last executing test programs: 2.799661842s ago: executing program 1 (id=7055): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x2) socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed3aea0d14f20bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd8}], 0x1}, 0x800) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) (async) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000b00)={0x2, {{0x2, 0x4e24, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @private=0xa010101}}}, 0x108) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) sendfile(r5, r5, 0x0, 0x2000000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r8, r10}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r8, r10}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2.405127101s ago: executing program 0 (id=7058): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[{0x10, 0x11, 0xffff}, {0x408, 0x1, 0x1, "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"}], 0x418}}], 0x2, 0x80) (async) sendmmsg(r7, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[{0x10, 0x11, 0xffff}, {0x408, 0x1, 0x1, "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"}], 0x418}}], 0x2, 0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='./']) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='./']) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r10, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xfc497f2c10dcc990) sendmsg$sock(0xffffffffffffffff, 0x0, 0x24000001) (async) sendmsg$sock(0xffffffffffffffff, 0x0, 0x24000001) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) (async) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r12, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}}, 0x4000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r14, @ANYRESDEC=r14, @ANYBLOB="090b000000000000100005000000080003004789"], 0x1c}}, 0x40408d1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES16=r14, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000300000000000000000000000000000000000000ddff0000"], 0x50) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x44, r14, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040005) 2.40488362s ago: executing program 2 (id=7059): socket(0x2, 0x3, 0xff) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 2.266405656s ago: executing program 3 (id=7061): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r2, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) accept4(r3, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="cf042fbd7000060008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.124713579s ago: executing program 2 (id=7062): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x41}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.111626723s ago: executing program 4 (id=7063): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdb0500be848055101c564f4bba0600"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\v\x00'], 0x48) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) (async) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) recvmsg$unix(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/158, 0x9e}], 0x1, &(0x7f0000000880)}, 0x10121) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r11, &(0x7f0000000100)={0xa, 0xfdff, 0x0, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r11, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x240488d8}, 0x200400d1) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x3, 0x8, 0x9, 0x48, 0x1, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r14}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001400)={r14, &(0x7f00000001c0)="8a11d4ab77484a7755ce41304d6a2f5bfa5ae912f728cac73b51525873d5cfd6", &(0x7f0000000380)=""/177}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x100, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r14, @ANYRES32=r7, @ANYBLOB='-\x00\x00\x00( \x00\x00', @ANYRES32=r13, @ANYBLOB, @ANYRES32=r15, @ANYBLOB, @ANYRES64=0x0], 0x20) 2.092758066s ago: executing program 3 (id=7064): r0 = socket(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80010040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000078fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9c40000b90780000fe06e2d4c3d9080a0000080000000000001312c8651cedc09be42aa500000000000000011184a26b4a0b65c0b8ca531b9f2378b60204ff011e150040786c454a98289de62b79c234a448785ca5000000"], 0x0) getsockname$packet(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x2, 0x2}, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5f107ffa7a130bb85526643bdcf3ff0100", @ANYRES16=r3, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x20020802}, 0x40040c0) write(r2, &(0x7f0000000000)="4c00000011000a0000110002f7ff050002000000200000", 0x17) 1.892799968s ago: executing program 1 (id=7065): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000140)) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@local, @empty}, &(0x7f0000000040)=0xc) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0xc}, {}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x248, 0x20a, 0x278, 0x248, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [0x0, 0x0, 0xffffffff], [], 'ipvlan0\x00', 'veth0_macvtap\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [0x10], 0x0, 0x0, 0x10, 0xc}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @private1, [0x0, 0xfc97f2427bb8791, 0xff, 0xff], [0xff000000, 0xff000000, 0xff], 'bridge_slave_0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x8, 0x4, 0x20}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000400000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000210463b8562f81da97eb2e115400c46c6792e8904e164a81e57eebaf6b358eb3cc7b685eef3166e5be0a99c12d3cea765d9648d6b7ea94c82d905768754affd688793c600362fc03a100a2344a9fee64a0413f36f269631ed9b0bf844b4fad2f57a3c38592ebbbee2dae015739e9834a332a0c62078bfeeeb5a0e3d744cd70daf73850e53a0d", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006772657461700000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x114000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) 1.875589224s ago: executing program 3 (id=7066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073790400000000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.872446057s ago: executing program 2 (id=7067): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x6000000000000000) 1.513235182s ago: executing program 4 (id=7068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x8a}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (fail_nth: 21) 1.50745452s ago: executing program 0 (id=7069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x7d, 0xffffffffffffffff, [{0x5, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x3, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x12, "07561c800000ae563b65a9921a39861d"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x1, 0xa, "001000000080b700"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x8, "c8f46976e79e"}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x3c, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.331442272s ago: executing program 3 (id=7070): syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1.25115781s ago: executing program 2 (id=7071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)={'a', ' *:* ', 'm\x00'}, 0x8) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 1.068101681s ago: executing program 1 (id=7072): sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x562e351245413955, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, 'Q'}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 971.682407ms ago: executing program 4 (id=7073): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r1, 0x1, 0xfffffffd, 0x25dfdc01, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="63a9daa0d5b49e3830b585f9ee138aee511c0c93b9afc28038e79c1b51fe816919cc4287d297b51aecf6f30500000000000000d89ccddfff"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x7b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x3, 0x0, &(0x7f0000000100)="ff412f", 0x0, 0x20303, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x81) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r5, &(0x7f0000000200)=""/106, 0x6a, 0x40000716, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000340)={r2, &(0x7f0000000240)='ns/time\x00', 0x101000, &(0x7f0000000280)={@align=0x9, {0x3, 0x6, 0x3, 0x3}}, 0x9fe0, &(0x7f00000002c0), &(0x7f0000000300)=0x2}) mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000000)={0x1, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8014}, 0x4040) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) 880.396309ms ago: executing program 2 (id=7074): socket(0x2, 0x3, 0xff) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 831.348581ms ago: executing program 1 (id=7075): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000009000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd90f}, 0x94) 781.291631ms ago: executing program 3 (id=7076): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000330200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 646.438464ms ago: executing program 0 (id=7077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x1b00, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0xa4}}, 0x0) 644.765816ms ago: executing program 4 (id=7078): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0xa, 0x10, 0xb, 0xfeec, 0xfff}) (async) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0xa, 0x10, 0xb, 0xfeec, 0xfff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x2}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x41}, 0x28) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 642.489724ms ago: executing program 2 (id=7079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xfff3}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0xce4, 0x400, 0xffffffffffffffff, 0xff, 0x3, 0x5fd], 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[], 0x6) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 593.684724ms ago: executing program 3 (id=7080): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00050008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x4050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f0000000480)={0x1, 0x7, 0x32, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdae"], 0x0, 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x40000000015, 0x5, 0x0) 592.938255ms ago: executing program 1 (id=7081): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x11}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x40000000}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000000fff00000a00200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r3 = socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r4, 0x29, 0x1, 0xf, 0x9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8, 0x1, 0x9, 0x65}}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="44000e0080000000ffffffffffff0802110000010802110000000000000000000000005bfbec6ecc35bd"], 0xac}}, 0x0) read$alg(r0, &(0x7f0000000000)=""/24, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000006800e978000000000000000000000000000004000b00"], 0x1c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) close(r3) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044042}, 0x20000000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x9ba3, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0x1, &(0x7f00000014c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000001500)='GPL\x00', 0x1573, 0x1c, &(0x7f0000001540)=""/28, 0x41000, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000015c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001600)=[{0x1, 0x5, 0x0, 0xb}, {0x0, 0x1, 0x8, 0x3}, {0x3, 0x2, 0x0, 0x7}, {0x5, 0x5, 0x2, 0xb}, {0x4, 0x3, 0x4, 0xb}], 0x10, 0xd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000001740), &(0x7f0000000140)=r11}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000037c0)={{0xffffffffffffffff, &(0x7f00000001c0)='syzkaller\x00', 0x1080, &(0x7f0000000200)={@_ha_fsid={[0x8, 0xf]}, {0x333, 0x3, 0xfffffffe, 0xfffffffffffff800}}, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x3ff656f4}, 0x8, &(0x7f00000036c0)=[{0x1, 0x40, &(0x7f00000002c0)='{%@\xcb({!-&\'\x00', &(0x7f0000000300)="f619776d67769a8e99d4229ca6", 0xd}, {0x2, 0x80, &(0x7f0000000080)='\x00', &(0x7f0000000380)="65b41a784940aeaa2efc91", 0xb, 0x2}, {0x1, 0x7, &(0x7f00000003c0)='\x00', &(0x7f00000039c0)="f80f9640a50f0b6b48752f60dcb18ebd78b2a1a5e99902f37a5eca2ca7735fd3524d62b5074b104a2b1e520e6710d9054ef2909d36bb1564084ff5abb793cea8e346f367c003ea365d9639042fb9633a66e09e2e9cb9e451d95232b062c0f63db169d4f6db768003dc05c19b1c8fc715f377d102ef65de91117a9f431cb754fa77fffb287a1b7313acd49f1e1878251c65195d9a90c9fc90d75ac090a000dfdcc88abe3bbb1de6059ce16f96edc1de925a12fdbc028abbcd8dbd776b4ec32d56fa24cb5e6b47bde7ecaf04b9f809e1cebf18da1dc200f0d0ad1a882ae2cb30dc328c01dadd150708ddda6acd0b092446bf3f4d1836088d6a03fc21b38e3235bdfe23ff3743cb7c14eb22976e3d08cfdf3d9740b8b1ea349d7fa62f2a53bdaa0671cf1e1b482d14db65a79bb48ad16bc7402eb924f24a683ac3468bad89d9f5d2926ad5c0013e40c9013aa8d03fbbc3dd3393ad628d7f7ec498e9c8e701a884418a653ca5d52e14774c7785bdd9ca46cf19ec4ce81b5189e93c07000000000000003e8d69bca6dd6414eee6f7bf6f577dd775eee551bb13bb141752b367a7abf1ed1bed5644b2940d4c5389246bdc5f0ed4a85fd93c3e04b8aa4bd91799b891bc799c5b0899ab4cb39b49fcc340f4fdd56d094460227c220a6fc028a94a4f0bf12e579198c8371424b4c3968cbbf75f9c0203e9bc5e0b78f8a98ce392cc64a0576b0b0341c5629c8e1315aa2611aa48a7ef8e61659cd435a1794c5a90df32a2a7d17deee26affa745019ab99615c6f9b505a82f8eea4f8d4a9db7e49556c875a71a3eece41081dc6453eedc94f86ec7eccc82449533eeb705633a98391e7c7167c22a29bbedcad4527198ebc73ac749a5988f65fcf42b0b253ed7218fd616a32c30399d991d7ca154342b9c08002f727bfec0fc0d61e71a0e30044a590a0866ccab215c4aed9f58ae1fd88ca248cd127c0dec5fd2bdfd3d7062432b159037690d0bcf554a2266b35512db0b76b00d4eb7d9c3d8336bced85c6f22f233f6c24d8b777ca4c23cbba92111bc3792cde64d36653989498dc36f95ee5f932629e94761430b2500d688b96cbd4663f2181d332a91ad0dc8108ae6da576e063cc5acca57aeacfffaa39a65d5ded4d2c7a81f1d26e8facb25a14b1e911beb2a6a5fa5c0c170c09681b13e84ab245e99136ce059df911a22561f024043b83326fbd0e04f835bb5eaae70910a66532e83863ca6366b6e69f29d634396d6cc1347535353b3873671cb2dfd9c00ddc7d7a1949e9c655f2e50dcfc54f3928f7837a81b4d70cd4b93b3d9a6876eff8fde9a01e52e9d9c258b11b51325922ee916f443d7519f6f366f4ecea7cf82e9dac5fb35af98332fb14343c641c0de05ef0bd9a03edf2450b33c2107ffb7b73f825908cdf1a7980930e565966c092451ef10846260267c015168fbee2ec2949315de5521c4177cb6422a50a8533a9a5534016e35725bd9f2cb86c598d58ee4de7c636f95875f92c471e1d7bb84072b951f9187afb86eb0bee986f72dac24075c5083d640a7c3e9cd5313ecfb7908b48f810b667fe7fe35e2ea8ab115de3bdff7c85d50a4458658031c59d7b2d2b574a80db23f0edfc2d28026595de50b37e9094fac19e66ce981105fa43cf5837b315ecef63da97e9989c67e303c0c56e5aaecc7051b9bd0b02aed59b2ec737e1965d7ecd5b74ea28b8f2215431fe1ebc005918f3042257c74ebbdebd8c382fa43b747184d40faf5aba69517cb5273cb8b1ae90e55d884c19b2a11ef0ceb41df8c59000d94d515b9507a55076d56c7da981eb588581d8f32b6719e6704bd0dca3a3945a164962ee49c4ae8851a87bfcb456e9118828ce5b2161d28f9e52f389d8002f193bf2fab503081a381a974a4a2d13d91cea8da147327039e1d7cac2016f3864b687584acc96030a714b7050419ac32463d8ed37709cdd88c51f1c777c2a8928ea3c757f43faa5b36d8ee2080d2f0db5ca3d9d7e05afd54ee6c50c4bc8acbf959cae62dca24f195a56ef8b7a9d6dd5ac278f14c5cabbedc42faa42c0ceca56806a2b2b48b2ddb177e1bdc39291ab585d340df731b9239625b355d9773359e473c035b5e3fc17c51b3948c6c611f60a3e597f54995ee883b1fccc0e7a0e499d6ae9de8fb5ff3c12a08abf1f219de7cb1e512c2a7fba8e83ab24faa81f53e9610abcb7d9bf4e1d125a80db6d364dc4c23130a9c9945c718cbfc2cc8e1c87fa94b5d9df122cbc5d666d1651bec2fef55bf844a9b8c2153e93ab189e640e0aec6232ca1530a3b3aef285506196adbe3ab879c2abd9648c3461772d2645f593fb3026747abc445d2e3bfa41216899c05a6870ef1125d00000080cd18b0aaa487fd86faee2a88904e0abc3d74647e71e1922749dda126d58e0ebfe8b85af430b28a6ddccddf70335be0a1c7ccabba0b47cc9c3163f257f91285df33d7f38f0cde8f5e92857fed52dd64ba89b59243a2ab1ea897e81c41ca29428db157d182efdc50be71dbd49fc72f774fb95008cc3d858f859eb3b883cc101dae83bb9865703343539ebac9114a86370b4ff56f8c6cb543279fdb0ea21868cc8e1080d039cda894933c604b978ff16dade3c87f3cac549a9359b37576e466efe756dd82ebd649122cfbea505cccbb4855cd1920b14672cd3f421fdfae1b78cc7cac84bfe33cf1ab8e8f5ac42635161cf02800c0eb7be40e2f9c8c59232b9ead441ae9d491775bef0cb889414e261c07981bce21beae0fd575f1768c554c75c48e55a2c83efcb752a9dab92185946468de8fbe614df036beb5d3a0be5f0ddce5d1aa6ba0567a01346cf2b894227cb3da5a3ff9bbe696a46dbcb722f77361fcb9eb026b5d604750325227d97a4fcd6da478737d16e765bcbee8fcaa0f7a58cd3713376228314a860bb94a5e7c15b9e3ee9528516744b1a7289bca60f4c18026b817947d2ee4a384e89341ad8ce3c20afc7f2bfa394d6395ba7f239ded32582d4b792b32aae186182c8c79a3af1f21462b483042aed469a690f79348d06a3a486d2d6790c11b592eac7f8eeda0d5ecb18977482920b3c40e16549b462d2903813a30fbc59a05b293b00a5c656e21a3d4e90be10b0c9f574dc2c171d376713e7bdc8ce2b65b4212974a87fed7b76d031399f130a8ac0479ece0a7b0f324fc6940eb04084c55a911374d308737ff179ec0df4c19562fe6285ec1d87f08413027233be84c5256993a68143ad467cc9cfa5e82b3da2cf4edaf510c6fc78b58eb316094ed5514a4eb75747ba7a1569e402ce33a14e017d35c8d2b27d386f519875d857f1ff91aa8615636865b72bdef009f0f844b9c136a80c2083e7148d4f02e8ee0b39468483c0477a6226cd7f41fdd0fa9ecbc55ffd17111fd68e6dc8270eda5b0cbcafce8c57be5865514b32bae409d7e9b0ce831a10ba19039fc75fe790d8a30d9285356cb381c919c27d46c7ffad197157790475c29f7204094d3dba11a763d6843be5681f1054635199fc230432d86d0aaa60268a1b4dfd68ca7de86d2e5cf8f4575ef8be9f5257a7001741a591285311405c938d08e2066eabde05a2ab64c04f936ede8a741186a7a62c057684d2fbc56b76d1104a910dd05b160bd1812bfedd756a36bf0a501fbe729e811ec509a3e24acb662942234294e475fb6ab1d11b4e47f816d4d5ec198198b1a18963b37e0be19b4013f06c3f33e7e6a3150fd59fb86b6f974b2d0f45b654bc323be9c325926117f2fa1c0368f1e16e66e77aa47bc241f7e311cf81db7b244599729d09446f31b632d77220d212075a8ed2e67569530891616458f8a237ba902e23c1787b004238ca42fcdd711c0c5c19fd7281d1140a93a29e34223adba3782fbc361a18698866d2beb97963ec9616f2d6a8b9ab4383a671dc1d0615f657948b372836e47d76e96a350f70c7916b62f9e1ddb4db52cd99fcfeb643f2bc24f2b02feffa057e604438c3ff404dadc4ed93295e32abc9e0d12af239cf397dbdd68cdc02babb01d8003a7e5dd86a9abda4de57a2d3b9f4770016073cb6f65b1854777546cfc5ecd3baf6796ac1f9a1722cd4b40ba77202c116f4e3ca71afec7a64a062baf7f0dd5b3abe72304dd6423f1a3ae551e301fae3bb56ba5163bde3075b4269b5ae45b9d3bf2dabe471ff03ea75de1f5af50b33f0ec4c583aea96994de64a88d3deca13244f497d84ecefb6c4f9a31701dcb1b184c5f911bd6ef43e8b4e59fae8015d9673f7bac3ae1aa098a3ca870a1732c6b82814be81071edabf1f510b0cbe927a79d6adc73bf520a5dd564f3553ea25c979a2d3acebfe194334e83352a70b5f0c4467436c9c60ba5d3fe9ef146783c67e4163c863592852a1d799f7e1c5f1cb4d462a075b36403737f3eba633ab390bbf1260d0bec9c0a57f6ab1ff4a7f7005e50a411a9d2ee94325a2392e0722ea071f595bb2356a9af169afdd87a35987076cdd7992274f74c8420b028636318ea9c5763781f9c8c25ffc48d0b0290feef5d54cc649d498dda3f8a25902b6044ad0fc9db1ea9403980e0397c59c0f31c2c8f0fcdf31004cb47a1e8e7fe0fb5a5e63873582cb8a768cdaa33472f7358cda276f12c987c015151650e5acf235c49f63c39f9e57197a457995c4ee3d4d14135b92087e6aec30b1d930d2099e23e17217f5730b480210249758507d7462f6cc5d552751e47c55261bb27d1699b97f254f810220d538dc7306e819d190ceab85f0b819ab4a71ac2006a836772cd28c4f37fe9cce9a8fad0ed0ec9be3783c563d8f9866ed6bd22d7925fbcb05be4a8846eaddabe128345b58b2944e094372ebff4a94f95de72cff857fad948624bad89f3e8d70a0f19c32c14dbe9494610ebe460fd18f6238fc49bbad7671f047913ceaa9fdbf07cbd3a8ea5c5cdc51115fd3ff1106d0780cd400bdd048b863fec591af85b49a401ad944cbb203c414dabe646698e31053a6425f40d260313dcab4631cd25eadec877fdc2242de20322178d2f95840ef5beb72e52d975ebc02fdfc447d704acc5c98091e8f92f4bac3171b58628eb84426f7b03c3b19b254b596fd145e2d4a109b64d38e06bad1bb8ed3f8bdbda09ddafd18d68672f70e92ed8fab6f3429cb3f23b28d4854581b66c78e3bad3b5e88f9998d2cfa16e57ea3c7e898e23393decdbac781aba72c09a8b6f3c78dcd2f1e2052ec87309fcff5f0da79fdc01bd939a960e1adab30f93800edae875cb039366f4692bcd978fb5519dae49836b221b6053aab34ab5c2c7e353bc0ed1097aca9383e87d1c8b33b66fa0b4a547576283f0df36213e35a19828e12fef03f318d0d57f3d712361245543b1399a3006f692f1951e25017c5886459fa001aa0bbfd9287bddb8d4528e89ca2b91fc57185525b06f396cc7f72df81f2cfaafc0fdc431c5a0e2f610a0b5ec404f7779129d6d26fa3ae856b4761cdd54ccb4271a058c1247f9d659c3290d032a1c0a3ea59a35a92c3af8c7caa26014e280d32f9313422670853370e2f50c2b2f79789577c7f44fcbceb1ba5127d222d80c3fc7ff132a11831c4871cb7b7599920327072fcdd5e214f058bb8fa4777e9d791991583b0d3f2d4e3d28ddda1e93fbf2db03ac694bec604f9c64fcbba65973892073ad5c64a9893611cd8bdd157e773f3765933fb6559449062d33a7b4779603d7e2653c00b118cf52051a952f7ae08a2ddd78f7dbefdbe598009e383d0d9f89c2247e90030f881424e2c1bc54bfa54919b3d054aa9bc9a539bbfd3b08a5c6fda350906be86629d742f022aa55a0ecf3896dc885e66fb87b64e7f62f241d684eb60c", 0x1018, 0x34}, {0x2, 0x5, &(0x7f00000023c0)='{\x00', &(0x7f0000002400)="2b9f2bf01071d41ce856ef074c34986e3a1e449febf22619a43a06c559db2558d761eb2e1b02006d317c100de2e8cb1a3a6980526573118f5a05c2b62991527f43b3e209d6ea92e53ec022be15608c7573d0859ad7c131687712ad225bd400730000000000000800000000", 0x6b, 0x10}, {0x3, 0x145aec9b, &(0x7f0000002480), &(0x7f00000024c0)="8535af2b87fd9daf0ae77cb0416530995ab66e7a372fa714853ea3b3e423cf9b4726ea2cb92929b089bb73a3a87c8a42e3451166982ded8eaa4dd3468fa1ac646233c86f97838338126258eabd4a1e3d1e", 0x51, 0x12}, {0x3, 0x3, &(0x7f0000002540)=',)\x93n', &(0x7f0000002580)="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", 0x1000, 0x10}, {0x1, 0x10, &(0x7f0000003580)='p\x9cL\x00\x00', &(0x7f0000000740)="b8cc8d306226739b18201bddaa65e8091a757ff5e06a3e05b35ec8", 0x1b, 0x1a}, {0x3, 0xfffffffa, &(0x7f0000003600)='\x00', &(0x7f0000003640)="79db71004f5996f6d416538016ed7b795fcc05d4d012c6732b71ef155c6bbb2d32d689e38a718c555600363f65d2d4c6c844d646be46fbfd76cb6f00d023c82d3d", 0x41, 0x20}]}) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r12) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r13, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3ff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r13, 0x222, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x404c0) 546.283546ms ago: executing program 0 (id=7082): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x5]}, {0x8, 0xfff7, 0x1, 0xad8}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x26c}, {[0xffffffff, 0x7, 0x6, 0xf]}, 0x0, 0x0, &(0x7f0000000100)}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route_sched_retired(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newtclass={0xa0, 0x28, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff1}, {0x7, 0x3}, {0x10, 0x8}}, [@c_atm={{0x8}, {0x5c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0x7}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x40, 0x3, "89051fb33bf6920b2e335e88d2234b456cc649d45357b419a9ce569777559dc3ff7c9605948ad1c3b8704ac069630d7af4dee3e0b17648c6830b7412"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newtclass={0xa0, 0x28, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff1}, {0x7, 0x3}, {0x10, 0x8}}, [@c_atm={{0x8}, {0x5c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0x7}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x40, 0x3, "89051fb33bf6920b2e335e88d2234b456cc649d45357b419a9ce569777559dc3ff7c9605948ad1c3b8704ac069630d7af4dee3e0b17648c6830b7412"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000400)) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@broadcast, 0x1, 0x0, 0x10, 0x0, [{@loopback}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@broadcast, 0x1, 0x0, 0x10, 0x0, [{@loopback}]}}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000004c0)={'veth1_to_bridge\x00', @random="c69ba9d6e065"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x50000, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, [0xfffffffffffffffe, 0x4493, 0x8, 0x248, 0xff, 0x8b, 0x100000000, 0x3c, 0xffffffffffff1005, 0x80000000, 0x41, 0x7fffffff, 0x6, 0x10, 0xc10d]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000006c0)={r5, 0x7f, 0x5}, 0x8) syz_emit_ethernet(0xf9, &(0x7f0000000700)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0x1dec6, 0x0, 0x1}, {0x7f}, {0x7f, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x401, 0x0, 0x1}], @generic="65831073c20f83a2c8fae6a037f0916851b2f5e7dc0bc9a686999ff0e69446e4551fd10454e02672fffadcab0b786e862bccd231b7686280445dfee61a10115d16b55022fd2ceadf9e360e4093c70c4947b1203f28eb3381d5f70eb2d8a6834b55263f2528d2e3a3d64a6a75c61cf8171f4a5771c9df32dd72b825153d994b5d8456a2a057e497e8a1afdf40d41457998f4aa7082088dc1fafdb98fa37ae1c0971c4e5fa5c59ccdad66c215d7afb640bf8627b58152207c3859bb641c435388b56ba9f269b4e0aebeaa9bfcd6ce8a4"}}}}, &(0x7f0000000800)={0x1, 0x1, [0xbef, 0xe15, 0x5b5, 0x7cb]}) (async) syz_emit_ethernet(0xf9, &(0x7f0000000700)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0x1dec6, 0x0, 0x1}, {0x7f}, {0x7f, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x401, 0x0, 0x1}], @generic="65831073c20f83a2c8fae6a037f0916851b2f5e7dc0bc9a686999ff0e69446e4551fd10454e02672fffadcab0b786e862bccd231b7686280445dfee61a10115d16b55022fd2ceadf9e360e4093c70c4947b1203f28eb3381d5f70eb2d8a6834b55263f2528d2e3a3d64a6a75c61cf8171f4a5771c9df32dd72b825153d994b5d8456a2a057e497e8a1afdf40d41457998f4aa7082088dc1fafdb98fa37ae1c0971c4e5fa5c59ccdad66c215d7afb640bf8627b58152207c3859bb641c435388b56ba9f269b4e0aebeaa9bfcd6ce8a4"}}}}, &(0x7f0000000800)={0x1, 0x1, [0xbef, 0xe15, 0x5b5, 0x7cb]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000840)={0x100, 0x2, 0x2, 0x26d, 0x5, 0x2, 0x5, 0xfffffffe, r5}, &(0x7f0000000880)=0x20) r6 = accept$phonet_pipe(r4, &(0x7f00000008c0), &(0x7f0000000900)=0x10) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r0, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000004100)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000040c0)={&(0x7f0000000ac0)=@newchain={0x35ec, 0x64, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0xd}, {0x9, 0xfff2}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_u32={{0x8}, {0x356c, 0x2, [@TCA_U32_POLICE={0x1ca0, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x47, 0x10000000, 0x9, 0xbfb, 0x3, {0x5, 0x1, 0x8001, 0x0, 0x2, 0x3}, {0xff, 0x2, 0x2, 0x4, 0xd, 0x9}, 0x200, 0x4, 0xfffffffc}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xc, 0x8376, 0x100, 0x21000000, 0x2, 0xb, 0xd3, 0x2, 0x8, 0x7, 0xffff, 0xfd, 0x30ff, 0x9, 0x100, 0x3, 0x7, 0xfffffff9, 0x4, 0x1, 0x0, 0xfb87, 0x4, 0x3, 0x2, 0x3, 0x100, 0x0, 0x0, 0xfff, 0x9, 0x10, 0x8, 0x6, 0x7fff, 0x8, 0x6, 0xf097, 0x1, 0x0, 0x71203aac, 0x6, 0x0, 0x3ff, 0x1, 0x4, 0x5, 0x6291, 0x60ffb6d, 0x7, 0x5, 0x3, 0x1, 0x9, 0x6, 0x1, 0x4, 0x6, 0x8001, 0x7fffffff, 0xfffffff8, 0xac, 0x6, 0x8, 0xb5a4, 0x8, 0x20, 0x8, 0xffff, 0x9, 0x3, 0x5, 0x1, 0x8, 0x8001, 0x4, 0x800, 0xc, 0xfffffff9, 0x7, 0x0, 0x7, 0x10, 0x4, 0xa81, 0x3, 0xaaa3, 0x6, 0xceb9, 0xfffff800, 0x7, 0x0, 0x0, 0xc0a, 0x8, 0xb0, 0x6, 0x81, 0x0, 0x6, 0x101, 0x7, 0x4, 0x7fffffff, 0xaa, 0x1, 0xc2f, 0x1, 0x2, 0x9, 0x9, 0x101, 0xffffffff, 0xff, 0x1, 0xe7d, 0x1, 0x9, 0x1, 0x3f37, 0x9, 0xfffffffc, 0x1, 0x80, 0xfff, 0x7, 0x3, 0x8, 0xffffffff, 0x7, 0x9, 0x6, 0x100, 0x0, 0x0, 0x0, 0x2, 0x9b2, 0x6428, 0x94, 0x7ff, 0xffffffff, 0x0, 0x100, 0x80, 0x7, 0x4, 0xf4, 0x4, 0x1, 0x43, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x4, 0x5, 0x8, 0x7, 0x5, 0x2, 0x3, 0x80000001, 0x93f4, 0xd7, 0x3, 0x4, 0x8, 0xfffffff7, 0x2, 0x4, 0x6, 0x8000, 0x0, 0xffffffff, 0x4, 0x1ff, 0x81, 0x3, 0x7fffffff, 0x7, 0x5, 0x433f847f, 0x4, 0x5, 0x2, 0xc, 0xebfb, 0x40, 0x3, 0xfffffffc, 0xdd3, 0x9, 0xb, 0x6, 0x0, 0x96b, 0x44, 0xc097, 0x3, 0x3, 0xd1, 0x1000, 0x5, 0x400, 0x6, 0x0, 0xe, 0x4, 0x401, 0x2, 0x7, 0x1000000, 0x10000, 0x4, 0x0, 0x1, 0x8, 0x9, 0xffff, 0x4, 0xa4f, 0x6, 0x800, 0x5, 0x5, 0x9, 0xfffffff7, 0x8, 0x1, 0x1, 0x3, 0x6f3, 0x1af2b8ba, 0x0, 0x8001, 0x3, 0x6, 0x80, 0x2, 0x4, 0x6, 0x101, 0x2, 0x8, 0x4, 0x8, 0x1c, 0xe7d5, 0x7fff, 0x5, 0x40, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x7, 0x5, 0x5, 0x8000, {0x3, 0x1, 0x4, 0x5, 0x8f, 0x6}, {0x0, 0x0, 0x5, 0xf442, 0x1000}, 0x401, 0x80008000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0xa4d9, 0x9, 0x9, 0xd9, 0x2, 0xfffffffd, 0x1, 0x9c, 0x6393, 0x8, 0x7, 0x9, 0xda, 0xfffffffb, 0x6, 0x6, 0x5d, 0x80000000, 0x4, 0x7, 0xda4, 0x4, 0x7fffffff, 0x7fff, 0x37, 0x81, 0x3, 0x9, 0x8001, 0x4, 0x89, 0x1, 0x2, 0x3, 0x3, 0xad, 0x5, 0x9, 0x1, 0x9, 0x5, 0xb2, 0x9, 0x2, 0x6, 0x40, 0x800, 0x7, 0x7, 0x0, 0x5, 0xed, 0x80, 0x10000, 0x1211, 0xfffffffd, 0x3, 0x1000, 0x9, 0xfff, 0xdad4, 0xfcc90c98, 0xf3, 0x5, 0x2, 0x9, 0xa1f, 0x9, 0xfffffff5, 0xfffffff9, 0x4, 0x5, 0x1, 0x59, 0x1, 0x9, 0x8, 0x1be, 0x8, 0x0, 0x4, 0xcb, 0x9, 0x7, 0x5, 0x500, 0x9, 0xe4e, 0xffffffff, 0x0, 0x80000001, 0x6, 0xff, 0x8, 0x80, 0x5, 0x2, 0x7, 0x200, 0x56, 0x9, 0x5, 0x5, 0xf4c00000, 0x7, 0x0, 0x1, 0x2, 0x969, 0x3ff, 0x2, 0x2, 0x100, 0x7fff, 0x0, 0x80000000, 0x0, 0x6, 0x1, 0x8, 0x7fffffff, 0x7, 0xb2, 0x39, 0x3, 0x9, 0x2, 0x81, 0xe, 0xffffffff, 0x1, 0x80, 0x6, 0xed5, 0x4, 0x7, 0x80, 0x80, 0x7, 0x9, 0x4, 0x4, 0x10, 0x0, 0x5, 0x1, 0x2, 0x40000, 0x7, 0xb4c, 0x5, 0x7ff, 0x6, 0x37e5, 0x4, 0xd, 0x7, 0x5, 0x1, 0x4, 0xb7, 0x4, 0x1940, 0x5, 0xfffffff8, 0x7fffffff, 0x8f51, 0x1, 0x3, 0x1c, 0xe93, 0x2e26, 0x9, 0xffffffff, 0x8, 0x5b56362f, 0x7, 0x9, 0x0, 0x7, 0x8001, 0x8000, 0x5f76, 0xffff8001, 0x5, 0x5, 0x1, 0xe0d2, 0xf89, 0x7, 0x3, 0xc6, 0xfff, 0x7, 0x8000, 0xfff, 0x115, 0x1000, 0x2, 0x1, 0x6, 0x2, 0x3, 0x6, 0xe, 0x0, 0x0, 0x8000000, 0x2, 0x0, 0x9c, 0xfffffffb, 0xff, 0x5, 0x1000, 0x4, 0xb8f, 0x1ff, 0x1, 0x8, 0xec, 0x0, 0x6, 0x0, 0x4, 0x5b, 0x4, 0xf, 0x22c, 0xa36d, 0x3, 0x6, 0x5, 0x0, 0x2, 0x6, 0x9, 0x7, 0x8, 0x0, 0xfffffff9, 0x4, 0x5, 0x1, 0x8, 0x10, 0x9, 0x20080000, 0x1, 0x3, 0xd6, 0x7, 0x8, 0xad73, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2, 0x2, 0x8000, 0x81, 0x0, 0x1, 0x7fff, 0xb, 0x1, 0xfffffffe, 0x7, 0x0, 0x7d88, 0x1, 0x84, 0x94f3, 0x1, 0x1, 0x0, 0x2, 0x4, 0x6, 0x7, 0xa8a, 0x2, 0xa, 0x2, 0xffff, 0x3b, 0x4, 0x6e, 0x5, 0x9c8, 0x2, 0x0, 0x5, 0x8, 0x401, 0x9, 0x9, 0x378e, 0xfe5a, 0x7, 0x4, 0x6, 0x0, 0x4, 0xffff, 0xffff8001, 0x9, 0x1ff, 0xb, 0x5, 0x43e, 0x0, 0x101, 0x2, 0x401, 0xfffffffe, 0x5, 0x9, 0x2, 0x8000, 0x5, 0x1, 0x3ff, 0x3088, 0x1, 0x9, 0x95fb, 0x2, 0x1, 0x8, 0x9, 0x6, 0x9, 0xfffff9d9, 0x8, 0x80000001, 0xafa, 0x6, 0x5, 0x0, 0x7, 0x6, 0x15, 0x1, 0x5, 0x6, 0xf, 0x9, 0x8, 0xffffff92, 0x1, 0x7, 0x5, 0x6, 0x7, 0x6, 0x3, 0x6, 0xfa4, 0x3, 0x7, 0x774, 0x6, 0x13, 0x4, 0x1, 0x9, 0x0, 0x7, 0x0, 0xfffff800, 0xdc16, 0x5, 0x7dd, 0x9, 0x0, 0x1, 0x9, 0x8, 0x2d, 0x8, 0x79, 0xfff, 0x8, 0x2ef, 0x200, 0x0, 0xffff, 0x5, 0x10001, 0x0, 0x40, 0x9, 0x8, 0x3, 0x2bc, 0x0, 0x3ff, 0x6, 0xffffffff, 0x6, 0x6, 0x1, 0x3, 0x400, 0xf6797a2, 0x1ff, 0xe, 0x10001, 0x13, 0xd, 0xc1, 0x2b2e, 0x8, 0x10000, 0x8, 0xd, 0x5, 0xfffffffd, 0x0, 0x9, 0x200, 0x0, 0x9, 0x1000, 0xd006, 0x10000000, 0x9, 0x3, 0x6, 0x81, 0x119d, 0x9, 0xdb8, 0x8, 0x2, 0x2, 0xfffffff6, 0x0, 0x1, 0x685, 0x3, 0x0, 0x3b4, 0x6, 0x2, 0x7ff, 0x17, 0x671add8c, 0x2, 0x3, 0x0, 0x6, 0x8137, 0x3, 0x0, 0x4, 0x1ff, 0x9, 0x0, 0xc21, 0x1000, 0x8, 0x800, 0xffffffff, 0x3ff, 0x8, 0x851, 0x2d39, 0xecad, 0x80000001, 0x7fff, 0x80000, 0x2, 0x62, 0xf5, 0x80000001, 0x0, 0x5, 0xffffffb4, 0x10, 0xf, 0x81, 0x6, 0xe, 0x1, 0x800, 0xa54, 0xfc, 0xa, 0xc, 0x0, 0x4, 0x2, 0x80, 0x0, 0x1c9b, 0x0, 0x7, 0x5, 0x0, 0x3, 0x9, 0xff, 0x6, 0x2, 0x3, 0x3, 0xff, 0x1, 0xfffffff9, 0x90]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x101, 0x9, 0x6, 0x7f, 0x5, 0x6, 0x3, 0x3, 0x10001, 0x3, 0xe, 0x1, 0x7, 0x7, 0x80, 0x80000000, 0x8, 0x400, 0x7fff, 0xf5f1, 0x2, 0x100, 0x8, 0x4, 0x6, 0x1, 0x1, 0x8, 0x6, 0x5, 0x1, 0xe6, 0x1, 0x3, 0x1, 0x2, 0xff, 0x10001, 0x8000, 0x45, 0x8, 0x5, 0x101, 0x2, 0x401, 0x1, 0x2, 0x4, 0x0, 0x9, 0x6, 0x2, 0xfffffff6, 0x79, 0x101, 0x5, 0xf2, 0x2, 0x7, 0xf, 0x6, 0x0, 0xe7f5, 0x6, 0x7fff, 0x5, 0x1, 0x25d7cba1, 0xff, 0x4, 0x4, 0x7, 0x3, 0x3, 0x6, 0x5, 0x9, 0x7fffffff, 0x0, 0x1, 0x161b, 0x1, 0x7fff, 0xfffffff7, 0x4, 0x7c88, 0x7, 0x8, 0x2, 0x9, 0x6, 0x2, 0x2, 0x4, 0x3, 0x7, 0xc20, 0xffffffff, 0x8001, 0x3ff, 0x5628, 0x99, 0x6, 0x200, 0x398, 0x6, 0x499, 0x4, 0x8001, 0x1, 0x40, 0x2, 0x1, 0x3, 0x0, 0x1, 0x5, 0x40, 0x9, 0xff, 0xff, 0x17, 0x5, 0x6, 0x1, 0x10001, 0x1000, 0x9, 0x1ce, 0x2, 0x800, 0xec9, 0x0, 0x2, 0x5f2, 0x5, 0xfffffffc, 0xa12, 0x8, 0x9, 0x9, 0x3f3, 0x4, 0x1, 0x3, 0xffff, 0xfffffff8, 0x8001, 0x8, 0x4, 0x5, 0x9, 0x2, 0x6, 0x2, 0xe, 0x9, 0x5b, 0x4, 0x1, 0x1000, 0x7ff, 0x1, 0x267, 0x9, 0x3, 0x2, 0x3ff, 0x615f, 0xfd66, 0x10, 0xfffffffd, 0x0, 0x318f, 0x3, 0x9, 0x6, 0x3, 0x7, 0x4, 0x2c0000, 0x4000, 0x2, 0x7f, 0xf76f, 0x10000, 0x7ff, 0x80, 0x6, 0xe5dd, 0x3, 0x0, 0x76, 0x6, 0x4, 0x1, 0xfff, 0x0, 0x7, 0xba, 0x1, 0xfffffff7, 0x5, 0xffff, 0x7fffffff, 0x4, 0x1, 0x80000001, 0x3, 0xffffffff, 0x9, 0x8, 0xc3, 0x1, 0x5, 0x0, 0xf53, 0x0, 0x0, 0x9, 0x0, 0x6, 0x101, 0x400, 0x3, 0x5, 0x3, 0xe, 0x3, 0x4, 0x1, 0x5, 0x8, 0xfffeffff, 0x4, 0x4, 0x800, 0x80000000, 0xc, 0x6, 0x81, 0x7, 0x6, 0x100, 0xc000, 0x5, 0x3, 0x400, 0x6, 0xfffffffa, 0x0, 0x363b, 0xa, 0xffffffae, 0x155]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x81, 0xffff, 0x3ad, 0x10001, 0x5, 0x5, 0x6, 0x0, 0x9, 0x80000000, 0x0, 0xfffffffc, 0x5, 0x7, 0x1, 0x0, 0x5a44, 0x3, 0x9, 0x4, 0x3, 0x4, 0x4, 0x0, 0x9142, 0x8000, 0xb, 0xf2b, 0x8, 0x1, 0x990, 0x3, 0x8, 0xe9b4, 0x1, 0x7, 0x5, 0x40, 0x1, 0x4e9b, 0x5, 0x7, 0x0, 0x7, 0x79, 0x0, 0xfffff000, 0xb, 0x0, 0x8, 0xb, 0x6c9a, 0x2, 0x7ff, 0x1c0, 0x1, 0xe, 0x1000, 0x1, 0x71, 0xdf8, 0x4, 0x7, 0x7f, 0xb, 0x9, 0x0, 0x7ff, 0x5, 0x4, 0x8, 0x0, 0x7fffffff, 0x9, 0x2d3, 0xf0d4, 0x7ff, 0x80000000, 0x1, 0x5, 0x7fff, 0x2, 0x400, 0x0, 0x8, 0x1000, 0x0, 0x4be, 0x8000, 0x3, 0x2, 0x6, 0x80000001, 0xfffffffd, 0x6, 0x5, 0x1, 0x6, 0x6, 0x5, 0xe9, 0x1, 0x8000, 0x6, 0x6, 0x8, 0x6, 0x4, 0x7, 0x40, 0x5ce, 0x6, 0x7, 0x9, 0x9, 0x1, 0x5, 0x1, 0x8, 0x8, 0x0, 0xb, 0x0, 0x2, 0x14d3ee53, 0x8, 0x2, 0x279, 0x6, 0xffffffff, 0x0, 0x3, 0x949d, 0x661, 0x5, 0x7f, 0x2, 0xd65, 0xfffffffe, 0x4, 0x7, 0x8, 0x1, 0x30fb, 0x1, 0xf5da, 0x4, 0x8, 0x0, 0x1d, 0x44d, 0x0, 0x9, 0x1000, 0x4, 0x8000, 0x9, 0x4, 0xfffffffe, 0x3, 0x726, 0xf84, 0x9, 0x23d, 0x9, 0xe7, 0x6, 0x80, 0x36, 0x7, 0x5, 0x2, 0x7, 0x1, 0xc8f5, 0x9, 0x8, 0x101, 0x0, 0x5, 0xfffffffe, 0x8001, 0x7f, 0x2, 0x7dd, 0x2, 0x0, 0x6, 0x5, 0x7, 0x10000000, 0x7, 0x4, 0x32, 0x8, 0x6, 0x7, 0x92, 0x6, 0x10, 0x80000001, 0x194, 0x9, 0x29, 0x2, 0x200, 0x65, 0xc5b, 0x7, 0x7, 0x5, 0x7, 0xca4, 0x5, 0x5, 0x2, 0x8, 0xb6, 0x3, 0x401, 0x5, 0x5d, 0x5, 0x7, 0x8001, 0x5, 0xd40f, 0x1, 0x2, 0x1, 0x3, 0xa5, 0x20, 0x6e1, 0xaf3, 0xfffffffe, 0x200, 0x40, 0x1ff, 0x9, 0x8001, 0x2, 0x8000, 0x0, 0x1, 0x375, 0x80000001, 0x12, 0x3ff, 0x5, 0x5, 0x6, 0x3, 0x8, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7000, 0xa81, 0x6, 0x4, 0xb, 0xfffffffd, 0xf, 0x8, 0x3, 0xfffffff6, 0x81, 0x78, 0x4, 0x200, 0x5, 0x1, 0x9, 0x1000, 0x7, 0x401, 0xa, 0x0, 0x276e, 0x875a, 0x7c3, 0x3, 0x1, 0x80000001, 0x8, 0x2, 0x2, 0x8, 0x0, 0xfffffffb, 0x5a0, 0x0, 0x80000001, 0x1, 0x5, 0x3, 0x8, 0x1, 0xf, 0x6a, 0x10, 0xd, 0xe, 0x0, 0x3, 0x1, 0x4020, 0x6, 0xd5, 0x7, 0x5, 0x2, 0xc5, 0x2, 0x5, 0x0, 0x82, 0x3e5, 0xf1, 0x2, 0x1, 0x4, 0xe3d, 0x7fffffff, 0x9, 0x9, 0x6, 0x400, 0x5c, 0xff, 0x1800, 0xf, 0x8b36, 0x9, 0x742d, 0xd, 0x6, 0x1, 0x4, 0x3, 0x1000, 0x5, 0x5, 0x55, 0x6, 0xfffffff9, 0x8, 0x5, 0x401, 0x1000, 0x1, 0x8, 0xea35, 0x1, 0x400, 0x6, 0x481, 0xfffffe01, 0x0, 0x400, 0x14000, 0x1, 0x9, 0x0, 0x4, 0x5, 0x2, 0x4, 0x3, 0x1, 0x7, 0x9, 0x6, 0x100, 0x3, 0x1ff, 0x6, 0xfff, 0xffffff00, 0x9, 0x80000001, 0x100, 0xb, 0x37e, 0x8, 0x8, 0xf, 0xff, 0x9, 0x8, 0x835d, 0xfffffffb, 0x7fffffff, 0x5, 0x0, 0xfffffff2, 0xc, 0xff, 0x8000, 0xff, 0xb, 0x0, 0x2, 0x5, 0x8, 0xd9c1, 0x9, 0x3, 0xe780, 0x1, 0x3, 0xffff, 0x6, 0x200, 0x8, 0x4c6, 0x4, 0x200, 0x8e95c03c, 0x6, 0x0, 0x8001, 0x7f, 0x100, 0x3, 0x5, 0x4, 0x0, 0x1ff, 0x7, 0x1, 0x2, 0x3, 0x6eb7, 0xcb, 0x3, 0x3, 0xb8, 0x4, 0x6, 0x8, 0x9, 0xf, 0x3, 0x3, 0x7, 0x81, 0x9, 0xef, 0xf, 0xff, 0x5, 0x8, 0xe85e, 0x5, 0x10000, 0x3, 0x80, 0x8, 0xffffffff, 0xd, 0x8, 0x100, 0x2, 0x8000, 0x7ff, 0x6, 0x8, 0x1, 0xc, 0x0, 0x8, 0xffff, 0x78, 0x1, 0x10001, 0x5, 0x9, 0x2, 0x7, 0xe, 0x8000, 0x8000, 0x4, 0x2, 0x3, 0x3ff, 0x7fffffff, 0x0, 0x5, 0x9, 0x4ea94028, 0x8, 0x6, 0x5901, 0xfff, 0x6, 0x4, 0xfff, 0x6, 0x1, 0x1, 0x2, 0xfae1, 0x771757da, 0x7, 0x93, 0xfff, 0xfffffffe, 0x7eb17056, 0xbb38, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9d76, 0xfffffffb, 0x10, 0x3, 0x9f4, 0x96b, 0x1, 0x0, 0x761c, 0x7b16, 0xffffffff, 0xc, 0x4, 0x8, 0x4, 0x8001, 0x27, 0x5, 0x53, 0x4, 0xfffffae2, 0xffff, 0x51, 0x5, 0x7, 0xcb, 0x7fff, 0x5, 0x1, 0xe2, 0xe0c, 0xffffffff, 0x8, 0xd, 0x5, 0x404, 0x6, 0x4, 0x5, 0x6, 0x1, 0x5, 0x401, 0x0, 0xc, 0x1, 0x2, 0x0, 0x2, 0x7, 0x4, 0x1, 0x9, 0xffffffff, 0x2, 0x5, 0xc, 0x9, 0xe1, 0x5, 0x0, 0x2, 0x1, 0x5, 0x5, 0x5, 0x3, 0x4, 0x99, 0x4, 0x3, 0x180, 0x7, 0x7fff, 0x6, 0x10001, 0x6, 0x7f, 0x6, 0x2, 0x9, 0x4, 0x661a, 0x7ea, 0x685, 0x8, 0x200, 0x7, 0x1000, 0x7, 0xffffffff, 0x2e, 0x1, 0x4, 0x5, 0x80000000, 0x40, 0x0, 0x2, 0x0, 0x3, 0x401, 0x96, 0x3, 0xc, 0x80000000, 0x7fff, 0x3, 0x100, 0x48, 0x0, 0x53c15faf, 0x7, 0x6, 0xfffffffa, 0x8000, 0xb08, 0x80, 0xa73e, 0x4, 0xff, 0x7, 0x2, 0x8, 0xe06, 0x1, 0x0, 0x101, 0x4, 0x9, 0x5, 0x4, 0x3, 0x5, 0x0, 0x1, 0x7, 0xe, 0x22a9, 0x7fff, 0xab, 0xf34, 0x2, 0x0, 0x4e8, 0x2000000, 0x800, 0x2, 0x7, 0x8, 0x7, 0x1, 0x7, 0xe, 0x100, 0xffff, 0x8, 0x29, 0x0, 0x8001, 0x80000001, 0x1, 0x10000, 0x7, 0x5, 0x3, 0x4, 0x5, 0x3, 0x3, 0x0, 0x0, 0x8, 0x81, 0x8, 0x6, 0xb607, 0x6ac, 0xeea, 0x98, 0x9, 0x101, 0x3, 0x1, 0x4, 0x6, 0xfff, 0x69, 0x12b, 0xfffffff7, 0x5, 0x78, 0x40, 0xffffffff, 0x5, 0x10, 0x9, 0x1e, 0x3, 0x46, 0x6, 0x8001, 0x3, 0x1000, 0x2, 0xfff, 0x0, 0x80000000, 0xd, 0x3, 0x80000001, 0xffffffff, 0x4, 0x5, 0x2, 0x6, 0x100, 0xffff, 0x3, 0x200, 0x6, 0x9, 0x3, 0x4, 0x6, 0x4, 0x7fffffff, 0x0, 0x2, 0x3ff, 0x4, 0x3, 0x200, 0x0, 0x0, 0xdd, 0x6, 0x3, 0x2, 0x3, 0x4, 0x4a, 0x9, 0xb, 0x10001, 0x200, 0xc, 0x0, 0x0, 0x1, 0x4, 0xffffffff, 0x1, 0x0, 0x6, 0x2]}]}, @TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_FLAGS={0x8}, @TCA_U32_POLICE={0x82c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7, 0x9, 0x9002, 0xf54, 0x77a, 0x6, 0x10001, 0x100, 0xe1ae, 0x72d, 0x0, 0x5, 0x7f, 0x9, 0xe74, 0xff, 0x1, 0x100, 0x3, 0xffff6bce, 0xae7, 0x0, 0x2, 0x0, 0x6, 0x4, 0x80000001, 0x7f, 0x7, 0x3, 0x13, 0x6, 0x5, 0x1000, 0x1, 0xa, 0x1, 0x3f, 0x3, 0x4, 0xb, 0xac8, 0x9, 0xff, 0x40, 0x3, 0x25, 0x7, 0x9be, 0x3ff, 0x1, 0x2, 0x400, 0x8, 0xffffffff, 0x258c058c, 0x5, 0x3, 0xfffffff9, 0x7, 0xd7e, 0x6, 0x2, 0x1, 0x8, 0x800, 0x7fffffff, 0x7fffffff, 0x0, 0x1a24, 0x2, 0x7, 0xfffffffd, 0x6, 0x6, 0x2, 0x80, 0xb0, 0x9, 0x80000000, 0x2, 0x7, 0x8, 0x81, 0x40, 0xfff, 0x3, 0x1, 0x0, 0x5, 0x7, 0x7f, 0x6, 0x89f0, 0x0, 0x5, 0x2, 0xeac, 0xfffffff9, 0x2, 0xe45, 0x9, 0x2, 0xfffffffd, 0x2, 0x10, 0x5, 0x2, 0x7, 0x5, 0xb, 0x54d8, 0xa07a, 0x1, 0x3ff, 0x7, 0x6, 0xffffffff, 0x7f, 0x4, 0x6, 0xfffffffb, 0x2, 0x1, 0x3, 0x1000, 0x5, 0x3, 0x98, 0x8, 0x3, 0x4, 0xfffffffb, 0x90b5, 0x1, 0x6, 0x3800000, 0x40, 0xfffffff8, 0x2, 0xf6, 0x9, 0x2, 0x35, 0x3, 0x8, 0x80000000, 0x4, 0x3ff, 0x4ca, 0x7, 0x6d0, 0xf, 0x0, 0x7, 0x25b, 0x10000, 0x1, 0x8, 0x5, 0x0, 0x6, 0xe, 0xb, 0x3ff, 0xb7, 0x2, 0x2, 0xe3, 0x7f, 0x7fffffff, 0x0, 0x1000, 0x5, 0xffff, 0x9, 0x1000, 0x80000001, 0x10, 0x2, 0x8000, 0xe, 0xfffffff7, 0x6, 0x7fffffff, 0x4, 0xfffffff7, 0x0, 0x1, 0xff, 0x100, 0x9, 0x9, 0x9, 0x38, 0xc47e, 0x8, 0x0, 0x0, 0x9, 0x10000, 0x5, 0x0, 0x7f, 0x0, 0xeb, 0x4, 0xf5, 0x7, 0x6, 0x6, 0x7, 0x5, 0x800, 0x1, 0x0, 0x1, 0x7, 0x1d00000, 0x7, 0x100, 0x3, 0x3, 0x6, 0x1000000, 0x60000000, 0x5, 0xcd, 0x8, 0x1000, 0x2, 0x0, 0x8000, 0x40, 0xf, 0x2, 0x0, 0xfdf, 0x1, 0x3, 0xfffffffc, 0x1, 0x2, 0x7f, 0x1, 0x5, 0x7, 0x7, 0x80, 0x2, 0x10001, 0x91, 0xece, 0x7ff, 0x200]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x8, 0x1, 0x19, 0x4, 0x100, 0x80, 0x5, 0x9a, 0x7, 0x0, 0x0, 0x7fffffff, 0x1, 0x80000000, 0x1, 0x90d, 0x6, 0x4, 0x1, 0x795, 0x1, 0xfffffe5b, 0x9, 0xd3a, 0x8, 0x1, 0x100, 0x3, 0x0, 0x0, 0x1, 0x2, 0xf, 0x10000, 0x53ccac47, 0x6, 0x0, 0x0, 0x3, 0x1ff, 0x5, 0x6, 0x8, 0x400, 0x8, 0x0, 0x2, 0x1f1, 0x9, 0x2, 0xfffffffe, 0x200, 0x0, 0x5, 0x400, 0x3, 0xfffffffb, 0x4, 0x81, 0x7, 0x3, 0x82, 0x10, 0x8001, 0xfffffffa, 0xfffffffb, 0x7, 0x9, 0xb, 0x3, 0x6, 0xe7, 0x7, 0xfff, 0x5, 0x6, 0x0, 0x6, 0x80000001, 0x2, 0xb, 0x3ef0, 0x5, 0x8, 0x5, 0x6a48, 0xff, 0xfffff342, 0x7, 0xffffffff, 0x7f, 0x7, 0x6, 0x8, 0x2, 0x9, 0xffff0f71, 0x5, 0x80000001, 0x7fffffff, 0x5804, 0x10000, 0x461f, 0x1000, 0xa49, 0x99b4, 0xd4, 0x1000, 0x5, 0xbc, 0x0, 0x3, 0x5c, 0x1, 0xfffffa41, 0x9, 0x6995bb3e, 0x9f, 0xf, 0x3eeb, 0xffffffff, 0x3ff, 0xfffffffe, 0x72, 0x8, 0x6, 0x7, 0x2, 0x1, 0x3ff, 0x91, 0xd, 0xf73, 0x6, 0x3, 0x4c8, 0x9, 0x81, 0x7, 0x2, 0x4, 0x0, 0x81, 0xa33, 0x8, 0x8000, 0x0, 0x8, 0xfffffffe, 0x101, 0x80000001, 0x2, 0x1, 0x64, 0x9cd, 0x7, 0x0, 0x0, 0x8, 0x8, 0x7, 0x24, 0xfa, 0x8, 0x7, 0x6, 0x28742cbf, 0xa9b8, 0xd3ef, 0x710a, 0x6, 0x10001, 0x5, 0xffffce4d, 0xd8f, 0x8, 0x6, 0x5, 0x0, 0x7f, 0x7, 0x3, 0x400, 0x9, 0x5, 0x5a9728b1, 0x535, 0xa316, 0x8, 0xe, 0x9, 0x0, 0x40004, 0x254c98ba, 0x1000, 0x1, 0x7fffffff, 0x81, 0x9, 0x95, 0x0, 0x0, 0x5, 0x5, 0x1, 0x2, 0x10001, 0xcc, 0xfffffa87, 0x80, 0x7, 0x2ab1, 0x0, 0xffff, 0x5, 0x3, 0x1faa, 0x6, 0x5, 0x3, 0xffffffff, 0x2, 0x2, 0x7, 0x7fff, 0x8a, 0x1ff, 0x4, 0x1, 0x2, 0x3ff, 0x5, 0x347, 0x2, 0x1, 0x7, 0x7, 0x2, 0x9, 0xb9, 0x6, 0xa0f, 0xfffffff8, 0x4, 0x5, 0x3, 0x1, 0x0, 0x6, 0xffff, 0x400, 0x67cc1ea7, 0x5625, 0x965, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff00}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_U32_POLICE={0x1034, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x95}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xd, 0x7fff, 0x3, 0x5, 0x6, 0x7fffffff, 0x8, 0x3b034376, 0xff, 0x2, 0x2, 0x4, 0x1, 0x400, 0x0, 0xedb4, 0x0, 0x6b1, 0x4, 0xa6, 0x9, 0xb, 0x98b7, 0x82, 0xb, 0xdc, 0x1, 0xff, 0x0, 0x1, 0x80000001, 0x8, 0x7f, 0x8, 0x100, 0x10000, 0x10000, 0x8, 0x8, 0x23, 0x6, 0x100, 0x100, 0x8, 0x6, 0x4, 0x7, 0x6, 0xfffffffd, 0xfff, 0x1, 0x3, 0x6, 0x8, 0x3, 0x7fff, 0xd, 0x800, 0xffff, 0x1, 0x7, 0x5, 0xfffffffb, 0x9, 0x9, 0x3, 0x9, 0x2, 0x400, 0x8, 0x8, 0xf4, 0x80, 0x7, 0xffffffb8, 0x94b3, 0x200, 0x0, 0x4, 0xe9, 0x578f, 0x1, 0x0, 0x7ff, 0x9, 0x5, 0xe, 0x6, 0x9, 0x0, 0x4, 0x0, 0x5, 0x2, 0x31a2, 0x7, 0x6, 0xfffffff8, 0xa, 0x5, 0xfffffff9, 0x101, 0x3, 0x2a5, 0x81, 0x0, 0x9, 0xe04, 0x3, 0x400000, 0x354, 0x0, 0x6, 0x6, 0x2, 0x7, 0x7, 0xbb9e, 0x6, 0xf4, 0x7ff, 0x1e, 0x7, 0x7, 0xc57, 0xffff, 0x6, 0x80, 0x81, 0x401, 0xfd3, 0x3, 0x80000001, 0x4, 0xa52d, 0x2, 0x7fffffff, 0x3, 0x2498, 0x3ff, 0x5, 0x7fffffff, 0x4850, 0x9, 0x1, 0x71e81d9e, 0x7, 0xfffffbff, 0x6e, 0x2, 0x9, 0x3df5, 0x9, 0x7, 0xa3, 0xf67a, 0x11, 0x5, 0x2, 0xfffffffe, 0x7, 0xcd24, 0xfffffff4, 0x2, 0x6, 0x40, 0x5, 0x54, 0x0, 0x1000, 0xf, 0x6, 0xa, 0x3, 0x2, 0x401, 0xa, 0x9, 0x1, 0x1, 0x0, 0x6b9b, 0x8c2e, 0x7eb4, 0x4, 0x4, 0x4, 0xff, 0x1, 0xeb, 0x6, 0x10000, 0xfff, 0x3, 0x6, 0x6, 0x1, 0x2, 0xd, 0xa6, 0x200, 0x4b29, 0x0, 0x4, 0x4, 0x7, 0x7fff, 0x8, 0x4, 0xd, 0x8, 0x7, 0x576204bc, 0x3, 0x400, 0x4482a9cc, 0x7, 0xc757, 0x3, 0x5, 0xfffffffc, 0x2fd8, 0x0, 0x94, 0x5, 0x101, 0x8, 0x8, 0x10, 0x6, 0x9, 0x9, 0x80000001, 0x5, 0x0, 0xffff, 0x3, 0x1, 0x9, 0xf, 0x2, 0xffff, 0xefa, 0x7fffffff, 0x0, 0xeb01, 0xfffffff8, 0x9, 0x9, 0x8000, 0x7, 0x1, 0x1, 0x7fffffff, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x7f, 0x9, 0xf, 0x80000001, 0x0, 0x6, 0x8c8f, 0x6f, 0xaa53, 0x1, 0x7, 0x5, 0x6227, 0x100, 0x0, 0x3, 0x58, 0x9, 0x400, 0x800, 0x1, 0x80000001, 0xff, 0x3, 0x4, 0x4, 0x212d, 0x2, 0x9, 0x2, 0x80000001, 0x9, 0x10, 0xffffffff, 0x3, 0x9, 0x800, 0x7, 0x2, 0x8, 0x0, 0x4, 0x6, 0xffffffff, 0xd97e, 0xd, 0x6, 0xa35, 0xb3, 0x3631, 0x0, 0x3, 0x9, 0x101, 0x1000, 0xffffffd7, 0x8, 0x800, 0xffffffff, 0x9, 0x7, 0x10001, 0x5, 0xb, 0x1, 0x7, 0x7, 0xfffeffff, 0xc1, 0xa, 0x8, 0x81, 0x101, 0x506, 0x7, 0x8, 0xfffffffc, 0x7, 0x8000, 0x200, 0x10000, 0x3c, 0xc, 0x5, 0x5, 0xffffd36b, 0xff, 0x10000, 0x5, 0xdb, 0x3, 0x400, 0x0, 0x1, 0x7, 0x80000001, 0x1000, 0x10, 0xe969, 0xc, 0x2, 0x2, 0xe84e, 0x1, 0x3, 0x0, 0x0, 0x1, 0x7, 0x3, 0xfffff01e, 0x1, 0x3, 0xeaec, 0xffffffad, 0x8, 0x100, 0xffffffff, 0x80000000, 0x5ba, 0x1, 0x9, 0x4, 0x1, 0xaf, 0x3, 0x28000000, 0x2, 0x2, 0x7, 0x400, 0x9, 0x7, 0x3, 0x3, 0x850c, 0x34, 0x4, 0xdc, 0x8, 0x4, 0x8, 0x9, 0x8, 0x9, 0x2, 0x81, 0x7fff, 0x0, 0x9fe, 0x1, 0xd, 0x3, 0x1000, 0x446, 0x7, 0xaa55, 0x0, 0xb8, 0x6, 0x6, 0x4, 0x5, 0x4, 0x8, 0x6, 0xf7, 0x9, 0x8, 0x0, 0xb, 0xd6, 0x2, 0x4, 0x0, 0xd, 0x0, 0x2, 0x0, 0x1ff, 0x2, 0x9, 0x7fffffff, 0x0, 0x9, 0xb375, 0xa443, 0x2, 0x7, 0x8, 0x3, 0x2, 0xffffffff, 0x4, 0x1, 0x2d, 0x2, 0xb, 0x7, 0x3, 0x1, 0xfffff257, 0x5, 0x71, 0x2c5, 0x5, 0x9, 0x2, 0x5, 0x40f7, 0x4, 0xa, 0xfffffc00, 0x9, 0x8, 0x1, 0x7, 0x400, 0x9, 0x60, 0xffffff01, 0x1, 0x7, 0x6, 0xfffffe01, 0xfffff389, 0x6, 0x5, 0x4, 0xffffffff, 0x8, 0xcf, 0xf, 0x4, 0x2, 0x2, 0x7, 0x4, 0x1, 0x8, 0x0, 0x9, 0x3, 0xfffffff8, 0x7, 0x1, 0x5, 0x6c, 0xfffffffe, 0xff, 0xc9, 0x1000, 0x3, 0x2000000, 0x8001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x28, 0x6, 0x0, 0x0, 0x1, 0x2, 0x2, 0x9, 0x2, 0x7, 0x77, 0x6, 0x2, 0x0, 0x3, 0x7f, 0xffffffff, 0x8, 0x9, 0xfffffffc, 0x3, 0x3, 0x80, 0x1ff, 0x7fff, 0xa0ef, 0x3, 0x7, 0x4, 0x3, 0x0, 0x7, 0x7, 0x401, 0x0, 0x6, 0xea, 0x61, 0x0, 0x38, 0x3, 0x44, 0x5, 0xfffeffff, 0x1, 0x64, 0x1000, 0x3ff, 0x7, 0x7, 0x4, 0x10001, 0x401, 0x7, 0x9, 0xa490, 0x9, 0x0, 0x3, 0xffffffff, 0x1, 0x2, 0x6, 0x2, 0x6, 0x66c, 0x0, 0x5a, 0x5, 0x7ff, 0x6000000, 0xa, 0x3c3, 0x8, 0x7f, 0x3, 0x6, 0x2, 0xba, 0x2000000, 0x3, 0x0, 0x4, 0x3, 0x7ff, 0x3e, 0xcd8fc8, 0xee, 0x5, 0x6, 0x1, 0x0, 0x1, 0xd, 0x135, 0xff, 0x1, 0x80, 0x5, 0x0, 0x3, 0xe5c, 0xc3, 0xec3, 0x0, 0xd4e, 0x1, 0x2, 0x1, 0x7, 0x3, 0x3, 0x6, 0x2, 0x6, 0x0, 0x7fff, 0xffffffff, 0x9, 0x8, 0x5, 0x1, 0x3, 0x101, 0x5, 0x0, 0xffffffff, 0x0, 0x9, 0x8, 0x40, 0x46, 0x0, 0x8000, 0x40, 0x73c, 0x4e29a31f, 0x1000, 0xfffff800, 0x2, 0xf, 0x8, 0x9, 0x8499, 0x7, 0x8, 0x25, 0x5, 0x2, 0x5, 0xfff, 0x4, 0xffff, 0x8d, 0x4, 0x0, 0xfffffffc, 0x5, 0x100, 0x3618, 0x39, 0x9, 0x7ff, 0x7, 0x7fffffff, 0x3, 0x6, 0x0, 0xf6d, 0x2, 0x3, 0x800, 0xb01a, 0x1, 0x5, 0x2, 0x5, 0xb1, 0x401, 0x8001, 0x622, 0xdd8, 0x80000001, 0x5, 0x7, 0x16d, 0x2, 0x8, 0x80, 0xe, 0xfff, 0x1, 0x3, 0xfffffffd, 0x2, 0xe6cb, 0x6, 0x6, 0x0, 0x1bfe, 0x89, 0x10, 0x0, 0x3, 0x0, 0x100, 0xffff8001, 0x7, 0x9, 0x8, 0xc54, 0x4, 0x1, 0x5, 0x9, 0xfffffffd, 0xfffffffd, 0x1, 0x3a, 0xef9e, 0x3, 0x3, 0xfffffffe, 0x2c6d, 0x7, 0x9, 0x4, 0x80, 0xffff9b99, 0x5, 0x1000, 0x9, 0x7, 0x5, 0x0, 0x101, 0x10000, 0xb1, 0x4, 0x3, 0x2, 0x9, 0x1, 0x5, 0x9, 0x9, 0x800, 0xffff, 0xbe, 0x0, 0x2, 0x1, 0x1, 0xc000000, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x6, 0x5, 0x9de, 0x40, 0xe, 0x5365d02b, 0xffffa8db, 0x74e, 0x5, 0x9, 0xe, 0x80000000, 0x0, 0x6, 0xffff, 0x0, 0x8e, 0x7, 0xaf75, 0x7, 0x80000001, 0x9, 0x8, 0x5, 0xd, 0x6, 0x8001, 0x2, 0x5a3, 0x3, 0x0, 0x7, 0xffffffff, 0x1000, 0x8, 0x3, 0x401, 0xff, 0x3, 0xb145, 0xfffffffc, 0x6, 0x297, 0x0, 0x5, 0x0, 0x2, 0x70591a67, 0x4, 0x7, 0xfffffffc, 0x5, 0xfdc, 0x3, 0x8, 0x7, 0x8, 0x7, 0x8, 0x9, 0x400, 0x7fff, 0x80, 0xffff8000, 0x200, 0xb3bd, 0x6, 0x3, 0x1, 0x5, 0x2, 0xaa1f, 0x3, 0x2, 0x9, 0x8, 0x7, 0x5, 0x8, 0x500000, 0x80000000, 0x8, 0x3, 0x8, 0x8, 0xa, 0x9, 0x5, 0x0, 0x1, 0xb6, 0x999, 0xa, 0xfffffffc, 0xea8, 0x10000, 0x80000001, 0x2, 0xb42, 0x3, 0xbc, 0x0, 0x7, 0x1, 0xffff7282, 0x2, 0x3, 0xfff, 0x60a8, 0x5a, 0x6, 0x6, 0x8, 0x10, 0xfff, 0x5, 0xee, 0x10, 0x9, 0xfffffff8, 0x9, 0x8, 0x4, 0xaaaf, 0x8, 0x5, 0xfffffffe, 0x0, 0x280d, 0xffffffff, 0x800, 0x9, 0xe93, 0x3, 0x4, 0x8, 0x9, 0x5, 0xb, 0x6, 0x1e4, 0x7ff, 0x389, 0x3, 0xfffffffb, 0xf127, 0x3, 0x3, 0x2, 0xffffffff, 0x8, 0x3, 0x9e, 0x0, 0xa, 0x3, 0x0, 0x6, 0x220edeb1, 0xfffffffb, 0x4, 0x2e48, 0x2, 0x7, 0xfffffffa, 0x7fff, 0x1, 0xffff, 0x4, 0x3, 0x9, 0x8, 0x200, 0x4, 0x88, 0xfffffff7, 0x7d5, 0x5, 0x7, 0x200, 0x0, 0xe8f8, 0x0, 0x80000001, 0x9, 0x0, 0x3, 0x7fff, 0x8, 0x20000000, 0xe472, 0x1000, 0x5, 0x81, 0x9, 0x0, 0x5, 0x40, 0xa47, 0x2, 0x7, 0x3, 0x5, 0x2, 0x1, 0x401, 0x0, 0x2, 0x2, 0x1, 0xa12, 0x9, 0x7, 0x2, 0xfffffffa, 0x3, 0x41fd, 0xd, 0x401, 0x0, 0x6, 0x6e08de07, 0x6, 0x5, 0xdca5, 0x4, 0x6, 0x10, 0x4, 0x4, 0x4, 0x5d5, 0x7ff, 0x3, 0x3, 0x3, 0x40, 0x80000000, 0xfffffffe, 0x2, 0x5, 0x3, 0x202, 0x2, 0x9, 0x0, 0xaf0, 0xcb, 0xb, 0x9, 0x2, 0x7, 0x2, 0x26]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x26}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_POLICE={0x50, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xe0000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6aa2, 0x1000000d, 0x10001, 0x0, 0x81, {0x8, 0x1, 0x4, 0x9dd, 0xb, 0x599}, {0x2, 0x1, 0x9, 0xeb8e, 0x40, 0x4}, 0x7fff, 0x7, 0xfffffff9}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xf69}]}}]}, 0x35ec}, 0x1, 0x0, 0x0, 0x80}, 0x880) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000004140), 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000041c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000004280)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004300), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x34, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xb6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x11) write$tun(r3, &(0x7f0000004400)={@void, @val={0x2, 0x0, 0x4, 0xff81, 0x4, 0x5}, @ipv4=@tipc={{0x2c, 0x4, 0x3, 0x5, 0xdb, 0x68, 0x0, 0xd, 0x6, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0xe3}, @timestamp_addr={0x44, 0x14, 0x3f, 0x1, 0x0, [{@rand_addr=0x64010100, 0xfffff246}, {@broadcast, 0x562}]}, @timestamp_prespec={0x44, 0x2c, 0x27, 0x3, 0x3, [{@rand_addr=0x64010100, 0x4}, {@private=0xa010102, 0x7}, {@empty, 0x6a5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7}, {@empty, 0x4}]}, @generic={0x86, 0x12, "dea8eac04cf2cf60dfaac97361b33414"}, @timestamp_prespec={0x44, 0x1c, 0x2f, 0x3, 0x6, [{@broadcast, 0x9}, {@rand_addr=0x64010102}, {@loopback, 0x4}]}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x6, [{@multicast2, 0x1}, {@broadcast, 0x95a5}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x2, [0xfd, 0x0, 0x5]}, @noop]}}, @payload_named={{{{{0x2b, 0x0, 0x1, 0x1, 0x0, 0xa, 0xb92a9629b88de8db, 0x2, 0xa, 0x0, 0x0, 0x8, 0x0, 0x2, 0x1, 0x7, 0x3, 0x4e23, 0x4e21}, 0x4, 0x1}, 0x0, 0x3}}, [0x0, 0x0, 0x0]}}}, 0xe5) (async) write$tun(r3, &(0x7f0000004400)={@void, @val={0x2, 0x0, 0x4, 0xff81, 0x4, 0x5}, @ipv4=@tipc={{0x2c, 0x4, 0x3, 0x5, 0xdb, 0x68, 0x0, 0xd, 0x6, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0xe3}, @timestamp_addr={0x44, 0x14, 0x3f, 0x1, 0x0, [{@rand_addr=0x64010100, 0xfffff246}, {@broadcast, 0x562}]}, @timestamp_prespec={0x44, 0x2c, 0x27, 0x3, 0x3, [{@rand_addr=0x64010100, 0x4}, {@private=0xa010102, 0x7}, {@empty, 0x6a5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7}, {@empty, 0x4}]}, @generic={0x86, 0x12, "dea8eac04cf2cf60dfaac97361b33414"}, @timestamp_prespec={0x44, 0x1c, 0x2f, 0x3, 0x6, [{@broadcast, 0x9}, {@rand_addr=0x64010102}, {@loopback, 0x4}]}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x6, [{@multicast2, 0x1}, {@broadcast, 0x95a5}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x2, [0xfd, 0x0, 0x5]}, @noop]}}, @payload_named={{{{{0x2b, 0x0, 0x1, 0x1, 0x0, 0xa, 0xb92a9629b88de8db, 0x2, 0xa, 0x0, 0x0, 0x8, 0x0, 0x2, 0x1, 0x7, 0x3, 0x4e23, 0x4e21}, 0x4, 0x1}, 0x0, 0x3}}, [0x0, 0x0, 0x0]}}}, 0xe5) write$cgroup_int(r0, &(0x7f0000004500)=0x80, 0x12) (async) write$cgroup_int(r0, &(0x7f0000004500)=0x80, 0x12) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000004540)={'team_slave_0\x00', @local}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000004540)={'team_slave_0\x00', @local}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000046c0)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004680)={&(0x7f00000045c0)={0x84, 0x31, 0x400, 0x70bd2d, 0x0, {0x1b}, [@generic="467d7650f05bdc03cf8511813264937c0ccbeb0491d3e9d3200a8b00835e0fb858560d2ebc3602b51ed8c81247ea04965ade34db8f8edb8dd006174082fe6190b57cc72ac784c4eb6c9a2d2cf660a7fa9fb60fdf39d0c42644bb7caf", @typed={0x8, 0x2800, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xac, 0x0, 0x0, @fd=r2}, @generic, @nested={0x4, 0x85}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000005) (async) sendmsg$nl_generic(r10, &(0x7f00000046c0)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004680)={&(0x7f00000045c0)={0x84, 0x31, 0x400, 0x70bd2d, 0x0, {0x1b}, [@generic="467d7650f05bdc03cf8511813264937c0ccbeb0491d3e9d3200a8b00835e0fb858560d2ebc3602b51ed8c81247ea04965ade34db8f8edb8dd006174082fe6190b57cc72ac784c4eb6c9a2d2cf660a7fa9fb60fdf39d0c42644bb7caf", @typed={0x8, 0x2800, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xac, 0x0, 0x0, @fd=r2}, @generic, @nested={0x4, 0x85}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000005) 436.663549ms ago: executing program 4 (id=7083): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010400000000000000000c0000000c0000000600000004140000000000930100000000265f5f2e00"], 0x0, 0x2a, 0x0, 0x9, 0xfffffffe}, 0x28) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="654e2dbd70ffffffff2503400000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="180700000000000000000000000400001858000001000000000000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[0xffffffffffffffff, r4], 0x0, 0x10, 0x2}, 0x94) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x4000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0}) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x104a8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) sendto(r11, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @any, 0x9}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) 277.265414ms ago: executing program 0 (id=7084): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) 225.661994ms ago: executing program 1 (id=7085): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010400000000000000000c0000000c0000000600000004140000000000930100000000265f5f2e00"], 0x0, 0x2a, 0x0, 0x9, 0xfffffffe}, 0x28) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="654e2dbd70ffffffff2503400000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="180700000000000000000000000400001858000001000000000000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[0xffffffffffffffff, r4], 0x0, 0x10, 0x2}, 0x94) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x4000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0}) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x104a8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) sendto(r11, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @any, 0x9}, 0x80) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x20000}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r13, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r14}, 0x4) 193.619888ms ago: executing program 0 (id=7086): syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 0s ago: executing program 4 (id=7087): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0x400, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @void}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x11, 0x0, &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c000000100021e57165d8abb3b5ba846f6d0000", @ANYRES32=0x0, @ANYBLOB="000004007573443b4c0012800b00010069703667726500003c000280080004006d00000008000d000900000006000200060000000500080001000000060010004e21000008000100", @ANYRES32, @ANYBLOB="06000f00"], 0x6c}}, 0x40000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.3.6279'. [ 937.412014][T28037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6279'. [ 937.690332][T28061] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 937.692203][T28061] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 937.755815][T28063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6288'. [ 937.809143][T28065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6288'. [ 937.863238][T28073] SET target dimension over the limit! [ 937.864583][T28073] SET target dimension over the limit! [ 937.895757][T28073] SET target dimension over the limit! [ 937.895946][T28073] SET target dimension over the limit! [ 937.896090][T28073] SET target dimension over the limit! [ 937.896227][T28073] SET target dimension over the limit! [ 937.896365][T28073] SET target dimension over the limit! [ 937.896506][T28073] SET target dimension over the limit! [ 937.896649][T28073] SET target dimension over the limit! [ 937.896799][T28073] SET target dimension over the limit! [ 937.923008][ T7331] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.935248][ T7326] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.936505][T25269] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.936619][T25269] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.190718][T28083] netlink: 'syz.1.6292': attribute type 18 has an invalid length. [ 938.304714][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6291'. [ 938.314228][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6291'. [ 938.346454][T28088] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6291'. [ 938.361387][T28088] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6291'. [ 938.469017][T28090] FAULT_INJECTION: forcing a failure. [ 938.469017][T28090] name failslab, interval 1, probability 0, space 0, times 0 [ 938.469080][T28090] CPU: 1 UID: 0 PID: 28090 Comm: syz.4.6293 Not tainted syzkaller #0 PREEMPT(full) [ 938.469106][T28090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 938.469146][T28090] Call Trace: [ 938.469178][T28090] [ 938.469217][T28090] dump_stack_lvl+0xe8/0x150 [ 938.469323][T28090] should_fail_ex+0x410/0x560 [ 938.469427][T28090] should_failslab+0xa8/0x100 [ 938.469507][T28090] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 938.469606][T28090] ? trace_kmem_cache_alloc+0x29/0xe0 [ 938.469690][T28090] ? nf_ct_ext_add+0x1b6/0x3f0 [ 938.469752][T28090] ? nf_ct_ext_add+0x1b6/0x3f0 [ 938.469815][T28090] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 938.469905][T28090] ? nf_ct_ext_add+0x1b6/0x3f0 [ 938.469969][T28090] krealloc_node_align_noprof+0x19a/0x390 [ 938.470046][T28090] nf_ct_ext_add+0x1b6/0x3f0 [ 938.470122][T28090] init_conntrack+0x647/0x1080 [ 938.470212][T28090] ? __pfx_init_conntrack+0x10/0x10 [ 938.470295][T28090] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 938.470355][T28090] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 938.470418][T28090] ? __siphash_unaligned+0x25c/0x3e0 [ 938.470541][T28090] nf_conntrack_in+0xc13/0x1600 [ 938.470659][T28090] ? __pfx_nf_conntrack_in+0x10/0x10 [ 938.470758][T28090] ? ipt_do_table+0x2b9/0x15d0 [ 938.470892][T28090] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 938.470965][T28090] ? ipv4_conntrack_local+0x126/0x210 [ 938.471053][T28090] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 938.471154][T28090] nf_hook_slow+0xc5/0x220 [ 938.471246][T28090] ? __pfx_dst_output+0x10/0x10 [ 938.471312][T28090] nf_hook+0x22a/0x3a0 [ 938.471393][T28090] ? nf_hook+0xa1/0x3a0 [ 938.471456][T28090] ? __pfx_nf_hook+0x10/0x10 [ 938.471536][T28090] ? __pfx_dst_output+0x10/0x10 [ 938.471619][T28090] ? __ip_local_out+0x152/0x6a0 [ 938.471694][T28090] __ip_local_out+0x558/0x6a0 [ 938.471764][T28090] ? __pfx_dst_output+0x10/0x10 [ 938.471839][T28090] ip_local_out+0x2a/0x190 [ 938.471919][T28090] ip_push_pending_frames+0x8b/0x110 [ 938.471996][T28090] raw_sendmsg+0x1486/0x1a20 [ 938.472117][T28090] ? __pfx_raw_sendmsg+0x10/0x10 [ 938.472192][T28090] ? lock_acquire+0x115/0x350 [ 938.472344][T28090] ? aa_sock_msg_perm+0xfc/0x210 [ 938.472405][T28090] ? sock_rps_record_flow+0x19/0x350 [ 938.472487][T28090] ? inet_sendmsg+0x298/0x320 [ 938.472557][T28090] ? apparmor_socket_sendmsg+0x98/0x360 [ 938.472650][T28090] ? __pfx_inet_sendmsg+0x10/0x10 [ 938.472721][T28090] sock_sendmsg_nosec+0x10e/0x180 [ 938.472805][T28090] ____sys_sendmsg+0x54e/0x850 [ 938.472886][T28090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.472977][T28090] ? import_iovec+0x73/0xa0 [ 938.473054][T28090] ___sys_sendmsg+0x2a5/0x360 [ 938.473116][T28090] ? __lock_acquire+0x6df/0x2e50 [ 938.473188][T28090] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.473343][T28090] ? __fget_files+0x2a/0x420 [ 938.473415][T28090] ? __fget_files+0x3a2/0x420 [ 938.473541][T28090] __x64_sys_sendmsg+0x1b1/0x290 [ 938.473643][T28090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.473766][T28090] do_syscall_64+0x166/0x520 [ 938.473849][T28090] ? trace_irq_disable+0x3b/0x140 [ 938.473909][T28090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.473971][T28090] ? clear_bhb_loop+0x70/0xc0 [ 938.474047][T28090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.474109][T28090] RIP: 0033:0x7f1debd9e159 [ 938.474163][T28090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.474221][T28090] RSP: 002b:00007f1deccee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.474277][T28090] RAX: ffffffffffffffda RBX: 00007f1dec025fa0 RCX: 00007f1debd9e159 [ 938.474326][T28090] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 938.474359][T28090] RBP: 00007f1deccee090 R08: 0000000000000000 R09: 0000000000000000 [ 938.474399][T28090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 938.474432][T28090] R13: 00007f1dec026038 R14: 00007f1dec025fa0 R15: 00007ffd9e5dd548 [ 938.474541][T28090] [ 939.848564][T28138] netlink: 'syz.0.6302': attribute type 2 has an invalid length. [ 939.848610][T28138] netlink: 'syz.0.6302': attribute type 8 has an invalid length. [ 940.705138][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 940.719864][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 940.731504][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 940.740764][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 940.749903][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 941.036154][T28173] xt_hashlimit: size too large, truncated to 1048576 [ 941.175344][T28176] xt_hashlimit: size too large, truncated to 1048576 [ 941.630234][T28184] __nla_validate_parse: 7 callbacks suppressed [ 941.630290][T28184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6317'. [ 941.709674][T28185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6318'. [ 941.949114][T28195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6321'. [ 942.011159][T28160] wg2 speed is unknown, defaulting to 1000 [ 942.204273][T28198] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6321'. [ 942.354480][T28204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6323'. [ 942.631169][T28207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6325'. [ 942.809833][T19441] Bluetooth: hci5: command tx timeout [ 942.885012][T28207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.964669][T28160] lo speed is unknown, defaulting to 1000 [ 942.978439][T28213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.006630][T28207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.236108][T28214] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.236925][T28214] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.244704][T28218] netlink: 'syz.2.6327': attribute type 1 has an invalid length. [ 943.445880][T28214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.462659][T28214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.808717][T25265] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.819261][ T7331] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.899428][T25270] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.900753][T25270] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.371084][T28160] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.379734][T28160] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.380254][T28160] bridge_slave_0: entered allmulticast mode [ 944.382682][T28160] bridge_slave_0: entered promiscuous mode [ 944.412484][T28160] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.414111][T28160] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.414296][T28160] bridge_slave_1: entered allmulticast mode [ 944.437284][T28160] bridge_slave_1: entered promiscuous mode [ 944.555274][T28246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6333'. [ 944.588959][T28160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.603569][T28160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.737472][T28160] team0: Port device team_slave_0 added [ 944.745612][ T7337] IPVS: starting estimator thread 0... [ 944.785368][T28160] team0: Port device team_slave_1 added [ 944.804859][T28247] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6333'. [ 944.829017][T28250] IPVS: using max 27 ests per chain, 64800 per kthread [ 944.877803][T19441] Bluetooth: hci5: command tx timeout [ 944.930887][T28160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.930932][T28160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.930963][T28160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.972885][T28160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.972947][T28160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.973023][T28160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.070996][T28252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6334'. [ 945.273145][T28160] hsr_slave_0: entered promiscuous mode [ 945.282310][T28160] hsr_slave_1: entered promiscuous mode [ 945.287433][T28160] debugfs: 'hsr0' already exists in 'hsr' [ 945.287503][T28160] Cannot create hsr debugfs directory [ 945.319882][T28234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6329'. [ 945.319948][T28234] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 945.910066][T28160] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.945050][T28273] 0ªî{X¹¦: renamed from gretap0 [ 945.962385][T28273] 0ªî{X¹¦: entered allmulticast mode [ 945.978515][T28273] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 946.020223][T28160] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.133027][T28160] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.280296][T28160] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.698894][T28160] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 946.719115][T28160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.720668][T28160] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 946.749350][T28160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.752617][T28160] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 946.783631][T28160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.792723][T28160] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 946.827049][T28160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.969044][T19441] Bluetooth: hci5: command tx timeout [ 947.193732][T28307] __nla_validate_parse: 6 callbacks suppressed [ 947.193802][T28307] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6349'. [ 947.249655][T28160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.272433][T28160] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.293969][ T7337] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.294136][ T7337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.325156][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.325408][ T7326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.140996][T28333] debugfs: '.�PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 948.150500][T25265] IPVS: starting estimator thread 0... [ 948.181478][T28331] netlink: 'syz.2.6355': attribute type 38 has an invalid length. [ 948.181519][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6355'. [ 948.238338][T28341] IPVS: using max 28 ests per chain, 67200 per kthread [ 948.845379][T28359] netlink: 'syz.2.6361': attribute type 3 has an invalid length. [ 948.845425][T28359] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6361'. [ 949.039969][T19441] Bluetooth: hci5: command tx timeout [ 949.064576][T28160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.146499][T28369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6363'. [ 949.356993][T28160] veth0_vlan: entered promiscuous mode [ 949.419640][T28160] veth1_vlan: entered promiscuous mode [ 949.553719][T28160] veth0_macvtap: entered promiscuous mode [ 949.574024][T28160] veth1_macvtap: entered promiscuous mode [ 949.650945][T28160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.703364][T28160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.762756][ T7326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.762924][ T7326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.763739][T25265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.763853][T25265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.850585][T28383] openvswitch: netlink: IP tunnel dst address not specified [ 950.176436][ T7337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.176485][ T7337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.356742][T25268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.365986][T25268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.765724][T28397] netlink: 'syz.4.6372': attribute type 1 has an invalid length. [ 950.765778][T28397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6372'. [ 951.316776][T28424] syzkaller0: entered promiscuous mode [ 951.316827][T28424] syzkaller0: entered allmulticast mode [ 951.336395][T28415] wg2 speed is unknown, defaulting to 1000 [ 951.361514][T28424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6378'. [ 951.397111][T28424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6378'. [ 951.589807][T28434] netlink: 'syz.0.6380': attribute type 1 has an invalid length. [ 952.265137][T28444] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 952.320904][T28451] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 952.344664][T28415] lo speed is unknown, defaulting to 1000 [ 952.585188][T28458] netlink: 'syz.1.6384': attribute type 1 has an invalid length. [ 952.716948][T28460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 952.726790][T28460] bond0: (slave bond1): Enslaving as an active interface with an up link [ 952.923460][T28469] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6387'. [ 953.682920][T28487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6391'. [ 953.788098][T28493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6393'. [ 953.985732][T28498] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6393'. [ 954.598648][T28515] netlink: 'syz.1.6399': attribute type 1 has an invalid length. [ 954.598699][T28515] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6399'. [ 955.148147][T28537] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 955.383347][T28554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6407'. [ 956.141188][T28571] siw: device registration error -23 [ 956.154902][T28572] netlink: 'syz.4.6412': attribute type 1 has an invalid length. [ 956.209113][T28572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 956.229005][T28578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6411'. [ 956.433223][T28578] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6411'. [ 956.642788][T28597] netlink: 'syz.1.6419': attribute type 1 has an invalid length. [ 956.650877][T28595] FAULT_INJECTION: forcing a failure. [ 956.650877][T28595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.650913][T28595] CPU: 1 UID: 0 PID: 28595 Comm: syz.2.6417 Not tainted syzkaller #0 PREEMPT(full) [ 956.650939][T28595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.650953][T28595] Call Trace: [ 956.650962][T28595] [ 956.650972][T28595] dump_stack_lvl+0xe8/0x150 [ 956.651115][T28595] should_fail_ex+0x410/0x560 [ 956.651235][T28595] _copy_from_user+0x2d/0xb0 [ 956.651306][T28595] __copy_msghdr+0x390/0x590 [ 956.651380][T28595] ___sys_sendmsg+0x213/0x360 [ 956.651443][T28595] ? __lock_acquire+0x6df/0x2e50 [ 956.651514][T28595] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.651705][T28595] ? __fget_files+0x2a/0x420 [ 956.651785][T28595] ? __fget_files+0x3a2/0x420 [ 956.651887][T28595] __x64_sys_sendmsg+0x1b1/0x290 [ 956.651961][T28595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 956.652057][T28595] do_syscall_64+0x166/0x520 [ 956.652108][T28595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.652170][T28595] ? clear_bhb_loop+0x70/0xc0 [ 956.652250][T28595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.652303][T28595] RIP: 0033:0x7f9721b9e159 [ 956.652356][T28595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.652414][T28595] RSP: 002b:00007f97229c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.652485][T28595] RAX: ffffffffffffffda RBX: 00007f9721e25fa0 RCX: 00007f9721b9e159 [ 956.652548][T28595] RDX: 0000000004000891 RSI: 0000200000000380 RDI: 0000000000000003 [ 956.652589][T28595] RBP: 00007f97229c7090 R08: 0000000000000000 R09: 0000000000000000 [ 956.652630][T28595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.652669][T28595] R13: 00007f9721e26038 R14: 00007f9721e25fa0 R15: 00007ffec0206a58 [ 956.652762][T28595] [ 956.738144][T28597] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6419'. [ 956.786730][T28598] netlink: 'syz.3.6418': attribute type 1 has an invalid length. [ 956.875792][T28601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6418'. [ 956.968407][T28598] bond1: option mode: invalid value (7) [ 957.004691][T28598] bond1 (unregistering): Released all slaves [ 957.190388][T28603] : renamed from dummy0 [ 957.320667][T28605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.411699][T28605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.510009][T28612] erspan0: entered promiscuous mode [ 957.889377][T28637] FAULT_INJECTION: forcing a failure. [ 957.889377][T28637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.889425][T28637] CPU: 0 UID: 0 PID: 28637 Comm: syz.4.6430 Not tainted syzkaller #0 PREEMPT(full) [ 957.889448][T28637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.889461][T28637] Call Trace: [ 957.889470][T28637] [ 957.889479][T28637] dump_stack_lvl+0xe8/0x150 [ 957.889514][T28637] should_fail_ex+0x410/0x560 [ 957.889552][T28637] _copy_to_user+0x31/0xb0 [ 957.889577][T28637] simple_read_from_buffer+0xe1/0x170 [ 957.889607][T28637] proc_fail_nth_read+0x1bb/0x230 [ 957.889635][T28637] ? common_file_perm+0x20e/0x2b0 [ 957.889657][T28637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 957.889691][T28637] ? rw_verify_area+0x24a/0x4c0 [ 957.889724][T28637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 957.889756][T28637] vfs_read+0x213/0xa80 [ 957.889792][T28637] ? __pfx___mutex_lock+0x10/0x10 [ 957.889827][T28637] ? __pfx_vfs_read+0x10/0x10 [ 957.889860][T28637] ? __fget_files+0x2a/0x420 [ 957.889897][T28637] ? __fget_files+0x3a2/0x420 [ 957.889925][T28637] ? __fget_files+0x2a/0x420 [ 957.889965][T28637] ksys_read+0x150/0x270 [ 957.890001][T28637] ? __pfx_ksys_read+0x10/0x10 [ 957.890046][T28637] do_syscall_64+0x166/0x520 [ 957.890078][T28637] ? trace_irq_disable+0x3b/0x140 [ 957.890102][T28637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.890126][T28637] ? clear_bhb_loop+0x70/0xc0 [ 957.890155][T28637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.890179][T28637] RIP: 0033:0x7f1debd5e98e [ 957.890200][T28637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 957.890221][T28637] RSP: 002b:00007f1deccedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 957.890246][T28637] RAX: ffffffffffffffda RBX: 00007f1deccee6c0 RCX: 00007f1debd5e98e [ 957.890264][T28637] RDX: 000000000000000f RSI: 00007f1deccee0a0 RDI: 0000000000000005 [ 957.890279][T28637] RBP: 00007f1deccee090 R08: 0000000000000000 R09: 0000000000000000 [ 957.890293][T28637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.890307][T28637] R13: 00007f1dec026038 R14: 00007f1dec025fa0 R15: 00007ffd9e5dd548 [ 957.890354][T28637] [ 957.973558][T28639] __nla_validate_parse: 3 callbacks suppressed [ 957.973621][T28639] netlink: 264 bytes leftover after parsing attributes in process `syz.0.6431'. [ 958.402861][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6435'. [ 958.533131][T28656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6437'. [ 958.728914][T28664] netlink: 564 bytes leftover after parsing attributes in process `syz.1.6442'. [ 958.901577][T28674] x_tables: unsorted underflow at hook 1 [ 958.947049][T28678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6446'. [ 959.195086][T28648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6434'. [ 959.266808][T28684] syzkaller0: entered promiscuous mode [ 959.266854][T28684] syzkaller0: entered allmulticast mode [ 959.327418][T28684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6448'. [ 960.328876][T28733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6460'. [ 960.347220][T28737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6461'. [ 960.515127][T28743] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6460'. [ 960.553095][T28746] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 961.364964][T28773] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 961.466201][T28778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 961.466245][T28778] IPv6: NLM_F_CREATE should be set when creating new route [ 961.466305][T28778] IPv6: NLM_F_CREATE should be set when creating new route [ 963.215381][T28727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 963.407274][T28785] __nla_validate_parse: 2 callbacks suppressed [ 963.407343][T28785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6480'. [ 963.513231][T28792] FAULT_INJECTION: forcing a failure. [ 963.513231][T28792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.535760][T28792] CPU: 1 UID: 0 PID: 28792 Comm: syz.1.6481 Not tainted syzkaller #0 PREEMPT(full) [ 963.535793][T28792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 963.535808][T28792] Call Trace: [ 963.535818][T28792] [ 963.535828][T28792] dump_stack_lvl+0xe8/0x150 [ 963.535868][T28792] should_fail_ex+0x410/0x560 [ 963.535910][T28792] _copy_from_user+0x2d/0xb0 [ 963.535936][T28792] ___sys_recvmsg+0x173/0x5a0 [ 963.535970][T28792] ? __pfx____sys_recvmsg+0x10/0x10 [ 963.536002][T28792] ? lock_acquire+0x115/0x350 [ 963.536057][T28792] do_recvmmsg+0x31a/0x7f0 [ 963.536092][T28792] ? __pfx_do_recvmmsg+0x10/0x10 [ 963.536129][T28792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 963.536165][T28792] ? __fget_files+0x3a2/0x420 [ 963.536206][T28792] __x64_sys_recvmmsg+0x198/0x250 [ 963.536236][T28792] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 963.536276][T28792] do_syscall_64+0x166/0x520 [ 963.536308][T28792] ? trace_irq_disable+0x3b/0x140 [ 963.536330][T28792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.536354][T28792] ? clear_bhb_loop+0x70/0xc0 [ 963.536383][T28792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.536406][T28792] RIP: 0033:0x7fb204d9e159 [ 963.536428][T28792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.536448][T28792] RSP: 002b:00007fb205c69028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 963.536473][T28792] RAX: ffffffffffffffda RBX: 00007fb205026090 RCX: 00007fb204d9e159 [ 963.536491][T28792] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 963.536506][T28792] RBP: 00007fb205c69090 R08: 0000000000000000 R09: 0000000000000000 [ 963.536521][T28792] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 963.536536][T28792] R13: 00007fb205026128 R14: 00007fb205026090 R15: 00007ffd3c4b1078 [ 963.536572][T28792] [ 963.765783][T28795] bond19: ARP target 9.0.0.0 is already present [ 963.772325][T28795] bond19: option arp_ip_target: invalid value (9) [ 963.783428][T28795] bond19 (unregistering): Released all slaves [ 963.923134][T28794] bond19: ARP target 9.0.0.0 is already present [ 963.923186][T28794] bond19: option arp_ip_target: invalid value (9) [ 963.938755][T28794] bond19 (unregistering): Released all slaves [ 963.971173][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6481'. [ 963.971293][T28810] tipc: Started in network mode [ 963.971337][T28810] tipc: Node identity 7a8dbe817444, cluster identity 4711 [ 963.971535][T28810] tipc: Enabled bearer , priority 20 [ 964.002285][T28813] netlink: 'syz.4.6487': attribute type 1 has an invalid length. [ 964.127519][T28818] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6488'. [ 964.258445][T28827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6492'. [ 964.258860][T28828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6492'. [ 964.487957][T28839] bridge0: entered promiscuous mode [ 964.493852][T28839] macvlan3: entered promiscuous mode [ 964.822019][T28847] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 964.883313][T28852] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6500'. [ 964.893819][T28852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6500'. [ 965.120363][T28861] Bluetooth: MGMT ver 1.23 [ 965.138602][T28861] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6503'. [ 965.301526][T28850] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6499'. [ 965.301572][T28850] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 965.445983][ T5736] tipc: Node number set to 248102529 [ 965.537019][T28878] FAULT_INJECTION: forcing a failure. [ 965.537019][T28878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.537080][T28878] CPU: 0 UID: 0 PID: 28878 Comm: syz.3.6505 Not tainted syzkaller #0 PREEMPT(full) [ 965.537107][T28878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 965.537121][T28878] Call Trace: [ 965.537131][T28878] [ 965.537142][T28878] dump_stack_lvl+0xe8/0x150 [ 965.537180][T28878] should_fail_ex+0x410/0x560 [ 965.537220][T28878] _copy_from_user+0x2d/0xb0 [ 965.537247][T28878] ___sys_recvmsg+0x173/0x5a0 [ 965.537279][T28878] ? __pfx____sys_recvmsg+0x10/0x10 [ 965.537311][T28878] ? lock_acquire+0x115/0x350 [ 965.537365][T28878] do_recvmmsg+0x31a/0x7f0 [ 965.537401][T28878] ? __pfx_do_recvmmsg+0x10/0x10 [ 965.537439][T28878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 965.537474][T28878] ? __fget_files+0x3a2/0x420 [ 965.537529][T28878] __x64_sys_recvmmsg+0x198/0x250 [ 965.537566][T28878] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 965.537604][T28878] do_syscall_64+0x166/0x520 [ 965.537635][T28878] ? trace_irq_disable+0x3b/0x140 [ 965.537656][T28878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.537679][T28878] ? clear_bhb_loop+0x70/0xc0 [ 965.537707][T28878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.537731][T28878] RIP: 0033:0x7f9f39f9e159 [ 965.537751][T28878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.537772][T28878] RSP: 002b:00007f9f3aed3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 965.537797][T28878] RAX: ffffffffffffffda RBX: 00007f9f3a226090 RCX: 00007f9f39f9e159 [ 965.537815][T28878] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 965.537830][T28878] RBP: 00007f9f3aed3090 R08: 0000000000000000 R09: 0000000000000000 [ 965.537845][T28878] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 965.537860][T28878] R13: 00007f9f3a226128 R14: 00007f9f3a226090 R15: 00007ffe9714dd88 [ 965.537934][T28878] [ 965.775688][T28880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6505'. [ 966.066429][T28895] netlink: 'syz.2.6511': attribute type 10 has an invalid length. [ 966.434210][T17791]  (unregistering): left allmulticast mode [ 966.446267][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 966.466499][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 966.479885][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 966.496252][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 966.505354][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 966.974458][T28932] netlink: 'syz.2.6524': attribute type 1 has an invalid length. [ 967.567332][T28902] wg2 speed is unknown, defaulting to 1000 [ 967.708544][T28964] netlink: 'syz.2.6532': attribute type 30 has an invalid length. [ 968.090946][T28902] lo speed is unknown, defaulting to 1000 [ 968.558518][ T5622] Bluetooth: hci0: command tx timeout [ 968.834906][T29023] TCP: TCP_TX_DELAY enabled [ 968.851327][T29023] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 968.878750][T29024] FAULT_INJECTION: forcing a failure. [ 968.878750][T29024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.878813][T29024] CPU: 0 UID: 0 PID: 29024 Comm: syz.1.6549 Not tainted syzkaller #0 PREEMPT(full) [ 968.878840][T29024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.878903][T29024] Call Trace: [ 968.878936][T29024] [ 968.878974][T29024] dump_stack_lvl+0xe8/0x150 [ 968.879107][T29024] should_fail_ex+0x410/0x560 [ 968.879200][T29024] _copy_from_user+0x2d/0xb0 [ 968.879265][T29024] ___sys_recvmsg+0x173/0x5a0 [ 968.879356][T29024] ? __pfx____sys_recvmsg+0x10/0x10 [ 968.879433][T29024] ? lock_acquire+0x115/0x350 [ 968.879571][T29024] do_recvmmsg+0x31a/0x7f0 [ 968.879675][T29024] ? __pfx_do_recvmmsg+0x10/0x10 [ 968.879772][T29024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 968.879875][T29024] ? __fget_files+0x3a2/0x420 [ 968.879972][T29024] __x64_sys_recvmmsg+0x198/0x250 [ 968.880053][T29024] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 968.880143][T29024] do_syscall_64+0x166/0x520 [ 968.880224][T29024] ? trace_irq_disable+0x3b/0x140 [ 968.880285][T29024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.880357][T29024] ? clear_bhb_loop+0x70/0xc0 [ 968.880438][T29024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.880508][T29024] RIP: 0033:0x7fb204d9e159 [ 968.880562][T29024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.880625][T29024] RSP: 002b:00007fb205c69028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 968.880688][T29024] RAX: ffffffffffffffda RBX: 00007fb205026090 RCX: 00007fb204d9e159 [ 968.880731][T29024] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 968.880772][T29024] RBP: 00007fb205c69090 R08: 0000000000000000 R09: 0000000000000000 [ 968.880812][T29024] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 968.880845][T29024] R13: 00007fb205026128 R14: 00007fb205026090 R15: 00007ffd3c4b1078 [ 968.880937][T29024] [ 969.108670][T28902] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.116013][T28902] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.116227][T28902] bridge_slave_0: entered allmulticast mode [ 969.131639][T29029] __nla_validate_parse: 8 callbacks suppressed [ 969.131702][T29029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6552'. [ 969.131725][T29029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6552'. [ 969.156836][T28902] bridge_slave_0: entered promiscuous mode [ 969.166058][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6549'. [ 969.176082][T28902] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.183592][T28902] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.191146][T28902] bridge_slave_1: entered allmulticast mode [ 969.199819][T28902] bridge_slave_1: entered promiscuous mode [ 969.248864][T28902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.263373][T28902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.331922][T28902] team0: Port device team_slave_0 added [ 969.341518][T28902] team0: Port device team_slave_1 added [ 969.406780][T28902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.414087][T28902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.441010][T28902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.453854][T28902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.461007][T28902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.488022][T28902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.551718][T28902] hsr_slave_0: entered promiscuous mode [ 969.558776][T28902] hsr_slave_1: entered promiscuous mode [ 969.565280][T28902] debugfs: 'hsr0' already exists in 'hsr' [ 969.573080][T28902] Cannot create hsr debugfs directory [ 969.662330][T29046] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 969.670870][T29045] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 969.713323][T29045] veth1_macvtap: left promiscuous mode [ 969.942513][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6558'. [ 970.000628][T29052] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 970.125034][T29066] sctp: [Deprecated]: syz.3.6560 (pid 29066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 970.125034][T29066] Use struct sctp_sack_info instead [ 970.262972][T29073] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6561'. [ 970.385228][T28902] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.407227][T28902] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.638099][ T5622] Bluetooth: hci0: command tx timeout [ 970.688181][T28902] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.688249][T28902] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.806535][T28902] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.818398][T28902] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.840498][T29090] FAULT_INJECTION: forcing a failure. [ 970.840498][T29090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.840555][T29090] CPU: 1 UID: 0 PID: 29090 Comm: syz.2.6565 Not tainted syzkaller #0 PREEMPT(full) [ 970.840581][T29090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.840651][T29090] Call Trace: [ 970.840688][T29090] [ 970.840718][T29090] dump_stack_lvl+0xe8/0x150 [ 970.840839][T29090] should_fail_ex+0x410/0x560 [ 970.840941][T29090] _copy_from_user+0x2d/0xb0 [ 970.841013][T29090] ___sys_recvmsg+0x173/0x5a0 [ 970.841103][T29090] ? __pfx____sys_recvmsg+0x10/0x10 [ 970.841187][T29090] ? lock_acquire+0x115/0x350 [ 970.841322][T29090] do_recvmmsg+0x31a/0x7f0 [ 970.841424][T29090] ? __pfx_do_recvmmsg+0x10/0x10 [ 970.841526][T29090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 970.841621][T29090] ? __fget_files+0x3a2/0x420 [ 970.841733][T29090] __x64_sys_recvmmsg+0x198/0x250 [ 970.841822][T29090] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 970.841931][T29090] do_syscall_64+0x166/0x520 [ 970.842012][T29090] ? trace_irq_disable+0x3b/0x140 [ 970.842073][T29090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.842147][T29090] ? clear_bhb_loop+0x70/0xc0 [ 970.842226][T29090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.842288][T29090] RIP: 0033:0x7f9721b9e159 [ 970.842346][T29090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.842398][T29090] RSP: 002b:00007f97229a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 970.842468][T29090] RAX: ffffffffffffffda RBX: 00007f9721e26090 RCX: 00007f9721b9e159 [ 970.842510][T29090] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 970.842550][T29090] RBP: 00007f97229a6090 R08: 0000000000000000 R09: 0000000000000000 [ 970.842591][T29090] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 970.842624][T29090] R13: 00007f9721e26128 R14: 00007f9721e26090 R15: 00007ffec0206a58 [ 970.842714][T29090] [ 971.096444][T29095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6565'. [ 971.212895][T28902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.212965][T28902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.302302][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6567'. [ 971.392994][T29106] bridge0: port 3(vlan2) entered blocking state [ 971.399971][T29106] bridge0: port 3(vlan2) entered disabled state [ 971.406595][T29106] vlan2: entered allmulticast mode [ 971.415985][T29106] geneve0: entered allmulticast mode [ 971.423628][T29106] vlan2: entered promiscuous mode [ 971.428978][T29106] geneve0: entered promiscuous mode [ 971.655097][T28902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 971.680530][T28902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.689009][T28902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 971.704435][T28902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.715257][T28902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 971.737942][T28902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 971.746422][T28902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 971.770827][T28902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.838860][T29118] sctp: [Deprecated]: syz.1.6570 (pid 29118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 971.838860][T29118] Use struct sctp_sack_info instead [ 971.959053][T29115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6569'. [ 972.015901][T29127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6569'. [ 972.210352][T28902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.290250][T28902] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.320483][T25268] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.320752][T25268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.363169][T25270] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.363432][T25270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.516369][T29135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6574'. [ 972.718046][ T5622] Bluetooth: hci0: command tx timeout [ 973.036729][T29139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.071826][T29139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.092494][T29156] netlink: 'syz.2.6579': attribute type 1 has an invalid length. [ 973.103826][T29139] bond0 (unregistering): (slave bond1): Releasing backup interface [ 973.115908][T29139] bond0 (unregistering): Released all slaves [ 973.338172][T29167] netlink: 'syz.3.6580': attribute type 16 has an invalid length. [ 973.338213][T29167] netlink: 'syz.3.6580': attribute type 17 has an invalid length. [ 973.376273][T29168] netlink: 'syz.3.6580': attribute type 30 has an invalid length. [ 973.420768][T29167] 0ªî{X¹¦: left allmulticast mode [ 973.580331][T29167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.609560][T29167] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.653904][T29167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.980769][T29167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.996892][T29167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.025519][T29167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 974.025574][T29167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 974.026616][T29167] tipc: Resetting bearer [ 974.052068][T29167] tipc: Resetting bearer [ 974.052422][T29167] tipc: Resetting bearer [ 974.081269][T29167] veth1_vlan: left promiscuous mode [ 974.088779][T29167] veth0_vlan: left promiscuous mode [ 974.117324][T29167] veth0_vlan: entered promiscuous mode [ 974.131830][T29167] veth1_vlan: entered promiscuous mode [ 974.184860][T29167] veth1_macvtap: left promiscuous mode [ 974.206588][T29167] veth0_macvtap: left promiscuous mode [ 974.212875][T29190] netlink: 'syz.4.6584': attribute type 1 has an invalid length. [ 974.215409][T29167] veth0_macvtap: entered promiscuous mode [ 974.223366][T29167] veth1_macvtap: entered promiscuous mode [ 974.243703][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.250125][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.253845][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.259991][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 974.282212][T29167] mac80211_hwsim hwsim64 wlan0: entered promiscuous mode [ 974.294405][T29167] macvlan3: left promiscuous mode [ 974.303152][T29167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 974.312745][T29167] bridge0: port 3(vlan2) entered blocking state [ 974.312904][T29167] bridge0: port 3(vlan2) entered forwarding state [ 974.341911][T29168] vxlan0: entered promiscuous mode [ 974.347280][T29168] vxlan0: entered allmulticast mode [ 974.358293][T25270] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.358357][T25270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.358548][T25270] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.358628][T25270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.358732][T25270] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.358806][T25270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.358895][T25270] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.358969][T25270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.376100][T29175] veth1_to_bond: entered allmulticast mode [ 974.376167][T29175] veth1_to_bond: left allmulticast mode [ 974.427057][ T7337] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.434847][ T7337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.465849][ T7337] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.466008][ T7337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.672642][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 974.723161][T29204] __nla_validate_parse: 3 callbacks suppressed [ 974.731476][T29204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6589'. [ 974.769296][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6588'. [ 974.808616][ T5622] Bluetooth: hci0: command tx timeout [ 974.866591][T29199] IPv6: NLM_F_CREATE should be specified when creating new route [ 974.866869][T29199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 974.866910][T29199] IPv6: NLM_F_CREATE should be set when creating new route [ 974.867015][T29199] IPv6: NLM_F_CREATE should be set when creating new route [ 974.867097][T29199] IPv6: NLM_F_CREATE should be set when creating new route [ 975.064248][T29213] No such timeout policy "syz1" [ 975.153423][T28902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.211205][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 975.228572][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 975.344051][T28902] veth0_vlan: entered promiscuous mode [ 975.419876][T28902] veth1_vlan: entered promiscuous mode [ 975.472899][T28902] veth0_macvtap: entered promiscuous mode [ 975.499134][T28902] veth1_macvtap: entered promiscuous mode [ 975.634693][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 975.673796][T28902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.747073][T28902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.763257][T25265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.777137][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 975.801311][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 975.802764][ C1] IPv6: macvlan3: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa0c used by aa:aa:aa:aa:aa:0c detected! [ 975.826331][ T7316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.830126][T25269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.886923][T29229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6596'. [ 975.922284][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 975.941495][T29237] netlink: 'syz.1.6599': attribute type 62 has an invalid length. [ 975.949827][ T7316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.976992][T29229] netlink: 'syz.2.6596': attribute type 18 has an invalid length. [ 976.110701][T29240] netlink: 'syz.4.6600': attribute type 1 has an invalid length. [ 976.110751][T29240] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6600'. [ 976.110816][T29240] netlink: 'syz.4.6600': attribute type 1 has an invalid length. [ 976.185501][T25268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.194728][T25268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.346066][ T7331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.346120][ T7331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.458728][T29251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6602'. [ 976.579343][T29254] Bluetooth: MGMT ver 1.23 [ 976.584055][T29254] Bluetooth: hci0: unsupported parameter 5135 [ 976.595913][T29254] Bluetooth: hci0: unsupported parameter 65 [ 976.595982][T29254] Bluetooth: hci0: unsupported parameter 5135 [ 976.596003][T29254] Bluetooth: hci0: unsupported parameter 65 [ 976.871556][T29271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6608'. [ 976.953053][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 976.967711][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 977.088996][T29275] lo: entered promiscuous mode [ 977.114483][T29275] tunl0: entered promiscuous mode [ 977.124064][T29275] gre0: entered promiscuous mode [ 977.169835][T29275] gretap0: entered promiscuous mode [ 977.179117][T29275] erspan0: entered promiscuous mode [ 977.184712][T29275] ip_vti0: entered promiscuous mode [ 977.192621][T29275] ip6_vti0: entered promiscuous mode [ 977.201972][T29275] sit0: entered promiscuous mode [ 977.212104][T29275] ip6tnl0: entered promiscuous mode [ 977.220622][T29275] ip6gre0: entered promiscuous mode [ 977.233487][T29275] syz_tun: entered promiscuous mode [ 977.253984][T29275] ip6gretap0: entered promiscuous mode [ 977.269025][T29275] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.269950][T29275] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.292743][T29275] bridge0: entered promiscuous mode [ 977.315293][T29275] vcan0: entered promiscuous mode [ 977.322114][T29275] team0: entered promiscuous mode [ 977.322172][T29275] team_slave_0: entered promiscuous mode [ 977.328810][T29275] team_slave_1: entered promiscuous mode [ 977.343492][T29275] dummy0: entered promiscuous mode [ 977.355740][T29275] nlmon0: entered promiscuous mode [ 977.364698][T29275] batadv0: entered promiscuous mode [ 977.378903][T29275] vxcan0: entered promiscuous mode [ 977.385847][T29275] vxcan1: entered promiscuous mode [ 977.399337][T29275] veth0: entered promiscuous mode [ 977.415706][T29275] veth1: entered promiscuous mode [ 977.434396][T29275] wg0: entered promiscuous mode [ 977.445546][T29275] wg1: entered promiscuous mode [ 977.453953][T29275] wg2: entered promiscuous mode [ 977.464804][T29297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6615'. [ 977.475673][T29275] veth0_to_bridge: entered promiscuous mode [ 977.488850][T29275] veth1_to_bridge: entered promiscuous mode [ 977.502594][T29275] veth0_to_bond: entered promiscuous mode [ 977.512419][T29275] bond_slave_0: entered promiscuous mode [ 977.521423][T29275] veth1_to_bond: entered promiscuous mode [ 977.530076][T29275] bond_slave_1: entered promiscuous mode [ 977.532131][T29275] veth0_to_team: entered promiscuous mode [ 977.551819][T29275] veth1_to_team: entered promiscuous mode [ 977.568279][T29275] veth0_to_batadv: entered promiscuous mode [ 977.577948][T29275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.585611][T29275] batadv_slave_0: entered promiscuous mode [ 977.595010][T29275] veth1_to_batadv: entered promiscuous mode [ 977.602334][T29275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.602388][T29275] batadv_slave_1: entered promiscuous mode [ 977.606209][T29275] xfrm0: entered promiscuous mode [ 977.613470][T29275] veth0_to_hsr: entered promiscuous mode [ 977.628915][T29275] veth1_to_hsr: entered promiscuous mode [ 977.643463][T29275] hsr0: entered promiscuous mode [ 977.652145][T29275] veth1_virt_wifi: entered promiscuous mode [ 977.661887][T29275] veth0_virt_wifi: entered promiscuous mode [ 977.671828][T29275] virt_wifi0: entered promiscuous mode [ 977.682647][T29275] vlan0: entered promiscuous mode [ 977.694320][T29275] vlan1: entered promiscuous mode [ 977.703107][T29275] macvlan0: entered promiscuous mode [ 977.712586][T29275] macvlan1: entered promiscuous mode [ 977.721562][T29275] ipvlan0: entered promiscuous mode [ 977.722026][T29275] ipvlan1: entered promiscuous mode [ 977.736947][T29275] macvtap0: entered promiscuous mode [ 977.744212][T29275] macsec0: entered promiscuous mode [ 977.751692][T29275] geneve0: entered promiscuous mode [ 977.761177][T29275] geneve1: entered promiscuous mode [ 977.776582][T29275] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 977.788820][T29275] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 977.800167][T29275] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 977.810861][T29275] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 977.824350][T29275] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 977.837538][T29275] mac80211_hwsim hwsim70 wlan1: entered promiscuous mode [ 977.850008][T29275] bond1: entered promiscuous mode [ 977.850906][T29275] ipip0: entered promiscuous mode [ 977.854925][T29275] ip6tnl1: entered promiscuous mode [ 977.855331][T29275] bridge1: entered promiscuous mode [ 977.855667][T29275] mac80211_hwsim hwsim72 wlan2: entered promiscuous mode [ 977.882536][ T7316] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.883307][ T7316] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.892919][ T7316] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.892977][ T7316] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.512349][T29322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6623'. [ 978.579566][T29322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6623'. [ 978.775529][T29328] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 978.792351][T29329] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6624'. [ 979.126017][T29326] hsr_slave_1 (unregistering): left promiscuous mode [ 979.405093][T29344] FAULT_INJECTION: forcing a failure. [ 979.405093][T29344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.405152][T29344] CPU: 1 UID: 0 PID: 29344 Comm: syz.3.6626 Not tainted syzkaller #0 PREEMPT(full) [ 979.405178][T29344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 979.405191][T29344] Call Trace: [ 979.405253][T29344] [ 979.405287][T29344] dump_stack_lvl+0xe8/0x150 [ 979.405390][T29344] should_fail_ex+0x410/0x560 [ 979.405490][T29344] _copy_from_user+0x2d/0xb0 [ 979.405565][T29344] ___sys_recvmsg+0x173/0x5a0 [ 979.405642][T29344] ? __pfx____sys_recvmsg+0x10/0x10 [ 979.405723][T29344] ? lock_acquire+0x115/0x350 [ 979.405863][T29344] do_recvmmsg+0x31a/0x7f0 [ 979.405964][T29344] ? __pfx_do_recvmmsg+0x10/0x10 [ 979.406058][T29344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 979.406149][T29344] ? __fget_files+0x3a2/0x420 [ 979.406254][T29344] __x64_sys_recvmmsg+0x198/0x250 [ 979.406329][T29344] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 979.406427][T29344] do_syscall_64+0x166/0x520 [ 979.406507][T29344] ? trace_irq_disable+0x3b/0x140 [ 979.406566][T29344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.406621][T29344] ? clear_bhb_loop+0x70/0xc0 [ 979.406700][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.406769][T29344] RIP: 0033:0x7f9f39f9e159 [ 979.406841][T29344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.406892][T29344] RSP: 002b:00007f9f3aed3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 979.406966][T29344] RAX: ffffffffffffffda RBX: 00007f9f3a226090 RCX: 00007f9f39f9e159 [ 979.407008][T29344] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 979.407048][T29344] RBP: 00007f9f3aed3090 R08: 0000000000000000 R09: 0000000000000000 [ 979.407087][T29344] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 979.407119][T29344] R13: 00007f9f3a226128 R14: 00007f9f3a226090 R15: 00007ffe9714dd88 [ 979.407210][T29344] [ 979.664455][T29351] netlink: 'syz.1.6631': attribute type 4 has an invalid length. [ 979.707964][T29351] netlink: 'syz.1.6631': attribute type 4 has an invalid length. [ 979.943336][T29357] syzkaller0: entered promiscuous mode [ 979.949969][T29357] syzkaller0: entered allmulticast mode [ 980.109998][T29366] tipc: Started in network mode [ 980.110052][T29366] tipc: Node identity 00000000000000000071000000000001, cluster identity 4711 [ 980.110232][T29366] tipc: Enabling of bearer rejected, failed to enable media [ 980.335284][T29380] __nla_validate_parse: 3 callbacks suppressed [ 980.335341][T29380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6640'. [ 980.338833][T29380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6640'. [ 980.424427][T25273] IPVS: starting estimator thread 0... [ 980.442895][T29384] net_ratelimit: 507 callbacks suppressed [ 980.442948][T29384] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 980.563460][T29384] IPVS: Scheduler module ip_vs_sip not found [ 980.586230][T29385] IPVS: using max 27 ests per chain, 64800 per kthread [ 980.799735][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 980.891241][T29372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6637'. [ 981.027543][T29403] macsec1: entered promiscuous mode [ 981.033150][T29403] macsec1: entered allmulticast mode [ 981.143817][T29414] FAULT_INJECTION: forcing a failure. [ 981.143817][T29414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.143875][T29414] CPU: 0 UID: 0 PID: 29414 Comm: syz.0.6650 Not tainted syzkaller #0 PREEMPT(full) [ 981.143902][T29414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 981.143916][T29414] Call Trace: [ 981.143926][T29414] [ 981.143936][T29414] dump_stack_lvl+0xe8/0x150 [ 981.143974][T29414] should_fail_ex+0x410/0x560 [ 981.144015][T29414] _copy_from_user+0x2d/0xb0 [ 981.144042][T29414] ___sys_recvmsg+0x173/0x5a0 [ 981.144074][T29414] ? __pfx____sys_recvmsg+0x10/0x10 [ 981.144104][T29414] ? lock_acquire+0x115/0x350 [ 981.144159][T29414] do_recvmmsg+0x31a/0x7f0 [ 981.144194][T29414] ? __pfx_do_recvmmsg+0x10/0x10 [ 981.144233][T29414] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 981.144270][T29414] ? __fget_files+0x3a2/0x420 [ 981.144312][T29414] __x64_sys_recvmmsg+0x198/0x250 [ 981.144342][T29414] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 981.144391][T29414] do_syscall_64+0x166/0x520 [ 981.144425][T29414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.144450][T29414] ? clear_bhb_loop+0x70/0xc0 [ 981.144478][T29414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.144501][T29414] RIP: 0033:0x7fc7ccd9e159 [ 981.144523][T29414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.144544][T29414] RSP: 002b:00007fc7cdc42028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 981.144570][T29414] RAX: ffffffffffffffda RBX: 00007fc7cd026090 RCX: 00007fc7ccd9e159 [ 981.144588][T29414] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 981.144604][T29414] RBP: 00007fc7cdc42090 R08: 0000000000000000 R09: 0000000000000000 [ 981.144620][T29414] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 981.144635][T29414] R13: 00007fc7cd026128 R14: 00007fc7cd026090 R15: 00007ffcad62bb88 [ 981.144672][T29414] [ 981.313751][T29407] netlink: 'syz.3.6649': attribute type 1 has an invalid length. [ 981.423814][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6650'. [ 981.551144][T29424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6652'. [ 981.728681][T29427] Bluetooth: MGMT ver 1.23 [ 981.773833][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 981.833706][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 981.864324][T29434] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 981.870355][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 981.982950][T29438] netlink: 'syz.2.6658': attribute type 29 has an invalid length. [ 981.983003][T29438] netlink: 'syz.2.6658': attribute type 1 has an invalid length. [ 982.068907][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 982.171926][T29448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6659'. [ 982.531130][T29478] tipc: Started in network mode [ 982.531186][T29478] tipc: Node identity ac14140f, cluster identity 4711 [ 982.531468][T29478] tipc: New replicast peer: 255.255.255.255 [ 982.532155][T29478] tipc: Enabled bearer , priority 5 [ 982.703390][T29481] bond2: ARP target 9.0.0.0 is already present [ 982.703443][T29481] bond2: option arp_ip_target: invalid value (9) [ 982.716446][T29481] bond2 (unregistering): Released all slaves [ 982.783364][T29488] batadv_slave_1: entered promiscuous mode [ 983.012926][T29497] syzkaller0: entered promiscuous mode [ 983.012978][T29497] syzkaller0: entered allmulticast mode [ 983.246966][T29514] netlink: 'syz.4.6675': attribute type 27 has an invalid length. [ 983.261713][T29514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6675'. [ 983.472486][T29521] netlink: 'syz.2.6678': attribute type 1 has an invalid length. [ 983.472553][T29521] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6678'. [ 983.549620][T29518] wg2 speed is unknown, defaulting to 1000 [ 983.647875][T15503] tipc: Node number set to 2886997007 [ 983.714171][T29530] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 983.725886][T29530] batman_adv: batadv0: Adding interface: gretap1 [ 983.725927][T29530] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.725965][T29530] batman_adv: batadv0: Interface activated: gretap1 [ 983.961931][T29542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6682'. [ 984.154560][T29548] bond2: entered promiscuous mode [ 984.163690][T29548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 984.282101][T29518] lo speed is unknown, defaulting to 1000 [ 984.439498][T25273] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 987.101452][T29552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.554716][T29637] block nbd4: NBD_DISCONNECT [ 987.627951][ T7337] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.628065][ T7337] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.628136][ T7337] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.628178][ T7337] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.636888][T29637] block nbd4: Send disconnect failed -110 [ 987.636980][T29637] block nbd4: shutting down sockets [ 988.315599][T29635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6706'. [ 988.328335][T29635] openvswitch: netlink: Flow key attr not present in new flow. [ 988.347303][T25273] bond4 (unregistering): (slave gretap1): Releasing active interface [ 988.645461][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 988.661661][T25273] bond1 (unregistering): Released all slaves [ 988.748735][T25273] bond0 (unregistering): Released all slaves [ 988.770369][T25273] bond2 (unregistering): Released all slaves [ 988.801423][T25273] bond3 (unregistering): Released all slaves [ 988.846536][T25273] bond4 (unregistering): Released all slaves [ 988.894808][T25273] bond5 (unregistering): Released all slaves [ 988.920885][T25273] bond6 (unregistering): Released all slaves [ 988.952172][T25273] bond7 (unregistering): Released all slaves [ 988.972510][T25273] bond8 (unregistering): Released all slaves [ 988.992427][T25273] bond9 (unregistering): Released all slaves [ 989.020762][T25273] bond10 (unregistering): Released all slaves [ 989.039703][T25273] bond11 (unregistering): Released all slaves [ 989.060184][T25273] bond12 (unregistering): Released all slaves [ 989.085956][T25273] bond13 (unregistering): Released all slaves [ 989.096883][T29682] x_tables: ip_tables: osf match: only valid for protocol 6 [ 989.119207][T25273] bond14 (unregistering): Released all slaves [ 989.139985][T25273] bond15 (unregistering): Released all slaves [ 989.215168][T29653] wg2 speed is unknown, defaulting to 1000 [ 989.403323][T25273] ovs-s: left promiscuous mode [ 989.605416][T25273] tipc: Disabling bearer [ 989.614806][T25273] tipc: Left network mode [ 989.818495][T29653] lo speed is unknown, defaulting to 1000 [ 990.016861][T29704] Bluetooth: hci0: unsupported parameter 5134 [ 990.016902][T29704] Bluetooth: hci0: unsupported parameter 8192 [ 990.016943][T29704] Bluetooth: hci0: unsupported parameter 5134 [ 990.016963][T29704] Bluetooth: hci0: unsupported parameter 8192 [ 990.402308][T29717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6725'. [ 990.894406][T29733] netlink: 'syz.2.6732': attribute type 1 has an invalid length. [ 991.215123][T29739] tipc: Enabled bearer , priority 0 [ 991.287459][T29745] sch_tbf: peakrate 4294967291 is lower than or equals to rate 7130835735612630906 ! [ 991.309972][T29740] syzkaller0: entered promiscuous mode [ 991.316439][T29740] syzkaller0: entered allmulticast mode [ 991.886379][T29786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 991.910825][T29785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 991.924033][T29736] tipc: Resetting bearer [ 992.032960][T29736] tipc: Disabling bearer [ 992.285953][T25273] hsr_slave_0: left promiscuous mode [ 992.296639][T25273] hsr_slave_1: left promiscuous mode [ 993.128232][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.243461][T29830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.245618][T29829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.738930][T29851] syzkaller0: entered promiscuous mode [ 993.739905][T29851] syzkaller0: entered allmulticast mode [ 994.130441][T25273] IPVS: stop unused estimator thread 0... [ 994.670871][T29870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 994.704809][T29870] bond2: left promiscuous mode [ 994.906542][T29883] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 994.907016][T29883] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 997.891491][T29894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 998.087359][T29899] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.110441][T29899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.195330][T29899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.206940][T29899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.224867][T29899] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 998.262466][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.262734][ T7307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.287129][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.287385][ T7307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.000143][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1020.800495][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 1035.999014][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1044.337960][T29945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6788'. [ 1044.360945][T29948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6787'. [ 1044.390047][T29950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6786'. [ 1044.390102][T29950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6786'. [ 1044.390120][T29950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6786'. [ 1044.422343][T29951] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1044.576245][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1044.615193][T29956] 0ªî{X¹¦: entered promiscuous mode [ 1044.615355][T29956] macvlan4: entered allmulticast mode [ 1044.615440][T29956] 0ªî{X¹¦: entered allmulticast mode [ 1044.893479][T29966] sit0: entered promiscuous mode [ 1044.915725][T29966] netlink: 21 bytes leftover after parsing attributes in process `syz.3.6794'. [ 1044.915964][T29964] netlink: 'syz.3.6794': attribute type 1 has an invalid length. [ 1045.292495][T29987] netlink: 'syz.3.6799': attribute type 1 has an invalid length. [ 1045.292543][T29987] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6799'. [ 1045.422170][T29980] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6798'. [ 1045.682644][T30001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6802'. [ 1045.720185][T30002] syzkaller0: entered promiscuous mode [ 1045.720235][T30002] syzkaller0: entered allmulticast mode [ 1045.746121][T30002] TC_ACT_REPEAT abuse ? [ 1046.400835][T29949] Bluetooth: hci3: command 0x0406 tx timeout [ 1046.400948][T29949] Bluetooth: hci1: command 0x0406 tx timeout [ 1054.560561][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1082.237767][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 1082.325726][T30049] __nla_validate_parse: 3 callbacks suppressed [ 1082.325783][T30049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6819'. [ 1082.363367][T30054] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6818'. [ 1082.374954][T30044] syzkaller1: entered promiscuous mode [ 1082.374998][T30044] syzkaller1: entered allmulticast mode [ 1082.510222][T30057] netlink: 'syz.4.6821': attribute type 10 has an invalid length. [ 1082.510273][T30057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1082.610350][T30049] veth6: entered allmulticast mode [ 1082.624540][T30049] bond2: (slave veth6): Enslaving as an active interface with an up link [ 1083.171748][T30083] netlink: 'syz.0.6827': attribute type 1 has an invalid length. [ 1083.171799][T30083] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6827'. [ 1083.254642][T30054] infiniband syz0: set active [ 1083.259804][T30054] infiniband syz0: added veth0_vlan [ 1083.311815][T30054] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1083.328905][T30054] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1083.347245][T30054] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1083.407425][T30054] RDS/IB: syz0: added [ 1083.412204][T30054] smc: adding ib device syz0 with port count 1 [ 1083.418865][T30054] smc: ib device syz0 port 1 has no pnetid [ 1084.375108][T30096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1084.522466][T30120] netlink: 'syz.1.6837': attribute type 1 has an invalid length. [ 1084.531482][T30120] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6837'. [ 1086.341147][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1086.877993][T30191] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6859'. [ 1086.878069][T30191] netlink: 'syz.3.6859': attribute type 9 has an invalid length. [ 1086.878104][T30191] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6859'. [ 1086.878125][T30191] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6859'. [ 1087.037142][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806502e000: rx timeout, send abort [ 1087.426232][T30208] syz_tun: entered allmulticast mode [ 1087.537236][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806502e000: abort rx timeout. Force session deactivation [ 1087.548034][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806502d000: rx timeout, send abort [ 1087.746629][T30210] FAULT_INJECTION: forcing a failure. [ 1087.746629][T30210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.768788][T30210] CPU: 1 UID: 0 PID: 30210 Comm: syz.0.6866 Not tainted syzkaller #0 PREEMPT(full) [ 1087.768822][T30210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1087.768837][T30210] Call Trace: [ 1087.768846][T30210] [ 1087.768857][T30210] dump_stack_lvl+0xe8/0x150 [ 1087.768897][T30210] should_fail_ex+0x410/0x560 [ 1087.768937][T30210] _copy_from_iter+0x1d3/0x1660 [ 1087.768973][T30210] ? __alloc_skb+0x27a/0x7a0 [ 1087.769009][T30210] ? __alloc_skb+0x27a/0x7a0 [ 1087.769053][T30210] ? __alloc_skb+0x27a/0x7a0 [ 1087.769088][T30210] ? __pfx__copy_from_iter+0x10/0x10 [ 1087.769121][T30210] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1087.769153][T30210] ? __alloc_skb+0x27a/0x7a0 [ 1087.769185][T30210] ? __alloc_skb+0x27a/0x7a0 [ 1087.769226][T30210] ? netlink_sendmsg+0x650/0xb40 [ 1087.769254][T30210] ? skb_put+0x112/0x210 [ 1087.769280][T30210] netlink_sendmsg+0x6c0/0xb40 [ 1087.769318][T30210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.769355][T30210] ? apparmor_socket_sendmsg+0x98/0x360 [ 1087.769393][T30210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.769421][T30210] sock_sendmsg_nosec+0x13a/0x180 [ 1087.769454][T30210] ____sys_sendmsg+0x54e/0x850 [ 1087.769485][T30210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1087.769520][T30210] ? import_iovec+0x73/0xa0 [ 1087.769549][T30210] ___sys_sendmsg+0x2a5/0x360 [ 1087.769573][T30210] ? __lock_acquire+0x6df/0x2e50 [ 1087.769602][T30210] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.769666][T30210] ? __fget_files+0x2a/0x420 [ 1087.769695][T30210] ? __fget_files+0x3a2/0x420 [ 1087.769736][T30210] __x64_sys_sendmsg+0x1b1/0x290 [ 1087.769766][T30210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.769813][T30210] do_syscall_64+0x166/0x520 [ 1087.769851][T30210] ? trace_irq_disable+0x3b/0x140 [ 1087.769872][T30210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.769896][T30210] ? clear_bhb_loop+0x70/0xc0 [ 1087.769925][T30210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.769948][T30210] RIP: 0033:0x7fc7ccd9e159 [ 1087.769971][T30210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.769992][T30210] RSP: 002b:00007fc7cdc63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.770018][T30210] RAX: ffffffffffffffda RBX: 00007fc7cd025fa0 RCX: 00007fc7ccd9e159 [ 1087.770042][T30210] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1087.770058][T30210] RBP: 00007fc7cdc63090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.770073][T30210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.770087][T30210] R13: 00007fc7cd026038 R14: 00007fc7cd025fa0 R15: 00007ffcad62bb88 [ 1087.770124][T30210] [ 1088.048876][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806502d000: abort rx timeout. Force session deactivation [ 1088.116521][T30214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6868'. [ 1088.420411][T30227] netlink: 'syz.4.6873': attribute type 1 has an invalid length. [ 1088.420466][T30227] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6873'. [ 1088.592490][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.592551][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.592609][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.592702][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.592783][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.592856][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.592931][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593002][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593067][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593141][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593214][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593285][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593344][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593414][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593631][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593730][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593821][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593895][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.593999][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596219][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596336][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596410][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596484][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596551][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596624][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596699][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596774][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596894][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.596981][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.597054][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.597127][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.597202][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.597277][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.597338][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.597413][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.597496][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.607089][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.607201][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.607290][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.607394][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.607464][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.607523][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.629563][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.629673][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.629746][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.629960][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630060][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630143][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630215][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630290][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630391][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630468][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630543][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630611][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630694][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630767][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630843][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.630941][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.631021][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.631147][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.631221][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.666925][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.667014][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.667096][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1088.667181][T30238] IPVS: set_ctl: invalid protocol: 41 0.0.0.5:20004 [ 1089.083039][T30246] sctp: [Deprecated]: syz.0.6878 (pid 30246) Use of int in max_burst socket option deprecated. [ 1089.083039][T30246] Use struct sctp_assoc_value instead [ 1089.429873][T30252] netlink: 'syz.1.6879': attribute type 1 has an invalid length. [ 1089.429922][T30252] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6879'. [ 1089.775608][T30263] FAULT_INJECTION: forcing a failure. [ 1089.775608][T30263] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.791746][T30263] CPU: 0 UID: 0 PID: 30263 Comm: syz.3.6882 Not tainted syzkaller #0 PREEMPT(full) [ 1089.791781][T30263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1089.791796][T30263] Call Trace: [ 1089.791805][T30263] [ 1089.791816][T30263] dump_stack_lvl+0xe8/0x150 [ 1089.791856][T30263] should_fail_ex+0x410/0x560 [ 1089.791899][T30263] should_failslab+0xa8/0x100 [ 1089.791927][T30263] ? skb_clone+0x212/0x3a0 [ 1089.791954][T30263] kmem_cache_alloc_noprof+0xa1/0x600 [ 1089.791991][T30263] ? skb_clone+0x212/0x3a0 [ 1089.792024][T30263] skb_clone+0x212/0x3a0 [ 1089.792055][T30263] __netlink_deliver_tap+0x413/0x860 [ 1089.792097][T30263] ? netlink_deliver_tap+0x2e/0x1b0 [ 1089.792128][T30263] netlink_deliver_tap+0x19c/0x1b0 [ 1089.792159][T30263] netlink_unicast+0x781/0x940 [ 1089.792196][T30263] netlink_sendmsg+0x813/0xb40 [ 1089.792236][T30263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.792283][T30263] ? apparmor_socket_sendmsg+0x98/0x360 [ 1089.792322][T30263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.792349][T30263] sock_sendmsg_nosec+0x13a/0x180 [ 1089.792384][T30263] ____sys_sendmsg+0x54e/0x850 [ 1089.792417][T30263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1089.792454][T30263] ? import_iovec+0x73/0xa0 [ 1089.792484][T30263] ___sys_sendmsg+0x2a5/0x360 [ 1089.792508][T30263] ? __lock_acquire+0x6df/0x2e50 [ 1089.792537][T30263] ? __pfx____sys_sendmsg+0x10/0x10 [ 1089.792607][T30263] ? __fget_files+0x2a/0x420 [ 1089.792637][T30263] ? __fget_files+0x3a2/0x420 [ 1089.792679][T30263] __x64_sys_sendmsg+0x1b1/0x290 [ 1089.792708][T30263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1089.792754][T30263] do_syscall_64+0x166/0x520 [ 1089.792788][T30263] ? trace_irq_disable+0x3b/0x140 [ 1089.792811][T30263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.792836][T30263] ? clear_bhb_loop+0x70/0xc0 [ 1089.792865][T30263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.792888][T30263] RIP: 0033:0x7f9f39f9e159 [ 1089.792910][T30263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.792931][T30263] RSP: 002b:00007f9f3aef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1089.792958][T30263] RAX: ffffffffffffffda RBX: 00007f9f3a225fa0 RCX: 00007f9f39f9e159 [ 1089.792975][T30263] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1089.792991][T30263] RBP: 00007f9f3aef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.793006][T30263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.793020][T30263] R13: 00007f9f3a226038 R14: 00007f9f3a225fa0 R15: 00007ffe9714dd88 [ 1089.793058][T30263] [ 1090.114921][T30265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6883'. [ 1090.447481][T30268] netlink: 'syz.3.6884': attribute type 2 has an invalid length. [ 1090.594683][T30266] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1090.606669][T30266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1090.620923][T30266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1090.630701][T30266] virt_wifi0: entered promiscuous mode [ 1090.636542][T30266] virt_wifi0: entered allmulticast mode [ 1090.643034][T30266] macsec1: left promiscuous mode [ 1090.650790][T30266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1090.660476][T30266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1090.669908][T30266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1090.683592][T30266] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1090.691648][T30273] tipc: Started in network mode [ 1090.696718][T30273] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1090.704426][T30273] tipc: Enabled bearer , priority 30 [ 1091.217866][T30307] hsr0: entered promiscuous mode [ 1091.260210][T30307] hsr0: left promiscuous mode [ 1091.406126][T30316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6901'. [ 1091.574098][T30323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6901'. [ 1091.584373][T30316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6901'. [ 1091.791062][T30335] sctp: [Deprecated]: syz.1.6903 (pid 30335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1091.791062][T30335] Use struct sctp_sack_info instead [ 1091.828323][ T9] tipc: Node number set to 10005162 [ 1092.498565][T30350] wg2 speed is unknown, defaulting to 1000 [ 1092.834393][T30377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1093.170899][T30385] FAULT_INJECTION: forcing a failure. [ 1093.170899][T30385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.185350][T30385] CPU: 0 UID: 0 PID: 30385 Comm: syz.3.6917 Not tainted syzkaller #0 PREEMPT(full) [ 1093.185382][T30385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1093.185398][T30385] Call Trace: [ 1093.185407][T30385] [ 1093.185417][T30385] dump_stack_lvl+0xe8/0x150 [ 1093.185457][T30385] should_fail_ex+0x410/0x560 [ 1093.185498][T30385] strncpy_from_user+0x36/0x2c0 [ 1093.185537][T30385] bpf_prog_load+0xdef/0x1c20 [ 1093.185578][T30385] ? __pfx_bpf_prog_load+0x10/0x10 [ 1093.185633][T30385] __sys_bpf+0xd0d/0xd90 [ 1093.185668][T30385] ? __pfx___sys_bpf+0x10/0x10 [ 1093.185705][T30385] ? __fget_files+0x2a/0x420 [ 1093.185754][T30385] ? ksys_write+0x242/0x270 [ 1093.185801][T30385] ? __pfx_ksys_write+0x10/0x10 [ 1093.185840][T30385] __x64_sys_bpf+0xba/0xd0 [ 1093.185866][T30385] do_syscall_64+0x166/0x520 [ 1093.185897][T30385] ? trace_irq_disable+0x3b/0x140 [ 1093.185919][T30385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.185943][T30385] ? clear_bhb_loop+0x70/0xc0 [ 1093.185972][T30385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.185995][T30385] RIP: 0033:0x7f9f39f9e159 [ 1093.186017][T30385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.186037][T30385] RSP: 002b:00007f9f3aef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1093.186061][T30385] RAX: ffffffffffffffda RBX: 00007f9f3a225fa0 RCX: 00007f9f39f9e159 [ 1093.186078][T30385] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1093.186093][T30385] RBP: 00007f9f3aef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.186107][T30385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.186121][T30385] R13: 00007f9f3a226038 R14: 00007f9f3a225fa0 R15: 00007ffe9714dd88 [ 1093.186157][T30385] [ 1093.574872][T30391] smc: net device lo applied user defined pnetid SYZ0 [ 1093.736611][T30350] lo speed is unknown, defaulting to 1000 [ 1094.547057][T30429] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1094.547110][T30429] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1094.564941][T30429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1094.586254][T30429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1094.622446][T30429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1094.751478][T30438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1094.775164][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1094.821406][T30433] netlink: zone id is out of range [ 1094.821450][T30433] netlink: zone id is out of range [ 1094.821477][T30433] netlink: zone id is out of range [ 1094.821487][T30433] netlink: zone id is out of range [ 1094.821549][T30433] netlink: zone id is out of range [ 1094.821582][T30433] netlink: zone id is out of range [ 1094.821638][T30433] netlink: zone id is out of range [ 1094.821672][T30433] netlink: zone id is out of range [ 1094.821703][T30433] netlink: zone id is out of range [ 1094.821725][T30433] netlink: zone id is out of range [ 1095.066863][T30436] pimreg: entered allmulticast mode [ 1095.157869][T30451] xt_TCPMSS: Only works on TCP SYN packets [ 1095.179263][T30454] xt_TCPMSS: Only works on TCP SYN packets [ 1095.325245][T30461] netlink: 'syz.0.6938': attribute type 1 has an invalid length. [ 1095.334045][T30461] netlink: 'syz.0.6938': attribute type 7 has an invalid length. [ 1095.342221][T30461] netlink: 'syz.0.6938': attribute type 8 has an invalid length. [ 1095.342248][T30461] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6938'. [ 1095.342287][T30461] NCSI netlink: No device for ifindex 1073545264 [ 1095.405611][T30434] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1095.421177][T30463] netlink: 'syz.3.6940': attribute type 3 has an invalid length. [ 1095.590373][T30468] FAULT_INJECTION: forcing a failure. [ 1095.590373][T30468] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.590437][T30468] CPU: 1 UID: 0 PID: 30468 Comm: syz.3.6942 Not tainted syzkaller #0 PREEMPT(full) [ 1095.590465][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1095.590479][T30468] Call Trace: [ 1095.590488][T30468] [ 1095.590499][T30468] dump_stack_lvl+0xe8/0x150 [ 1095.590550][T30468] should_fail_ex+0x410/0x560 [ 1095.590591][T30468] ? __alloc_skb+0x1db/0x7a0 [ 1095.590626][T30468] should_failslab+0xa8/0x100 [ 1095.590655][T30468] ? __alloc_skb+0x1db/0x7a0 [ 1095.590687][T30468] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1095.590723][T30468] ? __alloc_skb+0x18d/0x7a0 [ 1095.590757][T30468] ? __alloc_skb+0x1db/0x7a0 [ 1095.590800][T30468] __alloc_skb+0x1db/0x7a0 [ 1095.590840][T30468] xfrm_alloc_compat+0x1a6/0x1740 [ 1095.590876][T30468] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 1095.590901][T30468] xfrm_nlmsg_multicast+0xda/0x1f0 [ 1095.590939][T30468] xfrm_send_policy_notify+0xed2/0x1c00 [ 1095.590983][T30468] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1095.591014][T30468] ? lock_acquire+0x115/0x350 [ 1095.591051][T30468] ? km_policy_notify+0x28/0x200 [ 1095.591083][T30468] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1095.591115][T30468] km_policy_notify+0x121/0x200 [ 1095.591145][T30468] ? km_policy_notify+0x28/0x200 [ 1095.591179][T30468] xfrm_add_policy+0x4a1/0x690 [ 1095.591218][T30468] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1095.591249][T30468] ? apparmor_capable+0x126/0x170 [ 1095.591285][T30468] ? __nla_parse+0x40/0x60 [ 1095.591317][T30468] xfrm_user_rcv_msg+0x7a8/0xf30 [ 1095.591356][T30468] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1095.591428][T30468] ? __mutex_trylock_common+0x15f/0x270 [ 1095.591460][T30468] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1095.591492][T30468] ? rcu_is_watching+0x16/0xb0 [ 1095.591527][T30468] ? trace_contention_end+0x3d/0x140 [ 1095.591566][T30468] netlink_rcv_skb+0x226/0x4a0 [ 1095.591596][T30468] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1095.591631][T30468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1095.591679][T30468] ? netlink_deliver_tap+0x2e/0x1b0 [ 1095.591707][T30468] ? netlink_deliver_tap+0x2e/0x1b0 [ 1095.591738][T30468] xfrm_netlink_rcv+0x79/0x90 [ 1095.591769][T30468] netlink_unicast+0x7bd/0x940 [ 1095.591808][T30468] netlink_sendmsg+0x813/0xb40 [ 1095.591847][T30468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.591887][T30468] ? apparmor_socket_sendmsg+0x98/0x360 [ 1095.591925][T30468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.591953][T30468] sock_sendmsg_nosec+0x13a/0x180 [ 1095.591988][T30468] ____sys_sendmsg+0x54e/0x850 [ 1095.592020][T30468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1095.592057][T30468] ? import_iovec+0x73/0xa0 [ 1095.592086][T30468] ___sys_sendmsg+0x2a5/0x360 [ 1095.592110][T30468] ? __lock_acquire+0x6df/0x2e50 [ 1095.592139][T30468] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.592207][T30468] ? __fget_files+0x2a/0x420 [ 1095.592237][T30468] ? __fget_files+0x3a2/0x420 [ 1095.592281][T30468] __x64_sys_sendmsg+0x1b1/0x290 [ 1095.592310][T30468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1095.592362][T30468] do_syscall_64+0x166/0x520 [ 1095.592394][T30468] ? trace_irq_disable+0x3b/0x140 [ 1095.592417][T30468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.592441][T30468] ? clear_bhb_loop+0x70/0xc0 [ 1095.592469][T30468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.592493][T30468] RIP: 0033:0x7f9f39f9e159 [ 1095.592520][T30468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.592540][T30468] RSP: 002b:00007f9f3aef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.592566][T30468] RAX: ffffffffffffffda RBX: 00007f9f3a225fa0 RCX: 00007f9f39f9e159 [ 1095.592584][T30468] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1095.592599][T30468] RBP: 00007f9f3aef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.592615][T30468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.592629][T30468] R13: 00007f9f3a226038 R14: 00007f9f3a225fa0 R15: 00007ffe9714dd88 [ 1095.592668][T30468] [ 1096.161901][T30472] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6945'. [ 1096.349170][T30480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6947'. [ 1096.660841][T30504] FAULT_INJECTION: forcing a failure. [ 1096.660841][T30504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.660945][T30504] CPU: 1 UID: 0 PID: 30504 Comm: syz.2.6954 Not tainted syzkaller #0 PREEMPT(full) [ 1096.660975][T30504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1096.660989][T30504] Call Trace: [ 1096.660999][T30504] [ 1096.661009][T30504] dump_stack_lvl+0xe8/0x150 [ 1096.661128][T30504] should_fail_ex+0x410/0x560 [ 1096.661299][T30504] _copy_from_user+0x2d/0xb0 [ 1096.661367][T30504] kstrtouint_from_user+0xd6/0x180 [ 1096.661471][T30504] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1096.661585][T30504] ? lock_acquire+0x115/0x350 [ 1096.661661][T30504] proc_fail_nth_write+0x8e/0x210 [ 1096.661756][T30504] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1096.661873][T30504] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1096.661954][T30504] vfs_write+0x296/0xba0 [ 1096.662068][T30504] ? __pfx_vfs_write+0x10/0x10 [ 1096.662152][T30504] ? __fget_files+0x2a/0x420 [ 1096.662239][T30504] ? __fget_files+0x3a2/0x420 [ 1096.662315][T30504] ? __fget_files+0x2a/0x420 [ 1096.662436][T30504] ksys_write+0x150/0x270 [ 1096.662530][T30504] ? __pfx_ksys_write+0x10/0x10 [ 1096.662667][T30504] do_syscall_64+0x166/0x520 [ 1096.662751][T30504] ? trace_irq_disable+0x3b/0x140 [ 1096.662815][T30504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.662877][T30504] ? clear_bhb_loop+0x70/0xc0 [ 1096.662943][T30504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.663004][T30504] RIP: 0033:0x7f9721b5e98e [ 1096.663057][T30504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1096.663108][T30504] RSP: 002b:00007f97229c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1096.663178][T30504] RAX: ffffffffffffffda RBX: 00007f97229c76c0 RCX: 00007f9721b5e98e [ 1096.663221][T30504] RDX: 0000000000000001 RSI: 00007f97229c70a0 RDI: 0000000000000004 [ 1096.663254][T30504] RBP: 00007f97229c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.663295][T30504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.663335][T30504] R13: 00007f9721e26038 R14: 00007f9721e25fa0 R15: 00007ffec0206a58 [ 1096.663434][T30504] [ 1097.042492][T30512] batman_adv: batadv0: Adding interface: macvtap0 [ 1097.042528][T30512] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.042582][T30512] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1097.247298][T30520] gtp0: entered promiscuous mode [ 1097.247375][T30520] gtp0: entered allmulticast mode [ 1097.300828][T30520] netlink: 'syz.0.6960': attribute type 12 has an invalid length. [ 1097.300874][T30520] netlink: 'syz.0.6960': attribute type 29 has an invalid length. [ 1097.595680][T30529] syzkaller0: entered promiscuous mode [ 1097.595733][T30529] syzkaller0: entered allmulticast mode [ 1097.690415][T30534] bond0: option tlb_dynamic_lb: invalid value (128) [ 1097.714330][T30534] bond0 (unregistering): Released all slaves [ 1097.815478][T30537] netlink: 'syz.1.6964': attribute type 1 has an invalid length. [ 1098.219664][T30572] FAULT_INJECTION: forcing a failure. [ 1098.219664][T30572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.219724][T30572] CPU: 0 UID: 0 PID: 30572 Comm: syz.1.6972 Not tainted syzkaller #0 PREEMPT(full) [ 1098.219749][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1098.219762][T30572] Call Trace: [ 1098.219770][T30572] [ 1098.219779][T30572] dump_stack_lvl+0xe8/0x150 [ 1098.219813][T30572] should_fail_ex+0x410/0x560 [ 1098.219850][T30572] _copy_to_user+0x31/0xb0 [ 1098.219875][T30572] simple_read_from_buffer+0xe1/0x170 [ 1098.219906][T30572] proc_fail_nth_read+0x1bb/0x230 [ 1098.219936][T30572] ? common_file_perm+0x20e/0x2b0 [ 1098.219960][T30572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1098.219993][T30572] ? rw_verify_area+0x24a/0x4c0 [ 1098.220022][T30572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1098.220050][T30572] vfs_read+0x213/0xa80 [ 1098.220082][T30572] ? __pfx___mutex_lock+0x10/0x10 [ 1098.220112][T30572] ? __pfx_vfs_read+0x10/0x10 [ 1098.220140][T30572] ? __fget_files+0x2a/0x420 [ 1098.220170][T30572] ? __fget_files+0x3a2/0x420 [ 1098.220194][T30572] ? __fget_files+0x2a/0x420 [ 1098.220239][T30572] ksys_read+0x150/0x270 [ 1098.220270][T30572] ? __pfx_ksys_read+0x10/0x10 [ 1098.220308][T30572] do_syscall_64+0x166/0x520 [ 1098.220335][T30572] ? trace_irq_disable+0x3b/0x140 [ 1098.220355][T30572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.220375][T30572] ? clear_bhb_loop+0x70/0xc0 [ 1098.220400][T30572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.220420][T30572] RIP: 0033:0x7fb204d5e98e [ 1098.220439][T30572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1098.220457][T30572] RSP: 002b:00007fb205c89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1098.220479][T30572] RAX: ffffffffffffffda RBX: 00007fb205c8a6c0 RCX: 00007fb204d5e98e [ 1098.220494][T30572] RDX: 000000000000000f RSI: 00007fb205c8a0a0 RDI: 0000000000000004 [ 1098.220506][T30572] RBP: 00007fb205c8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.220519][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1098.220531][T30572] R13: 00007fb205026038 R14: 00007fb205025fa0 R15: 00007ffd3c4b1078 [ 1098.220564][T30572] [ 1100.654892][ C0] net_ratelimit: 496 callbacks suppressed [ 1100.654959][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1103.073074][T30619] netlink: 'syz.3.6985': attribute type 1 has an invalid length. [ 1103.073124][T30619] __nla_validate_parse: 4 callbacks suppressed [ 1103.073154][T30619] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6985'. [ 1103.573574][T30637] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.573644][T30637] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.788439][T30637] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.788505][T30637] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.820330][T30641] netlink: 'syz.2.6993': attribute type 1 has an invalid length. [ 1103.820376][T30641] netlink: 'syz.2.6993': attribute type 2 has an invalid length. [ 1104.031596][T30637] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.031668][T30637] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.440703][T30637] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.458308][T30637] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.531794][T30672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7003'. [ 1104.532600][T30667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7003'. [ 1104.841819][ T7305] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.841879][ T7305] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.906004][T30687] netlink: 'syz.1.7010': attribute type 1 has an invalid length. [ 1104.925733][T30687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1104.928843][ T7307] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.928939][ T7307] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.039006][ T7305] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1105.039063][ T7305] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.039128][ T7305] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1105.039162][ T7305] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.170359][T30700] x_tables: duplicate underflow at hook 3 [ 1105.452635][T30719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7017'. [ 1105.980721][T30742] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7019'. [ 1106.464551][T30749] syz_tun: entered allmulticast mode [ 1106.589867][T30750] sctp: [Deprecated]: syz.1.7023 (pid 30750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1106.589867][T30750] Use struct sctp_sack_info instead [ 1106.946068][T30759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7027'. [ 1107.244659][T30768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7031'. [ 1107.521399][T30775] bridge0: port 3(wlan1) entered blocking state [ 1107.521757][T30775] bridge0: port 3(wlan1) entered disabled state [ 1107.522281][T30775] mac80211_hwsim hwsim67 wlan1: entered allmulticast mode [ 1107.543158][T30777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7034'. [ 1107.543227][T30777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7034'. [ 1107.585413][T30775] mac80211_hwsim hwsim67 wlan1: left allmulticast mode [ 1107.801184][T30780] batman_adv: batadv0: Removing interface: macvtap0 [ 1107.859640][T30785] syz_tun: entered allmulticast mode [ 1107.922641][T30794] bond0: (slave bond_slave_1): Releasing backup interface [ 1107.976496][T30796] FAULT_INJECTION: forcing a failure. [ 1107.976496][T30796] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.989739][T30796] CPU: 0 UID: 0 PID: 30796 Comm: syz.3.7041 Not tainted syzkaller #0 PREEMPT(full) [ 1107.989773][T30796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1107.989788][T30796] Call Trace: [ 1107.989798][T30796] [ 1107.989809][T30796] dump_stack_lvl+0xe8/0x150 [ 1107.989848][T30796] should_fail_ex+0x410/0x560 [ 1107.989889][T30796] should_failslab+0xa8/0x100 [ 1107.989919][T30796] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1107.989955][T30796] ? unwind_get_return_address+0x4d/0x90 [ 1107.989984][T30796] ? __get_vm_area_node+0x155/0x2f0 [ 1107.990013][T30796] ? __get_vm_area_node+0x155/0x2f0 [ 1107.990051][T30796] __get_vm_area_node+0x155/0x2f0 [ 1107.990089][T30796] __vmalloc_node_range_noprof+0x343/0x1540 [ 1107.990122][T30796] ? bpf_prog_calc_tag+0x51/0x370 [ 1107.990151][T30796] ? format_decode+0xdc/0xda0 [ 1107.990185][T30796] ? vsnprintf+0xe42/0xef0 [ 1107.990227][T30796] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1107.990261][T30796] ? bpf_verifier_vlog+0x3d1/0x900 [ 1107.990306][T30796] ? bpf_prog_calc_tag+0x51/0x370 [ 1107.990330][T30796] __vmalloc_noprof+0xd2/0x120 [ 1107.990370][T30796] ? bpf_prog_calc_tag+0x51/0x370 [ 1107.990400][T30796] bpf_prog_calc_tag+0x51/0x370 [ 1107.990430][T30796] check_and_resolve_insns+0xbb/0x21d0 [ 1107.990459][T30796] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 1107.990484][T30796] ? add_subprog+0x2e2/0x3f0 [ 1107.990514][T30796] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1107.990551][T30796] bpf_check+0x180a/0x2e10 [ 1107.990589][T30796] ? ktime_get_with_offset+0x93/0x2d0 [ 1107.990620][T30796] ? __pfx_bpf_check+0x10/0x10 [ 1107.990648][T30796] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1107.990685][T30796] bpf_prog_load+0x14d6/0x1c20 [ 1107.990725][T30796] ? __pfx_bpf_prog_load+0x10/0x10 [ 1107.990780][T30796] __sys_bpf+0xd0d/0xd90 [ 1107.990815][T30796] ? __pfx___sys_bpf+0x10/0x10 [ 1107.990853][T30796] ? __fget_files+0x2a/0x420 [ 1107.990903][T30796] ? ksys_write+0x242/0x270 [ 1107.990940][T30796] ? __pfx_ksys_write+0x10/0x10 [ 1107.990979][T30796] __x64_sys_bpf+0xba/0xd0 [ 1107.991005][T30796] do_syscall_64+0x166/0x520 [ 1107.991037][T30796] ? trace_irq_disable+0x3b/0x140 [ 1107.991060][T30796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.991084][T30796] ? clear_bhb_loop+0x70/0xc0 [ 1107.991113][T30796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.991137][T30796] RIP: 0033:0x7f9f39f9e159 [ 1107.991158][T30796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.991179][T30796] RSP: 002b:00007f9f3aef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1107.991205][T30796] RAX: ffffffffffffffda RBX: 00007f9f3a225fa0 RCX: 00007f9f39f9e159 [ 1107.991222][T30796] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1107.991238][T30796] RBP: 00007f9f3aef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.991253][T30796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1107.991267][T30796] R13: 00007f9f3a226038 R14: 00007f9f3a225fa0 R15: 00007ffe9714dd88 [ 1107.991303][T30796] [ 1108.021621][T30796] syz.3.7041: vmalloc error: size 120, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1108.021731][T30796] CPU: 1 UID: 0 PID: 30796 Comm: syz.3.7041 Not tainted syzkaller #0 PREEMPT(full) [ 1108.021757][T30796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1108.021771][T30796] Call Trace: [ 1108.021781][T30796] [ 1108.021791][T30796] dump_stack_lvl+0xe8/0x150 [ 1108.021920][T30796] warn_alloc+0x24d/0x270 [ 1108.022019][T30796] ? __kasan_kmalloc+0x22/0xb0 [ 1108.022098][T30796] ? __pfx_warn_alloc+0x10/0x10 [ 1108.022181][T30796] ? __get_vm_area_node+0x155/0x2f0 [ 1108.022268][T30796] ? __get_vm_area_node+0x2a9/0x2f0 [ 1108.022368][T30796] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1108.022462][T30796] ? format_decode+0xdc/0xda0 [ 1108.022548][T30796] ? vsnprintf+0xe42/0xef0 [ 1108.022647][T30796] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1108.022738][T30796] ? bpf_verifier_vlog+0x3d1/0x900 [ 1108.022844][T30796] ? bpf_prog_calc_tag+0x51/0x370 [ 1108.022907][T30796] __vmalloc_noprof+0xd2/0x120 [ 1108.022989][T30796] ? bpf_prog_calc_tag+0x51/0x370 [ 1108.023069][T30796] bpf_prog_calc_tag+0x51/0x370 [ 1108.023152][T30796] check_and_resolve_insns+0xbb/0x21d0 [ 1108.023226][T30796] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 1108.023303][T30796] ? add_subprog+0x2e2/0x3f0 [ 1108.023383][T30796] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1108.023477][T30796] bpf_check+0x180a/0x2e10 [ 1108.023578][T30796] ? ktime_get_with_offset+0x93/0x2d0 [ 1108.023651][T30796] ? __pfx_bpf_check+0x10/0x10 [ 1108.023717][T30796] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1108.023815][T30796] bpf_prog_load+0x14d6/0x1c20 [ 1108.023920][T30796] ? __pfx_bpf_prog_load+0x10/0x10 [ 1108.024056][T30796] __sys_bpf+0xd0d/0xd90 [ 1108.024145][T30796] ? __pfx___sys_bpf+0x10/0x10 [ 1108.024232][T30796] ? __fget_files+0x2a/0x420 [ 1108.024349][T30796] ? ksys_write+0x242/0x270 [ 1108.024434][T30796] ? __pfx_ksys_write+0x10/0x10 [ 1108.024533][T30796] __x64_sys_bpf+0xba/0xd0 [ 1108.024596][T30796] do_syscall_64+0x166/0x520 [ 1108.024692][T30796] ? trace_irq_disable+0x3b/0x140 [ 1108.024759][T30796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.024828][T30796] ? clear_bhb_loop+0x70/0xc0 [ 1108.024911][T30796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.024971][T30796] RIP: 0033:0x7f9f39f9e159 [ 1108.025032][T30796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.025083][T30796] RSP: 002b:00007f9f3aef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1108.025145][T30796] RAX: ffffffffffffffda RBX: 00007f9f3a225fa0 RCX: 00007f9f39f9e159 [ 1108.025194][T30796] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1108.025235][T30796] RBP: 00007f9f3aef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.025275][T30796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1108.025302][T30796] R13: 00007f9f3a226038 R14: 00007f9f3a225fa0 R15: 00007ffe9714dd88 [ 1108.025399][T30796] [ 1108.057444][T30796] Mem-Info: [ 1108.057493][T30796] active_anon:12632 inactive_anon:2097 isolated_anon:0 [ 1108.057493][T30796] active_file:66 inactive_file:43845 isolated_file:0 [ 1108.057493][T30796] unevictable:0 dirty:314 writeback:0 [ 1108.057493][T30796] slab_reclaimable:13280 slab_unreclaimable:143915 [ 1108.057493][T30796] mapped:29828 shmem:519 pagetables:3641 [ 1108.057493][T30796] sec_pagetables:0 bounce:0 [ 1108.057493][T30796] kernel_misc_reclaimable:0 [ 1108.057493][T30796] free:1222582 free_pcp:10185 free_cma:0 [ 1108.061781][T30796] Node 0 active_anon:50528kB inactive_anon:8388kB active_file:264kB inactive_file:175172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119312kB dirty:1256kB writeback:0kB shmem:2076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18848kB pagetables:14440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1108.064651][T30796] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1108.064828][T30796] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.065043][T30796] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1108.065148][T30796] Node 0 DMA32 free:935320kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:50528kB inactive_anon:8388kB active_file:264kB inactive_file:175172kB unevictable:0kB writepending:1256kB zspages:0kB present:3129332kB managed:2546696kB mlocked:0kB bounce:0kB free_pcp:41124kB local_pcp:13948kB free_cma:0kB [ 1108.065319][T30796] lowmem_reserve[]: 0 0 0 0 0 [ 1108.065426][T30796] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.089493][T30796] lowmem_reserve[]: 0 0 0 0 0 [ 1108.089631][T30796] Node 1 Normal free:3939648kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.089806][T30796] lowmem_reserve[]: 0 0 0 0 0 [ 1108.089911][T30796] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1108.090257][T30796] Node 0 DMA32: 1506*4kB (UME) 2697*8kB (UME) 1115*16kB (UME) 933*32kB (UME) 518*64kB (UME) 486*128kB (UME) 339*256kB (UME) 220*512kB (UM) 138*1024kB (UM) 15*2048kB (UME) 96*4096kB (UM) = 935328kB [ 1108.090753][T30796] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1108.090884][T30796] Node 1 Normal: 2*4kB (M) 1*8kB (M) 7*16kB (UM) 10*32kB (UM) 2*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3939648kB [ 1108.091081][T30796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1108.091100][T30796] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1108.091118][T30796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1108.091136][T30796] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1108.091155][T30796] 44427 total pagecache pages [ 1108.091165][T30796] 1 pages in swap cache [ 1108.091173][T30796] Free swap = 124992kB [ 1108.091182][T30796] Total swap = 124996kB [ 1108.091191][T30796] 2097051 pages RAM [ 1108.091200][T30796] 0 pages HighMem/MovableOnly [ 1108.091209][T30796] 428761 pages reserved [ 1108.091217][T30796] 0 pages cma reserved [ 1109.066307][T30800] __nla_validate_parse: 2 callbacks suppressed [ 1109.066363][T30800] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7043'. [ 1109.121197][T30804] bond11: option lp_interval: invalid value (0) [ 1109.127741][T30804] bond11: option lp_interval: allowed values 1 - 2147483647 [ 1109.139567][T30804] bond11 (unregistering): Released all slaves [ 1109.409060][T30818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7049'. [ 1109.440608][T30818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7049'. [ 1109.563619][T30824] FAULT_INJECTION: forcing a failure. [ 1109.563619][T30824] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.576589][T30818] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 1109.584362][T30824] CPU: 0 UID: 0 PID: 30824 Comm: syz.4.7054 Not tainted syzkaller #0 PREEMPT(full) [ 1109.584394][T30824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1109.584409][T30824] Call Trace: [ 1109.584418][T30824] [ 1109.584428][T30824] dump_stack_lvl+0xe8/0x150 [ 1109.584467][T30824] should_fail_ex+0x410/0x560 [ 1109.584508][T30824] should_failslab+0xa8/0x100 [ 1109.584537][T30824] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1109.584571][T30824] ? unwind_get_return_address+0x4d/0x90 [ 1109.584600][T30824] ? __get_vm_area_node+0x155/0x2f0 [ 1109.584637][T30824] ? __get_vm_area_node+0x155/0x2f0 [ 1109.584677][T30824] __get_vm_area_node+0x155/0x2f0 [ 1109.584715][T30824] __vmalloc_node_range_noprof+0x343/0x1540 [ 1109.584749][T30824] ? bpf_prog_calc_tag+0x51/0x370 [ 1109.584778][T30824] ? format_decode+0xdc/0xda0 [ 1109.584813][T30824] ? vsnprintf+0xe42/0xef0 [ 1109.584855][T30824] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1109.584889][T30824] ? bpf_verifier_vlog+0x3d1/0x900 [ 1109.584933][T30824] ? bpf_prog_calc_tag+0x51/0x370 [ 1109.584963][T30824] __vmalloc_noprof+0xd2/0x120 [ 1109.584995][T30824] ? bpf_prog_calc_tag+0x51/0x370 [ 1109.585024][T30824] bpf_prog_calc_tag+0x51/0x370 [ 1109.585057][T30824] check_and_resolve_insns+0xbb/0x21d0 [ 1109.585088][T30824] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 1109.585114][T30824] ? add_subprog+0x2e2/0x3f0 [ 1109.585144][T30824] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1109.585178][T30824] bpf_check+0x180a/0x2e10 [ 1109.585214][T30824] ? ktime_get_with_offset+0x93/0x2d0 [ 1109.585241][T30824] ? __pfx_bpf_check+0x10/0x10 [ 1109.585269][T30824] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1109.585306][T30824] bpf_prog_load+0x14d6/0x1c20 [ 1109.585346][T30824] ? __pfx_bpf_prog_load+0x10/0x10 [ 1109.585406][T30824] __sys_bpf+0xd0d/0xd90 [ 1109.585447][T30824] ? __pfx___sys_bpf+0x10/0x10 [ 1109.585486][T30824] ? __fget_files+0x2a/0x420 [ 1109.585536][T30824] ? ksys_write+0x242/0x270 [ 1109.585573][T30824] ? __pfx_ksys_write+0x10/0x10 [ 1109.585612][T30824] __x64_sys_bpf+0xba/0xd0 [ 1109.585647][T30824] do_syscall_64+0x166/0x520 [ 1109.585679][T30824] ? trace_irq_disable+0x3b/0x140 [ 1109.585699][T30824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.585723][T30824] ? clear_bhb_loop+0x70/0xc0 [ 1109.585749][T30824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.585773][T30824] RIP: 0033:0x7f1debd9e159 [ 1109.585795][T30824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.585816][T30824] RSP: 002b:00007f1deccee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1109.585841][T30824] RAX: ffffffffffffffda RBX: 00007f1dec025fa0 RCX: 00007f1debd9e159 [ 1109.585859][T30824] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1109.585874][T30824] RBP: 00007f1deccee090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.585889][T30824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1109.585903][T30824] R13: 00007f1dec026038 R14: 00007f1dec025fa0 R15: 00007ffd9e5dd548 [ 1109.585940][T30824] [ 1109.956671][T30830] netlink: 'syz.1.7055': attribute type 21 has an invalid length. [ 1110.254549][T30850] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7061'. [ 1110.264086][T30850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7061'. [ 1110.622872][T30871] xt_TCPMSS: Only works on TCP SYN packets [ 1110.625645][T30871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7065'. [ 1110.700738][T30872] batadv0: entered promiscuous mode [ 1110.701491][T30872] macvtap1: entered promiscuous mode [ 1110.702109][T30872] macvtap1: entered allmulticast mode [ 1110.702152][T30872] batadv0: entered allmulticast mode [ 1110.707519][T30872] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1110.737493][T30872] batadv0: left allmulticast mode [ 1110.743167][T30872] batadv0: left promiscuous mode [ 1110.793660][T30859] nbd4: detected capacity change from 0 to 63 [ 1110.814389][ T5622] block nbd4: Receive control failed (result -104) [ 1110.971256][T30879] tipc: Started in network mode [ 1110.976400][T30879] tipc: Node identity b6026560eba5, cluster identity 4711 [ 1110.983941][T30879] tipc: Enabled bearer , priority 0 [ 1110.992281][T30879] syzkaller0: entered promiscuous mode [ 1110.994153][T30877] FAULT_INJECTION: forcing a failure. [ 1110.994153][T30877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1110.994238][T30877] CPU: 1 UID: 0 PID: 30877 Comm: syz.4.7068 Not tainted syzkaller #0 PREEMPT(full) [ 1110.994309][T30877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.994342][T30877] Call Trace: [ 1110.994369][T30877] [ 1110.994392][T30877] dump_stack_lvl+0xe8/0x150 [ 1110.994492][T30877] should_fail_ex+0x410/0x560 [ 1110.994605][T30877] prepare_alloc_pages+0x223/0x600 [ 1110.994681][T30877] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1110.994754][T30877] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1110.994817][T30877] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1110.994882][T30877] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1110.994961][T30877] ? __pfx_policy_nodemask+0x10/0x10 [ 1110.995024][T30877] ? __get_vm_area_node+0x155/0x2f0 [ 1110.995118][T30877] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1110.995199][T30877] ? __vmalloc_noprof+0xd2/0x120 [ 1110.995298][T30877] __alloc_pages_noprof+0x10/0x100 [ 1110.995376][T30877] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1110.995458][T30877] ? alloc_pages_noprof+0x140/0x2b0 [ 1110.995541][T30877] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1110.995653][T30877] alloc_vmap_area+0xd1a/0x1420 [ 1110.995775][T30877] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1110.995848][T30877] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1110.995940][T30877] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1110.996024][T30877] ? __get_vm_area_node+0x155/0x2f0 [ 1110.996110][T30877] __get_vm_area_node+0x200/0x2f0 [ 1110.996214][T30877] __vmalloc_node_range_noprof+0x343/0x1540 [ 1110.996296][T30877] ? bpf_prog_calc_tag+0x51/0x370 [ 1110.996370][T30877] ? format_decode+0xdc/0xda0 [ 1110.996453][T30877] ? vsnprintf+0xe42/0xef0 [ 1110.996573][T30877] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1110.996710][T30877] ? bpf_verifier_vlog+0x3d1/0x900 [ 1110.996823][T30877] ? bpf_prog_calc_tag+0x51/0x370 [ 1110.996885][T30877] __vmalloc_noprof+0xd2/0x120 [ 1110.996961][T30877] ? bpf_prog_calc_tag+0x51/0x370 [ 1110.997026][T30877] bpf_prog_calc_tag+0x51/0x370 [ 1110.997107][T30877] check_and_resolve_insns+0xbb/0x21d0 [ 1110.997180][T30877] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 1110.997243][T30877] ? add_subprog+0x2e2/0x3f0 [ 1110.997320][T30877] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1110.997420][T30877] bpf_check+0x180a/0x2e10 [ 1110.997512][T30877] ? ktime_get_with_offset+0x93/0x2d0 [ 1110.997593][T30877] ? __pfx_bpf_check+0x10/0x10 [ 1110.997658][T30877] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1110.997750][T30877] bpf_prog_load+0x14d6/0x1c20 [ 1110.997855][T30877] ? __pfx_bpf_prog_load+0x10/0x10 [ 1110.997907][T30877] __sys_bpf+0xd0d/0xd90 [ 1110.997984][T30877] ? __pfx___sys_bpf+0x10/0x10 [ 1110.998079][T30877] ? __fget_files+0x2a/0x420 [ 1110.998215][T30877] ? ksys_write+0x242/0x270 [ 1110.998301][T30877] ? __pfx_ksys_write+0x10/0x10 [ 1110.998403][T30877] __x64_sys_bpf+0xba/0xd0 [ 1110.998467][T30877] do_syscall_64+0x166/0x520 [ 1110.998549][T30877] ? trace_irq_disable+0x3b/0x140 [ 1110.998603][T30877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.998664][T30877] ? clear_bhb_loop+0x70/0xc0 [ 1110.998737][T30877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.998798][T30877] RIP: 0033:0x7f1debd9e159 [ 1110.998852][T30877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.998903][T30877] RSP: 002b:00007f1deccee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1110.998972][T30877] RAX: ffffffffffffffda RBX: 00007f1dec025fa0 RCX: 00007f1debd9e159 [ 1110.999015][T30877] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1110.999050][T30877] RBP: 00007f1deccee090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.999090][T30877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1110.999123][T30877] R13: 00007f1dec026038 R14: 00007f1dec025fa0 R15: 00007ffd9e5dd548 [ 1110.999216][T30877] [ 1111.026610][T30879] syzkaller0: entered allmulticast mode [ 1111.412807][T30879] tipc: Resetting bearer [ 1111.428894][T30878] tipc: Resetting bearer [ 1111.536688][T30886] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 1111.549569][T30886] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 1111.558554][T30878] tipc: Disabling bearer [ 1111.892110][T30904] netlink: 'syz.3.7080': attribute type 1 has an invalid length. [ 1111.892151][T30904] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7080'. [ 1111.931025][T30908] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7081'. [ 1112.072554][T30920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7081'. [ 1112.504211][T30919] [ 1112.506634][T30919] ====================================================== [ 1112.513685][T30919] WARNING: possible circular locking dependency detected [ 1112.520751][T30919] syzkaller #0 Not tainted [ 1112.525194][T30919] ------------------------------------------------------ [ 1112.532256][T30919] syz.2.7079/30919 is trying to acquire lock: [ 1112.538386][T30919] ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 1112.547589][T30919] [ 1112.547589][T30919] but task is already holding lock: [ 1112.554993][T30919] ffff88802b604378 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 1112.564716][T30919] [ 1112.564716][T30919] which lock already depends on the new lock. [ 1112.564716][T30919] [ 1112.575158][T30919] [ 1112.575158][T30919] the existing dependency chain (in reverse order) is: [ 1112.584225][T30919] [ 1112.584225][T30919] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 1112.591829][T30919] __might_fault+0xcb/0x130 [ 1112.596912][T30919] _copy_from_user+0x28/0xb0 [ 1112.602060][T30919] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1112.608612][T30919] ip_generic_getfrag+0x149/0x2d0 [ 1112.614208][T30919] __ip6_append_data+0x3b26/0x40c0 [ 1112.619888][T30919] ip6_append_data+0x108/0x270 [ 1112.625204][T30919] rawv6_sendmsg+0x1298/0x18c0 [ 1112.630601][T30919] sock_sendmsg_nosec+0x10e/0x180 [ 1112.636178][T30919] ____sys_sendmsg+0x54e/0x850 [ 1112.641494][T30919] ___sys_sendmsg+0x2a5/0x360 [ 1112.646728][T30919] __x64_sys_sendmsg+0x1b1/0x290 [ 1112.652205][T30919] do_syscall_64+0x166/0x520 [ 1112.657346][T30919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.663779][T30919] [ 1112.663779][T30919] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1112.671624][T30919] lock_sock_nested+0x41/0x100 [ 1112.676941][T30919] tls_sw_sendmsg+0x15f/0x2b50 [ 1112.682254][T30919] sock_sendmsg_nosec+0x90/0x180 [ 1112.687829][T30919] ____sys_sendmsg+0x54e/0x850 [ 1112.693135][T30919] ___sys_sendmsg+0x2a5/0x360 [ 1112.698350][T30919] __x64_sys_sendmsg+0x1b1/0x290 [ 1112.703916][T30919] do_syscall_64+0x166/0x520 [ 1112.709417][T30919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.715857][T30919] [ 1112.715857][T30919] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 1112.723356][T30919] __mutex_lock+0x19d/0x1550 [ 1112.728500][T30919] tls_sw_sendmsg+0x13a/0x2b50 [ 1112.733813][T30919] sock_sendmsg_nosec+0x90/0x180 [ 1112.739300][T30919] sock_sendmsg+0x1ca/0x2d0 [ 1112.744350][T30919] __sock_xmit+0x245/0x4f0 [ 1112.749319][T30919] nbd_disconnect+0x3ad/0x560 [ 1112.754533][T30919] nbd_disconnect_and_put+0x32/0x280 [ 1112.760369][T30919] nbd_genl_disconnect+0x4af/0x590 [ 1112.766049][T30919] genl_family_rcv_msg_doit+0x233/0x340 [ 1112.772159][T30919] genl_rcv_msg+0x614/0x7a0 [ 1112.777227][T30919] netlink_rcv_skb+0x226/0x4a0 [ 1112.782536][T30919] genl_rcv+0x28/0x40 [ 1112.787067][T30919] netlink_unicast+0x7bd/0x940 [ 1112.792371][T30919] netlink_sendmsg+0x813/0xb40 [ 1112.797683][T30919] sock_sendmsg_nosec+0x13a/0x180 [ 1112.803297][T30919] ____sys_sendmsg+0x54e/0x850 [ 1112.808635][T30919] ___sys_sendmsg+0x2a5/0x360 [ 1112.813863][T30919] __x64_sys_sendmsg+0x1b1/0x290 [ 1112.819447][T30919] do_syscall_64+0x166/0x520 [ 1112.824584][T30919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.831023][T30919] [ 1112.831023][T30919] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1112.838698][T30919] __mutex_lock+0x19d/0x1550 [ 1112.843847][T30919] nbd_queue_rq+0x373/0xff0 [ 1112.848900][T30919] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1112.855000][T30919] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1112.861881][T30919] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1112.868411][T30919] blk_mq_run_work_fn+0x16c/0x300 [ 1112.873992][T30919] process_scheduled_works+0xc3d/0x1630 [ 1112.880112][T30919] worker_thread+0xa47/0xfb0 [ 1112.885275][T30919] kthread+0x38b/0x480 [ 1112.889912][T30919] ret_from_fork+0x514/0xb70 [ 1112.895051][T30919] ret_from_fork_asm+0x1a/0x30 [ 1112.900367][T30919] [ 1112.900367][T30919] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1112.907602][T30919] __mutex_lock+0x19d/0x1550 [ 1112.912750][T30919] nbd_queue_rq+0xc1/0xff0 [ 1112.917717][T30919] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1112.923842][T30919] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1112.931237][T30919] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1112.937767][T30919] blk_mq_run_work_fn+0x16c/0x300 [ 1112.943342][T30919] process_scheduled_works+0xc3d/0x1630 [ 1112.949461][T30919] worker_thread+0xa47/0xfb0 [ 1112.954594][T30919] kthread+0x38b/0x480 [ 1112.959224][T30919] ret_from_fork+0x514/0xb70 [ 1112.964355][T30919] ret_from_fork_asm+0x1a/0x30 [ 1112.969664][T30919] [ 1112.969664][T30919] -> #3 (set->srcu){.+.+}-{0:0}: [ 1112.976811][T30919] __synchronize_srcu+0xc9/0x2f0 [ 1112.982311][T30919] elevator_switch+0x1e8/0x7b0 [ 1112.987626][T30919] elevator_change+0x2fa/0x480 [ 1112.992939][T30919] elevator_set_default+0x375/0x440 [ 1112.998684][T30919] blk_register_queue+0x3f3/0x4e0 [ 1113.004257][T30919] __add_disk+0x6cb/0xe30 [ 1113.009125][T30919] add_disk_fwnode+0x100/0x3a0 [ 1113.014441][T30919] nbd_dev_add+0x733/0xb60 [ 1113.020359][T30919] nbd_init+0x168/0x1f0 [ 1113.025066][T30919] do_one_initcall+0x250/0x870 [ 1113.030379][T30919] do_initcall_level+0x10a/0x1a0 [ 1113.035888][T30919] do_initcalls+0x59/0xa0 [ 1113.040863][T30919] kernel_init_freeable+0x29d/0x3e0 [ 1113.046616][T30919] kernel_init+0x22/0x1d0 [ 1113.051491][T30919] ret_from_fork+0x514/0xb70 [ 1113.056654][T30919] ret_from_fork_asm+0x1a/0x30 [ 1113.061976][T30919] [ 1113.061976][T30919] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1113.069824][T30919] __mutex_lock+0x19d/0x1550 [ 1113.074982][T30919] elevator_change+0x1af/0x480 [ 1113.080299][T30919] elevator_set_none+0xb5/0x140 [ 1113.085716][T30919] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1113.092062][T30919] nbd_start_device+0x189/0xb30 [ 1113.097461][T30919] nbd_genl_connect+0x167d/0x1cd0 [ 1113.103032][T30919] genl_family_rcv_msg_doit+0x233/0x340 [ 1113.109166][T30919] genl_rcv_msg+0x614/0x7a0 [ 1113.114229][T30919] netlink_rcv_skb+0x226/0x4a0 [ 1113.119533][T30919] genl_rcv+0x28/0x40 [ 1113.124069][T30919] netlink_unicast+0x7bd/0x940 [ 1113.129392][T30919] netlink_sendmsg+0x813/0xb40 [ 1113.134702][T30919] sock_sendmsg_nosec+0x13a/0x180 [ 1113.140272][T30919] ____sys_sendmsg+0x54e/0x850 [ 1113.145590][T30919] ___sys_sendmsg+0x2a5/0x360 [ 1113.150800][T30919] __x64_sys_sendmsg+0x1b1/0x290 [ 1113.156280][T30919] do_syscall_64+0x166/0x520 [ 1113.161418][T30919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.167853][T30919] [ 1113.167853][T30919] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1113.176920][T30919] blk_alloc_queue+0x544/0x690 [ 1113.182231][T30919] __blk_mq_alloc_disk+0x194/0x390 [ 1113.187885][T30919] nbd_dev_add+0x494/0xb60 [ 1113.192873][T30919] nbd_init+0x168/0x1f0 [ 1113.197577][T30919] do_one_initcall+0x250/0x870 [ 1113.202897][T30919] do_initcall_level+0x10a/0x1a0 [ 1113.208392][T30919] do_initcalls+0x59/0xa0 [ 1113.213283][T30919] kernel_init_freeable+0x29d/0x3e0 [ 1113.219037][T30919] kernel_init+0x22/0x1d0 [ 1113.224008][T30919] ret_from_fork+0x514/0xb70 [ 1113.229148][T30919] ret_from_fork_asm+0x1a/0x30 [ 1113.234480][T30919] [ 1113.234480][T30919] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1113.241726][T30919] __lock_acquire+0x15ff/0x2e50 [ 1113.247217][T30919] lock_acquire+0x115/0x350 [ 1113.252372][T30919] fs_reclaim_acquire+0x71/0x100 [ 1113.257979][T30919] prepare_alloc_pages+0x149/0x600 [ 1113.263692][T30919] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1113.270213][T30919] alloc_pages_mpol+0x21e/0x390 [ 1113.275609][T30919] alloc_pages_noprof+0xb1/0x2b0 [ 1113.281105][T30919] pte_alloc_one+0x22/0x370 [ 1113.286153][T30919] __do_fault+0xd1/0x2a0 [ 1113.290944][T30919] do_pte_missing+0x684/0x34b0 [ 1113.296262][T30919] handle_mm_fault+0x1a53/0x3750 [ 1113.301742][T30919] do_user_addr_fault+0x746/0x1340 [ 1113.307404][T30919] exc_page_fault+0x6a/0xc0 [ 1113.312455][T30919] asm_exc_page_fault+0x26/0x30 [ 1113.317851][T30919] __put_user_4+0xd/0x30 [ 1113.322821][T30919] j1939_sk_getsockopt+0x291/0x380 [ 1113.328505][T30919] do_sock_getsockopt+0x51d/0x7e0 [ 1113.334095][T30919] __x64_sys_getsockopt+0x1a4/0x240 [ 1113.339858][T30919] do_syscall_64+0x166/0x520 [ 1113.345008][T30919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.351455][T30919] [ 1113.351455][T30919] other info that might help us debug this: [ 1113.351455][T30919] [ 1113.361706][T30919] Chain exists of: [ 1113.361706][T30919] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1113.361706][T30919] [ 1113.374338][T30919] Possible unsafe locking scenario: [ 1113.374338][T30919] [ 1113.381806][T30919] CPU0 CPU1 [ 1113.387190][T30919] ---- ---- [ 1113.392575][T30919] rlock(&mm->mmap_lock); [ 1113.397047][T30919] lock(sk_lock-AF_INET6); [ 1113.404104][T30919] lock(&mm->mmap_lock); [ 1113.410979][T30919] lock(fs_reclaim); [ 1113.414982][T30919] [ 1113.414982][T30919] *** DEADLOCK *** [ 1113.414982][T30919] [ 1113.423483][T30919] locks held by syz.2.7079/30919: 2, last CPU#1: [ 1113.429826][T30919] #0: ffff888055d9b260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: j1939_sk_getsockopt+0x176/0x380 [ 1113.439776][T30919] #1: ffff88802b604378 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 1113.449910][T30919] [ 1113.449910][T30919] stack backtrace: [ 1113.455819][T30919] CPU: 1 UID: 0 PID: 30919 Comm: syz.2.7079 Not tainted syzkaller #0 PREEMPT(full) [ 1113.465216][T30919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1113.475388][T30919] Call Trace: [ 1113.478692][T30919] [ 1113.481641][T30919] dump_stack_lvl+0xe8/0x150 [ 1113.486270][T30919] print_circular_bug+0x2e2/0x300 [ 1113.491354][T30919] check_noncircular+0x12f/0x150 [ 1113.496350][T30919] __lock_acquire+0x15ff/0x2e50 [ 1113.501230][T30919] ? __lock_acquire+0x6df/0x2e50 [ 1113.506188][T30919] lock_acquire+0x115/0x350 [ 1113.510708][T30919] ? prepare_alloc_pages+0x149/0x600 [ 1113.516014][T30919] fs_reclaim_acquire+0x71/0x100 [ 1113.520998][T30919] ? prepare_alloc_pages+0x149/0x600 [ 1113.526305][T30919] prepare_alloc_pages+0x149/0x600 [ 1113.531466][T30919] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1113.537299][T30919] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1113.543649][T30919] ? __pfx_policy_nodemask+0x10/0x10 [ 1113.548958][T30919] ? rcu_is_watching+0x16/0xb0 [ 1113.553767][T30919] ? trace_sched_exit_tp+0x3a/0x130 [ 1113.558998][T30919] alloc_pages_mpol+0x21e/0x390 [ 1113.563881][T30919] alloc_pages_noprof+0xb1/0x2b0 [ 1113.568878][T30919] pte_alloc_one+0x22/0x370 [ 1113.573411][T30919] __do_fault+0xd1/0x2a0 [ 1113.577700][T30919] do_pte_missing+0x684/0x34b0 [ 1113.582527][T30919] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1113.588787][T30919] handle_mm_fault+0x1a53/0x3750 [ 1113.593847][T30919] ? handle_mm_fault+0xf1/0x3750 [ 1113.598820][T30919] ? __pfx_handle_mm_fault+0x10/0x10 [ 1113.604144][T30919] ? lock_mm_and_find_vma+0xa7/0x340 [ 1113.609461][T30919] do_user_addr_fault+0x746/0x1340 [ 1113.614601][T30919] exc_page_fault+0x6a/0xc0 [ 1113.619130][T30919] asm_exc_page_fault+0x26/0x30 [ 1113.624000][T30919] RIP: 0010:__put_user_4+0xd/0x30 [ 1113.629064][T30919] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 95 03 00 90 90 90 90 90 90 90 90 90 90 [ 1113.648691][T30919] RSP: 0018:ffffc90007077c18 EFLAGS: 00050202 [ 1113.654780][T30919] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000080 [ 1113.662789][T30919] RDX: 0000000096e2e0e9 RSI: ffffffff8e6fbd79 RDI: ffffffff8c6d9480 [ 1113.670787][T30919] RBP: ffffc90007077cd0 R08: 8f00000000000000 R09: 0000000000000000 [ 1113.678781][T30919] R10: 0000000000000000 R11: ffff88802b604378 R12: 0000000000000024 [ 1113.686776][T30919] R13: 1ffff92000e0ef88 R14: ffff888055d9b000 R15: dffffc0000000000 [ 1113.694773][T30919] j1939_sk_getsockopt+0x291/0x380 [ 1113.699935][T30919] ? __pfx_j1939_sk_getsockopt+0x10/0x10 [ 1113.705611][T30919] ? __pfx_j1939_sk_getsockopt+0x10/0x10 [ 1113.711272][T30919] do_sock_getsockopt+0x51d/0x7e0 [ 1113.716671][T30919] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1113.722239][T30919] ? __fget_files+0x3a2/0x420 [ 1113.727058][T30919] ? __fget_files+0x2a/0x420 [ 1113.731683][T30919] __x64_sys_getsockopt+0x1a4/0x240 [ 1113.736906][T30919] do_syscall_64+0x166/0x520 [ 1113.741523][T30919] ? trace_irq_disable+0x3b/0x140 [ 1113.746569][T30919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.752655][T30919] ? clear_bhb_loop+0x70/0xc0 [ 1113.757382][T30919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.763298][T30919] RIP: 0033:0x7f9721b9e159 [ 1113.767736][T30919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.787460][T30919] RSP: 002b:00007f9722985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1113.795909][T30919] RAX: ffffffffffffffda RBX: 00007f9721e26180 RCX: 00007f9721b9e159 [ 1113.803906][T30919] RDX: 0000000000000004 RSI: 000000000000006b RDI: 0000000000000006 [ 1113.811902][T30919] RBP: 00007f9721c3503b R08: 0000200000000080 R09: 0000000000000000 [ 1113.819924][T30919] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1113.827942][T30919] R13: 00007f9721e26218 R14: 00007f9721e26180 R15: 00007ffec0206a58 [ 1113.835950][T30919] [ 1116.001046][ T1311] ieee802154 phy1 wpan1: encryption failed: -22