last executing test programs: 5.644983728s ago: executing program 4 (id=9262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000580)={0x6}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r3, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0x7ffffff5}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r1, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x800, 0x3e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x5e}, 0x1, 0x0, 0x0, 0x40000c1}, 0x24044884) 5.38134866s ago: executing program 4 (id=9266): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x5, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r1, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffaa, 0x0, 0xffffffffffffffff, 0x48}, 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d030037250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x4924924924925b9, 0x8001) 5.056510227s ago: executing program 4 (id=9271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x1}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa19000000000008004600002c000000000006907864010100ac1414aa940400004e224001f2a953eb24f7a03f7e6098f59e226d5b14480852cf495eb4eec09fecca2e3d8fe97c6c9cd51552f244bf98b05ca60523811eaf59d91b8b0bd86cbcc017345412a591f77cad06d68630507f1e1def61142df540da5e4cf86faf9d670e086812efde80449d6479b8fd01654511b21f049f2aefe064d7d307f05bec645ff28288b1191e49f6cd44956713c42d9310ab98c265b5c72c6ed867e6", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780009"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) listen(r1, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000fa170e65e3f50327e462000000000000000000000200000000001900", 0x3f}, 0x60) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000280)=0x40000040, 0x4) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/170, 0xaa}, {0x0}, {&(0x7f00000010c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002100)=""/183, 0xb7}, {&(0x7f00000021c0)=""/36, 0x24}, {&(0x7f0000002200)=""/204, 0xcc}], 0x7) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=0x0, @ANYBLOB=' '], 0x38}}, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff56, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) close(r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4) 4.74011882s ago: executing program 4 (id=9273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) listen(r1, 0x39b3) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) close(r4) recvmmsg(r1, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000600)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x8014) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES8=0x0], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x114}}, 0x0) 4.561061333s ago: executing program 4 (id=9276): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000000)="aa", 0x0}, 0x20) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000002c0)={0x8, 'syzkaller1\x00', {'veth1_vlan\x00'}, 0xfffa}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000280)=0xffff, 0x4) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) 3.636731985s ago: executing program 4 (id=9286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x2, @multicast, 'veth1_macvtap\x00'}}, 0x1e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0xc, 0x0, @void}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c0003"], 0x100}}, 0x0) 3.493499949s ago: executing program 2 (id=9291): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r2, 0x400, 0x70bd27, 0x343f, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc000}, 0x40800) socket$igmp6(0xa, 0x3, 0x2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x284, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x22f1}, {0x6, 0x11, 0xa896}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6}, {0x8, 0x13, 0xe2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x800}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x95a}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x95c}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x8001}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x3155}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}]}, 0x284}, 0x1, 0x0, 0x0, 0x1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000600)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000640)={0x0, 0xfaa5, 0x30, 0x9, 0x7}, &(0x7f0000000680)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000006c0)={r6, 0xf, 0x10, 0xff, 0x400}, &(0x7f0000000700)=0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000740)) bind$unix(r5, &(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000009c0)={{0xa, 0x4e23, 0xff, @dev={0xfe, 0x80, '\x00', 0x24}, 0x80000000}, {0xa, 0x4e20, 0x6, @empty, 0x5}, 0xffffffffffffffff, {[0x101, 0x6, 0x9, 0xf, 0x6, 0x2, 0x1000, 0x324d]}}, 0x5c) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000a40)=0xffff) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000a80)={0x0, 0x8003, 0x1ce, 0x8, r6}, 0x10) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r7, 0xc0205866, &(0x7f0000001140)={&(0x7f0000000ac0)=0xffffffffffffffff, 0x7, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001100)}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000001180)=[{{0x4}, {0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x3, 0x1, 0x1}}], 0x10) socketpair(0x9, 0x800, 0x6, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000001300)={&(0x7f0000001200), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffffff5a, 0x11}}}}, ["", "", "", ""]}, 0x28}}, 0x14040080) ioctl$OCFS2_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001340)={0x1, 0x0, 0x1, 0x7fffffffffffffff, 0x200000, 0x5}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002680)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002640)={&(0x7f00000013c0)={0x1260, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1238, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x75, 0x0, "bbaef32b77d5935309cae8e3526237c4ef957fdfbfca57463cce1f569a3c1ab4cbb9cd3fd0ca203e3b4379e6fc8e0b673ecea5cb0a0a156f5bb41495c2baefe8724c3c470eda07c4c9416e71418b1e8b43c3d318fb6098c871fc3a97bfb68d4618c0220ed811f29f3977a22b4eae32c67c"}, @NL80211_BAND_6GHZ={0x5d, 0x3, "dcb5e8f9671102eb3ac0a50726926eb6030bda9cabd7406d8274d03f95d060ed1605fbc5b8121258a577b4475aea865ac537fd88f2c998a694d51d1f03b18e54bd29d765d36293da5c357c3cdfd8d145c54506d8e7602cdb5a"}, @NL80211_BAND_5GHZ={0x4e, 0x1, "91f7cf2f54a28e65d7a0e7850f650b51b4d2083eb9cf5688a8d05311301145bde56455e98a6192eba3439b9f04df8719474032657d87cdc83fb42ddba6c9dca8889ff4ffc95ab8c7a1d8"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "ac3ff82660134742e7f94c85a6e6b06d9ab8184cdf35073be1f1135ac5b49362402664b7eb78d6c17f7f8f9dbbf3d540c7d7466889d6b4c88dead275ff82c879e6781c0ed230ec71e8dd21e0715e55598a6dbddcfc27c555ac91e223d9d1b257f7d6559aec2b983b463dbccd335974cd7b7974674045b7787bf34d0830a244708fb141c67c749bd873c54c56b2bcb4a05fca4ed81a6b1057d7f6bd1b0c7aff1c5c6c81166bd3b8ddcf93f210862d10eb740a5cde37de66a33956a2b3dbf761e6ccb280469b09ec3849f3eea39d24fc33e2c70ae58d269761afc83ebd9cf110549ed6ed7ef82528b48679e3cc72ae91e7f1ecb45865aa2f00a74c90868d2a863f8d81620e9efe334a577b230731b800996ca7eabb6ba8088d765e322678772d70ae55278c1241d89f0b8a0af13329c3d6ff33c9eaf714c56b333b2e83c932c96994d1a12e4cdb38eb8c7c7f5255bf4d20c023463c646c6c0626b497ee2041287698c5b036c3f9b5d0bcea5f88efe4dbc7c7528b6a2faee68823b889f91441347c9144bbe3d881d0d604beb620212b02dd3801ae7c5e3b2b291e8c866e648bcea73f9841f004691a431e54771e80e7b558f811557b7d7cd5a4179038fa37189cc7ef7fe4f98a0e1ed326ae26e149ac584efcd2ae45fead1c45dec1a735fe88ab56f819c592d856bf3df684e55dc04d7f6412c8ad53515bb80211bbf61fac4a80d6ad37f28d3fc5d60b5a9e3b447f2f7418365cb1b7b02d630aea3e00326d3d09b56c74e5a38bc131b15eca6f6238be3413d4033fb1eda52d7ce3a62a0fd0ba430b1732984771c4dd04206116d44da6da510888d06b8904a3dac40795c36e5299fa5fb849a74facaf540072393ed5d0aec32eb011906cca3496c2d045243c82461bee2b0a76e206706607b35644ecea82fc53d7ad44ba8d4a5ec1d734b6a3e9a5e955550f80ad4aad1407406df8cdbae45814fd753d17c9bec6d4017751f0323fad2f4dac41a616b71be1d35d6b53abe5174163e6253e42879ac774b657848e1ce7003e992aba9a868f0b2b175af2b3280a2046f1dffee8ae9633b39ff2d8bf69dcd193de19260a38889603cc7c4dbd36f4e109152a6ba6681061fc51173ce01541cab6a24cc19d66adfdd9e29e576970eb7d765a73ca2222e0799d870c534913d3e9c18237d7155ab3f5c6739cbe61a234f8cb8bfdf1a1c48451b1e7a4ffd4e568d26b966f6abc4efa56e70ec77b6fec05a24a74b44f583a26b23299b2b503405d18553c24d1446a4021ccc1784e0058464fb816018ba772a4a136371f77b55316cdf506f920f278d6db40298975f10a650d9c9174ed1a51d3c89e2f8d3af6307c1ec5343836cd9a7bb134896636cbfa0700bab7dcf08c9edbd46bcd72ad8827775cfd47bfa70f198b587d94d783866b54e9aebbf766e6c4a51c919a7ce5c15a68a26237f649182ccceaabd220d98e1862ee260f5c95fbae5019cffd0395e9852573c503a0398a7a8fbe87de9ac3942f121479fca1fadee2446ea50fe02702c06905420932ca895f18655efa4859d3ae259b9714d4938f186b6febe61fe73e384f6ceb58cbc3c8ac1f238cf566d374ec1cc58423479ccdc63939571a7b048424587987edff75810998f12295d171e9161561570729cafec14ee64cdc9133910b7079e7ff88c568ac9205b70b85c552075c9e9e618ffdc3cd3dde700397db0eeb6a1e5643e1219d6e524601dd055ee9b95f2d3055a0036b645c4bf759c6e87de7e9330a319ae261f2a68f2bb0ba5c2f847b4f0942014cf16eda638d3438c12870c1aaf82f694213facbe5898a6737ca196f65179f4fc007df01cd62fdc352193b47af9a68b5724c178f24763b51af7a01c7895aea42e3c124410375df6228df7c3051ada3b73c816ded7086ff02934f0ce1b0f722071b781f93cc0550d307c3af7fb879b03bdecb18af6f3b6834dd1e3219598215c3712bd90e1b74a43247e8b5b7d268d1e5e5027bc4131cf572e57570a2cfd3fbb72198618236792ee81b84bd00d7e38fde3f24b2b6155ae99af3d5c6043b04e5f1298aedfd43ec5b0a59aabadac8350dcb4c4cbe2325ec387e06c8148db4930b933a5bc32185dfb492089e47d2b5695527e56eab85290c6fa7c741c336a1490cbc41540594dcc64a2770b0455271550262f4c5c8491a8c16a929cc8e7d5d3c6d1d8394e7c26a1416c55e684738359950d61c5a83903557c8338f4d203b02677659421028ecfbf1e9e8d9d7f25dc4d11a9252fc4d7dbf984d62e9933465df0da5099d00268a7f0a03e5c3eeb7af43e8ed6b2047450a3f9f252a611f259da6c8d646378d1c317e6d3ffd1e6243a6df5d224f4debbb9896fa0f67c677fbca30cf09cbc3c747e96923fc1d75a6df75e4d906c54080b1c7e130c187bcc9a95898ecb7226e589021a2fc79d0d82b2432ef94d0a8bad6a9108a39532f7e46c77f5eeb7caa991286f87b40683c032b218d15a292811443f4b5431ab1267c1fb4a829bc931f26a6bc92d2059ea239d3b13d1ea1d1d224ede70a4be74c1079770ce4f0d2e5ff26c203a6ba1e23f2b81536add4a11d8ebbf1e62dc4471975ae17c774698b39534180b6cf878e1eb1b076365345330159ba35b6b717abab45185e52416606d26683c0d6b00af3d00f8b5a55de5e0e76e71d97cc0c130a723aafdd5e1dc7e237ad72ff48126c3c6277449d67d5380f7d48934f1d40a8babeee781f29cd01ca9f0510712dbe0e755d374743a84c77d387464d31b5b7706925906c82878f6c06e0213e60147ecc3103c84b6b4962d2492796ee8608ff5c0a3056ee0b457eb4055741d493e4c5842e6b9b1834fd99e82fd161ad14d69a1470b34db274cdf061105ab41976c52a2e7103ccaa391f8b8cb99ad244d85dd2ecbb9f917800d7ec420392fb5c11eb2af6a7f1a5bb3451d419fe9d314ce4e52993f29d2abacca2ea40df3458ea7f126c0d78d92214f5ea7cddbeb21ec1ec05dfdbf736e5f274add79d52ef43adbfc9937d62d21bf55eb0c4976869c72c4b09f13c209dfadb1ad8b21bcb2cf97b055937202acfd0a2f71693b617b95308f6907e6a356ff1c465d8693dae68c058bb3b183191a398c66a7ced9e1b5cf1025defec565bd747cb7ba987591ddd244773bb35c2734ee97e2431ca775a710168836a531ef15c65e87109ef2aa88f5e240ab8866c9b074eb932b225dbd754a52d8f2b7ac09395321313fe2d69f2fb9429f5fe40bd108e28f391e9b1c967d69a35cb3da65beff9bf955492b87744db092bd4f9ffce668c78bd9d33c68112ac4cd1062175644ad770ec82b4b0c096a93644d3dd606afb2fa055db5ab88cd360499bdf345687be9f5641c89e133970ded9c47e7ed7e57a9a70b8a4b1cc786e24143195c9157ac9724c920243a1967c688f8930f1c30f6013550f11c7ac543959e7eb62331d7e3a9f7de86a6b7f1ef06bfad3bfc5180d88e62068fbb81e9d3f0722f50f7252c3ddd7bbf719abe2f47182e0b2d80df9e0276a62a1205a0795cf04fabc1480ce3f34adfec7dc41f9adae08e400b195d68f8069a1024f4742fea8f122ad414a60412b8a7f6ee2ffb3f07bdd64175a4d3aef1dcbdd75bb5f7601f03848c5dfad6ea9e3a1faab7b2156b8aa8814fb494a0ad85fb7452bdeb765019edaca8f33d4560afebc7a83031be7cbd85480e0b6cca6a3cfe6efa4ea1c9cdf91f8564a1b6df1d11d49e11523ccbbc8e6877ac0610a62c78a8a498f61532acdd44322b122506a93840b12708f91f3cf0a6981251cc0c0bd6c6f2d80e4d65ca033aeb4746e5984b6ad8acd22b2fc088b89914466fdcf4096585cb373d2e7493dd10e2de7d89fa10f446dd99416d256708d82b5e1bfa2f0b496f8cd1aa7dd424a5d38ae2bbbca4a1a7d21467c79d375d2c2c980ff164ba1f80e0450f5dd70f811660210da9130000bff722e06dbb984f166684adde85a7cf1e4c350eaead09ece4d6ddfc10647a495c76497581e42b993de157fbc80146fe2f7cd1f1fdc4699b129acf197659c68fb35c4a0b635cee20d90fdfed547ba41f2124d76ad3628f7bf207d820f0c318d393901f902a217858edb26224c495b2a025f453c73ffd496239f81bc46fe076551c14a1f9e2219cb6ea8dd6ff7ab211ed11ffdc9afa45612067b573b874791240a94dc5caf359497f34a6af28751cfc380e54ee0a97c6a89dbecd32c239b5456fe35af9e7b11e620b91babd3ab65b0841baab4257d45e24bc494a1b44baad41dba27e28bcf5d4973bfb2edc1de1d7fdaaa2dd33157442627ae2caab4e33234cadb978cecba605c8fe87c61d5cfa0a93d88f21fdb29bff956c3f9895e59503b1d5ac9a0bb6995ccc40f512d1fb8cf0027cb002a06b7b325d88997d9d1933c4f54a38ff594fc61d6f348b90eada32d3c2ce964d6c7effd77cc8bffb2ab4020a8fb6c7d92bb58ace918729c8495dd5d4621aa051677b462181976c724eb01f9b7040ea35af0b895558c41acb37d069008e0c4090676fe56871a6a49736da2cc022c1d8e9a81cccb8b22ea5afc37f254ed35f3f1838146cbd17429eba1b50ef442a1e0c9c66303753833706266938d2dfd1be1897f3effcf3cb3f4fd3e5df6fcd0430927bc25b50e39b2562e16c7d00b6b918929546370a6baeaa76d67613038a1358735fbf6e3544cb2b13f7111b2b273ca22384b00bea1a99a60f7aa48ae6f42b981f5cbb3f1fc156ae346ae6a1dfc40f0b45296ba6246d8172247ff58da83191aa5ed46a6808b29f89a5318d9e8dfdd4862a8e0eb726c5ae75a4ac9e93ed32d482b5b92dca2a9826833f44990939a9c99e030cd7ca5294bb866df7c469b2402dbe80f9c6f95f61cabf88c47e16c166899fcdbc37acdfe2f06b6ed9d4ae3a3f8041689a9bcabcc3995aa674848b55d0df43e6b0447b7f4c24b4268dc0c4324e1276ff5ea85245d5160504f0dedfe691f440126063a62d80c5cd2f21fad9295934edd2ba81e60189aab5cd26c3608171aa16306f06cc90b203f2ead6a9d0e622f762566850498043dad341160eeb300fb211bd516a5734edd279e846c94ac06097100d1d7c612a4c163b60ccb56ae5ef35d63361b48f9d347daff84fbf915f219fa1797de6517acba97c90f08de755a5dc448791e9deba7b3d8254507fb0c1ca9b9e0ef949a4bcffc4364bc1f9989e710b53a4b36bc9b9cff4661bd52a3e1cfb8f66280eb371272ed5a0993ff35159b4ccddb12165423bbcfa543d15edb1ebc6b0c29f270bfdba4f177c0c49a41781fcfe169ec5199ba2399c4945d1288685d597972d0265cf4a00d35e8c6fdba6989458c2c866c9ee83c77c827743a0fe6b66e2de85c17becfb8654d08866f263d9b765858e3a2a774e83305f4cf3f0f020b44382ffd87bc37552d0b9a2ae55df2fc982367a9e7cbd06a796698d5c76fe3f5a1dcebe239191aac814d8a0518f9c1a922eafb8010d6964e57b660f469c1527ea2fd85205bd15733859d08154ccb058083a3246cfa4e0bd2976105307138161790e5fa446f02f1385964189656baae7fe7ccf22bef533bf56a5d3a0e04cd08cba092ab06ff27b8b107e28d1027709f22c06c49f93a4e7eea8910a109ecdab82fb6f2bb21b997df4cb46af95baa46bafc04ceb409dde22c358b4cc28aaed914a568fb3dfcc9f4423d8bccb8ddeea62305f739aa404ccc853f597415640c99de6b652e9cc8f6029504e86f546e56a7264f506b09abd6e5bcffbe1c3ba6d052c9369f8ce101a04d73ad7dde6d3d17f46d0f0082a333443eb1faa06f"}, @NL80211_BAND_2GHZ={0xd8, 0x0, "230818512f0c2922cacab6a6c3c5d8023aa303f11c9bf22708543faab2aa8f55f80016a39e71ef31f9b488cd2b71d96d200503758c25dc7773b34b73b35a2e34f7a90aaa719353497fcc73661f24391139abba10e9e250cf60f8e9842a03c1b7f1e79ec9f201f8fd5820690665b22cfc2904c8c74ef8fbff8b0667880a3d62b91dd803285e52fb3982531faae7623415f3fe6bdabfa53e9224d9af0157b76263b5e4bd49a429b12878f008e22338c0255ba34674b865904183ed890b80d076dcfb5ab995775e3f73996307149922352b394041b2"}, @NL80211_BAND_2GHZ={0x30, 0x0, "40b3497463915b7a5d796bb289ae777fe1d5e7487299170979339b5b700c72113c7fc58052c6897253ca9038"}]}]}, 0x1260}}, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x321, &(0x7f00000026c0)={@random="1aafec535774", @local, @void, {@ipv4={0x800, @gre={{0x18, 0x4, 0x3, 0x3c, 0x313, 0x66, 0x0, 0xd3, 0x2f, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0x23, 0xe0, [@private=0xa010100, @local, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101, @loopback]}, @rr={0x7, 0x7, 0x40, [@broadcast]}, @timestamp={0x44, 0x20, 0xab, 0x0, 0x9, [0x6, 0x0, 0x6, 0x8, 0x10, 0x800, 0x1]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf6, 0x1, [0x4c58], "49c8843b6cf4ee5151eb1df562fb49fc6671cfa388ebf90370686010833b5b98e715fa39098faefceeda9455054227dd98fcd92aef2b26e9854a0033b29f961678393345ed430b100c17f5fd198487861b31103f609598dcf9ccb339ced5006beb1273afb8ab019a26e6928f528406bec1d701a32b9bbd4a3c7da0498447cae3bd1b7af7851459527a7bcf70b082fda063c89766be6500ae05547ef115aa8f1c2a97275d95b1ac0d42a5e4b990072090b949043c874044a12551d5fd24b049741d9f34e807cf0e8244b59067ecb592cab3a45e0eeda4b51c0fb370b5fd2bbe2d803d90e0c19b097dbd2832cd7202ae95dd783ceeba64"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "d90f0f4d6db246de2fcb1ca3e55456236745ea89cf22a0888f8a4b7ea4dfa25c67264d1d5928640dc06006031c2dc76f21497ddbc9bda7b81f1cea63356ffb9dc581a4bac82afed58a119c3b598665403c465837af369e44ebc65d51f3aa0afc6e554610b339878a1a63915485a0f473333eef0bc2eddf77cb34e83d23f11b0f11c5eff3131480a9a3eda4b069b7b50b19dacb5ef6a09946424ebad657740e7cf536777d0bc597e2739fa9020c66a1f213eff6c771db1a7ab3f0388705646dc1bfcba2d8885674c37fa1ad1318d87565499c14e35963f7909864bc0048c2"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x1ff, 0x1, 0x9], "52c1821cf1ac22db8aa4659e6b180d35ba3fec18adc43651534be51c6b71ca53a135c852d0e861322d64acd37d2087c7bb"}, {0x8, 0x88be, 0x0, {{0xf, 0x1, 0x5, 0x1, 0x0, 0x1, 0x6, 0x3}, 0x1, {0x91b}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x40, 0x0, 0x1, 0x3, 0x2}, 0x2, {0x0, 0x400, 0x2, 0x5, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "ae0e00c7d8a57e484c789adc51b4936423c2aeaa3e5f142620523a31def9983327722bf0e0190dc46557045b582fca7a654871ad2474efeea838445ae528fbbd408e4dca5b4518a4a19ca34448e9ceb992052441428220003aeddabc0b4df53d8a4d"}}}}}}, &(0x7f0000002a00)={0x1, 0x1, [0x1, 0x154, 0xb47, 0x32e]}) 3.120441173s ago: executing program 2 (id=9298): socketpair(0x1a, 0xa, 0xb, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000100)={0xd, 0x20, 0x4, 0x2288, 0x3}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x844) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) (async) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd00000085000000060000009500"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd00000085000000060000009500"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) (async) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003, {}, 0xfd}, 0x18) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x8000000000000003}, 0x18) close(0x4) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@RTM_NEWMDB={0x18, 0x55, 0x1e5, 0x70bd28, 0x25dfdbff, {0x7, r11}}, 0x18}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@RTM_NEWMDB={0x18, 0x55, 0x1e5, 0x70bd28, 0x25dfdbff, {0x7, r11}}, 0x18}}, 0x0) sendmsg$inet(r8, &(0x7f0000004300)={&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000004140)=[{&(0x7f0000000180)="e08d213930291bdf5d57dbf85eaa22b4d7b966198b89707ccb9ecb4fba81f0bf360a1ac6dce341349f6d33294d6e1bed7804d1fc17860fa811f7918d24ee8d65c3a0495bde68360b6da4a8f0d3f77ce39bc255006863050547063b5bc91b7ab44fe1106e22cd6790e5e6577e8b1178f5a6401f5fc0a2296a53d6a497dd7772142f1cb33d20dc5bf374d247edd163d7545068bbd3dff4e2738c7f8b325f26991522845dcd6e1e994f65525d8f518e47abc15e95e2a5c073a51b066ce4ba7fd0f67542539e23be90018a8885b7efc2638a21a7e9f72ee031868fd6bbca31b5", 0xde}, {&(0x7f0000002d40)="35e49863c0d0babadebab2267903d40d4877de1bd2a91c1536e21cea4268db398f8c93713007ca3bbd6dfb202768b23ff1c62e81624ab5509124562f5a1a64286f71e82a28609d8c1ca260bbe4e421113fe5a25f0816787e4e5ee21bab29478efbe1bdd32f33194641fc1f1c676081ff13762d3e10006f878a73213c4589dfb5d4d174172ac1c731c49c9c3c40cd44172f86f54eaabaef118414a5a0011ce50c54011a7112c65151a32a99a34474b742285b66e0624c8ec1a5844a271d885a0f3b1e540311a8980cab1a16cc1102614949479659faf3ddd9562b49e6a0cddbd9d2b045954f90e3db98cd7ee08919b8594ab9e7b1f5b332cc6a502783da9b94df44c9508dd6d98ae8f09d1ec1d35db84c2e626f45e6f6b2789a9ec9df9a7fa080deff582fe41f8fe91627fcf1e1a49ba0af4aac93e90ca7c85eb661410bdf906a2342c17acffee097630f1c88e2306423219e101b002e320ad59024dde1347520745faf802da5a56dc5294f91995cd8075cee438787f5d6649f66b0d4d146400e204da65659ef5dc66382d1cc5ffa61991ced5dfd88a68d65fc13561e2cff034f32f662d88fdf5a5d45ae6213bbee95e9dd5018a080bbd849e2304f8831a937578b8439cf166db93369955741a400241d653b87b80817f09e4706e43146c651435ab86964c08bd8c430d4b75b5f95741cf83271e7beb9e3b9802faaf5529e48d40d87d9c30ce827041358228b5a2febfd9a18a844704a65097423fc445be97f3ca9fbd18ede355b04d52af058274641fe16c0a518a28a3b9656fbe27cc2d819ddf34d6d6b24ea96304d15a623a5950137541b71a2ac568db6532e40d1de7e1f9907b901d0ecbbe811c587b69de1b641bd97527b81294abadb50e21491fa75966793ef5f748e513193d19b86d83c838532d54ece08a10f40efeab9b22be6c322d00a0418855d2532a9085dcf3b024e114334d4556bee075da8bb28ca0e3d037d91cb9a2448d49a021a46024db6e8b2a84bceb8c24acf85f543a68bd29dcb83b6f9eed953b179d049b43ae44224ff8bdd81c94f06141eb09d5dd9d575b87745a1c81d13a383ae100a86e419d3ef690ae0712f74673c109baacc895e803f14b53f271bef1bbaed085610248aef0e47bc32c9834055cc81bc0fb22f1f119025031f14af5b56f5a88565d363d5db6b957a326396dbfe631e56b60180759980bf3a754600a4a9487b363f7e5371f0142e97ca4efb76fee7c69e3382af8e67511d81371fbdef825fa1b934d0034cd4f636951546b2408349803619904a33dd91b8cceea97597c99e0781a7a4fe0742955c4ae6446f1a2018b39030083a2c3ab16f776e85a3e3548311947523d10ab9646b160ad9800e21ab3daafea280f7d61efd29c1c998750f1c3a2d4c58c6785731982c1cd2e74bd6db57063645c891026f2403db10782c2895f3790ee20b3be930a70d2f7f1936b4233f865aedb633a20498a1626bf569437daacace1462e09f244038d2a463a2a724d1dea69d1708bb36d498ff8d81eda4155759803f87e67a71259a1f1846204315ae8b3fe5020eca2d0ade4f3feb709f0b4b455aca59a300f4afab370f5ea9e91992e040b3a250b64bfdaed47349cd05dd1d22a209ad9fe68e975e804ee0630724eadc4f8bcce5c896ce4f73099320aba733176667a5f0568227b90442c5e63975f49538fad23ed821137ce3edfd71eb0cd49ba1f590f1ca1b67b13506d81e657ecdcc6fc506e69cb3d9017e9ec8df83b0fd6f3ed03d07cf13a2835c9718677eb12c7a1c371279a33df4bafd27d7ffd134018ab03fa297cd04bd364610e4cd98169d5121c90ad64a2733249efa193e7e88bd41a0a0ef04ea8ab741ec3024b8b312039f0e759f347e6aa7f632c17db65421f41a93e182592dbbc2b11ac9dd8701c3c6f5b75915fc9ff2b6c7633c2be9a4f125b91224ffd6fd3437ea507fb352adafa6f612e328d9e314a9efd253fe7964d721e9f1643d925efd07307757b39f9986992cd5d128be300c91b77330a93658b0aa4fb0b260a7515e1100b30ae49283c9fdea19e7dc3f7116bc9cff05e76e2eb4ac33148b6cc25307b8decadf64fc59b1aa071e5183f742e89d9fd1f2f55a7e0637029c7312dadcd249ee4730de4c2904e616ff88041a9988e0912cd12ee1058633d31f1a3e540e0088dbfe6d41f71884c53192ea6bdd483c7c2cbceaf33951a9aa1375f3d4c43ab53e3efd1e093be9bb33bce32197c622e7b4780a85a633d4ed4050f8d4edf6651697c4c9190d5491ac282a605b7284c952be9dc192f5051df53cd4d7c295ff2d4600e6467d73df0de37880a7c857a1da96d59a5545e8f6d05779740a75c4c8fe244d7c9335f5a69d35b5c787096df9c8329607bdf84457b4f1e01a6c5cb8a32f56a7b0cfb950ed4b073cea35b3c02ad55b3d60409e7b849dcf0f58b5728add3321c1f4ac5dafd087c195ece6b6dc220e50b58c5114ac6ad976d44c10cbf16a85da471eedb155fd7f68e3878d6959da71aa22bdf8db518af35d1b4d7ea5795a9dc041e4d3f2b76757f91b6bcdf1591675227c6cc9fcde2c03ec1f672622dc36f9b0eeb132940959b81f751ad87bd9717814b7bcddc6fe8dece72b718d212867d9c56a100f22ec24e500685c870a4e91345ad195eba018de899336d86903f23f89878805ada6608e1bba465d9ee299df27616b9fe060bbf168cb24192197cd422c91d7c2ca79fd9c09d4f787eaaaa94333a51b7f3d11ec49c7925048a909639ab48be4b1d09a80461a7be6977382595896e61d0aedfba3f5de71c14e0e3489be5e0c468ddff3f1283343c5223cde4c6df1dd109347abd713a7a9aa875124483b2016802de405b346f173a3a91e398a21771691ba4e97e8aeae2ab89339ee10aa3982abd6c7dc6ed454f14734345be4ea705a5d41eabb60e61c032d30f739b4ac1e2e00474b2ef837deaef33eb8aa1a1e1f974fbfa428ef885ff021128deb56b643c203ffecbb122791d3fd2afa913cc1efb95697e13e04f1aa18d48777c55f5c91bc36d0022d9830624fc4c9c3d5e13b7c05b344efa1e0b238c6cdbc5172a7d495659f69bdea9ca4ad9b88083ab85df029e00ae24771add28a4a24f05cd7a00f59cb69e4994b657df5efbdb1a31b8d2cec7229a644c6a09d3b5750be5a0981869e96cc648760dbb1d857f1681766d5635434a79cd2c8eac17fadb8d09701a64a913f59a3c93d5175495c713190be1d116db71d3e26295d6837d28d1005d7dcba781ec761749f8434b5ea14ed46fa18e50676e3eb7542600ca36449fca7be38180b324e0a9f998be7a7b1f014e6d35cc3fcd3ba525bf898d1aeb2fb040aaa159ff966b53d71fa266ff14277af7ce6c5c860667ffbdb3d460684ad207cd073ecda82319e2a8999a55bebc683a179d1dcd57f0e2800cce1599c1d82b6ebec9f0cdaeb6ab7e6d9f9fa98d1aee0a6372be41fe84d217d2fbc77888bd80d1529632037b594f01a05339593d3f3a7acfaaa68d56a2b605585b129ef112cc827b4965b16b37577d74da554bb5782b5eea1f4e9a9e80935adc54351437cfd701200e4a801f52cf67216d065f4957735a27a4144d9f0acbe97b4b586190799a41a3bf358d29c5268edd9a66f78e41d6901925f2f72a19629b55c189463a576382321d0b877f24d04c3df666a944f688685daf42c2af51cc596b577ac3391513841382f0e7dd97d019f580f3e8945525b1a3d94cc8cb68b2103d459a8d499a9d5b09d8c91ff4a0c3c46d849129af7cce254d8b45e5d34e07388e5e97fc25f18f67adb2e7dfa037f55742ec519384a10c16e9506be2b723b2a5b0fc9815a88f2c16e918ee127e1ec4c0e3842e4095c890308a6662410f10b2bd258092540aba77b1e725a07f991a0fb63821de28c3ed5f58cfc95d1d81c67ba67782d578d82253e066148c87e0f8873f39861e7fedf0405abcb5ed4d2e2ff0e3ee3c3a3ef3eba67927a1b519ea55a9158e31a337c09c44a4836c8204544c5f8acb37943abcf34dcc40a14e6ce086efab11537c96cba97df4f89f7330dab99e9d78bc928ea4208381e86813fbe694fbf8fd307ecf58f0283c9ff56417c34f6bb27c8b577755cd26261f11a4f44aa7eec95a3588d5ebeae961cabb57198762ef7b2893955b5fe40c98a1310cd6a8f83ea122171d12673502cdd4e38f17acebed2b16dc797c7ea4615cb19aaa5b89127799b563538729cffa13d555756428e61e7284c7f4969b67c06d37c9340a6428f36b46cfe6510062f49f4f04e2f8608baa0c844dcb9ff0ff4c0e12c0970bd43d34e936073c6283b63cc76324568b1cb3105a2af0fea73d7ed1a2f0eec958966d3191372785776e2e666623ce2f0bcc906af16090c0944a8d2ebffde92dfd3babc9c465108359b2d84237db9f3beced83e1bbff4677a466a2aaadf3332f92939a20bffa7f0bebe6178abb260cb5b2f6b28e674445a21f38f341cbebd5828ddce9ce394cd382e5b93c6d4f5c0218df0dad43348ad37bc33d4f6d1b8ec642d64e57af1d718f4cda51e85c6a47e403bc2865419a089cea46378ac91640d5db5cbf8cf5d2ac1ac51dc1a46605260e5375c43b32b4df5fe09d21b72b03fc9e757a14ecba8bf715f19403698d1de88daf07487b5181b9eebc0c529fca925236e4932065e2fcf8d5d140410d06356e7eb34e2f86d2e5d5de1ce4e1bfdd15e04146d4a9d183f3ee5941846fddaf5c19533fd879591a5721d97b8021e5e04d8bc44dc825cc5693134ec9948199e5ee894af6afb3b74241573a995b7c16c8b85c68172cd564b31b321dc665a4a6fd6763d0804db2848e0eec34be0fd78c90a25ceb169008afc80c98f77d72ab8d97d5287dd9d6da3c749970d11e3fd906f8ade09a7ef965ed585498077a476cbb3455aaf2071d9fdce517ca141de10ae56a34d26bdfea51146e3eda876c33465fb7691bb4ed9e9c1b3f726e03822adaf7da7526daf29e1da2f48cea6835cc780b28f5cf53b7fcdcf467d31f8c7141881ff22e5ef55457ff871c83a8d7012341555daf85d15e918f1d90f9d962425fe4a259b7c018da3c60a7109849395546a4ebc3a27b55a56fcab85408cbd2ffdcfc304ae7154d6da3f17cb46127183a8bf316753f527ebcae43dfd8dae0deeeca83cda808bf2056caecf8907858939d1d11a8de2becb2e333dfe5beee0c30b4f3e47659fe462d2926aae425b53671ac2c3e3df2b4708be6d320639138ad698bc7ffda4d85be466b1572a400d9b9f42ad1082b3ed43d2c775c8d47a9579b1fbbd0ea17592798ca849ab7b09cdf96d5fff40885a09041881ed69cef8bb2847ca6a526981b933e9e32ba886a548c45e0e94b57383726873faa004b50d77f60662b731be516a7cc0229f6447c01d9525c66d329d48a4a1252b18ccd41112520831d38be1a6bae75512e0e1e84e04d149e8014045aa78fb6238e9e67935bfff839c676fddfffc040e0dfba5c75345b2ebd76f346894e2364c444b61f52fe7e5fe3148d1bcdb8c7663711ed1426ccd1b0c22f2fd79a031687626e8651cfde764675788ecceecece6d23979d0563e99d475dc524d183c2635175f5a27fb53b479eb201ce021e8b8e78be440caf8706b477770e1d51e5c8d6d0b4f62eccb4e56814435fa6e7c0e39b3c54495cc14052eb6551855087e77eccf81908372f35cf890444d5c7809937fd7b5818277664fc14aa01ef5232ce6d441108650cf70d03c56d6410c2525fe617c0f6391ffd93b56f86daad982e404ab1a9c32fb9d33993dbed704", 0x1000}, {&(0x7f0000003d40)}, {&(0x7f0000003d80)="5f23d02912b8ffbbc8cb663886573775352ffca295df74e5096b95b0bdecfce6ab8c1ac315c2036682e064e8226d5cf1408ddacaeb44853e7a00eff1338b79d28c91c343d3bd69745510665d2796d4ea8c4c890faa520a644032203c23141d32f51aedf2d725827afabbc2d7a90914a2412935255697cb570373ab1551c7ae7a0bf19f71f3426625fc93df4e4874dddfd356c97dc8851e793664191db09ee77f7378fe3176d3d4e0bb160715fc5fcc04e2f882932802e6f1c2a5569c6d1d5c4fa213fb32b44eaf60ab07", 0xca}, {&(0x7f0000003e80)="35da889623b489b17ada98e35c9ef2c70542b9a8c1dd7b107e6cdc9883528fd812423344852c65796eb407f32ab97af8777d38c3e6dd77a70192ab1ed64460759345ad4b4c8d9f21cde04685331ecfba408a215861d782", 0x57}, {&(0x7f0000003f00)="d3f39e2109332f5570e14c90cfd18db80ac9391123398de91c13e0f2228b09daaa05e7338d39d82c9efda45d9755e51072a6299b4704e17d29fc6c2e715eaf23534c417265e79b107f6adf00672797240617622ba0d7a50d22af3ccefc799b49b62e72a714a934fefabe565294a1db27645744659b2ad5eb4050f2280cea96a12b9b286192bee2065ea65bdd1a2f5d383b374402d501e8459e3d5cc9d8d2c2d65cce14f3", 0xa4}, {&(0x7f0000003fc0)="5373affc3bf78569c89a80c8e73227101c666dd6eeacf91dc25109c432bd4e55724d090aada9ca66ffb01293f2cf9d11c60778d952406ba8240a1f483338f2e447ffc94758d0d39f92d7f97a4f4ef3f56bfb2fcec4f4eee31880657a564bb58f819aa7a931485284337a1400c3460795ab65d4724b690b278626b4a2bbf627e5a7864e0f7d26bbc9c7b1afdc02bdcfcea28bc2", 0x93}, {&(0x7f0000004080)="5054a0d93d0c62229e3c56b359f80ec351d3942dbfe2f12f52e481bc0b84a2162a2bfda7e67c4a4d0d33964eb08907ba41fed9c3b71e64db9f23068a8b829925520a507d74bea28c32febf778dda01d35ff4fae15dbc6584a7db14fc78944db540b2d833f6fa1babde158b87c772811f", 0x70}, {&(0x7f0000004100)="d9cf7a294536870e5e654e6d2f39ec8fc42e601630a605eff0", 0x19}], 0x9, &(0x7f0000004200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}], 0xd8}, 0x20044080) close(r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.374650144s ago: executing program 3 (id=9304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x6, 0x4, 0x9, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0xbf}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.268388743s ago: executing program 3 (id=9306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000340)=""/38, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x678eba39, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000340)=""/38, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x678eba39, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r12, @ANYRESOCT=r3, @ANYRES16, @ANYRES8=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x4804) (async) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r12, @ANYRESOCT=r3, @ANYRES16, @ANYRES8=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x4804) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r16) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r17, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) r18 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r18, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) 2.073278116s ago: executing program 3 (id=9309): syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000004000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 1.986548815s ago: executing program 3 (id=9312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket(0x2b, 0x1, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB='D', @ANYRES16=0x0, @ANYBLOB="08000b000900000008002b000300", @ANYRES32=0x0, @ANYBLOB="05002d0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000100)={0x1, 0x18, "7e16119bc23dc134bfdd6c44f1f1ed81c7b64fc5b24ac740"}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xffffffff, 0x201}]}]}}, &(0x7f0000000500)=""/16, 0x3e, 0x10, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x44080) sendmsg$nl_route_sched(r3, 0x0, 0x4c050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r5, 0x0, &(0x7f0000000400)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0xffff}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00'}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2000004, 0x4, 0x2, 0x0, 0x1}, 0x50) 1.629113043s ago: executing program 3 (id=9317): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x6, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r3, 0x1}, 0x8) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0x37) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000004000000002c0000000000000018000000000000000087f9f518767545cb000000000000009500000000000000512a23263b893c05b7c1ab5ba511474da1a282707dd76b8b0a0c79e63ac56dec0455a8e01e1b690f438e2fefe6efec992e34f6cec01fe3b941571c07b5dbf33e33a4a34933f7541345f378b6f53385b36eac56406e76c6eb8c7af16e174467dab140761d58845ab072660000773e783ef8762c4eb2855138eed19a9c243073e6aa8c208440c987023f1b0a123b117e680551b4557a86be5a72b9b2fb99ae25d0a0fa9526aaf8c80a69f0a924a16b4d87434dda41a11aefa9"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYRES16=r1, @ANYRESHEX=r2, @ANYRESOCT=r7, @ANYRES16=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001", @ANYRESHEX=r4, @ANYBLOB="cd80f5c14b254c76c24e273ff5d17e62fadbdbc93c0a8fb5fb2bc3afeaf019440a7caff48e6c1fdd56851bb362e6e8198100fe5bef27f41115f877804b4da34a61564995581cee5ffef1341b6be0115516000932725d93ac88614e2e6853c583633828cd8c705a7eb3ce56a84b4ae14e34", @ANYRESHEX=r8], 0x1c}}, 0x20008090) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r9], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r12, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.616356401s ago: executing program 2 (id=9318): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x8, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001084010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 1.361100286s ago: executing program 2 (id=9322): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) pipe(&(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010428bd7000000100000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b000100", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r4, @ANYBLOB="e58e148ec78d5f9f669bd018def922626752a495778229239cf99451a77227486aea9e84d594415596ec14b788578b85b24fe4d82bb1eb34fd85e1f627512b0f5ae2d9f4566e539f6686e81d584b77dde04ee91ce83c363dc3def266c70ae077cd70d81984fab3b9a57cc908b3c0877feedadd0282f7d722a672fb55f25aed"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000001c0)={r3, &(0x7f0000000040)='\x00', 0x108100, &(0x7f0000000080)={@align=0x8000, {0x84f, 0x4, 0x4, 0x9}}, 0x200, &(0x7f00000000c0)={@_ha_fsid}, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f0000000400)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r6, r7}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d61804000000c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951a", 0xab}, {&(0x7f0000000400)}], 0x2}}], 0x1, 0x40) ioctl$sock_netdev_private(r5, 0x89fa, &(0x7f0000001300)="31a0998028b600e8927faec80946a42eab8e0683387de3a4c37f10067b0b0711214b4aeba1b23584cdc8f9fa8a4a3e654a8f83f752a654dde79ebeae226960491f3e17c9b09930d942b20776eff5701a66c73605a5e705f07983d223d669a3d310ab8b0ac9bff017795fbd398a69ad3cacc6591c8ec06fb5ecbc1445ee2e2780f33d770a03381cc6a7ddf82063c61c7c82cad63df0f5afb154426ac4e9639d6d4be976a538a21ac5a272") close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.210232259s ago: executing program 1 (id=9323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x6, 0x4, 0x9, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0xf1}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.193788006s ago: executing program 1 (id=9324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}], {0x95, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.165848107s ago: executing program 0 (id=9325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x7, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.061402638s ago: executing program 1 (id=9326): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r3, @ANYBLOB="000000006f0018000500100002000020080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup=r4, r4, 0x2f}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x5, 0x0, @void}, 0x10) close(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x40000000000000d8, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4c00000011000f14000500020000180001000000200000", 0x17) 1.040612865s ago: executing program 0 (id=9327): syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000006000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 892.952537ms ago: executing program 1 (id=9328): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00', @ANYRES16=r2], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x1418, 0x1, 0x70bd2b, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r8, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000080)={0x11, 0xf5, r10}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r3}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r14, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x14}, {0x7, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) sendmsg$nl_route_sched(r11, &(0x7f0000001b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001b80)=@delchain={0x174c, 0x65, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xa, 0xe}, {0x15, 0x3}, {0xf, 0x1f}}, [@TCA_CHAIN={0x8, 0xb, 0x180000}, @filter_kind_options=@f_route={{0xa}, {0x16fc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x9}}, @TCA_ROUTE4_ACT={0x1298, 0x6, [@m_bpf={0xc8, 0x8, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xd, 0x2fe5, 0xffffffffffffffff, 0x1, 0x1}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xd5, 0x3, 0x8, 0xfffffffd, 0x1}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x10081, 0x8, 0x401, 0x3}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0x46, 0x6, "b714edf66c05715352f847e4b3f7f75157332fece87ab4815e3c5a7058b3a3054de0bc2923815cff8297d5272089aa924337d91775682c6d38cc3436cfa10bf6187d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x11cc, 0x7, 0x0, 0x0, {{0x7}, {0x1a4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x81c3}, @TCA_IPT_TARG={0x65, 0x6, {0x1, 'mangle\x00', 0xa, 0x8001, "eb1bfd964a78eaf6dfeb27ec1abd08949f1c18d7c7b36aa96ff5b47a2766e2f4214c37956e0dc0e3d9feb2ad5025774f2317cf93325a774e4405dd"}}, @TCA_IPT_TARG={0x127, 0x6, {0x7, 'raw\x00', 0x2, 0x2, "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"}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe3}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}, @TCA_ROUTE4_TO={0x8, 0x2, 0x82}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf7}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}, @TCA_ROUTE4_POLICE={0x428, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x6, 0x2, 0x2, 0x9, 0xff, 0x8, 0xe99, 0x0, 0x7, 0x5, 0x2, 0x7, 0x2, 0x8, 0x5, 0x5, 0x0, 0x9, 0x3, 0x4, 0x1, 0x7fffffff, 0xf8000000, 0x0, 0x40, 0x7, 0x1, 0xe000, 0x7, 0xffffffff, 0xff, 0x10, 0x40, 0xc1, 0x4184, 0x7, 0x5, 0x7, 0x0, 0x10001, 0x5, 0x7fff, 0x3, 0xfec, 0x0, 0x9, 0xbc, 0x2, 0x1, 0x0, 0x8, 0x1bba, 0x8, 0x4, 0x0, 0x3, 0x9, 0x8, 0x9, 0x7fffffff, 0x7, 0x5, 0xe60, 0xe16a, 0x7fc, 0x7, 0x80, 0x905f, 0xa, 0x9, 0x8, 0x2, 0x200, 0x10000, 0x0, 0x1, 0x57fc, 0x10001, 0x5, 0x7, 0x662, 0x5, 0x800, 0xfffffffe, 0x8, 0x3ff, 0x9, 0xffff, 0x4, 0x400, 0x5, 0x10000, 0x0, 0x8, 0xff, 0xf1, 0x2, 0x8, 0x0, 0x8, 0x3, 0x2df, 0xca1, 0xf1, 0x6, 0x4, 0x101, 0x6, 0x7fffffff, 0x5d7, 0xf7, 0xe, 0x5, 0x5, 0x3bd93664, 0x7, 0x76, 0x5, 0x2, 0x5f, 0x7, 0x9, 0x2, 0x1ff, 0x8, 0x1, 0x0, 0x3ff, 0x1, 0xb64, 0x8, 0x2, 0x4, 0xdc, 0x4, 0x1000000, 0x1, 0x41d835c6, 0x4, 0x100, 0x8, 0x4, 0x2, 0x80, 0x7fff, 0x5, 0x7fff, 0x3, 0x216e, 0xa0000, 0xa676, 0x50, 0x4, 0x81, 0xd, 0x3, 0x0, 0xfffffff7, 0x81, 0xfffffffe, 0x0, 0x1, 0x3, 0x6, 0xff, 0x5fa, 0x5, 0x521e, 0x0, 0x5, 0x6, 0x7, 0x7eff, 0x0, 0x7fffffff, 0x2, 0x1, 0x7, 0x3, 0x2, 0x9, 0x2, 0x9, 0x3, 0xffff, 0x8, 0x4, 0x1, 0x800, 0xffffffe6, 0x0, 0x7, 0x6, 0x3, 0x101, 0x63be, 0x0, 0x7fffffff, 0x5, 0x5, 0x2, 0x6, 0x6, 0x7, 0x1ff, 0x1, 0x3, 0x81, 0xb4, 0x6, 0x2, 0x6, 0x6a1, 0x3ff, 0x80000000, 0x9, 0x3ff, 0x9, 0x67be, 0xfffffff8, 0x0, 0x5, 0x80000001, 0x81, 0x6, 0x5, 0x6c, 0x1, 0xf, 0x7ff, 0x92d, 0x5, 0x4, 0x2, 0x6b29, 0x26d28ded, 0x933e, 0xfffff0ec, 0x7, 0x1d55, 0x329, 0x1000, 0x812, 0x5, 0x9, 0x10001, 0x8, 0xba, 0x7f, 0x8000, 0xa, 0x5, 0xa, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb2}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x8, 0x68}}, @TCA_CHAIN={0x8, 0xb, 0x91bf}]}, 0x174c}, 0x1, 0x0, 0x0, 0x800}, 0xc1) 892.7213ms ago: executing program 0 (id=9329): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0x8b}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value=0x3f000000}, 0x94) 797.488535ms ago: executing program 0 (id=9330): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000e3ffffffff1712", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 613.594425ms ago: executing program 0 (id=9331): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r2, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb970a0df15000000cdb70466518907efd04373a0e64e30bbd8", 0x41) getsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="002e1c4a9345c3c48667e7159696d21e587fcd112fc484c9086b073767f181e7277956a0ce6fb90827e7d7f204ff34e5a00ad72f0742c21d9e734e11dbf982f5bdcbd45846a8cfd8e276aac2edcb36ad87e46ace10cca2ec9ac11140d5dcf94f3c6eabae86c32caab52593139e2bd202fa07c46e6876f477508cb1544fa3e1ba69bbbcaf338bcf005f4bcd87aa8a03472041b86562726e4db64598999136e71278f7f06ad48b4b5ffd29cd3b82aa13fbfc2bfdbfebc0e3faa225627dd8e9592aa6d07e869c86bcfb647cd753812fe3"], 0xa8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000013c0)=[@in={0x2, 0x4e1e, @private=0xa010102}, @in6={0xa, 0x4e21, 0x4, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000001080)={0x0, 0x0, "b307b08d06800c5f79fdae284432c1e2"}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000100037040100"/20, @ANYRES32=r9, @ANYBLOB="c30803000b2ebe2620d51280080001000208000100000000000000000000008000000000", @ANYRES32=r9, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmmsg$inet(r7, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x8001, 0x0, 0x2, 0x7ff, 0x80, 0x4, 0xfffffff8, r6}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={r6, @in={{0x2, 0x4e23, @multicast2}}, [0x7, 0x9, 0xfffffffffffeffff, 0x3, 0x78, 0x8, 0x7, 0x1, 0x67e, 0x5, 0x1, 0x7, 0x6, 0x4, 0x8]}, &(0x7f0000000440)=0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 477.225355ms ago: executing program 3 (id=9332): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x400000}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES16=r12, @ANYRESDEC=r1, @ANYRES16=r10, @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 414.655435ms ago: executing program 2 (id=9333): sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x2c}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0xf8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4, 0x43, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x10001, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) (fail_nth: 83) 289.402882ms ago: executing program 1 (id=9334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x6, 0x4, 0x9, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0xf3}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 184.830262ms ago: executing program 1 (id=9335): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000000000000c000000200001801400020076657468315f746f5f626174616476000800030002"], 0x48}}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec2906659bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883b3082512e9ad2fbdf6bae"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x40, 0x49) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99800300000000004c0012800b00010062726964676500003c00028005002d00010000000a0014000180c2000000"], 0x80}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 171.395837ms ago: executing program 0 (id=9336): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001700)={@rand_addr, @remote, 0x0}, &(0x7f0000001740)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x5, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000240)='GPL\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x50, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000017c0)=[{0x2, 0x5, 0x6, 0x8}, {0x2, 0x2, 0xa, 0x6}, {0x3, 0x2, 0xe}, {0x4, 0x4, 0x8}, {0x5, 0x5, 0x5, 0x12}, {0x0, 0x5, 0x0, 0xc}, {0x5, 0x5, 0xb, 0x8}, {0x0, 0x5, 0xe, 0xb}], 0x10, 0x5}, 0x94) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x605debe90a07df}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) 0s ago: executing program 2 (id=9337): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000200)=[{r0, 0x1210}], 0x1, 0x1ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'virt_wifi0\x00', {0x2, 0x4e23, @local}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x4, 0x2, 0x3, 0x8}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e24, 0x0, @empty, 0x6}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendto$inet(r0, &(0x7f0000000000)='S', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) kernel console output (not intermixed with test programs): cgroup.controllers" dev="tmpfs" ino=2854 res=0 errno=0 [ 1276.874504][ T31] audit: type=1800 audit(1788984920.340:35): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8678" name="cgroup.controllers" dev="tmpfs" ino=2854 res=0 errno=0 [ 1276.876343][ T31] audit: type=1800 audit(1788984920.340:36): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8678" name="cgroup.controllers" dev="tmpfs" ino=2854 res=0 errno=0 [ 1277.354150][ T5471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8684'. [ 1277.422863][ T5470] xt_hashlimit: size too large, truncated to 1048576 [ 1277.736491][ T5480] geneve1: entered promiscuous mode [ 1277.920429][ T5475] syzkaller0: entered promiscuous mode [ 1277.927346][ T5475] syzkaller0: entered allmulticast mode [ 1278.002718][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8687'. [ 1278.011836][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8687'. [ 1278.230232][ T5498] netlink: 'syz.0.8691': attribute type 280 has an invalid length. [ 1278.404397][ T5496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8689'. [ 1282.258045][ T5509] bridge0: port 1(wlan1) entered blocking state [ 1282.258152][ T5509] bridge0: port 1(wlan1) entered disabled state [ 1282.258329][ T5509] mac80211_hwsim hwsim131 wlan1: entered allmulticast mode [ 1282.264930][ T5509] mac80211_hwsim hwsim131 wlan1: entered promiscuous mode [ 1282.308209][ T5515] bridge0: port 1(wlan1) entered disabled state [ 1282.327115][ T5515] mac80211_hwsim hwsim131 wlan1 (unregistering): left allmulticast mode [ 1282.327150][ T5515] mac80211_hwsim hwsim131 wlan1 (unregistering): left promiscuous mode [ 1282.327427][ T5515] bridge0: port 1(wlan1) entered disabled state [ 1282.380661][ T5521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8695'. [ 1282.851648][ T859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.860692][ T859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.874442][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.932002][T16629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.002236][ T5550] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8704'. [ 1283.032403][ T5554] syzkaller0: entered promiscuous mode [ 1283.038011][ T5554] syzkaller0: entered allmulticast mode [ 1283.049407][ T5554] FAULT_INJECTION: forcing a failure. [ 1283.049407][ T5554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.063268][ T5554] CPU: 1 UID: 0 PID: 5554 Comm: syz.3.8706 Not tainted syzkaller #0 PREEMPT(full) [ 1283.063317][ T5554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1283.063343][ T5554] Call Trace: [ 1283.063351][ T5554] [ 1283.063360][ T5554] dump_stack_lvl+0xe8/0x150 [ 1283.063395][ T5554] should_fail_ex+0x410/0x560 [ 1283.063425][ T5554] _copy_from_user+0x2d/0xb0 [ 1283.063445][ T5554] ___sys_sendmsg+0x1c6/0x360 [ 1283.063463][ T5554] ? __lock_acquire+0x6df/0x2e50 [ 1283.063485][ T5554] ? __pfx____sys_sendmsg+0x10/0x10 [ 1283.063538][ T5554] ? __fget_files+0x2a/0x420 [ 1283.063560][ T5554] ? __fget_files+0x3a2/0x420 [ 1283.063592][ T5554] __x64_sys_sendmsg+0x1b1/0x290 [ 1283.063613][ T5554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1283.063652][ T5554] do_syscall_64+0x166/0x520 [ 1283.063675][ T5554] ? trace_irq_disable+0x3b/0x140 [ 1283.063692][ T5554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.063710][ T5554] ? clear_bhb_loop+0x70/0xc0 [ 1283.063731][ T5554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.063748][ T5554] RIP: 0033:0x7f49a499e159 [ 1283.063766][ T5554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.063780][ T5554] RSP: 002b:00007f49a58ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.063800][ T5554] RAX: ffffffffffffffda RBX: 00007f49a4c25fa0 RCX: 00007f49a499e159 [ 1283.063812][ T5554] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1283.063823][ T5554] RBP: 00007f49a58ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.063834][ T5554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.063845][ T5554] R13: 00007f49a4c26038 R14: 00007f49a4c25fa0 R15: 00007ffc1ca625c8 [ 1283.063872][ T5554] [ 1283.377792][ T5563] sctp: [Deprecated]: syz.2.8707 (pid 5563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1283.377792][ T5563] Use struct sctp_sack_info instead [ 1287.567696][ T5575] tipc: New replicast peer: 255.255.255.255 [ 1287.568411][ T5575] tipc: Enabled bearer , priority 5 [ 1287.669863][ T5578] syzkaller0: entered promiscuous mode [ 1287.669922][ T5578] syzkaller0: entered allmulticast mode [ 1287.695977][ T5583] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8709'. [ 1287.728076][ T5583] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.8709'. [ 1287.752674][ T5589] FAULT_INJECTION: forcing a failure. [ 1287.752674][ T5589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.752729][ T5589] CPU: 0 UID: 0 PID: 5589 Comm: syz.1.8710 Not tainted syzkaller #0 PREEMPT(full) [ 1287.752749][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1287.752760][ T5589] Call Trace: [ 1287.752766][ T5589] [ 1287.752772][ T5589] dump_stack_lvl+0xe8/0x150 [ 1287.752800][ T5589] should_fail_ex+0x410/0x560 [ 1287.752833][ T5589] _copy_from_user+0x2d/0xb0 [ 1287.752853][ T5589] ___sys_recvmsg+0x173/0x5a0 [ 1287.752880][ T5589] ? __pfx____sys_recvmsg+0x10/0x10 [ 1287.752905][ T5589] ? lock_acquire+0x115/0x350 [ 1287.752951][ T5589] do_recvmmsg+0x31a/0x7f0 [ 1287.752979][ T5589] ? __pfx_do_recvmmsg+0x10/0x10 [ 1287.753011][ T5589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1287.753039][ T5589] ? __fget_files+0x3a2/0x420 [ 1287.753072][ T5589] __x64_sys_recvmmsg+0x198/0x250 [ 1287.753096][ T5589] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1287.753128][ T5589] do_syscall_64+0x166/0x520 [ 1287.753152][ T5589] ? trace_irq_disable+0x3b/0x140 [ 1287.753169][ T5589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.753188][ T5589] ? clear_bhb_loop+0x70/0xc0 [ 1287.753210][ T5589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.753229][ T5589] RIP: 0033:0x7fab5079e159 [ 1287.753249][ T5589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.753265][ T5589] RSP: 002b:00007fab51715028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1287.753284][ T5589] RAX: ffffffffffffffda RBX: 00007fab50a26090 RCX: 00007fab5079e159 [ 1287.753298][ T5589] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1287.753310][ T5589] RBP: 00007fab51715090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.753321][ T5589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1287.753333][ T5589] R13: 00007fab50a26128 R14: 00007fab50a26090 R15: 00007ffea5d10f38 [ 1287.753362][ T5589] [ 1288.269409][ T5610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8716'. [ 1288.541903][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8716'. [ 1288.541958][ T5626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8716'. [ 1288.932120][ T5633] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8718'. [ 1291.046209][ T5621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1292.750670][ T5626] veth9: entered allmulticast mode [ 1292.895191][ T5638] syzkaller0: entered promiscuous mode [ 1292.901342][ T5638] syzkaller0: entered allmulticast mode [ 1292.918534][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8720'. [ 1292.932019][ T5638] FAULT_INJECTION: forcing a failure. [ 1292.932019][ T5638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.945399][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: syz.3.8721 Not tainted syzkaller #0 PREEMPT(full) [ 1292.945426][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1292.945438][ T5638] Call Trace: [ 1292.945447][ T5638] [ 1292.945456][ T5638] dump_stack_lvl+0xe8/0x150 [ 1292.945489][ T5638] should_fail_ex+0x410/0x560 [ 1292.945530][ T5638] _copy_from_user+0x2d/0xb0 [ 1292.945553][ T5638] __copy_msghdr+0x390/0x590 [ 1292.945579][ T5638] ___sys_sendmsg+0x213/0x360 [ 1292.945598][ T5638] ? __lock_acquire+0x6df/0x2e50 [ 1292.945622][ T5638] ? __pfx____sys_sendmsg+0x10/0x10 [ 1292.945678][ T5638] ? __fget_files+0x2a/0x420 [ 1292.945701][ T5638] ? __fget_files+0x3a2/0x420 [ 1292.945735][ T5638] __x64_sys_sendmsg+0x1b1/0x290 [ 1292.945758][ T5638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1292.945801][ T5638] do_syscall_64+0x166/0x520 [ 1292.945827][ T5638] ? trace_irq_disable+0x3b/0x140 [ 1292.945845][ T5638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.945865][ T5638] ? clear_bhb_loop+0x70/0xc0 [ 1292.945888][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.945907][ T5638] RIP: 0033:0x7f49a499e159 [ 1292.945925][ T5638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.945948][ T5638] RSP: 002b:00007f49a58ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.945974][ T5638] RAX: ffffffffffffffda RBX: 00007f49a4c25fa0 RCX: 00007f49a499e159 [ 1292.945987][ T5638] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1292.946000][ T5638] RBP: 00007f49a58ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.946012][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.946023][ T5638] R13: 00007f49a4c26038 R14: 00007f49a4c25fa0 R15: 00007ffc1ca625c8 [ 1292.946054][ T5638] [ 1292.996274][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8719'. [ 1293.028858][ T5640] netlink: 'syz.1.8720': attribute type 4 has an invalid length. [ 1293.038665][ T5640] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1293.326796][ T5656] FAULT_INJECTION: forcing a failure. [ 1293.326796][ T5656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.326850][ T5656] CPU: 1 UID: 0 PID: 5656 Comm: syz.1.8725 Not tainted syzkaller #0 PREEMPT(full) [ 1293.326874][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1293.326884][ T5656] Call Trace: [ 1293.326891][ T5656] [ 1293.326897][ T5656] dump_stack_lvl+0xe8/0x150 [ 1293.326925][ T5656] should_fail_ex+0x410/0x560 [ 1293.326971][ T5656] _copy_from_user+0x2d/0xb0 [ 1293.327015][ T5656] ___sys_recvmsg+0x173/0x5a0 [ 1293.327064][ T5656] ? __pfx____sys_recvmsg+0x10/0x10 [ 1293.327089][ T5656] ? lock_acquire+0x115/0x350 [ 1293.327174][ T5656] do_recvmmsg+0x31a/0x7f0 [ 1293.327216][ T5656] ? __pfx_do_recvmmsg+0x10/0x10 [ 1293.327262][ T5656] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1293.327290][ T5656] ? __fget_files+0x3a2/0x420 [ 1293.327324][ T5656] __x64_sys_recvmmsg+0x198/0x250 [ 1293.327347][ T5656] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1293.327383][ T5656] do_syscall_64+0x166/0x520 [ 1293.327423][ T5656] ? trace_irq_disable+0x3b/0x140 [ 1293.327441][ T5656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.327459][ T5656] ? clear_bhb_loop+0x70/0xc0 [ 1293.327483][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.327500][ T5656] RIP: 0033:0x7fab5079e159 [ 1293.327518][ T5656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.327533][ T5656] RSP: 002b:00007fab51715028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1293.327552][ T5656] RAX: ffffffffffffffda RBX: 00007fab50a26090 RCX: 00007fab5079e159 [ 1293.327565][ T5656] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1293.327577][ T5656] RBP: 00007fab51715090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.327589][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.327600][ T5656] R13: 00007fab50a26128 R14: 00007fab50a26090 R15: 00007ffea5d10f38 [ 1293.327629][ T5656] [ 1293.551091][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8727'. [ 1293.553815][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8727'. [ 1293.553851][ T5665] netlink: 'syz.1.8727': attribute type 10 has an invalid length. [ 1293.553865][ T5665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8727'. [ 1293.835360][ T5676] xt_NETMAP: bad MAP_IPS. [ 1298.263702][ T5665] geneve3: entered promiscuous mode [ 1298.263733][ T5665] geneve3: entered allmulticast mode [ 1298.315812][ T5689] bridge0: port 1(batadv1) entered blocking state [ 1298.315936][ T5689] bridge0: port 1(batadv1) entered disabled state [ 1298.316101][ T5689] batadv1: entered allmulticast mode [ 1298.319707][ T5689] batadv1: entered promiscuous mode [ 1298.412426][ T5694] netlink: 'syz.1.8731': attribute type 2 has an invalid length. [ 1298.449118][ T5694] ip6erspan0: entered allmulticast mode [ 1298.474136][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8734'. [ 1298.494961][ T5700] x_tables: duplicate underflow at hook 3 [ 1298.617826][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8737'. [ 1298.655406][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8736'. [ 1298.803055][ T9423] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1298.803100][ T9423] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1298.843409][ T5722] ip6tnl2: entered allmulticast mode [ 1298.850578][ T9423] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1298.852118][ T9423] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1298.873000][T16628] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1299.022025][T16628] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1299.146693][ T5731] syzkaller0: entered promiscuous mode [ 1299.146746][ T5731] syzkaller0: entered allmulticast mode [ 1299.314890][ T5701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1299.323130][T16628] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1299.975863][ T5758] netlink: 'syz.0.8747': attribute type 62 has an invalid length. [ 1302.992554][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1303.845053][ T5734] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1304.067861][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8751'. [ 1304.179176][ T5770] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1304.230439][ T5768] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8753'. [ 1304.574123][ T5806] batman_adv: batadv0: Interface activated: dummy0 [ 1305.410771][ T5823] macsec0: entered promiscuous mode [ 1305.417450][ T5823] hsr0: entered promiscuous mode [ 1305.441255][ T5823] hsr0: left promiscuous mode [ 1305.460257][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8770'. [ 1305.594293][ T5836] xt_CT: No such helper "netbios-ns" [ 1305.769577][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8775'. [ 1305.795284][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8775'. [ 1305.851422][ T5837] netlink: 'syz.0.8769': attribute type 16 has an invalid length. [ 1305.851471][ T5837] netlink: 'syz.0.8769': attribute type 17 has an invalid length. [ 1306.086073][ T5837] mac80211_hwsim hwsim117 wlan0: left promiscuous mode [ 1306.086160][ T5837] mac80211_hwsim hwsim117 wlan0: left allmulticast mode [ 1306.097356][ T5837] veth5: left allmulticast mode [ 1306.108024][ T5837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1306.116148][ T859] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1306.116362][ T859] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1306.128767][ T5868] Bluetooth: hci0: unsupported parameter 5134 [ 1306.128791][ T5868] Bluetooth: hci0: unsupported parameter 8192 [ 1306.128805][ T5868] Bluetooth: hci0: unsupported parameter 5134 [ 1306.128818][ T5868] Bluetooth: hci0: unsupported parameter 8192 [ 1306.147568][T16629] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1306.303607][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8777'. [ 1306.364620][ T5876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8778'. [ 1306.470477][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8778'. [ 1306.483302][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8778'. [ 1306.485474][ T5891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8781'. [ 1306.512606][ T5886] siw: device registration error -23 [ 1306.569931][ T5889] veth9: entered allmulticast mode [ 1306.662364][T16629] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1306.779188][ T5904] lo speed is unknown, defaulting to 1000 [ 1306.796930][ T5904] lo speed is unknown, defaulting to 1000 [ 1306.797759][ T5904] lo speed is unknown, defaulting to 1000 [ 1306.996857][T16629] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1307.553208][ T5904] infiniband sz1: set active [ 1307.553267][T25129] lo speed is unknown, defaulting to 1000 [ 1307.554476][ T5904] infiniband sz1: added lo [ 1307.568429][ T5904] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1307.570595][ T5904] infiniband sz1: Couldn't open port 1 [ 1307.570814][ T5904] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1307.570843][ T5904] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1307.570876][ T5904] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1307.679864][ T5904] RDS/IB: sz1: added [ 1307.679929][ T5904] smc: adding ib device sz1 with port count 1 [ 1307.679948][ T5904] smc: ib device sz1 port 1 has no pnetid [ 1307.680025][T25129] lo speed is unknown, defaulting to 1000 [ 1307.686850][ T5904] lo speed is unknown, defaulting to 1000 [ 1308.128871][ T5958] bridge0: left promiscuous mode [ 1308.130498][ T5958] batman_adv: batadv0: Interface deactivated: dummy0 [ 1308.139636][ T5958] mac80211_hwsim hwsim119 wlan0: left promiscuous mode [ 1308.139675][ T5958] mac80211_hwsim hwsim119 wlan0: left allmulticast mode [ 1308.140970][ T5958] vti0: left promiscuous mode [ 1308.144916][ T5958] ip6gre1: left promiscuous mode [ 1308.144939][ T5958] ip6gre1: left allmulticast mode [ 1308.147443][ T5958] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1308.149381][ T5958] ip6gretap2: left allmulticast mode [ 1308.179193][ T5958] bond2: left promiscuous mode [ 1308.179215][ T5958] erspan2: left promiscuous mode [ 1308.179369][ T5958] bond2: left allmulticast mode [ 1308.195528][ T5958] erspan2: left allmulticast mode [ 1308.200285][ T5904] lo speed is unknown, defaulting to 1000 [ 1308.454845][ T5904] lo speed is unknown, defaulting to 1000 [ 1308.650379][ T5904] lo speed is unknown, defaulting to 1000 [ 1308.849866][ T5904] lo speed is unknown, defaulting to 1000 [ 1309.016302][ T5904] lo speed is unknown, defaulting to 1000 [ 1309.139972][ T5904] lo speed is unknown, defaulting to 1000 [ 1309.267148][ T5904] lo speed is unknown, defaulting to 1000 [ 1309.306537][ T5876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1309.594361][ T5977] __nla_validate_parse: 64 callbacks suppressed [ 1309.596750][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8793'. [ 1309.596788][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8793'. [ 1309.704574][ T5981] IPVS: Error connecting to the multicast addr [ 1309.706015][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8795'. [ 1309.740829][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8796'. [ 1309.849341][ T5989] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8798'. [ 1309.858895][ T5989] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8798'. [ 1309.882885][ T5989] netlink: 'syz.1.8798': attribute type 5 has an invalid length. [ 1309.890938][ T5989] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8798'. [ 1309.930731][ T5992] FAULT_INJECTION: forcing a failure. [ 1309.930731][ T5992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.944402][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.4.8799 Not tainted syzkaller #0 PREEMPT(full) [ 1309.944428][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1309.944440][ T5992] Call Trace: [ 1309.944448][ T5992] [ 1309.944455][ T5992] dump_stack_lvl+0xe8/0x150 [ 1309.944486][ T5992] should_fail_ex+0x410/0x560 [ 1309.944516][ T5992] _copy_from_user+0x2d/0xb0 [ 1309.944535][ T5992] ___sys_sendmsg+0x1c6/0x360 [ 1309.944554][ T5992] ? __lock_acquire+0x6df/0x2e50 [ 1309.944577][ T5992] ? __pfx____sys_sendmsg+0x10/0x10 [ 1309.944638][ T5992] ? __fget_files+0x2a/0x420 [ 1309.944660][ T5992] ? __fget_files+0x3a2/0x420 [ 1309.944696][ T5992] __x64_sys_sendmsg+0x1b1/0x290 [ 1309.944717][ T5992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1309.944757][ T5992] do_syscall_64+0x166/0x520 [ 1309.944782][ T5992] ? trace_irq_disable+0x3b/0x140 [ 1309.944808][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.944828][ T5992] ? clear_bhb_loop+0x70/0xc0 [ 1309.944850][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.944867][ T5992] RIP: 0033:0x7fbf6ab9e159 [ 1309.944884][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1309.944899][ T5992] RSP: 002b:00007fbf6b98e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1309.944919][ T5992] RAX: ffffffffffffffda RBX: 00007fbf6ae25fa0 RCX: 00007fbf6ab9e159 [ 1309.944933][ T5992] RDX: 0000000000004800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1309.944945][ T5992] RBP: 00007fbf6b98e090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.944957][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.944966][ T5992] R13: 00007fbf6ae26038 R14: 00007fbf6ae25fa0 R15: 00007ffe3e485608 [ 1309.944995][ T5992] [ 1310.197802][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8803'. [ 1310.213478][ T6003] batadv0: entered promiscuous mode [ 1310.226121][ T6007] netlink: 'syz.4.8803': attribute type 1 has an invalid length. [ 1310.240133][ T6007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8803'. [ 1310.346433][ T6012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8804'. [ 1310.511927][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1311.312058][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1311.487115][ T6049] SET target dimension over the limit! [ 1311.539930][ T6055] syzkaller0: entered promiscuous mode [ 1311.545569][ T6055] syzkaller0: entered allmulticast mode [ 1312.076388][ T6075] can: request_module (can-proto-5) failed. [ 1312.121420][ T6079] bond2: (slave wlan1): Releasing backup interface [ 1312.725456][ T6111] ip_tables: iptables: counters copy to user failed while replacing table [ 1313.081137][ T6140] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1313.092287][ T6141] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1313.782188][ T6172] syzkaller0: entered promiscuous mode [ 1313.782232][ T6172] syzkaller0: entered allmulticast mode [ 1314.000184][ T6146] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1314.281019][ T4934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1314.295467][ T4934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1314.303605][ T4934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1314.318510][ T4934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1314.319307][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1314.936452][ T6217] netlink: 'syz.3.8868': attribute type 1 has an invalid length. [ 1315.055716][ T6217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1315.126115][ T6220] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 1315.232068][ T4934] Bluetooth: hci0: command 0x0406 tx timeout [ 1315.352249][ T6217] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 1315.401535][ T6217] bond3 (unregistering): Released all slaves [ 1315.832342][ T6187] lo speed is unknown, defaulting to 1000 [ 1315.844387][ T6231] tc_dump_action: action bad kind [ 1316.104315][ T6246] __nla_validate_parse: 9 callbacks suppressed [ 1316.104362][ T6246] netlink: 564 bytes leftover after parsing attributes in process `syz.3.8876'. [ 1316.190535][ T6250] xt_hashlimit: max too large, truncated to 1048576 [ 1316.197617][ T6250] xt_hashlimit: overflow, try lower: 137438953472/8 [ 1316.432399][T27509] Bluetooth: hci2: command tx timeout [ 1316.741671][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.742154][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.742687][ T6187] bridge_slave_0: entered allmulticast mode [ 1316.744499][ T6187] bridge_slave_0: entered promiscuous mode [ 1316.748055][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.748219][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.748416][ T6187] bridge_slave_1: entered allmulticast mode [ 1316.750458][ T6187] bridge_slave_1: entered promiscuous mode [ 1316.783653][ T6187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.786835][ T6187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.857204][ T6187] team0: Port device team_slave_0 added [ 1316.866207][ T6187] team0: Port device team_slave_1 added [ 1316.903053][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.910293][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.938071][ T6187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.953491][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.960596][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.987118][ T6187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.048925][ T6187] hsr_slave_0: entered promiscuous mode [ 1317.056448][ T6187] hsr_slave_1: entered promiscuous mode [ 1317.091096][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8887'. [ 1317.120956][ T6279] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1317.138439][ T6279] bond5 (unregistering): Released all slaves [ 1317.174938][ T6281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8887'. [ 1317.339258][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1317.366417][ T6287] syzkaller1: entered promiscuous mode [ 1317.366460][ T6287] syzkaller1: entered allmulticast mode [ 1317.771969][ T6305] veth0: entered promiscuous mode [ 1317.772127][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1318.063222][ T6301] veth0: left promiscuous mode [ 1318.613656][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1318.631027][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8901'. [ 1318.631071][ T6353] openvswitch: netlink: Flow key attribute not present in set flow. [ 1318.665539][ T6353] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.8901'. [ 1318.688962][ T9418] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe2 [ 1318.799592][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1318.799629][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1318.863912][ T6361] veth9: entered allmulticast mode [ 1319.308751][ T6345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1319.632189][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1319.759169][ T6394] : renamed from vlan0 [ 1319.828857][ T6408] FAULT_INJECTION: forcing a failure. [ 1319.828857][ T6408] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.828906][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.4.8909 Not tainted syzkaller #0 PREEMPT(full) [ 1319.828926][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1319.828937][ T6408] Call Trace: [ 1319.828944][ T6408] [ 1319.828952][ T6408] dump_stack_lvl+0xe8/0x150 [ 1319.828984][ T6408] should_fail_ex+0x410/0x560 [ 1319.829017][ T6408] should_failslab+0xa8/0x100 [ 1319.829042][ T6408] __kmalloc_noprof+0xfe/0x720 [ 1319.829069][ T6408] ? nft_set_elem_init+0xa8/0x7e0 [ 1319.829089][ T6408] ? nft_set_elem_init+0xa8/0x7e0 [ 1319.829118][ T6408] nft_set_elem_init+0xa8/0x7e0 [ 1319.829150][ T6408] nf_tables_newsetelem+0x2428/0x4200 [ 1319.829200][ T6408] ? skb_clone+0x212/0x3a0 [ 1319.829230][ T6408] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1319.829262][ T6408] ? nla_validate_array+0xfc/0x260 [ 1319.829308][ T6408] ? reacquire_held_locks+0x117/0x1a0 [ 1319.829330][ T6408] ? __pfx___nla_validate_parse+0x10/0x10 [ 1319.829356][ T6408] ? nfnetlink_rcv+0x8d1/0x28c0 [ 1319.829382][ T6408] ? lock_acquire+0x115/0x350 [ 1319.829400][ T6408] ? nfnl_pernet+0x23/0x240 [ 1319.829429][ T6408] ? __nla_parse+0x40/0x60 [ 1319.829466][ T6408] nfnetlink_rcv+0x1288/0x28c0 [ 1319.829519][ T6408] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1319.829536][ T6408] ? __lock_acquire+0x6df/0x2e50 [ 1319.829592][ T6408] ? lock_acquire+0x115/0x350 [ 1319.829618][ T6408] ? netlink_deliver_tap+0x2e/0x1b0 [ 1319.829640][ T6408] ? netlink_deliver_tap+0x2e/0x1b0 [ 1319.829668][ T6408] netlink_unicast+0x7bd/0x940 [ 1319.829699][ T6408] netlink_sendmsg+0x813/0xb40 [ 1319.829729][ T6408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1319.829759][ T6408] ? apparmor_socket_sendmsg+0x98/0x360 [ 1319.829789][ T6408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1319.829809][ T6408] sock_sendmsg_nosec+0x13a/0x180 [ 1319.829836][ T6408] ____sys_sendmsg+0x54e/0x850 [ 1319.829861][ T6408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1319.829889][ T6408] ? import_iovec+0x73/0xa0 [ 1319.829912][ T6408] ___sys_sendmsg+0x2a5/0x360 [ 1319.829931][ T6408] ? __lock_acquire+0x6df/0x2e50 [ 1319.829952][ T6408] ? __pfx____sys_sendmsg+0x10/0x10 [ 1319.830007][ T6408] ? __fget_files+0x2a/0x420 [ 1319.830028][ T6408] ? __fget_files+0x3a2/0x420 [ 1319.830061][ T6408] __x64_sys_sendmsg+0x1b1/0x290 [ 1319.830084][ T6408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1319.830125][ T6408] do_syscall_64+0x166/0x520 [ 1319.830149][ T6408] ? trace_irq_disable+0x3b/0x140 [ 1319.830167][ T6408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.830185][ T6408] ? clear_bhb_loop+0x70/0xc0 [ 1319.830208][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.830226][ T6408] RIP: 0033:0x7fbf6ab9e159 [ 1319.830244][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.830259][ T6408] RSP: 002b:00007fbf6b98e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1319.830279][ T6408] RAX: ffffffffffffffda RBX: 00007fbf6ae25fa0 RCX: 00007fbf6ab9e159 [ 1319.830292][ T6408] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 1319.830304][ T6408] RBP: 00007fbf6b98e090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.830316][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.830328][ T6408] R13: 00007fbf6ae26038 R14: 00007fbf6ae25fa0 R15: 00007ffe3e485608 [ 1319.830359][ T6408] [ 1319.960375][ T6391] syzkaller0: entered promiscuous mode [ 1319.960397][ T6391] syzkaller0: entered allmulticast mode [ 1320.009669][ T6187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1320.060556][ T6187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1320.077006][ T6187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1320.130236][ T6187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1320.143697][ T6187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1320.173434][ T6187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1320.335356][ T6187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1320.354670][ T6187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1320.569388][ T6187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.670778][ T6187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.719905][ T858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.720048][ T858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.793329][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.795623][ T9426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.348317][ T6460] __nla_validate_parse: 5 callbacks suppressed [ 1321.348987][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8916'. [ 1321.561068][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8916'. [ 1321.561119][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8916'. [ 1321.742526][ T6466] veth9: entered allmulticast mode [ 1321.910634][ T6450] lo speed is unknown, defaulting to 1000 [ 1322.216776][ T6496] FAULT_INJECTION: forcing a failure. [ 1322.216776][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.216839][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: syz.1.8920 Not tainted syzkaller #0 PREEMPT(full) [ 1322.216859][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1322.216870][ T6496] Call Trace: [ 1322.216877][ T6496] [ 1322.216885][ T6496] dump_stack_lvl+0xe8/0x150 [ 1322.216911][ T6496] should_fail_ex+0x410/0x560 [ 1322.216943][ T6496] should_failslab+0xa8/0x100 [ 1322.216969][ T6496] __kmalloc_noprof+0xfe/0x720 [ 1322.216996][ T6496] ? nft_set_elem_init+0xa8/0x7e0 [ 1322.217017][ T6496] ? nft_set_elem_init+0xa8/0x7e0 [ 1322.217044][ T6496] nft_set_elem_init+0xa8/0x7e0 [ 1322.217070][ T6496] nf_tables_newsetelem+0x2428/0x4200 [ 1322.217120][ T6496] ? skb_clone+0x212/0x3a0 [ 1322.217149][ T6496] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1322.217182][ T6496] ? nla_validate_array+0xfc/0x260 [ 1322.217230][ T6496] ? reacquire_held_locks+0x117/0x1a0 [ 1322.217253][ T6496] ? __pfx___nla_validate_parse+0x10/0x10 [ 1322.217280][ T6496] ? nfnetlink_rcv+0x8d1/0x28c0 [ 1322.217305][ T6496] ? lock_acquire+0x115/0x350 [ 1322.217323][ T6496] ? nfnl_pernet+0x23/0x240 [ 1322.217352][ T6496] ? __nla_parse+0x40/0x60 [ 1322.217383][ T6496] nfnetlink_rcv+0x1288/0x28c0 [ 1322.217435][ T6496] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1322.217471][ T6496] ? ref_tracker_free+0x689/0x830 [ 1322.217514][ T6496] ? skb_clone+0x246/0x3a0 [ 1322.217536][ T6496] ? __netlink_deliver_tap+0x811/0x860 [ 1322.217567][ T6496] ? netlink_deliver_tap+0x2e/0x1b0 [ 1322.217588][ T6496] ? netlink_deliver_tap+0x2e/0x1b0 [ 1322.217616][ T6496] netlink_unicast+0x7bd/0x940 [ 1322.217645][ T6496] netlink_sendmsg+0x813/0xb40 [ 1322.217677][ T6496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.217710][ T6496] ? apparmor_socket_sendmsg+0x98/0x360 [ 1322.217738][ T6496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.217759][ T6496] sock_sendmsg_nosec+0x13a/0x180 [ 1322.217786][ T6496] ____sys_sendmsg+0x54e/0x850 [ 1322.217811][ T6496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1322.217840][ T6496] ? import_iovec+0x73/0xa0 [ 1322.217863][ T6496] ___sys_sendmsg+0x2a5/0x360 [ 1322.217882][ T6496] ? __lock_acquire+0x6df/0x2e50 [ 1322.217904][ T6496] ? __pfx____sys_sendmsg+0x10/0x10 [ 1322.217959][ T6496] ? __fget_files+0x2a/0x420 [ 1322.217980][ T6496] ? __fget_files+0x3a2/0x420 [ 1322.218014][ T6496] __x64_sys_sendmsg+0x1b1/0x290 [ 1322.218036][ T6496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1322.218077][ T6496] do_syscall_64+0x166/0x520 [ 1322.218102][ T6496] ? trace_irq_disable+0x3b/0x140 [ 1322.218120][ T6496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.218138][ T6496] ? clear_bhb_loop+0x70/0xc0 [ 1322.218160][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.218178][ T6496] RIP: 0033:0x7fab5079e159 [ 1322.218196][ T6496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.218213][ T6496] RSP: 002b:00007fab51736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1322.218233][ T6496] RAX: ffffffffffffffda RBX: 00007fab50a25fa0 RCX: 00007fab5079e159 [ 1322.218246][ T6496] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 1322.218258][ T6496] RBP: 00007fab51736090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.218270][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.218281][ T6496] R13: 00007fab50a26038 R14: 00007fab50a25fa0 R15: 00007ffea5d10f38 [ 1322.218312][ T6496] [ 1322.720567][ T6187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.812667][ T6187] veth0_vlan: entered promiscuous mode [ 1322.830185][ T6187] veth1_vlan: entered promiscuous mode [ 1322.868244][ T6187] veth0_macvtap: entered promiscuous mode [ 1322.900867][ T6187] veth1_macvtap: entered promiscuous mode [ 1322.946905][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.964271][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.012792][ T9426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.013377][ T9426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.013458][ T9426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.013494][ T9426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.466133][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8928'. [ 1323.534347][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8928'. [ 1324.265338][ T6460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1324.410352][T30597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.410388][T30597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.483027][T30597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.483066][T30597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.657798][ T6543] xt_IDLETIMER: timeout value is zero [ 1325.487582][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1325.502611][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1325.513519][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1325.523352][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1325.532445][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1325.822978][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1325.954299][ T6604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8943'. [ 1326.028868][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1326.028916][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1326.038468][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1326.147510][ T6608] veth11: entered allmulticast mode [ 1326.246900][ T6613] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:19995 [ 1326.254529][ T6613] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 1326.255996][ T6613] netlink: 'syz.4.8943': attribute type 10 has an invalid length. [ 1326.516195][ T9418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1326.532399][ T9418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.671911][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1326.814313][ T9418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1326.834265][ T9418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.995844][ T9418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.009612][ T9418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.211429][ T9418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.211510][ T9418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.300850][ T6583] lo speed is unknown, defaulting to 1000 [ 1327.632086][ T4934] Bluetooth: hci1: command tx timeout [ 1327.764070][ T9418] batman_adv: batadv0: Interface deactivated: gretap1 [ 1328.022649][ T9418] batman_adv: batadv0: Removing interface: gretap1 [ 1328.055693][ T9418] bond4 (unregistering): (slave gretap2): Releasing active interface [ 1328.124367][ T9418] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 1328.168193][ T9418]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.184206][ T9418]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.194821][ T9418]  (unregistering): Released all slaves [ 1328.204115][ T9418] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1328.214774][ T9418] bond1 (unregistering): Released all slaves [ 1328.223288][ T9423] smbdirect: ib_dev[syz1] removed [ 1328.233941][ T9418] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1328.248778][ T9418] bond2 (unregistering): Released all slaves [ 1328.276425][ T9418] bond3 (unregistering): Released all slaves [ 1328.301214][ T9418] bond4 (unregistering): Released all slaves [ 1328.321267][ T9418] bond5 (unregistering): Released all slaves [ 1328.335690][ T4230] infiniband syz1: ib_query_port failed (-19) [ 1328.495562][ T9418] tipc: Disabling bearer [ 1328.495713][ T9418] tipc: Left network mode [ 1328.752745][ T6593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1328.793128][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.800597][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.820442][ T6583] bridge_slave_0: entered allmulticast mode [ 1328.829490][ T6583] bridge_slave_0: entered promiscuous mode [ 1328.909361][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.914973][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8947'. [ 1328.927263][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.934807][ T6583] bridge_slave_1: entered allmulticast mode [ 1328.945096][ T6583] bridge_slave_1: entered promiscuous mode [ 1328.978556][ T6670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8948'. [ 1329.007797][ T6671] netlink: 'syz.2.8946': attribute type 23 has an invalid length. [ 1329.007841][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8946'. [ 1329.299460][ T6583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.324818][ T6583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.462007][ T6682] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8950'. [ 1329.534022][ T6583] team0: Port device team_slave_0 added [ 1329.544860][ T6583] team0: Port device team_slave_1 added [ 1329.712028][ T4934] Bluetooth: hci1: command tx timeout [ 1329.847476][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.847511][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.847534][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.856333][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.856349][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.856371][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.940697][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1330.067092][ T6583] hsr_slave_0: entered promiscuous mode [ 1330.072043][ T6583] hsr_slave_1: entered promiscuous mode [ 1330.072752][ T6583] debugfs: 'hsr0' already exists in 'hsr' [ 1330.072769][ T6583] Cannot create hsr debugfs directory [ 1330.639685][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8960'. [ 1331.218972][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8965'. [ 1331.228956][ T9418] hsr_slave_0: left promiscuous mode [ 1331.244325][ T9418] hsr_slave_1: left promiscuous mode [ 1331.245340][ T9418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.245388][ T9418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.253369][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8964'. [ 1331.296910][ T9418] veth0_macvtap: left promiscuous mode [ 1331.670256][ T9418] team0 (unregistering): Port device team_slave_1 removed [ 1331.794948][ T4934] Bluetooth: hci1: command tx timeout [ 1331.993071][ T6757] gre0: entered promiscuous mode [ 1331.998266][ T6757] gre0: entered allmulticast mode [ 1332.059280][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1332.202143][ T6794] netlink: 'syz.3.8968': attribute type 4 has an invalid length. [ 1332.202181][ T6794] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1332.333672][ T6800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8967'. [ 1332.376177][ T6794] xt_CT: No such helper "snmp_trap" [ 1332.381160][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8969'. [ 1332.812666][ T9418] IPVS: stop unused estimator thread 0... [ 1332.897888][ T6820] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1332.900354][ T6820] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1333.413630][ T9423] IPVS: starting estimator thread 0... [ 1333.503281][ T6851] bridge5: entered allmulticast mode [ 1333.513592][ T6850] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 1333.522049][ T6853] IPVS: using max 32 ests per chain, 76800 per kthread [ 1333.736702][ T6857] tipc: Started in network mode [ 1333.736747][ T6857] tipc: Node identity 8a2a934882ca, cluster identity 4711 [ 1333.736945][ T6857] tipc: Enabled bearer , priority 0 [ 1333.739323][ T6857] syzkaller0: entered promiscuous mode [ 1333.739343][ T6857] syzkaller0: entered allmulticast mode [ 1333.874257][ T4934] Bluetooth: hci1: command tx timeout [ 1333.891113][ T6857] tipc: Resetting bearer [ 1333.893177][ T6857] syzkaller1: entered promiscuous mode [ 1333.893203][ T6857] syzkaller1: entered allmulticast mode [ 1333.967327][ T6856] tipc: Resetting bearer [ 1334.055861][ T6856] tipc: Disabling bearer [ 1334.242462][ T6891] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 1334.426522][ T6900] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 1334.489555][ T6887] syzkaller0: entered promiscuous mode [ 1334.489600][ T6887] syzkaller0: entered allmulticast mode [ 1339.672540][ T6922] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1339.907919][ T6583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1339.945538][ T6583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1339.952469][ T6583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1339.965347][ T6952] __nla_validate_parse: 2 callbacks suppressed [ 1339.965391][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1340.010202][ T6583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1340.013883][ T6583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1340.049040][ T6583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1340.057972][ T6583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1340.070697][ T6583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1340.099547][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8996'. [ 1340.261610][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.307851][ T6583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.348695][ T858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.348790][ T858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.394133][ T6991] FAULT_INJECTION: forcing a failure. [ 1340.394133][ T6991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.394170][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.1.8999 Not tainted syzkaller #0 PREEMPT(full) [ 1340.394190][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1340.394200][ T6991] Call Trace: [ 1340.394207][ T6991] [ 1340.394216][ T6991] dump_stack_lvl+0xe8/0x150 [ 1340.394250][ T6991] should_fail_ex+0x410/0x560 [ 1340.394280][ T6991] _copy_from_user+0x2d/0xb0 [ 1340.394301][ T6991] ___sys_recvmsg+0x173/0x5a0 [ 1340.394328][ T6991] ? __pfx____sys_recvmsg+0x10/0x10 [ 1340.394354][ T6991] ? lock_acquire+0x115/0x350 [ 1340.394400][ T6991] do_recvmmsg+0x31a/0x7f0 [ 1340.394429][ T6991] ? __pfx_do_recvmmsg+0x10/0x10 [ 1340.394461][ T6991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1340.394489][ T6991] ? __fget_files+0x3a2/0x420 [ 1340.394522][ T6991] __x64_sys_recvmmsg+0x198/0x250 [ 1340.394546][ T6991] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1340.394578][ T6991] do_syscall_64+0x166/0x520 [ 1340.394602][ T6991] ? trace_irq_disable+0x3b/0x140 [ 1340.394619][ T6991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.394638][ T6991] ? clear_bhb_loop+0x70/0xc0 [ 1340.394660][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.394677][ T6991] RIP: 0033:0x7fab5079e159 [ 1340.394694][ T6991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.394710][ T6991] RSP: 002b:00007fab51715028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1340.394730][ T6991] RAX: ffffffffffffffda RBX: 00007fab50a26090 RCX: 00007fab5079e159 [ 1340.394744][ T6991] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1340.394756][ T6991] RBP: 00007fab51715090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.394767][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1340.394778][ T6991] R13: 00007fab50a26128 R14: 00007fab50a26090 R15: 00007ffea5d10f38 [ 1340.394815][ T6991] [ 1340.746313][ T858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.746411][ T858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.918906][ T7007] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1340.975257][ T7000] bond0 (unregistering): Released all slaves [ 1341.042643][ T6999] macvtap0: entered allmulticast mode [ 1341.048254][ T6999] veth0_to_bridge: entered allmulticast mode [ 1341.056101][ T6999] veth0_to_bridge: left allmulticast mode [ 1341.219560][ T7005] ipvlan3: entered promiscuous mode [ 1341.361663][ T7028] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1341.377884][ T7028] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1341.386956][ T7028] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1341.431363][ T7030] FAULT_INJECTION: forcing a failure. [ 1341.431363][ T7030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.431426][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz.1.9011 Not tainted syzkaller #0 PREEMPT(full) [ 1341.431446][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1341.431456][ T7030] Call Trace: [ 1341.431463][ T7030] [ 1341.431469][ T7030] dump_stack_lvl+0xe8/0x150 [ 1341.431496][ T7030] should_fail_ex+0x410/0x560 [ 1341.431532][ T7030] _copy_from_user+0x2d/0xb0 [ 1341.431554][ T7030] ___sys_recvmsg+0x173/0x5a0 [ 1341.431580][ T7030] ? __pfx____sys_recvmsg+0x10/0x10 [ 1341.431605][ T7030] ? lock_acquire+0x115/0x350 [ 1341.431653][ T7030] do_recvmmsg+0x31a/0x7f0 [ 1341.431682][ T7030] ? __pfx_do_recvmmsg+0x10/0x10 [ 1341.431713][ T7030] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1341.431749][ T7030] ? __fget_files+0x3a2/0x420 [ 1341.431782][ T7030] __x64_sys_recvmmsg+0x198/0x250 [ 1341.431806][ T7030] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1341.431839][ T7030] do_syscall_64+0x166/0x520 [ 1341.431864][ T7030] ? trace_irq_disable+0x3b/0x140 [ 1341.431881][ T7030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.431899][ T7030] ? clear_bhb_loop+0x70/0xc0 [ 1341.431922][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.431940][ T7030] RIP: 0033:0x7fab5079e159 [ 1341.431958][ T7030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.431974][ T7030] RSP: 002b:00007fab51736028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1341.431994][ T7030] RAX: ffffffffffffffda RBX: 00007fab50a25fa0 RCX: 00007fab5079e159 [ 1341.432007][ T7030] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1341.432019][ T7030] RBP: 00007fab51736090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.432030][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.432041][ T7030] R13: 00007fab50a26038 R14: 00007fab50a25fa0 R15: 00007ffea5d10f38 [ 1341.432071][ T7030] [ 1342.177017][ T6583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.325414][ T6583] veth0_vlan: entered promiscuous mode [ 1342.350341][ T6583] veth1_vlan: entered promiscuous mode [ 1342.406206][ T6583] veth0_macvtap: entered promiscuous mode [ 1342.420348][ T6583] veth1_macvtap: entered promiscuous mode [ 1342.460002][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.479280][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.531882][ T858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.531947][ T858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.531977][ T858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.532005][ T858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.779948][ T7088] FAULT_INJECTION: forcing a failure. [ 1342.779948][ T7088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1342.779997][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.4.9022 Not tainted syzkaller #0 PREEMPT(full) [ 1342.780019][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1342.780031][ T7088] Call Trace: [ 1342.780039][ T7088] [ 1342.780048][ T7088] dump_stack_lvl+0xe8/0x150 [ 1342.780080][ T7088] should_fail_ex+0x410/0x560 [ 1342.780112][ T7088] _copy_from_user+0x2d/0xb0 [ 1342.780134][ T7088] ___sys_recvmsg+0x173/0x5a0 [ 1342.780161][ T7088] ? __pfx____sys_recvmsg+0x10/0x10 [ 1342.780188][ T7088] ? lock_acquire+0x115/0x350 [ 1342.780238][ T7088] do_recvmmsg+0x31a/0x7f0 [ 1342.780266][ T7088] ? __pfx_do_recvmmsg+0x10/0x10 [ 1342.780300][ T7088] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1342.780328][ T7088] ? __fget_files+0x3a2/0x420 [ 1342.780363][ T7088] __x64_sys_recvmmsg+0x198/0x250 [ 1342.780387][ T7088] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1342.780421][ T7088] do_syscall_64+0x166/0x520 [ 1342.780446][ T7088] ? trace_irq_disable+0x3b/0x140 [ 1342.780464][ T7088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.780483][ T7088] ? clear_bhb_loop+0x70/0xc0 [ 1342.780506][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.780525][ T7088] RIP: 0033:0x7fbf6ab9e159 [ 1342.780544][ T7088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.780560][ T7088] RSP: 002b:00007fbf6b98e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1342.780580][ T7088] RAX: ffffffffffffffda RBX: 00007fbf6ae25fa0 RCX: 00007fbf6ab9e159 [ 1342.780595][ T7088] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1342.780608][ T7088] RBP: 00007fbf6b98e090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.780620][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1342.780632][ T7088] R13: 00007fbf6ae26038 R14: 00007fbf6ae25fa0 R15: 00007ffe3e485608 [ 1342.780663][ T7088] [ 1342.830223][ T7060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1343.073287][ T858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.073323][ T858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.145100][ T862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.145142][ T862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.228634][ T7103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8934'. [ 1343.247948][ T7099] bond0: (slave bond_slave_0): Releasing backup interface [ 1343.259793][ T7099] bond0: (slave bond_slave_1): Releasing backup interface [ 1343.328892][ T7099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.328944][ T7099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.338859][ T7099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.338883][ T7099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.348343][ T7099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1343.360506][ T4990] lo speed is unknown, defaulting to 1000 [ 1343.497504][ T7105] syzkaller0: entered promiscuous mode [ 1343.497556][ T7105] syzkaller0: entered allmulticast mode [ 1343.701446][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9027'. [ 1343.795365][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9027'. [ 1343.804768][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9027'. [ 1343.843131][ T7138] veth9: entered allmulticast mode [ 1343.929410][ T7141] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 1344.019036][ T7148] netlink: 'syz.1.9030': attribute type 6 has an invalid length. [ 1344.223148][ T7154] FAULT_INJECTION: forcing a failure. [ 1344.223148][ T7154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.223204][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.0.9034 Not tainted syzkaller #0 PREEMPT(full) [ 1344.223225][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1344.223236][ T7154] Call Trace: [ 1344.223244][ T7154] [ 1344.223251][ T7154] dump_stack_lvl+0xe8/0x150 [ 1344.223277][ T7154] should_fail_ex+0x410/0x560 [ 1344.223307][ T7154] _copy_from_user+0x2d/0xb0 [ 1344.223329][ T7154] ___sys_recvmsg+0x173/0x5a0 [ 1344.223356][ T7154] ? __pfx____sys_recvmsg+0x10/0x10 [ 1344.223382][ T7154] ? lock_acquire+0x115/0x350 [ 1344.223428][ T7154] do_recvmmsg+0x31a/0x7f0 [ 1344.223454][ T7154] ? __pfx_do_recvmmsg+0x10/0x10 [ 1344.223498][ T7154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1344.223527][ T7154] ? __fget_files+0x3a2/0x420 [ 1344.223567][ T7154] __x64_sys_recvmmsg+0x198/0x250 [ 1344.223590][ T7154] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1344.223623][ T7154] do_syscall_64+0x166/0x520 [ 1344.223648][ T7154] ? trace_irq_disable+0x3b/0x140 [ 1344.223665][ T7154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.223684][ T7154] ? clear_bhb_loop+0x70/0xc0 [ 1344.223706][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.223723][ T7154] RIP: 0033:0x7fda68f9e159 [ 1344.223739][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.223755][ T7154] RSP: 002b:00007fda69e88028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1344.223776][ T7154] RAX: ffffffffffffffda RBX: 00007fda69225fa0 RCX: 00007fda68f9e159 [ 1344.223790][ T7154] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1344.223802][ T7154] RBP: 00007fda69e88090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.223813][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.223825][ T7154] R13: 00007fda69226038 R14: 00007fda69225fa0 R15: 00007ffd297f7978 [ 1344.223856][ T7154] [ 1344.475940][ T7169] netlink: 'syz.1.9038': attribute type 16 has an invalid length. [ 1344.484211][ T7169] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9038'. [ 1344.538919][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9039'. [ 1344.678892][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9041'. [ 1344.969307][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1345.036317][ T7202] batman_adv: batadv0: Adding interface: gretap1 [ 1345.036353][ T7202] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.036396][ T7202] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1345.452529][ T7208] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1345.564898][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9054'. [ 1346.680556][ T7131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1347.007844][ T7230] netlink: 'syz.4.9061': attribute type 7 has an invalid length. [ 1347.055101][ T7230] netlink: 'syz.4.9061': attribute type 7 has an invalid length. [ 1347.061809][ T861] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.062055][ T861] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.062111][ T861] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.062142][ T861] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.224351][ T7242] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9064'. [ 1347.234125][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9064'. [ 1347.234185][ T7242] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1347.277979][ T7246] batman_adv: batadv0: Adding interface: gretap1 [ 1347.284652][ T7246] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.310961][ T7246] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1347.450340][ T7250] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9067'. [ 1347.595934][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9072'. [ 1347.639774][ T7274] netlink: 'syz.0.9075': attribute type 2 has an invalid length. [ 1347.647953][ T7274] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9075'. [ 1348.081144][ T7283] FAULT_INJECTION: forcing a failure. [ 1348.081144][ T7283] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.081202][ T7283] CPU: 1 UID: 0 PID: 7283 Comm: syz.1.9076 Not tainted syzkaller #0 PREEMPT(full) [ 1348.081222][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1348.081233][ T7283] Call Trace: [ 1348.081239][ T7283] [ 1348.081246][ T7283] dump_stack_lvl+0xe8/0x150 [ 1348.081274][ T7283] should_fail_ex+0x410/0x560 [ 1348.081306][ T7283] should_failslab+0xa8/0x100 [ 1348.081338][ T7283] __kvmalloc_node_noprof+0x176/0x820 [ 1348.081359][ T7283] ? __kmalloc_cache_noprof+0x321/0x600 [ 1348.081385][ T7283] ? bpf_int_jit_compile+0x5af/0x17e0 [ 1348.081411][ T7283] ? bpf_int_jit_compile+0x5af/0x17e0 [ 1348.081443][ T7283] bpf_int_jit_compile+0x5af/0x17e0 [ 1348.081488][ T7283] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 1348.081525][ T7283] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1348.081556][ T7283] ? bpf_prepare_filter+0xd5d/0x12d0 [ 1348.081582][ T7283] __bpf_prog_select_runtime+0x53e/0xbf0 [ 1348.081609][ T7283] ? bpf_prog_realloc+0x172/0x210 [ 1348.081632][ T7283] bpf_prepare_filter+0x10df/0x12d0 [ 1348.081665][ T7283] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 1348.081690][ T7283] ? bpf_prog_create+0xd6/0x1f0 [ 1348.081718][ T7283] bpf_prog_create+0x138/0x1f0 [ 1348.081745][ T7283] tcf_bpf_init_from_ops+0x1a8/0x350 [ 1348.081769][ T7283] ? __pfx_tcf_bpf_init_from_ops+0x10/0x10 [ 1348.081792][ T7283] ? tcf_idr_create+0x4b7/0x6b0 [ 1348.081825][ T7283] tcf_bpf_init+0x49f/0x960 [ 1348.081853][ T7283] ? __pfx_tcf_bpf_init+0x10/0x10 [ 1348.081878][ T7283] ? rcu_is_watching+0x16/0xb0 [ 1348.081902][ T7283] ? __kasan_kmalloc+0x93/0xb0 [ 1348.081925][ T7283] ? nla_memcpy+0x5b/0xc0 [ 1348.081953][ T7283] tcf_action_init_1+0x4ba/0x740 [ 1348.081986][ T7283] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1348.082012][ T7283] ? _raw_read_unlock+0x28/0x50 [ 1348.082034][ T7283] ? tc_action_load_ops+0x247/0x540 [ 1348.082081][ T7283] ? __nla_parse+0x40/0x60 [ 1348.082104][ T7283] tcf_action_init+0x30e/0xb10 [ 1348.082140][ T7283] ? __pfx_tcf_action_init+0x10/0x10 [ 1348.082195][ T7283] ? __pfx___nla_validate_parse+0x10/0x10 [ 1348.082215][ T7283] ? finish_task_switch+0x40e/0xc60 [ 1348.082272][ T7283] tc_ctl_action+0x43b/0xc70 [ 1348.082310][ T7283] ? __pfx_tc_ctl_action+0x10/0x10 [ 1348.082348][ T7283] ? rcu_is_watching+0x16/0xb0 [ 1348.082412][ T7283] ? __pfx_tc_ctl_action+0x10/0x10 [ 1348.082438][ T7283] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1348.082469][ T7283] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1348.082495][ T7283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1348.082520][ T7283] ? ref_tracker_free+0x689/0x830 [ 1348.082541][ T7283] ? __pfx_ref_tracker_free+0x10/0x10 [ 1348.082571][ T7283] netlink_rcv_skb+0x226/0x4a0 [ 1348.082593][ T7283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1348.082621][ T7283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1348.082667][ T7283] netlink_unicast+0x7bd/0x940 [ 1348.082698][ T7283] netlink_sendmsg+0x813/0xb40 [ 1348.082729][ T7283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.082760][ T7283] ? apparmor_socket_sendmsg+0x98/0x360 [ 1348.082788][ T7283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.082809][ T7283] sock_sendmsg_nosec+0x13a/0x180 [ 1348.082836][ T7283] ____sys_sendmsg+0x54e/0x850 [ 1348.082862][ T7283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1348.082890][ T7283] ? import_iovec+0x73/0xa0 [ 1348.082912][ T7283] ___sys_sendmsg+0x2a5/0x360 [ 1348.082930][ T7283] ? __lock_acquire+0x6df/0x2e50 [ 1348.082954][ T7283] ? __pfx____sys_sendmsg+0x10/0x10 [ 1348.083009][ T7283] ? __fget_files+0x2a/0x420 [ 1348.083031][ T7283] ? __fget_files+0x3a2/0x420 [ 1348.083064][ T7283] __x64_sys_sendmsg+0x1b1/0x290 [ 1348.083087][ T7283] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1348.083128][ T7283] do_syscall_64+0x166/0x520 [ 1348.083153][ T7283] ? trace_irq_disable+0x3b/0x140 [ 1348.083170][ T7283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.083207][ T7283] ? clear_bhb_loop+0x70/0xc0 [ 1348.083229][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.083248][ T7283] RIP: 0033:0x7fab5079e159 [ 1348.083268][ T7283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.083284][ T7283] RSP: 002b:00007fab51736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1348.083307][ T7283] RAX: ffffffffffffffda RBX: 00007fab50a25fa0 RCX: 00007fab5079e159 [ 1348.083320][ T7283] RDX: 0000000000004800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1348.083386][ T7283] RBP: 00007fab51736090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.083397][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.083408][ T7283] R13: 00007fab50a26038 R14: 00007fab50a25fa0 R15: 00007ffea5d10f38 [ 1348.083440][ T7283] [ 1348.316110][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9078'. [ 1348.444667][ T7290] netlink: 'syz.1.9078': attribute type 4 has an invalid length. [ 1348.444692][ T7290] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9078'. [ 1348.732605][ T7296] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9080'. [ 1348.916124][ T7302] netlink: 'syz.3.9081': attribute type 3 has an invalid length. [ 1349.071401][ T7313] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9084'. [ 1349.260375][ T7322] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1349.458762][ T7331] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1350.249602][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.249724][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.249825][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252149][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252256][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252349][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252413][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252476][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252545][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252624][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252688][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252754][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.252823][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.260625][ T7379] netlink: 'syz.1.9105': attribute type 6 has an invalid length. [ 1350.263932][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264029][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264100][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264176][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264249][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264332][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264412][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264493][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264604][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264681][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264761][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264834][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264899][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.264968][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265042][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265120][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265197][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265271][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265348][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265461][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265538][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265620][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265698][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265771][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265859][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.265933][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266009][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266085][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266166][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266242][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266312][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266383][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266456][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266531][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266614][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266687][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266760][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266834][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266917][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.266996][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267077][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267161][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267245][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267324][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267401][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267481][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267567][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267646][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267732][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267811][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267890][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.267970][ T4934] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 1350.399736][ T7386] FAULT_INJECTION: forcing a failure. [ 1350.399736][ T7386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1350.399771][ T7386] CPU: 1 UID: 0 PID: 7386 Comm: syz.0.9107 Not tainted syzkaller #0 PREEMPT(full) [ 1350.399792][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.399803][ T7386] Call Trace: [ 1350.399811][ T7386] [ 1350.399819][ T7386] dump_stack_lvl+0xe8/0x150 [ 1350.399850][ T7386] should_fail_ex+0x410/0x560 [ 1350.399882][ T7386] prepare_alloc_pages+0x223/0x600 [ 1350.399906][ T7386] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1350.399929][ T7386] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1350.399947][ T7386] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1350.399967][ T7386] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1350.400000][ T7386] ? __pfx_policy_nodemask+0x10/0x10 [ 1350.400026][ T7386] ? __get_vm_area_node+0x155/0x2f0 [ 1350.400048][ T7386] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1350.400071][ T7386] ? __vmalloc_noprof+0xd2/0x120 [ 1350.400113][ T7386] __alloc_pages_noprof+0x10/0x100 [ 1350.400137][ T7386] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1350.400164][ T7386] ? alloc_pages_noprof+0x140/0x2b0 [ 1350.400189][ T7386] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1350.400222][ T7386] alloc_vmap_area+0xd1a/0x1420 [ 1350.400263][ T7386] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1350.400284][ T7386] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1350.400312][ T7386] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1350.400338][ T7386] ? __get_vm_area_node+0x155/0x2f0 [ 1350.400366][ T7386] __get_vm_area_node+0x200/0x2f0 [ 1350.400396][ T7386] __vmalloc_node_range_noprof+0x343/0x1540 [ 1350.400421][ T7386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1350.400442][ T7386] ? __lock_acquire+0x6df/0x2e50 [ 1350.400485][ T7386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1350.400518][ T7386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1350.400536][ T7386] __vmalloc_noprof+0xd2/0x120 [ 1350.400567][ T7386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1350.400590][ T7386] bpf_prog_alloc_no_stats+0x47/0x560 [ 1350.400608][ T7386] ? bpf_prog_alloc+0x2a/0x1a0 [ 1350.400630][ T7386] bpf_prog_alloc+0x3c/0x1a0 [ 1350.400652][ T7386] bpf_prog_load+0x7f8/0x1c20 [ 1350.400682][ T7386] ? __pfx_bpf_prog_load+0x10/0x10 [ 1350.400725][ T7386] __sys_bpf+0xd0d/0xd90 [ 1350.400752][ T7386] ? __pfx___sys_bpf+0x10/0x10 [ 1350.400783][ T7386] ? __fget_files+0x2a/0x420 [ 1350.400822][ T7386] ? ksys_write+0x242/0x270 [ 1350.400849][ T7386] ? __pfx_ksys_write+0x10/0x10 [ 1350.400878][ T7386] __x64_sys_bpf+0xba/0xd0 [ 1350.400899][ T7386] do_syscall_64+0x166/0x520 [ 1350.400924][ T7386] ? trace_irq_disable+0x3b/0x140 [ 1350.400941][ T7386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.400959][ T7386] ? clear_bhb_loop+0x70/0xc0 [ 1350.400982][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.401000][ T7386] RIP: 0033:0x7fda68f9e159 [ 1350.401018][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.401033][ T7386] RSP: 002b:00007fda69e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.401054][ T7386] RAX: ffffffffffffffda RBX: 00007fda69225fa0 RCX: 00007fda68f9e159 [ 1350.401068][ T7386] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1350.401080][ T7386] RBP: 00007fda69e88090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.401092][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.401103][ T7386] R13: 00007fda69226038 R14: 00007fda69225fa0 R15: 00007ffd297f7978 [ 1350.401140][ T7386] [ 1350.407480][ T7386] syz.0.9107: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1350.407547][ T7386] CPU: 1 UID: 0 PID: 7386 Comm: syz.0.9107 Not tainted syzkaller #0 PREEMPT(full) [ 1350.407574][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.407586][ T7386] Call Trace: [ 1350.407594][ T7386] [ 1350.407602][ T7386] dump_stack_lvl+0xe8/0x150 [ 1350.407633][ T7386] warn_alloc+0x24d/0x270 [ 1350.407661][ T7386] ? lockdep_hardirqs_on+0x7b/0x110 [ 1350.407690][ T7386] ? __pfx_warn_alloc+0x10/0x10 [ 1350.407715][ T7386] ? kfree+0x1c5/0x650 [ 1350.407745][ T7386] ? __get_vm_area_node+0x219/0x2f0 [ 1350.407776][ T7386] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1350.407801][ T7386] ? __lock_acquire+0x6df/0x2e50 [ 1350.407847][ T7386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1350.407881][ T7386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1350.407900][ T7386] __vmalloc_noprof+0xd2/0x120 [ 1350.407924][ T7386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1350.407949][ T7386] bpf_prog_alloc_no_stats+0x47/0x560 [ 1350.407969][ T7386] ? bpf_prog_alloc+0x2a/0x1a0 [ 1350.407991][ T7386] bpf_prog_alloc+0x3c/0x1a0 [ 1350.408014][ T7386] bpf_prog_load+0x7f8/0x1c20 [ 1350.408048][ T7386] ? __pfx_bpf_prog_load+0x10/0x10 [ 1350.408091][ T7386] __sys_bpf+0xd0d/0xd90 [ 1350.408120][ T7386] ? __pfx___sys_bpf+0x10/0x10 [ 1350.408164][ T7386] ? __fget_files+0x2a/0x420 [ 1350.408204][ T7386] ? ksys_write+0x242/0x270 [ 1350.408233][ T7386] ? __pfx_ksys_write+0x10/0x10 [ 1350.408263][ T7386] __x64_sys_bpf+0xba/0xd0 [ 1350.408285][ T7386] do_syscall_64+0x166/0x520 [ 1350.408310][ T7386] ? trace_irq_disable+0x3b/0x140 [ 1350.408328][ T7386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.408348][ T7386] ? clear_bhb_loop+0x70/0xc0 [ 1350.408369][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.408409][ T7386] RIP: 0033:0x7fda68f9e159 [ 1350.408430][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.408446][ T7386] RSP: 002b:00007fda69e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.408465][ T7386] RAX: ffffffffffffffda RBX: 00007fda69225fa0 RCX: 00007fda68f9e159 [ 1350.408479][ T7386] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1350.408490][ T7386] RBP: 00007fda69e88090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.408500][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.408510][ T7386] R13: 00007fda69226038 R14: 00007fda69225fa0 R15: 00007ffd297f7978 [ 1350.408540][ T7386] [ 1350.408582][ T7386] Mem-Info: [ 1350.408592][ T7386] active_anon:9028 inactive_anon:6 isolated_anon:0 [ 1350.408592][ T7386] active_file:295 inactive_file:44038 isolated_file:0 [ 1350.408592][ T7386] unevictable:0 dirty:156 writeback:0 [ 1350.408592][ T7386] slab_reclaimable:12968 slab_unreclaimable:140481 [ 1350.408592][ T7386] mapped:30075 shmem:522 pagetables:1415 [ 1350.408592][ T7386] sec_pagetables:0 bounce:0 [ 1350.408592][ T7386] kernel_misc_reclaimable:0 [ 1350.408592][ T7386] free:1152615 free_pcp:33966 free_cma:0 [ 1350.408639][ T7386] Node 0 active_anon:36112kB inactive_anon:24kB active_file:1180kB inactive_file:175940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120300kB dirty:624kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16064kB pagetables:5500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1350.408690][ T7386] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1350.408736][ T7386] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.408788][ T7386] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1350.408820][ T7386] Node 0 DMA32 free:658392kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36112kB inactive_anon:24kB active_file:1180kB inactive_file:175940kB unevictable:0kB writepending:624kB zspages:0kB present:3129332kB managed:2546704kB mlocked:0kB bounce:0kB free_pcp:135864kB local_pcp:20248kB free_cma:0kB [ 1350.408874][ T7386] lowmem_reserve[]: 0 0 0 0 0 [ 1350.415222][ T7386] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.415274][ T7386] lowmem_reserve[]: 0 0 0 0 0 [ 1350.415305][ T7386] Node 1 Normal free:3936708kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.415357][ T7386] lowmem_reserve[]: 0 0 0 0 0 [ 1350.415388][ T7386] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1350.415495][ T7386] Node 0 DMA32: 2559*4kB (UME) 1337*8kB (UME) 759*16kB (UME) 920*32kB (UME) 229*64kB (UME) 99*128kB (UM) 47*256kB (UM) 23*512kB (UM) 10*1024kB (UM) 9*2048kB (UM) 126*4096kB (UME) = 658420kB [ 1350.415634][ T7386] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1350.415728][ T7386] Node 1 Normal: 3*4kB (UM) 9*8kB (UM) 7*16kB (UM) 8*32kB (UM) 10*64kB (UM) 3*128kB (UM) 4*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3936708kB [ 1350.415865][ T7386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1350.415880][ T7386] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1350.415899][ T7386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1350.415918][ T7386] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1350.415936][ T7386] 44851 total pagecache pages [ 1350.415944][ T7386] 0 pages in swap cache [ 1350.415952][ T7386] Free swap = 124996kB [ 1350.415959][ T7386] Total swap = 124996kB [ 1350.415966][ T7386] 2097051 pages RAM [ 1350.415973][ T7386] 0 pages HighMem/MovableOnly [ 1350.415980][ T7386] 428759 pages reserved [ 1350.415987][ T7386] 0 pages cma reserved [ 1350.972326][ T7401] __nla_validate_parse: 8 callbacks suppressed [ 1350.972350][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9111'. [ 1351.641849][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9114'. [ 1352.152710][ T7424] syzkaller0: entered promiscuous mode [ 1352.158445][ T7424] syzkaller0: entered allmulticast mode [ 1352.170005][ T7429] syzkaller0: entered promiscuous mode [ 1352.170046][ T7429] syzkaller0: entered allmulticast mode [ 1352.244218][ T7441] FAULT_INJECTION: forcing a failure. [ 1352.244218][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.257685][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.3.9120 Not tainted syzkaller #0 PREEMPT(full) [ 1352.257712][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1352.257723][ T7441] Call Trace: [ 1352.257731][ T7441] [ 1352.257740][ T7441] dump_stack_lvl+0xe8/0x150 [ 1352.257773][ T7441] should_fail_ex+0x410/0x560 [ 1352.257807][ T7441] should_failslab+0xa8/0x100 [ 1352.257829][ T7441] ? skb_clone+0x212/0x3a0 [ 1352.257850][ T7441] kmem_cache_alloc_noprof+0xa1/0x600 [ 1352.257879][ T7441] ? skb_clone+0x212/0x3a0 [ 1352.257902][ T7441] skb_clone+0x212/0x3a0 [ 1352.257919][ T7441] ? netlink_trim+0x166/0x2c0 [ 1352.257941][ T7441] netlink_trim+0x17d/0x2c0 [ 1352.257971][ T7441] netlink_broadcast_filtered+0x6d/0xea0 [ 1352.257994][ T7441] ? tcf_action_dump+0x23a/0x2d0 [ 1352.258032][ T7441] nlmsg_notify+0xe3/0x1a0 [ 1352.258059][ T7441] tc_ctl_action+0x976/0xc70 [ 1352.258097][ T7441] ? __pfx_tc_ctl_action+0x10/0x10 [ 1352.258129][ T7441] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1352.258195][ T7441] ? __pfx_tc_ctl_action+0x10/0x10 [ 1352.258223][ T7441] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1352.258250][ T7441] ? netlink_sendmsg+0x5d4/0xb40 [ 1352.258275][ T7441] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1352.258301][ T7441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1352.258330][ T7441] ? __lock_acquire+0x6df/0x2e50 [ 1352.258364][ T7441] netlink_rcv_skb+0x226/0x4a0 [ 1352.258387][ T7441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1352.258421][ T7441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1352.258457][ T7441] ? netlink_deliver_tap+0x2e/0x1b0 [ 1352.258479][ T7441] ? netlink_deliver_tap+0x2e/0x1b0 [ 1352.258507][ T7441] netlink_unicast+0x7bd/0x940 [ 1352.258540][ T7441] netlink_sendmsg+0x813/0xb40 [ 1352.258573][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.258605][ T7441] ? apparmor_socket_sendmsg+0x98/0x360 [ 1352.258635][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.258657][ T7441] sock_sendmsg_nosec+0x13a/0x180 [ 1352.258685][ T7441] ____sys_sendmsg+0x54e/0x850 [ 1352.258712][ T7441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1352.258737][ T7441] ? import_iovec+0x73/0xa0 [ 1352.258756][ T7441] ___sys_sendmsg+0x2a5/0x360 [ 1352.258770][ T7441] ? __lock_acquire+0x6df/0x2e50 [ 1352.258788][ T7441] ? __pfx____sys_sendmsg+0x10/0x10 [ 1352.258832][ T7441] ? __fget_files+0x2a/0x420 [ 1352.258850][ T7441] ? __fget_files+0x3a2/0x420 [ 1352.258877][ T7441] __x64_sys_sendmsg+0x1b1/0x290 [ 1352.258894][ T7441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1352.258927][ T7441] do_syscall_64+0x166/0x520 [ 1352.258952][ T7441] ? trace_irq_disable+0x3b/0x140 [ 1352.258966][ T7441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.258981][ T7441] ? clear_bhb_loop+0x70/0xc0 [ 1352.259000][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.259014][ T7441] RIP: 0033:0x7f49a499e159 [ 1352.259030][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.259043][ T7441] RSP: 002b:00007f49a58ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.259060][ T7441] RAX: ffffffffffffffda RBX: 00007f49a4c25fa0 RCX: 00007f49a499e159 [ 1352.259070][ T7441] RDX: 0000000000004800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1352.259080][ T7441] RBP: 00007f49a58ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.259089][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1352.259099][ T7441] R13: 00007f49a4c26038 R14: 00007f49a4c25fa0 R15: 00007ffc1ca625c8 [ 1352.259124][ T7441] [ 1352.612474][ T7448] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1352.717092][ T7458] netlink: 660 bytes leftover after parsing attributes in process `syz.0.9126'. [ 1352.747891][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9123'. [ 1353.690076][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9132'. [ 1357.867041][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.917834][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.979129][ T7498] erspan0: entered promiscuous mode [ 1357.999854][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9134'. [ 1358.068528][ T7506] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 1358.069027][ T7506] CPU: 1 UID: 0 PID: 7506 Comm: syz.4.9140 Not tainted syzkaller #0 PREEMPT(full) [ 1358.069051][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1358.069063][ T7506] Call Trace: [ 1358.069073][ T7506] [ 1358.069082][ T7506] dump_stack_lvl+0xe8/0x150 [ 1358.069116][ T7506] sysfs_warn_dup+0x8e/0xa0 [ 1358.069148][ T7506] sysfs_do_create_link_sd+0xc0/0x110 [ 1358.069179][ T7506] device_add_class_symlinks+0x1cf/0x240 [ 1358.069212][ T7506] device_add+0x467/0xb80 [ 1358.069243][ T7506] wiphy_register+0x1fc8/0x2ff0 [ 1358.069285][ T7506] ? __pfx_wiphy_register+0x10/0x10 [ 1358.069309][ T7506] ? __pfx_netdev_run_todo+0x10/0x10 [ 1358.069335][ T7506] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1358.069365][ T7506] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1358.069399][ T7506] ieee80211_register_hw+0x3d3d/0x4a50 [ 1358.069442][ T7506] ? ieee80211_register_hw+0x1991/0x4a50 [ 1358.069497][ T7506] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1358.069529][ T7506] ? __asan_memset+0x22/0x50 [ 1358.069570][ T7506] ? __hrtimer_setup+0x1b7/0x260 [ 1358.069597][ T7506] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1358.069623][ T7506] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 1358.069676][ T7506] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1358.069706][ T7506] ? kstrndup+0xbd/0x160 [ 1358.069730][ T7506] ? kstrndup+0xbd/0x160 [ 1358.069751][ T7506] hwsim_new_radio_nl+0xd8b/0xf90 [ 1358.069797][ T7506] genl_family_rcv_msg_doit+0x233/0x340 [ 1358.069835][ T7506] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1358.069887][ T7506] ? bpf_lsm_capable+0x9/0x20 [ 1358.069914][ T7506] ? security_capable+0x7e/0x2c0 [ 1358.069943][ T7506] genl_rcv_msg+0x614/0x7a0 [ 1358.069980][ T7506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1358.070007][ T7506] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1358.070049][ T7506] netlink_rcv_skb+0x226/0x4a0 [ 1358.070074][ T7506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1358.070103][ T7506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1358.070138][ T7506] ? down_read+0x2be/0x330 [ 1358.070163][ T7506] genl_rcv+0x28/0x40 [ 1358.070188][ T7506] netlink_unicast+0x7bd/0x940 [ 1358.070222][ T7506] netlink_sendmsg+0x813/0xb40 [ 1358.070257][ T7506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1358.070290][ T7506] ? apparmor_socket_sendmsg+0x98/0x360 [ 1358.070322][ T7506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1358.070344][ T7506] sock_sendmsg_nosec+0x13a/0x180 [ 1358.070374][ T7506] ____sys_sendmsg+0x54e/0x850 [ 1358.070400][ T7506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1358.070432][ T7506] ? import_iovec+0x73/0xa0 [ 1358.070458][ T7506] ___sys_sendmsg+0x2a5/0x360 [ 1358.070477][ T7506] ? __lock_acquire+0x6df/0x2e50 [ 1358.070502][ T7506] ? __pfx____sys_sendmsg+0x10/0x10 [ 1358.070528][ T7506] ? futex_wait+0x2a2/0x390 [ 1358.070668][ T7506] ? __fget_files+0x2a/0x420 [ 1358.070693][ T7506] ? __fget_files+0x3a2/0x420 [ 1358.070730][ T7506] __x64_sys_sendmsg+0x1b1/0x290 [ 1358.070755][ T7506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1358.070800][ T7506] do_syscall_64+0x166/0x520 [ 1358.070827][ T7506] ? trace_irq_disable+0x3b/0x140 [ 1358.070844][ T7506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.070864][ T7506] ? clear_bhb_loop+0x70/0xc0 [ 1358.070888][ T7506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.070908][ T7506] RIP: 0033:0x7fbf6ab9e159 [ 1358.070930][ T7506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.070946][ T7506] RSP: 002b:00007fbf6b98e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.070968][ T7506] RAX: ffffffffffffffda RBX: 00007fbf6ae25fa0 RCX: 00007fbf6ab9e159 [ 1358.070983][ T7506] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1358.070996][ T7506] RBP: 00007fbf6ac3503b R08: 0000000000000000 R09: 0000000000000000 [ 1358.071009][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.071022][ T7506] R13: 00007fbf6ae26038 R14: 00007fbf6ae25fa0 R15: 00007ffe3e485608 [ 1358.071056][ T7506] [ 1358.606795][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9143'. [ 1358.670989][ T7522] syzkaller1: entered promiscuous mode [ 1358.676903][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1358.696862][ T7522] syzkaller1: entered allmulticast mode [ 1358.928970][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9148'. [ 1358.956614][ T7538] syzkaller0: entered promiscuous mode [ 1358.962631][ T7538] syzkaller0: entered allmulticast mode [ 1364.135500][ T13] bridge_slave_1: left allmulticast mode [ 1364.141281][ T13] bridge_slave_1: left promiscuous mode [ 1364.150543][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.169884][ T13] bridge_slave_0: left allmulticast mode [ 1364.175870][ T13] bridge_slave_0: left promiscuous mode [ 1364.182147][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.604701][ T7577] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9159'. [ 1364.879413][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 1364.911138][ T7600] netlink: 'syz.3.9163': attribute type 3 has an invalid length. [ 1364.911171][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9163'. [ 1364.945659][ T13] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1364.963954][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9163'. [ 1365.092549][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.107315][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.147361][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 1365.174946][ T13] bond0 (unregistering): Released all slaves [ 1365.207394][ T13] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1365.218704][ T13] bond1 (unregistering): Released all slaves [ 1365.257953][ T13] bond2 (unregistering): Released all slaves [ 1365.295560][ T13] bond3 (unregistering): Released all slaves [ 1365.330155][ T7614] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9164'. [ 1365.336580][ T13] bond4 (unregistering): Released all slaves [ 1365.338342][ T7614] Bluetooth: MGMT ver 1.23 [ 1365.370994][ T13] bond5 (unregistering): Released all slaves [ 1365.396305][ T13] bond6 (unregistering): Released all slaves [ 1365.598748][ T13] ovs-s!: left promiscuous mode [ 1365.865375][ T13] tipc: Left network mode [ 1366.307525][ T7630] syzkaller0: entered promiscuous mode [ 1366.307583][ T7630] syzkaller0: entered allmulticast mode [ 1366.669695][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9173'. [ 1366.729719][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1366.749553][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1366.750951][ T7657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.766901][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1366.787960][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1366.792466][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1366.864116][ T7664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.926442][ T52] Bluetooth: hci3: command tx timeout [ 1371.012100][ T52] Bluetooth: hci3: command tx timeout [ 1371.787019][ T7673] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1372.111875][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1372.525652][ T7702] FAULT_INJECTION: forcing a failure. [ 1372.525652][ T7702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.525714][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: syz.4.9180 Not tainted syzkaller #0 PREEMPT(full) [ 1372.525735][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1372.525746][ T7702] Call Trace: [ 1372.525753][ T7702] [ 1372.525760][ T7702] dump_stack_lvl+0xe8/0x150 [ 1372.525786][ T7702] should_fail_ex+0x410/0x560 [ 1372.525818][ T7702] _copy_from_user+0x2d/0xb0 [ 1372.525838][ T7702] ___sys_recvmsg+0x173/0x5a0 [ 1372.525866][ T7702] ? __pfx____sys_recvmsg+0x10/0x10 [ 1372.525891][ T7702] ? lock_acquire+0x115/0x350 [ 1372.525932][ T7702] do_recvmmsg+0x31a/0x7f0 [ 1372.525957][ T7702] ? __pfx_do_recvmmsg+0x10/0x10 [ 1372.525989][ T7702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1372.526017][ T7702] ? __fget_files+0x3a2/0x420 [ 1372.526051][ T7702] __x64_sys_recvmmsg+0x198/0x250 [ 1372.526075][ T7702] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1372.526107][ T7702] do_syscall_64+0x166/0x520 [ 1372.526131][ T7702] ? trace_irq_disable+0x3b/0x140 [ 1372.526149][ T7702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.526167][ T7702] ? clear_bhb_loop+0x70/0xc0 [ 1372.526189][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.526208][ T7702] RIP: 0033:0x7fbf6ab9e159 [ 1372.526225][ T7702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.526241][ T7702] RSP: 002b:00007fbf68df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1372.526262][ T7702] RAX: ffffffffffffffda RBX: 00007fbf6ae26090 RCX: 00007fbf6ab9e159 [ 1372.526275][ T7702] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1372.526287][ T7702] RBP: 00007fbf68df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.526298][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1372.526309][ T7702] R13: 00007fbf6ae26128 R14: 00007fbf6ae26090 R15: 00007ffe3e485608 [ 1372.526340][ T7702] [ 1372.780324][ T7703] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9179'. [ 1372.780387][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9179'. [ 1372.780420][ T7703] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9179'. [ 1373.076004][ T52] Bluetooth: hci3: command tx timeout [ 1373.479011][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9186'. [ 1373.672846][ T52] Bluetooth: hci1: SCO packet too small [ 1373.845912][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9192'. [ 1373.868270][ T7655] lo speed is unknown, defaulting to 1000 [ 1373.994634][ T7754] netlink: 'syz.2.9192': attribute type 5 has an invalid length. [ 1374.034126][ T7755] Bluetooth: MGMT ver 1.23 [ 1374.802150][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9203'. [ 1374.812211][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9203'. [ 1375.004421][ T7803] FAULT_INJECTION: forcing a failure. [ 1375.004421][ T7803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.004478][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.1.9206 Not tainted syzkaller #0 PREEMPT(full) [ 1375.004498][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1375.004508][ T7803] Call Trace: [ 1375.004515][ T7803] [ 1375.004521][ T7803] dump_stack_lvl+0xe8/0x150 [ 1375.004550][ T7803] should_fail_ex+0x410/0x560 [ 1375.004582][ T7803] _copy_from_user+0x2d/0xb0 [ 1375.004603][ T7803] ___sys_recvmsg+0x173/0x5a0 [ 1375.004630][ T7803] ? __pfx____sys_recvmsg+0x10/0x10 [ 1375.004663][ T7803] ? lock_acquire+0x115/0x350 [ 1375.004710][ T7803] do_recvmmsg+0x31a/0x7f0 [ 1375.004742][ T7803] ? __pfx_do_recvmmsg+0x10/0x10 [ 1375.004774][ T7803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1375.004803][ T7803] ? __fget_files+0x3a2/0x420 [ 1375.004837][ T7803] __x64_sys_recvmmsg+0x198/0x250 [ 1375.004861][ T7803] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1375.004894][ T7803] do_syscall_64+0x166/0x520 [ 1375.004919][ T7803] ? trace_irq_disable+0x3b/0x140 [ 1375.004936][ T7803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.004955][ T7803] ? clear_bhb_loop+0x70/0xc0 [ 1375.004977][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.004995][ T7803] RIP: 0033:0x7fab5079e159 [ 1375.005013][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.005030][ T7803] RSP: 002b:00007fab51715028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1375.005050][ T7803] RAX: ffffffffffffffda RBX: 00007fab50a26090 RCX: 00007fab5079e159 [ 1375.005064][ T7803] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1375.005075][ T7803] RBP: 00007fab51715090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.005087][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1375.005098][ T7803] R13: 00007fab50a26128 R14: 00007fab50a26090 R15: 00007ffea5d10f38 [ 1375.005130][ T7803] [ 1375.171885][ T52] Bluetooth: hci3: command tx timeout [ 1375.172660][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.599997][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9209'. [ 1375.645246][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1375.757945][ T7831] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9212'. [ 1376.021998][ T7827] macvtap1: entered allmulticast mode [ 1376.027852][ T7827] dummy0: entered allmulticast mode [ 1376.045163][ T7827] dummy0: entered promiscuous mode [ 1376.053880][ T7827] dummy0: left allmulticast mode [ 1376.096503][ T4231] dummy0: left promiscuous mode [ 1376.329261][ T7838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9214'. [ 1376.457845][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.458033][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.458189][ T7655] bridge_slave_0: entered allmulticast mode [ 1376.463833][ T7655] bridge_slave_0: entered promiscuous mode [ 1376.466820][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.466919][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.467046][ T7655] bridge_slave_1: entered allmulticast mode [ 1376.468768][ T7655] bridge_slave_1: entered promiscuous mode [ 1376.519182][ T7655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.579175][ T7655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.608424][ T13] IPVS: stop unused estimator thread 0... [ 1376.749733][ T7655] team0: Port device team_slave_0 added [ 1376.763218][ T7655] team0: Port device team_slave_1 added [ 1376.803953][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.807961][ T7862] FAULT_INJECTION: forcing a failure. [ 1376.807961][ T7862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.807993][ T7862] CPU: 0 UID: 0 PID: 7862 Comm: syz.0.9217 Not tainted syzkaller #0 PREEMPT(full) [ 1376.808014][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1376.808024][ T7862] Call Trace: [ 1376.808032][ T7862] [ 1376.808040][ T7862] dump_stack_lvl+0xe8/0x150 [ 1376.808074][ T7862] should_fail_ex+0x410/0x560 [ 1376.808106][ T7862] _copy_from_user+0x2d/0xb0 [ 1376.808131][ T7862] ___sys_recvmsg+0x173/0x5a0 [ 1376.808158][ T7862] ? __pfx____sys_recvmsg+0x10/0x10 [ 1376.808183][ T7862] ? lock_acquire+0x115/0x350 [ 1376.808231][ T7862] do_recvmmsg+0x31a/0x7f0 [ 1376.808259][ T7862] ? __pfx_do_recvmmsg+0x10/0x10 [ 1376.808291][ T7862] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1376.808320][ T7862] ? __fget_files+0x3a2/0x420 [ 1376.808353][ T7862] __x64_sys_recvmmsg+0x198/0x250 [ 1376.808376][ T7862] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1376.808409][ T7862] do_syscall_64+0x166/0x520 [ 1376.808434][ T7862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.808452][ T7862] ? clear_bhb_loop+0x70/0xc0 [ 1376.808475][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.808493][ T7862] RIP: 0033:0x7fda68f9e159 [ 1376.808516][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.808532][ T7862] RSP: 002b:00007fda69e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1376.808551][ T7862] RAX: ffffffffffffffda RBX: 00007fda69226090 RCX: 00007fda68f9e159 [ 1376.808565][ T7862] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1376.808577][ T7862] RBP: 00007fda69e67090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.808588][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.808599][ T7862] R13: 00007fda69226128 R14: 00007fda69226090 R15: 00007ffd297f7978 [ 1376.808631][ T7862] [ 1376.834365][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.834397][ T7655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.966718][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.966737][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.966763][ T7655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.232479][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1377.417914][ T7870] batman_adv: batadv0: Interface deactivated: gretap1 [ 1377.427352][ T7870] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 1377.427435][T24830] lo speed is unknown, defaulting to 1000 [ 1377.427459][T24830] sz1: Port: 1 Link DOWN [ 1377.427530][T24830] lo speed is unknown, defaulting to 1000 [ 1377.435919][ T7655] hsr_slave_0: entered promiscuous mode [ 1377.436886][ T7655] hsr_slave_1: entered promiscuous mode [ 1377.437519][ T7655] debugfs: 'hsr0' already exists in 'hsr' [ 1377.437538][ T7655] Cannot create hsr debugfs directory [ 1377.532299][ T7876] ip6tnl1: entered promiscuous mode [ 1377.535473][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1377.535500][ T7877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.538940][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1377.538961][ T7877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.548633][ T7877] batman_adv: batadv0: Removing interface: gretap1 [ 1377.818396][ T7899] FAULT_INJECTION: forcing a failure. [ 1377.818396][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.818439][ T7899] CPU: 0 UID: 0 PID: 7899 Comm: syz.4.9227 Not tainted syzkaller #0 PREEMPT(full) [ 1377.818459][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1377.818470][ T7899] Call Trace: [ 1377.818478][ T7899] [ 1377.818486][ T7899] dump_stack_lvl+0xe8/0x150 [ 1377.818512][ T7899] should_fail_ex+0x410/0x560 [ 1377.818542][ T7899] _copy_from_user+0x2d/0xb0 [ 1377.818562][ T7899] ___sys_recvmsg+0x173/0x5a0 [ 1377.818589][ T7899] ? __pfx____sys_recvmsg+0x10/0x10 [ 1377.818616][ T7899] ? lock_acquire+0x115/0x350 [ 1377.818660][ T7899] do_recvmmsg+0x31a/0x7f0 [ 1377.818689][ T7899] ? __pfx_do_recvmmsg+0x10/0x10 [ 1377.818722][ T7899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1377.818751][ T7899] ? __fget_files+0x3a2/0x420 [ 1377.818784][ T7899] __x64_sys_recvmmsg+0x198/0x250 [ 1377.818808][ T7899] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1377.818840][ T7899] do_syscall_64+0x166/0x520 [ 1377.818864][ T7899] ? trace_irq_disable+0x3b/0x140 [ 1377.818885][ T7899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.818904][ T7899] ? clear_bhb_loop+0x70/0xc0 [ 1377.818926][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.818945][ T7899] RIP: 0033:0x7fbf6ab9e159 [ 1377.818962][ T7899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.818977][ T7899] RSP: 002b:00007fbf68df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1377.818996][ T7899] RAX: ffffffffffffffda RBX: 00007fbf6ae26090 RCX: 00007fbf6ab9e159 [ 1377.819010][ T7899] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1377.819022][ T7899] RBP: 00007fbf68df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.819034][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.819045][ T7899] R13: 00007fbf6ae26128 R14: 00007fbf6ae26090 R15: 00007ffe3e485608 [ 1377.819075][ T7899] [ 1378.198348][ T7908] syzkaller1: entered promiscuous mode [ 1378.198395][ T7908] syzkaller1: entered allmulticast mode [ 1379.006716][ T7945] __nla_validate_parse: 3 callbacks suppressed [ 1379.006760][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9238'. [ 1379.046627][ T7941] bridge0: port 3(vlan0) entered blocking state [ 1379.046815][ T7941] bridge0: port 3(vlan0) entered disabled state [ 1379.046982][ T7941] vlan0: entered allmulticast mode [ 1379.046997][ T7941] veth0_vlan: entered allmulticast mode [ 1379.050669][ T7941] vlan0: entered promiscuous mode [ 1379.056088][ T7941] bridge0: port 3(vlan0) entered blocking state [ 1379.056201][ T7941] bridge0: port 3(vlan0) entered forwarding state [ 1379.196818][ T7901] lo speed is unknown, defaulting to 1000 [ 1379.535729][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9246'. [ 1379.953320][ T858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.961333][ T858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.965244][ T7655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1379.972695][ T7987] openvswitch: netlink: Missing valid actions attribute. [ 1379.990899][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9251'. [ 1379.994657][ T7655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1380.018746][ T7655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1380.039503][ T7655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1380.064042][ T7655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1380.077884][ T7655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1380.089187][ T7655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1380.104590][ T7655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1380.163810][T16628] hid-generic 0005:1008:0009.0001: item fetching failed at offset 2/3 [ 1380.177939][T16628] hid-generic 0005:1008:0009.0001: probe with driver hid-generic failed with error -22 [ 1380.394367][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9256'. [ 1380.494268][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9257'. [ 1380.560168][ T7655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.627029][ T7655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.676304][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.676419][ T9420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.737877][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.738051][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.893784][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9262'. [ 1381.114915][ T8038] netlink: 'syz.1.9265': attribute type 5 has an invalid length. [ 1381.116822][ T8036] netlink: 'syz.1.9265': attribute type 5 has an invalid length. [ 1381.514040][ T8055] syzkaller1: entered promiscuous mode [ 1381.514086][ T8055] syzkaller1: entered allmulticast mode [ 1381.622407][ T8058] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1381.841562][ T8075] gre0: entered promiscuous mode [ 1381.855587][ T8075] gre0: entered allmulticast mode [ 1382.021244][ T7655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.030053][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1382.046577][ T8088] xt_TCPMSS: Only works on TCP SYN packets [ 1382.065508][ T8091] netlink: 'syz.2.9277': attribute type 1 has an invalid length. [ 1382.075096][ T8090] netlink: 'syz.2.9277': attribute type 7 has an invalid length. [ 1382.075145][ T8090] netlink: 'syz.2.9277': attribute type 3 has an invalid length. [ 1382.075173][ T8090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9277'. [ 1382.111179][ T8091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1382.132959][ T8092] bond1: (slave veth0_to_bond): making interface the new active one [ 1382.144282][ T8092] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1382.155012][ T8093] bond1: entered promiscuous mode [ 1382.155037][ T8093] veth0_to_bond: entered promiscuous mode [ 1382.155246][ T8093] bond1: entered allmulticast mode [ 1382.155259][ T8093] veth0_to_bond: entered allmulticast mode [ 1382.240248][ T7655] veth0_vlan: entered promiscuous mode [ 1382.257242][ T7655] veth1_vlan: entered promiscuous mode [ 1382.309023][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9280'. [ 1382.309066][ T8104] netlink: 'syz.2.9280': attribute type 30 has an invalid length. [ 1382.339316][ T8104] vxlan0: entered promiscuous mode [ 1382.339343][ T8104] vxlan0: entered allmulticast mode [ 1382.348102][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9280'. [ 1382.348133][ T8104] netlink: 'syz.2.9280': attribute type 30 has an invalid length. [ 1382.356577][ T8104] vxlan1: entered promiscuous mode [ 1382.356599][ T8104] vxlan1: entered allmulticast mode [ 1382.360680][ T3305] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1382.360720][ T3305] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1382.360750][ T3305] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1382.360778][ T3305] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1382.416651][ T7655] veth0_macvtap: entered promiscuous mode [ 1382.430341][ T7655] veth1_macvtap: entered promiscuous mode [ 1382.481394][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1382.491099][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1382.573758][ T9426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.573834][ T9426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.573866][ T9426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.573893][ T9426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.766327][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.766369][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.826138][ T9431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.826176][ T9431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.196570][ T8133] vti0: entered promiscuous mode [ 1383.223196][ T8138] vlan5: entered promiscuous mode [ 1383.223240][ T8138] erspan0: entered promiscuous mode [ 1383.455276][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1383.479105][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1383.488010][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1383.505049][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1383.512868][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1384.230370][ T8179] __nla_validate_parse: 2 callbacks suppressed [ 1384.237004][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9306'. [ 1384.248384][ T8179] 8021q: VLANs not supported on nlmon0 [ 1384.275801][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.285733][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.606097][ T8199] syzkaller1: entered promiscuous mode [ 1384.606149][ T8199] syzkaller1: entered allmulticast mode [ 1384.720604][ T8203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9314'. [ 1384.768167][ T8146] lo speed is unknown, defaulting to 1000 [ 1385.051966][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9320'. [ 1385.180588][ T8225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9322'. [ 1385.195505][ T8220] FAULT_INJECTION: forcing a failure. [ 1385.195505][ T8220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1385.195560][ T8220] CPU: 1 UID: 0 PID: 8220 Comm: syz.1.9321 Not tainted syzkaller #0 PREEMPT(full) [ 1385.195580][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1385.195590][ T8220] Call Trace: [ 1385.195597][ T8220] [ 1385.195604][ T8220] dump_stack_lvl+0xe8/0x150 [ 1385.195631][ T8220] should_fail_ex+0x410/0x560 [ 1385.195664][ T8220] _copy_from_user+0x2d/0xb0 [ 1385.195685][ T8220] ___sys_recvmsg+0x173/0x5a0 [ 1385.195710][ T8220] ? __pfx____sys_recvmsg+0x10/0x10 [ 1385.195735][ T8220] ? lock_acquire+0x115/0x350 [ 1385.195786][ T8220] do_recvmmsg+0x31a/0x7f0 [ 1385.195815][ T8220] ? __pfx_do_recvmmsg+0x10/0x10 [ 1385.195847][ T8220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1385.195875][ T8220] ? __fget_files+0x3a2/0x420 [ 1385.195909][ T8220] __x64_sys_recvmmsg+0x198/0x250 [ 1385.195933][ T8220] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1385.195966][ T8220] do_syscall_64+0x166/0x520 [ 1385.195990][ T8220] ? trace_irq_disable+0x3b/0x140 [ 1385.196008][ T8220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.196027][ T8220] ? clear_bhb_loop+0x70/0xc0 [ 1385.196049][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.196067][ T8220] RIP: 0033:0x7fab5079e159 [ 1385.196085][ T8220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.196101][ T8220] RSP: 002b:00007fab51736028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1385.196121][ T8220] RAX: ffffffffffffffda RBX: 00007fab50a25fa0 RCX: 00007fab5079e159 [ 1385.196135][ T8220] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1385.196146][ T8220] RBP: 00007fab51736090 R08: 0000000000000000 R09: 0000000000000000 [ 1385.196158][ T8220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1385.196169][ T8220] R13: 00007fab50a26038 R14: 00007fab50a25fa0 R15: 00007ffea5d10f38 [ 1385.196200][ T8220] [ 1385.484859][ T8238] netlink: 67 bytes leftover after parsing attributes in process `syz.1.9326'. [ 1385.503571][ T8238] Bluetooth: hci0: unsupported parameter 5135 [ 1385.503618][ T8238] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 1385.633589][ T52] Bluetooth: hci4: command tx timeout [ 1385.750947][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.758421][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.765850][ T8146] bridge_slave_0: entered allmulticast mode [ 1385.773911][ T8146] bridge_slave_0: entered promiscuous mode [ 1385.783054][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.790337][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.797905][ T8146] bridge_slave_1: entered allmulticast mode [ 1385.806071][ T8146] bridge_slave_1: entered promiscuous mode [ 1385.852085][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.869818][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.915908][ T8146] team0: Port device team_slave_0 added [ 1385.924602][ T8146] team0: Port device team_slave_1 added [ 1385.958238][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.965354][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.991742][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.006104][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.013397][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.040167][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.112305][ T8146] hsr_slave_0: entered promiscuous mode [ 1386.113325][ T8146] hsr_slave_1: entered promiscuous mode [ 1386.126101][ T8146] debugfs: 'hsr0' already exists in 'hsr' [ 1386.132060][ T8146] Cannot create hsr debugfs directory [ 1386.155907][ T8259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9331'. [ 1386.250292][ T8269] FAULT_INJECTION: forcing a failure. [ 1386.250292][ T8269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.283961][ T8269] CPU: 0 UID: 0 PID: 8269 Comm: syz.2.9333 Not tainted syzkaller #0 PREEMPT(full) [ 1386.283990][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1386.284002][ T8269] Call Trace: [ 1386.284011][ T8269] [ 1386.284020][ T8269] dump_stack_lvl+0xe8/0x150 [ 1386.284053][ T8269] should_fail_ex+0x410/0x560 [ 1386.284087][ T8269] _copy_from_user+0x2d/0xb0 [ 1386.284109][ T8269] ___sys_recvmsg+0x173/0x5a0 [ 1386.284138][ T8269] ? __pfx____sys_recvmsg+0x10/0x10 [ 1386.284164][ T8269] ? lock_acquire+0x115/0x350 [ 1386.284221][ T8269] do_recvmmsg+0x31a/0x7f0 [ 1386.284255][ T8269] ? __pfx_do_recvmmsg+0x10/0x10 [ 1386.284289][ T8269] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1386.284318][ T8269] ? __fget_files+0x3a2/0x420 [ 1386.284353][ T8269] __x64_sys_recvmmsg+0x198/0x250 [ 1386.284382][ T8269] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1386.284417][ T8269] do_syscall_64+0x166/0x520 [ 1386.284441][ T8269] ? trace_irq_disable+0x3b/0x140 [ 1386.284459][ T8269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.284479][ T8269] ? clear_bhb_loop+0x70/0xc0 [ 1386.284503][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.284522][ T8269] RIP: 0033:0x7fe0e6f9e159 [ 1386.284541][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.284558][ T8269] RSP: 002b:00007fe0e7e5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1386.284578][ T8269] RAX: ffffffffffffffda RBX: 00007fe0e7226090 RCX: 00007fe0e6f9e159 [ 1386.284592][ T8269] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1386.284605][ T8269] RBP: 00007fe0e7e5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.284617][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1386.284629][ T8269] R13: 00007fe0e7226128 R14: 00007fe0e7226090 R15: 00007ffdd3212568 [ 1386.284662][ T8269] [ 1386.508908][ T8275] netlink: 'syz.3.9332': attribute type 1 has an invalid length. [ 1386.528294][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9335'. [ 1386.528358][ T8276] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9335'. [ 1386.549986][ T8261] nbd3: detected capacity change from 0 to 63 [ 1386.557105][ T8265] block nbd3: NBD_DISCONNECT [ 1386.581831][ T8265] block nbd ** replaying previous printk message ** [ 1386.581831][ T8265] block nbd3: Disconnected due to user request. [ 1386.585595][ T1982] [ 1386.598502][ T1982] ====================================================== [ 1386.598987][ T8265] block nbd3: shutting down sockets [ 1386.610693][ T1982] WARNING: possible circular locking dependency detected [ 1386.617806][ T1982] syzkaller #0 Not tainted [ 1386.622223][ T1982] ------------------------------------------------------ [ 1386.629253][ T1982] kworker/1:1H/1982 is trying to acquire lock: [ 1386.635403][ T1982] ffff888056583c68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 1386.644389][ T1982] [ 1386.644389][ T1982] but task is already holding lock: [ 1386.651747][ T1982] ffff888061297178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1386.660187][ T1982] [ 1386.660187][ T1982] which lock already depends on the new lock. [ 1386.660187][ T1982] [ 1386.670603][ T1982] [ 1386.670603][ T1982] the existing dependency chain (in reverse order) is: [ 1386.679606][ T1982] [ 1386.679606][ T1982] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1386.686814][ T1982] __mutex_lock+0x19d/0x1550 [ 1386.691921][ T1982] nbd_queue_rq+0xc1/0xff0 [ 1386.696858][ T1982] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1386.702938][ T1982] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1386.709789][ T1982] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1386.716280][ T1982] blk_mq_run_work_fn+0x16c/0x300 [ 1386.721838][ T1982] process_scheduled_works+0xc3d/0x1630 [ 1386.727900][ T1982] worker_thread+0xa47/0xfb0 [ 1386.733005][ T1982] kthread+0x38b/0x480 [ 1386.737588][ T1982] ret_from_fork+0x514/0xb70 [ 1386.742710][ T1982] ret_from_fork_asm+0x1a/0x30 [ 1386.748120][ T1982] [ 1386.748120][ T1982] -> #5 (set->srcu){.+.+}-{0:0}: [ 1386.755239][ T1982] __synchronize_srcu+0xc9/0x2f0 [ 1386.760692][ T1982] elevator_switch+0x1e8/0x7b0 [ 1386.765982][ T1982] elevator_change+0x2fa/0x480 [ 1386.771265][ T1982] elevator_set_default+0x375/0x440 [ 1386.776986][ T1982] blk_register_queue+0x3f3/0x4e0 [ 1386.782523][ T1982] __add_disk+0x6cb/0xe30 [ 1386.787372][ T1982] add_disk_fwnode+0x100/0x3a0 [ 1386.792663][ T1982] nbd_dev_add+0x733/0xb60 [ 1386.797601][ T1982] nbd_init+0x168/0x1f0 [ 1386.802313][ T1982] do_one_initcall+0x250/0x870 [ 1386.807606][ T1982] do_initcall_level+0x10a/0x1a0 [ 1386.813101][ T1982] do_initcalls+0x59/0xa0 [ 1386.817953][ T1982] kernel_init_freeable+0x29d/0x3e0 [ 1386.823692][ T1982] kernel_init+0x22/0x1d0 [ 1386.828534][ T1982] ret_from_fork+0x514/0xb70 [ 1386.833631][ T1982] ret_from_fork_asm+0x1a/0x30 [ 1386.838918][ T1982] [ 1386.838918][ T1982] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1386.846733][ T1982] __mutex_lock+0x19d/0x1550 [ 1386.851847][ T1982] elevator_change+0x1af/0x480 [ 1386.857139][ T1982] elevator_set_none+0xb5/0x140 [ 1386.862527][ T1982] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1386.868868][ T1982] nbd_start_device+0x189/0xb30 [ 1386.874284][ T1982] nbd_genl_connect+0x167d/0x1cd0 [ 1386.879844][ T1982] genl_family_rcv_msg_doit+0x233/0x340 [ 1386.885925][ T1982] genl_rcv_msg+0x614/0x7a0 [ 1386.890954][ T1982] netlink_rcv_skb+0x226/0x4a0 [ 1386.896238][ T1982] genl_rcv+0x28/0x40 [ 1386.900752][ T1982] netlink_unicast+0x7bd/0x940 [ 1386.906041][ T1982] netlink_sendmsg+0x813/0xb40 [ 1386.911334][ T1982] sock_sendmsg_nosec+0x13a/0x180 [ 1386.916894][ T1982] ____sys_sendmsg+0x54e/0x850 [ 1386.922202][ T1982] ___sys_sendmsg+0x2a5/0x360 [ 1386.927475][ T1982] __x64_sys_sendmsg+0x1b1/0x290 [ 1386.933019][ T1982] do_syscall_64+0x166/0x520 [ 1386.938142][ T1982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.944561][ T1982] [ 1386.944561][ T1982] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1386.953164][ T1982] blk_alloc_queue+0x544/0x690 [ 1386.958451][ T1982] __blk_mq_alloc_disk+0x194/0x390 [ 1386.964092][ T1982] nbd_dev_add+0x494/0xb60 [ 1386.969025][ T1982] nbd_init+0x168/0x1f0 [ 1386.973698][ T1982] do_one_initcall+0x250/0x870 [ 1386.978985][ T1982] do_initcall_level+0x10a/0x1a0 [ 1386.984432][ T1982] do_initcalls+0x59/0xa0 [ 1386.989275][ T1982] kernel_init_freeable+0x29d/0x3e0 [ 1386.994995][ T1982] kernel_init+0x22/0x1d0 [ 1386.999852][ T1982] ret_from_fork+0x514/0xb70 [ 1387.004957][ T1982] ret_from_fork_asm+0x1a/0x30 [ 1387.010240][ T1982] [ 1387.010240][ T1982] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1387.017444][ T1982] fs_reclaim_acquire+0x71/0x100 [ 1387.022913][ T1982] __kmalloc_cache_noprof+0x61/0x600 [ 1387.028717][ T1982] __request_module+0x2d0/0x630 [ 1387.034083][ T1982] tcp_set_ulp+0x263/0x5f0 [ 1387.039028][ T1982] do_tcp_setsockopt+0x35c/0x1f80 [ 1387.044592][ T1982] tls_setsockopt+0x258/0x1710 [ 1387.049874][ T1982] do_sock_setsockopt+0x17c/0x1b0 [ 1387.055406][ T1982] __x64_sys_setsockopt+0x13d/0x1b0 [ 1387.061115][ T1982] do_syscall_64+0x166/0x520 [ 1387.066225][ T1982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.072631][ T1982] [ 1387.072631][ T1982] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1387.080700][ T1982] lock_sock_nested+0x41/0x100 [ 1387.085980][ T1982] inet_shutdown+0x6a/0x390 [ 1387.090995][ T1982] nbd_mark_nsock_dead+0x2cb/0x550 [ 1387.096620][ T1982] recv_work+0x1cee/0x1e10 [ 1387.101554][ T1982] process_scheduled_works+0xc3d/0x1630 [ 1387.107621][ T1982] worker_thread+0xa47/0xfb0 [ 1387.112721][ T1982] kthread+0x38b/0x480 [ 1387.117301][ T1982] ret_from_fork+0x514/0xb70 [ 1387.122401][ T1982] ret_from_fork_asm+0x1a/0x30 [ 1387.127681][ T1982] [ 1387.127681][ T1982] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1387.135313][ T1982] __lock_acquire+0x15ff/0x2e50 [ 1387.140676][ T1982] lock_acquire+0x115/0x350 [ 1387.145695][ T1982] __mutex_lock+0x19d/0x1550 [ 1387.150805][ T1982] nbd_queue_rq+0x373/0xff0 [ 1387.155824][ T1982] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1387.161895][ T1982] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1387.168731][ T1982] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1387.175218][ T1982] blk_mq_run_work_fn+0x16c/0x300 [ 1387.180754][ T1982] process_scheduled_works+0xc3d/0x1630 [ 1387.186818][ T1982] worker_thread+0xa47/0xfb0 [ 1387.191936][ T1982] kthread+0x38b/0x480 [ 1387.196510][ T1982] ret_from_fork+0x514/0xb70 [ 1387.201638][ T1982] ret_from_fork_asm+0x1a/0x30 [ 1387.206923][ T1982] [ 1387.206923][ T1982] other info that might help us debug this: [ 1387.206923][ T1982] [ 1387.217152][ T1982] Chain exists of: [ 1387.217152][ T1982] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1387.217152][ T1982] [ 1387.229226][ T1982] Possible unsafe locking scenario: [ 1387.229226][ T1982] [ 1387.236661][ T1982] CPU0 CPU1 [ 1387.242012][ T1982] ---- ---- [ 1387.247364][ T1982] lock(&cmd->lock); [ 1387.251336][ T1982] lock(set->srcu); [ 1387.257737][ T1982] lock(&cmd->lock); [ 1387.264226][ T1982] lock(&nsock->tx_lock); [ 1387.268630][ T1982] [ 1387.268630][ T1982] *** DEADLOCK *** [ 1387.268630][ T1982] [ 1387.276758][ T1982] locks held by kworker/1:1H/1982: 4, last CPU#1: [ 1387.283158][ T1982] #0: ffff888020af6540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1387.294205][ T1982] #1: ffffc9000678fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1387.307065][ T1982] #2: ffff8880550d5918 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1387.316464][ T1982] #3: ffff888061297178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1387.325350][ T1982] [ 1387.325350][ T1982] stack backtrace: [ 1387.331227][ T1982] CPU: 1 UID: 0 PID: 1982 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 1387.340670][ T1982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1387.350718][ T1982] Workqueue: kblockd blk_mq_run_work_fn [ 1387.356271][ T1982] Call Trace: [ 1387.359538][ T1982] [ 1387.362458][ T1982] dump_stack_lvl+0xe8/0x150 [ 1387.367050][ T1982] print_circular_bug+0x2e2/0x300 [ 1387.372081][ T1982] check_noncircular+0x12f/0x150 [ 1387.377017][ T1982] __lock_acquire+0x15ff/0x2e50 [ 1387.381869][ T1982] lock_acquire+0x115/0x350 [ 1387.386364][ T1982] ? nbd_queue_rq+0x373/0xff0 [ 1387.391043][ T1982] __mutex_lock+0x19d/0x1550 [ 1387.395629][ T1982] ? nbd_queue_rq+0x373/0xff0 [ 1387.400310][ T1982] ? nbd_queue_rq+0x373/0xff0 [ 1387.404982][ T1982] ? __pfx___mutex_lock+0x10/0x10 [ 1387.410008][ T1982] ? rcu_is_watching+0x16/0xb0 [ 1387.414763][ T1982] ? trace_sched_exit_tp+0x3a/0x130 [ 1387.419958][ T1982] nbd_queue_rq+0x373/0xff0 [ 1387.424462][ T1982] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1387.429482][ T1982] ? irqentry_exit+0x218/0x910 [ 1387.434239][ T1982] ? __pfx___schedule+0x10/0x10 [ 1387.439083][ T1982] ? irqentry_exit+0x218/0x910 [ 1387.443843][ T1982] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1387.449393][ T1982] ? sbitmap_get+0x229/0x390 [ 1387.453987][ T1982] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1387.459967][ T1982] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1387.465777][ T1982] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1387.472108][ T1982] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1387.478872][ T1982] ? lock_acquire+0x115/0x350 [ 1387.483544][ T1982] ? process_scheduled_works+0x97a/0x1630 [ 1387.489258][ T1982] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1387.495230][ T1982] ? blk_mq_run_work_fn+0x144/0x300 [ 1387.500422][ T1982] blk_mq_run_work_fn+0x16c/0x300 [ 1387.505441][ T1982] ? process_scheduled_works+0x97a/0x1630 [ 1387.511155][ T1982] process_scheduled_works+0xc3d/0x1630 [ 1387.516705][ T1982] ? __pfx_process_scheduled_works+0x10/0x10 [ 1387.522683][ T1982] ? assign_work+0x3cf/0x5d0 [ 1387.527289][ T1982] worker_thread+0xa47/0xfb0 [ 1387.531883][ T1982] ? __kthread_parkme+0x71/0x1f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1387.536819][ T1982] kthread+0x38b/0x480 [ 1387.540895][ T1982] ? __pfx_worker_thread+0x10/0x10 [ 1387.545997][ T1982] ? __pfx_kthread+0x10/0x10 [ 1387.551014][ T1982] ret_from_fork+0x514/0xb70 [ 1387.555618][ T1982] ? __pfx_ret_from_fork+0x10/0x10 [ 1387.560732][ T1982] ? __switch_to+0xc89/0x1420 [ 1387.565429][ T1982] ? __pfx_kthread+0x10/0x10 [ 1387.570012][ T1982] ret_from_fork_asm+0x1a/0x30 [ 1387.574774][ T1982] [ 1387.603678][ T1982] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1387.603749][ T1982] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1387.706150][ T2009] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1387.706189][ T2009] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1387.706225][ T2009] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1387.706236][ T2009] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1387.715864][ T52] Bluetooth: hci4: command tx timeout [ 1387.717169][ T8279] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1387.717215][ T8279] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1387.717230][ T8279] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1387.717242][ T8279] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1387.717255][ T8279] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1387.717377][ T8279] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1387.717398][ T8279] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1387.717411][ T8279] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1387.717506][ T8279] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1387.717608][ T8279] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1387.717737][ T8279] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1387.717855][ T8279] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1387.717955][ T8279] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1387.718015][ T7865] ldm_validate_partition_table(): Disk read failed. [ 1387.718772][ T8279] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1387.719091][ T7865] Dev nbd3: unable to read RDB block 0 [ 1387.719529][ T7865] nbd3: unable to read partition table [ 1387.723800][ T7865] ldm_validate_partition_table(): Disk read failed. [ 1387.724150][ T7865] Dev nbd3: unable to read RDB block 0 [ 1387.724592][ T7865] nbd3: unable to read partition table [ 1388.360252][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.473076][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.543265][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.665948][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.741162][ T13] vlan0: left allmulticast mode [ 1388.741202][ T13] veth0_vlan: left allmulticast mode [ 1388.741285][ T13] vlan0: left promiscuous mode [ 1388.741561][ T13] bridge0: port 3(vlan0) entered disabled state [ 1388.747415][ T13] bridge_slave_1: left allmulticast mode [ 1388.747439][ T13] bridge_slave_1: left promiscuous mode [ 1388.747584][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.777729][ T13] bridge_slave_0: left allmulticast mode [ 1388.777751][ T13] bridge_slave_0: left promiscuous mode [ 1388.777899][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.871342][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.881549][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.891399][ T13] bond0 (unregistering): Released all slaves [ 1389.207229][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1389.268177][ T13] hsr_slave_0: left promiscuous mode [ 1389.274222][ T13] hsr_slave_1: left promiscuous mode [ 1389.303581][ T13] veth1_macvtap: left promiscuous mode [ 1389.303630][ T13] veth0_macvtap: left promiscuous mode [ 1389.303684][ T13] veth1_vlan: left promiscuous mode [ 1389.303724][ T13] veth0_vlan: left promiscuous mode [ 1389.473119][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1389.488815][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1389.592009][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1389.890699][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1389.890750][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.958513][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1389.960559][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.971541][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1390.009758][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1390.013196][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.056056][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1390.066471][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.140907][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.198994][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.247380][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.274272][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1390.300563][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.383987][ T13] bridge_slave_1: left allmulticast mode [ 1390.384022][ T13] bridge_slave_1: left promiscuous mode [ 1390.384164][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.406912][ T13] bridge_slave_0: left allmulticast mode [ 1390.406951][ T13] bridge_slave_0: left promiscuous mode [ 1390.407087][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.432604][ T13] bridge_slave_1: left allmulticast mode [ 1390.432630][ T13] bridge_slave_1: left promiscuous mode [ 1390.432783][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.451502][ T13] bridge_slave_0: left allmulticast mode [ 1390.451528][ T13] bridge_slave_0: left promiscuous mode [ 1390.459768][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.475045][ T13] bridge_slave_1: left allmulticast mode [ 1390.480760][ T13] bridge_slave_1: left promiscuous mode [ 1390.480911][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.496411][ T13] bridge_slave_0: left allmulticast mode [ 1390.502923][ T13] bridge_slave_0: left promiscuous mode [ 1390.508707][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.646968][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 1390.680862][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.695400][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.704911][ T13] bond0 (unregistering): Released all slaves [ 1390.711389][ T13] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1390.711432][ T13] veth0_to_bond: left promiscuous mode [ 1390.711540][ T13] veth0_to_bond: left allmulticast mode [ 1390.721978][ T13] bond1 (unregistering): Released all slaves [ 1390.747334][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.761816][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.771296][ T13] bond0 (unregistering): Released all slaves [ 1390.799701][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.811626][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.821176][ T13] bond0 (unregistering): Released all slaves [ 1390.829369][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1391.136123][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1391.387323][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1391.748282][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1391.976336][ T13] hsr_slave_0: left promiscuous mode [ 1391.982409][ T13] hsr_slave_1: left promiscuous mode [ 1391.988396][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.996779][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.006845][ T13] hsr_slave_0: left promiscuous mode [ 1392.012743][ T13] hsr_slave_1: left promiscuous mode [ 1392.018656][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.026769][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.037696][ T13] hsr_slave_0: left promiscuous mode [ 1392.043740][ T13] hsr_slave_1: left promiscuous mode [ 1392.049715][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.057301][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.066290][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.074604][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.089555][ T13] veth1_macvtap: left promiscuous mode [ 1392.095185][ T13] veth0_macvtap: left promiscuous mode [ 1392.100792][ T13] veth1_vlan: left promiscuous mode [ 1392.106268][ T13] veth0_vlan: left promiscuous mode [ 1392.112703][ T13] veth1_macvtap: left promiscuous mode [ 1392.118264][ T13] veth0_macvtap: left promiscuous mode [ 1392.124488][ T13] veth1_vlan: left promiscuous mode [ 1392.129794][ T13] veth0_vlan: left promiscuous mode [ 1392.278276][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1392.288660][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1392.373506][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1392.381207][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1392.474731][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1392.489712][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1392.525837][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1392.913902][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1393.125651][ T13] IPVS: stop unused estimator thread 0... [ 1393.280107][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1393.478315][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12