [ 263.684305][T13184] bond2: entered promiscuous mode [ 263.684333][T13184] batadv2: entered promiscuous mode [ 263.707874][T13184] veth4: entered promiscuous mode [ 263.736255][T13184] veth5: entered promiscuous mode [ 263.746574][T13184] bond3: entered promiscuous mode [ 263.746593][T13184] gretap1: entered promiscuous mode [ 263.750380][T13184] ip6erspan0: entered promiscuous mode [ 263.757497][T13184] bond4: entered promiscuous mode [ 263.769435][T13184] vxlan0: entered promiscuous mode [ 263.786631][T13184] bond5: entered promiscuous mode [ 263.786655][T13184] gretap2: entered promiscuous mode [ 263.794127][T13184] bridge1: entered promiscuous mode [ 263.818632][T13184] vlan2: entered promiscuous mode [ 263.823141][T13184] bond8: left allmulticast mode [ 263.823162][T13184] ip6gretap1: left allmulticast mode [ 263.844501][T13184] syztnl2: entered promiscuous mode [ 263.844595][T13184] gtp0: entered promiscuous mode [ 263.844734][T13184] ipip0: entered promiscuous mode [ 263.845329][T13184] tipc: Resetting bearer [ 263.846051][T13184] gtp1: entered promiscuous mode [ 263.846144][T13184] vcan1: entered promiscuous mode [ 263.846221][T13184] veth6: entered promiscuous mode [ 263.846306][T13184] veth7: entered promiscuous mode [ 263.846702][T13184] vxlan1: entered promiscuous mode [ 263.848070][T13184] gtp2: entered promiscuous mode [ 263.850824][T13184] bridge3: entered promiscuous mode [ 263.856807][T13184] mac80211_hwsim hwsim32 wlan3: entered promiscuous mode [ 263.856973][T13184] mac80211_hwsim hwsim33 wlan4: entered promiscuous mode [ 263.857223][T13184] bareudp0: entered promiscuous mode [ 263.857371][T13184] bond9: entered promiscuous mode [ 263.857484][T13184] ip6tnl1: entered promiscuous mode [ 264.017856][T13222] tipc: Enabled bearer , priority 10 [ 264.085141][T13220] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 264.089500][ T6228] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.089790][ T6228] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.089840][ T6228] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.089863][ T6228] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.089896][ T6228] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.089920][ T6228] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.089961][ T6228] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.089985][ T6228] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.989742][T13260] __nla_validate_parse: 8 callbacks suppressed [ 264.989763][T13260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1794'. [ 265.017132][T13261] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1794'. [ 265.787142][T13295] syzkaller1: entered promiscuous mode [ 265.787168][T13295] syzkaller1: entered allmulticast mode [ 265.993650][T13312] net_ratelimit: 245 callbacks suppressed [ 265.993673][T13312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.273539][T13317] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 266.410488][T13317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1805'. [ 266.646939][T13332] Cannot find map_set index 2 as target [ 266.950099][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'. [ 266.964470][T13333] bond6: option primary_reselect: invalid value (6) [ 266.981916][T13333] bond6 (unregistering): Released all slaves [ 267.114715][T13346] tipc: Enabling of bearer rejected, already enabled [ 267.180840][T13344] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1810'. [ 267.186862][T13346] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65500) ! [ 267.196568][T13346] tipc: Resetting bearer [ 267.511261][T13372] IPv6: Can't replace route, no match found [ 267.903560][ T6226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.903788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.451650][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'. [ 268.453550][T13388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1820'. [ 269.130297][T13409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1823'. [ 269.535768][T13420] ip_tables: iptables: counters copy to user failed while replacing table [ 269.572025][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 269.572153][T13420] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1828'. [ 269.840060][T13437] PKCS7: Unknown OID: [4] (bad) [ 269.840082][T13437] PKCS7: Only support pkcs7_signedData type [ 270.178211][ T31] audit: type=1800 audit(1791150073.129:5): pid=13455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1836" name="blkio.bfq.group_wait_time" dev="tmpfs" ino=1848 res=0 errno=0 [ 270.244597][T13461] openvswitch: netlink: Key type 354 is out of range max 32 [ 270.877617][T13491] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1844'. [ 270.970698][T13497] tipc: Resetting bearer [ 271.000223][T13497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.010910][T13497] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.022872][T13497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.107146][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.242786][T13497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.242814][T13497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.246468][T13497] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 271.298652][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1850'. [ 271.379324][T13503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.494246][T13514] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 271.498061][T13514] bond3 (unregistering): Released all slaves [ 271.534039][T13507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.538428][T13522] netlink: 'syz.2.1852': attribute type 1 has an invalid length. [ 271.696149][T13522] bond6: entered promiscuous mode [ 271.696657][T13522] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.797439][T13532] syzkaller0: left promiscuous mode [ 271.797461][T13532] syzkaller0: left allmulticast mode [ 271.852215][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 271.920888][T13539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1857'. [ 271.920939][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'. [ 271.955244][T13539] netlink: 'syz.2.1857': attribute type 2 has an invalid length. [ 272.156589][T13543] pim6reg1: entered promiscuous mode [ 272.156613][T13543] pim6reg1: entered allmulticast mode [ 273.546689][T13567] bridge5: entered promiscuous mode [ 273.546758][T13567] bridge5: entered allmulticast mode [ 273.662816][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.663042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.104439][T13619] netlink: 'syz.1.1866': attribute type 10 has an invalid length. [ 274.204936][T13619] team0: Port device dummy0 added [ 274.362834][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1873'. [ 274.476261][T13626] 8021q: adding VLAN 0 to HW filter on device bond10 [ 274.607567][T13631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1873'. [ 274.685248][T13637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1875'. [ 274.685286][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 274.734908][T13631] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 274.737036][T13631] bond10: (slave batadv3): Enslaving as an active interface with an up link [ 274.750815][T13645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1875'. [ 274.750849][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 274.800431][T13641] ip_tables: iptables: counters copy to user failed while replacing table [ 274.958592][T13642] bond4: entered promiscuous mode [ 274.958624][T13642] bond4: entered allmulticast mode [ 275.460241][T13705] FAULT_INJECTION: forcing a failure. [ 275.460241][T13705] name failslab, interval 1, probability 0, space 0, times 0 [ 275.460275][T13705] CPU: 0 UID: 0 PID: 13705 Comm: syz.0.1883 Not tainted syzkaller #0 PREEMPT(full) [ 275.460298][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.460308][T13705] Call Trace: [ 275.460319][T13705] [ 275.460327][T13705] dump_stack_lvl+0xe8/0x150 [ 275.460359][T13705] should_fail_ex+0x410/0x560 [ 275.460384][T13705] should_failslab+0xa8/0x100 [ 275.460405][T13705] __kvmalloc_node_noprof+0x176/0x820 [ 275.460428][T13705] ? __kvmalloc_node_noprof+0x345/0x820 [ 275.460450][T13705] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 275.460474][T13705] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 275.460503][T13705] bpf_compute_subprog_arg_access+0x187/0x14d0 [ 275.460524][T13705] ? bpf_get_trace_printk_proto+0x48/0x60 [ 275.460551][T13705] ? bpf_tracing_func_proto+0x72/0x180 [ 275.460600][T13705] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 275.460628][T13705] ? __kvmalloc_node_noprof+0x345/0x820 [ 275.460648][T13705] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 275.460668][T13705] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 275.460696][T13705] bpf_compute_live_registers+0x8d3/0x1ff0 [ 275.460736][T13705] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 275.460771][T13705] bpf_check+0x2746/0x2ef0 [ 275.460809][T13705] ? __pfx_bpf_check+0x10/0x10 [ 275.460833][T13705] ? bpf_obj_name_cpy+0x194/0x1e0 [ 275.460864][T13705] bpf_prog_load+0x14d6/0x1c20 [ 275.460895][T13705] ? __pfx_bpf_prog_load+0x10/0x10 [ 275.460941][T13705] __sys_bpf+0xd0d/0xd90 [ 275.460972][T13705] ? __pfx___sys_bpf+0x10/0x10 [ 275.461006][T13705] ? __fget_files+0x2a/0x420 [ 275.461052][T13705] ? ksys_write+0x242/0x270 [ 275.461083][T13705] ? __pfx_ksys_write+0x10/0x10 [ 275.461153][T13705] __x64_sys_bpf+0xba/0xd0 [ 275.461176][T13705] do_syscall_64+0x166/0x520 [ 275.461205][T13705] ? trace_irq_disable+0x3b/0x140 [ 275.461225][T13705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.461246][T13705] ? clear_bhb_loop+0x70/0xc0 [ 275.461271][T13705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.461290][T13705] RIP: 0033:0x7fbed599e159 [ 275.461307][T13705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.461323][T13705] RSP: 002b:00007fbed6859028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.461342][T13705] RAX: ffffffffffffffda RBX: 00007fbed5c26090 RCX: 00007fbed599e159 [ 275.461355][T13705] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 275.461369][T13705] RBP: 00007fbed6859090 R08: 0000000000000000 R09: 0000000000000000 [ 275.461380][T13705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.461393][T13705] R13: 00007fbed5c26128 R14: 00007fbed5c26090 R15: 00007ffebabf7d28 [ 275.461425][T13705] [ 275.862136][T13710] syzkaller1: entered promiscuous mode [ 275.862162][T13710] syzkaller1: entered allmulticast mode [ 275.920215][T13710] __nla_validate_parse: 6 callbacks suppressed [ 275.920234][T13710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1885'. [ 276.092075][T13716] bond0 (unregistering): (slave team0): Releasing backup interface [ 276.097948][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 276.112189][T13716] bond0 (unregistering): Released all slaves [ 276.179680][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 276.304915][T13739] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 276.453156][T13739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.864826][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.944055][T13782] FAULT_INJECTION: forcing a failure. [ 276.944055][T13782] name failslab, interval 1, probability 0, space 0, times 0 [ 276.944089][T13782] CPU: 0 UID: 0 PID: 13782 Comm: syz.3.1897 Not tainted syzkaller #0 PREEMPT(full) [ 276.944112][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.944124][T13782] Call Trace: [ 276.944132][T13782] [ 276.944140][T13782] dump_stack_lvl+0xe8/0x150 [ 276.944173][T13782] should_fail_ex+0x410/0x560 [ 276.944202][T13782] should_failslab+0xa8/0x100 [ 276.944227][T13782] __kvmalloc_node_noprof+0x176/0x820 [ 276.944248][T13782] ? queue_work_on+0x117/0x1d0 [ 276.944274][T13782] ? bpf_compute_subprog_arg_access+0x138/0x14d0 [ 276.944294][T13782] ? bpf_compute_subprog_arg_access+0x138/0x14d0 [ 276.944323][T13782] bpf_compute_subprog_arg_access+0x138/0x14d0 [ 276.944345][T13782] ? bpf_get_trace_printk_proto+0x48/0x60 [ 276.944370][T13782] ? bpf_tracing_func_proto+0x72/0x180 [ 276.944391][T13782] ? bpf_get_call_summary+0x9f8/0xfa0 [ 276.944410][T13782] ? __pfx_bpf_get_call_summary+0x10/0x10 [ 276.944439][T13782] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 276.944465][T13782] ? __kvmalloc_node_noprof+0x345/0x820 [ 276.944484][T13782] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 276.944504][T13782] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 276.944531][T13782] bpf_compute_live_registers+0x8d3/0x1ff0 [ 276.944567][T13782] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 276.944597][T13782] bpf_check+0x2746/0x2ef0 [ 276.944633][T13782] ? __pfx_bpf_check+0x10/0x10 [ 276.944656][T13782] ? bpf_obj_name_cpy+0x194/0x1e0 [ 276.944688][T13782] bpf_prog_load+0x14d6/0x1c20 [ 276.944720][T13782] ? __pfx_bpf_prog_load+0x10/0x10 [ 276.944764][T13782] __sys_bpf+0xd0d/0xd90 [ 276.944790][T13782] ? __pfx___sys_bpf+0x10/0x10 [ 276.944820][T13782] ? __fget_files+0x2a/0x420 [ 276.944857][T13782] ? ksys_write+0x242/0x270 [ 276.944895][T13782] ? __pfx_ksys_write+0x10/0x10 [ 276.944931][T13782] __x64_sys_bpf+0xba/0xd0 [ 276.944951][T13782] do_syscall_64+0x166/0x520 [ 276.944976][T13782] ? trace_irq_disable+0x3b/0x140 [ 276.944996][T13782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.945025][T13782] ? clear_bhb_loop+0x70/0xc0 [ 276.945049][T13782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.945070][T13782] RIP: 0033:0x7f71b439e159 [ 276.945089][T13782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.945107][T13782] RSP: 002b:00007f71b51f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.945128][T13782] RAX: ffffffffffffffda RBX: 00007f71b4626090 RCX: 00007f71b439e159 [ 276.945143][T13782] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 276.945157][T13782] RBP: 00007f71b51f2090 R08: 0000000000000000 R09: 0000000000000000 [ 276.945170][T13782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.945182][T13782] R13: 00007f71b4626128 R14: 00007f71b4626090 R15: 00007fff0848d968 [ 276.945214][T13782] [ 277.358758][T13796] netlink: 'syz.4.1904': attribute type 1 has an invalid length. [ 277.487927][T13796] bond10: entered promiscuous mode [ 277.499073][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 277.521113][T13796] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.541649][T13806] ipvlan0: entered allmulticast mode [ 277.541671][T13806] bond10: entered allmulticast mode [ 277.655687][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 277.655782][T13793] vlan2: left promiscuous mode [ 277.655806][T13793] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 277.657652][T13793] bridge0: port 1(vlan2) entered disabled state [ 277.704130][T13793] bridge_slave_1: left allmulticast mode [ 277.704160][T13793] bridge_slave_1: left promiscuous mode [ 277.704406][T13793] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.826629][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1907'. [ 278.015797][T13823] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 278.172850][T13828] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1910'. [ 278.354476][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 278.469311][T13844] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1913'. [ 278.469311][T13840] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1913'. [ 278.783657][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.783936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.836969][T13857] xt_hashlimit: size too large, truncated to 1048576 [ 278.836990][T13857] xt_hashlimit: max too large, truncated to 1048576 [ 279.081717][T13871] netpci0: tun_chr_ioctl cmd 1074025678 [ 279.081742][T13871] netpci0: group set to 0 [ 279.344713][T13881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.344975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.382944][T13887] tipc: Enabling of bearer rejected, already enabled [ 279.394633][T13887] tipc: Enabled bearer , priority 10 [ 279.406403][T13887] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 280.549744][T13942] lo: entered allmulticast mode [ 280.982814][T13962] FAULT_INJECTION: forcing a failure. [ 280.982814][T13962] name failslab, interval 1, probability 0, space 0, times 0 [ 280.982847][T13962] CPU: 0 UID: 0 PID: 13962 Comm: syz.1.1933 Not tainted syzkaller #0 PREEMPT(full) [ 280.982868][T13962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.982877][T13962] Call Trace: [ 280.982885][T13962] [ 280.982891][T13962] dump_stack_lvl+0xe8/0x150 [ 280.982920][T13962] should_fail_ex+0x410/0x560 [ 280.982946][T13962] should_failslab+0xa8/0x100 [ 280.982973][T13962] __kvmalloc_node_noprof+0x176/0x820 [ 280.982995][T13962] ? rcu_is_watching+0x16/0xb0 [ 280.983015][T13962] ? analyze_subprog+0x4a5a/0x9e00 [ 280.983034][T13962] ? analyze_subprog+0x4a5a/0x9e00 [ 280.983064][T13962] analyze_subprog+0x4a5a/0x9e00 [ 280.983084][T13962] ? fetch_store_string+0x19f/0x260 [ 280.983153][T13962] ? __pfx_analyze_subprog+0x10/0x10 [ 280.983173][T13962] ? __x64_sys_bpf+0xba/0xd0 [ 280.983191][T13962] ? gssp_accept_sec_context_upcall+0xa50/0xf00 [ 280.983210][T13962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.983265][T13962] ? call_instance+0x263/0x560 [ 280.983285][T13962] ? rcu_is_watching+0x16/0xb0 [ 280.983306][T13962] ? call_instance+0x263/0x560 [ 280.983325][T13962] ? trace_kmalloc+0x2a/0xf0 [ 280.983344][T13962] ? call_instance+0x263/0x560 [ 280.983365][T13962] ? __kvmalloc_node_noprof+0x52f/0x820 [ 280.983405][T13962] ? __kvmalloc_node_noprof+0x345/0x820 [ 280.983426][T13962] ? call_instance+0x263/0x560 [ 280.983446][T13962] ? call_instance+0x263/0x560 [ 280.983484][T13962] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 280.983515][T13962] ? bpf_get_trace_printk_proto+0x48/0x60 [ 280.983541][T13962] ? bpf_tracing_func_proto+0x72/0x180 [ 280.983593][T13962] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 280.983622][T13962] ? __kvmalloc_node_noprof+0x345/0x820 [ 280.983643][T13962] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 280.983665][T13962] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 280.983696][T13962] bpf_compute_live_registers+0x8d3/0x1ff0 [ 280.983739][T13962] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 280.983824][T13962] bpf_check+0x2746/0x2ef0 [ 280.983866][T13962] ? __pfx_bpf_check+0x10/0x10 [ 280.983891][T13962] ? bpf_obj_name_cpy+0x194/0x1e0 [ 280.983924][T13962] bpf_prog_load+0x14d6/0x1c20 [ 280.983970][T13962] ? __pfx_bpf_prog_load+0x10/0x10 [ 280.984018][T13962] __sys_bpf+0xd0d/0xd90 [ 280.984048][T13962] ? __pfx___sys_bpf+0x10/0x10 [ 280.984082][T13962] ? __fget_files+0x2a/0x420 [ 280.984128][T13962] ? ksys_write+0x242/0x270 [ 280.984160][T13962] ? __pfx_ksys_write+0x10/0x10 [ 280.984196][T13962] __x64_sys_bpf+0xba/0xd0 [ 280.984220][T13962] do_syscall_64+0x166/0x520 [ 280.984248][T13962] ? trace_irq_disable+0x3b/0x140 [ 280.984267][T13962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.984288][T13962] ? clear_bhb_loop+0x70/0xc0 [ 280.984312][T13962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.984330][T13962] RIP: 0033:0x7f1e7cf9e159 [ 280.984347][T13962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.984362][T13962] RSP: 002b:00007f1e7ddcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.984383][T13962] RAX: ffffffffffffffda RBX: 00007f1e7d226090 RCX: 00007f1e7cf9e159 [ 280.984397][T13962] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 280.984409][T13962] RBP: 00007f1e7ddcb090 R08: 0000000000000000 R09: 0000000000000000 [ 280.984421][T13962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.984458][T13962] R13: 00007f1e7d226128 R14: 00007f1e7d226090 R15: 00007fffa98cfa18 [ 280.984490][T13962] [ 281.213771][T13971] __nla_validate_parse: 4 callbacks suppressed [ 281.213792][T13971] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1936'. [ 281.424285][T13940] lo: left allmulticast mode [ 281.822266][T13993] syzkaller1: entered promiscuous mode [ 281.822292][T13993] syzkaller1: entered allmulticast mode [ 281.860668][T13993] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1940'. [ 281.950286][T14002] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1942'. [ 282.463270][T14024] FAULT_INJECTION: forcing a failure. [ 282.463270][T14024] name failslab, interval 1, probability 0, space 0, times 0 [ 282.463306][T14024] CPU: 1 UID: 0 PID: 14024 Comm: syz.1.1946 Not tainted syzkaller #0 PREEMPT(full) [ 282.463399][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.463413][T14024] Call Trace: [ 282.463424][T14024] [ 282.463433][T14024] dump_stack_lvl+0xe8/0x150 [ 282.463466][T14024] should_fail_ex+0x410/0x560 [ 282.463495][T14024] should_failslab+0xa8/0x100 [ 282.463516][T14024] __kvmalloc_node_noprof+0x176/0x820 [ 282.463540][T14024] ? rcu_is_watching+0x16/0xb0 [ 282.463563][T14024] ? analyze_subprog+0x4a5a/0x9e00 [ 282.463584][T14024] ? analyze_subprog+0x4a5a/0x9e00 [ 282.463612][T14024] analyze_subprog+0x4a5a/0x9e00 [ 282.463634][T14024] ? fetch_store_string+0x19f/0x260 [ 282.463704][T14024] ? __pfx_analyze_subprog+0x10/0x10 [ 282.463725][T14024] ? __x64_sys_bpf+0xba/0xd0 [ 282.463742][T14024] ? gssp_accept_sec_context_upcall+0xa50/0xf00 [ 282.463763][T14024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.463820][T14024] ? call_instance+0x263/0x560 [ 282.463841][T14024] ? rcu_is_watching+0x16/0xb0 [ 282.463864][T14024] ? call_instance+0x263/0x560 [ 282.463884][T14024] ? trace_kmalloc+0x2a/0xf0 [ 282.463904][T14024] ? call_instance+0x263/0x560 [ 282.463925][T14024] ? __kvmalloc_node_noprof+0x52f/0x820 [ 282.463949][T14024] ? __kvmalloc_node_noprof+0x345/0x820 [ 282.463969][T14024] ? call_instance+0x263/0x560 [ 282.463989][T14024] ? call_instance+0x263/0x560 [ 282.464037][T14024] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 282.464057][T14024] ? bpf_get_trace_printk_proto+0x48/0x60 [ 282.464083][T14024] ? bpf_tracing_func_proto+0x72/0x180 [ 282.464132][T14024] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 282.464162][T14024] ? __kvmalloc_node_noprof+0x345/0x820 [ 282.464184][T14024] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 282.464207][T14024] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 282.464240][T14024] bpf_compute_live_registers+0x8d3/0x1ff0 [ 282.464280][T14024] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 282.464315][T14024] bpf_check+0x2746/0x2ef0 [ 282.464355][T14024] ? __pfx_bpf_check+0x10/0x10 [ 282.464379][T14024] ? bpf_obj_name_cpy+0x194/0x1e0 [ 282.464412][T14024] bpf_prog_load+0x14d6/0x1c20 [ 282.464447][T14024] ? __pfx_bpf_prog_load+0x10/0x10 [ 282.464497][T14024] __sys_bpf+0xd0d/0xd90 [ 282.464529][T14024] ? __pfx___sys_bpf+0x10/0x10 [ 282.464562][T14024] ? __fget_files+0x2a/0x420 [ 282.464609][T14024] ? ksys_write+0x242/0x270 [ 282.464645][T14024] ? __pfx_ksys_write+0x10/0x10 [ 282.464683][T14024] __x64_sys_bpf+0xba/0xd0 [ 282.464707][T14024] do_syscall_64+0x166/0x520 [ 282.464736][T14024] ? trace_irq_disable+0x3b/0x140 [ 282.464757][T14024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.464778][T14024] ? clear_bhb_loop+0x70/0xc0 [ 282.464804][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.464826][T14024] RIP: 0033:0x7f1e7cf9e159 [ 282.464847][T14024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.464864][T14024] RSP: 002b:00007f1e7ddcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.464886][T14024] RAX: ffffffffffffffda RBX: 00007f1e7d226090 RCX: 00007f1e7cf9e159 [ 282.464901][T14024] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 282.464915][T14024] RBP: 00007f1e7ddcb090 R08: 0000000000000000 R09: 0000000000000000 [ 282.464928][T14024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.464940][T14024] R13: 00007f1e7d226128 R14: 00007f1e7d226090 R15: 00007fffa98cfa18 [ 282.464973][T14024] [ 282.623842][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.138067][T14045] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1951'. [ 283.240103][T14045] syzkaller0: left promiscuous mode [ 283.240126][T14045] syzkaller0: left allmulticast mode [ 283.240438][T14045] tipc: Resetting bearer [ 283.248360][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 283.516877][T14071] FAULT_INJECTION: forcing a failure. [ 283.516877][T14071] name failslab, interval 1, probability 0, space 0, times 0 [ 283.516912][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.1.1958 Not tainted syzkaller #0 PREEMPT(full) [ 283.516934][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.516945][T14071] Call Trace: [ 283.516953][T14071] [ 283.516960][T14071] dump_stack_lvl+0xe8/0x150 [ 283.516990][T14071] should_fail_ex+0x410/0x560 [ 283.517016][T14071] should_failslab+0xa8/0x100 [ 283.517042][T14071] __kvmalloc_node_noprof+0x176/0x820 [ 283.517064][T14071] ? rcu_is_watching+0x16/0xb0 [ 283.517084][T14071] ? analyze_subprog+0x4a5a/0x9e00 [ 283.517106][T14071] ? analyze_subprog+0x4a5a/0x9e00 [ 283.517132][T14071] analyze_subprog+0x4a5a/0x9e00 [ 283.517153][T14071] ? fetch_store_string+0x19f/0x260 [ 283.517215][T14071] ? __pfx_analyze_subprog+0x10/0x10 [ 283.517233][T14071] ? __x64_sys_bpf+0xba/0xd0 [ 283.517249][T14071] ? gssp_accept_sec_context_upcall+0xa50/0xf00 [ 283.517269][T14071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.517332][T14071] ? call_instance+0x263/0x560 [ 283.517352][T14071] ? rcu_is_watching+0x16/0xb0 [ 283.517374][T14071] ? call_instance+0x263/0x560 [ 283.517393][T14071] ? trace_kmalloc+0x2a/0xf0 [ 283.517412][T14071] ? call_instance+0x263/0x560 [ 283.517431][T14071] ? __kvmalloc_node_noprof+0x52f/0x820 [ 283.517454][T14071] ? __kvmalloc_node_noprof+0x345/0x820 [ 283.517473][T14071] ? call_instance+0x263/0x560 [ 283.517493][T14071] ? call_instance+0x263/0x560 [ 283.517527][T14071] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 283.517548][T14071] ? bpf_get_trace_printk_proto+0x48/0x60 [ 283.517573][T14071] ? bpf_tracing_func_proto+0x72/0x180 [ 283.517616][T14071] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 283.517657][T14071] ? __kvmalloc_node_noprof+0x345/0x820 [ 283.517677][T14071] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 283.517718][T14071] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 283.517746][T14071] bpf_compute_live_registers+0x8d3/0x1ff0 [ 283.517784][T14071] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 283.517817][T14071] bpf_check+0x2746/0x2ef0 [ 283.517855][T14071] ? __pfx_bpf_check+0x10/0x10 [ 283.517878][T14071] ? bpf_obj_name_cpy+0x194/0x1e0 [ 283.517909][T14071] bpf_prog_load+0x14d6/0x1c20 [ 283.517942][T14071] ? __pfx_bpf_prog_load+0x10/0x10 [ 283.517989][T14071] __sys_bpf+0xd0d/0xd90 [ 283.518018][T14071] ? __pfx___sys_bpf+0x10/0x10 [ 283.518051][T14071] ? __fget_files+0x2a/0x420 [ 283.518091][T14071] ? ksys_write+0x242/0x270 [ 283.518121][T14071] ? __pfx_ksys_write+0x10/0x10 [ 283.518152][T14071] __x64_sys_bpf+0xba/0xd0 [ 283.518174][T14071] do_syscall_64+0x166/0x520 [ 283.518202][T14071] ? trace_irq_disable+0x3b/0x140 [ 283.518220][T14071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.518239][T14071] ? clear_bhb_loop+0x70/0xc0 [ 283.518262][T14071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.518289][T14071] RIP: 0033:0x7f1e7cf9e159 [ 283.518308][T14071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.518325][T14071] RSP: 002b:00007f1e7ddcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.518347][T14071] RAX: ffffffffffffffda RBX: 00007f1e7d226090 RCX: 00007f1e7cf9e159 [ 283.518361][T14071] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 283.518374][T14071] RBP: 00007f1e7ddcb090 R08: 0000000000000000 R09: 0000000000000000 [ 283.518386][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 283.518398][T14071] R13: 00007f1e7d226128 R14: 00007f1e7d226090 R15: 00007fffa98cfa18 [ 283.518428][T14071] [ 283.986534][T14087] bond0: entered promiscuous mode [ 283.986556][T14087] bond_slave_1: entered promiscuous mode [ 284.004562][T14087] batadv0: entered promiscuous mode [ 284.010435][T14087] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 284.034457][T14087] bond0: left promiscuous mode [ 284.034481][T14087] bond_slave_1: left promiscuous mode [ 284.054463][T14087] batadv0: left promiscuous mode [ 284.179237][T14093] veth0_to_bond: left promiscuous mode [ 284.213717][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 284.281504][T14101] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1965'. [ 284.465417][T14105] syzkaller0: entered promiscuous mode [ 284.465442][T14105] syzkaller0: entered allmulticast mode [ 284.465776][T14105] tipc: Resetting bearer [ 284.544875][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.545152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.845800][T14108] tipc: Resetting bearer [ 284.905885][T14108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 284.920014][T14118] tipc: Bearer : already 2 bearers with priority 10 [ 284.920034][T14118] tipc: Bearer : trying with adjusted priority [ 284.920044][T14118] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 284.995905][T14120] FAULT_INJECTION: forcing a failure. [ 284.995905][T14120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.995939][T14120] CPU: 1 UID: 0 PID: 14120 Comm: syz.1.1972 Not tainted syzkaller #0 PREEMPT(full) [ 284.995962][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.995974][T14120] Call Trace: [ 284.995982][T14120] [ 284.995990][T14120] dump_stack_lvl+0xe8/0x150 [ 284.996023][T14120] should_fail_ex+0x410/0x560 [ 284.996052][T14120] _copy_to_user+0x31/0xb0 [ 284.996080][T14120] bpf_verifier_vlog+0x496/0x900 [ 284.996112][T14120] verbose+0x11d/0x1a0 [ 284.996130][T14120] ? __pfx_snprintf+0x10/0x10 [ 284.996157][T14120] ? __pfx_verbose+0x10/0x10 [ 284.996176][T14120] ? lock_acquire+0x115/0x350 [ 284.996200][T14120] ? __func_imm_name+0xab/0xc0 [ 284.996226][T14120] print_bpf_insn+0x1a01/0x2930 [ 284.996252][T14120] ? __pfx_verbose+0x10/0x10 [ 284.996272][T14120] ? __pfx_print_bpf_insn+0x10/0x10 [ 284.996301][T14120] ? bpf_verifier_vlog+0x58d/0x900 [ 284.996331][T14120] ? bpf_verifier_log_write+0x11d/0x1a0 [ 284.996354][T14120] bpf_verbose_insn+0xcb/0x130 [ 284.996374][T14120] ? __pfx_bpf_verbose_insn+0x10/0x10 [ 284.996393][T14120] ? __kvmalloc_node_noprof+0x52f/0x820 [ 284.996414][T14120] ? __pfx_verbose+0x10/0x10 [ 284.996431][T14120] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 284.996451][T14120] ? __kvmalloc_node_noprof+0x345/0x820 [ 284.996475][T14120] ? analyze_subprog+0x4a5a/0x9e00 [ 284.996496][T14120] ? analyze_subprog+0x4a5a/0x9e00 [ 284.996525][T14120] analyze_subprog+0x5d89/0x9e00 [ 284.996545][T14120] ? fetch_store_string+0x19f/0x260 [ 284.996616][T14120] ? __pfx_analyze_subprog+0x10/0x10 [ 284.996636][T14120] ? __x64_sys_bpf+0xba/0xd0 [ 284.996660][T14120] ? gssp_accept_sec_context_upcall+0xa50/0xf00 [ 284.996678][T14120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.996727][T14120] ? call_instance+0x263/0x560 [ 284.996747][T14120] ? rcu_is_watching+0x16/0xb0 [ 284.996769][T14120] ? call_instance+0x263/0x560 [ 284.996789][T14120] ? trace_kmalloc+0x2a/0xf0 [ 284.996805][T14120] ? call_instance+0x263/0x560 [ 284.996825][T14120] ? __kvmalloc_node_noprof+0x52f/0x820 [ 284.996847][T14120] ? __kvmalloc_node_noprof+0x345/0x820 [ 284.996867][T14120] ? call_instance+0x263/0x560 [ 284.996886][T14120] ? call_instance+0x263/0x560 [ 284.996920][T14120] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 284.996941][T14120] ? bpf_get_trace_printk_proto+0x48/0x60 [ 284.996966][T14120] ? bpf_tracing_func_proto+0x72/0x180 [ 284.997015][T14120] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 284.997044][T14120] ? __kvmalloc_node_noprof+0x345/0x820 [ 284.997065][T14120] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 284.997087][T14120] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 284.997117][T14120] bpf_compute_live_registers+0x8d3/0x1ff0 [ 284.997158][T14120] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 284.997192][T14120] bpf_check+0x2746/0x2ef0 [ 284.997231][T14120] ? __pfx_bpf_check+0x10/0x10 [ 284.997256][T14120] ? bpf_obj_name_cpy+0x194/0x1e0 [ 284.997287][T14120] bpf_prog_load+0x14d6/0x1c20 [ 284.997322][T14120] ? __pfx_bpf_prog_load+0x10/0x10 [ 284.997368][T14120] __sys_bpf+0xd0d/0xd90 [ 284.997398][T14120] ? __pfx___sys_bpf+0x10/0x10 [ 284.997431][T14120] ? __fget_files+0x2a/0x420 [ 284.997476][T14120] ? ksys_write+0x242/0x270 [ 284.997525][T14120] ? __pfx_ksys_write+0x10/0x10 [ 284.997576][T14120] __x64_sys_bpf+0xba/0xd0 [ 284.997599][T14120] do_syscall_64+0x166/0x520 [ 284.997627][T14120] ? trace_irq_disable+0x3b/0x140 [ 284.997654][T14120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.997674][T14120] ? clear_bhb_loop+0x70/0xc0 [ 284.997697][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.997716][T14120] RIP: 0033:0x7f1e7cf9e159 [ 284.997735][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.997752][T14120] RSP: 002b:00007f1e7ddec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.997773][T14120] RAX: ffffffffffffffda RBX: 00007f1e7d225fa0 RCX: 00007f1e7cf9e159 [ 284.997788][T14120] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 284.997801][T14120] RBP: 00007f1e7ddec090 R08: 0000000000000000 R09: 0000000000000000 [ 284.997814][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.997826][T14120] R13: 00007f1e7d226038 R14: 00007f1e7d225fa0 R15: 00007fffa98cfa18 [ 284.997858][T14120] [ 285.107251][T14122] sctp: [Deprecated]: syz.3.1971 (pid 14122) Use of int in maxseg socket option. [ 285.107251][T14122] Use struct sctp_assoc_value instead [ 285.118429][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 286.100534][T14179] can: request_module (can-proto-0) failed. [ 286.117954][T14180] can: request_module (can-proto-0) failed. [ 286.172294][T14194] FAULT_INJECTION: forcing a failure. [ 286.172294][T14194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.172397][T14194] CPU: 0 UID: 0 PID: 14194 Comm: syz.3.1987 Not tainted syzkaller #0 PREEMPT(full) [ 286.172420][T14194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.172431][T14194] Call Trace: [ 286.172439][T14194] [ 286.172450][T14194] dump_stack_lvl+0xe8/0x150 [ 286.172480][T14194] should_fail_ex+0x410/0x560 [ 286.172506][T14194] _copy_to_user+0x31/0xb0 [ 286.172533][T14194] bpf_verifier_vlog+0x496/0x900 [ 286.172562][T14194] bpf_verifier_log_write+0x11d/0x1a0 [ 286.172589][T14194] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 286.172607][T14194] ? __kvmalloc_node_noprof+0x52f/0x820 [ 286.172631][T14194] ? __kvmalloc_node_noprof+0x345/0x820 [ 286.172652][T14194] ? analyze_subprog+0x4a5a/0x9e00 [ 286.172672][T14194] ? analyze_subprog+0x4a5a/0x9e00 [ 286.172698][T14194] analyze_subprog+0x5d98/0x9e00 [ 286.172718][T14194] ? fetch_store_string+0x19f/0x260 [ 286.172776][T14194] ? __pfx_analyze_subprog+0x10/0x10 [ 286.172795][T14194] ? __x64_sys_bpf+0xba/0xd0 [ 286.172812][T14194] ? gssp_accept_sec_context_upcall+0xa50/0xf00 [ 286.172833][T14194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.172910][T14194] ? call_instance+0x263/0x560 [ 286.172931][T14194] ? rcu_is_watching+0x16/0xb0 [ 286.172954][T14194] ? call_instance+0x263/0x560 [ 286.172974][T14194] ? trace_kmalloc+0x2a/0xf0 [ 286.173071][T14194] ? call_instance+0x263/0x560 [ 286.173091][T14194] ? __kvmalloc_node_noprof+0x52f/0x820 [ 286.173114][T14194] ? __kvmalloc_node_noprof+0x345/0x820 [ 286.173134][T14194] ? call_instance+0x263/0x560 [ 286.173154][T14194] ? call_instance+0x263/0x560 [ 286.173190][T14194] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 286.173213][T14194] ? bpf_get_trace_printk_proto+0x48/0x60 [ 286.173237][T14194] ? bpf_tracing_func_proto+0x72/0x180 [ 286.173283][T14194] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 286.173310][T14194] ? __kvmalloc_node_noprof+0x345/0x820 [ 286.173329][T14194] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 286.173349][T14194] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 286.173376][T14194] bpf_compute_live_registers+0x8d3/0x1ff0 [ 286.173418][T14194] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 286.173449][T14194] bpf_check+0x2746/0x2ef0 [ 286.173504][T14194] ? __pfx_bpf_check+0x10/0x10 [ 286.173528][T14194] ? bpf_obj_name_cpy+0x194/0x1e0 [ 286.173559][T14194] bpf_prog_load+0x14d6/0x1c20 [ 286.173590][T14194] ? __pfx_bpf_prog_load+0x10/0x10 [ 286.173734][T14194] __sys_bpf+0xd0d/0xd90 [ 286.173765][T14194] ? __pfx___sys_bpf+0x10/0x10 [ 286.173797][T14194] ? __fget_files+0x2a/0x420 [ 286.173840][T14194] ? ksys_write+0x242/0x270 [ 286.173867][T14194] ? __pfx_ksys_write+0x10/0x10 [ 286.173895][T14194] __x64_sys_bpf+0xba/0xd0 [ 286.173917][T14194] do_syscall_64+0x166/0x520 [ 286.173943][T14194] ? trace_irq_disable+0x3b/0x140 [ 286.173971][T14194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.173990][T14194] ? clear_bhb_loop+0x70/0xc0 [ 286.174011][T14194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.174030][T14194] RIP: 0033:0x7f71b439e159 [ 286.174047][T14194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.174060][T14194] RSP: 002b:00007f71b51f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.174079][T14194] RAX: ffffffffffffffda RBX: 00007f71b4626090 RCX: 00007f71b439e159 [ 286.174093][T14194] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 286.174106][T14194] RBP: 00007f71b51f2090 R08: 0000000000000000 R09: 0000000000000000 [ 286.174118][T14194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.174130][T14194] R13: 00007f71b4626128 R14: 00007f71b4626090 R15: 00007fff0848d968 [ 286.174158][T14194] [ 287.153441][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 287.159429][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 287.160375][T14232] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 287.160397][T14232] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.163405][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 287.203078][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2002'. [ 287.280877][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2006'. [ 287.420947][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 287.564713][T14253] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2009'. [ 287.566068][T14254] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2009'. [ 287.743033][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.815820][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 287.815845][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2010'. [ 287.851929][T14257] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 287.861056][T14257] bond0 (unregistering): Released all slaves [ 288.237044][T14264] raw_sendmsg: syz.0.2012 forgot to set AF_INET. Fix it! [ 288.882487][T14296] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 289.305342][T14327] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 289.583961][T14342] nbd: socks must be embedded in a SOCK_ITEM attr [ 289.969119][T14354] tipc: Enabling of bearer rejected, already enabled [ 290.127512][T14364] ip6tnl6: entered allmulticast mode [ 290.247526][T14372] IPv6: addrconf: prefix option has invalid lifetime [ 290.302602][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.302881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.798886][T14408] netlink: 'syz.3.2047': attribute type 1 has an invalid length. [ 291.581489][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.581993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.664212][T14420] netlink: 'syz.1.2053': attribute type 1 has an invalid length. [ 291.698915][T14420] bond0: entered promiscuous mode [ 291.699375][T14420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.756490][T14420] bond0: (slave bridge2): making interface the new active one [ 291.756517][T14420] bridge2: entered promiscuous mode [ 291.757613][T14420] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 292.117028][T14438] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20000 [ 292.482275][T14451] tcpmss_tg4_check: 7 callbacks suppressed [ 292.482297][T14451] xt_TCPMSS: Only works on TCP SYN packets [ 292.523879][T14451] ip6gretap0: entered allmulticast mode [ 292.525820][T14451] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 292.527701][T14451] batman_adv: batadv0: Adding interface: ip6gretap0 [ 292.527718][T14451] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.527750][T14451] batman_adv: batadv0: Interface activated: ip6gretap0 [ 292.581915][T14447] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 292.583318][T14452] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 292.642775][T14447] bond5: entered promiscuous mode [ 292.643300][T14447] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.684103][T14443] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.684525][T14443] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 292.684544][T14443] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 292.710535][T14447] __nla_validate_parse: 14 callbacks suppressed [ 292.710557][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 292.720994][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 292.761009][T14443] bond5: (slave gre1): making interface the new active one [ 292.761035][T14443] gre1: entered promiscuous mode [ 292.769125][T14443] bond5: (slave gre1): Enslaving as an active interface with an up link [ 292.792149][T14447] bond5 (unregistering): (slave gre1): Releasing backup interface [ 292.792177][T14447] gre1: left promiscuous mode [ 292.793873][T14447] bond5 (unregistering): Released all slaves [ 292.827507][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 292.836450][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 293.090982][T14466] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2061'. [ 293.420200][T14488] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2063'. [ 293.502232][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.695163][T14497] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2068'. [ 293.697700][T14499] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2068'. [ 293.767167][T14500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.897486][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 293.962587][T14504] bond12: option lacp_active: invalid value (5) [ 293.965008][T14504] bond12 (unregistering): Released all slaves [ 294.226024][T14522] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2073'. [ 294.545321][T14545] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 295.058634][T14568] tipc: Enabling of bearer rejected, already enabled [ 295.430168][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.430442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.496542][T14591] netlink: 'syz.4.2092': attribute type 39 has an invalid length. [ 295.937121][T14626] syzkaller0: left promiscuous mode [ 295.937144][T14626] syzkaller0: left allmulticast mode [ 295.937466][T14626] tipc: Resetting bearer [ 295.965652][T14624] netlink: 'syz.4.2101': attribute type 1 has an invalid length. [ 295.997830][T14624] bond11: entered promiscuous mode [ 295.998331][T14624] 8021q: adding VLAN 0 to HW filter on device bond11 [ 296.059134][T14624] 8021q: adding VLAN 0 to HW filter on device bond12 [ 296.073585][T14624] bond11: (slave bond12): making interface the new active one [ 296.073609][T14624] bond12: entered promiscuous mode [ 296.077594][T14624] bond11: (slave bond12): Enslaving as an active interface with an up link [ 296.118862][T14632] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.176577][T14632] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 296.214725][T14632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.215004][T14632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.421562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.422047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.652843][T14641] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 296.652867][T14641] CPU: 0 UID: 0 PID: 14641 Comm: syz.3.2107 Not tainted syzkaller #0 PREEMPT(full) [ 296.652890][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.652904][T14641] Call Trace: [ 296.652914][T14641] [ 296.652924][T14641] dump_stack_lvl+0xe8/0x150 [ 296.652960][T14641] sysfs_warn_dup+0x8e/0xa0 [ 296.652993][T14641] sysfs_do_create_link_sd+0xc0/0x110 [ 296.653028][T14641] device_add_class_symlinks+0x1cf/0x240 [ 296.653056][T14641] device_add+0x467/0xb80 [ 296.653082][T14641] wiphy_register+0x1fc8/0x2ff0 [ 296.653124][T14641] ? __pfx_wiphy_register+0x10/0x10 [ 296.653149][T14641] ? __pfx_netdev_run_todo+0x10/0x10 [ 296.653182][T14641] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 296.653211][T14641] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 296.653258][T14641] ieee80211_register_hw+0x3d7c/0x4b40 [ 296.653301][T14641] ? ieee80211_register_hw+0x19d1/0x4b40 [ 296.653359][T14641] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 296.653393][T14641] ? __asan_memset+0x22/0x50 [ 296.653413][T14641] ? __hrtimer_setup+0x1b7/0x260 [ 296.653440][T14641] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 296.653469][T14641] mac80211_hwsim_new_radio+0x3264/0x5720 [ 296.653525][T14641] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 296.653549][T14641] ? kstrndup+0xbd/0x160 [ 296.653578][T14641] ? kstrndup+0xbd/0x160 [ 296.653602][T14641] hwsim_new_radio_nl+0xd8b/0xf90 [ 296.653643][T14641] genl_family_rcv_msg_doit+0x233/0x340 [ 296.653680][T14641] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 296.653720][T14641] ? bpf_lsm_capable+0x9/0x20 [ 296.653739][T14641] ? security_capable+0x7e/0x2c0 [ 296.653772][T14641] genl_rcv_msg+0x614/0x7a0 [ 296.653806][T14641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.653832][T14641] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 296.653872][T14641] netlink_rcv_skb+0x226/0x4a0 [ 296.653896][T14641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.653925][T14641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.653963][T14641] ? down_read+0x2be/0x330 [ 296.653988][T14641] genl_rcv+0x28/0x40 [ 296.654012][T14641] netlink_unicast+0x7bd/0x940 [ 296.654056][T14641] netlink_sendmsg+0x813/0xb40 [ 296.654089][T14641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.654121][T14641] ? apparmor_socket_sendmsg+0x98/0x360 [ 296.654148][T14641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.654168][T14641] sock_sendmsg_nosec+0x14e/0x190 [ 296.654193][T14641] ____sys_sendmsg+0x54e/0x850 [ 296.654236][T14641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.654277][T14641] ? import_iovec+0x73/0xa0 [ 296.654310][T14641] ___sys_sendmsg+0x2a5/0x360 [ 296.654334][T14641] ? __lock_acquire+0x747/0x2de0 [ 296.654358][T14641] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.654389][T14641] ? futex_wait+0x2a2/0x390 [ 296.654454][T14641] ? __fget_files+0x2a/0x420 [ 296.654482][T14641] ? __fget_files+0x3a2/0x420 [ 296.654524][T14641] __x64_sys_sendmsg+0x1b1/0x290 [ 296.654557][T14641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.654611][T14641] do_syscall_64+0x166/0x520 [ 296.654642][T14641] ? trace_irq_disable+0x3b/0x140 [ 296.654664][T14641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.654686][T14641] ? clear_bhb_loop+0x70/0xc0 [ 296.654713][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.654733][T14641] RIP: 0033:0x7f71b439e159 [ 296.654751][T14641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.654768][T14641] RSP: 002b:00007f71b5213028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.654790][T14641] RAX: ffffffffffffffda RBX: 00007f71b4625fa0 RCX: 00007f71b439e159 [ 296.654803][T14641] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 296.654815][T14641] RBP: 00007f71b443506b R08: 0000000000000000 R09: 0000000000000000 [ 296.654826][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.654839][T14641] R13: 00007f71b4626038 R14: 00007f71b4625fa0 R15: 00007fff0848d968 [ 296.654875][T14641] [ 296.688651][T14644] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 297.116553][T14656] netlink: 'syz.2.2111': attribute type 1 has an invalid length. [ 297.118848][T14657] netlink: 'syz.2.2111': attribute type 1 has an invalid length. [ 297.205738][T14656] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.231840][T14665] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 297.235664][T14665] bond7: (slave batadv3): making interface the new active one [ 297.237061][T14665] bond7: (slave batadv3): Enslaving as an active interface with an up link [ 297.315077][T14656] syzkaller1: entered promiscuous mode [ 297.315100][T14656] syzkaller1: entered allmulticast mode [ 297.556265][T14673] netlink: 'syz.0.2112': attribute type 219 has an invalid length. [ 297.809523][T14689] __nla_validate_parse: 14 callbacks suppressed [ 297.809543][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2119'. [ 297.966698][T14687] hsr_slave_0: left promiscuous mode [ 297.968066][T14687] hsr_slave_1: left promiscuous mode [ 298.457645][T14715] netlink: 'syz.0.2125': attribute type 29 has an invalid length. [ 298.457672][T14715] netlink: 'syz.0.2125': attribute type 31 has an invalid length. [ 298.481212][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'. [ 298.505889][T14724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2128'. [ 298.505914][T14724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2128'. [ 298.544262][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.561148][T14728] ip_tables: iptables: counters copy to user failed while replacing table [ 299.032475][T14755] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 299.032507][T14755] bridge2: left promiscuous mode [ 299.070579][T14755] bond0 (unregistering): Released all slaves [ 299.128449][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2132'. [ 299.448582][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'. [ 299.516356][T14775] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2138'. [ 299.990299][T14803] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2148'. [ 300.054473][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'. [ 300.054515][T14806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2147'. [ 300.198815][T14801] bond0 (unregistering): Released all slaves [ 300.261522][T14814] ip_tables: iptables: counters copy to user failed while replacing table [ 301.209835][T14868] ipvlan2: entered promiscuous mode [ 301.209944][T14868] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 301.209956][T14868] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 301.210040][T14868] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 301.500926][T14889] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 301.917520][T14922] netlink: 'syz.2.2176': attribute type 21 has an invalid length. [ 301.944283][T14922] netlink: 'syz.2.2176': attribute type 4 has an invalid length. [ 301.944305][T14922] netlink: 'syz.2.2176': attribute type 3 has an invalid length. [ 302.161857][T14934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.317052][T14943] netlink: 'syz.0.2181': attribute type 2 has an invalid length. [ 302.348626][T14952] netlink: 'syz.0.2181': attribute type 2 has an invalid length. [ 302.420529][T14959] netlink: 'syz.4.2183': attribute type 1 has an invalid length. [ 302.852180][T14986] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.891643][T14986] __nla_validate_parse: 24 callbacks suppressed [ 302.891664][T14986] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2188'. [ 302.895327][T14986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2188'. [ 302.895349][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 303.397741][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2189'. [ 303.397777][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 303.443191][T14997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.536340][T15014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2192'. [ 303.542146][ T8316] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 303.542422][ T8316] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 303.542463][ T8316] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 303.542496][ T8316] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 303.656004][T15017] lo: entered promiscuous mode [ 303.696639][T15017] tunl0: entered promiscuous mode [ 303.762381][T15017] tipc: Resetting bearer [ 303.762465][T15017] gre0: entered promiscuous mode [ 303.793650][T15020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.801180][T15017] gretap0: entered promiscuous mode [ 303.894045][T15017] erspan0: entered promiscuous mode [ 303.934549][T15017] ip_vti0: entered promiscuous mode [ 303.967685][T15017] ip6_vti0: entered promiscuous mode [ 304.007031][T15017] sit0: entered promiscuous mode [ 304.072608][T15017] ip6tnl0: entered promiscuous mode [ 304.205264][T15017] ip6gre0: entered promiscuous mode [ 304.225992][T15017] syz_tun: entered promiscuous mode [ 304.249386][T15017] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.249854][T15017] bridge0: entered promiscuous mode [ 304.282204][T15017] vcan0: entered promiscuous mode [ 304.300729][T15017] bond0: entered promiscuous mode [ 304.300753][T15017] bond_slave_0: entered promiscuous mode [ 304.329925][T15017] dummy0: entered promiscuous mode [ 304.363025][T15017] nlmon0: entered promiscuous mode [ 304.380694][T15017] veth0: entered promiscuous mode [ 304.396146][T15017] veth1: entered promiscuous mode [ 304.415962][T15017] wg0: entered promiscuous mode [ 304.429587][T15017] wg1: entered promiscuous mode [ 304.432730][T15017] wg2: entered promiscuous mode [ 304.456904][T15017] veth0_to_bridge: entered promiscuous mode [ 304.489847][T15017] veth1_to_bridge: entered promiscuous mode [ 304.510653][T15017] veth0_to_bond: entered promiscuous mode [ 304.539077][T15017] C: entered promiscuous mode [ 304.553239][T15017] team_slave_1: entered promiscuous mode [ 304.568468][T15017] veth0_to_batadv: entered promiscuous mode [ 304.597009][T15017] batadv_slave_0: entered promiscuous mode [ 304.598914][T15017] veth1_to_batadv: entered promiscuous mode [ 304.629303][T15017] batadv_slave_1: entered promiscuous mode [ 304.658068][T15017] xfrm0: entered promiscuous mode [ 304.673555][T15017] veth0_to_hsr: entered promiscuous mode [ 304.706885][T15017] veth1_to_hsr: entered promiscuous mode [ 304.739970][T15017] 0: entered promiscuous mode [ 304.742229][T15017] veth1_virt_wifi: entered promiscuous mode [ 304.766090][T15017] veth0_virt_wifi: entered promiscuous mode [ 304.785851][T15017] : entered promiscuous mode [ 304.786306][T15017] vlan1: entered promiscuous mode [ 304.786599][T15017] macvlan0: entered promiscuous mode [ 304.786773][T15017] macvlan1: entered promiscuous mode [ 304.786909][T15017] ipvlan0: entered promiscuous mode [ 304.787047][T15017] ipvlan1: entered promiscuous mode [ 304.787592][T15017] macsec0: entered promiscuous mode [ 304.787742][T15017] geneve0: entered promiscuous mode [ 304.787907][T15017] geneve1: entered promiscuous mode [ 304.824265][T15017] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 304.824409][T15017] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 304.824517][T15017] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 304.824643][T15017] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 304.824790][T15017] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 304.825489][T15017] vlan4: entered promiscuous mode [ 304.827952][T15017] pimreg9: entered promiscuous mode [ 304.828116][T15017] gtp0: entered promiscuous mode [ 304.828363][T15017] gre1: entered promiscuous mode [ 304.828475][T15017] ip6erspan0: entered promiscuous mode [ 304.828585][T15017] gretap1: entered promiscuous mode [ 304.833257][T15017] tipc: Resetting bearer [ 304.836161][T15017] syzkaller0: entered promiscuous mode [ 304.837186][T15017] geneve2: entered promiscuous mode [ 304.837351][T15017] syztnl0: entered promiscuous mode [ 304.838232][T15017] bridge1: entered promiscuous mode [ 304.841044][T15017] gre2: entered promiscuous mode [ 304.842906][T15017] sit1: entered promiscuous mode [ 304.856776][T15017] mac80211_hwsim hwsim25 wlan2: entered promiscuous mode [ 304.879597][T15017] gre3: entered promiscuous mode [ 304.879733][T15017] mac80211_hwsim hwsim29 wlan3: entered promiscuous mode [ 304.880000][T15017] ip6gre2: entered promiscuous mode [ 304.880422][T15017] pim6reg: entered promiscuous mode [ 304.893710][T15017] bridge3: entered promiscuous mode [ 304.900058][T15017] mac80211_hwsim hwsim31 wlan4: entered promiscuous mode [ 304.900227][T15017] vlan257: entered promiscuous mode [ 304.900486][T15017] xfrm1: entered promiscuous mode [ 304.913028][T15017] ip6tnl1: entered promiscuous mode [ 304.913169][T15017] veth2: entered promiscuous mode [ 304.913405][T15017] veth3: entered promiscuous mode [ 304.913803][T15017] mac80211_hwsim hwsim35 wlan5: entered promiscuous mode [ 304.916611][T15017] gtp1: entered promiscuous mode [ 304.924951][T15017] bond3: entered promiscuous mode [ 304.925913][T15017] vxcan0: entered promiscuous mode [ 304.929844][T15017] vxcan1: entered promiscuous mode [ 304.930801][T15017] mac80211_hwsim hwsim38 wlan6: entered promiscuous mode [ 304.932763][ T40] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.932933][ T40] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.933000][ T40] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.933035][ T40] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.484027][T15070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 305.646077][T15079] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 305.869653][T15093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2209'. [ 305.869689][T15093] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 305.908893][T15094] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2209'. [ 305.909090][T15094] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2209'. [ 306.470633][T15127] netlink: 'syz.4.2216': attribute type 10 has an invalid length. [ 306.470870][T15127] netlink: 'syz.4.2216': attribute type 10 has an invalid length. [ 306.471097][T15127] netlink: 'syz.4.2216': attribute type 10 has an invalid length. [ 306.503872][T15127] netlink: 'syz.4.2216': attribute type 10 has an invalid length. [ 306.590911][T15134] syzkaller0: entered promiscuous mode [ 306.590932][T15134] syzkaller0: entered allmulticast mode [ 306.890634][T15140] syzkaller0: entered promiscuous mode [ 306.890658][T15140] syzkaller0: entered allmulticast mode [ 307.733296][T15176] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 307.769135][T15176] bond0 (unregistering): Released all slaves [ 308.071563][T15202] __nla_validate_parse: 36 callbacks suppressed [ 308.071585][T15202] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2238'. [ 308.214541][T15211] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2240'. [ 308.586386][T15224] ip_tables: iptables: counters copy to user failed while replacing table [ 308.711804][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2242'. [ 309.019246][T15224] gre2: entered promiscuous mode [ 309.490192][T15268] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2253'. [ 309.517652][T15255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2249'. [ 309.587357][T15271] syzkaller0: left promiscuous mode [ 309.614307][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.614385][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.614418][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.614450][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.702782][T15278] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 309.702809][T15278] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2257'. [ 309.702863][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2257'. [ 309.790913][T15277] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 309.971708][T15277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2256'. [ 310.253273][T15308] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2263'. [ 310.281269][T15308] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2263'. [ 310.655050][T15333] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.790299][T15342] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 311.054621][T15342] ------------[ cut here ]------------ [ 311.054638][T15342] ODEBUG: free active (active state 0) object: ffff888029694900 object type: timer_list hint: mac802154_scan_worker+0x0/0xe60 [ 311.054691][T15342] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#0: syz.4.2269/15342 [ 311.097596][T15342] Modules linked in: [ 311.103808][T15342] CPU: 0 UID: 0 PID: 15342 Comm: syz.4.2269 Not tainted syzkaller #0 PREEMPT(full) [ 311.115832][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.129848][T15342] RIP: 0010:debug_print_object+0x18a/0x230 [ 311.137923][T15342] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 9d cb 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 b3 ab 8e 0b 48 83 c4 10 5b 41 5c [ 311.164731][T15342] RSP: 0018:ffffc9000deaf238 EFLAGS: 00010246 [ 311.172962][T15342] RAX: 1ffffffff181f074 RBX: dffffc0000000000 RCX: 0000000000000000 [ 311.183180][T15342] RDX: ffffffff8c6db940 RSI: ffffffff8c6db3c0 RDI: ffffffff9084c5c0 [ 311.195835][T15342] RBP: ffffffff8c6db940 R08: ffff888029694900 R09: ffffffff8c0f9700 [ 311.205064][T15342] R10: dffffc0000000000 R11: ffffffff81b3d490 R12: 0000000000000000 [ 311.214449][T15342] R13: ffffffff9084c5c0 R14: ffff888029694900 R15: ffffffff8c0f83a0 [ 311.225403][T15342] FS: 00007f9c18ab56c0(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 311.235724][T15342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.243049][T15342] CR2: 00007f1e7dd556c8 CR3: 00000000572f4000 CR4: 00000000003526f0 [ 311.254793][T15342] Call Trace: [ 311.260444][T15342] [ 311.265403][T15342] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 311.272287][T15342] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 311.281054][T15342] debug_check_no_obj_freed+0x2e3/0x450 [ 311.287609][T15342] kfree+0x13e/0x650 [ 311.292378][T15342] ? device_release+0xc4/0x1f0 [ 311.297829][T15342] ? destroy_workqueue+0xb30/0xc60 [ 311.305350][T15342] ? __pfx_wpan_phy_release+0x10/0x10 [ 311.311056][T15342] device_release+0xc4/0x1f0 [ 311.318245][T15342] kobject_put+0x222/0x550 [ 311.324765][T15342] ? mutex_destroy+0x39/0xf0 [ 311.330293][T15342] hwsim_del_radio_nl+0x110/0x150 [ 311.336395][T15342] genl_family_rcv_msg_doit+0x233/0x340 [ 311.342845][T15342] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.349477][T15342] ? bpf_lsm_capable+0x9/0x20 [ 311.357001][T15342] ? security_capable+0x7e/0x2c0 [ 311.363482][T15342] genl_rcv_msg+0x614/0x7a0 [ 311.368480][T15342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.374773][T15342] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 311.382480][T15342] netlink_rcv_skb+0x226/0x4a0 [ 311.388728][T15342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.395575][T15342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.401135][T15342] ? down_read+0x2be/0x330 [ 311.406255][T15342] genl_rcv+0x28/0x40 [ 311.410631][T15342] netlink_unicast+0x7bd/0x940 [ 311.416693][T15342] netlink_sendmsg+0x813/0xb40 [ 311.423040][T15342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.429679][T15342] ? apparmor_socket_sendmsg+0x98/0x360 [ 311.438551][T15342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.444605][T15342] sock_sendmsg_nosec+0x14e/0x190 [ 311.450413][T15342] ____sys_sendmsg+0x54e/0x850 [ 311.455851][T15342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.464048][T15342] ? import_iovec+0x73/0xa0 [ 311.469577][T15342] ___sys_sendmsg+0x2a5/0x360 [ 311.475546][T15342] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.481854][T15342] ? futex_wait+0x2a2/0x390 [ 311.486718][T15342] ? __pfx_do_futex+0x10/0x10 [ 311.493236][T15342] __x64_sys_sendmsg+0x1b1/0x290 [ 311.498586][T15342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.507019][T15342] do_syscall_64+0x166/0x520 [ 311.511944][T15342] ? trace_irq_disable+0x3b/0x140 [ 311.522092][T15342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.530444][T15342] ? clear_bhb_loop+0x70/0xc0 [ 311.538018][T15342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.546833][T15342] RIP: 0033:0x7f9c17b9e159 [ 311.552119][T15342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.576701][T15342] RSP: 002b:00007f9c18ab5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.588466][T15342] RAX: ffffffffffffffda RBX: 00007f9c17e25fa0 RCX: 00007f9c17b9e159 [ 311.597709][T15342] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 311.607367][T15342] RBP: 00007f9c17c3506b R08: 0000000000000000 R09: 0000000000000000 [ 311.617347][T15342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.628458][T15342] R13: 00007f9c17e26038 R14: 00007f9c17e25fa0 R15: 00007ffeb61a1fb8 [ 311.641076][T15342] [ 311.644630][T15342] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.653532][T15342] CPU: 0 UID: 0 PID: 15342 Comm: syz.4.2269 Not tainted syzkaller #0 PREEMPT(full) [ 311.663783][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.675535][T15342] Call Trace: [ 311.678827][T15342] [ 311.681860][T15342] vpanic+0x56d/0xa60 [ 311.685877][T15342] ? __pfx__printk+0x10/0x10 [ 311.690695][T15342] ? __pfx_vpanic+0x10/0x10 [ 311.695730][T15342] ? is_bpf_text_address+0x292/0x2b0 [ 311.701298][T15342] ? is_bpf_text_address+0x26/0x2b0 [ 311.706548][T15342] panic+0xc5/0xd0 [ 311.710300][T15342] ? __pfx_panic+0x10/0x10 [ 311.715797][T15342] __warn+0x315/0x4c0 [ 311.720079][T15342] ? debug_print_object+0xec/0x230 [ 311.725776][T15342] ? debug_print_object+0xec/0x230 [ 311.732530][T15342] __report_bug+0x276/0x570 [ 311.739870][T15342] ? __pfx_clockevents_program_event+0x10/0x10 [ 311.746856][T15342] ? debug_print_object+0xec/0x230 [ 311.753575][T15342] ? __pfx___report_bug+0x10/0x10 [ 311.759750][T15342] report_bug_entry+0x19b/0x290 [ 311.765526][T15342] ? debug_print_object+0x18a/0x230 [ 311.771726][T15342] ? debug_print_object+0x18f/0x230 [ 311.777867][T15342] handle_bug+0xce/0x200 [ 311.782832][T15342] exc_invalid_op+0x1a/0x50 [ 311.787618][T15342] asm_exc_invalid_op+0x1a/0x20 [ 311.795258][T15342] RIP: 0010:debug_print_object+0x18a/0x230 [ 311.802575][T15342] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 9d cb 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 b3 ab 8e 0b 48 83 c4 10 5b 41 5c [ 311.826252][T15342] RSP: 0018:ffffc9000deaf238 EFLAGS: 00010246 [ 311.832429][T15342] RAX: 1ffffffff181f074 RBX: dffffc0000000000 RCX: 0000000000000000 [ 311.840692][T15342] RDX: ffffffff8c6db940 RSI: ffffffff8c6db3c0 RDI: ffffffff9084c5c0 [ 311.849354][T15342] RBP: ffffffff8c6db940 R08: ffff888029694900 R09: ffffffff8c0f9700 [ 311.859801][T15342] R10: dffffc0000000000 R11: ffffffff81b3d490 R12: 0000000000000000 [ 311.869658][T15342] R13: ffffffff9084c5c0 R14: ffff888029694900 R15: ffffffff8c0f83a0 [ 311.881291][T15342] ? __pfx_timer_debug_hint+0x10/0x10 [ 311.887246][T15342] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 311.894117][T15342] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 311.900297][T15342] debug_check_no_obj_freed+0x2e3/0x450 [ 311.906197][T15342] kfree+0x13e/0x650 [ 311.910865][T15342] ? device_release+0xc4/0x1f0 [ 311.917306][T15342] ? destroy_workqueue+0xb30/0xc60 [ 311.925155][T15342] ? __pfx_wpan_phy_release+0x10/0x10 [ 311.935965][T15342] device_release+0xc4/0x1f0 [ 311.943279][T15342] kobject_put+0x222/0x550 [ 311.949163][T15342] ? mutex_destroy+0x39/0xf0 [ 311.956532][T15342] hwsim_del_radio_nl+0x110/0x150 [ 311.962727][T15342] genl_family_rcv_msg_doit+0x233/0x340 [ 311.971623][T15342] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.980138][T15342] ? bpf_lsm_capable+0x9/0x20 [ 311.985798][T15342] ? security_capable+0x7e/0x2c0 [ 311.991671][T15342] genl_rcv_msg+0x614/0x7a0 [ 311.996377][T15342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.002914][T15342] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 312.009438][T15342] netlink_rcv_skb+0x226/0x4a0 [ 312.016171][T15342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.021493][T15342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.027150][T15342] ? down_read+0x2be/0x330 [ 312.031874][T15342] genl_rcv+0x28/0x40 [ 312.035869][T15342] netlink_unicast+0x7bd/0x940 [ 312.040915][T15342] netlink_sendmsg+0x813/0xb40 [ 312.045730][T15342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.051171][T15342] ? apparmor_socket_sendmsg+0x98/0x360 [ 312.056759][T15342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.062109][T15342] sock_sendmsg_nosec+0x14e/0x190 [ 312.067174][T15342] ____sys_sendmsg+0x54e/0x850 [ 312.071965][T15342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.077886][T15342] ? import_iovec+0x73/0xa0 [ 312.082407][T15342] ___sys_sendmsg+0x2a5/0x360 [ 312.087188][T15342] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.092584][T15342] ? futex_wait+0x2a2/0x390 [ 312.097141][T15342] ? __pfx_do_futex+0x10/0x10 [ 312.101841][T15342] __x64_sys_sendmsg+0x1b1/0x290 [ 312.106813][T15342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.112454][T15342] do_syscall_64+0x166/0x520 [ 312.117597][T15342] ? trace_irq_disable+0x3b/0x140 [ 312.123724][T15342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.130983][T15342] ? clear_bhb_loop+0x70/0xc0 [ 312.135778][T15342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.142232][T15342] RIP: 0033:0x7f9c17b9e159 [ 312.148226][T15342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.172850][T15342] RSP: 002b:00007f9c18ab5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.181992][T15342] RAX: ffffffffffffffda RBX: 00007f9c17e25fa0 RCX: 00007f9c17b9e159 [ 312.190189][T15342] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 312.199079][T15342] RBP: 00007f9c17c3506b R08: 0000000000000000 R09: 0000000000000000 [ 312.208905][T15342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.221615][T15342] R13: 00007f9c17e26038 R14: 00007f9c17e25fa0 R15: 00007ffeb61a1fb8 [ 312.231564][T15342] [ 312.235369][T15342] Kernel Offset: disabled [ 312.239904][T15342] Rebooting in 86400 seconds..