last executing test programs: 7.863454823s ago: executing program 0 (id=1728): syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) write$ppp(r0, &(0x7f00000001c0)="38d5", 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000980)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="3b000000010006", 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0x48810) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x1, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x10b1, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "1d0eb2", 0x107b, 0x11, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts={0x0, 0x200, '\x00', [@generic={0x3, 0x1000, "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"}]}], {0x4e22, 0x4e23, 0x6b, 0x0, @opaque="d9aae94ecb2ba1961ec54f0108e68ecd20a494c5722f8ec349da35cd0f12adc0eb9aee3a4dde351749757716b2f8cf0cc5abe70d909543e1c7485bb1af7ce53e8e864f850b77e376362b6775156e1b2434bb3f3f7d8860c4a73bf1a717a76c15f7aae8"}}}}}}, 0x0) 7.002506659s ago: executing program 3 (id=1737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x800}, 0x810) 6.930135962s ago: executing program 3 (id=1738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffe, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x2a, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xad}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000023c0)={@mcast2, 0x0}, &(0x7f0000002400)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002500)={'syztnl0\x00', &(0x7f0000002440)={'gre0\x00', 0x0, 0x8000, 0x80, 0x2, 0x9, {{0x25, 0x4, 0x3, 0x2, 0x94, 0x65, 0x0, 0x9f, 0x2f, 0x0, @empty, @empty, {[@generic={0x7, 0x11, "6b7994ce1e9e879bb6bcc2e9ec828c"}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x9, [{@multicast1, 0xe4}, {@local, 0x60304834}, {@local, 0x4}, {@rand_addr=0x64010101, 0x7}]}, @end, @ssrr={0x89, 0x2b, 0x3b, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010101, @empty, @local, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x47, 0x0, 0x6, [0x8, 0x2, 0x3, 0x10, 0x80000001]}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000000200)) bind$packet(r15, &(0x7f00000000c0)={0x11, 0x18, r14, 0x1, 0x83, 0x6, @multicast}, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002540)={0x0, @broadcast, @private}, &(0x7f0000002580)=0xc) sendmsg$inet(r0, &(0x7f0000002740)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002340)=[{&(0x7f0000000040)="f0bd00bb7721f3332e751a86579c5a4af43e4c50c758e69a204681c88b4f3308255394412bfa13c668b30dda164b3661cf01a6df86cc369cdd5f36a48721413a7d0ab53d979b608f6d6edc7f147418e3702f3d164540fee976a1f172705843a7e0374bdf887e1c6d1d8eb8ff3f03e7c172d1358ac3ec2915f3ed64515bd84cecf8ecaf0e73c6f448f6e6afbb5482100bdfd9001eec3c4b42e246d493c6acca16faa1c3af6df0f24f3f54867ae55c454a7ff79591f5d47d5c84", 0xb9}, {&(0x7f0000000180)="80eaac921ff7c828518795d107468b2c61cc424a307167b9aa1f9949e3a41117c386bd64a8df143d96c1d1bde9e4aff50308c905b7080e871cf9a7284572142cb38c4bbb32274f11f7544e2deaf3aa980ef18d93eee34d0cb64a5444c1650024557fbe294a0c6d2def1e5f00492a409e", 0x70}, {&(0x7f0000001180)="db5a6e94bf76200cc84a2095184d3ffa6c7aa901711ff53032cf32817d532957b556827621696cab094c4c9245e8ed064e5235c57dc66ac579d3c0a2539ae39088002182835bd742c3d960e5b2a59b3d2e6c958ccd070d3d71bc941eabcba51bb2138da8e6aa7003141b6419acf28c9375cdc54e4a5befc4f44b5af2022b5d5baf9cdcedf5a84ad8b7c07239699d59841aa00411e32556e236106f6acaff7e3b42267415eb16a6a18e51e86863afcac7fdc36cc8e7955a5bd448554bb0b859f5cd10f579392d2105922c9398d0e7fd08098aec669cd96eae831ede7deb1d19fd69068a4735a3c9d909a30fc76bc992c683b2af1813f808effc24049b09fa7da2dafd2f3206ce2265d059ba0c2207d70bddcc6fac65acaece07966073055c95e5156f245376c66fec8b74d5940996dae24872573eee435ca0da7f66d2eae14337fb8c9e858cd6ac04e5bf54882da2ceecb5db9463ad7e6e9daa77e63afcfddcfc0d2f127413993eaa1bd0f238a5cd0ddf99bdc8cb3f820a007183f8e32d200a7004a40bdc938a5ad93b963ccc625a6e053be7e7bb7674c5b7f5467971796d841af6ebd68fd4cf4e6bd52474c0c6a24c6b332fd68389b10aee987501a3bde6c0d5a6d6c48ab424e09c3e1a1de9125d836ff06fd4a5e7291f7044e6b30d7d2d2d488801207d5c7057ca3325784efed5caac1d61cfb298bc399ae04f2e3b29380cddf6f41969c2329152d3a0351b5f90b8e14bba126cc9c7a0e04fb408b0102bd1ddc3e5daf7c85f53d7137aab8c2692a750183cbf364bcb159dd77f1e6da2fb246dd12cc063f43998a1623f808a28699f6d8108facb75aa36ad4e1000f22cdce6a946247054dace8b37e8cb0dfe873bf84977b731849409ca70794d52708cce25c2361b34ea34ac2d144cbd163dcc1b2659c2396989a2fe4fd3acfb38906746eaf7055d6a6b174db68991562b2c1714abb3878c78a397e10dbf276942208c6bbeff7ec1d7bd2dfab51f0afc8fad96497a35a36c240ee6a4e8d4e8990c1f156fb9330bcc5dc94d3102d630b71f1daad7b147e98c1203a3b2538edba28f424e7d110cd29176bac83f5ec8ecc9b892ebf3ff09a062bc01fe1c8e659a28ece5d4b98586f240334b99eacd330ce24cd9970e33db68af4c77d1370dd7f5f1f896aa408f1157a283f4d914a51e41e6468a3734c1a7208144d45bfd2994c567db8985a50c7a6bb13b019a97100606081d23fa04e8c376b6d0d600889c93cd483f125b1d210db89b0ba84b03f555e44ee15b0666b16d358d5a222e904d0893b390001e0f5222e661bff65f4f033593018465333532a0d29ac017e985eb610178912729f310b8e299008b3dd58b288f1aa2e7ed994b58bc478c173f38fa26a202dfbccda1b97edaaf48b898407d236b25666f7a8474f51bf388d33d13e9f81caa29998a2ff2a833bf1be7d3f11e28b2506356e59ae8453ca915006cd32df63ded6d7579abc9a5e065ed7125dfb9cd7fb812fe43582876f6c6e51b75b95b1219bff0ca06c556bcdc882da8e8290141fc6d40f66b74ecad7226541cb013af866e70226fc24411b89b3aea0606ed4ffc35fa833b193e8757347d1e04c93b775fba0eb92d4ecce1aba850ae9935545faf0d78d465a4026e394a77d2567360a1ccd403bc83562ad3839af6f14e5bc632b048133eb869be7cd42ae02c35a095fc514593f3b14219df79c542ef9ae574bcd32d0e771863223c8870141e959407450575e28a2eb6125c8174f032c0c46c4c47e4b83fabd7f4fa7cb84438ebb6e814291fa3b5ceb5657b7a52855e9f21f49c7b4e48d640ad35e27934ab63b2c8e1b14692f470efc1a4996606146642fa22f237f2cc9b03bff3e16c110573d3150db4a1668cd7276efc8b34425390334d77908cc939dc9ba2b70d3f48ef8cd05b3bb7dde38cb08f737c81bf3ee9e11d5b0fdb9c4f27030e62c14db21b583be8239553ea2521e058f49fc4799867c8b8ef966e844207e8513b82a84a5bf5c87fd0432b55a1050e7ea63414c5dbcd6bac6b187fe3b31b8df4b817d1f404dfca4d4b855bf717249dc45e7638e78565e2c7cdb09b035a62b6eeb52bdc552f9519ef2381078a1c6c20d2368430f4247bbc6999895d2a54573d90956880910fce1360511275e0fa74b85ebb2a17e0dd783a983bba1da72aa409e804e8064d15139c48250c569df3df6fff33beeec5133536a0885409416034dc5d890dfc56ae922ca67bf4499439d18969a47872bc1c5abe0c1492311fc7cdfb52abe3f1a627cb27cd46366fac36f3d267cb956040fe64d660c17964692d47e295295cc2bd6954e94ef08905198abc9c7cba2b662e1708ca61c7dc62d3a2372023b01d15ba407e833e714aa9874333d1ee16913e85d2889db0a8d18528c2e2fc7af293e186ec30e91cbf1a9fee53d68a4f38c9d06d2eeee5d13a9b8190f19a60b602e5ce6c65a36aab0244105512139005bb97d785a6dd2e4f4383311502f0d2c5d5a4be7a6cf6d130ca3a56322d11db93bb69ec1a88011d6f2783c2bdf3392d221c38ff41c10aaddb2d370b633b1e554b01e362cb9004ae81bce1e083ac6af8d32270465fda32cacba8cd597f23eb639370e58f7047e153f012c73b2d4c797d615d9ef42b00554574f428bc51c27c9bb1b7275e442b856b48c2e3b1bdf50c33809dad0f94ec61179e4173c0f65e9e37a439c3c3c8d1cf96e370e3c0f7e525bf5b709b9878338bdbe06e7c7ec95f7a5f8e1f3b51580ed0b1d0b501d673c120ce74a623d187745f59f8eb60af69b5727170f77352206fcd4e452b9ab7ee1556e4ed11857cebc669d709668e85a6b2d1f35555c65f66d42e5b5a4270c8535dfa64cb8764e1327a6e5dff936fd8d31a116f78fae96a9947d8a23c494a1d0a4dba0593ab8d5df0f9524e69f4827bd9e290fe8b99552085a7a3d17a8cc93a65c6f20d0b76de399161aaf4d103c46cfcf0cd3c2e5852646bda969b635506f7aed6607cf8fbf0779e3e5a42a50288a736a205d7388c747fd2a33bed802e12d0e7f5cb659f9abe747357c8cd90551880a59d650c673e8c7322c923029ff34bb4212b3afbc0b2361a715bfd7512d7ba77fac96e8e64d4e257b5d2f197f073a09b45975bcc0b7111e27823359df80624ae0d6694879a090764d0eb4ac01b724fc9dcb098089bccb931bb74581c3fce31b341abb2d29e1978b494f390ca9fe5c96128ded2f4a3726b819fe4576ccda5ecf80c862fe97b5dc6e9b4bb181e06d018989bb5178b620cdc7056ca31f46157e83870e1d80a3d5d7bfa8bdfdf24890475136c744247007167c28529124fd3bf9c1f4d7856f8c9a34e63e06f90f9385534da6eedc29212d316ccd161acc7669eab3825bfb1f43761e70aff9f5bca6929c5469b6fcf28f4718bb640dc50161bb83a750c064b176783fc890578064a8a72359c2d0f95382ed785eb4e5594eeab6d4dcad80c8ecd6ca641a66152aeee88d912e7c47447d0ec02c90e580a17668b1830f25dc2320d8432d0550efd8e7d60dbb8e2a31999142447189b503103e9018e3346277ae73c425e8f82028b0b3c8d228f2999676b0d423ab2f0e71fcf71391b6493c1a23d6114dfc3c38f6f952821ce7c5fb92c55a3909e2e4d5d1415100a6680814d0e278783d55efce024187720fc0fd64ec7c6c61bc3d966c1f5b6e88b17891cc53e67979dc7d0cd97b3856c924488ef7c47dd217f2d8480de4ecd8f8ca82d08f47f5c3b8dfb3daf14a904e910b0bcb686e0c4449fc4bed80452eec4beeca49f282c6d5bc14991115ee4aecba3e4f39f3bfe13568e46bd8eeab06cd74d4fde328cfa4cc390813cf0c5e4f1f743b165fba1388887c95c1de0e5bc9554f111814889ca4b805c61829bb193f798959ee917e72928d2a842a743add6cb1ed2795c5e7f08260052b0bb3b657334a2dc4c4354726276a7ee787901ddff011d13479a8af208f5cfe2259267c2d8b6bfe4dab6a92a1d6f48d326c13be7c40d8d2e467d89c54eb4efad9702fe38a8d430835a305c31e516c2533d071a713941574551b05082009964df93776d5a51bf55ce5479b1fa98330b09084970b1ef2052117e3c9476ab31587f4516393cf66dd360a440c8bd0b0bbe47696c9479469e6641f8e82d975fea02a11abf4ab7e47677c934ff11146b736ecd280b163a7134828a4004401892f7ddfadcaa9efe7ba9a42d82294c1f4f8c5f97a64d0d5172ac5796efea8abb522cc0e8b1671d804186fe7eb6571cb859f23ff1e818c27802a91250cf14f51d33418f56a5ccadbcb32055910815896d144154d7d89b0991f961df102a171b61002fe24e301fda548cee8af7252e5ffe3ad8e2d2ab33ea71da3f42d814cc146b5d2af37ba37bcf3976426d69e72820a35f62d837c63252303b91d5bfb7a158d718225921e2bf09a57d75ce79d57a4ab7ed0edc9f91845e8c29c3f97132e83a5437f947eacdccd8df471742218eddf6c1cb4fc1f6ad93744d5107783ae0258ed7e4938f94a6664cb992bdbf6350cf36f45d2506c57b81803f6dcd018f5350c54f7b0210369df5a2cac0dec6c612308188f5b3770a7e5d88eccb0a354c5a8a1ecc7c8b1a5bd55662b6565bbc0752a5716a8097cc85a7896c6f6e0545eb2255804826b5b38982f977a726cd4df7446f4ff4318acfd61434b75d288b6ea46f3aa283bad8d1d514c861ee82f1a4907525b854ea88f93f6b100496e9e0df9b786eb8294aba34435447e57d6973d4e0c12cb43e942fd33622e729a6049414e6c545a829c960b589f20298c664de6e22020b13ba4dc011d29ae49c09a79b8815145f6d52adbdf00231f9473743e9a7d427dc1257c380cc6dac09b39decd546889e17a34475bafc58f9accb1c21828bd36a3c5774eea7e6cc9bc0d886fae9031113a152378ec2049a3de9dbd2ffc39c5608044a5d82870c197f0da791ea12ef4403a6a62cb94d33bc21b8997e5a9f6ada8d234829d83bd283c769d0a855bc9cb5f07f3cd0558239e645f14050e6e6cf79ea3469ebbb9482dc949934e8dba8578dfc8487e2eb0e84ac80b2323206cdb8f0cebc5af110196f7823211ad39ad987937bffe10b80ab71aaa68890451de75f95f39427121c89ac1c5c17bfe7277cc4a4f5b749e77f24867802cfa3dcc75a261dfc4eb3bc6a1d388d25fc93912744ee983a1d6d14ea300e41f1743828f73192ae44735da82a908f9c351c6a227786c1bca03c486f82b6fc6fe97b4329df5a3e2db1bfba02a74ef1c28b4cdd07aef7414274c213709647c8c98ba56655fbc863d88c5d593f456a61961e9c750495f834cf3f43598256ca71dae658edefa92c347d22f968717c7b44e0509505eb86d3d94aff1bfb2cbd68d078ea14236266141fec8527739af55b48b567c531ae1de87522cab083e5eecccb1fd13763f4c6a26e69bd7d0d7c9562190209089ffe3c3c1a137bec89d77c2a7445ce85d8702e57e1da39ec6a61a34c30193312f8fe4b62d281eb73dd4dc7d0122f16d3bfe6b47474081345ac7b714ffa9aacba2dcb6835ff95589ed26e953cf34c5687eb1583ccd563bef271579ce36f7a52f50b2109d7cc0a1dfc9da7625fd4e4e31a99d4954b6783e8557adc9f55ed1e56122248bef440047359e983625dd7e4c5241242e51d1a434e877c6131a81962ad28af0df084de7738f9b007fc366d938f65d3b9ed3dcd5cab519a1c0323381de39af6d9c5efb5d395c53edd2c78d43d8d1bb2276d11a643875790e9d3a3346c39c29a1e4b6925338ed75e015cfaf5859e429830", 0x1000}, {&(0x7f0000002180)="7e27150d066dfae64b2d79c94e07b6e6711063aac6cac81f3bbba387f99da716a737c31661134fae3caf9e2e2d2dcb0dd25976bcbfe3dd33760b7463dee51a", 0x3f}, {&(0x7f00000021c0)="555f98e249aca7c84abb9b8e0b02708d9b27988af5fb7a4cdfec33992126cd51b290e28805b4176d705a86ef0b6050639ffef2030d8e1503e23a2809686cc09f440fb9310f7c30fca302c15059f05c3b313cfa0025cef0eef9efe9a2e5113d52271653a19aebfde158b63986d4b65461bb9b679140ea0ad7e550a73e833222eb95a2da978cd2a2affa874b3faff96d99f4c11dd3ff93229927c4d533031d66924fc7e62b1e3b5f8a6a23601eae541b069bc727319c6d", 0xb6}, {&(0x7f0000002280)="1795e7af42b191e717a46cbe91142114472d29a7887ec1809764d0ded5cca31a68727b3b34086b79d526410fa96fd0c08f0ecd77f116c332f0d3cae3c89850d20094424cb892f9cd10b21b2b929b3b3c2380c65a3ca66e393b4d65ad697ede2c3f823dfd75bfee9a17bcfba4f80583ebdd2970b335a1b9db8a0c0dfd4a839d46e089ddd0e5993cce01a23f3326c128fbe1868bdcea58337c92d68a443e9203", 0x9f}], 0x6, &(0x7f00000025c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010100, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast2, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xa, 0x1, 0x5, [{@loopback, 0x2}, {@loopback, 0x8001}, {@multicast2, 0x8001}, {@private=0xa010101, 0x923}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xee}}], 0x148}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x3c}}, 0x0) 5.723760863s ago: executing program 3 (id=1741): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) read$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x24000840) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003c00198008000100400200000800020081040000080002000401000008000100080000000800010040010000080001000000000008000200200f0000080003"], 0x7c}}, 0x0) 5.675490406s ago: executing program 0 (id=1742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x38, 0x80000, 0xb, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a310000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 5.523853824s ago: executing program 0 (id=1745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf2518000000100030800c000180080001000100000008000300", @ANYRES32=r3, @ANYBLOB="36afdb93d45fb3b6f200a065612a43e4a46190ac5c39b9582aa6e87901d12d6a1231f4e93ff80e2ae43428a8e0c9b993529f5907ffb5b3cbcc02a00a5a2eceaeab5c54f69ab29abb1d0c6f1f86e0160deadf95b34bbacfd2ab4d31b1d20ee8555e4a641f5003a1"], 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001380)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000012c0)=""/130, 0x82}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f00000004c0)=""/189, 0xbd}], 0x8}}], 0x1, 0x40, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) close(r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000fea8, 0xc) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x2d, &(0x7f0000000d00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3c5}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x26a}}, @exit, @ldst={0x2, 0x1, 0x0, 0x1, 0x0, 0x10, 0x8}, @call={0x85, 0x0, 0x0, 0x68}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0xa, 0x3, 0x4, 0x30, 0x298c68df0a89870d}], &(0x7f0000000e80)='GPL\x00', 0x1, 0xc5, &(0x7f0000000ec0)=""/197, 0x41100, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000fc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001000)={0x1, 0xa, 0x2, 0x80000000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001040)=[r4, r4, r4, r4, r4, r4, r4, r4, r4, r4], &(0x7f0000001080)=[{0x5, 0x3, 0xa, 0x5}, {0x0, 0x3, 0x8, 0x9}, {0x1, 0x5, 0x6}, {0x4, 0x3, 0x3}, {0x3, 0x4, 0x6}, {0x3, 0x2, 0x2, 0x5}], 0x10, 0xb15}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0x12, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffc1a5, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x8, 0x1, 0x0, r4}, @jmp={0x5, 0x1, 0xb, 0xa, 0x5, 0xfffffffffffffff4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x95}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000900)='syzkaller\x00', 0xb9b, 0xb0, &(0x7f0000000ac0)=""/176, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x1, 0x6, 0x56fa, 0x30}, 0x10, 0xffffffffffffffff, r10, 0x2, 0x0, &(0x7f00000011c0)=[{0x3, 0x5, 0x0, 0x5}, {0x0, 0x2, 0x1, 0x9}], 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a0101"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 5.523379487s ago: executing program 2 (id=1746): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000180)=0x10) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f00000001c0)='\xb7\x00', 0x30000, &(0x7f0000000200)={@_ha_fsid={[0x54, 0x1c6f]}, {0x0, 0x94, 0xd043, 0x9b42}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1000}, {[0x0, 0x3, 0x200, 0x8c]}, 0x85, 0xc8, &(0x7f00000002c0)=""/200}) r4 = openat$cgroup_ro(r3, &(0x7f0000000440)='memory.numa_stat\x00', 0x0, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e24, 0x2, 0x4e23, 0x4, 0xa, 0xa0, 0x0, 0x2f, 0x0, r5}, {0x8, 0x72c8, 0x8, 0xe, 0x3, 0x4, 0x80000000}, {0x4, 0x2, 0x7, 0x8000000000000000}, 0xa, 0x6e6bb9, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in=@private=0xa010101, 0x34ff, 0x3, 0x3, 0x0, 0x6, 0x82, 0x7fffffff}}, 0xe8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000006c0)={0x1, 0x0, 0x3, 0x7ff, r2}, 0x10) (async) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000700)={@local, 0x0}, &(0x7f0000000740)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@local, @in=@broadcast, 0x4e20, 0x2, 0x4e20, 0x6, 0xa, 0x40, 0x80, 0x32, r6, r5}, {0xf0b, 0x0, 0xffffffff80000001, 0xffff, 0xa, 0x8, 0x7, 0x8}, {0xe, 0xa8b, 0xfffffffffffffffd, 0x6}, 0x2, 0x6e6bc0, 0x2, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x4d2, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x3, 0x10, 0x4, 0x1ff, 0x1}}, 0xe8) (async) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@mcast2, @in6=@private2, 0x4e20, 0x1, 0x4e24, 0x0, 0x8, 0x80, 0x180, 0x2, 0x0, r5}, {0x6, 0x3, 0x2, 0x2, 0x6, 0x3, 0x0, 0x800}, {0x6, 0x3ff, 0xb325, 0x6}, 0x740, 0x6e6bb8, 0x1, 0x1, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x3c}, 0xa, @in=@multicast1, 0x0, 0x0, 0x0, 0x40, 0x7, 0x0, 0xfffff9cb}}, 0xe8) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000980)=0x1, &(0x7f00000009c0)=0x2) (async) sendmmsg$sock(r0, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a00)="0db6d377dee330dbd48e0501ee21b876a1341993648b785d9fd5176690bbb8dac99f1e91067509c29956a379401fca1ac6", 0x31}, {&(0x7f0000000a40)="0624", 0x2}, {&(0x7f0000000a80)="0aaddcfdf4a4e65c8a5976ee83de5bb499aa217ff1a840ad2dae2f49129ddbef966cc8a274a2511b78f2c2c5d30186fbf2af584415df2cc8a8a4a548a5b6fdcfd63909e0aaa283cd1c39e8366f526d9fcbcd2af46d76db37e7161bb07ea6674e8b56313c522e2924a9338bc609af4c03d36ec7d3cc1e1136fcee448541fe8fe3beee444e3e9d695fb51904af6cdf9151f8", 0x91}, {&(0x7f0000000b40)="e0d088ebf9763e67701aae3bc04ff4e6ecc48d638623e2c1a6ccb09b3a9a249ba3826c927b100ca678c73ac2d2d91269baf23d2984e9b857b070640b75bbdfd3653cbaea75a1fbf2261f2aba736c2af0a4520a046802205dd793085838b27e826a122dd6d30f497497fc584ecc72cab21f8b563bce81a8fcbf5e1364514719fa7b529b983c3318bb96c717677d9a1795a0c073fa80b80dc64a752ab6deddadef497485657a7089b9c103403e8b0d1b09f9e9fcc7dad7", 0xb6}, {&(0x7f0000000c00)="2148c6671919d3dc1b5b7a572fcdc1c4969f7a807162e53cc58ff619ba3cc8fdcadd9a42048931333e379b95539a07c119621e04a20fad4dd1a0a94f07bd8111d0863f4328fa593ef7083ce8fc10a31f7d0f2cb45692", 0x56}, {&(0x7f0000000c80)="f5fee49c47eb9d4d520a428d6d177cc521d1a8824fc0ba2bea9916606a8275eba69222de861d047290fb9058fce01a40a0fa8b91ab18f2b1985656ed07d33396f06882a54040dc26b8aff160f9af0a1e09ca79412a49001bc8c9a1ae8c56f2ceec2d8bcce0db28b7b7b87e859ee77626f227e22aa98297cedd42f678bb5c5cac5f516bb411fceb719ca66c7e88394d1662a71314", 0x94}, {&(0x7f0000000d40)="a814ffce456e69a7243e24840b76fec2839c97e2054d3ad313af623addde503c25b2527343170e78c278e5d3ce1d50a01f4a3824a2f0538d7c72bca54804", 0x3e}, {&(0x7f0000000d80)="b974060aa7fdd38559af8e57186d09471555ce5de7248d7a99484df54f62380ea05d784c08a5fbc1c52576d1327ff68c1ddbfade4b00f91dccdd14ff4dc591049cdd6173cac045a6eacb0433485970062fbe07dd3336a08622a2816763c81b93564eead4a73b7e849f5513904018f7840290344ea3e8a4bb82eadec10cb05a8b6279ffe647e57397818fed5c03d115b1b70364c54930d85f61683d977259a363798a9191ef59dab45077119b8259f2fbd953fdd64b21981697d4f367a6371b152c0f12976f2d8b581acaa93471f42c47004db14cc7d97bd5", 0xd8}], 0x8}}, {{&(0x7f0000000f00)=@caif=@util={0x25, "d26909acb76dc62a4f7de3e3d99eaf4f"}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000f80)="9260135bb419ec89b318b887c8d33c3791130177f375b30e4ec4908f9751b3faf07259ead4201811da704986a062e966e00d894174207ae8a68380d40777", 0x3e}, {&(0x7f0000000fc0)="c0573c1d544393f71695079d4d5cc387c68814e69750c84a8f6f9edee2eba5fefe7d427f1e9f3b0a73d2253361168b8108412f71a93ee87598a2d29977e52ee53386c1885223345f9507b0b6e7c7d1e57d99ba668626aca9fead95a4066dfdc4ab956829113d1cbdfd004acd63ce48bf1c7ff28347c4b476cc345e09e28d720a997aaedc08bcb3750a8b51304004a97fb7897e1a7933a8835ed4c51e700c46794b9522940cd47e720ff510a1fb3ea2baa7680285de14a9a9c5b2d350eea8942e94b95131a88c66706c8c91807d55e99a3fc065c7682ae87425b45ef4475b7585a776a88a08", 0xe5}, {&(0x7f00000010c0)="f6d88f5eddc01ca115b17d6fe09716d35e0de168a6b0243af4bdec7c51ffca24cb36d3484b8ea199a8383d10eb7293331760cd2b3f3daf51043845b92e9c9f2e2349e3a5e989e87884582cd0d7", 0x4d}, {&(0x7f0000001140)="518828f391493b18fba28a7d66f9a0218339ff4be6808a29a7f8ac375985a32aecb3e2ab9432c7ca024976ce66d3ec3eae9a8bf718d12d436a95606d5d5a978cc42cbf52ab", 0x45}, {&(0x7f00000011c0)="453e2273eaaa8cd00a228248de89c9f08f39d0c26d49d4aaf90c1b867ee3ec4d3b39735ddc85e4030fc04dc404b8f2ba11cc2410f00fa69423c6f87467456f7b1a08d0401d506e4d0c3e3c64e2de016ee2e53062cd2be5596c46df8e56c97782b0d795582f0f62048a51c3718bb78900dec24052bf79867895f72541aaa49a98770fc3b13c60a511ee3076ea155e1deb64443bcf602a9d7974553a6dd58a2002ad03ed56fc7426abec9e29a06877cec3527b2cba6c3dea63beb3e13558e37a5bd16f2c4de8e8117d8ed8298addf72948a23d16aaf74f9f23a1584076de06654b80e316017aed7cb9", 0xe8}, {&(0x7f00000012c0)="2f0758ba8d5316300e1f2f1e7bae4d786de2bdcf2cc0ac157e0d99640a5fe95f216836180d2a75b0ccb1d31f2572dcbcfa2d0c6efc7750c123e6a1a86ab1aac3024d50c869e7f5a0f984882fe2b1a46554", 0x51}, {&(0x7f0000001340)="9d4f7af6364e0ccda3956e945c43af048bfb0d8c1704d2c73a816a481ff254e89be991c2381f80a0f0e4be762093ff492f0c2ff10f8cd793c0d95070347dd130d49601564d273dec966da599217f4d5f41007a94a1c6e6096ac3c2816593aa8cb1a4b575e35cc69b090605d6b8c3bf2460c312cb5680e5e94b604b92", 0x7c}, {&(0x7f00000013c0)="fc7639fa06344db88be13c4d11bef675858f0c4fde0ce4ffbc708a7040cf3a02311e068eb967aac2746b5a74a18c0480a00e84bdf301730d21941a8d1f906db6a9bec698d05eaabf5d41c591f262f7cb365384ed7decb619deb59287ddf06aa44f14afb4f217c552f4a35e7228a27ab83616f523871ba88acc951e94555835151acbb35ec407cd70c7de7d3c9c7e255f45e633afe85490e59991cf54c03ff348984aca1d8076c291a2d15c03b326a8bb4477d4ba542f81f32b9afd0044f503804d8468808dcd9571dba281261574ec708c42a0ba12465dcdd1105d651a", 0xdd}], 0x8, &(0x7f0000001540)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}, {{&(0x7f0000001580)=@nfc={0x27, 0x0, 0x9, 0x5}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="45171f56f92f5134b826dc82f42753d5469e477857e614874aabdd383e533fd7432c37d1a8135390f628099be3d4a75f3c978f388f8768f07ce540c5677d2b0cac621e754598585261c4dcf79386b0f9fe8734d8730f904f48d056e484516554f9440662283e7f3ff70f56c2174b459aba2dcc567be90b0147c4b4dd6e3928236fb9166dbd4c52daf91152e2a7bb650bafee53df4dc9dd01e416ce42caba76d864354d85bb3ae2d12e29277f6e02364b874c33cbead677c26b9d3fe3ae7d1b254ac6ec8d335e7e41466b2bed6d1c2108a2b3178816d06d30fe3ff76d780ad5048812ac702427b476576caf67f485aa7931b4b765c570c6396a", 0xf9}, {&(0x7f0000002700)="6e83f7636a03a475bb1a8246e2526563503ac546e94fc776971fac303c6d8a68a7e212430f35107ed4da5bb378b20baf70633af1c84ef3fe5de698bc1582973ea6b19f8061c9d6c9bbcd7e8b7cd6f428b55735a47650ef0d088b", 0x5a}, {&(0x7f0000002780)="d154ecf88a23601cd2532c06c337bc336f01ae7755de65b03b8014a03d058dbf996dd889ce3a56ebcba8a0e7ff37e6599f06e6eca93af89760be1f5d62ea2da83eb818583b4412acc1c0579fd52dccef8303698aa0ebae27d3c4cfced9850bc9e71315ae91f4372c5a0e9f9309ce6e4b1ed8d1d83bc419bbd93294ee5744de02dc2a94d4b91508cc06cd344eeff7aa4994b40bd31b60e5a2bf4b6c2685ebd44ae628d860934838bbe184063a8d8539665c93b5a7fdc98e2865126498896b339001c779a8b7421eb16f1abfd09079087d5288042af6461df6b236be9581f5774318628b9b1bd118a7884c24e961", 0xed}, {&(0x7f0000002880)="4700aa1734f48f1bdc0993978b2403e682635724f4507bbc95a7e83c59c0433ec95448134b606aff634bab121a4b826711a74001b62d2192e80c2927f4cdfcb5c83451ad302d77ed7a03382750efb4cc9a646d6417b6e65bb6d504b8b6b44bf284354c9f08354399e09934672f24759c456787bbf0f5e5f22e35ec0d4e197d1b1fa92a61f42bae65f8b189899e0b163300fc460a005f33d3d147efe040323ef055bed24f3ac4c4f71fe51afe2bf0dbc017d77ec64af4c41aef4406a7085719fe716696da96ded085efad6edcb250f0d6a5404132c222135414f246c317cbb19ebbee3596c9bfe4d1c8f830903ec1774875bf", 0xf2}], 0x5}}, {{&(0x7f0000002a00)=@sco, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002a80)="f74ce3f37f5710459502cd5eee1295b09a69f7cca16f2d0f985f93c051c4ae19d106564ce5b492ea3a39cb830c3e08e88afcb0c932fb2a258f709f0fe21f866ecdc33473c017a43ca7", 0x49}, {&(0x7f0000002b00)="e76a10c0b0e37f4d06db024cb08e40c344be05a6dc6c8ac0c31ac499bb2c374ac3de9042cea11c46702dd6c3695215ed0d9ff89fec57e49ef3dedd9956a6207342d62a13dbd81689f733f89b4a17790e989889c18564b539e6e9f044f9f79392f1a451ca6eda7ca86d160e944d7086b77785ef2cf8df5fc480611fb2f91b98dfbf13e02d14", 0x85}], 0x2, &(0x7f0000002c00)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}, {{&(0x7f0000002c40)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x3, 0x4, 0x3}}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002cc0)="931c6fe59d8f7a0f49e0d11e41330bcbe0ea587e51e4516529a01aea00c68a81496cf69dc0c4a624ea4e194d61081ec58d6bd408eca9e543ddcf81f1084e39cd5df271438622d6cd77a07be511dc97fe5c3375544e7ebcaad1cb0f27a22a7ff71e10f7dccc6a4957dc4a29a9c2eeee18e80e141578c1df33003750860c6b708f8479372d69b5609920ba432154688cdef5950abbe88f2d9c6acbf80f91a04bdaa464261237927d46c0e9787551ff1aa74a01a62b55ad6996a95a0515615fb1f40d1f43d7e65120ebdfb414a19425c74c3b521597eb49cecbcd61f9aa2f40aa3ce809537d3303db1d19df83c1549c0cf68019dc2aafaf34768821d045e5224c9c9ffeb26fc8abd0bafc711063a921e47b48de1033008dd381b75137ea1cb399a2a577c929034091bf41dbf00ac1a506ccb40c8f0af2d4b7ece70119cbec1df7535b562ab9dab4a116d31b91f93a7d0e3adc5ded4173294531b3c198c8c9055cee0fa1c87821ad6dce3f8265791f6fcbef242da9576f8cbc0e05f51b30000ed3a2abd2494ee0fbce1d3ce9c14d37d59d6cb9aa09a7cd7898801f8f880656c729a482313c002b6e7697ad2b7bdb8edea727ddf115b453fbd63c4b66c5e50012c2356be4bdd2629f714727ec29a732a7d0dfcbd08995edd45ec0e37ea06b863318a529d5a8bbb85f8ca4f6e03dd2c0b837de3584546bf7429c74a6da64e8778e83f5e6c512d3be42a0d9c85390abc28e9063aa344b23f6802355aa286af0c36da2469bfad72cccdf4ce661e46658eb2e3aaeca7445d45397d0d138edfc8c1a701c1e49abe86df8797d988beff6e759b66dba410728b6a479b2e7365b049b0636ffa2564b438ad0ee398e1184dfdafbd4d13cd8671f195c7312966f596c653fa9f0155b1bcb691b15b0a65c1f437c381ed4610d80da36f7c63eacedbddac99c70a3fa5e2bee8fc9a34610209b7499e2edc685d7f8868b7fe8184862bc521e050ed6c637d4cde11f9c52b286751087d3ee2bab4380fa359441d3717f78723512a336545902fef24b4e6d7f7a26a0f4d413110d3a3390914ae5fcf670eef0ce730c93dc425b968bfd74885c5d1f50b6e79235cef68cf0678128d94a34ce69f10a74839d83ee0c3274166b020abecafe158ab9de98b091c3769aab19485a8f9598956a22b81ef279d72fb4eab0bcae512826669d3825d5981c2def06ba5b34dc09a5520db9f477f0617534ae5947bfadbdebb24780677f4418a46ff0e0496efc8d957777b3a191225aee3354725f642e0b4576a421eb26bd3ed30298a776ea309a2f712fb83839b5ea99dd12c87eb71447aaaa7f584b6d61b80ed4f9d1b9633e9f3edbd527a071a838ecb758cac836718dd1fefbf4e02b3c6ddbaa58a8a1a51095a791d67d8dceda30625f0f5a41c5aa0bb00ff0ff62aacc6be3ce8d0e022df6bcfeb7943f7734bcffc17da921ecc97fad1b3370cd5810e987d4b1d4c3220450c8aac7a0b3b35e5307f27000365d759b99db534f6e0c83f906d3d64f81ab2a51312d30e3b3416c4a22023fa1f9852c504ed074a0a60c89e9bb73a35ac415a426dfac1c4c624af994dabd07b7594b06f76b9a08fc4104176d7085cbded7c337821b5f314d4158944b23648ad0d546a15a2ac74341ecf875e4b92bc06b416eeb7f9e2764bf500a581f36bb6b8d879e5d44e608eab236e0eedd2f9d80136dcc1abe4b474d01cb9cd63d4ff29ce67eb0935e13717bb43d46bace1b4b8226b2372e761b7ee65917bf4a47521e810777ec1ede2e6a099f5658c3c5a16f0f4dcd350b611aafab6e1cedf2746fb1f4ef28829b10e383838f8dc503b3a4170ae066740acf8e84e16a449b393086da863849d4aad73ff4550b21ade8f295db63ef78a993883fd02fad526dffcf477452507621a0fe64433b6a1644d2b6301ff9af90e953a05ce1acb6fc3d97865e44d0007a14cb8cb8157a12d953b27bbcb3073b86c23c116bee388ceb4d368b83dc88d59da1c24d0cd53dcafed31b0ae5cf7dd32b64dc3aef95eafb5fde724d136e157127f0c013a605c59ce525a2754c26c126e9bc7b67e93915a3a6add15053634cda5a2c7ad7a9fe8ece684be0eee2bfe27c2fedac20f48ae82e55ce6914bc4e9ff485176539bc912307453d7d881a55b6297d621cb90ea099c1d7900dae5f7e81d7cc854a520cc52e03b9894eaa8244abc5a88bc13b4fbf58ab2ffe6e3c9f5c70d4a89ce698a08c7fd54b70d7a70c31322fd9efe5407fd0cbd398ef881955f5ebbe303e539f384fc12f0ffc396bb316016052a3185dfd1bd87be24b01d278adc81b9b5a6901bb8f527a0f0d271f5a0f1893237e65933680b62dc638a7ba6d2db33e99fb5ed6ecbe3da7996f473d5e592b0981c7f2f47b3cb8f10b6a1d3e0d2471765858b42a0a64359107e9c72dc0b7c9da86cb16a0c0c25227e7dfba7d3353de1b71f0b3e602f23657a8bd1b42d51e42239e92af9637db4bd026fd9604526d90b8c3d147d7e838cbd427cbb323407cbae16370960461205173129d5cb34486e33ec7dba603c1f853d0a2c56e3d4bdf92efa3e644959959c6faa090c79e9d1f2b29763bead4acca7396f1e9cc89872182220cd613021786e6969495b82ac68e38a91cf8ce14aa886f222c5cb529896443b9f33b9f6e4ee3bddd1c0270a91da70529e3eeb3fce080aa6541e5fea5ea828d2e8fa629f7859cfa9715483dadf9e1476267cd56a4878c8bd7daaf2a3d96d11c2ce72c849da61c6c9014983e8fb1b0a9a22b21c65737b7a7cf35de214e5d06d40160abf8110cb71a32cf9f6f257190b743ee5158cfb53ad52b7b9a5a76303a8f64deae011ed53a7e21a4df499e1f5df4dfc560dfbb6b75a54aa342077cd4cf40bb1d9f0b376cd2342bb39918c69156ede1d123843c0926bd3699b413a9da05adccfa42438f3dd79cf97e7415c1a097baed1c1ebeed9328272f45807fa95e809c5a17235cde5e95f8c9645bfe89d8261608397110cf943a8e2bd4111dd3807db7b60b39b2dcb4434947b23a0b14a80b3b0f3e3d8eac347de776666badf3eec86cadb5a42903bb382cda63af219d025a5736cb763fc98304724507edf04ade2b1121514c0dd575525f24c662c98032818f4d6a3bcbbced674b7c8c4e04f2a5b310fc45447ec3730f328a1a36b099fc26226f5ccaadb3a05f322a3ff6bfca358a24dbc153e58e4f6c689b632355c7a4e47928603c84eedd13e11890ec1ca7f74b6775a7b8555bf82366b1b4c18115a145469814d1ca169ba2643c147ac7d87d5b3074ade8c444fe5c4ea516533147fdb8211ebcae294582732e45b799b7ebe0e3bb597fcbb4f5c9dff84e2cdc85d116ee385f2c5efa44162a692094177f3e0592077978cf7571f0e5aea0c931c5625963bb7f92b23d73d50714ec0c207756f43afadff582d32805fb7787072d0a4a1219f2e3e99f78d6cd2ece1dc32f38a9bf847c630cde785650699b06dbc018b6d817d52d1a2061b75de5748c807c8c52e5753a82890aaa1aa0aa45687efcf8219aaaddf3eaf9405e441d75737018dc9a1c8954b21685c132509bf648737da4b8ab7cec8ba818f86d1bda43434b8e60eb98c1116154e4da2b0a49a3f6b0cf7bce58a1ed93966d0f8c12a0f29c90d50fdf1c7547a7440de2d6cdb6d533dc84a03969359e1ec505b77a7fd388c93f70ca62828c1cffcdbeccfe7f0195d3240138d649d4c380ba5f871f6a6e299c90345859a156aa55fe389567174a551cb9acde1095f373d99dfd0c7f98ad1c4755dcdaa068072fb5c2d6427a4b7201936022e218eeaf2717feb47066512d2abd0886d768caaf740906457ed66bc5f73379c1b810cfd68db5d41cad0c90df956f18f99398338fcee167ccfc15fba72c27c68b90345d218579bf18b6de978821abd32bf0e7ea0658929714fcfc9770f7d82291b6dff573c01f28554e4537c2e1fe3663c783e4bd9e3ed8b6ee6dc07bff0aa6140f936d270f7b9c20a0c79356c52f44b4c12082699d33d81531829c442a0cd3416f0b053ee4a371f1c0833600e014299b4ed5c38d106072ab9406e6e86feced95386e47fbb47c3b52acaa11611925bf41a93021b1496a380fba7f43d020de5d1249f99fe8eebe27c94e300a7b876a9781855b6cc56821c162420adce653329b8723d7588926ec63eb1bc4ed79b7b92d170dc2fba908a7e2b2a93946497c57998d58ed57020ea068008a9500d5e68c4bf800bea3d74f05854a8e9df23f805ea0de5becfcef0e6093a440d21c109338483de2856f58017bfb9241bcd90f1028d9dd750200dcea42310feaca2b668ebb085b3a756371d7ccfda1ab9fafd2c9bcbe4e1a9f9bbaebb85e396e4c5235077f863367f508a7aa9886473a4171d9be442c3dd65bcb5f5c882c197475a012b79a25afdb8c9559f0fa283323111f2c485392ce54fa51af19b9786b18afe1292cbb7b4d80d02f585c0960167eb7f3b557caf53b0f01d10f45e0d8479ccd1f366db0b46df1666fe69032cb0aa01ce7dfae63ee37baef910ae42e2779dcc2de64b092a265eaa5647588f3ab30ea9bc6834ddbba65ee5796bf2ac20669d213a870e60d8cf2e7f94401580dd9fd68a1e056f29f39290995b217b1ed0391ca264b0e86d53a7b7ec3f42ba5d136d51e8b441ea3f45b2a56d134966fff2f6cf992ea04cc18afb0463fb275e6f087b0e65690239a077dc16c0a4bf126ace9aaae3c7e4442e2b651e74e2f699b52845b4f69f37e5ccd0b1667c5168e206ab13c25d1ca9385926f1c24c06223f1f49d29150ce698eada2cdb8fd0ff5579185077785ad4002b7eb75a5238b7f0eef27067d8d92ae033d2cf8be0edf83ed4f92a01de120db9e59c7fb75b926a6f421df609ca39114a4240f22479f7a4538a01248c8ed61cc7f4d8fe3d0c7d7ca26a56d9bb7fc2ab4e519d27dad431a119f2c44657dafcfcdfa80c1c63950f08e02962d1c1e916e4c94e441fd6ec86e232bf80d6282e721c67c08920bf85755b1a387250459ca60d9e40215d5e53d74d1a1809bc529a0c05fcd7d10b69ed527a3c3d52b1d8a53fdc665b66a6079e9d42c0164ef11245e62b76afe5ff7e800fe29bf6abf67748a07bfea2e3c1113ee33d3ec92ff6c52e6c7a87b7a50bee9bd71d18091cfcf2f9fee1dabb5e70e51f259d4c66230488f340727453f3356651f242d72277bafc16282d9dbde9cdd1faedf2a3a84c2bdeb32b0e3160ba053780e995a3d75a40644350ebccfe11d9551326f1c7f86f366a7f6a4bc9e467f0cdb00e51944eb335479ead02641a87a752375e2d965ce3c1f26a61ecd709cceba8ab048afd2253dbc40eceb154a99e472c65671f4dc002aa6e8f094c527a03b1113c5b6d72658b8a76441551cacaafc0dbae167f3f485feb2c087a0bbe31e3874704b84cd50ec339a7ee608f52d79137f9c08311a4ff44bc84ec4eb0c273e8588d01e29e9bceef4c59b3253d1d15e80e081432269389fa3cc19e93af02d4dd5e40d5320fe30f00051450728a1e7b13d062bfd06d8d173888f685e303adf36b0fb624d19a833deed4eade83630c7bd0b5a1719de368830b226839956c6f7f733bb42029568ef52da87b48a6aa6bff6cd16dfc9777b50d899665360de3705e6d2efe16764ae3bb95984b76650236a310437f9eb064caad9f2aada272ad2ee3d2e1f98bef4e1b88cc4a9acb954220a9d957cb96a4435ef64c54b9d61c8896f02955a3bfcfd7616bb70c74a7a0538f926c272a08e0aff7748a18184d61dd46a3c9eccd592bb8ea96221b6befb3c95c5c59", 0x1000}, {&(0x7f0000003cc0)="a5d13f9a541b14a3eb40385ff4f5cc09c9643b07d006a69ad117fe0692bf4414e3145e1ba5177acbcf8cfda736a7937d6f4d5e05d940d968ab32f024313cb217224d27eccc539f21556e61ef877cbdb43a0cabe0c9112e36624a5f139972ad546792b0d12e0019d10af913f17a4f35b05338da1479836a09", 0x78}], 0x2}}, {{&(0x7f0000003d80)=@llc={0x1a, 0x321, 0x7, 0xcc, 0x3, 0x17, @remote}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e00)="cece524e23b3c2b007c01e8c8ce9d95529d9779472e1878641679b41d5cf0f6b17b0a3dbe67d92f768b4aafec5dac7a2daaf11d8b42b471bb837b19809c1e886a8c97e68cab197cfd0a1218bdef26a37f7823ad7395975feaaa9d1b6c650c5f8cd4a1b232c86c115ce581485cddc8ad32947016a6002a3f39275192ae3553fe9d6a7215a342817253db13f95afe7239101b8a4fba081567aeaa61c5c901d9a", 0x9f}, {&(0x7f0000003ec0)="1156aafdae96bef1064854746a63d3ac78416a64f85ceb257341ffb0a746f326813d41c5df0bf09d4dfd7de624bd476c27738ff30261a01e87b33e0e280ffc00836368d7e7c2d5513b21feb8b768ecb1815baca7417721c200434971e1aa75e16d1a3db2a7c6b95a", 0x68}], 0x2}}], 0x6, 0x4008000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000004100)=[@in6={0xa, 0x4e22, 0xce3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x48) (async) sendto$inet6(r4, &(0x7f0000004180)="577328737ea9caae43a6137ba249e119f2e01b0ffc34ad8112970ea4619a40e72eef466bec2f132c4ae02a0b8a82dc4925e6360276b6fe29e2acdc4f79cb0402bf69bd6d633e1f99366a8163e844b8d95df5fc1dd1c6bc9208f1e63ba393b0063a172c3fe8073be8f38b06a500e6dcf743e8cf94e52b5006b13c57a4511e07b7985383cb0bcf46a39400d2b535ed9b152aa4cd30a9db992964987dfacf2d4374612199b7d3d131f19e2154495e8890ca893663bec6d9747c8bd9dfb26e082e9ff57b070a03e8cf75142b3d6a315e8415ceda896b51", 0xd5, 0x800, &(0x7f0000004280)={0xa, 0x4e22, 0x3, @loopback, 0x800}, 0x1c) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000042c0)={0x0, 0xffffff11}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000004300)={0x0, 0x7ff}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000004340)={r1, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, [0x3, 0x9, 0x17, 0x3, 0x100000001, 0x1, 0x7ff, 0x6, 0x7, 0x8, 0x32, 0x10000, 0x8, 0x0, 0x1ff]}, &(0x7f0000004440)=0x100) (async) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000004480)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000044c0)=0x2c) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000004600)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000045c0)={&(0x7f0000004540)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000046c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000004780)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008000) (async) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000047c0)={@loopback, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x5, 0x4a, 0x0, 0x8000000000000000, 0x20, r6}) r9 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r9, &(0x7f0000004a40)={&(0x7f0000004840)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/230, 0xe6}], 0x1, &(0x7f0000004a00)=""/60, 0x3c}, 0x0) (async) connect(r4, &(0x7f0000004a80)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @empty}, 0x3, 0x2, 0x2, 0x3}}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000004b00)={'ipvlan0\x00'}) (async) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000004b40), &(0x7f0000004b80)=0x4) 5.327774623s ago: executing program 1 (id=1751): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@getnetconf={0x14, 0x52, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xffffffff], [0xffffffff], 'bridge_slave_1\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@ipv6header={{0x28}, {0x10, 0x2e}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', '\x00', {}, {}, 0x0, 0xf7, 0x3}, 0x0, 0x120, 0x150, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x0, 0x0, [0x2, 0x4, 0x6, 0x6, 0x6, 0x5, 0x8000, 0xfffc, 0xaa3, 0x1, 0x8, 0x7ff, 0x4, 0x48, 0x3, 0x8ca0], 0x1}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getroute={0x1c, 0x1a, 0x828, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x1, 0xc8, 0x0, 0x2400}, [""]}, 0x1c}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x2e}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 5.195958774s ago: executing program 1 (id=1753): close(0xffffffffffffffff) close(0x3) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0xffff}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x4}, 0x7}) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000050000020800024000000003000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x35, 0x0, 0x1, [@generic="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"]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xeed0b46ffaee1393, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x12010}}, 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="000086dd00000100000000000000600000000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000104000000000000000100907809000000699951a503ff3c00fe8000000000000000000000000000bbfe8000000000000000000000000000bb2b00000f00000000a542e5fa78122afabe978693aab29d1466a08191331ab6a877ada0ba71547993040b10059bd34a8b75294b0923a60f1fb92185b6f684546c90065735ecd57d7d08c3b4f700b561a165be3b70f5708ad409f217ed6af01e38575352a8c2ea616803b11bf27a5a897a351022d0cbfbe26f30b3ab4e3a6f4253d5cf238632ba4115fbcacf020fd669b418bff577c51abf913317f857712c3d4734aa2f0dfdfd67c1de45cc09f7d560c395460a2a172b3c55cd3f961b5930f9280e156efdc6141ea07715d5af19c9ed06a53651a47aa5c52d8ff986c66d719c19088d4627ff684f19b24b6e6e9605c8a93df75154a96ee4db03442d71d423ae8c16b4106941048aaab26760c88cf9b2cddcd078641bfe5c645197c5ba125531be11df5a44801774c5539d136ba2032fbfcc52731f9713060fa4ad8f6b45b245da43d30117c2b132ed23eac46b5193978f893158020056a63a460d8204f02c26ea9dac9a739f166884691f551084b8ae09965499ddbf57f35eacf411d84b6d13be8d953eedda4d32ad55543fd14d70809120f1ca942fb67d116642297cf78b6ca6f47089fb3ad10af09982551b6ab3c0f37a3e73e875220480c34b1746a98e551f4346706920c1f40dba48a6a3df76333178cd860232e4d52cbc9775fcb9785d5bd3df133756e4745e7e343bca8697fcf302178020df677a83b4473ecc42bfa8e6a50c8b79b315c1eb849fd713374d2b2dae2a60e1592baaf6ee9814c4b42e059094418d206392e9fb225922052995f932f454fd75cc7af9e13f28db47956289701273a411355f34f4677daa0d4fb8d87e2a49d3fc2d5670284c7cf2c622049eaafa2f743dfc7868d03505a409979adfc4ff044d1c04d2311f2ce1cdf5cbf50d289d9b5faae35b2b3de9211d5de16e1422dd47b6c4a4d0d28619e55a96063a46fe0f29b47e8c306cdfb3cb0064ecedfcf67bfe63a0e8a4c12929f0d6a7c32d9e225c7df08fdaf07d8dfbf85b3a167589378f74fa1bb75b3136619017c92a113075467498560442ba3fe1d5566b737e921dec06f60c8ec711b1a6b3df6ad7849564b4e05c4d29d73cda474a8e48f65aebe43c73a85af773eb382a1aba314430753a421d2827f677cc210cc4472e8ea235abc6e6e508c628bf78f5a9208f77c6ae02c03b7bfdde1b94ab2dad96714c5d0cc66763c74e7f1a3a373994ee7e30fd45ef323bb31400b701238fac457ec0d4d17b7b7393903b59dcba68fabfb65ec959f1a35948cd34799784bc3f4c6ff9fbb5da7a11bbf7bee96acfeb788d620f274858f6de5f7975d6bdf570de50ac2a9ecacf30672cb4d5326ab2ec36d0f09113d799a3167202b751292a497e015a6071373576f55bb0e6ce4f29820cd1a6a7293317ccce61d468e908868ba061653aaba351661008c70d825421810a524ef6df25878e750130dd99b8aa34fbce491e98770fa328c9d26f2d5800255e9037d74c7a2e2bacdcc81cec81a681d0be9aa77761ed07c91f5b0bcca388b881c001a6ecfd098ada1d3bed3b873ead3073a62774b9b019415b5b64589f48f36b79d930f544b2d3f3dd7b634105bfd710a825cb5c2bf41a931c0c3fabaef0bba470faadc56466bc0894f7222454ff138bffe94b58fb4d45a1cf14482d5bd7ac9887e2d2826bc74d1f22f056f2ded24c9586dd1be8a573a1c9da8dd0e5ff0a7263a473b1c948c4fea4a5282d3e039fb89140688b70d7d69ef13276d5e871550c1674cd506e9ad4d0d5a03e0b120c384b9f6ab315bc4c105f839206a53a6f226ce637689f81aab37a1b8f94f7796107ed826f3f3bf3d6a086f216ead59fc3e19a0aa39177bcbad38d94b7a4c3edbb53f88099a6ac618409a225c893244d22e236989ae9acd7eda7619f1f249dc60b855e0fec347f3909e90f80e6ac03feec2df18c9b4b2abcd96e90768e8433a133e69381b370341bd980257b4ed4ee4f7a2fda9142ed5540966d1142bb13840cccbab402d2ff9ce3702b4ca2115b20e29d4aa8341a77affa5abc88c09ead30ddd988844309d33fde48d32b156da20b912a17663b14b6db60d7d7af55dedb45d1088eb6b7e264478344c4389234e18209f86c9a77479f31e5617a30e6bf67f06c6c2d9558866dc9054814e58bcd5e2876e1f7b1d80279da5e1442eebffc07dc6330e000bd9361066950da1ba6cf64c7622c4e3ebd730152138d79b6f8f4cd3cfeca0c5f9c650303aef130c9e9449e7212163d60ca2741cfdf7951d804fa317d2cd4ae8397fed494502853b869672ca6f1e78d8fb05de313a4c0985f11b1c345bba92028bfd6b9e3a2cc7c975a48feb28ba1584523b88bbdaf4a052d01446ac06ff5fb00982ce965b72e9e37319ec7df2895843c750379eb99ecfa0569defe96a8204a7a1cda42eb69aa74fde31c0305d026ccf3fe1d3ac984901cc70890d0e3115001280f60e0130655f26bcb611e86f4c1c43327b18f2aace900cccc8a5606d7090cf7996093f72d32a71bfffb07954b4419c61c3a59ef35cd9533087c245106482d8d37b61d627fd1b60cc94ccceddb6da244a530442b4f2e4f7ec0cffca2cb02e4df7e25fe7229ea2b6be96ecab5ad54d623d369b5719d82c206692850b07e4a61dcca7d3cfd1bf0d8d46a0a9f6ced4f4094ba009e553f03a36e47fe5fa608f9d40fffef99d6e945468a75fc8663099c432bcb514d769e7559114ffe0beb6ddf9ad9dec965ec41b9ec2af69468b7e3512c949a82d8c1525f8f3d56553b8deaadf39328a983b2f483fb7bec16e1fc82d512d6156805ffc4d83bea8c674fa439b6b94ea76f5155a305b59715dd7f205d402b936afdb620a973663527dfe62a52af76c605264d729ad735a3dd27ab39a321b1401211108d52e9bb68baad2ce46ed3c85ccff07a383809f9aaa1aa88b57c1eaf69a1ee917e3a57800beba4919ef66a235a260978c76f1367e2b3a151069b379c5c261d56e3d4a31a122a515f3722dbe92eaa4032bab9b2684ed3c850c79276fc3adf44579a125ede97d172e7029dcd4ffe281c0608a6191e4a3eacc5c1d2563792820142ac6363fc3f7f4238852d15fce090cf54fb67ce3e4355ee701d02ab3f64011f9945659291f0252712948c91d5c4926f1728e9a517f9a583fc2d75773da4f10cbd28738de20d2cb05b9ca5a3fed2accf4ba7cb416f95338a1ada4691fcdc06322c009fa832b7dc7f9dee155941c3bf54626d4e47aa98d3eebe0ebfd7ebebca7f11e75e95dd9f81dbbd5359ed9bce1a55fc7938c7e79e84bdb2fc0b3bc7c77909b9fec954d0013b718e99067d47bfca810297d32cc34c6d092b855fba9d4b0bb53325b06fdf346d09a8290fa72f36bcba1584167bbf1a0e32e6aa7b3ba10569033067884fe671caf7195710bf0334f1fca6d76cc86ba8e49e5fc36f4011f42f6c475636f698df193b4f91c4b735b6b781736b978fcfe6ad49f8e5d90339cf494541f27e2ad4a86ba69eef6864880ae23d1db5353e67fbfbc494ffe3cd268fc430c5562c8c145ff7042904274a863d948ae2a76dba175809b3136539e9cfca23fa45ea1c2552bf943f7687b9e06bdaa66c1f6eba8cd3294c4437804041eddc469815b4cdde8501ee0f7ba8bcb36b14944d31066a5a11c9b562d840296cc4b1362054c15174b27306d362ebb3c4896e37cb5f5c037fece5dfba91ecda3111b1bc80a2ab0b3a61ea2b53347d34d581a3715928cefde613bd5b18424b4ac1e74247cd48676ed1e379c73a17547d439871f6e43b697181fa871b53ad9675c029a423827ae02eedd4564c753d552e939a38fea733b6699ed94b816b42eac960135cd30e65480fb1a1f9370d801ac1c232e3107c00fba5e778a870bc6d3066659e674e39d82f1414d6396ee2c731cd33cb4eaccb386b704bd7530bbdc6fc5a5edc093ed637460b6af9969b4239407b35c95f9a78f5adb85b68a8ad045c7833f9456cfa3fb185004b7df8515ed9c3121506804b5dc1fe5ae4d72b84ea3cf120f9575d205276a5934d683e7911ff7de4283f718082c71f02c109e5fe20aea97dafa090a163ccff053636c8657ca9a7451bf5d1051feef1f3b6d234d8e962f45520c14b2283408764da859499196c9c39e58f02974446812e557068367a37228f450b127ab0e308be418336f9aaecb313bd7ff326251a4e0cf13a426078fb9c0fcbdea5ed32cce42649d2465529945291f996d016e9927bc3ceccaf2b1eb7fb5562c89ce741e4884a8b5843a08a147ef0699a9063f41044f87fbcbad7cda63671df28fabbf3216f62082af08e5b4e8ab38f15948ab241ced5da50a7e093271244b40513a5db6b74d78d03d44e4cf4c5dcbb0327aa17f5e7c3684778bde55dbd9139a5cab010b3ee8b6f43ce2faeee633ca737ebe802f9e460aba571f28c763967b3f2636bc66ce44454809e2474a86789e98a46fcc1d1868cd860820d9dfdeae933f73b6a1bd3bbcf79b8c14354921fa7c13456995489abe275a43bf7725a9509fd97c522ec0598f5e1c8773b9966eae619b342ddda0de784aa2762f18b96c6e5256e3c74c8d125886edc659594f53072906f50fe1600c9ca39062d5f9875df13783bde9e5f50004da74793ea4272353fedd3bf8023aa550a451374964d208a3e190ebd12ded53f32cdd509301423d4ca0c1726a2eeaa8a0d3b53ac5cd14518eac7ece9a3effa518076d388b461ade8d577981590a6d6105c4f367390bc7c5a2a7b225160824709fb9aa1b55b84172af05c885295e97c233963c24f8cf5aa49c219b075c21f49044e594240b32bcdf26e31128cdb6173243fadfc2ea281ecdb61ce558486ae46d2d209d1b1e0e6600f00efb343992b1a2ea0a7a43cab8046b219fe1e54a80ffa1df84ab41d4df7ef3ebe486e1747ea0b075affc6c798e942e39a86a955a6aada121eba738cde9a33dce2daf6745b62b9c4db5ba2b44ff8884b5033dc92d33f9d65a450cea047cb35aec5a37ad322e4e07f56be0f7e0d2164027a4bff4e70642868978d7b0d1e82013447be0d34e32c2ce2316c0f35812cb132a0a9b104586fd3d1d3df82a9d6f123d711819803d2366bbe1f4c26fea66c5c034b9e147f57742f219cb493d6fea43a6dc4c50b864671c73f88b855798201bb890919574345b759de2c645351aadb7f5ed9d8ae3a2804ee1ede9f0122d4db3e12a67444b86746d54bb243814b7a9746c89764f5009c7b950a3a19828e973ea3f248a6ba64544c1aa69de375d3eb9ae4825950ea0657a1f35ac89ebca6aac43057f1b0abd9deb4ce505cdb9deb3b4151cccd24cda516783166eb7e3c8029db851c0fda16608f2f1e893d931ce609e217300c848975e75dea7fdb488bc512a1613eac5c699dc0277dd5601f354b18730b4a1b2e8ddd287d4bac13beef6c98b449e659b5fa81fdb452b5500dd1a5ca775c24c30ff9b01a59399d0bda0de1414bd037504d5f36622337b86566e0104119a19cf01f5e95a201ca3966af2829241e2e7887d2821d651bb1f90d5ec1858da6d58595213ffa32f04266197f11b022f0f36a26c5c1512a"], 0xfce) 5.065702728s ago: executing program 1 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x9, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendfile(r2, r0, 0x0, 0xffffffffffffffc3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="080005"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, r1, 0xd08, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c0}, 0x200040c4) 2.543419551s ago: executing program 2 (id=1757): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000000)) (async) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) writev(r1, &(0x7f0000003800)=[{&(0x7f0000000400)=',', 0x1}], 0x1) (async) writev(r1, &(0x7f0000003800)=[{&(0x7f0000000400)=',', 0x1}], 0x1) socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x4, 0x0, 0x0) 2.543106733s ago: executing program 3 (id=1758): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 2.50817461s ago: executing program 0 (id=1759): r0 = socket(0x10, 0x800, 0x40000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00'}) 2.500385883s ago: executing program 1 (id=1760): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.385921475s ago: executing program 1 (id=1762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400a0}, 0x4810) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000001c0)="87", 0x1, 0x81, &(0x7f0000000280)={0x11, 0xc, r5, 0x1, 0x5, 0x6, @broadcast}, 0x14) 2.343052927s ago: executing program 4 (id=1763): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000007000006", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0x44, 0x2b, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) 2.316222576s ago: executing program 3 (id=1764): close(0xffffffffffffffff) close(0x3) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0xffff}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x4}, 0x7}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x35, 0x0, 0x1, [@generic="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"]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xeed0b46ffaee1393, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x12010}}, 0x20}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"], 0xfce) 2.271481588s ago: executing program 0 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) sendmsg$kcm(r1, &(0x7f0000001f00)={&(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000240)="ea8808e51f417a4a85e755d29b5ecf3fb83249522c60d86dd887669ab412e848d31329fe1f08dea587e02c822f99e4bb5855c01800a952d0bbc8b9561f3be339b79b29f6b631fed7c6335874048c9f50f7484de78a5fdd70149399ed4079ccc7dc38300bcae756dd4228ad973df7016275a61b594b922abec00271d3abeee7b4290ef970131594d348ed2a7fa0280ba7b9258906134a6e190a4ebe046e6119bc703e2095a9fdeca13ed72824d12659757d1cc59ee2f494ab767a856111b2b09be9652bd64a7d0ca35f24b3c804dfdd01e44772b5", 0xd4}, {&(0x7f0000000340)="3403433b1f3f72e0e91e18def51bdb3cbea02c7c2c4ad2f7e42c809b09d487feead909dcd59eabf74dbf4456deaee188a990bb482295d1891cf65181dbbb0b0a99da08dc7fdf95aaed07d5c547fc7798149d85a97da4d872d311ad2cade77ad4a8f9", 0x62}, {&(0x7f00000003c0)="ec39bc4bf3477295adb4dc147a3b53fa67169b6cb74a99826c8ef549639c6b6477edefc100d90c16883baa3d4dc1ebe68f5e46a675cb71777dcca0ccb7228898b0fd855fbe82f367f1206670c6f406d25508c16c9ee3b6cab4a655328bc572f1e68863852f0378831c1d408470fe9a9d3dbf9947aa580cbe0ecba2fec1822525085aa461fc1a5b2d076bffbfd61fdd1360918a82f244e1a9a14403084065602202aa64a84845c033023e93e6af797db179d22ccda088fda3207f67dedd383a8c973850112b21e59ed94c43d91210fe7d22cb084a89b2b3c063", 0xd9}, {&(0x7f00000004c0)="f902cd2f052514790d303f8ea23a04810e4b811e6e326e4c643e62aab21bb0ad1cca7434f4d738a9f678ca3caaa5d32ce3e0fc2451b9381b01c594f523966982b824119c6d04eb85f4c030b9c4e6d87a30b86f06c2472ca7f44a2b387760a883c5b45b9ff978a61ab99fc991805b7227ade4a4b73195b9deb47e9af31044f121387f4a250d39417907c7d96cfbb27e1b65e33a777e85d95ace7deb03e3f98d551809ebdb1709877680db64d6a565a8e4276f19631d0abd19071773a6bf3229c0c148f388014745b491ebb4f5be35174bf56ae4014b0d511dced14cd37e70589e346e7deb12938f9d0cc01ea7a00c21a5b606", 0xf2}, {&(0x7f00000005c0)="f1aece2df1bfc8926ef8ba539771102fd267f2afb489fe3d70d60416accbd20fe227f8c17fe66602056e07c54a6bc1904f1b8d6443337d86eed950d999f6be06ebbc652992819ec3a88fad36bfb69bd04906f85f58a343d7ac3ffa3d0146a76ef721e2d7759cebc5cf7fb2830c384e9c6d35337cb99127b00f7445086f32ff786c4cb8c8e64cb10b54046be801bd90f0ede0ac26261448a8ec586b5d8b7ab23ca9a6f9c3a14a45fbf0fbe1b8d048b2646d46", 0xb2}, {&(0x7f00000007c0)="93733e8d37db1604f07b3a5db0fc41f253e1a245325f06af07c961a3697b9bfa7f64c726a2f0b4c71a4990c3b3e49748b5699c1467a211685cca89ae928120475568f1bff5c89ccf0bbaabacda3af6187e2d72430be227db2c65665652aae8891ec733922dceda30abd1a1ba555936915d2b424078176977cfcd7c738b6f3d81b2e9a596eb1e8142fbe594bd1dbc1562e754fcedccb78914258ef757fde8870f305beb0782a2bd353cd867d99390aa131807757b9f38fc0b304ccc82712e1317043f26c9508efe052ba6810bb99a71de64434361bd900f7da426", 0xda}], 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1598}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES16=r9, @ANYRES32=r9, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000002000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017004a9245"], 0x1c0}}, 0x0) 2.136018102s ago: executing program 4 (id=1766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x38, 0x80000, 0xb, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a3100000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 2.011235806s ago: executing program 4 (id=1767): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000340)=0x9e) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3f9, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet6(0x10, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r8, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00078008000500878f000008000600df0000de"], 0x10c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r6, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x6e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) close(0x3) socket(0x18, 0x80805, 0x800000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0200000000000000000023000000009b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.666743442s ago: executing program 4 (id=1768): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b000000020000000000000e0500000001000000002e2e5f2e30"], 0x0, 0x33, 0x0, 0x1, 0x3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b000000020000000000000e0500000001000000002e2e5f2e30"], 0x0, 0x33, 0x0, 0x1, 0x3}, 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) 1.665809113s ago: executing program 2 (id=1769): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x2, &(0x7f0000000380)='\a', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32003c00000900010073797a30000000004100054000009f08740000000c0a010300000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e74657200040002801400018004000100636f756e7465720080040280140000001000010000000000000000000000000a"], 0xe4}}, 0x0) 1.511566338s ago: executing program 2 (id=1770): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x5, 0x0, 0xfffffffe}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/182, 0xb6}, {&(0x7f00000000c0)=""/121, 0x79}], 0x2, &(0x7f0000000180)=""/23, 0x17}, 0x8001}, {{&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/146, 0x92}], 0x6, &(0x7f0000000900)=""/110, 0x6e}, 0xa}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/14, 0xe}], 0x1, &(0x7f0000000a00)=""/48, 0x30}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/79, 0x4f}, {&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000bc0)=""/38, 0x26}], 0x3, &(0x7f0000000c40)=""/36, 0x24}, 0x5}], 0x4, 0x0, &(0x7f0000000d80)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000016005e2800"/24], 0x18}}, 0x40000) 196.618511ms ago: executing program 4 (id=1771): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_team\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x20, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3, 0xa}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x8d8) 161.083153ms ago: executing program 1 (id=1772): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 116.041644ms ago: executing program 2 (id=1773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0x800}, 0x810) 92.634131ms ago: executing program 2 (id=1774): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) (async) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x7f02343c8fcd2920) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 92.486017ms ago: executing program 0 (id=1775): syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6015690900482ffffc020000000000000000000000000000ff0288a8ffffffffffff00000000000124"], 0x0) 50.936778ms ago: executing program 3 (id=1776): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x15, 0x5, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @broadcast, {[@timestamp={0x44, 0x4, 0xeb}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x1, 0x0, 0x6}, 0xfc}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000001040)={&(0x7f0000000000)={0x1d, r9, 0x2, {0x1, 0x0, 0x3}, 0xff}, 0x18, &(0x7f0000001680)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x480d1) sendmmsg$inet(r6, 0x0, 0x0, 0x4000000) setsockopt$sock_int(r6, 0x1, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010027bd7000fbdbdfa500000000", @ANYRES32=r10, @ANYBLOB="104e04000362010024001280110001000200696467595f736c617665000000000c000580060002"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) 0s ago: executing program 4 (id=1777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x38, 0x80000, 0xb, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a3100000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): set [1, 0] type 2 family 0 port 6081 - 0 [ 73.864058][ T5633] Bluetooth: hci4: command tx timeout [ 73.871932][ T5639] veth0_macvtap: entered promiscuous mode [ 73.881145][ T5633] Bluetooth: hci3: command tx timeout [ 73.887937][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.897439][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.909270][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.922258][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.940249][ T5639] veth1_macvtap: entered promiscuous mode [ 73.959534][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.049110][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.074041][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.126312][ T5645] veth0_vlan: entered promiscuous mode [ 74.142959][ T1024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.152434][ T1024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.168646][ T1024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.180215][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.210315][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.226509][ T5645] veth1_vlan: entered promiscuous mode [ 74.233862][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.319409][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.329558][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.337354][ T5631] veth0_vlan: entered promiscuous mode [ 74.350447][ T5631] veth1_vlan: entered promiscuous mode [ 74.421500][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.438120][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.452285][ T5645] veth0_macvtap: entered promiscuous mode [ 74.455658][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.465488][ T5645] veth1_macvtap: entered promiscuous mode [ 74.547873][ T5631] veth0_macvtap: entered promiscuous mode [ 74.584292][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.597554][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.606357][ T5631] veth1_macvtap: entered promiscuous mode [ 74.607910][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.638573][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.649159][ T5638] veth0_vlan: entered promiscuous mode [ 74.676901][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.731772][ T1169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.757765][ T1169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.778835][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.787897][ T5830] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 74.791862][ T1169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.813941][ T5638] veth1_vlan: entered promiscuous mode [ 74.823185][ T1024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.867092][ T1024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.910005][ T1024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.933215][ T1024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.992390][ T1024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.078162][ T5841] bond1 (unregistering): Released all slaves [ 75.206173][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.214389][ T5638] veth0_macvtap: entered promiscuous mode [ 75.229560][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.251603][ T5638] veth1_macvtap: entered promiscuous mode [ 75.348308][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.356488][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.402708][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.421842][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.427048][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.548360][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.576288][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.599387][ T1024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.608689][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.661635][ T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.694083][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.724372][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.863392][ T5644] Bluetooth: hci1: command tx timeout [ 75.868866][ T5633] Bluetooth: hci0: command tx timeout [ 75.874538][ T5644] Bluetooth: hci2: command tx timeout [ 75.944139][ T5644] Bluetooth: hci4: command tx timeout [ 75.949583][ T5633] Bluetooth: hci3: command tx timeout [ 76.127285][ T5877] syzkaller0: entered promiscuous mode [ 76.133355][ T5877] syzkaller0: entered allmulticast mode [ 76.161224][ T5877] FAULT_INJECTION: forcing a failure. [ 76.161224][ T5877] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.180633][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.194052][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.200047][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 76.200068][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.200084][ T5877] Call Trace: [ 76.200091][ T5877] [ 76.200100][ T5877] dump_stack_lvl+0xe8/0x150 [ 76.200129][ T5877] should_fail_ex+0x412/0x560 [ 76.200151][ T5877] _copy_from_user+0x2d/0xb0 [ 76.200170][ T5877] __copy_msghdr+0x3c5/0x5b0 [ 76.200195][ T5877] ___sys_sendmsg+0x213/0x360 [ 76.200215][ T5877] ? __lock_acquire+0x6b5/0x2cf0 [ 76.200235][ T5877] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.200285][ T5877] ? __fget_files+0x2a/0x420 [ 76.200302][ T5877] ? __fget_files+0x3a0/0x420 [ 76.200327][ T5877] __x64_sys_sendmsg+0x1bd/0x2a0 [ 76.200351][ T5877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 76.200379][ T5877] ? __pfx_ksys_write+0x10/0x10 [ 76.200406][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.200423][ T5877] do_syscall_64+0x174/0xf80 [ 76.200443][ T5877] ? trace_irq_disable+0x3b/0x140 [ 76.200464][ T5877] ? clear_bhb_loop+0x40/0x90 [ 76.200482][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.200497][ T5877] RIP: 0033:0x7ffbd739ce59 [ 76.200515][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.200527][ T5877] RSP: 002b:00007ffbd81e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.200543][ T5877] RAX: ffffffffffffffda RBX: 00007ffbd7615fa0 RCX: 00007ffbd739ce59 [ 76.200554][ T5877] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 76.200563][ T5877] RBP: 00007ffbd81e3090 R08: 0000000000000000 R09: 0000000000000000 [ 76.200571][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.200579][ T5877] R13: 00007ffbd7616038 R14: 00007ffbd7615fa0 R15: 00007ffc64d96218 [ 76.200604][ T5877] [ 76.204880][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 76.239231][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.469102][ T5895] openvswitch: netlink: IP tunnel dst address not specified [ 76.478012][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.527011][ T5883] batman_adv: batadv0: Adding interface: dummy0 [ 76.534378][ T5883] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.562915][ T5883] batman_adv: batadv0: Interface activated: dummy0 [ 76.627674][ T5890] batadv0: mtu less than device minimum [ 76.644999][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.657572][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.669348][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.681005][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.692706][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.696833][ T5899] netlink: 204 bytes leftover after parsing attributes in process `syz.2.25'. [ 76.704365][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.724701][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.736462][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.938578][ T5905] Bluetooth: MGMT ver 1.23 [ 76.946897][ T5904] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.996651][ T5901] syzkaller0: entered promiscuous mode [ 77.011947][ T5901] syzkaller0: entered allmulticast mode [ 77.115741][ T5909] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.349073][ T5918] Cannot find del_set index 4 as target [ 77.455251][ T5925] netlink: 204 bytes leftover after parsing attributes in process `syz.3.35'. [ 77.599237][ T5928] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 77.718010][ T5933] syzkaller0: entered promiscuous mode [ 77.734474][ T5933] syzkaller0: entered allmulticast mode [ 77.765541][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 77.803653][ T5943] xt_hashlimit: size too large, truncated to 1048576 [ 77.816896][ T5944] xt_hashlimit: size too large, truncated to 1048576 [ 78.310736][ T5966] netlink: 204 bytes leftover after parsing attributes in process `syz.0.52'. [ 78.392034][ T5972] netlink: 'syz.3.55': attribute type 32 has an invalid length. [ 78.401598][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 78.517899][ T5972] bond1: option coupled_control: invalid value (192) [ 78.529489][ T5975] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 78.531839][ T5972] bond1 (unregistering): Released all slaves [ 78.596536][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 78.627763][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 78.638854][ T5969] batman_adv: batadv0: Adding interface: dummy0 [ 78.649718][ T5969] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.681687][ T5969] batman_adv: batadv0: Interface activated: dummy0 [ 78.787055][ T5977] gretap0: entered promiscuous mode [ 78.809811][ T5977] gretap0: left promiscuous mode [ 78.824513][ T5989] netlink: 64 bytes leftover after parsing attributes in process `syz.3.60'. [ 78.878470][ T5983] syzkaller0: entered allmulticast mode [ 79.289054][ T6013] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20003 [ 79.576489][ T6034] block nbd2: not configured, cannot reconfigure [ 79.924706][ T6066] netlink: 'syz.4.82': attribute type 3 has an invalid length. [ 80.271925][ T6086] syzkaller0: entered promiscuous mode [ 80.296433][ T6086] syzkaller0: entered allmulticast mode [ 80.472957][ T6099] netlink: 'syz.1.93': attribute type 14 has an invalid length. [ 80.641278][ T1182] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.674084][ T1182] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.703647][ T1182] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.741144][ T1182] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.768919][ C0] Unknown status report in ack skb [ 80.821706][ T6120] macvtap0: entered allmulticast mode [ 80.828174][ T6120] veth0_macvtap: entered allmulticast mode [ 80.922572][ T6128] syzkaller0: entered promiscuous mode [ 80.929122][ T6128] syzkaller0: entered allmulticast mode [ 80.940671][ T6128] FAULT_INJECTION: forcing a failure. [ 80.940671][ T6128] name failslab, interval 1, probability 0, space 0, times 1 [ 80.957890][ T6128] CPU: 1 UID: 0 PID: 6128 Comm: syz.2.102 Not tainted syzkaller #0 PREEMPT(full) [ 80.957911][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.957920][ T6128] Call Trace: [ 80.957927][ T6128] [ 80.957934][ T6128] dump_stack_lvl+0xe8/0x150 [ 80.957957][ T6128] should_fail_ex+0x412/0x560 [ 80.957979][ T6128] should_failslab+0xa8/0x100 [ 80.957996][ T6128] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 80.958017][ T6128] ? __alloc_skb+0x186/0x7d0 [ 80.958036][ T6128] ? __alloc_skb+0x1d0/0x7d0 [ 80.958053][ T6128] ? __local_bh_enable_ip+0xd0/0x130 [ 80.958073][ T6128] __alloc_skb+0x1d0/0x7d0 [ 80.958092][ T6128] ? __might_fault+0xaf/0x130 [ 80.958114][ T6128] alloc_skb_with_frags+0xc8/0x760 [ 80.958146][ T6128] sock_alloc_send_pskb+0x878/0x990 [ 80.958186][ T6128] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 80.958204][ T6128] ? dev_get_by_index+0x22/0x2e0 [ 80.958220][ T6128] ? dev_get_by_index+0x22/0x2e0 [ 80.958245][ T6128] packet_sendmsg+0x315a/0x4fb0 [ 80.958289][ T6128] ? unwind_next_frame+0xa6/0x2550 [ 80.958328][ T6128] ? __pfx_packet_sendmsg+0x10/0x10 [ 80.958344][ T6128] ? aa_sk_perm+0x6d5/0x900 [ 80.958372][ T6128] ? __pfx_aa_sk_perm+0x10/0x10 [ 80.958390][ T6128] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 80.958417][ T6128] ? aa_sock_msg_perm+0xf1/0x1b0 [ 80.958440][ T6128] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 80.958463][ T6128] ____sys_sendmsg+0x972/0x9f0 [ 80.958493][ T6128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.958523][ T6128] ? import_iovec+0x73/0xa0 [ 80.958545][ T6128] ___sys_sendmsg+0x2a5/0x360 [ 80.958565][ T6128] ? __lock_acquire+0x6b5/0x2cf0 [ 80.958586][ T6128] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.958640][ T6128] ? __fget_files+0x2a/0x420 [ 80.958657][ T6128] ? __fget_files+0x3a0/0x420 [ 80.958684][ T6128] __x64_sys_sendmsg+0x1bd/0x2a0 [ 80.958708][ T6128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 80.958739][ T6128] ? __pfx_ksys_write+0x10/0x10 [ 80.958768][ T6128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.958786][ T6128] do_syscall_64+0x174/0xf80 [ 80.958809][ T6128] ? clear_bhb_loop+0x40/0x90 [ 80.958828][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.958842][ T6128] RIP: 0033:0x7ffbd739ce59 [ 80.958858][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.958870][ T6128] RSP: 002b:00007ffbd81e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.958887][ T6128] RAX: ffffffffffffffda RBX: 00007ffbd7615fa0 RCX: 00007ffbd739ce59 [ 80.958897][ T6128] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 80.958906][ T6128] RBP: 00007ffbd81e3090 R08: 0000000000000000 R09: 0000000000000000 [ 80.958915][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.958923][ T6128] R13: 00007ffbd7616038 R14: 00007ffbd7615fa0 R15: 00007ffc64d96218 [ 80.958948][ T6128] [ 81.277281][ T6130] netlink: 'syz.4.101': attribute type 2 has an invalid length. [ 81.296144][ T6132] __nla_validate_parse: 6 callbacks suppressed [ 81.296159][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'. [ 81.377314][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 81.391551][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 81.571650][ T91] cfg80211: failed to load regulatory.db [ 81.582420][ T6141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.106'. [ 81.620407][ T6138] syzkaller0: entered promiscuous mode [ 81.633306][ T6138] syzkaller0: entered allmulticast mode [ 81.770180][ T91] IPVS: starting estimator thread 0... [ 81.863747][ T6152] IPVS: using max 29 ests per chain, 69600 per kthread [ 81.922976][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 82.496971][ T6172] syzkaller0: entered promiscuous mode [ 82.517872][ T6172] syzkaller0: entered allmulticast mode [ 83.015544][ T6221] netlink: 204 bytes leftover after parsing attributes in process `syz.2.126'. [ 83.480942][ T6245] xt_connbytes: Forcing CT accounting to be enabled [ 83.543845][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 84.276460][ T6224] tipc: Started in network mode [ 84.282464][ T6224] tipc: Node identity ac14142f, cluster identity 4711 [ 84.289872][ T6224] tipc: New replicast peer: 0.0.0.0 [ 84.296342][ T6224] tipc: Enabled bearer , priority 10 [ 84.307599][ T6228] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:1421 [ 84.317094][ T6231] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 84.333619][ T6231] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.127'. [ 84.520134][ T6254] netlink: 'syz.4.131': attribute type 3 has an invalid length. [ 84.577912][ T6259] IPv6: sit1: Disabled Multicast RS [ 84.644863][ T6264] xt_NFQUEUE: number of total queues is 0 [ 84.711767][ T6268] netlink: 204 bytes leftover after parsing attributes in process `syz.4.137'. [ 84.718402][ T6256] batman_adv: batadv0: Adding interface: dummy0 [ 84.748462][ T6256] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.774346][ T6272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.136'. [ 84.787588][ T6256] batman_adv: batadv0: Interface activated: dummy0 [ 84.917748][ T6263] net_ratelimit: 33 callbacks suppressed [ 84.917764][ T6263] batadv0: mtu less than device minimum [ 84.952665][ T6263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.964380][ T6263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.976095][ T6263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.987740][ T6263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.999474][ T6263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.009109][ T6284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.011123][ T6263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.029846][ T6263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.041008][ T6263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.105654][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.114145][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.198037][ T6288] Zero length message leads to an empty skb [ 85.329923][ T6292] syzkaller0: entered promiscuous mode [ 85.355952][ T6292] syzkaller0: entered allmulticast mode [ 85.379481][ T5766] tipc: Node number set to 2886997039 [ 85.627803][ T6299] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 85.731782][ T6305] syzkaller0: entered promiscuous mode [ 85.737765][ T6305] syzkaller0: entered allmulticast mode [ 87.271536][ T6354] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 87.310081][ T6340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.329824][ T6350] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 87.344670][ T6350] __nla_validate_parse: 1 callbacks suppressed [ 87.344685][ T6350] netlink: 96 bytes leftover after parsing attributes in process `syz.2.160'. [ 87.388093][ T6350] netlink: 658 bytes leftover after parsing attributes in process `syz.2.160'. [ 87.403613][ T6350] netlink: 1 bytes leftover after parsing attributes in process `syz.2.160'. [ 88.542857][ T6370] netlink: 7 bytes leftover after parsing attributes in process `syz.4.163'. [ 89.031167][ T6404] tunl0: entered promiscuous mode [ 89.043285][ T6404] netlink: 'syz.0.171': attribute type 3 has an invalid length. [ 89.051077][ T6404] netlink: 9 bytes leftover after parsing attributes in process `syz.0.171'. [ 89.239753][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 89.266104][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 89.288361][ T6432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.180'. [ 89.304502][ T6432] unsupported nlmsg_type 40 [ 89.414648][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 89.424130][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 89.767600][ T6455] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 89.905917][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.950204][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.985424][ T6459] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 89.993908][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.002739][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.402419][ T6493] net_ratelimit: 13 callbacks suppressed [ 90.402439][ T6493] IPv6: addrconf: prefix option has invalid lifetime [ 90.450452][ T6501] IPVS: Error connecting to the multicast addr [ 90.692098][ T9] IPVS: starting estimator thread 0... [ 90.795010][ T6514] IPVS: using max 32 ests per chain, 76800 per kthread [ 90.800536][ T6521] Bluetooth: MGMT ver 1.23 [ 90.857522][ T6521] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 90.888637][ T6525] syz.4.206 uses obsolete (PF_INET,SOCK_PACKET) [ 91.268012][ T6551] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 91.290432][ T6551] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 91.927035][ T6590] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 91.968492][ T6590] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 92.140556][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.151046][ T6601] batadv0: mtu less than device minimum [ 92.160528][ T6601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.172951][ T6601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.184682][ T6601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.196291][ T6601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.267289][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.713841][ T6642] __nla_validate_parse: 14 callbacks suppressed [ 92.713860][ T6642] netlink: 204 bytes leftover after parsing attributes in process `syz.3.243'. [ 92.923287][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 93.408331][ T6681] netlink: 204 bytes leftover after parsing attributes in process `syz.4.255'. [ 93.445353][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.682630][ T6701] syzkaller1: entered promiscuous mode [ 93.690135][ T6701] syzkaller1: entered allmulticast mode [ 93.818914][ T6707] tipc: Enabling of bearer rejected, failed to enable media [ 93.860744][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 93.938598][ T6713] netlink: 'syz.1.268': attribute type 8 has an invalid length. [ 94.116368][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 94.218224][ T6737] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 94.228805][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.273'. [ 94.239715][ T6733] bridge1: port 1(vlan2) entered blocking state [ 94.258574][ T6733] bridge1: port 1(vlan2) entered disabled state [ 94.269053][ T6733] vlan2: entered allmulticast mode [ 94.275279][ T6733] bridge1: entered allmulticast mode [ 94.283949][ T6733] vlan2: left allmulticast mode [ 94.288888][ T6733] bridge1: left allmulticast mode [ 94.410424][ T6746] syzkaller0: entered promiscuous mode [ 94.421264][ T6746] syzkaller0: entered allmulticast mode [ 94.710147][ T6760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.282'. [ 94.724461][ T6760] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 97.127433][ T6729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.313138][ T6775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.287'. [ 97.340285][ T6771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'. [ 97.402686][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 97.440304][ T6779] bridge1: port 1(vlan2) entered blocking state [ 97.447764][ T6779] bridge1: port 1(vlan2) entered disabled state [ 97.463978][ T6779] vlan2: entered allmulticast mode [ 97.481613][ T6779] bridge1: entered allmulticast mode [ 97.515132][ T6779] vlan2: left allmulticast mode [ 97.524007][ T6779] bridge1: left allmulticast mode [ 97.578770][ T6793] FAULT_INJECTION: forcing a failure. [ 97.578770][ T6793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.596476][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.0.292 Not tainted syzkaller #0 PREEMPT(full) [ 97.596498][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.596507][ T6793] Call Trace: [ 97.596513][ T6793] [ 97.596520][ T6793] dump_stack_lvl+0xe8/0x150 [ 97.596545][ T6793] should_fail_ex+0x412/0x560 [ 97.596567][ T6793] _copy_from_user+0x2d/0xb0 [ 97.596587][ T6793] ___sys_recvmsg+0x175/0x590 [ 97.596615][ T6793] ? __pfx____sys_recvmsg+0x10/0x10 [ 97.596645][ T6793] ? __fget_files+0x2a/0x420 [ 97.596680][ T6793] ? __fget_files+0x3a0/0x420 [ 97.596707][ T6793] do_recvmmsg+0x334/0x800 [ 97.596738][ T6793] ? __pfx_do_recvmmsg+0x10/0x10 [ 97.596770][ T6793] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.596802][ T6793] __x64_sys_recvmmsg+0x198/0x250 [ 97.596826][ T6793] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 97.596857][ T6793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.596873][ T6793] do_syscall_64+0x174/0xf80 [ 97.596894][ T6793] ? trace_irq_disable+0x3b/0x140 [ 97.596916][ T6793] ? clear_bhb_loop+0x40/0x90 [ 97.596935][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.596958][ T6793] RIP: 0033:0x7f5e3419ce59 [ 97.596974][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.596986][ T6793] RSP: 002b:00007f5e3502e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 97.597003][ T6793] RAX: ffffffffffffffda RBX: 00007f5e34415fa0 RCX: 00007f5e3419ce59 [ 97.597013][ T6793] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 97.597022][ T6793] RBP: 00007f5e3502e090 R08: 0000000000000000 R09: 0000000000000000 [ 97.597031][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.597040][ T6793] R13: 00007f5e34416038 R14: 00007f5e34415fa0 R15: 00007ffe1fd83168 [ 97.597067][ T6793] [ 97.865115][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 98.240120][ T6816] netlink: 104 bytes leftover after parsing attributes in process `syz.2.299'. [ 98.248144][ T6821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.303'. [ 98.360934][ T6823] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.421178][ T6830] FAULT_INJECTION: forcing a failure. [ 98.421178][ T6830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.437449][ T6830] CPU: 0 UID: 0 PID: 6830 Comm: syz.3.304 Not tainted syzkaller #0 PREEMPT(full) [ 98.437470][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.437479][ T6830] Call Trace: [ 98.437485][ T6830] [ 98.437492][ T6830] dump_stack_lvl+0xe8/0x150 [ 98.437514][ T6830] should_fail_ex+0x412/0x560 [ 98.437535][ T6830] _copy_to_user+0x31/0xb0 [ 98.437555][ T6830] csum_and_copy_to_iter+0x27e/0x1c80 [ 98.437586][ T6830] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 98.437601][ T6830] ? __skb_recv_udp+0x4cc/0x990 [ 98.437619][ T6830] ? __skb_recv_udp+0x4cc/0x990 [ 98.437636][ T6830] ? __local_bh_enable_ip+0xd0/0x130 [ 98.437652][ T6830] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.437671][ T6830] ? __skb_recv_udp+0x4cc/0x990 [ 98.437688][ T6830] ? __skb_recv_udp+0x898/0x990 [ 98.437706][ T6830] __skb_datagram_iter+0x89b/0x980 [ 98.437730][ T6830] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 98.437750][ T6830] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 98.437768][ T6830] ? csum_partial+0x239/0x2c0 [ 98.437788][ T6830] skb_copy_and_csum_datagram_msg+0x1e8/0x480 [ 98.437808][ T6830] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 98.437834][ T6830] udpv6_recvmsg+0x4c3/0x1390 [ 98.437867][ T6830] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 98.437886][ T6830] ? __lock_acquire+0x6b5/0x2cf0 [ 98.437902][ T6830] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.437921][ T6830] ? inet6_recvmsg+0xe7/0x490 [ 98.437939][ T6830] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 98.437956][ T6830] ? security_socket_recvmsg+0x7e/0x2c0 [ 98.437972][ T6830] ? __pfx_inet6_recvmsg+0x10/0x10 [ 98.437990][ T6830] sock_recvmsg+0xfa/0x1b0 [ 98.438011][ T6830] ____sys_recvmsg+0x1e6/0x4a0 [ 98.438040][ T6830] ? __pfx_____sys_recvmsg+0x10/0x10 [ 98.438074][ T6830] ? import_iovec+0x73/0xa0 [ 98.438096][ T6830] ___sys_recvmsg+0x215/0x590 [ 98.438120][ T6830] ? __pfx____sys_recvmsg+0x10/0x10 [ 98.438142][ T6830] ? __fget_files+0x2a/0x420 [ 98.438181][ T6830] ? __fget_files+0x3a0/0x420 [ 98.438208][ T6830] do_recvmmsg+0x334/0x800 [ 98.438234][ T6830] ? __pfx_do_recvmmsg+0x10/0x10 [ 98.438265][ T6830] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.438293][ T6830] __x64_sys_recvmmsg+0x198/0x250 [ 98.438315][ T6830] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 98.438345][ T6830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.438361][ T6830] do_syscall_64+0x174/0xf80 [ 98.438381][ T6830] ? trace_irq_disable+0x3b/0x140 [ 98.438402][ T6830] ? clear_bhb_loop+0x40/0x90 [ 98.438420][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.438435][ T6830] RIP: 0033:0x7f1898b9ce59 [ 98.438451][ T6830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.438463][ T6830] RSP: 002b:00007f189998d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 98.438479][ T6830] RAX: ffffffffffffffda RBX: 00007f1898e15fa0 RCX: 00007f1898b9ce59 [ 98.438488][ T6830] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 98.438497][ T6830] RBP: 00007f189998d090 R08: 0000000000000000 R09: 0000000000000000 [ 98.438505][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.438513][ T6830] R13: 00007f1898e16038 R14: 00007f1898e15fa0 R15: 00007fff128b6398 [ 98.438536][ T6830] [ 98.898351][ T6855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.301'. [ 99.059170][ T6850] syzkaller0: entered promiscuous mode [ 99.094314][ T6850] syzkaller0: entered allmulticast mode [ 99.388388][ T6876] tipc: Invalid UDP bearer configuration [ 99.388437][ T6876] tipc: Enabling of bearer rejected, failed to enable media [ 99.402956][ T5633] Bluetooth: hci4: command tx timeout [ 99.467771][ T6882] netlink: 'syz.4.315': attribute type 2 has an invalid length. [ 99.504515][ T6885] netlink: 'syz.4.315': attribute type 2 has an invalid length. [ 99.574082][ T6889] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 99.666444][ T6897] netlink: 204 bytes leftover after parsing attributes in process `syz.0.318'. [ 99.779229][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 100.064432][ T6915] syzkaller0: entered promiscuous mode [ 100.089145][ T6915] syzkaller0: entered allmulticast mode [ 100.133834][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.326522][ T6928] bond1 (unregistering): Released all slaves [ 100.334470][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 100.439432][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 100.544222][ T6938] bridge2: port 1(vlan2) entered blocking state [ 100.560839][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 100.569874][ T6938] bridge2: port 1(vlan2) entered disabled state [ 100.587294][ T6938] vlan2: entered allmulticast mode [ 100.592584][ T6938] bridge2: entered allmulticast mode [ 100.602041][ T6938] vlan2: left allmulticast mode [ 100.619451][ T6938] bridge2: left allmulticast mode [ 100.631341][ T6947] netlink: 204 bytes leftover after parsing attributes in process `syz.4.331'. [ 100.790046][ T6959] net_ratelimit: 24 callbacks suppressed [ 100.790085][ T6959] openvswitch: netlink: Flow actions attr not present in new flow. [ 101.019622][ T6975] syzkaller0: entered promiscuous mode [ 101.025552][ T6975] syzkaller0: entered allmulticast mode [ 101.112312][ T6977] Cannot find add_set index 0 as target [ 101.807346][ T6994] bridge2: port 1(vlan2) entered blocking state [ 101.814040][ T6994] bridge2: port 1(vlan2) entered disabled state [ 101.820386][ T6994] vlan2: entered allmulticast mode [ 101.826055][ T6994] bridge2: entered allmulticast mode [ 101.833149][ T6994] vlan2: left allmulticast mode [ 101.837992][ T6994] bridge2: left allmulticast mode [ 101.931009][ T6996] openvswitch: netlink: Flow actions attr not present in new flow. [ 103.583936][ T6945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.632086][ T7006] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 103.794079][ T7011] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 103.803227][ T7010] __nla_validate_parse: 3 callbacks suppressed [ 103.803241][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 103.815003][ T7015] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.350'. [ 103.843786][ T7015] netlink: Conntrack attr has 4 unknown bytes [ 103.873962][ T7011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.949845][ T7018] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 103.979600][ T7019] netlink: 52 bytes leftover after parsing attributes in process `syz.0.348'. [ 104.025787][ T29] audit: type=1804 audit(1779970666.260:2): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.349" name="/newroot/91/cgroup.controllers" dev="tmpfs" ino=477 res=1 errno=0 [ 104.050751][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 104.069428][ T29] audit: type=1800 audit(1779970666.270:3): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.349" name="cgroup.controllers" dev="tmpfs" ino=477 res=0 errno=0 [ 104.224590][ T7036] openvswitch: netlink: Flow actions attr not present in new flow. [ 104.265550][ T7029] netlink: 256 bytes leftover after parsing attributes in process `syz.4.354'. [ 104.274986][ T7034] netlink: 'syz.3.355': attribute type 3 has an invalid length. [ 104.655551][ T7060] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 104.719097][ T7062] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.364'. [ 104.735335][ T7064] netlink: 204 bytes leftover after parsing attributes in process `syz.1.367'. [ 104.762495][ T7062] netlink: Conntrack attr has 4 unknown bytes [ 104.857304][ T7075] openvswitch: netlink: Flow actions attr not present in new flow. [ 104.978505][ T7080] syzkaller0: entered promiscuous mode [ 104.980860][ T7085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.993647][ T7080] syzkaller0: entered allmulticast mode [ 105.050284][ T7091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.373'. [ 105.251129][ T7099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.376'. [ 105.265477][ T7100] netlink: 'syz.0.377': attribute type 3 has an invalid length. [ 105.365164][ T7106] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.379'. [ 105.509773][ T7112] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.753018][ T7124] syzkaller0: entered promiscuous mode [ 105.762275][ T7124] syzkaller0: entered allmulticast mode [ 106.043320][ T7141] netlink: 'syz.0.394': attribute type 2 has an invalid length. [ 106.056099][ T7143] sctp: [Deprecated]: syz.3.396 (pid 7143) Use of int in max_burst socket option. [ 106.056099][ T7143] Use struct sctp_assoc_value instead [ 106.077684][ T7143] netlink: 'syz.3.396': attribute type 10 has an invalid length. [ 106.096326][ T7143] ip6tnl1: entered allmulticast mode [ 106.137013][ T7148] Cannot find add_set index 0 as target [ 106.154711][ T7148] trusted_key: syz.0.397 sent an empty control message without MSG_MORE. [ 106.196857][ T7150] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 106.218847][ T7150] netlink: 'syz.3.398': attribute type 3 has an invalid length. [ 106.823918][ T7177] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.550984][ T7213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.602546][ T7206] bridge2: entered allmulticast mode [ 107.733132][ T7219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.772111][ T7219] bond1: (slave bond2): Enslaving as an active interface with an up link [ 107.862421][ T7251] xt_cgroup: invalid path, errno=-2 [ 109.154641][ T7289] __nla_validate_parse: 23 callbacks suppressed [ 109.154657][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 109.202828][ T7290] netlink: 'syz.4.443': attribute type 5 has an invalid length. [ 109.238107][ T7290] netlink: 140 bytes leftover after parsing attributes in process `syz.4.443'. [ 109.417009][ T7296] netlink: 56 bytes leftover after parsing attributes in process `syz.3.445'. [ 109.538888][ T7299] block nbd0: Unsupported socket: should be TCP or UNIX. [ 109.573723][ T7299] x_tables: duplicate underflow at hook 3 [ 109.604122][ T7299] TCP: TCP_TX_DELAY enabled [ 109.842217][ T7309] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.450'. [ 109.870283][ T7309] netlink: ct family unspecified [ 110.028346][ T7319] netlink: 'syz.4.454': attribute type 49 has an invalid length. [ 110.117683][ T7319] ip6gretap0: entered promiscuous mode [ 110.131421][ T7319] ip6gretap0: entered allmulticast mode [ 110.322690][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 110.602822][ T7333] syzkaller1: entered promiscuous mode [ 110.627370][ T7333] syzkaller1: entered allmulticast mode [ 110.684057][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 110.717224][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.795846][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.907479][ T7348] netlink: 'syz.3.460': attribute type 11 has an invalid length. [ 110.987982][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 111.142606][ T7357] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.463'. [ 111.160508][ T7359] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.464'. [ 111.172186][ T7357] netlink: ct family unspecified [ 111.379808][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 111.417811][ T7364] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 111.435984][ T7364] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 111.595619][ T7375] FAULT_INJECTION: forcing a failure. [ 111.595619][ T7375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.621633][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.4.470 Not tainted syzkaller #0 PREEMPT(full) [ 111.621656][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.621664][ T7375] Call Trace: [ 111.621671][ T7375] [ 111.621678][ T7375] dump_stack_lvl+0xe8/0x150 [ 111.621701][ T7375] should_fail_ex+0x412/0x560 [ 111.621723][ T7375] _copy_from_iter+0x1d3/0x1670 [ 111.621744][ T7375] ? rcu_is_watching+0x15/0xb0 [ 111.621767][ T7375] ? __pfx__copy_from_iter+0x10/0x10 [ 111.621791][ T7375] ? netlink_sendmsg+0x650/0xb40 [ 111.621811][ T7375] ? skb_put+0x11b/0x210 [ 111.621835][ T7375] netlink_sendmsg+0x6c0/0xb40 [ 111.621863][ T7375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.621887][ T7375] ? aa_sock_msg_perm+0xf1/0x1b0 [ 111.621910][ T7375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.621934][ T7375] ____sys_sendmsg+0x972/0x9f0 [ 111.621955][ T7375] ? __might_fault+0xaf/0x130 [ 111.621980][ T7375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.622018][ T7375] ? import_iovec+0x73/0xa0 [ 111.622039][ T7375] ___sys_sendmsg+0x2a5/0x360 [ 111.622059][ T7375] ? __lock_acquire+0x6b5/0x2cf0 [ 111.622079][ T7375] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.622134][ T7375] ? __fget_files+0x2a/0x420 [ 111.622151][ T7375] ? __fget_files+0x3a0/0x420 [ 111.622177][ T7375] __x64_sys_sendmsg+0x1bd/0x2a0 [ 111.622201][ T7375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.622232][ T7375] ? __pfx_ksys_write+0x10/0x10 [ 111.622261][ T7375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.622278][ T7375] do_syscall_64+0x174/0xf80 [ 111.622299][ T7375] ? trace_irq_disable+0x3b/0x140 [ 111.622320][ T7375] ? clear_bhb_loop+0x40/0x90 [ 111.622339][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.622354][ T7375] RIP: 0033:0x7fcca779ce59 [ 111.622369][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.622380][ T7375] RSP: 002b:00007fcca85be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.622397][ T7375] RAX: ffffffffffffffda RBX: 00007fcca7a15fa0 RCX: 00007fcca779ce59 [ 111.622408][ T7375] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 111.622417][ T7375] RBP: 00007fcca85be090 R08: 0000000000000000 R09: 0000000000000000 [ 111.622426][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.622434][ T7375] R13: 00007fcca7a16038 R14: 00007fcca7a15fa0 R15: 00007ffe2b1fc6b8 [ 111.622461][ T7375] [ 111.878839][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.144498][ T7394] lo: entered allmulticast mode [ 112.187343][ T7394] tunl0: entered allmulticast mode [ 112.189650][ T7396] netlink: ct family unspecified [ 112.217811][ T7394] gre0: entered allmulticast mode [ 112.242288][ T7394] gretap0: entered allmulticast mode [ 112.301825][ T7394] erspan0: entered allmulticast mode [ 112.349329][ T7394] ip_vti0: entered allmulticast mode [ 112.383327][ T7394] ip6_vti0: entered allmulticast mode [ 112.426551][ T7394] sit0: entered allmulticast mode [ 112.456745][ T7394] ip6tnl0: entered allmulticast mode [ 112.475156][ T7394] ip6gre0: entered allmulticast mode [ 112.497311][ T7394] syz_tun: entered allmulticast mode [ 112.522083][ T7394] bridge0: entered allmulticast mode [ 112.559680][ T7394] vcan0: entered allmulticast mode [ 112.579901][ T7394] bond0: entered allmulticast mode [ 112.585839][ T7394] bond_slave_0: entered allmulticast mode [ 112.597575][ T7394] bond_slave_1: entered allmulticast mode [ 112.611513][ T7394] team0: entered allmulticast mode [ 112.616412][ T7419] FAULT_INJECTION: forcing a failure. [ 112.616412][ T7419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.617818][ T7394] team_slave_0: entered allmulticast mode [ 112.638820][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: syz.2.483 Not tainted syzkaller #0 PREEMPT(full) [ 112.638840][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.638849][ T7419] Call Trace: [ 112.638856][ T7419] [ 112.638863][ T7419] dump_stack_lvl+0xe8/0x150 [ 112.638886][ T7419] should_fail_ex+0x412/0x560 [ 112.638909][ T7419] _copy_from_iter+0x1d3/0x1670 [ 112.638930][ T7419] ? rcu_is_watching+0x15/0xb0 [ 112.638960][ T7419] ? __pfx__copy_from_iter+0x10/0x10 [ 112.638984][ T7419] ? netlink_sendmsg+0x650/0xb40 [ 112.639007][ T7419] ? skb_put+0x11b/0x210 [ 112.639031][ T7419] netlink_sendmsg+0x6c0/0xb40 [ 112.639060][ T7419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.639084][ T7419] ? aa_sock_msg_perm+0xf1/0x1b0 [ 112.639106][ T7419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.639129][ T7419] ____sys_sendmsg+0x972/0x9f0 [ 112.639151][ T7419] ? __might_fault+0xaf/0x130 [ 112.639177][ T7419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.639206][ T7419] ? import_iovec+0x73/0xa0 [ 112.639227][ T7419] ___sys_sendmsg+0x2a5/0x360 [ 112.639245][ T7419] ? __lock_acquire+0x6b5/0x2cf0 [ 112.639266][ T7419] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.639320][ T7419] ? __fget_files+0x2a/0x420 [ 112.639337][ T7419] ? __fget_files+0x3a0/0x420 [ 112.639364][ T7419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 112.639388][ T7419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.639418][ T7419] ? __pfx_ksys_write+0x10/0x10 [ 112.639447][ T7419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.639464][ T7419] do_syscall_64+0x174/0xf80 [ 112.639486][ T7419] ? trace_irq_disable+0x3b/0x140 [ 112.639508][ T7419] ? clear_bhb_loop+0x40/0x90 [ 112.639527][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.639542][ T7419] RIP: 0033:0x7ffbd739ce59 [ 112.639557][ T7419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.639569][ T7419] RSP: 002b:00007ffbd81e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.639585][ T7419] RAX: ffffffffffffffda RBX: 00007ffbd7615fa0 RCX: 00007ffbd739ce59 [ 112.639595][ T7419] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 112.639605][ T7419] RBP: 00007ffbd81e3090 R08: 0000000000000000 R09: 0000000000000000 [ 112.639614][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.639622][ T7419] R13: 00007ffbd7616038 R14: 00007ffbd7615fa0 R15: 00007ffc64d96218 [ 112.639647][ T7419] [ 112.880996][ T7394] team_slave_1: entered allmulticast mode [ 112.891084][ T7394] dummy0: entered allmulticast mode [ 112.903379][ T7394] nlmon0: entered allmulticast mode [ 112.910375][ T7394] batadv0: entered allmulticast mode [ 112.927533][ T7394] vxcan0: entered allmulticast mode [ 112.927707][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.934026][ T7394] vxcan1: entered allmulticast mode [ 112.951664][ T7394] veth0: entered allmulticast mode [ 112.960091][ T7394] veth1: entered allmulticast mode [ 112.976136][ T7394] wg0: entered allmulticast mode [ 112.989305][ T7394] wg1: entered allmulticast mode [ 113.010599][ T7394] wg2: entered allmulticast mode [ 113.017672][ T7394] veth0_to_bridge: entered allmulticast mode [ 113.034804][ T7394] bridge_slave_0: left promiscuous mode [ 113.042134][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.062205][ T7394] veth1_to_bridge: entered allmulticast mode [ 113.081958][ T7394] bridge_slave_1: left promiscuous mode [ 113.094043][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.109105][ T7394] veth0_to_bond: entered allmulticast mode [ 113.118031][ T7394] bond0: (slave bond_slave_0): Releasing backup interface [ 113.126705][ T7394] veth1_to_bond: entered allmulticast mode [ 113.136927][ T7394] bond0: (slave bond_slave_1): Releasing backup interface [ 113.145474][ T7394] veth0_to_team: entered allmulticast mode [ 113.156235][ T7394] team0: Port device team_slave_0 removed [ 113.162426][ T7394] veth1_to_team: entered allmulticast mode [ 113.171728][ T7394] team0: Port device team_slave_1 removed [ 113.177893][ T7394] veth0_to_batadv: entered allmulticast mode [ 113.186221][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.193878][ T7394] batadv_slave_0: entered allmulticast mode [ 113.201396][ T7394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.209569][ T7394] veth1_to_batadv: entered allmulticast mode [ 113.219228][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.227363][ T7394] batadv_slave_1: entered allmulticast mode [ 113.235332][ T7394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.243226][ T7394] xfrm0: entered allmulticast mode [ 113.249700][ T7394] veth0_to_hsr: entered allmulticast mode [ 113.258303][ T7394] hsr_slave_0: entered allmulticast mode [ 113.265989][ T7394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.296482][ T29] audit: type=1800 audit(1779970675.540:4): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.475" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 113.316691][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.320166][ T7398] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 113.359796][ T7398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 113.389198][ T7398] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 113.454840][ T7435] openvswitch: netlink: Key type 30 is not supported [ 113.512124][ T7439] sctp: [Deprecated]: syz.4.485 (pid 7439) Use of int in max_burst socket option deprecated. [ 113.512124][ T7439] Use struct sctp_assoc_value instead [ 113.641110][ T7445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.782588][ T7445] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 113.818988][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.826208][ T7458] bridge0: port 2(bridge_slave_1) entered listening state [ 113.833778][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.840945][ T7458] bridge0: port 1(bridge_slave_0) entered listening state [ 113.950579][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.204989][ T7481] __nla_validate_parse: 10 callbacks suppressed [ 114.205005][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 114.287231][ T7481] netlink: 'syz.0.497': attribute type 3 has an invalid length. [ 114.463624][ T7496] IPVS: set_ctl: invalid protocol: 12 172.30.0.2:20004 [ 114.497939][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'. [ 114.958439][ T7529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.990533][ T91] net_ratelimit: 2 callbacks suppressed [ 114.990548][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.130475][ T7524] batman_adv: batadv0: Adding interface: dummy0 [ 115.150646][ T7524] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.234601][ T7524] batman_adv: batadv0: Interface activated: dummy0 [ 115.267202][ T7528] batadv0: mtu less than device minimum [ 115.284205][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.295980][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.307686][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.319385][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.331086][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.342800][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.354481][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.366176][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.617789][ T7546] netlink: 204 bytes leftover after parsing attributes in process `syz.4.510'. [ 115.688326][ T7549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 115.732540][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'. [ 116.134815][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 116.256327][ T7567] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 116.311516][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 116.520844][ T7588] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 116.811097][ T7596] xt_hashlimit: size too large, truncated to 1048576 [ 116.876396][ T7603] netlink: 44 bytes leftover after parsing attributes in process `syz.3.527'. [ 116.935495][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 117.127191][ T7618] tc_dump_action: action bad kind [ 117.261195][ T7625] netlink: 72 bytes leftover after parsing attributes in process `syz.0.532'. [ 117.713251][ T7632] nbd: device at index 64 is going down [ 117.741618][ T7635] nbd: device at index 64 is going down [ 117.997899][ T5643] udevd[5643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 118.000855][ T7643] dummy0: left allmulticast mode [ 118.046593][ T7643] batman_adv: batadv0: Adding interface: dummy0 [ 118.059721][ T7643] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.111391][ T7643] batman_adv: batadv0: Interface activated: dummy0 [ 118.736624][ T7684] team0: No ports can be present during mode change [ 118.747029][ T1182] wlan1: Trigger new scan to find an IBSS to join [ 119.204300][ T7719] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 119.228583][ T7719] Cannot find set identified by id 3 to match [ 119.386619][ T7726] xt_hashlimit: size too large, truncated to 1048576 [ 119.526177][ T7737] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 119.551989][ T7737] bond4 (unregistering): Released all slaves [ 120.011809][ T7772] gretap0: entered promiscuous mode [ 120.024661][ T5891] IPVS: starting estimator thread 0... [ 120.031144][ T7772] vlan2: entered promiscuous mode [ 120.112593][ T7781] netlink: 'syz.2.581': attribute type 25 has an invalid length. [ 120.125539][ T7774] IPVS: using max 28 ests per chain, 67200 per kthread [ 120.152401][ T7781] __nla_validate_parse: 8 callbacks suppressed [ 120.152415][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 120.198621][ T5891] net_ratelimit: 41 callbacks suppressed [ 120.198635][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.279592][ T183] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.290796][ T7781] netlink: 'syz.2.581': attribute type 25 has an invalid length. [ 120.305197][ T183] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.319493][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 120.325150][ T183] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.349248][ T7793] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 120.357495][ T183] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.371945][ T7793] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 120.396096][ T7795] macvtap1: entered promiscuous mode [ 120.411523][ T7795] team0: entered promiscuous mode [ 120.419822][ T7795] team_slave_0: entered promiscuous mode [ 120.434200][ T7795] team_slave_1: entered promiscuous mode [ 120.447311][ T7795] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 120.477951][ T7795] team0: Device macvtap1 is already an upper device of the team interface [ 120.494043][ T7795] team0: left promiscuous mode [ 120.522534][ T5731] team_slave_0: left promiscuous mode [ 120.528529][ T5731] team_slave_1: left promiscuous mode [ 120.744203][ T7810] batman_adv: batadv0: Interface deactivated: dummy0 [ 120.757844][ T7810] batman_adv: batadv0: Removing interface: dummy0 [ 120.799148][ T7810] bridge_slave_0: left allmulticast mode [ 120.807537][ T7810] bridge_slave_0: left promiscuous mode [ 120.815978][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.840806][ T7810] bridge_slave_1: left allmulticast mode [ 120.853674][ T7810] bridge_slave_1: left promiscuous mode [ 120.859720][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.877374][ T7810] bond3: (slave veth0_to_bond): Releasing backup interface [ 120.897136][ T7810] bond0: (slave bond_slave_0): Releasing backup interface [ 120.909361][ T7810] bond0: (slave bond_slave_1): Releasing backup interface [ 120.927162][ T7810] team0: Port device team_slave_0 removed [ 120.939563][ T7810] team0: Port device team_slave_1 removed [ 120.947359][ T7810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.956642][ T7810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.980903][ T7810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.009378][ T7810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.026280][ T7810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.066375][ T7826] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.238115][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.275444][ T7841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.402585][ T7833] sock: sock_set_timeout: `syz.1.595' (pid 7833) tries to set negative timeout [ 121.524498][ T7851] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 121.704562][ T1024] wlan1: Trigger new scan to find an IBSS to join [ 121.736832][ T7858] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 121.894393][ T7868] geneve1: entered promiscuous mode [ 121.914620][ T7868] geneve1: entered allmulticast mode [ 121.932910][ T7874] netlink: 204 bytes leftover after parsing attributes in process `syz.3.605'. [ 122.069455][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 122.315039][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'. [ 122.402598][ T7902] netem: incorrect gi model size [ 122.428032][ T7902] netem: change failed [ 122.530721][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 123.142443][ T7928] bridge3: entered promiscuous mode [ 123.165523][ T7928] bridge3: entered allmulticast mode [ 123.291987][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 123.722018][ T7959] netlink: 204 bytes leftover after parsing attributes in process `syz.1.629'. [ 123.794717][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 123.891242][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.633'. [ 123.935317][ T7970] bond0: ARP target 8.4.0.0 is already present [ 123.942630][ T7964] FAULT_INJECTION: forcing a failure. [ 123.942630][ T7964] name failslab, interval 1, probability 0, space 0, times 0 [ 123.959854][ T7970] bond0: option arp_ip_target: invalid value (1032) [ 123.972879][ T7964] CPU: 0 UID: 0 PID: 7964 Comm: syz.0.631 Not tainted syzkaller #0 PREEMPT(full) [ 123.972900][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.972909][ T7964] Call Trace: [ 123.972916][ T7964] [ 123.972923][ T7964] dump_stack_lvl+0xe8/0x150 [ 123.972956][ T7964] should_fail_ex+0x412/0x560 [ 123.972978][ T7964] should_failslab+0xa8/0x100 [ 123.972993][ T7964] ? skb_clone+0x212/0x3a0 [ 123.973014][ T7964] kmem_cache_alloc_noprof+0x87/0x650 [ 123.973043][ T7964] skb_clone+0x212/0x3a0 [ 123.973068][ T7964] __netlink_deliver_tap+0x404/0x850 [ 123.973105][ T7964] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.973126][ T7964] netlink_deliver_tap+0x19c/0x1b0 [ 123.973147][ T7964] netlink_sendskb+0x68/0x140 [ 123.973169][ T7964] netlink_rcv_skb+0x2b6/0x4b0 [ 123.973190][ T7964] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.973211][ T7964] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.973243][ T7964] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.973263][ T7964] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.973289][ T7964] netlink_unicast+0x75c/0x8e0 [ 123.973318][ T7964] netlink_sendmsg+0x813/0xb40 [ 123.973348][ T7964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.973372][ T7964] ? aa_sock_msg_perm+0xf1/0x1b0 [ 123.973396][ T7964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.973420][ T7964] ____sys_sendmsg+0x972/0x9f0 [ 123.973441][ T7964] ? __might_fault+0xaf/0x130 [ 123.973473][ T7964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.973503][ T7964] ? import_iovec+0x73/0xa0 [ 123.973526][ T7964] ___sys_sendmsg+0x2a5/0x360 [ 123.973546][ T7964] ? __lock_acquire+0x6b5/0x2cf0 [ 123.973567][ T7964] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.973623][ T7964] ? __fget_files+0x2a/0x420 [ 123.973640][ T7964] ? __fget_files+0x3a0/0x420 [ 123.973669][ T7964] __x64_sys_sendmsg+0x1bd/0x2a0 [ 123.973693][ T7964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.973724][ T7964] ? __pfx_ksys_write+0x10/0x10 [ 123.973754][ T7964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.973771][ T7964] do_syscall_64+0x174/0xf80 [ 123.973791][ T7964] ? trace_irq_disable+0x3b/0x140 [ 123.973813][ T7964] ? clear_bhb_loop+0x40/0x90 [ 123.973832][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.973846][ T7964] RIP: 0033:0x7f5e3419ce59 [ 123.973867][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.973879][ T7964] RSP: 002b:00007f5e3502e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.973900][ T7964] RAX: ffffffffffffffda RBX: 00007f5e34415fa0 RCX: 00007f5e3419ce59 [ 123.973910][ T7964] RDX: 0000000020004844 RSI: 0000200000000000 RDI: 0000000000000006 [ 123.973920][ T7964] RBP: 00007f5e3502e090 R08: 0000000000000000 R09: 0000000000000000 [ 123.973929][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.973938][ T7964] R13: 00007f5e34416038 R14: 00007f5e34415fa0 R15: 00007ffe1fd83168 [ 123.973966][ T7964] [ 124.310100][ T7969] netlink: 'syz.1.632': attribute type 8 has an invalid length. [ 124.558148][ T7986] syzkaller0: entered promiscuous mode [ 124.564337][ T7986] syzkaller0: entered allmulticast mode [ 124.571305][ T7987] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 124.635584][ T7992] openvswitch: netlink: Key type 30 is not supported [ 124.744295][ T1182] wlan1: Trigger new scan to find an IBSS to join [ 125.049823][ T8021] netlink: 'syz.2.647': attribute type 1 has an invalid length. [ 125.260944][ T8028] IPVS: set_ctl: invalid protocol: 20551 172.20.20.170:0 [ 125.356371][ T8032] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 125.454755][ T8045] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.465426][ T8045] openvswitch: netlink: Key type 30 is not supported [ 125.489414][ T8036] netlink: 'syz.3.650': attribute type 2 has an invalid length. [ 125.658027][ T8042] wlan1: Creating new IBSS network, BSSID 66:f2:9b:3f:9c:47 [ 125.697385][ T8051] __nla_validate_parse: 3 callbacks suppressed [ 125.697401][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 125.728294][ T8053] netlink: 'syz.4.654': attribute type 1 has an invalid length. [ 125.756923][ T8051] bridge1: port 1(vlan2) entered blocking state [ 125.787523][ T8051] bridge1: port 1(vlan2) entered disabled state [ 125.811929][ T8051] vlan2: entered allmulticast mode [ 125.828918][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 125.839438][ T8051] bridge1: entered allmulticast mode [ 125.860869][ T8061] netlink: 'syz.3.658': attribute type 39 has an invalid length. [ 125.870305][ T8051] vlan2: left allmulticast mode [ 125.883607][ T8051] bridge1: left allmulticast mode [ 126.001930][ T8062] FAULT_INJECTION: forcing a failure. [ 126.001930][ T8062] name failslab, interval 1, probability 0, space 0, times 0 [ 126.049365][ T8062] CPU: 0 UID: 0 PID: 8062 Comm: syz.2.659 Not tainted syzkaller #0 PREEMPT(full) [ 126.049385][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.049394][ T8062] Call Trace: [ 126.049401][ T8062] [ 126.049408][ T8062] dump_stack_lvl+0xe8/0x150 [ 126.049433][ T8062] should_fail_ex+0x412/0x560 [ 126.049455][ T8062] should_failslab+0xa8/0x100 [ 126.049470][ T8062] ? skb_clone+0x212/0x3a0 [ 126.049492][ T8062] kmem_cache_alloc_noprof+0x87/0x650 [ 126.049521][ T8062] skb_clone+0x212/0x3a0 [ 126.049547][ T8062] __netlink_deliver_tap+0x404/0x850 [ 126.049579][ T8062] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.049600][ T8062] netlink_deliver_tap+0x19c/0x1b0 [ 126.049622][ T8062] netlink_sendskb+0x68/0x140 [ 126.049644][ T8062] netlink_rcv_skb+0x2b6/0x4b0 [ 126.049665][ T8062] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.049687][ T8062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.049718][ T8062] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.049738][ T8062] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.049763][ T8062] netlink_unicast+0x75c/0x8e0 [ 126.049794][ T8062] netlink_sendmsg+0x813/0xb40 [ 126.049823][ T8062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.049847][ T8062] ? aa_sock_msg_perm+0xf1/0x1b0 [ 126.049870][ T8062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.049893][ T8062] ____sys_sendmsg+0x972/0x9f0 [ 126.049914][ T8062] ? __might_fault+0xaf/0x130 [ 126.049947][ T8062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.049977][ T8062] ? import_iovec+0x73/0xa0 [ 126.049998][ T8062] ___sys_sendmsg+0x2a5/0x360 [ 126.050018][ T8062] ? __lock_acquire+0x6b5/0x2cf0 [ 126.050039][ T8062] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.050095][ T8062] ? __fget_files+0x2a/0x420 [ 126.050113][ T8062] ? __fget_files+0x3a0/0x420 [ 126.050141][ T8062] __x64_sys_sendmsg+0x1bd/0x2a0 [ 126.050166][ T8062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.050196][ T8062] ? __pfx_ksys_write+0x10/0x10 [ 126.050225][ T8062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.050248][ T8062] do_syscall_64+0x174/0xf80 [ 126.050270][ T8062] ? trace_irq_disable+0x3b/0x140 [ 126.050292][ T8062] ? clear_bhb_loop+0x40/0x90 [ 126.050312][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.050330][ T8062] RIP: 0033:0x7ffbd739ce59 [ 126.050346][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.050358][ T8062] RSP: 002b:00007ffbd81e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.050374][ T8062] RAX: ffffffffffffffda RBX: 00007ffbd7615fa0 RCX: 00007ffbd739ce59 [ 126.050385][ T8062] RDX: 0000000020004844 RSI: 0000200000000000 RDI: 0000000000000006 [ 126.050395][ T8062] RBP: 00007ffbd81e3090 R08: 0000000000000000 R09: 0000000000000000 [ 126.050404][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.050412][ T8062] R13: 00007ffbd7616038 R14: 00007ffbd7615fa0 R15: 00007ffc64d96218 [ 126.050440][ T8062] [ 126.068726][ T8074] netlink: 96 bytes leftover after parsing attributes in process `syz.4.662'. [ 126.370691][ T8074] 8021q: VLANs not supported on gre0 [ 126.982111][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 127.059804][ T8112] bridge2: port 1(vlan2) entered blocking state [ 127.074540][ T8112] bridge2: port 1(vlan2) entered disabled state [ 127.097117][ T8112] vlan2: entered allmulticast mode [ 127.120357][ T8115] netlink: 'syz.4.675': attribute type 13 has an invalid length. [ 127.129034][ T8112] bridge2: entered allmulticast mode [ 127.155226][ T8112] vlan2: left allmulticast mode [ 127.169564][ T8112] bridge2: left allmulticast mode [ 127.227714][ T8115] gretap0: refused to change device tx_queue_len [ 127.251550][ T8115] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 128.266092][ T8175] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 128.395829][ T8175] bond2: entered promiscuous mode [ 128.426176][ T8175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.708997][ T8191] vlan2: entered allmulticast mode [ 128.720042][ T8191] bond0: entered allmulticast mode [ 128.726307][ T8191] bond_slave_0: entered allmulticast mode [ 128.734317][ T8191] bond_slave_1: entered allmulticast mode [ 128.868254][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.696'. [ 129.039272][ T8214] tipc: Started in network mode [ 129.058258][ T8214] tipc: Node identity 367558cda1c2, cluster identity 4711 [ 129.099148][ T8214] tipc: Enabled bearer , priority 0 [ 129.130111][ T8217] syzkaller0: entered promiscuous mode [ 129.155641][ T8217] syzkaller0: entered allmulticast mode [ 129.210341][ T8214] tipc: Resetting bearer [ 129.252436][ T8212] tipc: Resetting bearer [ 129.267237][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.702'. [ 129.312678][ T8212] tipc: Disabling bearer [ 129.591751][ T8252] Unknown options in mask b7f2 [ 129.616889][ T29] audit: type=1804 audit(1779970691.860:5): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.707" name="/newroot/152/cgroup.controllers" dev="tmpfs" ino=791 res=1 errno=0 [ 129.705481][ T29] audit: type=1800 audit(1779970691.880:6): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.707" name="cgroup.controllers" dev="tmpfs" ino=791 res=0 errno=0 [ 129.771798][ T8263] hsr0: entered allmulticast mode [ 129.789998][ T8263] hsr_slave_0: entered allmulticast mode [ 129.808218][ T8263] hsr_slave_1: entered allmulticast mode [ 129.867587][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.710'. [ 129.890199][ T8269] netlink: 244 bytes leftover after parsing attributes in process `syz.1.710'. [ 130.498992][ T8278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.713'. [ 130.541374][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 130.636771][ T8282] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 130.708133][ T8282] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 130.761503][ T8291] __nla_validate_parse: 1 callbacks suppressed [ 130.761519][ T8291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.718'. [ 130.780123][ T8282] gretap1: entered promiscuous mode [ 130.798327][ T8282] gretap1: entered allmulticast mode [ 130.989630][ T8300] IPVS: Error connecting to the multicast addr [ 131.020927][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 131.063727][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 131.106798][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 131.130998][ T8320] netlink: 1 bytes leftover after parsing attributes in process `syz.2.725'. [ 131.144102][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 131.153449][ T8320] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 131.163341][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 131.181029][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 131.205697][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 131.228019][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 131.712004][ T8347] Cannot find add_set index 0 as target [ 131.835636][ T8350] syzkaller0: entered promiscuous mode [ 131.857472][ T8350] syzkaller0: entered allmulticast mode [ 132.161286][ T8369] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 132.664973][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.674477][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.722092][ T8384] syzkaller0: entered promiscuous mode [ 132.729690][ T8384] syzkaller0: entered allmulticast mode [ 133.057344][ T8406] netlink: ct family unspecified [ 133.064290][ T8410] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 133.363702][ T8427] syzkaller0: entered promiscuous mode [ 133.378289][ T8427] syzkaller0: entered allmulticast mode [ 133.743364][ T8446] SET target dimension over the limit! [ 133.825273][ T8450] syzkaller0: entered promiscuous mode [ 133.850826][ T8450] syzkaller0: entered allmulticast mode [ 134.256897][ T8479] netlink: 'syz.1.778': attribute type 21 has an invalid length. [ 134.304536][ T8479] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.392180][ T8490] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 134.468893][ T8493] Cannot find set identified by id 3 to match [ 134.865455][ T8511] syzkaller0: entered promiscuous mode [ 134.871309][ T8511] syzkaller0: entered allmulticast mode [ 135.079752][ T8525] sit0: entered promiscuous mode [ 135.094607][ T8525] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 135.097807][ T8527] netlink: 'syz.1.793': attribute type 23 has an invalid length. [ 135.113983][ T8526] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 135.154280][ T29] audit: type=1800 audit(1779970697.400:7): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.794" name="memory.events" dev="tmpfs" ino=852 res=0 errno=0 [ 135.971566][ T8571] syzkaller0: entered promiscuous mode [ 135.996768][ T8571] syzkaller0: entered allmulticast mode [ 136.377855][ T8586] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 136.455864][ T8586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.487606][ T8586] __nla_validate_parse: 33 callbacks suppressed [ 136.487620][ T8586] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.807'. [ 136.759284][ T8600] netlink: 'syz.4.810': attribute type 4 has an invalid length. [ 136.813947][ T8592] netlink: 'syz.4.810': attribute type 4 has an invalid length. [ 136.953328][ T8610] netlink: 'syz.3.815': attribute type 61 has an invalid length. [ 136.985322][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'. [ 137.160538][ T8619] FAULT_INJECTION: forcing a failure. [ 137.160538][ T8619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.196830][ T8619] CPU: 0 UID: 0 PID: 8619 Comm: syz.4.817 Not tainted syzkaller #0 PREEMPT(full) [ 137.196851][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.196860][ T8619] Call Trace: [ 137.196866][ T8619] [ 137.196873][ T8619] dump_stack_lvl+0xe8/0x150 [ 137.196895][ T8619] should_fail_ex+0x412/0x560 [ 137.196917][ T8619] _copy_to_user+0x31/0xb0 [ 137.196937][ T8619] simple_read_from_buffer+0xe1/0x170 [ 137.196963][ T8619] proc_fail_nth_read+0x1bb/0x230 [ 137.196984][ T8619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.197006][ T8619] ? rw_verify_area+0x2a6/0x4d0 [ 137.197025][ T8619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.197045][ T8619] vfs_read+0x20c/0xa70 [ 137.197067][ T8619] ? __pfx___mutex_lock+0x10/0x10 [ 137.197083][ T8619] ? __pfx_vfs_read+0x10/0x10 [ 137.197104][ T8619] ? __fget_files+0x2a/0x420 [ 137.197126][ T8619] ? __fget_files+0x3a0/0x420 [ 137.197143][ T8619] ? __fget_files+0x2a/0x420 [ 137.197168][ T8619] ksys_read+0x150/0x270 [ 137.197191][ T8619] ? __pfx_ksys_read+0x10/0x10 [ 137.197220][ T8619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.197237][ T8619] do_syscall_64+0x174/0xf80 [ 137.197266][ T8619] ? trace_irq_disable+0x3b/0x140 [ 137.197288][ T8619] ? clear_bhb_loop+0x40/0x90 [ 137.197307][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.197326][ T8619] RIP: 0033:0x7fcca775d68e [ 137.197342][ T8619] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.197354][ T8619] RSP: 002b:00007fcca85bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.197370][ T8619] RAX: ffffffffffffffda RBX: 00007fcca85be6c0 RCX: 00007fcca775d68e [ 137.197380][ T8619] RDX: 000000000000000f RSI: 00007fcca85be0a0 RDI: 0000000000000003 [ 137.197390][ T8619] RBP: 00007fcca85be090 R08: 0000000000000000 R09: 0000000000000000 [ 137.197398][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.197407][ T8619] R13: 00007fcca7a16038 R14: 00007fcca7a15fa0 R15: 00007ffe2b1fc6b8 [ 137.197435][ T8619] [ 137.932602][ T8635] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 137.968826][ T8635] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 137.988288][ T8635] gretap1: entered promiscuous mode [ 138.000898][ T8635] gretap1: entered allmulticast mode [ 138.283325][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 138.352941][ T8651] bridge4: port 1(vlan3) entered blocking state [ 138.359699][ T8651] bridge4: port 1(vlan3) entered disabled state [ 138.367360][ T8651] vlan3: entered allmulticast mode [ 138.372634][ T8651] bridge4: entered allmulticast mode [ 138.382070][ T8651] vlan3: left allmulticast mode [ 138.391330][ T8651] bridge4: left allmulticast mode [ 138.608227][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 138.792000][ T8672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.674249][ T8601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.839073][ T8683] Cannot find add_set index 0 as target [ 139.910235][ T8688] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 139.913877][ T8689] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 139.931828][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 139.980829][ T8688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.016973][ T8695] team0: Port device team_slave_0 removed [ 140.057645][ T8695] bond4: (slave team_slave_0): Enslaving as a backup interface with an up link [ 140.098863][ T8699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.115231][ T8690] bridge4: port 1(vlan2) entered blocking state [ 140.121875][ T8690] bridge4: port 1(vlan2) entered disabled state [ 140.132207][ T8690] vlan2: entered allmulticast mode [ 140.137721][ T8690] bridge4: entered allmulticast mode [ 140.148236][ T8690] vlan2: left allmulticast mode [ 140.163040][ T8690] bridge4: left allmulticast mode [ 140.191727][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.842'. [ 140.408797][ T8702] bond4: option lp_interval: invalid value (0) [ 140.449135][ T8702] bond4: option lp_interval: allowed values 1 - 2147483647 [ 140.521913][ T8702] bond4 (unregistering): Released all slaves [ 140.597625][ T8718] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 140.629703][ T8718] netlink: 'syz.1.850': attribute type 7 has an invalid length. [ 140.644625][ T8718] netlink: 'syz.1.850': attribute type 8 has an invalid length. [ 140.670580][ T8718] netlink: 208 bytes leftover after parsing attributes in process `syz.1.850'. [ 140.685761][ T8718] NCSI netlink: No device for ifindex 65584 [ 140.737731][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 140.793050][ T8729] Cannot find add_set index 0 as target [ 141.027643][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 141.159993][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 141.275377][ T8755] bridge3: port 1(vlan2) entered blocking state [ 141.282194][ T8755] bridge3: port 1(vlan2) entered disabled state [ 141.296512][ T8755] vlan2: entered allmulticast mode [ 141.307711][ T8755] bridge3: entered allmulticast mode [ 141.327020][ T8755] vlan2: left allmulticast mode [ 141.339522][ T8755] bridge3: left allmulticast mode [ 141.348028][ T8761] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 141.357053][ T8761] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 141.365324][ T8761] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 141.373663][ T8761] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 141.381653][ T8761] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 141.410957][ T8761] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 141.554571][ T8766] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 141.787705][ T8780] Cannot find add_set index 0 as target [ 141.992473][ T8790] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 142.050254][ T8783] __nla_validate_parse: 6 callbacks suppressed [ 142.050270][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 142.105869][ T8793] bond1: (slave geneve2): making interface the new active one [ 142.139285][ T8793] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 142.142185][ T8790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 142.159679][ T8035] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.177649][ T8035] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.187675][ T8035] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.220291][ T8790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.247108][ T8035] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.265307][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.874'. [ 142.609255][ T8836] netlink: 84 bytes leftover after parsing attributes in process `syz.4.884'. [ 142.720309][ T8843] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 143.056091][ T8865] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 143.069271][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'. [ 143.105336][ T8869] netem: change failed [ 143.131293][ T8870] netem: change failed [ 143.289781][ T8887] netlink: 128 bytes leftover after parsing attributes in process `syz.4.902'. [ 143.290825][ T8886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.901'. [ 143.470573][ T8893] xt_hashlimit: size too large, truncated to 1048576 [ 143.477620][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 143.516211][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 143.527258][ T29] audit: type=1800 audit(1779970705.770:8): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.904" name="memory.events" dev="tmpfs" ino=895 res=0 errno=0 [ 143.556776][ T29] audit: type=1804 audit(1779970705.800:9): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.904" name="/newroot/173/memory.events" dev="tmpfs" ino=895 res=1 errno=0 [ 143.695051][ T8905] Cannot find add_set index 2 as target [ 143.710202][ T8908] netlink: 204 bytes leftover after parsing attributes in process `syz.4.909'. [ 143.901095][ T8916] netlink: 'syz.2.913': attribute type 1 has an invalid length. [ 143.958667][ T8916] bond4: entered promiscuous mode [ 143.998274][ T8916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.054919][ T8916] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.067881][ T8916] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 144.079883][ T8916] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 144.113879][ T8918] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.126398][ T8918] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 144.185048][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 144.193290][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 144.274593][ T8933] xt_hashlimit: overflow, rate too high: 0 [ 144.407671][ T8943] veth1_macvtap: left promiscuous mode [ 144.413778][ T8943] macsec0: entered promiscuous mode [ 144.419132][ T8943] macsec0: entered allmulticast mode [ 144.516800][ T8950] veth1_macvtap: entered promiscuous mode [ 144.532882][ T8950] veth1_macvtap: entered allmulticast mode [ 144.551920][ T8950] macsec0: left promiscuous mode [ 144.561821][ T8950] macsec0: left allmulticast mode [ 144.574781][ T8950] veth1_macvtap: left allmulticast mode [ 144.671584][ T8954] syzkaller0: entered promiscuous mode [ 144.694062][ T8954] syzkaller0: entered allmulticast mode [ 144.890545][ T8964] syzkaller0: entered promiscuous mode [ 144.911043][ T8964] syzkaller0: entered allmulticast mode [ 145.242424][ T8996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.272528][ T9001] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000 [ 145.282103][ T9002] netlink: 'syz.0.933': attribute type 142 has an invalid length. [ 145.623816][ T9022] syzkaller0: entered promiscuous mode [ 145.638286][ T9022] syzkaller0: entered allmulticast mode [ 145.780502][ T9021] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 145.967806][ T9039] blkio.reset_stats is deprecated [ 146.106059][ T9050] vlan2: entered allmulticast mode [ 146.125236][ T9050] hsr0: entered allmulticast mode [ 146.143790][ T9050] hsr_slave_0: entered allmulticast mode [ 146.154250][ T9050] hsr_slave_1: entered allmulticast mode [ 146.219872][ T9053] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 146.239192][ T9053] bond2 (unregistering): Released all slaves [ 146.444490][ T9069] syzkaller1: entered promiscuous mode [ 146.453768][ T9069] syzkaller1: entered allmulticast mode [ 146.585790][ T9075] veth0: entered promiscuous mode [ 146.595322][ T9074] syzkaller0: entered promiscuous mode [ 146.601770][ T9074] syzkaller0: entered allmulticast mode [ 146.617149][ T9077] vlan2: entered allmulticast mode [ 146.622346][ T9077] hsr0: entered allmulticast mode [ 146.627607][ T9077] hsr_slave_1: entered allmulticast mode [ 146.676681][ T9078] veth0: left promiscuous mode [ 146.892610][ T9094] netlink: 'syz.0.960': attribute type 2 has an invalid length. [ 146.917253][ T9094] netlink: 'syz.0.960': attribute type 2 has an invalid length. [ 146.939344][ T9089] syzkaller0: entered promiscuous mode [ 146.961450][ T9089] syzkaller0: entered allmulticast mode [ 147.136236][ T9105] __nla_validate_parse: 16 callbacks suppressed [ 147.136254][ T9105] netlink: 204 bytes leftover after parsing attributes in process `syz.2.967'. [ 147.224190][ T9110] netlink: 72 bytes leftover after parsing attributes in process `syz.0.968'. [ 147.440477][ T9123] geneve2: entered promiscuous mode [ 147.450764][ T9126] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.973'. [ 147.460579][ T8042] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 54233 - 0 [ 147.460644][ T8042] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 54233 - 0 [ 147.460676][ T8042] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 54233 - 0 [ 147.611583][ T9132] tipc: Enabling of bearer rejected, failed to enable media [ 147.649711][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 147.680492][ T9135] xfrm1: entered allmulticast mode [ 147.693074][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.975'. [ 147.739449][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 147.755767][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 147.777205][ T9148] netlink: 68 bytes leftover after parsing attributes in process `syz.4.975'. [ 147.909573][ T9155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.978'. [ 147.962674][ T9159] netlink: 204 bytes leftover after parsing attributes in process `syz.2.980'. [ 148.546033][ T9188] syzkaller0: entered promiscuous mode [ 148.574375][ T9188] syzkaller0: entered allmulticast mode [ 148.586688][ T9199] netlink: 'syz.4.990': attribute type 10 has an invalid length. [ 149.255418][ T9239] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 149.667333][ T9231] bridge6: port 1(vlan2) entered blocking state [ 149.674953][ T9231] bridge6: port 1(vlan2) entered disabled state [ 149.681515][ T9231] vlan2: entered allmulticast mode [ 149.687471][ T9231] bridge6: entered allmulticast mode [ 149.702155][ T9231] vlan2: left allmulticast mode [ 149.721398][ T9231] bridge6: left allmulticast mode [ 149.844865][ T9239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.903336][ T9243] bond5: (slave veth0_to_bond): making interface the new active one [ 149.934418][ T9243] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 149.979907][ T9248] bond5: entered promiscuous mode [ 149.986264][ T9248] veth0_to_bond: entered promiscuous mode [ 149.992651][ T9248] bond5: entered allmulticast mode [ 149.998293][ T9248] veth0_to_bond: entered allmulticast mode [ 150.384101][ T9283] openvswitch: netlink: Missing key (keys=40, expected=80) [ 150.392685][ T9280] syzkaller0: entered promiscuous mode [ 150.406577][ T9280] syzkaller0: entered allmulticast mode [ 150.953861][ T9307] bridge4: port 1(vlan2) entered blocking state [ 150.978607][ T9307] bridge4: port 1(vlan2) entered disabled state [ 151.002074][ T9307] vlan2: entered allmulticast mode [ 151.018566][ T9307] bridge4: entered allmulticast mode [ 151.036406][ T9307] vlan2: left allmulticast mode [ 151.054956][ T9307] bridge4: left allmulticast mode [ 151.904725][ T9362] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.957006][ T9414] __nla_validate_parse: 16 callbacks suppressed [ 152.957022][ T9414] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1042'. [ 153.191344][ T9433] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 153.211468][ T9414] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 153.239302][ T9434] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 153.436823][ T9445] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 153.475641][ T9445] tipc: Enabled bearer , priority 11 [ 153.646665][ T9455] ipt_REJECT: TCP_RESET invalid for non-tcp [ 153.666414][ T9454] netlink: 'syz.3.1051': attribute type 1 has an invalid length. [ 153.676465][ T9459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.970367][ T9485] netlink: 4124 bytes leftover after parsing attributes in process `syz.3.1058'. [ 153.984408][ T9485] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.199925][ T9500] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1062'. [ 154.296672][ T9506] bond0: (slave bond_slave_1): Releasing backup interface [ 154.321591][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 154.628324][ T5822] tipc: Node number set to 2545375437 [ 154.665578][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1069'. [ 154.744329][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 154.867520][ T9534] bridge4: port 1(vlan3) entered blocking state [ 154.900474][ T9534] bridge4: port 1(vlan3) entered disabled state [ 154.930050][ T9534] vlan3: entered allmulticast mode [ 154.936228][ T9534] bridge4: entered allmulticast mode [ 154.971053][ T9534] vlan3: left allmulticast mode [ 154.972531][ T9546] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 154.985644][ T9534] bridge4: left allmulticast mode [ 155.279336][ T9569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1079'. [ 155.449049][ T9576] netlink: 'syz.3.1080': attribute type 11 has an invalid length. [ 155.482626][ T9576] netlink: 'syz.3.1080': attribute type 5 has an invalid length. [ 155.509883][ T9576] netlink: 6548 bytes leftover after parsing attributes in process `syz.3.1080'. [ 155.699993][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1087'. [ 155.700870][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1088'. [ 155.753199][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 155.798883][ T9588] bridge5: port 1(vlan3) entered blocking state [ 155.813419][ T9588] bridge5: port 1(vlan3) entered disabled state [ 155.832483][ T9588] vlan3: entered allmulticast mode [ 155.841028][ T9595] sctp: [Deprecated]: syz.0.1086 (pid 9595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.841028][ T9595] Use struct sctp_sack_info instead [ 155.859796][ T9588] bridge5: entered allmulticast mode [ 155.886689][ T9588] vlan3: left allmulticast mode [ 155.900990][ T9588] bridge5: left allmulticast mode [ 155.928402][ T9593] bridge3: entered promiscuous mode [ 155.944253][ T9593] bridge3: entered allmulticast mode [ 156.232493][ T9615] sctp: [Deprecated]: syz.3.1097 (pid 9615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.232493][ T9615] Use struct sctp_sack_info instead [ 156.675052][ T9636] netlink: 'syz.2.1103': attribute type 2 has an invalid length. [ 156.709575][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1104'. [ 156.810506][ T9638] bridge6: port 1(vlan3) entered blocking state [ 156.827882][ T9638] bridge6: port 1(vlan3) entered disabled state [ 156.844558][ T9638] vlan3: entered allmulticast mode [ 156.859903][ T9638] bridge6: entered allmulticast mode [ 156.875599][ T9638] vlan3: left allmulticast mode [ 156.892261][ T9638] bridge6: left allmulticast mode [ 157.020414][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.116710][ T9655] syzkaller0: entered promiscuous mode [ 157.134744][ T9655] syzkaller0: entered allmulticast mode [ 157.139589][ T9658] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 157.450423][ T9676] xt_ecn: cannot match TCP bits for non-tcp packets [ 157.611012][ T9685] geneve2: entered promiscuous mode [ 157.617406][ T9685] geneve2: entered allmulticast mode [ 157.637254][ T8040] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 157.693133][ T8040] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 157.718441][ T8040] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 157.743717][ T9692] bridge7: port 1(vlan3) entered blocking state [ 157.750219][ T9692] bridge7: port 1(vlan3) entered disabled state [ 157.758021][ T9692] vlan3: entered allmulticast mode [ 157.765387][ T9692] bridge7: entered allmulticast mode [ 157.794118][ T9692] vlan3: left allmulticast mode [ 157.808017][ T9692] bridge7: left allmulticast mode [ 157.871737][ T8040] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 157.906914][ T9706] netem: change failed [ 158.239215][ T9728] IPVS: length: 88 != 1672 [ 158.393712][ T9738] Cannot find set identified by id 3 to match [ 158.415822][ T9740] __nla_validate_parse: 4 callbacks suppressed [ 158.415836][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1142'. [ 158.455234][ T9744] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1141'. [ 158.487892][ T9740] bridge7: port 1(vlan2) entered blocking state [ 158.507960][ T9740] bridge7: port 1(vlan2) entered disabled state [ 158.527958][ T9740] vlan2: entered allmulticast mode [ 158.544657][ T9740] bridge7: entered allmulticast mode [ 158.559338][ T9740] vlan2: left allmulticast mode [ 158.564387][ T9740] bridge7: left allmulticast mode [ 158.746089][ T9753] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1146'. [ 158.750260][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 158.769831][ T9753] netlink: 'syz.1.1146': attribute type 18 has an invalid length. [ 158.960920][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1151'. [ 158.998136][ T9775] netlink: 'syz.3.1151': attribute type 7 has an invalid length. [ 159.013500][ T9781] Cannot find set identified by id 3 to match [ 159.020709][ T9775] netlink: 'syz.3.1151': attribute type 8 has an invalid length. [ 159.058794][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 159.219283][ T9796] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 159.221114][ T9791] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 159.305511][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 159.409227][ T9806] bridge8: port 1(vlan3) entered blocking state [ 159.443924][ T9806] bridge8: port 1(vlan3) entered disabled state [ 159.457824][ T9806] vlan3: entered allmulticast mode [ 159.461437][ T9811] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 159.475716][ T9806] bridge8: entered allmulticast mode [ 159.493970][ T9806] vlan3: left allmulticast mode [ 159.507473][ T9806] bridge8: left allmulticast mode [ 159.616266][ T9819] Cannot find set identified by id 3 to match [ 159.623895][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 159.748654][ T9829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.773495][ T9831] syzkaller0: entered promiscuous mode [ 159.793484][ T9831] syzkaller0: entered allmulticast mode [ 159.816327][ T9835] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1173'. [ 159.855237][ T9835] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 159.865327][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 160.050013][ T9846] Bluetooth: MGMT ver 1.23 [ 160.147726][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 160.174189][ T9856] bridge5: port 1(vlan3) entered blocking state [ 160.180676][ T9856] bridge5: port 1(vlan3) entered disabled state [ 160.187651][ T9856] vlan3: entered allmulticast mode [ 160.193581][ T9856] bridge5: entered allmulticast mode [ 160.200684][ T9856] vlan3: left allmulticast mode [ 160.205816][ T9856] bridge5: left allmulticast mode [ 160.301115][ T9858] netlink: 'syz.2.1182': attribute type 21 has an invalid length. [ 160.340992][ T9861] Cannot find set identified by id 3 to match [ 160.590639][ T9876] FAULT_INJECTION: forcing a failure. [ 160.590639][ T9876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.613784][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.3.1190 Not tainted syzkaller #0 PREEMPT(full) [ 160.613805][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.613814][ T9876] Call Trace: [ 160.613828][ T9876] [ 160.613835][ T9876] dump_stack_lvl+0xe8/0x150 [ 160.613859][ T9876] should_fail_ex+0x412/0x560 [ 160.613880][ T9876] _copy_from_user+0x2d/0xb0 [ 160.613899][ T9876] kstrtouint_from_user+0xd6/0x180 [ 160.613916][ T9876] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 160.613945][ T9876] proc_fail_nth_write+0x8e/0x210 [ 160.613965][ T9876] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.613990][ T9876] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.614011][ T9876] vfs_write+0x29a/0xb90 [ 160.614042][ T9876] ? __pfx_vfs_write+0x10/0x10 [ 160.614064][ T9876] ? __fget_files+0x2a/0x420 [ 160.614087][ T9876] ? __fget_files+0x3a0/0x420 [ 160.614104][ T9876] ? __fget_files+0x2a/0x420 [ 160.614130][ T9876] ksys_write+0x150/0x270 [ 160.614153][ T9876] ? __pfx_ksys_write+0x10/0x10 [ 160.614183][ T9876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.614201][ T9876] do_syscall_64+0x174/0xf80 [ 160.614222][ T9876] ? trace_irq_disable+0x3b/0x140 [ 160.614244][ T9876] ? clear_bhb_loop+0x40/0x90 [ 160.614263][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.614279][ T9876] RIP: 0033:0x7f1898b5d68e [ 160.614294][ T9876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.614306][ T9876] RSP: 002b:00007f189998cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.614322][ T9876] RAX: ffffffffffffffda RBX: 00007f189998d6c0 RCX: 00007f1898b5d68e [ 160.614332][ T9876] RDX: 0000000000000001 RSI: 00007f189998d0a0 RDI: 0000000000000006 [ 160.614342][ T9876] RBP: 00007f189998d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.614350][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.614359][ T9876] R13: 00007f1898e16038 R14: 00007f1898e15fa0 R15: 00007fff128b6398 [ 160.614388][ T9876] [ 161.040062][ T9882] bridge9: port 1(vlan3) entered blocking state [ 161.091023][ T9882] bridge9: port 1(vlan3) entered disabled state [ 161.121552][ T9882] vlan3: entered allmulticast mode [ 161.144484][ T9882] bridge9: entered allmulticast mode [ 161.166765][ T9882] vlan3: left allmulticast mode [ 161.172663][ T9882] bridge9: left allmulticast mode [ 161.352676][ T9898] hsr_slave_1 (unregistering): left promiscuous mode [ 161.798266][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 161.817434][ T9929] batadv1: entered allmulticast mode [ 161.836798][ T9929] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 161.846522][ T9929] team0: Failed to send options change via netlink (err -105) [ 161.854721][ T9929] team0: Port device batadv1 added [ 161.869516][ T9887] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 162.253857][ T9962] Cannot find set identified by id 3 to match [ 162.432018][ T9946] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.439347][ T9946] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.533035][ T9946] batman_adv: batadv0: Interface deactivated: dummy0 [ 162.665615][ T9946] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.008662][T10004] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 163.029481][T10003] veth0_to_bond: left allmulticast mode [ 163.120827][T10004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.369817][T10024] IPVS: Error connecting to the multicast addr [ 163.521641][T10034] netlink: 'syz.1.1239': attribute type 11 has an invalid length. [ 163.637307][T10043] openvswitch: netlink: Message has 8 unknown bytes. [ 163.696091][T10043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.788802][T10056] __nla_validate_parse: 12 callbacks suppressed [ 163.788819][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1244'. [ 163.855094][T10061] netlink: 'syz.3.1246': attribute type 2 has an invalid length. [ 163.998528][T10067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1249'. [ 164.074366][T10069] syzkaller0: entered promiscuous mode [ 164.085065][T10069] syzkaller0: entered allmulticast mode [ 164.108331][T10077] netlink: 'syz.2.1252': attribute type 5 has an invalid length. [ 164.198050][T10081] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1253'. [ 164.458540][T10093] netlink: 'syz.3.1256': attribute type 1 has an invalid length. [ 164.811158][T10100] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1257'. [ 165.700725][T10081] batman_adv: batadv0: Interface deactivated: dummy0 [ 165.708977][T10081] batman_adv: batadv0: Removing interface: dummy0 [ 165.722483][T10093] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 165.724056][T10095] batadv_slave_1: entered promiscuous mode [ 165.898631][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 165.936916][T10107] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.944211][T10107] bridge0: port 2(bridge_slave_1) entered listening state [ 166.004094][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 166.216403][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 166.217861][T10129] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1267'. [ 166.258764][T10133] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1268'. [ 166.319573][T10137] openvswitch: netlink: IP tunnel dst address not specified [ 166.360403][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 166.382625][T10143] netlink: 'syz.3.1271': attribute type 13 has an invalid length. [ 166.424587][T10144] netlink: 'syz.3.1271': attribute type 13 has an invalid length. [ 166.616693][T10152] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 166.639725][T10152] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 167.036420][T10189] syzkaller1: entered promiscuous mode [ 167.052912][T10189] syzkaller1: entered allmulticast mode [ 167.545480][T10220] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 167.817024][T10248] IPVS: set_ctl: invalid protocol: 53874 224.0.0.2:20004 [ 168.514560][T10261] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 168.522167][T10261] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 168.566129][T10263] syzkaller1: entered promiscuous mode [ 168.571598][T10263] syzkaller1: entered allmulticast mode [ 170.211215][T10213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.564975][T10297] __nla_validate_parse: 11 callbacks suppressed [ 170.564991][T10297] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1322'. [ 171.791488][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 171.910093][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1344'. [ 171.985632][T10354] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 172.581848][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 172.614818][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1359'. [ 172.654945][T10384] gtp0: entered allmulticast mode [ 172.700009][T10389] Cannot find set identified by id 3 to match [ 172.763646][T10392] syzkaller0: entered promiscuous mode [ 172.788001][T10392] syzkaller0: entered allmulticast mode [ 173.199762][T10428] lo: entered allmulticast mode [ 173.211937][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 173.213300][T10419] lo: left allmulticast mode [ 173.276423][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 173.312074][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 173.331419][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 173.359817][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 173.414736][T10442] Cannot find set identified by id 3 to match [ 173.616807][T10450] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 173.631940][T10452] syzkaller0: entered promiscuous mode [ 173.640634][T10452] syzkaller0: entered allmulticast mode [ 173.718986][T10450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.763041][T10460] bond4: (slave geneve3): making interface the new active one [ 173.788130][T10460] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 173.843180][T10463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.030502][T10477] Cannot find set identified by id 3 to match [ 174.060306][T10479] netlink: 'syz.1.1389': attribute type 1 has an invalid length. [ 174.068736][T10479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.181980][T10481] bridge10: port 1(vlan3) entered blocking state [ 174.189731][T10481] bridge10: port 1(vlan3) entered disabled state [ 174.199098][T10481] vlan3: entered allmulticast mode [ 174.206835][T10481] bridge10: entered allmulticast mode [ 174.225763][T10481] vlan3: left allmulticast mode [ 174.242916][T10481] bridge10: left allmulticast mode [ 174.710509][T10518] Cannot find set identified by id 3 to match [ 174.741968][T10520] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 174.874512][T10527] xt_policy: too many policy elements [ 174.884039][T10528] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 174.978353][T10534] bridge4: port 1(vlan2) entered blocking state [ 174.985017][T10534] bridge4: port 1(vlan2) entered disabled state [ 175.000972][T10534] vlan2: entered allmulticast mode [ 175.008454][T10534] bridge4: entered allmulticast mode [ 175.019667][T10534] vlan2: left allmulticast mode [ 175.024909][T10534] bridge4: left allmulticast mode [ 175.175349][T10542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.370157][T10556] Cannot find set identified by id 3 to match [ 175.519086][T10563] syzkaller0: entered promiscuous mode [ 175.530318][T10563] syzkaller0: entered allmulticast mode [ 175.748030][T10570] netlink: 'syz.0.1419': attribute type 29 has an invalid length. [ 175.768278][T10570] netlink: 'syz.0.1419': attribute type 29 has an invalid length. [ 175.786134][T10570] netlink: 'syz.0.1419': attribute type 29 has an invalid length. [ 175.804129][T10570] netlink: 'syz.0.1419': attribute type 29 has an invalid length. [ 175.824203][T10570] netlink: 'syz.0.1419': attribute type 29 has an invalid length. [ 175.835376][T10570] netlink: 'syz.0.1419': attribute type 29 has an invalid length. [ 176.122084][T10594] Cannot find set identified by id 3 to match [ 176.451081][T10626] Cannot find del_set index 2 as target [ 176.582002][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d1fc00: rx timeout, send abort [ 176.604910][T10633] tipc: Enabled bearer , priority 0 [ 176.819207][T10653] Cannot find set identified by id 3 to match [ 177.032566][T10666] validate_nla: 1 callbacks suppressed [ 177.032581][T10666] netlink: 'syz.2.1448': attribute type 4 has an invalid length. [ 177.049959][T10666] __nla_validate_parse: 7 callbacks suppressed [ 177.050090][T10666] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1448'. [ 177.082126][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d1e400: rx timeout, send abort [ 177.090935][T10666] .`: renamed from bond0 (while UP) [ 177.092066][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d1fc00: abort rx timeout. Force session deactivation [ 177.127947][T10672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1447'. [ 177.240308][T10681] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1450'. [ 177.352069][T10674] ip6tnl2: entered promiscuous mode [ 177.588242][T10701] sctp: [Deprecated]: syz.4.1459 (pid 10701) Use of int in maxseg socket option. [ 177.588242][T10701] Use struct sctp_assoc_value instead [ 177.602826][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d1e400: abort rx timeout. Force session deactivation [ 177.725472][T10711] gretap2: entered promiscuous mode [ 177.731836][T10711] batman_adv: batadv0: Adding interface: gretap2 [ 177.738625][T10711] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 177.759455][T10711] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 177.978585][T10718] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1464'. [ 178.580352][T10736] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1471'. [ 178.630644][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 178.733616][T10744] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 178.873492][T10754] tc_dump_action: action bad kind [ 178.946297][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 178.970326][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 179.152889][T10773] bond6: Removing last arp target with arp_interval on [ 180.045215][T10825] netlink: 'syz.4.1494': attribute type 32 has an invalid length. [ 180.080678][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 180.205310][T10825] bond3: option coupled_control: invalid value (192) [ 180.236688][T10825] bond3 (unregistering): Released all slaves [ 180.702402][T10868] 8021q: VLANs not supported on gre0 [ 180.747956][T10864] IPVS: set_ctl: invalid protocol: 135 172.30.0.4:20002 [ 181.078799][T10888] netlink: 'syz.4.1512': attribute type 83 has an invalid length. [ 181.224804][T10887] syzkaller0: entered promiscuous mode [ 181.241642][T10887] syzkaller0: entered allmulticast mode [ 181.798607][T10927] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1522'. [ 182.205622][T10950] Cannot find set identified by id 3 to match [ 182.627790][T10960] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 183.684912][T10987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.739278][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 183.739880][T10992] xt_hashlimit: size too large, truncated to 1048576 [ 183.770769][T10990] xt_hashlimit: size too large, truncated to 1048576 [ 183.970435][T11003] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 184.087046][T11007] veth0_to_bridge: entered promiscuous mode [ 184.186413][T11009] veth0_to_bridge: left promiscuous mode [ 184.187225][T11018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1549'. [ 184.280372][T11022] netlink: 'syz.1.1551': attribute type 13 has an invalid length. [ 184.963324][T11061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1565'. [ 185.027145][T11064] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 185.088965][T11066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1566'. [ 185.108175][T11064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.148898][T11068] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1567'. [ 185.311312][T11074] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1570'. [ 185.355763][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 185.373653][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'. [ 185.443310][T11074] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20000 [ 185.583035][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 185.612027][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 186.240679][T11129] syzkaller0: entered promiscuous mode [ 186.256665][T11129] syzkaller0: entered allmulticast mode [ 186.739617][ T5822] IPVS: starting estimator thread 0... [ 186.844033][T11168] IPVS: using max 35 ests per chain, 84000 per kthread [ 186.867414][T11171] netlink: 'syz.0.1594': attribute type 12 has an invalid length. [ 186.880920][T11171] netlink: 'syz.0.1594': attribute type 29 has an invalid length. [ 186.992415][T11175] xt_NFQUEUE: number of total queues is 0 [ 187.661948][T11215] Cannot find set identified by id 3 to match [ 187.764997][T11224] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.034320][T11243] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.112421][T11250] Cannot find set identified by id 3 to match [ 188.128510][T11249] syzkaller1: entered promiscuous mode [ 188.141595][T11249] syzkaller1: entered allmulticast mode [ 188.245384][T11257] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 188.410600][T11266] bond0: option miimon: invalid value (18446744071829782528) [ 188.442156][T11266] bond0: option miimon: allowed values 0 - 2147483647 [ 188.659512][T11283] netlink: 'syz.0.1633': attribute type 13 has an invalid length. [ 188.730695][T11289] netlink: 'syz.1.1636': attribute type 1 has an invalid length. [ 188.744445][T11293] __nla_validate_parse: 19 callbacks suppressed [ 188.744461][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1634'. [ 188.768707][T11294] set match dimension is over the limit! [ 188.774538][T11289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1636'. [ 188.786961][T11293] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 188.797857][T11294] netlink: 'syz.3.1637': attribute type 10 has an invalid length. [ 188.839430][T11294] team0 (unregistering): Port device team_slave_0 removed [ 188.861529][T11301] set match dimension is over the limit! [ 188.889484][T11294] team0 (unregistering): Port device team_slave_1 removed [ 189.096873][T11308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'. [ 189.147905][T11315] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 189.156064][T11315] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.280342][T11322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'. [ 189.330983][T11322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1643'. [ 189.367398][T11322] netlink: get zone limit has 4 unknown bytes [ 189.519051][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 189.651734][T11347] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1650'. [ 189.746710][T11334] nbd0: detected capacity change from 0 to 63 [ 189.767935][ T5649] block nbd0: Receive control failed (result -104) [ 189.767935][ T5636] block nbd0: Receive control failed (result -32) [ 189.915596][T11363] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1655'. [ 189.927028][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1658'. [ 190.015589][T11369] bridge6: port 1(vlan2) entered blocking state [ 190.032369][T11369] bridge6: port 1(vlan2) entered disabled state [ 190.049622][T11369] vlan2: entered allmulticast mode [ 190.057455][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 190.068803][T11369] bridge6: entered allmulticast mode [ 190.078927][T11372] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 190.100976][T11369] vlan2: left allmulticast mode [ 190.108573][T11369] bridge6: left allmulticast mode [ 190.122551][T11376] openvswitch: netlink: Multiple metadata blocks provided [ 190.163794][T11378] bond2 (unregistering): Released all slaves [ 190.225776][T11382] netlink: 'syz.0.1664': attribute type 10 has an invalid length. [ 190.288788][T11382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.301667][T11382] team0: Port device netdevsim1 added [ 190.325505][T11387] tc_dump_action: action bad kind [ 190.410228][T11394] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 190.437305][T11397] sctp: [Deprecated]: syz.3.1668 (pid 11397) Use of int in max_burst socket option deprecated. [ 190.437305][T11397] Use struct sctp_assoc_value instead [ 190.456660][T11394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.478025][T11400] sctp: [Deprecated]: syz.3.1668 (pid 11400) Use of int in max_burst socket option deprecated. [ 190.478025][T11400] Use struct sctp_assoc_value instead [ 190.737294][T11410] netlink: 'syz.2.1673': attribute type 3 has an invalid length. [ 190.770157][T11416] bridge7: port 1(vlan2) entered blocking state [ 190.782645][T11416] bridge7: port 1(vlan2) entered disabled state [ 190.789931][T11416] vlan2: entered allmulticast mode [ 190.795192][T11416] bridge7: entered allmulticast mode [ 190.804035][T11416] vlan2: left allmulticast mode [ 190.821300][T11416] bridge7: left allmulticast mode [ 191.073681][ T5649] Bluetooth: hci1: command 0x0406 tx timeout [ 191.073716][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 191.085799][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 191.157819][T11436] netlink: 'syz.4.1681': attribute type 5 has an invalid length. [ 191.406701][T11455] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 191.575965][T11471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.646742][T11475] lo: Caught tx_queue_len zero misconfig [ 192.345648][T11501] sctp: [Deprecated]: syz.1.1703 (pid 11501) Use of int in max_burst socket option deprecated. [ 192.345648][T11501] Use struct sctp_assoc_value instead [ 192.519903][T11507] syzkaller0: entered promiscuous mode [ 192.547191][T11507] syzkaller0: entered allmulticast mode [ 192.568744][T11507] xt_policy: output policy not valid in PREROUTING and INPUT [ 192.577851][T11507] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 192.613680][T11513] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 192.721168][T11513] bond2: entered promiscuous mode [ 192.735934][T11513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.795023][T11522] bond2: (slave bridge11): making interface the new active one [ 192.805172][T11522] bridge11: entered promiscuous mode [ 192.851048][T11522] bridge11: left promiscuous mode [ 192.963030][T11534] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 193.327705][T11553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.706916][T11576] syzkaller0: entered promiscuous mode [ 193.712484][T11576] syzkaller0: entered allmulticast mode [ 193.789099][T11584] __nla_validate_parse: 22 callbacks suppressed [ 193.789118][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1730'. [ 194.120185][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.129317][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.185394][T11602] xt_hashlimit: size too large, truncated to 1048576 [ 195.654957][T11619] sctp: [Deprecated]: syz.2.1739 (pid 11619) Use of int in maxseg socket option. [ 195.654957][T11619] Use struct sctp_assoc_value instead [ 195.819287][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 195.991240][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 196.031056][T11640] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1749'. [ 196.079767][T11626] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1741'. [ 196.163867][T11653] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1745'. [ 196.192932][T11653] batman_adv: batadv0: Interface deactivated: dummy0 [ 196.225460][T11653] batman_adv: batadv0: Removing interface: dummy0 [ 198.800250][T11636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.822040][T11661] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 198.934898][T11679] tc_dump_action: action bad kind [ 199.031011][T11685] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1760'. [ 199.054950][T11679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.208831][T11691] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 199.260199][T11696] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1764'. [ 199.340483][T11691] syzkaller0: entered promiscuous mode [ 199.360346][T11691] syzkaller0: entered allmulticast mode [ 199.567928][T11708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1767'. [ 199.596434][T11708] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1767'. [ 199.623421][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'. [ 199.685424][ T5633] block nbd0: Receive control failed (result -107) [ 199.706474][T11709] block nbd0: reconnected socket [ 201.227756][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 201.410358][T11725] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1772'. [ 201.469032][T11730] [ 201.471390][T11730] ====================================================== [ 201.478408][T11730] WARNING: possible circular locking dependency detected [ 201.485436][T11730] syzkaller #0 Not tainted [ 201.489851][T11730] ------------------------------------------------------ [ 201.496861][T11730] syz.2.1774/11730 is trying to acquire lock: [ 201.502909][T11730] ffffffff8ea5f900 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 201.512463][T11730] [ 201.512463][T11730] but task is already holding lock: [ 201.519806][T11730] ffff888054d69d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe62/0x2d60 [ 201.529008][T11730] [ 201.529008][T11730] which lock already depends on the new lock. [ 201.529008][T11730] [ 201.539393][T11730] [ 201.539393][T11730] the existing dependency chain (in reverse order) is: [ 201.548385][T11730] [ 201.548385][T11730] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 201.556095][T11730] lock_sock_nested+0x41/0x100 [ 201.561363][T11730] inet_shutdown+0x6a/0x390 [ 201.566368][T11730] nbd_mark_nsock_dead+0x2e9/0x560 [ 201.571988][T11730] recv_work+0x1c2e/0x1d40 [ 201.576903][T11730] process_scheduled_works+0xb5d/0x1860 [ 201.582952][T11730] worker_thread+0xa53/0xfc0 [ 201.588048][T11730] kthread+0x389/0x470 [ 201.592617][T11730] ret_from_fork+0x514/0xb70 [ 201.597710][T11730] ret_from_fork_asm+0x1a/0x30 [ 201.602978][T11730] [ 201.602978][T11730] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 201.610602][T11730] __mutex_lock+0x1a3/0x1550 [ 201.615696][T11730] nbd_queue_rq+0x37b/0x1100 [ 201.620790][T11730] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 201.626842][T11730] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 201.633673][T11730] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 201.640154][T11730] blk_mq_run_hw_queue+0x348/0x4f0 [ 201.645763][T11730] blk_mq_dispatch_list+0xd16/0xe10 [ 201.651462][T11730] blk_mq_flush_plug_list+0x48d/0x570 [ 201.657334][T11730] __blk_flush_plug+0x3ed/0x4d0 [ 201.662684][T11730] __submit_bio+0x28d/0x580 [ 201.667695][T11730] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 201.673826][T11730] block_read_full_folio+0x599/0x830 [ 201.679610][T11730] filemap_read_folio+0x137/0x3b0 [ 201.685137][T11730] do_read_cache_folio+0x358/0x590 [ 201.690752][T11730] read_part_sector+0xb6/0x2b0 [ 201.696016][T11730] adfspart_check_ICS+0xb1/0x960 [ 201.701453][T11730] bdev_disk_changed+0x817/0x1770 [ 201.706985][T11730] blkdev_get_whole+0x380/0x510 [ 201.712335][T11730] bdev_open+0x31e/0xd30 [ 201.717079][T11730] blkdev_open+0x470/0x610 [ 201.722000][T11730] do_dentry_open+0x822/0x13a0 [ 201.727265][T11730] vfs_open+0x3b/0x340 [ 201.731835][T11730] path_openat+0x2e08/0x3860 [ 201.736929][T11730] do_file_open+0x23e/0x4a0 [ 201.741933][T11730] do_sys_openat2+0x113/0x200 [ 201.747121][T11730] __x64_sys_openat+0x138/0x170 [ 201.752497][T11730] do_syscall_64+0x174/0xf80 [ 201.757607][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.764009][T11730] [ 201.764009][T11730] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 201.771200][T11730] __mutex_lock+0x1a3/0x1550 [ 201.776290][T11730] nbd_queue_rq+0xc6/0x1100 [ 201.781302][T11730] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 201.787348][T11730] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 201.794180][T11730] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 201.800661][T11730] blk_mq_run_hw_queue+0x348/0x4f0 [ 201.806272][T11730] blk_mq_dispatch_list+0xd16/0xe10 [ 201.811971][T11730] blk_mq_flush_plug_list+0x48d/0x570 [ 201.817842][T11730] __blk_flush_plug+0x3ed/0x4d0 [ 201.823199][T11730] __submit_bio+0x28d/0x580 [ 201.828216][T11730] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 201.834350][T11730] block_read_full_folio+0x599/0x830 [ 201.840135][T11730] filemap_read_folio+0x137/0x3b0 [ 201.845682][T11730] do_read_cache_folio+0x358/0x590 [ 201.851301][T11730] read_part_sector+0xb6/0x2b0 [ 201.856567][T11730] adfspart_check_ICS+0xb1/0x960 [ 201.862006][T11730] bdev_disk_changed+0x817/0x1770 [ 201.867528][T11730] blkdev_get_whole+0x380/0x510 [ 201.872884][T11730] bdev_open+0x31e/0xd30 [ 201.877642][T11730] blkdev_open+0x470/0x610 [ 201.882575][T11730] do_dentry_open+0x822/0x13a0 [ 201.887840][T11730] vfs_open+0x3b/0x340 [ 201.892406][T11730] path_openat+0x2e08/0x3860 [ 201.897502][T11730] do_file_open+0x23e/0x4a0 [ 201.902507][T11730] do_sys_openat2+0x113/0x200 [ 201.907684][T11730] __x64_sys_openat+0x138/0x170 [ 201.913040][T11730] do_syscall_64+0x174/0xf80 [ 201.918147][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.924542][T11730] [ 201.924542][T11730] -> #4 (set->srcu){.+.+}-{0:0}: [ 201.931647][T11730] __synchronize_srcu+0xca/0x300 [ 201.937097][T11730] elevator_switch+0x1e8/0x7a0 [ 201.942374][T11730] elevator_change+0x2cc/0x450 [ 201.947651][T11730] elevator_set_default+0x36c/0x430 [ 201.953362][T11730] blk_register_queue+0x3e9/0x4e0 [ 201.958893][T11730] __add_disk+0x677/0xd50 [ 201.963728][T11730] add_disk_fwnode+0xfb/0x480 [ 201.968995][T11730] nbd_dev_add+0x72c/0xb50 [ 201.973914][T11730] nbd_init+0x168/0x1f0 [ 201.978574][T11730] do_one_initcall+0x250/0x870 [ 201.983840][T11730] do_initcall_level+0x104/0x190 [ 201.989280][T11730] do_initcalls+0x59/0xa0 [ 201.994106][T11730] kernel_init_freeable+0x2a6/0x3e0 [ 201.999804][T11730] kernel_init+0x1d/0x1d0 [ 202.004645][T11730] ret_from_fork+0x514/0xb70 [ 202.009735][T11730] ret_from_fork_asm+0x1a/0x30 [ 202.014997][T11730] [ 202.014997][T11730] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 202.022794][T11730] __mutex_lock+0x1a3/0x1550 [ 202.027892][T11730] elevator_change+0x1b3/0x450 [ 202.033157][T11730] elevator_set_none+0xb5/0x140 [ 202.038510][T11730] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 202.044819][T11730] nbd_start_device+0x17f/0xb10 [ 202.050177][T11730] nbd_genl_connect+0x165b/0x1cf0 [ 202.055703][T11730] genl_family_rcv_msg_doit+0x22a/0x330 [ 202.061746][T11730] genl_rcv_msg+0x61c/0x7a0 [ 202.066746][T11730] netlink_rcv_skb+0x232/0x4b0 [ 202.072014][T11730] genl_rcv+0x28/0x40 [ 202.076492][T11730] netlink_unicast+0x75c/0x8e0 [ 202.081755][T11730] netlink_sendmsg+0x813/0xb40 [ 202.087021][T11730] ____sys_sendmsg+0x972/0x9f0 [ 202.092286][T11730] ___sys_sendmsg+0x2a5/0x360 [ 202.097463][T11730] __x64_sys_sendmsg+0x1bd/0x2a0 [ 202.102900][T11730] do_syscall_64+0x174/0xf80 [ 202.107990][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.114380][T11730] [ 202.114380][T11730] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 202.122974][T11730] blk_alloc_queue+0x546/0x680 [ 202.128277][T11730] __blk_mq_alloc_disk+0x197/0x390 [ 202.133899][T11730] nbd_dev_add+0x499/0xb50 [ 202.138824][T11730] nbd_init+0x168/0x1f0 [ 202.143486][T11730] do_one_initcall+0x250/0x870 [ 202.148751][T11730] do_initcall_level+0x104/0x190 [ 202.154189][T11730] do_initcalls+0x59/0xa0 [ 202.159014][T11730] kernel_init_freeable+0x2a6/0x3e0 [ 202.164709][T11730] kernel_init+0x1d/0x1d0 [ 202.169537][T11730] ret_from_fork+0x514/0xb70 [ 202.174625][T11730] ret_from_fork_asm+0x1a/0x30 [ 202.179901][T11730] [ 202.179901][T11730] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 202.187090][T11730] fs_reclaim_acquire+0x71/0x100 [ 202.192533][T11730] prepare_alloc_pages+0x152/0x650 [ 202.198145][T11730] __alloc_frozen_pages_noprof+0x12f/0x380 [ 202.204455][T11730] __alloc_pages_noprof+0x10/0x100 [ 202.210071][T11730] pcpu_populate_chunk+0x182/0xb30 [ 202.215684][T11730] pcpu_alloc_noprof+0xcc2/0x19c0 [ 202.221213][T11730] xt_percpu_counter_alloc+0x161/0x220 [ 202.227174][T11730] translate_table+0x1332/0x20b0 [ 202.232615][T11730] do_ip6t_set_ctl+0x9fe/0xe10 [ 202.237885][T11730] nf_setsockopt+0x26f/0x290 [ 202.242974][T11730] do_sock_setsockopt+0x17c/0x1b0 [ 202.248502][T11730] __x64_sys_setsockopt+0x13d/0x1b0 [ 202.254198][T11730] do_syscall_64+0x174/0xf80 [ 202.259295][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.265685][T11730] [ 202.265685][T11730] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 202.273393][T11730] __lock_acquire+0x15a5/0x2cf0 [ 202.278742][T11730] lock_acquire+0x106/0x350 [ 202.283743][T11730] __mutex_lock+0x1a3/0x1550 [ 202.288831][T11730] pcpu_alloc_noprof+0x261/0x19c0 [ 202.294356][T11730] bpf_prog_alloc_no_stats+0x10e/0x4f0 [ 202.300319][T11730] bpf_prog_alloc+0x3c/0x1a0 [ 202.305406][T11730] __get_filter+0xff/0x400 [ 202.310322][T11730] sk_reuseport_attach_filter+0x24/0x210 [ 202.316452][T11730] sk_setsockopt+0x1e50/0x2d60 [ 202.321717][T11730] udp_lib_setsockopt+0xbc/0x6b0 [ 202.327154][T11730] udpv6_setsockopt+0x67/0xb0 [ 202.332337][T11730] do_sock_setsockopt+0x17c/0x1b0 [ 202.337862][T11730] __x64_sys_setsockopt+0x13d/0x1b0 [ 202.343567][T11730] do_syscall_64+0x174/0xf80 [ 202.348667][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.355056][T11730] [ 202.355056][T11730] other info that might help us debug this: [ 202.355056][T11730] [ 202.365259][T11730] Chain exists of: [ 202.365259][T11730] pcpu_alloc_mutex --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 202.365259][T11730] [ 202.378445][T11730] Possible unsafe locking scenario: [ 202.378445][T11730] [ 202.385875][T11730] CPU0 CPU1 [ 202.391217][T11730] ---- ---- [ 202.396557][T11730] lock(sk_lock-AF_INET6); [ 202.401042][T11730] lock(&nsock->tx_lock); [ 202.407954][T11730] lock(sk_lock-AF_INET6); [ 202.414961][T11730] lock(pcpu_alloc_mutex); [ 202.419456][T11730] [ 202.419456][T11730] *** DEADLOCK *** [ 202.419456][T11730] [ 202.427589][T11730] 1 lock held by syz.2.1774/11730: [ 202.432682][T11730] #0: ffff888054d69d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe62/0x2d60 [ 202.442329][T11730] [ 202.442329][T11730] stack backtrace: [ 202.448198][T11730] CPU: 1 UID: 0 PID: 11730 Comm: syz.2.1774 Not tainted syzkaller #0 PREEMPT(full) [ 202.448213][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.448221][T11730] Call Trace: [ 202.448228][T11730] [ 202.448234][T11730] dump_stack_lvl+0xe8/0x150 [ 202.448249][T11730] print_circular_bug+0x2e1/0x300 [ 202.448265][T11730] check_noncircular+0x12e/0x150 [ 202.448281][T11730] __lock_acquire+0x15a5/0x2cf0 [ 202.448295][T11730] ? do_raw_spin_lock+0x12b/0x2f0 [ 202.448309][T11730] ? lock_acquire+0x106/0x350 [ 202.448324][T11730] ? pcpu_alloc_noprof+0x261/0x19c0 [ 202.448338][T11730] lock_acquire+0x106/0x350 [ 202.448349][T11730] ? pcpu_alloc_noprof+0x261/0x19c0 [ 202.448367][T11730] __mutex_lock+0x1a3/0x1550 [ 202.448378][T11730] ? pcpu_alloc_noprof+0x261/0x19c0 [ 202.448392][T11730] ? udp_lib_setsockopt+0xbc/0x6b0 [ 202.448406][T11730] ? udpv6_setsockopt+0x67/0xb0 [ 202.448420][T11730] ? do_sock_setsockopt+0x17c/0x1b0 [ 202.448434][T11730] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 202.448448][T11730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.448461][T11730] ? trylock_stock+0xac/0x280 [ 202.448474][T11730] ? lock_acquire+0x106/0x350 [ 202.448484][T11730] ? trylock_stock+0xac/0x280 [ 202.448497][T11730] ? pcpu_alloc_noprof+0x261/0x19c0 [ 202.448512][T11730] ? __pfx___mutex_lock+0x10/0x10 [ 202.448523][T11730] ? unlock_stock+0xc2/0x250 [ 202.448536][T11730] ? unlock_stock+0x12e/0x250 [ 202.448549][T11730] ? obj_cgroup_charge+0xa4/0x150 [ 202.448563][T11730] pcpu_alloc_noprof+0x261/0x19c0 [ 202.448578][T11730] ? rcu_is_watching+0x15/0xb0 [ 202.448593][T11730] ? __kmalloc_cache_noprof+0x31c/0x660 [ 202.448609][T11730] ? bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 202.448625][T11730] ? __kmalloc_cache_noprof+0x15b/0x660 [ 202.448641][T11730] bpf_prog_alloc_no_stats+0x10e/0x4f0 [ 202.448659][T11730] bpf_prog_alloc+0x3c/0x1a0 [ 202.448670][T11730] __get_filter+0xff/0x400 [ 202.448683][T11730] sk_reuseport_attach_filter+0x24/0x210 [ 202.448697][T11730] sk_setsockopt+0x1e50/0x2d60 [ 202.448711][T11730] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 202.448728][T11730] ? __pfx_sk_setsockopt+0x10/0x10 [ 202.448741][T11730] ? futex_wait+0x2a2/0x390 [ 202.448758][T11730] ? __lock_acquire+0x6b5/0x2cf0 [ 202.448775][T11730] ? aa_sk_perm+0x6d5/0x900 [ 202.448789][T11730] udp_lib_setsockopt+0xbc/0x6b0 [ 202.448804][T11730] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 202.448819][T11730] ? __fget_files+0x2a/0x420 [ 202.448831][T11730] ? aa_sock_opt_perm+0xff/0x1a0 [ 202.448847][T11730] udpv6_setsockopt+0x67/0xb0 [ 202.448861][T11730] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 202.448875][T11730] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 202.448889][T11730] do_sock_setsockopt+0x17c/0x1b0 [ 202.448910][T11730] __x64_sys_setsockopt+0x13d/0x1b0 [ 202.448929][T11730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.448945][T11730] do_syscall_64+0x174/0xf80 [ 202.448962][T11730] ? trace_irq_disable+0x3b/0x140 [ 202.448978][T11730] ? clear_bhb_loop+0x40/0x90 [ 202.448990][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.449001][T11730] RIP: 0033:0x7ffbd739ce59 [ 202.449014][T11730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.449024][T11730] RSP: 002b:00007ffbd81c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.449038][T11730] RAX: ffffffffffffffda RBX: 00007ffbd7616090 RCX: 00007ffbd739ce59 [ 202.449046][T11730] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000005 [ 202.449053][T11730] RBP: 00007ffbd7432d6f R08: 0000000000000010 R09: 0000000000000000 [ 202.449061][T11730] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.449068][T11730] R13: 00007ffbd7616128 R14: 00007ffbd7616090 R15: 00007ffc64d96218 [ 202.449082][T11730]