last executing test programs: 5.753186602s ago: executing program 0 (id=9289): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x7f62c4469923ede5}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c877c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) socket$inet(0x2, 0x3, 0x2) r3 = socket(0x21, 0x80000, 0x1000000) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=r2, @ANYBLOB="0300000000000000280012800a00010076786c616e00094adc47c1888c3a273c6f07e51e234e151c0205f77e2b9ee119bc3b27ed84e5e88ce2793172ded673c2e80090d34aa1fb8558b71a91147601894bb2819cbee6bf5eae9a9b23947f01540f15f950f24066ffc47afe3e9604d31cebcc97f7486d3977354d237a79b63e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.559794449s ago: executing program 0 (id=9290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'veth1_to_team\x00', 0x2}) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4f46, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000260780b8669025c09c8087cd00000001031dbd7002fadbdf250100000004"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/162, 0xa2}], 0x1}, 0x9}, {{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e20, 0x4e23], 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0xfffa, 0x1}}}, {{@ip={@multicast1, @loopback, 0x0, 0xffffff00, 'veth0_macvtap\x00', 'gretap0\x00', {}, {}, 0x5c, 0x0, 0x60}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0x12, "11d8", 0x1}}, @common=@ah={{0x30}, {[0xc, 0x1], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x4, 0x0, 0x2, 0x5, 0x4], 0x4, 0xc}, {0x4, [0x3, 0x1, 0x5, 0x1, 0x4, 0x7], 0x4, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.time\x00', 0x275a, 0x0) openat$cgroup_ro(r5, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_for_children\x00') 4.94138039s ago: executing program 3 (id=9298): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket(0x40000000015, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x2000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf254900000008000300", @ANYRES32=r2, @ANYBLOB="00009900060000004e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44895) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3e, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x3ad1, 0x200, 0x0, 0x6}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x4}, 0x38) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r8, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) 4.33180428s ago: executing program 2 (id=9301): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @multicast2, {0x16, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0xa4fc, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2, 0x800000}, {@rand_addr=0x80, 0x7}, {@private=0xa010100, 0x1}]}]}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x5}, {0xfff1, 0xb}, {0xd, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008070}, 0x4008000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000500)=""/139, 0x8b, 0x0, &(0x7f00000005c0)=""/164, 0xa4}}, 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r6, 0x0, 0x0, 0x20040003, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4eae5b534fea2565d4dfa5a0fe38d7aa7d9f3c7bc6e895852a9035283b89ddbc41c54dbf9392c8dcc65178726eae650e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001200000000000000010000001833000003000000000000000000000000e68100030000008520000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000002007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x22, '\x00', r4, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x7, 0xbb, 0x5}, 0x10, r5, r1, 0x3, 0x0, &(0x7f0000000400)=[{0x1, 0x4, 0x2, 0x9}, {0x2, 0x2, 0x2, 0x5}, {0x2, 0x1, 0x4}]}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 4.134990114s ago: executing program 1 (id=9302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_SETUP]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a010400000000000000000a0000010900010073797a310000000048000480440001800c0001007061796c6f6164003400028008000440000000fe080003400000002c08000540000000140800064000000001080002400000000208000840000000010900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x64}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x41, 0x41}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x54}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket(0xa, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x7e4}, 0x1c) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r8, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x34000810) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0)={r9, 0x6bd}, 0x8) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="8803000008021100000008021100000100000000000300000000000000040000020401000000000000000005000000000006aaaa0300000008000102030405060708090a0b0c0d0e0f10"], 0x3e) 3.995224189s ago: executing program 4 (id=9303): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000100)='GPL\x00', 0x4000, &(0x7f0000000140)={@align=0x7fffffffffffffff, {0xfff, 0x6, 0x2, 0x1}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x4}, {[0x7, 0x6, 0x2, 0x7]}, 0x9, 0x2f, &(0x7f0000000340)=""/47}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0xb1, &(0x7f0000000580)=""/177, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x2000000}, 0x10}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001800000000000000100100000d000000aa000000bf0c13a21f"], 0x30}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1819000000000000000000050000000063010c00040000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.805585695s ago: executing program 3 (id=9304): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfb, {0x7a, 0x0, 0x0, r2, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x400}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4850) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20020830) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000280600fe880000000000000000000000000001fe800000050000000000a900000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a4c20000907800081312be58b864b222bf56e5de595fbe6596150000"], 0x0) 3.71515005s ago: executing program 4 (id=9305): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffd}, 0x1c) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/33, 0x21}, 0xffffff7e}], 0x1, 0x40010021, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0xb544e9f62f2573b5) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)={0x370, 0x13, 0x2, 0x801, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0xa}, [@generic="f52f167b086ffe8aa813ef7822283867fd458ed523e31f4e0fffd0bf13d26fcd77c46a847c00321e4d760dca194d60565fed5a9dfb6424c762318111f6a0afbb2753873461d3404b041059ccb1d0e8dea5e4d0261b1b1add09f2b28d82f4258c", @generic="939b6b030619e0e82438164c90e06026a5feeeb39c17340bbed16f53c97e14567383913cb1f6ce46a3f2da3e94fac0f300381966f2bdae670ad792ed6d7ed282958b79c1acbf94c9172346d3f747de341e206478d6ebbe17effac8287961ef6974aedf7a67b04fc7afe52901e9419185e1f2b17b610b7561d4de18e4546db28e253f36462ad3b7d1d99f1662d9d1fbac3706ea0b7b0fc1af47d0a2d92867763ffa5f6a7120b9980c6b994469bba5f634edadfd98dd91c252083a27adfe8b09649cb96a6058b25b7b1df83be88bbba23a69b93d905f8616a0", @nested={0x42, 0x2c, 0x0, 0x1, [@generic="d8a8ab4d8c9d8f7432790ff42a90aa02c1d101e20ee86c61eda280516c07fc64c50ecee77a64d05a28b8604ca0f784bb1a32ada1f484", @nested={0x4, 0x8e}, @nested={0x4, 0x18}]}, @nested={0x1c3, 0x13c, 0x0, 0x1, [@generic="e89019678bf0870f73ec5a75cbc13357c913400e84984a8d3a7519682b0b682db641dd5da9367f7a7dcebfcf51f4d10386db75ea529225d091846a5f3de93a75978196cc82227624c2725587e5baed50d158ee8ab1885a3ab20c7d1021cf0112274076e8952322b0276af9db4026ad05151d428abf2fb868cb7f6cb436326a61b86aad30b72b07cf1d218787045e796301971e8e28bae3dd8c1498eba4b30e296eca8c7edb63976f6d85b12d89b6b2174695cd50b5b19d001a20849abec1bb61460d881bae4a6178c00f65fd", @nested={0x4, 0x72}, @generic="023d955b47989295b9e11d097132c32c495c7297df58317d6f5230f8cafd0fbab9d95a16b2f37afcd7c76d4b88bbc3571e4ed7b1968e30dc5cea35d9237811f77999c7f33516472864806ec651c1a9488b320e2ba4f57a74de423e4bec22884d664b4487181727e121d8c8c36bc3ff59fedd3aaeb0e88889318980fb545fc205b73c83dc4b199b494552725df9df7458ff041f328cb84dd4543b11abf093723d308f21b3f598aa3b0ff6684ef58156f6c8b84b536ae50f3c2c8ddcae3606dbf4b6ed9fa338de4861df8cbc7ca37672bc9f5f463058d6088d9c13de", @typed={0xc, 0x4c, 0x0, 0x0, @u64=0xb1}, @typed={0x8, 0x80, 0x0, 0x0, @fd=r2}]}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r3}, @nested={0x8, 0x9b, 0x0, 0x1, [@nested={0x4, 0x4d}]}, @nested={0x8, 0x56, 0x0, 0x1, [@nested={0x4, 0x3f}]}, @typed={0x4, 0x163}]}, 0x370}, 0x1, 0x0, 0x0, 0x801}, 0x40080) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a0500000000000000000001002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b0e05961d5a00010072656a65637400001400028018000140000000020500020003000000100001800c000100636f756e7465720008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x46, "4372dcc479e73bdc0b280000feff00007e8ed4920af8785f0900000000000000cf967a12a94e316bccb28ca8d5ce78fd1a6c259248492f9d4564588dccdfff2619afe98c4f8f"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100005"], 0x40}}, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r7, &(0x7f0000000180)="b67aebdd5db3362d90ddd1600d0ba5b11cca3521231233153a409d02e7f5f143632dc01b44bef0735e8644910ec6d1e333e40ceec147a349f5f80874177c7a47b02539c5e43a1183f0ea429f59b68e07194e900e672495d394c9db6da768ba65a9b7781772783af97bafcee67c6e96613d3b5ebcbf84f3f003fb13d96edca28484226b9f8d1c8b15c09cc3faad877f2173001b496a", &(0x7f0000000240)=""/143, 0x4}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000002300)={0x8, 0x5, {0x40, @struct={0xf228, 0x2d57}, 0x0, 0x3, 0x0, 0xa7, 0x7, 0xffffffffffffffff, 0x0, @struct={0x2, 0x39de}, 0x8001, 0x2, [0x5, 0x1, 0x5, 0xfffffffffffffffb, 0x59d7]}, {0x0, @struct={0xa, 0x6}, 0x0, 0x1000, 0xb61f, 0xd7e, 0x8, 0x5, 0x4ee, @struct={0x2, 0x7}, 0xff5, 0x9, [0x876, 0x5, 0xffffffff, 0x40, 0x4, 0x9]}, {0x8000, @usage=0x48000, r10, 0x9, 0x8, 0x4, 0x0, 0x7f, 0x4a, @struct={0xfffffffa, 0x1}, 0x48, 0x10000000, [0x6, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffe, 0x7, 0x65]}, {0x1, 0x3, 0xffffffffffffff36}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000600)={0x17, 0x4, {0x7, @usage=0x401, 0x0, 0x80000004, 0x7, 0x2, 0xffffffffffffffff, 0x4, 0x400, @usage=0xd5, 0x8, 0x1, [0x6, 0x8, 0x5, 0x200, 0x59b9, 0x7fffffffffffffff]}, {0x9, @usage, 0x0, 0xbaa, 0xc, 0x200, 0x9, 0x2, 0x8b, @usage=0xbffe, 0x9, 0x0, [0x5, 0x5, 0x100000000, 0x4, 0x400, 0x9]}, {0x5, @usage=0x4, r10, 0x5, 0x7ff, 0x7, 0xd0, 0x7f, 0x4c0, @struct={0x2, 0x312}, 0x6, 0x5, [0x2, 0x4018, 0x7, 0x9, 0x0, 0x400]}, {0x5, 0x8, 0x1000}}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000a00)={{r6}, {@val={r10}, @max}}) shutdown(r1, 0x1) 3.586814379s ago: executing program 2 (id=9306): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c", @ANYRES64=r0, @ANYRES8=r0], 0x0, 0x8e, 0x0, 0x0, 0x0, 0x10000, @value=r0}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000190001002cbd7002000000001c140009"], 0x30}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) shutdown(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000002700)={{r5, &(0x7f0000002500)='vxcan0\x00', 0x200, &(0x7f0000002540)={@align=0x5, {0x4, 0x7, 0x80, 0x4}}, 0xd, &(0x7f0000002580), &(0x7f00000025c0)=0xf}, {[0x9, 0xd, 0xa, 0xb753]}, 0x75ae, 0xcf, &(0x7f0000002600)=""/207}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002ac0)={r5, 0xe0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002880)=[0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f00000028c0)=[{}], 0x8, 0x10, &(0x7f0000002900), &(0x7f0000002940), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000002980)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x2, 0x11, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x0, 0x0, 0x7, 0x10, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcc70224}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00', 0xfffffffb, 0x1000, &(0x7f00000014c0)=""/4096, 0x41000, 0x2, '\x00', 0x0, @fallback=0x8, r8, 0x8, &(0x7f0000002780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000027c0)={0x3, 0xe, 0x2, 0x98000000}, 0x10, r9, r6, 0x3, 0x0, &(0x7f0000002b00)=[{0x3, 0x5, 0xb, 0x4}, {0x2, 0x3, 0xd, 0x6}, {0x1, 0x5, 0x10}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r9, 0x4) 3.445357145s ago: executing program 2 (id=9307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x8}}}, 0x26) 3.416150464s ago: executing program 3 (id=9308): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x8, {0x0, 0x0, 0x0, 0x0, 0x25261}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xfffffffffffffee9}, 0x1, 0x0, 0x0, 0x2004d818}, 0x0) 3.215168617s ago: executing program 3 (id=9309): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000000c0)=0x1200, 0x4) 3.064864487s ago: executing program 2 (id=9310): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x70bd2c, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r1, 0x26, 0x0, 0x168, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8d}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x30040844) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000100)={'pimreg1\x00', {0x2, 0x0, @loopback}}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x40004, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000859e196ff531c3c5d0f6f6bbc05c4d0000000c0000480c000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 2.842533343s ago: executing program 0 (id=9311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000b40)={r4, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000d1780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000d1980)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000d2d80)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r5}, {r6}], 0x0, "8f8214df7fea99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000003140)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xfe, "3421442dfa7e3b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000100)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "ef140e4c3644fe"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001100)={r9, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004140)={'caif0\x00'}) sendmsg$nl_xfrm(r0, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x12, &(0x7f0000000000), 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x46, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, &(0x7f0000002100)={0x2, 0x1000, "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"}) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r13, @ANYBLOB="010028bd70000000000001000000800008807cfdff7f24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b5400098028000080060001000a00000014200200fe880000000000000000000000000201050003000300000028000080060001000a000000140002000000000000000000000000000000000005000300010006001400020077673000000000000000000000000000080005"], 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendto$inet6(r11, 0x0, 0x0, 0x20008045, &(0x7f00000000c0)={0xa, 0x2, 0x401, @empty}, 0x1c) 2.695964108s ago: executing program 1 (id=9312): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000fc0)) sendmmsg$inet6(r0, &(0x7f0000004f80)=[{{&(0x7f0000001080)={0xa, 0x4e23, 0x97, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000004340)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x18}}], 0x1, 0x8004) 2.61998992s ago: executing program 4 (id=9313): r0 = socket(0x10, 0x803, 0x0) r1 = accept$packet(r0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50583}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) 2.283640087s ago: executing program 1 (id=9314): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x10001, 0x20}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r2, 0x4) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r1, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 2.198438062s ago: executing program 4 (id=9315): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@alu={0x4, 0x0, 0xc, 0x6, 0x7, 0x100, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1002, &(0x7f0000000440)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1, 0xffffffffffffffff}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x808000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3ff}, 0x1c, 0x0, 0x0, &(0x7f0000019240)=ANY=[@ANYBLOB="1600000000000000290000003e"], 0x18}, 0x40c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001480)={{{@in=@private, @in6}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f0000001580)=0xe8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendto$phonet(r7, &(0x7f0000000340), 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000047, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001680)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xb, 0x24, &(0x7f00000017c0)=ANY=[@ANYBLOB="180000000200000000000000018000001811007ccdd68db306307600", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d89c00008500000006000000b7080000000000007b8af8ff00000000b70800000a0400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000015c0)='syzkaller\x00', 0x1, 0x13, &(0x7f00000002c0)=""/19, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000016c0), 0x10, 0x6}, 0x94) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8fcc048f1a0daad170478560f60eb8dc258ded60aee45b04b15d", 0x30) r11 = accept$alg(r4, 0x0, 0x0) r12 = socket$inet6(0xa, 0x80001, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x3, @mcast1, 0xfffffffe}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r12, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmmsg$alg(r11, &(0x7f0000001a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001701"], 0x18, 0x44094}], 0x1, 0x30040001) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r9, 0x25, 0x12, @void}, 0x10) ioctl$XFS_IOC_START_COMMIT(r11, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r13, 0x32, 0x0, @void}, 0x10) 1.984694805s ago: executing program 3 (id=9316): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getstats={0x1c, 0x5e, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000001f00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)={0x1aac, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@NL80211_ATTR_CSA_IES={0x1a80, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x4ad, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x4}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x2}}, 0x5, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xa, 0x4, 0x9893, 0x5}}, @void, @void, @val={0x25, 0x3, {0x1, 0xad, 0x2}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x5, 0xb1, 0x9}}, @val={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x80000001, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x9}}, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}}, @val={0x76, 0x6, {0x14, 0x3, 0x9, 0x6}}, [{0xdd, 0x52, "b6a561a90b9807687b91311e5b5880a669aefa7f76c83c5c24f3650bf82f8e6d85b68a89a3ef5f16f59ef1eea9a309ecf3b191e85e168e86dea661f313e36afa1bfd800be7221e2db3cc29de2eb2154ceb6d"}, {0xdd, 0xd6, "fb8fd72c3aa20f8a63973d74799f9419cbda9f9f588a85fe74d3c166c3c2d4874d5108f2ae495a08d1de4fb5e22151728ece9609003b47d3ca313ba16a0e49799faf0e17dff6f2c0e09b77271e182fe71a565df1960a7f7defad878dce0f6a302ebb37cf57a10fc8595b0df3acb58cc8ed594f507a0a97254675bb9bf05796b05d9b79272d2b34888f554871f500f6089a0fdc664f44bff8a38eb1d5dfd01a5e6056ef2dda94671ba4ed9d5470030ce30efa01d866b16ebbafd8ee6cae67c5562d0a765760ebbcbac56a5c35feec51891a439276aa1f"}, {0xdd, 0xc5, "3872648729b9ec8335e1b3d1b4d1a8753156b03d5935afaed533f6e85684ed1ca153764b02330cec005e0de445c031767946db2bfa0701a4b83a0e2d253dd10ea1364227c3497968facab90c5a8f338d99d7a3e89f16acda49a7e3e77ba7d0117cadfc16ddb1597c0410140f9a5e2eabe8006db01eaea8820efe3fab29ca121251bedacac87d60d1c960d4742796a3f910d95e24dbb5804b2bcdc74e5e04e484bd2ef25aaac8393293ad27a4db4051cd1ef0500dd4195aefe7ad8d8b9a4129191ce9c99c9b"}, {0xdd, 0xe, "e2451528754229ea52c6adaaab30"}, {0xdd, 0x25, "905e9738a285b9e9d7ab8b174e52adaeda45aabcd68fdb9fc4cd9902b5d575d4a66ced7986"}, {0xdd, 0x94, "422f0cc570b37976ba95d2a2a28728441c0a1de83b99512eb043e7034a72c53eaeedea2eab78fded86f474b3028f352957f9d7f50dcc13547bef3f03a018b11de2f5d6aa71d03e01dc2e74391e6c607c27ecccb16638d87fef68aafb04323c798c8934d1fe2c3b60284e45db8e8a3b0b97aa7d21c4d377aab7dc3eedc81044f7d36e101ea6aa37593a38e1bab32ea94fc537795e"}, {0xdd, 0x7c, "7169b95ef9250b76bb769d21f86202d2531d7c10a967d5c2d4721114ab1c5707c99dad63ecae0b8308c05a5f574db90afdff8c837d5a22c5904308e2cc832cecacd3db1fa7f331d771df95bc14dc5ead167ae800a600fbe0c6dc846117e03cacfcfe544f42e11c04963ab52430b31270eefcd397220215d833a63830"}, {0xdd, 0x18, "c355dd09d9929b4615d919fcdb37479cef415c8bd84f1eee"}, {0xdd, 0x3b, "1ef1f712b973ffc5eda5e36fb267239506609d4c3bd68aacdbdbfbbd66820e52e1e228348c13d078874d99e3f3a5d2e0af16869de96eb932c01d7c"}, {0xdd, 0x9f, "932acae26a80ac016f5611a5cac9ab2c8e82e3adb12eb1d3d5b89b22fe1f3f8a8bd3fe6918204b627268685e1f8bc1d0e091edfac3d74b43052a7514ed2db3a54d5e5f3c37a53c4c7a3704f7b77979526fd088eec505995b17ddac47c11a5af3847570790effcfc8083daab54e906c74846b0ed05f2c54f54d804703b64bec42b1cf0370729527897bddc947058a85b80fb9372e2a5113cf5924a32f9093af"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x13c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x50, 0x2, "1b32c1fd42d443991dec086b057f1bbb8598dc87c3a70b292547809ff3c37ad4d7d8360d1e353f4abf674d4470a97c724a512cf12e091572c10f7cf69955627ea89ac53e5fa752dbad02ce65"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3b, 0x3, "c2ddfe97521fef181efd19c468ee69b8118015f88ee27e998763cbc5a759fed484875ad9bb7d41064ec5f79ec317d15c6d81a9a9dbe95e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xa2, 0x2, "60fbb0ca326ed57118206a2d31d693303a63e19d75c97ddf8642b584ea1a4eaab3997c4312f41c9a10d25f51c6f3868f20b8372903411f64697c3abc3abbe56db3a867c55f07df4128c1c1a8b94ef1fcd375677ba6f7ed72aedb4c5a2a20cde34b8159dc6c07888fdd9b17b7fb4f479ed7f795a0f9aa0005c8fa12ac76c9df0f577086c9c0e48aad724d92f6777243d88469d73bc269a099c376b59eb5ba"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x228, 0x80, [@perr={0x84, 0x102, {0x5, 0x10, [{{}, @device_a, 0x9, @void, 0x23}, {{}, @broadcast, 0x2, @void, 0x2d}, {{}, @device_a, 0x4, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x10001, @value=@broadcast}, {{0x0, 0x1}, @broadcast, 0x5dc6acd2, @value, 0x3c}, {{}, @broadcast, 0x6, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x4f0b, @value=@broadcast, 0x19}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x2a}, {{}, @device_a, 0x7, @void, 0xb}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x28}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x21}, {{0x0, 0x1}, @device_b, 0x9a, @value, 0x3f}, {{}, @device_b, 0x1, @void, 0x41}, {{}, @broadcast, 0x3ff, @void, 0x4}, {{}, @device_b, 0x35, @void, 0x23}]}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @mic={0x8c, 0x18, {0xd87, "ee139894fd6a", @long="4c80027005c45f1e0ff5b6ad8b6acb95"}}, @cf={0x4, 0x6, {0x3, 0x81, 0xff31, 0x2867}}, @random={0x0, 0xe0, "15a1a706f2cb61a7837c1a6bbc17f24cda318bacca6bce6e37880eb85a496e0e1dcadc6843e7acc617a4f5c81edbc54634ecd90998e59b48c68c83ad37aa308b74e7a1ac18d5795ec22c6528f066d5b3601c0989558eb4fce80ed6d0c2e0fd07c9cacff1a851fdf24de7a372c5da29491002ba074992b878b62bd527994906fd5e8070a359e524cf351be105b7576999afc05df2cfbb0f72424b80001bab2d9986611a2020e1b9922a22825c0a8df993c9a82b414685afedea2e3641f8f9700130c6f259e43f48a07c2c4d8616455781aa1e995f37cf29f751264d9812215108"}, @mesh_chsw={0x76, 0x6, {0x5, 0xc, 0x32, 0xab2f}}]}, @NL80211_ATTR_FTM_RESPONDER={0x10ec, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "8f"}, @NL80211_FTM_RESP_ATTR_LCI={0x19, 0x2, "c7685bf5a4201c133593dc64f26ee38e505323a801"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6, 0x3, "e1f2"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb4, 0x3, "830fa183c71c90a7fdb2e01fcc563f9a81c9b87c5f6a66890ca7d735aaa9f5cf5522919273a0bedb7ad83589613c13eab4ed156f218c25c9ac48c32607476e99ba807d61a2beedaa3899b9fe885b3b31535e75cc1fafedfd4f3a4916a54535d79e034c9a563f121d84ba89ad443a45d92ba2a7461ba7cddaf39aad7577624df8d7b35d64370fd2beefc5e5856eeb1328f0736152aeacc1564e4b329dd75e3b1ceb4319979b0f6380d0ed4ba6d1e5432c"}]}, @NL80211_ATTR_IE={0x38, 0x2a, [@supported_rates={0x1, 0x6, [{0x6c}, {0x1b}, {0x9, 0x1}, {0x2}, {0x12}, {0x6c, 0x1}]}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @val=0xff, @void, @val="239a533e2d642491ee606e3571fdf7de"}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x30, 0x80, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x6c, 0xa, @device_a, 0xfffffff1, @value, 0x40, 0x401, @device_b, 0x6}}, @supported_rates={0x1, 0x3, [{0x4, 0x1}, {0x7a}, {0x18}]}]}, @NL80211_ATTR_IE={0x6a, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x1}, 0x1, 0x75, @device_a, 0x5, 0x3ff, 0x100}}, @erp={0x2a, 0x1, {0x1}}, @chsw_timing={0x68, 0x4, {0x2, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x4, 0x2c, 0xc9}}, @erp={0x2a, 0x1, {0x1}}, @challenge={0x10, 0x1, 0xa3}, @prep={0x83, 0x1f, {{}, 0x2, 0xf, @device_b, 0x401, @void, 0x7, 0x6, @broadcast, 0xe}}, @challenge={0x10, 0x1, 0x9}, @link_id={0x65, 0x12, {@initial, @broadcast}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x11, 0x7f, [@challenge={0x10, 0x1, 0x36}, @ibss={0x6, 0x2, 0x81f4}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x3, 0x8, 0x7fff, 0xa77, 0xb, 0x2, 0x0, 0x8001]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x11, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x95, 0xe}}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x37, 0xf, [@gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xae, 0xa}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x2}}, @link_id={0x65, 0x12, {@random="56b3218fcac7", @broadcast, @broadcast}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x4, 0xf, 0x4, 0x9, 0xd, 0x9, 0x7, 0x6, 0x4, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xffff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x3, 0x33db, 0x1, 0x1]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7d}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1aac}, 0x1, 0x0, 0x0, 0x4ccf121fbb019e87}, 0x20000000) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x7a31, 0x7ff}, @sack_perm, @sack_perm, @mss={0x2, 0x4}, @window={0x3, 0x800, 0x6}, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) write$ppp(r0, &(0x7f0000000100)="229d", 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.935521976s ago: executing program 0 (id=9317): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'wg1\x00', &(0x7f0000000540)=@ethtool_rxfh_indir={0x0, 0x3, [0xe, 0x6, 0x4]}}) (async) unshare(0x28000080) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ee920000f9dc2f9868417bcd0eee036353156e26c93dc8775589b6836baccbb4b92298bd6f95d2b675bf04edfd88af53efbd2368c4c411f9448ce7c6f4c4d4", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f40)={&(0x7f0000001540)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000002000000000000000000000d0a00000000000000000000060400000010000000060000850500000001000000090000000400deff070000000000000004000000090000000b00200000000000150000000300000002000000090000000d0000000500000000010000000075464776d159da13b675", @ANYRESDEC=r2], &(0x7f00000030c0)=""/4094, 0x86, 0xffe, 0x1, 0x5}, 0x28) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff}) read(r6, &(0x7f0000000540)=""/4096, 0x1000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r9, 0xffffffffffffffff, 0x1a, 0x0, @val=@netfilter={0x1, 0x0, 0x7e, 0x1}}, 0x20) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'tunl0\x00'}) 1.719166719s ago: executing program 4 (id=9318): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r5}, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x26000000) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0xffffffffffffffff, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r1, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x8, 0x1}}}}}, 0x1d) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 1.375617425s ago: executing program 1 (id=9319): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xe2, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0, 0x50}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x7f, 0xa}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x10040046}, 0x240008c4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4840) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r4, &(0x7f00000051c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000050c0)=[{&(0x7f0000000340)="67d628c20f6a631cc7", 0xffe3}], 0xc}}], 0x1, 0x4000004) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9992bbd700000000000fc000000000000000000000000000000ac1e00010000001b0000006b3710f2839e400400000000000a00405087000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000004000000b86b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ff7f00000000000006000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf0500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x8, 0xa8, &(0x7f0000000bc0)=""/168, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0xb, 0x5, 0x101}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, r4], &(0x7f0000000d40)=[{0x1, 0x2, 0xa, 0x7}, {0x0, 0x3, 0xc, 0x1}, {0x4, 0x3, 0x9, 0x7}], 0x10, 0x1}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) close(r6) write$cgroup_devices(r6, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000010000000000000001850000005000db001811004d", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xb, 0x3e, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000002000000000000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32, @ANYBLOB="000000000000000018aaf0ffffffffffb7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000b7080000000000007b49f8ff00000000b7080000050000007b8af0ff000000bfa100000000000007010000f8ffffffbffc6544b889ee6041a24ba4000000006954000007040000f0ffffff71113b1708000000182300007f4d937ab1edce76d14ce594a03f939dc6e2ebb1000f0c82223e86a5962c06f76780cc3b7d8e14e61e80798e30015ba5aab044fe88428947e1f380eae78c9f01ff3eb14fed5afb8fa14cca2c139a64265d5409fc742bb2642ce39d4db523c68b534d005d48c9f35ad877c3867dc9229849c0acb3761eb3768bb7", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185000000d0000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006e9400008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x6c, 0x7b, &(0x7f0000000800)=""/123, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x2, 0x10, 0x1000, 0x7}, 0x10, 0x0, r5, 0x0, &(0x7f0000000e40)=[r6, r7], 0x0, 0x10, 0xd0b}, 0x94) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, r2, 0x442aa000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000000c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0xffffffed, 0x25dfdbfe, {0x2, 0x3f}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe8000000020a7848200000000000022ac14144300000000000000000000000000000008000300050a825b23c3a8086117910c08366b00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.254910535s ago: executing program 2 (id=9320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x8}}}, 0x26) 1.115752253s ago: executing program 4 (id=9321): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000140)={@initdev, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0x6f, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040844}, 0x20040054) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x220, 0x110, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x5}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x40, 0x1000, 0x6, 0x6, 0x828, 0x2, 0x101]}}}, {{@ipv6={@local, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0x0, 0xff000000, 0x0, 0xffffffff], 'veth0_to_bond\x00', 'macvlan0\x00', {}, {0xff}, 0x2f, 0x51, 0x3}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x1, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x97be, 0x8, 0x4, 0x401, 0x7, 0x7, 0x4]}}}, {{@ipv6={@remote, @empty, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff, 0xff], 'veth0\x00', 'rose0\x00', {}, {0xff}, 0x2e, 0x86, 0x4, 0x7d}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x6}, {0x1, 0x2}, {0xffffffffffffffff, 0x2, 0x3}, 0x6, 0xfff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a, 0x0, 0x0, r7, 0x8}, [@IFLA_VF_PORTS={0x4}, @IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004845}, 0x0) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) 1.023175536s ago: executing program 1 (id=9322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000580), 0x0}, 0x20) 964.893441ms ago: executing program 2 (id=9323): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffd}, 0x1c) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/33, 0x21}, 0xffffff7e}], 0x1, 0x40010021, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0xb544e9f62f2573b5) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)={0x370, 0x13, 0x2, 0x801, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0xa}, [@generic="f52f167b086ffe8aa813ef7822283867fd458ed523e31f4e0fffd0bf13d26fcd77c46a847c00321e4d760dca194d60565fed5a9dfb6424c762318111f6a0afbb2753873461d3404b041059ccb1d0e8dea5e4d0261b1b1add09f2b28d82f4258c", @generic="939b6b030619e0e82438164c90e06026a5feeeb39c17340bbed16f53c97e14567383913cb1f6ce46a3f2da3e94fac0f300381966f2bdae670ad792ed6d7ed282958b79c1acbf94c9172346d3f747de341e206478d6ebbe17effac8287961ef6974aedf7a67b04fc7afe52901e9419185e1f2b17b610b7561d4de18e4546db28e253f36462ad3b7d1d99f1662d9d1fbac3706ea0b7b0fc1af47d0a2d92867763ffa5f6a7120b9980c6b994469bba5f634edadfd98dd91c252083a27adfe8b09649cb96a6058b25b7b1df83be88bbba23a69b93d905f8616a0", @nested={0x42, 0x2c, 0x0, 0x1, [@generic="d8a8ab4d8c9d8f7432790ff42a90aa02c1d101e20ee86c61eda280516c07fc64c50ecee77a64d05a28b8604ca0f784bb1a32ada1f484", @nested={0x4, 0x8e}, @nested={0x4, 0x18}]}, @nested={0x1c3, 0x13c, 0x0, 0x1, [@generic="e89019678bf0870f73ec5a75cbc13357c913400e84984a8d3a7519682b0b682db641dd5da9367f7a7dcebfcf51f4d10386db75ea529225d091846a5f3de93a75978196cc82227624c2725587e5baed50d158ee8ab1885a3ab20c7d1021cf0112274076e8952322b0276af9db4026ad05151d428abf2fb868cb7f6cb436326a61b86aad30b72b07cf1d218787045e796301971e8e28bae3dd8c1498eba4b30e296eca8c7edb63976f6d85b12d89b6b2174695cd50b5b19d001a20849abec1bb61460d881bae4a6178c00f65fd", @nested={0x4, 0x72}, @generic="023d955b47989295b9e11d097132c32c495c7297df58317d6f5230f8cafd0fbab9d95a16b2f37afcd7c76d4b88bbc3571e4ed7b1968e30dc5cea35d9237811f77999c7f33516472864806ec651c1a9488b320e2ba4f57a74de423e4bec22884d664b4487181727e121d8c8c36bc3ff59fedd3aaeb0e88889318980fb545fc205b73c83dc4b199b494552725df9df7458ff041f328cb84dd4543b11abf093723d308f21b3f598aa3b0ff6684ef58156f6c8b84b536ae50f3c2c8ddcae3606dbf4b6ed9fa338de4861df8cbc7ca37672bc9f5f463058d6088d9c13de", @typed={0xc, 0x4c, 0x0, 0x0, @u64=0xb1}, @typed={0x8, 0x80, 0x0, 0x0, @fd=r2}]}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r3}, @nested={0x8, 0x9b, 0x0, 0x1, [@nested={0x4, 0x4d}]}, @nested={0x8, 0x56, 0x0, 0x1, [@nested={0x4, 0x3f}]}, @typed={0x4, 0x163}]}, 0x370}, 0x1, 0x0, 0x0, 0x801}, 0x40080) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a0500000000000000000001002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b0e05961d5a00010072656a65637400001400028018000140000000020500020003000000100001800c000100636f756e7465720008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x46, "4372dcc479e73bdc0b280000feff00007e8ed4920af8785f0900000000000000cf967a12a94e316bccb28ca8d5ce78fd1a6c259248492f9d4564588dccdfff2619afe98c4f8f"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100005"], 0x40}}, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r7, &(0x7f0000000180)="b67aebdd5db3362d90ddd1600d0ba5b11cca3521231233153a409d02e7f5f143632dc01b44bef0735e8644910ec6d1e333e40ceec147a349f5f80874177c7a47b02539c5e43a1183f0ea429f59b68e07194e900e672495d394c9db6da768ba65a9b7781772783af97bafcee67c6e96613d3b5ebcbf84f3f003fb13d96edca28484226b9f8d1c8b15c09cc3faad877f2173001b496a", &(0x7f0000000240)=""/143, 0x4}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000002300)={0x8, 0x5, {0x40, @struct={0xf228, 0x2d57}, 0x0, 0x3, 0x0, 0xa7, 0x7, 0xffffffffffffffff, 0x0, @struct={0x2, 0x39de}, 0x8001, 0x2, [0x5, 0x1, 0x5, 0xfffffffffffffffb, 0x59d7]}, {0x0, @struct={0xa, 0x6}, 0x0, 0x1000, 0xb61f, 0xd7e, 0x8, 0x5, 0x4ee, @struct={0x2, 0x7}, 0xff5, 0x9, [0x876, 0x5, 0xffffffff, 0x40, 0x4, 0x9]}, {0x8000, @usage=0x48000, r10, 0x9, 0x8, 0x4, 0x0, 0x7f, 0x4a, @struct={0xfffffffa, 0x1}, 0x48, 0x10000000, [0x6, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffe, 0x7, 0x65]}, {0x1, 0x3, 0xffffffffffffff36}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000600)={0x17, 0x4, {0x7, @usage=0x401, 0x0, 0x80000004, 0x7, 0x2, 0xffffffffffffffff, 0x4, 0x400, @usage=0xd5, 0x8, 0x1, [0x6, 0x8, 0x5, 0x200, 0x59b9, 0x7fffffffffffffff]}, {0x9, @usage, 0x0, 0xbaa, 0xc, 0x200, 0x9, 0x2, 0x8b, @usage=0xbffe, 0x9, 0x0, [0x5, 0x5, 0x100000000, 0x4, 0x400, 0x9]}, {0x5, @usage=0x4, r10, 0x5, 0x7ff, 0x7, 0xd0, 0x7f, 0x4c0, @struct={0x2, 0x312}, 0x6, 0x5, [0x2, 0x4018, 0x7, 0x9, 0x0, 0x400]}, {0x5, 0x8, 0x1000}}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000a00)={{r6}, {@val={r10}, @max}}) shutdown(r1, 0x1) 874.392967ms ago: executing program 3 (id=9324): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_delrule={0x48, 0x21, 0x20, 0x70bd2c, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x7f, 0x2, 0x0, 0x0, 0x7}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x48}}, 0x44000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) unshare(0x6a040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r7, &(0x7f0000000380)="3dbbef40d8e94386d446560198f5f0d35e03609558cbb4a35bfcac3df7ac72396d907c92f5a2324880f0d123dcb798ddbaa095cc5aa01d8d89ab03cf3327547468593bf3d4b0a607750e8e1e25b0978f60a59b9c7790ac0669fc43a09ec504111f02ef28452ad232ac9c39497efd1dd7bf0168b2a0ca59b5298ad6e269443afc605a44717842ee3871c7eac058c74bfd153e596772baa62206b5e0f644e83f0bba0f2a", 0xa3, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r8, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x103) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6022a, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) 560.89671ms ago: executing program 1 (id=9325): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) (async, rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x400, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {0xa}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x6, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x4, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0xb, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x5, 0xd, 0x4, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x7fff, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x20081, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x1, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0xffffffff, 0x6, 0x7f, 0x3ff, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r14, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) r15 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r16, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r17, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 274.410861ms ago: executing program 0 (id=9327): r0 = epoll_create1(0x80000) socket(0x1, 0x80802, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, &(0x7f0000000080)=0xff1d) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000a0c0}, 0x6584f2c77c205b5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000000)={0x10000018}) close(r0) 0s ago: executing program 0 (id=9328): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000280)=0xffffff87) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000645350d0027bd7000fbdbdf250a3f20ab0202c8050070000008001900", @ANYRES32=r4, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close(r5) sendmmsg$unix(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)="12df6db89cf3e70ef8a726ee69e1690750ceeae26cfe868c2b5011db47906eb520a0294063529c8cd9de6ca0cfc386d59705b45e2c2124a693651f75dca635c29771cfd2c1e34e3e19d40c1a022223ef5336992348247424a508d8f36c49db9e8277c3ef4a94893c5e9092b781ad7943cc12c7a05d6abbf3fbb0cdc42a", 0x7d}, {&(0x7f00000001c0)="ce9b441e1ca98679804c6e9b95f70fbab9ef7b9bf2c7769ca9135f9babdd107534a23b566109a56eb29a293859b77c99e8166ed7a648663b12dd06442db7fccf42ecdcceabbbcdf3596de72a53742a46b3122a387d69ab754f8b23d9fed5aa534dccac4ee1fdaac012f5b8bb88c739ba14482c8af860ca5a84225cc48a1b17b3ac7d5c5ce3a3f66438cbd2fa9c3e35", 0x8f}, {&(0x7f0000000280)="40f4569508e574c7a06c923fc3a83fe6b7008fd350c13a483aa6f5cef5789e784f6812505424866b0c3e3355af982c0863b1a7ade406704d023b70c5373ad2ad1f87852282f860156660bc33cbaee283ac1f2a7f527dc33674a766765415b1b63179a494e7e04aa2804484e4a526132de883c8f22175aacfc785130e2ea511c95d281578d6354ab9973e58ff5d2f5b63f4b2f07137449cabfa59a5ee8ad70f3c83704054c7955543368cd672ebac98f954b209aa2746a645f5a3998de2cb76edf9", 0xc1}, {&(0x7f0000000380)="faba7720367250958ace0d53f2f2", 0xe}, {&(0x7f0000000c40)="ec249bc50fc515f409889eece0e65c5e22c85b02a0fd58723c8c5eb6adef6f6a3f627bd846c87679e3fb044a889027180b7fb5fc9c181736d65d7009eed58d0b85a2d4d4b66e244c5b1e5d276cc34dfe174b80c6001217360ffc11a0a74321be998769d86ed80653aafed50c459197dc", 0x70}], 0x5, 0x0, 0x0, 0x40004}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000540)="cdd412bc38d42c74b5dbf695cb4021c1beb7424f070ab93c2bc88c15a5ed98b5dbc945a42b49d0c516e09c1f0b63b6ef0957d399617ceeb166f4863cd76595dd4d759f66a2808c0d4ed32cce05c9902625e7fbb7394fb5b7bf5f9ab11cc59e22f774091fad961cb166ba0b16f704887b06e5bbcb6a5f5044be89eee5bada", 0x7e}, {&(0x7f00000005c0)="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", 0xff}, {&(0x7f00000006c0)="13cac78faba7b23bdf56f11f54c5f9dddd5f77ad9965303434a1b2212055f37e69ce4325", 0x24}, {&(0x7f0000000700)="ad3f081d9c51c1130b5993e08fbca9c92651053e189192aed930e69c116b3ddc7a0da3c86d28f7d5d674e78023003814ac9266c890d66c0fa439a63a875ea80ed68b08724ddebe942af5d903d3b50373e3c21600937cca8d23c1e3ab6a07cb14480a495e08f57916f662ba5b61edd729a19043ea85bdc68d098d1fc03d49dc8eac872ba4b9ed110539ce7df862a2bb51d40ccb9f4ea8b7321362f2abac9ee4d8f2e38e7209fc9d", 0xa7}, {&(0x7f00000007c0)="b50848a89d9b2b3262c7a8b02d267e55da0a6b4b19b914171184ae68920bf5338a561ba29171bd88503cf3161237622466ffa1510e16e3ee8545be432a0837858fb978f6a02eef1344eccf6dca6460805eec84fc6c92fe39fe32d8460850aab7b984fbe4e9ef59ca05a64093c5cb32b9f0b091f676b5df1e558db91f774d7a439036e0cff42cc134e85be26cac2f46c24a71a8cfc42d61971d31d94cc8ff6bfcb29896da5ade6ccbe1b3ee6b477e9a28ba1fbfa38dd669272131720ce3aadd34034195538f759ca08b4cb919bb28e9827b32f589b983320afe51fb92c202dbd1d8f10b95727827b495a7e775d13f68c4be37f78bfeed41bc94", 0xf9}, {&(0x7f00000008c0)="2f60fe87f69c06b6f818944467e1174b3c919e4eff84824add699117a0d40d6fb8a82e098327d659505dc3fa37762cdb3388829aeb2e3c60320ca580124445f6f317edcc87eaa314877738247de15cc3b3e29804b2ba8aad09b4e0ab3d2644e32fe66a3e77f42b487bb9636126a80da1ec33d14795304de08ccc52fd083fee3252bee761952bde0cbb59d66ded8f61eebd9c60450b20e18881300b182607b0a766890ca63af70b0e00f86103493e512f3f46693940d821eb82081e74e97d04b07e52d82e0949db696cb4276e653ac304babddbc3d115add3300a823f68f974", 0xdf}, {&(0x7f00000009c0)}], 0x7, &(0x7f0000000b00)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r0, r1, r0, r0, r5]}}], 0xb0, 0x20000000}}], 0x2, 0x200000c0) ppoll(&(0x7f0000000000)=[{r1, 0x8463}], 0x1, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000280)=0xffffff87) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000645350d0027bd7000fbdbdf250a3f20ab0202c8050070000008001900", @ANYRES32=r4, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) close(r5) (async) sendmmsg$unix(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)="12df6db89cf3e70ef8a726ee69e1690750ceeae26cfe868c2b5011db47906eb520a0294063529c8cd9de6ca0cfc386d59705b45e2c2124a693651f75dca635c29771cfd2c1e34e3e19d40c1a022223ef5336992348247424a508d8f36c49db9e8277c3ef4a94893c5e9092b781ad7943cc12c7a05d6abbf3fbb0cdc42a", 0x7d}, {&(0x7f00000001c0)="ce9b441e1ca98679804c6e9b95f70fbab9ef7b9bf2c7769ca9135f9babdd107534a23b566109a56eb29a293859b77c99e8166ed7a648663b12dd06442db7fccf42ecdcceabbbcdf3596de72a53742a46b3122a387d69ab754f8b23d9fed5aa534dccac4ee1fdaac012f5b8bb88c739ba14482c8af860ca5a84225cc48a1b17b3ac7d5c5ce3a3f66438cbd2fa9c3e35", 0x8f}, {&(0x7f0000000280)="40f4569508e574c7a06c923fc3a83fe6b7008fd350c13a483aa6f5cef5789e784f6812505424866b0c3e3355af982c0863b1a7ade406704d023b70c5373ad2ad1f87852282f860156660bc33cbaee283ac1f2a7f527dc33674a766765415b1b63179a494e7e04aa2804484e4a526132de883c8f22175aacfc785130e2ea511c95d281578d6354ab9973e58ff5d2f5b63f4b2f07137449cabfa59a5ee8ad70f3c83704054c7955543368cd672ebac98f954b209aa2746a645f5a3998de2cb76edf9", 0xc1}, {&(0x7f0000000380)="faba7720367250958ace0d53f2f2", 0xe}, {&(0x7f0000000c40)="ec249bc50fc515f409889eece0e65c5e22c85b02a0fd58723c8c5eb6adef6f6a3f627bd846c87679e3fb044a889027180b7fb5fc9c181736d65d7009eed58d0b85a2d4d4b66e244c5b1e5d276cc34dfe174b80c6001217360ffc11a0a74321be998769d86ed80653aafed50c459197dc", 0x70}], 0x5, 0x0, 0x0, 0x40004}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000540)="cdd412bc38d42c74b5dbf695cb4021c1beb7424f070ab93c2bc88c15a5ed98b5dbc945a42b49d0c516e09c1f0b63b6ef0957d399617ceeb166f4863cd76595dd4d759f66a2808c0d4ed32cce05c9902625e7fbb7394fb5b7bf5f9ab11cc59e22f774091fad961cb166ba0b16f704887b06e5bbcb6a5f5044be89eee5bada", 0x7e}, {&(0x7f00000005c0)="843771ecd68a28acc4f44dea8bcb11bcf2935c5879f15b52fb355df555aa7c1d68bf06fdc446bbcfd8d2f6435e1a727867e05011425deae988a9875781035b10c6aed28b19779928cbab09696e0d110c043b4ec84bd24a57289b99080d7c42bbe42d628af0b9ff285b32efe888fc149086a8cc7493a95a0a5a34bb528352a54240f3960e05ce7a0134ccf6ec6e7245c6087b078a2d4dcbed044309e51f65a82dcbf576a5b7a3e6458f7a33c389f40902dd04b5696284a373356821418e5c170470b790cd2c2bd0341214b1bc2ae25814c21c05ddf7963ec37f4cd162eca9dbc8a62b809cde76c9e5a7e362a43e3a48f2bef91c2edb3b2e7ac4e2218ece39d3", 0xff}, {&(0x7f00000006c0)="13cac78faba7b23bdf56f11f54c5f9dddd5f77ad9965303434a1b2212055f37e69ce4325", 0x24}, {&(0x7f0000000700)="ad3f081d9c51c1130b5993e08fbca9c92651053e189192aed930e69c116b3ddc7a0da3c86d28f7d5d674e78023003814ac9266c890d66c0fa439a63a875ea80ed68b08724ddebe942af5d903d3b50373e3c21600937cca8d23c1e3ab6a07cb14480a495e08f57916f662ba5b61edd729a19043ea85bdc68d098d1fc03d49dc8eac872ba4b9ed110539ce7df862a2bb51d40ccb9f4ea8b7321362f2abac9ee4d8f2e38e7209fc9d", 0xa7}, {&(0x7f00000007c0)="b50848a89d9b2b3262c7a8b02d267e55da0a6b4b19b914171184ae68920bf5338a561ba29171bd88503cf3161237622466ffa1510e16e3ee8545be432a0837858fb978f6a02eef1344eccf6dca6460805eec84fc6c92fe39fe32d8460850aab7b984fbe4e9ef59ca05a64093c5cb32b9f0b091f676b5df1e558db91f774d7a439036e0cff42cc134e85be26cac2f46c24a71a8cfc42d61971d31d94cc8ff6bfcb29896da5ade6ccbe1b3ee6b477e9a28ba1fbfa38dd669272131720ce3aadd34034195538f759ca08b4cb919bb28e9827b32f589b983320afe51fb92c202dbd1d8f10b95727827b495a7e775d13f68c4be37f78bfeed41bc94", 0xf9}, {&(0x7f00000008c0)="2f60fe87f69c06b6f818944467e1174b3c919e4eff84824add699117a0d40d6fb8a82e098327d659505dc3fa37762cdb3388829aeb2e3c60320ca580124445f6f317edcc87eaa314877738247de15cc3b3e29804b2ba8aad09b4e0ab3d2644e32fe66a3e77f42b487bb9636126a80da1ec33d14795304de08ccc52fd083fee3252bee761952bde0cbb59d66ded8f61eebd9c60450b20e18881300b182607b0a766890ca63af70b0e00f86103493e512f3f46693940d821eb82081e74e97d04b07e52d82e0949db696cb4276e653ac304babddbc3d115add3300a823f68f974", 0xdf}, {&(0x7f00000009c0)}], 0x7, &(0x7f0000000b00)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r0, r1, r0, r0, r5]}}], 0xb0, 0x20000000}}], 0x2, 0x200000c0) (async) ppoll(&(0x7f0000000000)=[{r1, 0x8463}], 0x1, 0x0, 0x0, 0x0) (async) close(r0) (async) kernel console output (not intermixed with test programs): 2 family 0 port 20000 - 0 [ 1155.071595][ T4621] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1155.392388][ T7913] gre2: entered allmulticast mode [ 1155.580514][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1155.619952][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1155.632845][ T7925] FAULT_INJECTION: forcing a failure. [ 1155.632845][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.632881][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.4.8107 Not tainted syzkaller #0 PREEMPT(full) [ 1155.632906][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1155.632921][ T7925] Call Trace: [ 1155.632931][ T7925] [ 1155.632941][ T7925] dump_stack_lvl+0xe8/0x150 [ 1155.632982][ T7925] should_fail_ex+0x410/0x560 [ 1155.633016][ T7925] should_failslab+0xa8/0x100 [ 1155.633050][ T7925] __kvmalloc_node_noprof+0x176/0x820 [ 1155.633085][ T7925] ? nf_hook_entries_grow+0x287/0x740 [ 1155.633111][ T7925] ? nf_hook_entries_grow+0x287/0x740 [ 1155.633138][ T7925] ? __pfx___mutex_lock+0x10/0x10 [ 1155.633177][ T7925] nf_hook_entries_grow+0x287/0x740 [ 1155.633221][ T7925] __nf_register_net_hook+0x2c9/0x930 [ 1155.633263][ T7925] nf_register_net_hook+0xb2/0x190 [ 1155.633293][ T7925] nf_register_net_hooks+0x44/0x1b0 [ 1155.633325][ T7925] nf_ct_netns_do_get+0x212/0x5c0 [ 1155.633469][ T7925] ? nft_payload_init+0x21e/0x380 [ 1155.633517][ T7925] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1155.633550][ T7925] ? nft_parse_register_load+0x30e/0x3a0 [ 1155.633614][ T7925] ? nf_ct_netns_get+0xe9/0x320 [ 1155.633647][ T7925] nf_tables_newrule+0x179e/0x28a0 [ 1155.633699][ T7925] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1155.633731][ T7925] ? lock_acquire+0x115/0x350 [ 1155.633757][ T7925] ? nfnl_pernet+0x23/0x240 [ 1155.633802][ T7925] ? __nla_parse+0x40/0x60 [ 1155.633839][ T7925] nfnetlink_rcv+0x1288/0x28c0 [ 1155.633929][ T7925] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1155.634015][ T7925] ? skb_clone+0x246/0x3a0 [ 1155.634084][ T7925] ? netlink_deliver_tap+0x2e/0x1b0 [ 1155.634107][ T7925] ? netlink_deliver_tap+0x2e/0x1b0 [ 1155.634150][ T7925] netlink_unicast+0x7bd/0x940 [ 1155.634196][ T7925] netlink_sendmsg+0x813/0xb40 [ 1155.634231][ T7925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.634265][ T7925] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1155.634295][ T7925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.634317][ T7925] sock_sendmsg_nosec+0x13a/0x180 [ 1155.634346][ T7925] ____sys_sendmsg+0x54e/0x850 [ 1155.634384][ T7925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1155.634427][ T7925] ? import_iovec+0x73/0xa0 [ 1155.634461][ T7925] ___sys_sendmsg+0x2a5/0x360 [ 1155.634492][ T7925] ? __lock_acquire+0x747/0x2de0 [ 1155.634521][ T7925] ? __pfx____sys_sendmsg+0x10/0x10 [ 1155.634624][ T7925] ? __fget_files+0x2a/0x420 [ 1155.634655][ T7925] ? __fget_files+0x3a2/0x420 [ 1155.634701][ T7925] __x64_sys_sendmsg+0x1b1/0x290 [ 1155.634738][ T7925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1155.634799][ T7925] do_syscall_64+0x166/0x520 [ 1155.634830][ T7925] ? trace_irq_disable+0x3b/0x140 [ 1155.634866][ T7925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.634889][ T7925] ? clear_bhb_loop+0x70/0xc0 [ 1155.634918][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.634958][ T7925] RIP: 0033:0x7f7de0f9e159 [ 1155.634980][ T7925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.635000][ T7925] RSP: 002b:00007f7de1d7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1155.635025][ T7925] RAX: ffffffffffffffda RBX: 00007f7de1225fa0 RCX: 00007f7de0f9e159 [ 1155.635043][ T7925] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1155.635059][ T7925] RBP: 00007f7de1d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.635074][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.635088][ T7925] R13: 00007f7de1226038 R14: 00007f7de1225fa0 R15: 00007ffee68eb278 [ 1155.635128][ T7925] [ 1155.638899][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8106'. [ 1156.150079][ T7937] batman_adv: batadv0: Adding interface: macvtap1 [ 1156.150100][ T7937] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.150133][ T7937] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1156.304262][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8113'. [ 1156.326410][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8113'. [ 1156.698870][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8120'. [ 1156.783968][ T7972] FAULT_INJECTION: forcing a failure. [ 1156.783968][ T7972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.784004][ T7972] CPU: 0 UID: 0 PID: 7972 Comm: syz.1.8119 Not tainted syzkaller #0 PREEMPT(full) [ 1156.784028][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1156.784043][ T7972] Call Trace: [ 1156.784052][ T7972] [ 1156.784062][ T7972] dump_stack_lvl+0xe8/0x150 [ 1156.784100][ T7972] should_fail_ex+0x410/0x560 [ 1156.784133][ T7972] _copy_to_user+0x31/0xb0 [ 1156.784166][ T7972] simple_read_from_buffer+0xe1/0x170 [ 1156.784206][ T7972] proc_fail_nth_read+0x1bb/0x230 [ 1156.784227][ T7972] ? common_file_perm+0x20e/0x2b0 [ 1156.784259][ T7972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1156.784285][ T7972] ? rw_verify_area+0x24a/0x4c0 [ 1156.784331][ T7972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1156.784352][ T7972] vfs_read+0x213/0xa80 [ 1156.784388][ T7972] ? __pfx___mutex_lock+0x10/0x10 [ 1156.784416][ T7972] ? __pfx_vfs_read+0x10/0x10 [ 1156.784449][ T7972] ? __fget_files+0x2a/0x420 [ 1156.784483][ T7972] ? __fget_files+0x3a2/0x420 [ 1156.784510][ T7972] ? __fget_files+0x2a/0x420 [ 1156.784556][ T7972] ksys_read+0x150/0x270 [ 1156.784590][ T7972] ? __pfx_ksys_read+0x10/0x10 [ 1156.784634][ T7972] do_syscall_64+0x166/0x520 [ 1156.784661][ T7972] ? trace_irq_disable+0x3b/0x140 [ 1156.784683][ T7972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.784705][ T7972] ? clear_bhb_loop+0x70/0xc0 [ 1156.784731][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.784770][ T7972] RIP: 0033:0x7fb51215e98e [ 1156.784790][ T7972] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1156.784812][ T7972] RSP: 002b:00007fb5103f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1156.784837][ T7972] RAX: ffffffffffffffda RBX: 00007fb5103f66c0 RCX: 00007fb51215e98e [ 1156.784854][ T7972] RDX: 000000000000000f RSI: 00007fb5103f60a0 RDI: 0000000000000006 [ 1156.784869][ T7972] RBP: 00007fb5103f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.784882][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.784895][ T7972] R13: 00007fb512426038 R14: 00007fb512425fa0 R15: 00007ffc125fc338 [ 1156.784932][ T7972] [ 1157.362149][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8126'. [ 1157.643710][ T8007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1157.934106][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8130'. [ 1157.934140][ T8010] netlink: 'syz.0.8130': attribute type 7 has an invalid length. [ 1157.939167][ T8010] netlink: 'syz.0.8130': attribute type 7 has an invalid length. [ 1158.041334][ T8016] tipc: Enabled bearer , priority 10 [ 1158.140680][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1158.316481][ T8025] netlink: 'syz.1.8134': attribute type 8 has an invalid length. [ 1158.319190][ T8029] bond5: option resend_igmp: invalid value (61127) [ 1158.319210][ T8029] bond5: option resend_igmp: allowed values 0 - 255 [ 1158.348780][ T8029] bond5 (unregistering): Released all slaves [ 1159.171048][ T7610] tipc: Node number set to 7405569 [ 1159.279082][ T8062] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1159.308192][ T8063] __nla_validate_parse: 7 callbacks suppressed [ 1159.308212][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8144'. [ 1159.902709][ T8088] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1159.902745][ T8088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1160.028601][ T8095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8154'. [ 1160.112152][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8154'. [ 1160.135236][ T8098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8154'. [ 1160.438779][ T8099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8152'. [ 1160.714873][ T8126] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1160.716556][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8161'. [ 1160.716577][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8161'. [ 1160.716603][ T8126] netlink: 'syz.1.8161': attribute type 13 has an invalid length. [ 1160.876977][ T8112] syzkaller1: entered promiscuous mode [ 1160.878713][ T8112] syzkaller1: entered allmulticast mode [ 1161.147655][ T8146] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8162'. [ 1161.487554][ T8162] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1161.489875][ T8162] netlink: 'syz.4.8164': attribute type 1 has an invalid length. [ 1161.566653][ T8157] IPVS: Scheduler module ip_vs_sip not found [ 1161.605077][ T8162] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1161.684586][ T8175] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1161.687408][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8168'. [ 1161.996671][ T8181] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8169'. [ 1162.709923][ T8202] netlink: 'syz.1.8174': attribute type 12 has an invalid length. [ 1162.710738][ T8202] netlink: 'syz.1.8174': attribute type 12 has an invalid length. [ 1162.711069][ T8202] netlink: 'syz.1.8174': attribute type 12 has an invalid length. [ 1162.711334][ T8202] netlink: 'syz.1.8174': attribute type 12 has an invalid length. [ 1162.713748][ T8202] netlink: 'syz.1.8174': attribute type 12 has an invalid length. [ 1162.714365][ T8202] netlink: 'syz.1.8174': attribute type 12 has an invalid length. [ 1162.718436][ T8202] netlink: 'syz.1.8174': attribute type 12 has an invalid length. [ 1162.719207][ T8202] netlink: 'syz.1.8174': attribute type 12 has an invalid length. [ 1163.664638][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aac4400: rx timeout, send abort [ 1163.664867][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807aac4400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1164.798669][ T8295] __nla_validate_parse: 5 callbacks suppressed [ 1164.798690][ T8295] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8195'. [ 1165.323301][ T8311] FAULT_INJECTION: forcing a failure. [ 1165.323301][ T8311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.323334][ T8311] CPU: 1 UID: 0 PID: 8311 Comm: syz.3.8200 Not tainted syzkaller #0 PREEMPT(full) [ 1165.323357][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1165.323369][ T8311] Call Trace: [ 1165.323378][ T8311] [ 1165.323387][ T8311] dump_stack_lvl+0xe8/0x150 [ 1165.323432][ T8311] should_fail_ex+0x410/0x560 [ 1165.323463][ T8311] _copy_from_iter+0x1d3/0x1660 [ 1165.323496][ T8311] ? _copy_from_iter+0x21b/0x1660 [ 1165.323522][ T8311] ? __pfx__copy_from_iter+0x10/0x10 [ 1165.323553][ T8311] ? __pfx__copy_from_iter+0x10/0x10 [ 1165.323586][ T8311] copy_page_from_iter+0x219/0x2d0 [ 1165.323616][ T8311] skb_copy_datagram_from_iter+0x2f4/0x720 [ 1165.323662][ T8311] packet_sendmsg+0x37d5/0x5150 [ 1165.323769][ T8311] ? up_write+0x19d/0x4a0 [ 1165.323810][ T8311] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1165.323838][ T8311] ? __lock_acquire+0x747/0x2de0 [ 1165.323876][ T8311] ? lock_acquire+0x115/0x350 [ 1165.323900][ T8311] ? __lock_acquire+0x747/0x2de0 [ 1165.323932][ T8311] ? __pfx_packet_sendmsg+0x10/0x10 [ 1165.323954][ T8311] ? aa_sk_perm+0x713/0x900 [ 1165.323985][ T8311] ? __pfx_graph_lock+0xe/0x10 [ 1165.324016][ T8311] ? __pfx_aa_sk_perm+0x10/0x10 [ 1165.324044][ T8311] ? aa_sock_msg_perm+0x144/0x210 [ 1165.324077][ T8311] ? apparmor_socket_sendmsg+0x98/0x360 [ 1165.324104][ T8311] ? __pfx_packet_sendmsg+0x10/0x10 [ 1165.324126][ T8311] sock_sendmsg_nosec+0x13a/0x180 [ 1165.324155][ T8311] ____sys_sendmsg+0x54e/0x850 [ 1165.324190][ T8311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1165.324229][ T8311] ? import_iovec+0x73/0xa0 [ 1165.324260][ T8311] ___sys_sendmsg+0x2a5/0x360 [ 1165.324288][ T8311] ? __lock_acquire+0x747/0x2de0 [ 1165.324315][ T8311] ? __pfx____sys_sendmsg+0x10/0x10 [ 1165.324382][ T8311] ? __fget_files+0x2a/0x420 [ 1165.324425][ T8311] ? __fget_files+0x3a2/0x420 [ 1165.324465][ T8311] __x64_sys_sendmsg+0x1b1/0x290 [ 1165.324498][ T8311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1165.324551][ T8311] do_syscall_64+0x166/0x520 [ 1165.324578][ T8311] ? trace_irq_disable+0x3b/0x140 [ 1165.324599][ T8311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.324620][ T8311] ? clear_bhb_loop+0x70/0xc0 [ 1165.324647][ T8311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.324668][ T8311] RIP: 0033:0x7f5cba59e159 [ 1165.324687][ T8311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.324705][ T8311] RSP: 002b:00007f5cbb39c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.324727][ T8311] RAX: ffffffffffffffda RBX: 00007f5cba825fa0 RCX: 00007f5cba59e159 [ 1165.324743][ T8311] RDX: 0000000000044040 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 1165.324756][ T8311] RBP: 00007f5cbb39c090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.324770][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.324782][ T8311] R13: 00007f5cba826038 R14: 00007f5cba825fa0 R15: 00007fff46867c68 [ 1165.324817][ T8311] [ 1166.091749][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8206'. [ 1166.460604][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1168.613548][ T8346] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1168.719325][ T8353] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1168.948648][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8213'. [ 1169.427879][T31630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.524804][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8218'. [ 1169.530128][ T8383] veth1_to_team: entered promiscuous mode [ 1169.539787][ T8383] gretap0: entered promiscuous mode [ 1169.544703][ T8383] hsr1: entered promiscuous mode [ 1169.660713][ T7610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.880205][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8219'. [ 1170.462570][T31630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.501532][T31628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.539480][ T8346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1171.589144][ T7609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.712353][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8220'. [ 1171.796783][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8224'. [ 1172.361800][ T8395] bridge_slave_1: left allmulticast mode [ 1172.415923][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.436958][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.543473][ T6295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.683861][ T8395] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1172.738766][ T8395] bridge0: left allmulticast mode [ 1172.774463][ T8395] gtp0: left promiscuous mode [ 1172.774581][ T8395] gtp0: left allmulticast mode [ 1172.782107][T31063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.852742][ T8395] hsr1: left promiscuous mode [ 1172.901092][ T4621] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.901128][ T4621] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.901533][ T4621] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.901561][ T4621] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.901629][ T4621] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.901655][ T4621] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.901688][ T4621] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.901714][ T4621] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.235293][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8228'. [ 1173.339757][ T8443] tipc: Enabled bearer , priority 0 [ 1173.354672][ T8443] syzkaller0: entered promiscuous mode [ 1173.354697][ T8443] syzkaller0: entered allmulticast mode [ 1173.403352][ T8443] tipc: Resetting bearer [ 1173.444431][ T4611] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.444478][ T4611] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.444515][ T4611] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.444553][ T4611] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.548893][ T8445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8230'. [ 1173.580785][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.672056][ T8452] gretap0: entered allmulticast mode [ 1174.079548][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8237'. [ 1174.205959][ T8467] validate_nla: 20 callbacks suppressed [ 1174.205981][ T8467] netlink: 'syz.1.8238': attribute type 10 has an invalid length. [ 1174.207419][ T8467] netlink: 'syz.1.8238': attribute type 21 has an invalid length. [ 1174.207453][ T8467] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8238'. [ 1174.207522][ T8467] netlink: 'syz.1.8238': attribute type 5 has an invalid length. [ 1174.207537][ T8467] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8238'. [ 1174.273780][ T8467] gre1: entered promiscuous mode [ 1174.311987][ T8469] FAULT_INJECTION: forcing a failure. [ 1174.311987][ T8469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.312022][ T8469] CPU: 1 UID: 0 PID: 8469 Comm: syz.3.8239 Not tainted syzkaller #0 PREEMPT(full) [ 1174.312048][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1174.312062][ T8469] Call Trace: [ 1174.312073][ T8469] [ 1174.312082][ T8469] dump_stack_lvl+0xe8/0x150 [ 1174.312123][ T8469] should_fail_ex+0x410/0x560 [ 1174.312158][ T8469] _copy_to_user+0x31/0xb0 [ 1174.312191][ T8469] simple_read_from_buffer+0xe1/0x170 [ 1174.312241][ T8469] proc_fail_nth_read+0x1bb/0x230 [ 1174.312263][ T8469] ? common_file_perm+0x20e/0x2b0 [ 1174.312296][ T8469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1174.312324][ T8469] ? rw_verify_area+0x24a/0x4c0 [ 1174.312361][ T8469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1174.312384][ T8469] vfs_read+0x213/0xa80 [ 1174.312426][ T8469] ? __pfx___mutex_lock+0x10/0x10 [ 1174.312460][ T8469] ? __pfx_vfs_read+0x10/0x10 [ 1174.312497][ T8469] ? __fget_files+0x2a/0x420 [ 1174.312535][ T8469] ? __fget_files+0x3a2/0x420 [ 1174.312565][ T8469] ? __fget_files+0x2a/0x420 [ 1174.312609][ T8469] ksys_read+0x150/0x270 [ 1174.312647][ T8469] ? __pfx_ksys_read+0x10/0x10 [ 1174.312699][ T8469] do_syscall_64+0x166/0x520 [ 1174.312730][ T8469] ? trace_irq_disable+0x3b/0x140 [ 1174.312755][ T8469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.312780][ T8469] ? clear_bhb_loop+0x70/0xc0 [ 1174.312810][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.312833][ T8469] RIP: 0033:0x7f5cba55e98e [ 1174.312855][ T8469] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1174.312873][ T8469] RSP: 002b:00007f5cbb39bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1174.312898][ T8469] RAX: ffffffffffffffda RBX: 00007f5cbb39c6c0 RCX: 00007f5cba55e98e [ 1174.312916][ T8469] RDX: 000000000000000f RSI: 00007f5cbb39c0a0 RDI: 0000000000000004 [ 1174.312931][ T8469] RBP: 00007f5cbb39c090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.312946][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.312959][ T8469] R13: 00007f5cba826038 R14: 00007f5cba825fa0 R15: 00007fff46867c68 [ 1174.312998][ T8469] [ 1174.612359][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8240'. [ 1174.630891][ T6316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.680174][T23172] block nbd8: Receive control failed (result -1) [ 1174.700254][ T8471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8240'. [ 1174.988278][ T8471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8240'. [ 1175.114638][ T8494] mac80211_hwsim hwsim95 ..ãc¤±: renamed from wlan1 [ 1175.147562][ T8471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8240'. [ 1175.341334][ T8471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8240'. [ 1175.561217][ T8497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1175.564992][ T8497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1175.569195][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1175.607802][ T8497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1175.626905][ T8517] netlink: 'syz.3.8249': attribute type 1 has an invalid length. [ 1175.655818][ T8497] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1175.785836][ T8522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8248'. [ 1175.887124][ T8517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1175.919561][ T8517] bond6: (slave ip6gretap0): making interface the new active one [ 1175.928272][ T8517] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1176.017686][ T8528] macvlan0: entered promiscuous mode [ 1176.282913][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8254'. [ 1177.243293][ T8581] ip6tnl4: entered allmulticast mode [ 1177.326719][ T4618] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1177.326951][ T4618] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1177.357380][ T5751] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1177.357565][ T5751] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1177.491621][T31059] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1177.986107][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8264'. [ 1178.080956][ T8615] tipc: Enabling of bearer rejected, already enabled [ 1178.115733][ T8618] Bluetooth: ISO socket layer initialized [ 1178.549407][ T8635] syzkaller1: entered promiscuous mode [ 1178.549431][ T8635] syzkaller1: entered allmulticast mode [ 1178.650486][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8272'. [ 1179.484885][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8280'. [ 1179.648122][ T8677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8280'. [ 1179.649159][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8280'. [ 1180.390875][ T8699] netlink: 'syz.4.8285': attribute type 10 has an invalid length. [ 1180.390896][ T8699] __nla_validate_parse: 1 callbacks suppressed [ 1180.390907][ T8699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8285'. [ 1180.559704][ T8699] dummy0: entered promiscuous mode [ 1180.896293][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059276400: rx timeout, send abort [ 1180.896591][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059276400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1180.994707][ T8720] bond1: option mode: unable to set because the bond device is up [ 1181.034014][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8292'. [ 1181.034039][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8292'. [ 1181.118063][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.167435][ T8720] bond1: (slave bond0): making interface the new active one [ 1181.169383][ T8720] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1181.190218][ T8734] netlink: 'syz.3.8295': attribute type 10 has an invalid length. [ 1181.209369][ T8724] bond1 (unregistering): (slave bond0): Releasing active interface [ 1181.219196][ T8720] netlink: 'syz.2.8292': attribute type 2 has an invalid length. [ 1181.219221][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8292'. [ 1181.263987][ T8724] bond1 (unregistering): Released all slaves [ 1181.309837][ T8731] netlink: 'syz.4.8294': attribute type 1 has an invalid length. [ 1181.406504][ T8731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1181.431186][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1181.598952][T31630] syz1: Port: 1 Link DOWN [ 1181.624406][ T8720] : entered promiscuous mode [ 1181.627502][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8294'. [ 1181.707851][ T8733] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1181.831235][T23172] block nbd9: Receive control failed (result -32) [ 1182.042931][ T8761] sit0: entered promiscuous mode [ 1182.062088][ T8761] netlink: 21 bytes leftover after parsing attributes in process `syz.3.8302'. [ 1182.089069][ T8765] netlink: 'syz.1.8303': attribute type 5 has an invalid length. [ 1182.246648][ T8770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8305'. [ 1182.378292][ T8772] sctp: [Deprecated]: syz.1.8306 (pid 8772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1182.378292][ T8772] Use struct sctp_sack_info instead [ 1182.461191][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1182.785809][ T8787] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1182.787282][ T8787] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 1182.953713][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8311'. [ 1183.138962][ T8802] syzkaller0: entered promiscuous mode [ 1183.139000][ T8802] syzkaller0: entered allmulticast mode [ 1183.180206][ T8801] netlink: 2724 bytes leftover after parsing attributes in process `syz.1.8313'. [ 1183.189637][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8313'. [ 1183.209566][ T8801] TC_ACT_REPEAT abuse ? [ 1183.386869][ T8810] syzkaller0: entered promiscuous mode [ 1183.386894][ T8810] syzkaller0: entered allmulticast mode [ 1183.824739][ T8821] team0: Port device team_slave_0 removed [ 1183.853635][ T8823] syzkaller1: entered promiscuous mode [ 1183.853660][ T8823] syzkaller1: entered allmulticast mode [ 1184.182150][ T8834] bridge_slave_0: left allmulticast mode [ 1184.182175][ T8834] bridge_slave_0: left promiscuous mode [ 1184.182373][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.214569][ T8834] bridge_slave_1: left allmulticast mode [ 1184.214596][ T8834] bridge_slave_1: left promiscuous mode [ 1184.214809][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.262682][ T8834] bond1: (slave veth0_to_bond): Releasing backup interface [ 1184.262710][ T8834] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1184.296883][ T8834] bond0: (slave bond_slave_0): Releasing backup interface [ 1184.318451][ T8834] bond0: (slave bond_slave_1): Releasing backup interface [ 1184.348950][ T8834] team0: Port device team_slave_0 removed [ 1184.367904][ T8834] team0: Port device team_slave_1 removed [ 1184.388677][ T8834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1184.582814][ T8839] team0: Mode changed to "loadbalance" [ 1184.757001][ T8852] veth7: entered allmulticast mode [ 1184.911718][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880450dd400: rx timeout, send abort [ 1184.911972][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880450dd400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1185.107289][ T8859] netlink: 'syz.1.8332': attribute type 32 has an invalid length. [ 1185.623891][ T8880] ip_tables: iptables: counters copy to user failed while replacing table [ 1185.721474][ T8886] netlink: 'syz.0.8337': attribute type 10 has an invalid length. [ 1186.249632][ T8905] __nla_validate_parse: 8 callbacks suppressed [ 1186.249653][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8342'. [ 1186.502265][ T7221] udevd[7221]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1186.502567][ T8911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8343'. [ 1187.298431][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8347'. [ 1187.726100][ T31] audit: type=1800 audit(1790328148.807:33): pid=8942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8348" name="memory.events" dev="tmpfs" ino=2270 res=0 errno=0 [ 1188.725565][ T8965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8355'. [ 1188.892562][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8356'. [ 1188.892589][ T8969] openvswitch: netlink: Invalid VLAN frame [ 1189.185017][ T8977] netlink: 'syz.4.8359': attribute type 10 has an invalid length. [ 1189.397721][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8362'. [ 1189.500572][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1189.897890][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802645c800: rx timeout, send abort [ 1189.898247][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802645c800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1190.317790][ T8996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1190.379082][ T8974] tipc: Resetting bearer [ 1190.397503][ T8974] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1190.755158][ T9031] netlink: 'syz.1.8365': attribute type 1 has an invalid length. [ 1191.019777][ T9031] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1191.069089][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8365'. [ 1191.149021][ T9034] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1191.227528][ T9036] team_slave_0: left allmulticast mode [ 1191.254503][ T9049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8369'. [ 1191.285250][ T9036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1191.364340][ T9040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.380508][ T9040] bond4: (slave batadv0): making interface the new active one [ 1191.387520][ T9040] batadv0: entered promiscuous mode [ 1191.388010][ T9040] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 1192.016917][ T9078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8373'. [ 1192.522605][ T9057] netlink: 'syz.3.8371': attribute type 10 has an invalid length. [ 1192.624612][ T9098] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8377'. [ 1192.978040][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8381'. [ 1193.065909][ T9113] netlink: 'syz.2.8383': attribute type 4 has an invalid length. [ 1193.615290][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8387'. [ 1193.973241][ T9149] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1194.233342][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8396'. [ 1194.646888][ T9178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8401'. [ 1194.703860][ T9180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8399'. [ 1194.834803][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8402'. [ 1195.185300][ T9197] netlink: zone id is out of range [ 1195.185317][ T9197] netlink: zone id is out of range [ 1195.185327][ T9197] netlink: zone id is out of range [ 1195.185337][ T9197] netlink: zone id is out of range [ 1195.185346][ T9197] netlink: zone id is out of range [ 1195.185355][ T9197] netlink: zone id is out of range [ 1195.185364][ T9197] netlink: zone id is out of range [ 1195.185374][ T9197] netlink: zone id is out of range [ 1195.186420][ T9197] netlink: zone id is out of range [ 1195.186432][ T9197] netlink: zone id is out of range [ 1195.205265][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8403'. [ 1195.507859][ T9203] netlink: 'syz.3.8406': attribute type 9 has an invalid length. [ 1195.507877][ T9203] netlink: 'syz.3.8406': attribute type 1 has an invalid length. [ 1195.947869][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053331400: rx timeout, send abort [ 1195.948140][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053331400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1197.088363][ T9279] netlink: 'syz.0.8421': attribute type 2 has an invalid length. [ 1197.345480][ T9293] __nla_validate_parse: 5 callbacks suppressed [ 1197.345499][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8425'. [ 1197.384036][ T9286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1198.448458][ T9323] rdma_rxe: rxe_newlink: failed to add wlan0 [ 1198.546622][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804551f000: rx timeout, send abort [ 1198.546981][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804551f000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1198.812484][ T9342] netlink: 'syz.1.8435': attribute type 5 has an invalid length. [ 1198.912108][ T9346] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8437'. [ 1199.112212][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8439'. [ 1199.551756][ T9367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8444'. [ 1199.746401][ T9374] netlink: 'syz.3.8446': attribute type 1 has an invalid length. [ 1199.824545][ T9379] netlink: 'syz.4.8448': attribute type 5 has an invalid length. [ 1200.024817][ T9388] netlink: 'syz.0.8453': attribute type 14 has an invalid length. [ 1200.109008][ T9396] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8455'. [ 1200.394618][ T9397] syzkaller0: entered promiscuous mode [ 1200.394645][ T9397] syzkaller0: entered allmulticast mode [ 1200.496055][ T9402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8457'. [ 1200.787866][ T9414] netlink: 'syz.4.8461': attribute type 5 has an invalid length. [ 1204.186852][ T9409] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1204.307071][T21971] batadv0: left promiscuous mode [ 1204.410216][ T9429] netlink: 'syz.0.8464': attribute type 1 has an invalid length. [ 1204.444093][ T9435] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8466'. [ 1204.462641][ T9432] netlink: 'syz.4.8467': attribute type 1 has an invalid length. [ 1204.466935][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8465'. [ 1204.522743][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8464'. [ 1204.522780][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8464'. [ 1204.550915][ T9429] bond6: entered promiscuous mode [ 1204.553311][ T9429] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1204.577592][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8467'. [ 1204.604056][ T9445] net_ratelimit: 7 callbacks suppressed [ 1204.604075][ T9445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.715966][ T9432] bond7: entered promiscuous mode [ 1204.716358][ T9432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1204.776894][ T9449] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8470'. [ 1204.963873][ T9442] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1204.964331][ T9442] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1204.964355][ T9442] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1205.051414][ T9442] bond7: (slave wireguard0): making interface the new active one [ 1205.051442][ T9442] wireguard0: entered promiscuous mode [ 1205.099209][ T9442] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 1205.206703][ T9429] bond6: (slave bridge6): making interface the new active one [ 1205.206730][ T9429] bridge6: entered promiscuous mode [ 1205.208556][ T9429] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1205.497961][ T9456] syzkaller0: entered promiscuous mode [ 1205.497987][ T9456] syzkaller0: entered allmulticast mode [ 1205.500690][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1206.423289][ T9508] openvswitch: netlink: EtherType 300 is less than min 600 [ 1208.906311][ T9494] syzkaller0: entered promiscuous mode [ 1208.906335][ T9494] syzkaller0: entered allmulticast mode [ 1209.067741][ T9510] netlink: 'syz.4.8477': attribute type 5 has an invalid length. [ 1209.215945][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8478'. [ 1209.351894][ T9521] sock: sock_timestamping_bind_phc: sock not bind to device [ 1209.470054][ T9531] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8483'. [ 1209.883213][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8484'. [ 1210.331105][ T9545] netlink: 'syz.3.8489': attribute type 1 has an invalid length. [ 1210.443785][ T9552] netlink: 'syz.0.8492': attribute type 5 has an invalid length. [ 1210.514933][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8493'. [ 1210.806018][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8494'. [ 1211.000021][ T9570] dvmrp1: entered allmulticast mode [ 1211.002035][ T9571] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1211.013836][ T9571] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1211.014824][ T9570] dvmrp0: left allmulticast mode [ 1211.014964][ T9570] dvmrp1: left allmulticast mode [ 1211.404526][ T9591] netlink: 'syz.1.8500': attribute type 10 has an invalid length. [ 1211.406618][ T9591] netlink: 'syz.1.8500': attribute type 10 has an invalid length. [ 1211.692902][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8501'. [ 1211.921227][ T9600] tipc: Enabled bearer , priority 20 [ 1212.105099][ T9608] tipc: Enabling of bearer rejected, already enabled [ 1212.332636][ T9621] xt_hashlimit: max too large, truncated to 1048576 [ 1212.352968][ T9620] syzkaller0: entered promiscuous mode [ 1212.352987][ T9620] syzkaller0: entered allmulticast mode [ 1212.594281][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8510'. [ 1212.612281][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1212.998193][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8512'. [ 1213.035582][ T9644] netlink: 'syz.4.8511': attribute type 3 has an invalid length. [ 1213.091564][ T9652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1213.149443][ T9655] netlink: 'syz.0.8514': attribute type 32 has an invalid length. [ 1213.180978][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.244815][ T9655] netlink: 'syz.0.8514': attribute type 32 has an invalid length. [ 1213.865873][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8525'. [ 1213.914383][ T9683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8523'. [ 1213.946584][ T9698] gretap0: left allmulticast mode [ 1213.990714][ T9698] tipc: Resetting bearer [ 1214.007315][ T9698] syzkaller0: left allmulticast mode [ 1214.130488][ T4609] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.130532][ T4609] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.130563][ T4609] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.130593][ T4609] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.255926][ T9702] netlink: 'syz.2.8527': attribute type 3 has an invalid length. [ 1214.435050][ T9726] netlink: 'syz.1.8533': attribute type 16 has an invalid length. [ 1214.435072][ T9726] netlink: 'syz.1.8533': attribute type 3 has an invalid length. [ 1214.466623][ T9723] syzkaller1: left promiscuous mode [ 1214.466682][ T9723] syzkaller1: left allmulticast mode [ 1214.803635][ T9739] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 1214.804819][ T9739] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 1214.804975][ T9739] veth0_virt_wifi: entered allmulticast mode [ 1214.834917][ T9739] veth0_virt_wifi: entered promiscuous mode [ 1214.842634][ T9739] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 1214.842748][ T9739] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 1214.993758][ T9757] __nla_validate_parse: 2 callbacks suppressed [ 1214.993777][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8542'. [ 1215.025245][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8543'. [ 1216.017590][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8558'. [ 1216.178434][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8562'. [ 1216.866498][ T9828] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8567'. [ 1216.899900][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8568'. [ 1216.933035][ T9835] tap0: tun_chr_ioctl cmd 1074025677 [ 1216.933112][ T9835] tap0: linktype set to 804 [ 1216.971000][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8568'. [ 1217.028148][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8569'. [ 1217.106505][ T9831] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20001 [ 1218.130107][ T9871] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8577'. [ 1218.248419][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8577'. [ 1218.300495][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1218.341145][ T9871] netlink: 'syz.2.8577': attribute type 2 has an invalid length. [ 1219.398404][ T9924] syzkaller0: entered promiscuous mode [ 1219.398431][ T9924] syzkaller0: entered allmulticast mode [ 1219.507522][ T9933] digital: digital_start_poll: Unknown protocol [ 1219.612327][ T9924] syzkaller0: left promiscuous mode [ 1219.612349][ T9924] syzkaller0: left allmulticast mode [ 1219.620145][ T9934] netlink: 'syz.0.8585': attribute type 8 has an invalid length. [ 1219.985076][ T9943] syzkaller0: entered promiscuous mode [ 1219.985102][ T9943] syzkaller0: entered allmulticast mode [ 1220.046167][ T9942] __nla_validate_parse: 2 callbacks suppressed [ 1220.046187][ T9942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8591'. [ 1220.138603][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8593'. [ 1220.239638][ T9958] bond8: option broadcast_neighbor: invalid value (3) [ 1220.270133][ T9963] netlink: 'syz.0.8595': attribute type 11 has an invalid length. [ 1220.837445][ T9958] bond8 (unregistering): Released all slaves [ 1221.269048][ T9979] FAULT_INJECTION: forcing a failure. [ 1221.269048][ T9979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.269084][ T9979] CPU: 0 UID: 0 PID: 9979 Comm: syz.0.8598 Not tainted syzkaller #0 PREEMPT(full) [ 1221.269121][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1221.269139][ T9979] Call Trace: [ 1221.269148][ T9979] [ 1221.269157][ T9979] dump_stack_lvl+0xe8/0x150 [ 1221.269196][ T9979] should_fail_ex+0x410/0x560 [ 1221.269229][ T9979] _copy_from_user+0x2d/0xb0 [ 1221.269260][ T9979] generic_map_update_batch+0x662/0xae0 [ 1221.269309][ T9979] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1221.269342][ T9979] ? __fget_files+0x2a/0x420 [ 1221.269381][ T9979] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1221.269423][ T9979] bpf_map_do_batch+0x391/0x630 [ 1221.269455][ T9979] __sys_bpf+0xbe5/0xd90 [ 1221.269504][ T9979] ? __pfx___sys_bpf+0x10/0x10 [ 1221.269540][ T9979] ? __fget_files+0x2a/0x420 [ 1221.269599][ T9979] ? ksys_write+0x242/0x270 [ 1221.269632][ T9979] ? __pfx_ksys_write+0x10/0x10 [ 1221.269667][ T9979] __x64_sys_bpf+0xba/0xd0 [ 1221.269690][ T9979] do_syscall_64+0x166/0x520 [ 1221.269719][ T9979] ? trace_irq_disable+0x3b/0x140 [ 1221.269739][ T9979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.269761][ T9979] ? clear_bhb_loop+0x70/0xc0 [ 1221.269786][ T9979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.269806][ T9979] RIP: 0033:0x7fa404b9e159 [ 1221.269825][ T9979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.269842][ T9979] RSP: 002b:00007fa405b2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1221.269863][ T9979] RAX: ffffffffffffffda RBX: 00007fa404e26090 RCX: 00007fa404b9e159 [ 1221.269879][ T9979] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1221.269892][ T9979] RBP: 00007fa405b2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.269924][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.269937][ T9979] R13: 00007fa404e26128 R14: 00007fa404e26090 R15: 00007ffef474c138 [ 1221.269970][ T9979] [ 1221.720760][ T9985] netlink: 'syz.4.8600': attribute type 25 has an invalid length. [ 1224.419790][ T9991] sit0: entered promiscuous mode [ 1224.467500][ T9991] netlink: 'syz.1.8602': attribute type 1 has an invalid length. [ 1224.467525][ T9991] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8602'. [ 1224.745961][T10004] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8606'. [ 1225.016196][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8607'. [ 1225.648322][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8613'. [ 1225.648349][T10026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.668721][T10026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.786514][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8614'. [ 1225.973022][T10040] ±ÿ: entered allmulticast mode [ 1225.978524][T10040] ±ÿ: left allmulticast mode [ 1226.010124][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8612'. [ 1226.029763][T10040] netlink: 'syz.4.8615': attribute type 3 has an invalid length. [ 1226.091408][T10045] xt_hl: Unknown Hop Limit match mode: 4 [ 1226.241154][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032ece000: rx timeout, send abort [ 1226.241446][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032ece000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1226.338330][T10052] syzkaller1: entered promiscuous mode [ 1226.338356][T10052] syzkaller1: entered allmulticast mode [ 1227.029418][T10053] workqueue: Failed to create a rescuer kthread for wq "nfc26_nci_cmd_wq": -EINTR [ 1227.039908][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8627'. [ 1227.125219][T10158] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8631'. [ 1227.188868][T10153] syzkaller1: entered promiscuous mode [ 1227.188892][T10153] syzkaller1: entered allmulticast mode [ 1227.957043][T10188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8632'. [ 1228.220113][T10192] netlink: 'syz.2.8634': attribute type 58 has an invalid length. [ 1228.220140][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8634'. [ 1228.221611][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8636'. [ 1228.223463][T10194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8636'. [ 1228.223559][T10194] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8636'. [ 1228.327345][T10194] netlink: 'syz.3.8636': attribute type 1 has an invalid length. [ 1228.639182][T10216] netlink: 'syz.4.8642': attribute type 2 has an invalid length. [ 1228.639204][T10216] netlink: 'syz.4.8642': attribute type 1 has an invalid length. [ 1228.804605][T10218] 8021q: VLANs not supported on gre0 [ 1229.053920][T10230] sock: sock_set_timeout: `syz.4.8647' (pid 10230) tries to set negative timeout [ 1229.072283][T10230] syzkaller0: entered allmulticast mode [ 1229.092057][ T4587] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.092101][ T4587] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.092136][ T4587] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.092169][ T4587] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.152029][T10230] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 1229.825936][T10263] x_tables: unsorted underflow at hook 2 [ 1230.253592][T10280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1230.684366][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803a2c6c00: rx timeout, send abort [ 1230.684508][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803a2c6c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1231.173276][T10297] __nla_validate_parse: 6 callbacks suppressed [ 1231.173291][T10297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8665'. [ 1232.877306][T10265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1233.092206][T10307] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.8668'. [ 1233.093240][T10307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8668'. [ 1233.129865][T10307] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.8668'. [ 1233.149040][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8668'. [ 1233.204406][T10309] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:19456 [ 1233.317967][T10322] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8671'. [ 1233.319557][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8669'. [ 1233.402054][T10318] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1233.524378][T10330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8673'. [ 1233.745875][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8677'. [ 1233.913759][T10345] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1234.547236][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8690'. [ 1234.747388][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033c11400: rx timeout, send abort [ 1234.747677][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033c11400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1235.223707][T10417] netlink: 'syz.0.8701': attribute type 10 has an invalid length. [ 1235.265131][T10417] team0 (unregistering): Port device team_slave_0 removed [ 1235.314396][T10417] team0 (unregistering): Port device team_slave_1 removed [ 1235.335424][T10423] IPv6: NLM_F_CREATE should be specified when creating new route [ 1236.220572][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1236.618655][T10458] __nla_validate_parse: 8 callbacks suppressed [ 1236.618677][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8709'. [ 1237.528462][T10479] xt_cgroup: path and classid specified [ 1237.630929][T10477] netlink: 59 bytes leftover after parsing attributes in process `syz.0.8713'. [ 1237.796930][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8716'. [ 1238.075695][T10496] ip6gretap2: entered allmulticast mode [ 1238.077889][T10496] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1238.077906][T10496] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.077942][T10496] batman_adv: batadv0: Interface activated: ip6gretap2 [ 1238.612033][T10522] netlink: 'syz.2.8725': attribute type 16 has an invalid length. [ 1238.612055][T10522] netlink: 'syz.2.8725': attribute type 17 has an invalid length. [ 1238.613412][T10521] netlink: 'syz.2.8725': attribute type 16 has an invalid length. [ 1238.613430][T10521] netlink: 'syz.2.8725': attribute type 17 has an invalid length. [ 1238.841776][T10522] gre0: left promiscuous mode [ 1238.841811][T10522] gre0: left allmulticast mode [ 1238.982413][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8727'. [ 1239.075359][T10530] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8727'. [ 1239.306120][T10522] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 1239.306328][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.307081][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.068765][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.138783][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.682776][T10522] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1240.797729][T10522] bridge1: left promiscuous mode [ 1240.797748][T10522] bridge1: left allmulticast mode [ 1240.864094][T10522] bond2: left allmulticast mode [ 1240.891665][T10522] bond3: left promiscuous mode [ 1240.891684][T10522] bond3: left allmulticast mode [ 1241.004404][T10522] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1241.033844][T10522] ip6gretap0: left allmulticast mode [ 1241.033877][T10522] macsec1: left allmulticast mode [ 1241.062605][T10522] bond5: left allmulticast mode [ 1241.091785][ T4587] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.091819][ T4587] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.091844][ T4587] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1241.091884][ T4587] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.091910][ T4587] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.091935][ T4587] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1241.091984][ T4587] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.092009][ T4587] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.092034][ T4587] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1241.092069][ T4587] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.092095][ T4587] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.092138][ T4587] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1241.099724][T10535] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1241.111325][T10537] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1241.795439][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8732'. [ 1241.795468][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8732'. [ 1241.798518][T10574] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8734'. [ 1242.264996][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8740'. [ 1242.265066][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8740'. [ 1242.265085][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8740'. [ 1242.265153][T10592] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8740'. [ 1242.265170][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8740'. [ 1242.319827][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8740'. [ 1242.373716][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8741'. [ 1242.489555][T10596] vlan0: entered allmulticast mode [ 1242.489579][T10596] bridge1: entered allmulticast mode [ 1242.529857][T10592] bridge1: port 1(erspan0) entered blocking state [ 1242.529965][T10592] bridge1: port 1(erspan0) entered disabled state [ 1242.530083][T10592] erspan0: entered allmulticast mode [ 1242.552447][T10592] erspan0: entered promiscuous mode [ 1242.659170][T10602] netlink: 'syz.1.8743': attribute type 12 has an invalid length. [ 1242.908057][T10615] openvswitch: netlink: Missing valid actions attribute. [ 1242.908102][T10615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1243.569448][T10629] netlink: 'syz.2.8749': attribute type 1 has an invalid length. [ 1244.844383][T10689] tipc: Failed to remove unknown binding: 66,0,0/16781313:937208968/937208970 [ 1244.844416][T10689] tipc: Failed to remove unknown binding: 66,0,0/16781313:937208968/937208969 [ 1244.847766][T10689] tipc: Failed to remove unknown binding: 66,0,0/16781313:937208968/937208970 [ 1244.847798][T10689] tipc: Failed to remove unknown binding: 66,0,0/16781313:937208968/937208969 [ 1245.097806][T10693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1247.469212][T10820] __nla_validate_parse: 14 callbacks suppressed [ 1247.469234][T10820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1247.622641][T10819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8800'. [ 1247.855329][T10830] pimreg: entered allmulticast mode [ 1247.987026][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8805'. [ 1248.657661][T10859] tipc: Enabling of bearer rejected, failed to enable media [ 1248.766529][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8816'. [ 1248.849371][T10869] netlink: 'syz.4.8818': attribute type 1 has an invalid length. [ 1248.849393][T10869] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8818'. [ 1248.907302][T10869] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1249.430920][T10902] netlink: 'syz.1.8828': attribute type 1 has an invalid length. [ 1249.430945][T10902] netlink: 'syz.1.8828': attribute type 2 has an invalid length. [ 1249.430960][T10902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8828'. [ 1249.702309][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8831'. [ 1249.726144][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8831'. [ 1250.127747][T10943] netlink: 'syz.1.8841': attribute type 2 has an invalid length. [ 1250.189168][T10943] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1250.224529][T10949] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1250.366320][T10953] netlink: 'syz.0.8842': attribute type 2 has an invalid length. [ 1250.366541][T10953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1250.607513][T10970] x_tables: duplicate underflow at hook 1 [ 1250.687346][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8850'. [ 1251.103990][ T31] audit: type=1804 audit(1790328212.187:34): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8856" name="/newroot/536/cgroup.controllers" dev="tmpfs" ino=2757 res=1 errno=0 [ 1251.104052][ T31] audit: type=1800 audit(1790328212.187:35): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8856" name="cgroup.controllers" dev="tmpfs" ino=2757 res=0 errno=0 [ 1252.153511][T11019] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8864'. [ 1252.179809][T11028] tc_dump_action: action bad kind [ 1252.815314][T11042] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1252.830737][T11042] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1252.831776][T11042] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1252.834048][T11042] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1252.834711][T11042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1253.313393][T11054] FAULT_INJECTION: forcing a failure. [ 1253.313393][T11054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.313430][T11054] CPU: 0 UID: 0 PID: 11054 Comm: syz.3.8868 Not tainted syzkaller #0 PREEMPT(full) [ 1253.313456][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1253.313470][T11054] Call Trace: [ 1253.313480][T11054] [ 1253.313490][T11054] dump_stack_lvl+0xe8/0x150 [ 1253.313533][T11054] should_fail_ex+0x410/0x560 [ 1253.313576][T11054] _copy_from_user+0x2d/0xb0 [ 1253.313608][T11054] generic_map_update_batch+0x6b1/0xae0 [ 1253.313658][T11054] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1253.313692][T11054] ? __fget_files+0x2a/0x420 [ 1253.313733][T11054] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1253.313767][T11054] bpf_map_do_batch+0x391/0x630 [ 1253.313802][T11054] __sys_bpf+0xbe5/0xd90 [ 1253.313838][T11054] ? __pfx___sys_bpf+0x10/0x10 [ 1253.313877][T11054] ? __fget_files+0x2a/0x420 [ 1253.313928][T11054] ? ksys_write+0x242/0x270 [ 1253.313965][T11054] ? __pfx_ksys_write+0x10/0x10 [ 1253.314006][T11054] __x64_sys_bpf+0xba/0xd0 [ 1253.314034][T11054] do_syscall_64+0x166/0x520 [ 1253.314065][T11054] ? trace_irq_disable+0x3b/0x140 [ 1253.314089][T11054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.314113][T11054] ? clear_bhb_loop+0x70/0xc0 [ 1253.314143][T11054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.314165][T11054] RIP: 0033:0x7f5cba59e159 [ 1253.314187][T11054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.314208][T11054] RSP: 002b:00007f5cb87f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1253.314233][T11054] RAX: ffffffffffffffda RBX: 00007f5cba826090 RCX: 00007f5cba59e159 [ 1253.314251][T11054] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1253.314267][T11054] RBP: 00007f5cb87f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.314283][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1253.314308][T11054] R13: 00007f5cba826128 R14: 00007f5cba826090 R15: 00007fff46867c68 [ 1253.314342][T11054] [ 1253.707095][T11063] netlink: 'syz.4.8872': attribute type 11 has an invalid length. [ 1253.795012][T11073] netlink: 'syz.1.8873': attribute type 1 has an invalid length. [ 1253.936603][T11068] netlink: 'syz.4.8872': attribute type 11 has an invalid length. [ 1254.431782][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8875'. [ 1254.754736][T11098] netlink: 'syz.4.8877': attribute type 30 has an invalid length. [ 1254.854076][T11098] bond9: option arp_missed_max: invalid value (0) [ 1254.854104][T11098] bond9: option arp_missed_max: allowed values 1 - 255 [ 1254.856940][T11098] bond9 (unregistering): Released all slaves [ 1254.940480][T23172] Bluetooth: hci1: command tx timeout [ 1255.192767][T11102] Cannot find map_set index 2 as target [ 1255.328839][T11114] syzkaller0: left promiscuous mode [ 1255.328864][T11114] syzkaller0: left allmulticast mode [ 1256.736818][T11041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.737001][T11041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.737146][T11041] bridge_slave_0: entered allmulticast mode [ 1256.766852][T11041] bridge_slave_0: entered promiscuous mode [ 1256.780035][T11041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.783857][T11041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.783981][T11041] bridge_slave_1: entered allmulticast mode [ 1256.800949][T11041] bridge_slave_1: entered promiscuous mode [ 1256.914866][T11041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.928590][T11041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.007747][T11041] team0: Port device team_slave_0 added [ 1257.019635][T11041] team0: Port device team_slave_1 added [ 1257.020808][T23172] Bluetooth: hci1: command tx timeout [ 1257.233097][T11041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.233117][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.233147][T11041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.235372][T11041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.235389][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.235418][T11041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.570037][T11041] hsr_slave_0: entered promiscuous mode [ 1257.578710][T11041] hsr_slave_1: entered promiscuous mode [ 1257.579670][T11041] debugfs: 'hsr0' already exists in 'hsr' [ 1257.579693][T11041] Cannot create hsr debugfs directory [ 1257.614962][ T4601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.614987][ T4601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.439891][T11186] netlink: 'syz.2.8894': attribute type 3 has an invalid length. [ 1258.459044][T11186] netlink: 'syz.2.8894': attribute type 1 has an invalid length. [ 1258.459064][T11186] netlink: 'syz.2.8894': attribute type 268 has an invalid length. [ 1258.459079][T11186] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8894'. [ 1258.728956][T11189] FAULT_INJECTION: forcing a failure. [ 1258.728956][T11189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.728991][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.1.8895 Not tainted syzkaller #0 PREEMPT(full) [ 1258.729029][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1258.729045][T11189] Call Trace: [ 1258.729054][T11189] [ 1258.729065][T11189] dump_stack_lvl+0xe8/0x150 [ 1258.729105][T11189] should_fail_ex+0x410/0x560 [ 1258.729137][T11189] _copy_from_user+0x2d/0xb0 [ 1258.729168][T11189] generic_map_update_batch+0x662/0xae0 [ 1258.729216][T11189] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1258.729251][T11189] ? __fget_files+0x2a/0x420 [ 1258.729290][T11189] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1258.729324][T11189] bpf_map_do_batch+0x391/0x630 [ 1258.729359][T11189] __sys_bpf+0xbe5/0xd90 [ 1258.729393][T11189] ? __pfx___sys_bpf+0x10/0x10 [ 1258.729432][T11189] ? __fget_files+0x2a/0x420 [ 1258.729483][T11189] ? ksys_write+0x242/0x270 [ 1258.729520][T11189] ? __pfx_ksys_write+0x10/0x10 [ 1258.729560][T11189] __x64_sys_bpf+0xba/0xd0 [ 1258.729586][T11189] do_syscall_64+0x166/0x520 [ 1258.729617][T11189] ? trace_irq_disable+0x3b/0x140 [ 1258.729639][T11189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.729662][T11189] ? clear_bhb_loop+0x70/0xc0 [ 1258.729690][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.729713][T11189] RIP: 0033:0x7fb51219e159 [ 1258.729740][T11189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.729759][T11189] RSP: 002b:00007fb5103d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1258.729784][T11189] RAX: ffffffffffffffda RBX: 00007fb512426090 RCX: 00007fb51219e159 [ 1258.729801][T11189] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1258.729817][T11189] RBP: 00007fb5103d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.729831][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1258.729845][T11189] R13: 00007fb512426128 R14: 00007fb512426090 R15: 00007ffc125fc338 [ 1258.729880][T11189] [ 1259.100430][T23172] Bluetooth: hci1: command tx timeout [ 1259.527554][T11213] syzkaller0: entered promiscuous mode [ 1259.527576][T11213] syzkaller0: entered allmulticast mode [ 1260.451484][T11236] bond0: entered promiscuous mode [ 1260.454507][T11236] batadv0: entered promiscuous mode [ 1260.454700][T11236] batadv0: left promiscuous mode [ 1260.456340][T11236] bond0: left promiscuous mode [ 1260.604949][T11239] bond0: entered promiscuous mode [ 1260.606904][T11239] batadv0: entered promiscuous mode [ 1260.607091][T11239] batadv0: left promiscuous mode [ 1260.607903][T11239] bond0: left promiscuous mode [ 1260.642940][T11041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1260.649820][T11041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1260.666362][T11041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1260.679969][T11041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1260.691461][T11041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1260.702402][T11041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1260.703264][T11041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1260.750050][T11041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1260.867492][T11041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.896625][T11041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.912802][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.912906][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.945881][T23578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.945978][T23578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.183174][T23172] Bluetooth: hci1: command tx timeout [ 1261.456401][T11276] x_tables: duplicate underflow at hook 2 [ 1262.034655][T11041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.179791][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8920'. [ 1262.180165][T11041] veth0_vlan: entered promiscuous mode [ 1262.302384][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8921'. [ 1262.319743][T11041] veth1_vlan: entered promiscuous mode [ 1262.485070][T11041] veth0_macvtap: entered promiscuous mode [ 1262.505303][T11041] veth1_macvtap: entered promiscuous mode [ 1262.524564][T11314] netlink: 'syz.2.8923': attribute type 16 has an invalid length. [ 1262.524583][T11314] netlink: 'syz.2.8923': attribute type 17 has an invalid length. [ 1262.562105][T11041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.579416][T11041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.683320][T11316] sctp: [Deprecated]: syz.4.8924 (pid 11316) Use of int in maxseg socket option. [ 1262.683320][T11316] Use struct sctp_assoc_value instead [ 1262.721964][ T4587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.734343][T24576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.735840][T24576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.736905][T24576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.795486][T11321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8926'. [ 1263.071853][T24576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.071883][T24576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.196416][ T4587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.196437][ T4587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.236368][T11341] 0: reclassify loop, rule prio 0, protocol 03 [ 1263.481540][T11353] batadv_slave_1: entered promiscuous mode [ 1263.505293][T11352] batadv_slave_1: left promiscuous mode [ 1263.691933][T11365] xt_policy: output policy not valid in PREROUTING and INPUT [ 1263.864449][T11371] vti0: entered promiscuous mode [ 1263.901327][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1264.204135][T11391] syzkaller0: entered promiscuous mode [ 1264.204173][T11391] syzkaller0: entered allmulticast mode [ 1264.235708][T11391] tipc: Started in network mode [ 1264.235735][T11391] tipc: Node identity c27e29547c22, cluster identity 4711 [ 1264.235981][T11391] tipc: Enabled bearer , priority 0 [ 1264.239999][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8941'. [ 1264.265607][T11391] tipc: Resetting bearer [ 1264.278974][T11389] tipc: Resetting bearer [ 1264.366972][T11389] tipc: Disabling bearer [ 1264.427894][T11398] syzkaller1: entered promiscuous mode [ 1264.427961][T11398] syzkaller1: entered allmulticast mode [ 1264.645898][T11405] netlink: 'syz.2.8946': attribute type 1 has an invalid length. [ 1264.686156][T11405] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1264.742327][T11406] bond7: (slave geneve4): making interface the new active one [ 1264.746267][T11406] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 1264.771152][ T4611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.791813][ T4587] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.791962][ T4587] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.792000][ T4587] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.078661][T11415] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8949'. [ 1265.246389][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.246978][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.303700][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8951'. [ 1265.304235][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8952'. [ 1265.358068][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8953'. [ 1265.992896][T11456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8958'. [ 1266.419826][T11470] ip_tables: iptables: counters copy to user failed while replacing table [ 1266.564365][T11473] xt_CT: No such helper "snmp_trap" [ 1267.169208][T11499] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1267.441506][T11506] netlink: 'syz.2.8973': attribute type 11 has an invalid length. [ 1267.494575][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045b37400: rx timeout, send abort [ 1267.494761][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888045b37400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1267.751711][T11505] __nla_validate_parse: 5 callbacks suppressed [ 1267.751733][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8974'. [ 1268.059821][T11518] syzkaller0: entered promiscuous mode [ 1268.059873][T11518] syzkaller0: entered allmulticast mode [ 1268.078880][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8976'. [ 1268.094448][T11518] netlink: 'syz.4.8976': attribute type 25 has an invalid length. [ 1268.096040][T11518] tipc: Enabling of bearer rejected, already enabled [ 1268.264040][T11525] nbd: socks must be embedded in a SOCK_ITEM attr [ 1268.270946][T11525] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8979'. [ 1268.351218][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8978'. [ 1269.111840][T11562] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8985'. [ 1269.306413][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8985'. [ 1269.541372][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8990'. [ 1269.545207][T11578] IPVS: length: 188 != 8 [ 1269.642858][T11591] nbd: socks must be embedded in a SOCK_ITEM attr [ 1269.753293][T11595] FAULT_INJECTION: forcing a failure. [ 1269.753293][T11595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.753325][T11595] CPU: 0 UID: 0 PID: 11595 Comm: syz.4.8996 Not tainted syzkaller #0 PREEMPT(full) [ 1269.753348][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1269.753361][T11595] Call Trace: [ 1269.753369][T11595] [ 1269.753378][T11595] dump_stack_lvl+0xe8/0x150 [ 1269.753422][T11595] should_fail_ex+0x410/0x560 [ 1269.753453][T11595] _copy_to_user+0x31/0xb0 [ 1269.753484][T11595] simple_read_from_buffer+0xe1/0x170 [ 1269.753520][T11595] proc_fail_nth_read+0x1bb/0x230 [ 1269.753541][T11595] ? common_file_perm+0x20e/0x2b0 [ 1269.753572][T11595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1269.753597][T11595] ? rw_verify_area+0x24a/0x4c0 [ 1269.753631][T11595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1269.753651][T11595] vfs_read+0x213/0xa80 [ 1269.753688][T11595] ? __pfx___mutex_lock+0x10/0x10 [ 1269.753720][T11595] ? __pfx_vfs_read+0x10/0x10 [ 1269.753754][T11595] ? __fget_files+0x2a/0x420 [ 1269.753788][T11595] ? __fget_files+0x3a2/0x420 [ 1269.753815][T11595] ? __fget_files+0x2a/0x420 [ 1269.753853][T11595] ksys_read+0x150/0x270 [ 1269.753906][T11595] ? __pfx_ksys_read+0x10/0x10 [ 1269.753953][T11595] do_syscall_64+0x166/0x520 [ 1269.753982][T11595] ? trace_irq_disable+0x3b/0x140 [ 1269.754016][T11595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.754038][T11595] ? clear_bhb_loop+0x70/0xc0 [ 1269.754065][T11595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.754086][T11595] RIP: 0033:0x7f7de0f5e98e [ 1269.754106][T11595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1269.754124][T11595] RSP: 002b:00007f7de1d7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1269.754147][T11595] RAX: ffffffffffffffda RBX: 00007f7de1d7f6c0 RCX: 00007f7de0f5e98e [ 1269.754163][T11595] RDX: 000000000000000f RSI: 00007f7de1d7f0a0 RDI: 0000000000000005 [ 1269.754177][T11595] RBP: 00007f7de1d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.754189][T11595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.754202][T11595] R13: 00007f7de1226038 R14: 00007f7de1225fa0 R15: 00007ffee68eb278 [ 1269.754237][T11595] [ 1270.207446][T11598] netlink: 'syz.4.8997': attribute type 1 has an invalid length. [ 1270.207468][T11598] netlink: 756 bytes leftover after parsing attributes in process `syz.4.8997'. [ 1270.394771][T11607] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8999'. [ 1270.467595][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8999'. [ 1270.467635][T11607] netlink: 'syz.3.8999': attribute type 30 has an invalid length. [ 1270.497430][T11607] vxlan1: entered promiscuous mode [ 1270.497452][T11607] vxlan1: entered allmulticast mode [ 1272.014094][T11649] vcan0: entered allmulticast mode [ 1272.458223][T11661] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 1272.554161][T11667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1272.714640][T11670] batman_adv: batadv0: Adding interface: macvtap1 [ 1272.714658][T11670] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.714696][T11670] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1272.830646][T11670] batman_adv: batadv0: Removing interface: macvtap1 [ 1272.850898][T11673] __nla_validate_parse: 13 callbacks suppressed [ 1272.850916][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9017'. [ 1272.938243][T11673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.000114][T11676] batman_adv: batadv0: Adding interface: syzkaller0 [ 1273.000134][T11676] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.009659][T11676] batman_adv: batadv0: Interface activated: syzkaller0 [ 1273.086023][T11668] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1273.138128][T11668] batman_adv: batadv0: Removing interface: syzkaller0 [ 1273.295427][T11682] nbd: socks must be embedded in a SOCK_ITEM attr [ 1273.295465][T11682] block nbd11: shutting down sockets [ 1273.731262][T11688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9020'. [ 1273.840153][T11699] netlink: 'syz.3.9022': attribute type 1 has an invalid length. [ 1274.043062][T11699] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1274.083743][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9023'. [ 1274.191577][T11701] macvlan9: entered promiscuous mode [ 1274.191601][T11701] macvlan9: entered allmulticast mode [ 1274.196284][T11701] bond10: entered allmulticast mode [ 1274.196343][T11701] bond10: entered promiscuous mode [ 1274.199879][T11701] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 1274.219103][T11701] team0: Port device macvlan9 added [ 1274.283862][T11707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9025'. [ 1274.283887][T11707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9025'. [ 1274.378385][T11716] tc_dump_action: action bad kind [ 1274.620507][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1275.345858][T11741] x_tables: duplicate underflow at hook 3 [ 1276.249896][T11766] syzkaller1: entered promiscuous mode [ 1276.249921][T11766] syzkaller1: entered allmulticast mode [ 1276.597834][T11788] netlink: 'syz.4.9045': attribute type 2 has an invalid length. [ 1276.741736][T11788] ´: entered promiscuous mode [ 1276.772763][T11793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9047'. [ 1278.374677][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9054'. [ 1278.549355][T11828] netlink: 'syz.0.9055': attribute type 10 has an invalid length. [ 1278.574657][T11828] syz_tun: entered promiscuous mode [ 1278.577476][T11830] FAULT_INJECTION: forcing a failure. [ 1278.577476][T11830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1278.577506][T11830] CPU: 0 UID: 0 PID: 11830 Comm: syz.4.9056 Not tainted syzkaller #0 PREEMPT(full) [ 1278.577528][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1278.577540][T11830] Call Trace: [ 1278.577548][T11830] [ 1278.577557][T11830] dump_stack_lvl+0xe8/0x150 [ 1278.577591][T11830] should_fail_ex+0x410/0x560 [ 1278.577621][T11830] _copy_from_user+0x2d/0xb0 [ 1278.577650][T11830] generic_map_update_batch+0x6b1/0xae0 [ 1278.577696][T11830] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1278.577728][T11830] ? __fget_files+0x2a/0x420 [ 1278.577804][T11830] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1278.577839][T11830] bpf_map_do_batch+0x391/0x630 [ 1278.577876][T11830] __sys_bpf+0xbe5/0xd90 [ 1278.577913][T11830] ? __pfx___sys_bpf+0x10/0x10 [ 1278.577953][T11830] ? __fget_files+0x2a/0x420 [ 1278.578006][T11830] ? ksys_write+0x242/0x270 [ 1278.578045][T11830] ? __pfx_ksys_write+0x10/0x10 [ 1278.578087][T11830] __x64_sys_bpf+0xba/0xd0 [ 1278.578114][T11830] do_syscall_64+0x166/0x520 [ 1278.578147][T11830] ? trace_irq_disable+0x3b/0x140 [ 1278.578171][T11830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.578194][T11830] ? clear_bhb_loop+0x70/0xc0 [ 1278.578223][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.578247][T11830] RIP: 0033:0x7f7de0f9e159 [ 1278.578275][T11830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.578295][T11830] RSP: 002b:00007f7ddf1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1278.578320][T11830] RAX: ffffffffffffffda RBX: 00007f7de1226090 RCX: 00007f7de0f9e159 [ 1278.578337][T11830] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1278.578351][T11830] RBP: 00007f7ddf1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.578366][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1278.578379][T11830] R13: 00007f7de1226128 R14: 00007f7de1226090 R15: 00007ffee68eb278 [ 1278.578418][T11830] [ 1278.695229][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9055'. [ 1278.724476][T11836] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9055'. [ 1278.769120][T11828] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1279.315643][T11842] ovs-s!: entered promiscuous mode [ 1279.443441][T11851] Unsupported ieee802154 address type: 0 [ 1279.577420][T11042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1279.589670][T11042] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1279.604931][T11042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1279.609134][T11042] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1279.609825][T11042] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1280.453103][T11871] syzkaller1: entered promiscuous mode [ 1280.453136][T11871] syzkaller1: entered allmulticast mode [ 1280.527889][T11874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.794501][T11883] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1280.836664][T31696] syz_tun (unregistering): left allmulticast mode [ 1280.862516][T31696] bond0: (slave syz_tun): Releasing backup interface [ 1280.947545][T11883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 1281.418192][ T31] audit: type=1800 audit(1790328242.497:36): pid=11894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9069" name="memory.events" dev="tmpfs" ino=3041 res=0 errno=0 [ 1281.539304][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9073'. [ 1281.741797][T11042] Bluetooth: hci3: command tx timeout [ 1281.998797][T11914] netlink: 'syz.2.9076': attribute type 30 has an invalid length. [ 1282.362866][T11930] IPVS: set_ctl: invalid protocol: 7056 172.20.20.187:20001 [ 1282.532871][T11942] netlink: 248 bytes leftover after parsing attributes in process `syz.2.9086'. [ 1282.775838][T11853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.776005][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.776128][T11853] bridge_slave_0: entered allmulticast mode [ 1282.778126][T11853] bridge_slave_0: entered promiscuous mode [ 1282.812073][T11853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.812177][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.812305][T11853] bridge_slave_1: entered allmulticast mode [ 1282.817101][T11853] bridge_slave_1: entered promiscuous mode [ 1282.944877][T11853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.947815][T11853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.003279][T11853] team0: Port device team_slave_0 added [ 1283.006037][T11853] team0: Port device team_slave_1 added [ 1283.050155][T11853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.050172][T11853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.083867][T11853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.086030][T11853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.086043][T11853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.086067][T11853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.322909][T11853] hsr_slave_0: entered promiscuous mode [ 1283.325797][T11853] hsr_slave_1: entered promiscuous mode [ 1283.326501][T11853] debugfs: 'hsr0' already exists in 'hsr' [ 1283.326522][T11853] Cannot create hsr debugfs directory [ 1283.362037][T11967] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1283.414141][T11960] netlink: Failed to add %pK helper -22 [ 1283.414189][T11960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1283.447424][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9092'. [ 1283.515734][T11963] syzkaller0: entered promiscuous mode [ 1283.515759][T11963] syzkaller0: entered allmulticast mode [ 1283.810186][T11977] @0Ù: renamed from bond_slave_1 [ 1283.822864][T11042] Bluetooth: hci3: command tx timeout [ 1284.177223][T11992] nbd: socks must be embedded in a SOCK_ITEM attr [ 1284.177256][T11992] block nbd11: shutting down sockets [ 1284.254435][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9099'. [ 1284.278289][T23578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.302301][ T7609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.302577][T23578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.480553][ T7609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.840608][T31053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.096174][T11853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.255217][T11853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.339451][T12030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9105'. [ 1285.430350][T11853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.541651][T12034] mac80211_hwsim hwsim105 syzkaller0: entered promiscuous mode [ 1285.541733][T12034] mac80211_hwsim hwsim105 syzkaller0: entered allmulticast mode [ 1285.611398][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1285.611425][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1285.612150][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9106'. [ 1285.614114][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1285.614137][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1285.614317][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1285.614335][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1285.847963][T11853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1285.872995][T11853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1285.873807][T11853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1285.900848][T11042] Bluetooth: hci3: command tx timeout [ 1285.918050][T11853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1285.930990][T11853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1285.953716][T11853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1285.959284][T11853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1285.985622][T11853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1286.242350][T11853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.306132][T12053] netlink: 'syz.4.9110': attribute type 2 has an invalid length. [ 1286.322453][T11853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.813071][T24576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.813182][T24576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.934327][ T4618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.934436][ T4618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.595695][T12081] No such timeout policy "s" [ 1287.595713][T12081] netlink: Failed to associated timeout policy 's' [ 1287.981331][T11042] Bluetooth: hci3: command tx timeout [ 1288.281679][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281709][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281733][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281754][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281776][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281799][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281820][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281842][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281864][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281885][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281907][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281928][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281950][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281972][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.281993][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282016][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282037][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282059][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282081][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282103][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282125][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282146][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282169][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282190][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282212][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282234][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282255][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282278][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282301][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282323][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282345][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282367][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.282403][T12116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1288.659392][T12120] __nla_validate_parse: 78 callbacks suppressed [ 1288.659413][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9124'. [ 1288.774802][T12127] netlink: 'syz.1.9125': attribute type 1 has an invalid length. [ 1288.775028][T12128] netlink: 'syz.1.9125': attribute type 1 has an invalid length. [ 1288.868503][T12134] netlink: 'syz.4.9127': attribute type 1 has an invalid length. [ 1288.868528][T12134] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9127'. [ 1288.888623][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9127'. [ 1288.930128][T12134] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1288.942633][T12134] bond9: option ad_select: unable to set because the bond device is up [ 1289.079173][T23578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.079198][T23578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.160997][T11853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.194155][T12143] openvswitch: netlink: Flow actions attr not present in new flow. [ 1289.426536][T11853] veth0_vlan: entered promiscuous mode [ 1289.452006][T11853] veth1_vlan: entered promiscuous mode [ 1289.587012][T11853] veth0_macvtap: entered promiscuous mode [ 1289.624164][T11853] veth1_macvtap: entered promiscuous mode [ 1289.634487][T12163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1289.706482][T11853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.739495][T11853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.883498][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9135'. [ 1289.902398][ T4587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.902440][ T4587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.902475][ T4587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.902509][ T4587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.014274][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9134'. [ 1290.206616][ T6374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.206641][ T6374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.295340][T24576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.295362][T24576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.296292][T12179] netlink: 'syz.4.9137': attribute type 39 has an invalid length. [ 1290.732486][T12199] netlink: 'syz.1.9143': attribute type 10 has an invalid length. [ 1290.751416][T12202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9143'. [ 1290.857758][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9143'. [ 1290.892000][T12207] syzkaller1: entered promiscuous mode [ 1290.892031][T12207] syzkaller1: entered allmulticast mode [ 1291.466047][T12221] netlink: 388 bytes leftover after parsing attributes in process `syz.1.9145'. [ 1291.630866][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9147'. [ 1291.712124][T12232] netlink: 'syz.3.9147': attribute type 7 has an invalid length. [ 1292.112104][T12246] gretap0: entered promiscuous mode [ 1292.114743][T12246] vlan2: entered promiscuous mode [ 1292.168749][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1292.168784][T12248] netlink: 'syz.3.9154': attribute type 18 has an invalid length. [ 1292.217426][T23172] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1292.234163][T23172] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1292.243354][T23172] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1292.248146][T23172] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1292.248836][T23172] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1292.388333][ T6366] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 768 - 0 [ 1292.388564][ T6366] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 768 - 0 [ 1292.388631][ T6366] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 768 - 0 [ 1292.391566][ T4587] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 768 - 0 [ 1293.532149][T12301] netlink: 'syz.0.9162': attribute type 5 has an invalid length. [ 1293.763537][T12311] __nla_validate_parse: 3 callbacks suppressed [ 1293.763576][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9165'. [ 1294.124298][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9168'. [ 1294.238935][T12331] FAULT_INJECTION: forcing a failure. [ 1294.238935][T12331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1294.238971][T12331] CPU: 1 UID: 0 PID: 12331 Comm: syz.4.9172 Not tainted syzkaller #0 PREEMPT(full) [ 1294.239013][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1294.239027][T12331] Call Trace: [ 1294.239037][T12331] [ 1294.239047][T12331] dump_stack_lvl+0xe8/0x150 [ 1294.239097][T12331] should_fail_ex+0x410/0x560 [ 1294.239128][T12331] _copy_from_user+0x2d/0xb0 [ 1294.239157][T12331] generic_map_update_batch+0x662/0xae0 [ 1294.239202][T12331] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1294.239235][T12331] ? __fget_files+0x2a/0x420 [ 1294.239271][T12331] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1294.239302][T12331] bpf_map_do_batch+0x391/0x630 [ 1294.239334][T12331] __sys_bpf+0xbe5/0xd90 [ 1294.239366][T12331] ? __pfx___sys_bpf+0x10/0x10 [ 1294.239402][T12331] ? __fget_files+0x2a/0x420 [ 1294.239449][T12331] ? ksys_write+0x242/0x270 [ 1294.239484][T12331] ? __pfx_ksys_write+0x10/0x10 [ 1294.239521][T12331] __x64_sys_bpf+0xba/0xd0 [ 1294.239547][T12331] do_syscall_64+0x166/0x520 [ 1294.239575][T12331] ? trace_irq_disable+0x3b/0x140 [ 1294.239595][T12331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.239617][T12331] ? clear_bhb_loop+0x70/0xc0 [ 1294.239658][T12331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.239679][T12331] RIP: 0033:0x7f7de0f9e159 [ 1294.239715][T12331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.239734][T12331] RSP: 002b:00007f7ddf1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1294.239758][T12331] RAX: ffffffffffffffda RBX: 00007f7de1226180 RCX: 00007f7de0f9e159 [ 1294.239774][T12331] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1294.239788][T12331] RBP: 00007f7ddf1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.239803][T12331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1294.239816][T12331] R13: 00007f7de1226218 R14: 00007f7de1226180 R15: 00007ffee68eb278 [ 1294.239853][T12331] [ 1294.382516][T11042] Bluetooth: hci4: command tx timeout [ 1294.571345][T12338] bond1: Removing last arp target with arp_interval on [ 1294.671074][T12349] sctp: [Deprecated]: syz.1.9175 (pid 12349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1294.671074][T12349] Use struct sctp_sack_info instead [ 1295.198358][T12249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.198553][T12249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.198712][T12249] bridge_slave_0: entered allmulticast mode [ 1295.228782][T12249] bridge_slave_0: entered promiscuous mode [ 1295.246310][T12249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.246480][T12249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.246686][T12249] bridge_slave_1: entered allmulticast mode [ 1295.276983][T12249] bridge_slave_1: entered promiscuous mode [ 1295.407973][T12249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.426421][T12249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.464235][T12249] team0: Port device team_slave_0 added [ 1295.466089][T12249] team0: Port device team_slave_1 added [ 1295.495310][T12249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.495324][T12249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.495350][T12249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.496648][T12249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.496664][T12249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.496707][T12249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.640496][T12249] hsr_slave_0: entered promiscuous mode [ 1295.641322][T12249] hsr_slave_1: entered promiscuous mode [ 1295.641810][T12249] debugfs: 'hsr0' already exists in 'hsr' [ 1295.641829][T12249] Cannot create hsr debugfs directory [ 1295.787332][T12249] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.847738][T12249] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.943165][T12249] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.005408][T12249] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.460862][T11042] Bluetooth: hci4: command tx timeout [ 1296.804737][T12315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1296.889062][T12249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1296.900141][T12249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1296.915514][T12249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1296.928223][T12249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1296.929220][T12249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1296.949945][T12249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1296.958134][T12249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1296.971226][T12249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1297.038460][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9176'. [ 1297.103959][T12362] netlink: 67 bytes leftover after parsing attributes in process `syz.1.9178'. [ 1297.109280][T12369] netlink: 67 bytes leftover after parsing attributes in process `syz.1.9178'. [ 1297.158646][T12370] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1297.187802][T12369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1297.353410][T12362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1297.440126][T12385] netlink: 'syz.1.9182': attribute type 8 has an invalid length. [ 1297.619620][T12249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.635211][T12390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1297.736316][T12249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.798238][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.798352][ T6358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.852184][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.852278][ T6358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.008083][T12398] FAULT_INJECTION: forcing a failure. [ 1298.008083][T12398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.008120][T12398] CPU: 0 UID: 0 PID: 12398 Comm: syz.3.9185 Not tainted syzkaller #0 PREEMPT(full) [ 1298.008146][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1298.008161][T12398] Call Trace: [ 1298.008170][T12398] [ 1298.008181][T12398] dump_stack_lvl+0xe8/0x150 [ 1298.008220][T12398] should_fail_ex+0x410/0x560 [ 1298.008259][T12398] _copy_from_user+0x2d/0xb0 [ 1298.008291][T12398] generic_map_update_batch+0x6b1/0xae0 [ 1298.008341][T12398] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1298.008378][T12398] ? __fget_files+0x2a/0x420 [ 1298.008420][T12398] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1298.008455][T12398] bpf_map_do_batch+0x391/0x630 [ 1298.008491][T12398] __sys_bpf+0xbe5/0xd90 [ 1298.008528][T12398] ? __pfx___sys_bpf+0x10/0x10 [ 1298.008568][T12398] ? __fget_files+0x2a/0x420 [ 1298.008621][T12398] ? ksys_write+0x242/0x270 [ 1298.008659][T12398] ? __pfx_ksys_write+0x10/0x10 [ 1298.008701][T12398] __x64_sys_bpf+0xba/0xd0 [ 1298.008730][T12398] do_syscall_64+0x166/0x520 [ 1298.008760][T12398] ? trace_irq_disable+0x3b/0x140 [ 1298.008783][T12398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.008808][T12398] ? clear_bhb_loop+0x70/0xc0 [ 1298.008836][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.008859][T12398] RIP: 0033:0x7f0b04b9e159 [ 1298.008880][T12398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.008907][T12398] RSP: 002b:00007f0b05ad3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1298.008934][T12398] RAX: ffffffffffffffda RBX: 00007f0b04e26090 RCX: 00007f0b04b9e159 [ 1298.008952][T12398] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1298.008967][T12398] RBP: 00007f0b05ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.008982][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1298.009008][T12398] R13: 00007f0b04e26128 R14: 00007f0b04e26090 R15: 00007ffd2e516328 [ 1298.009046][T12398] [ 1298.544667][T11042] Bluetooth: hci4: command tx timeout [ 1298.971599][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9190'. [ 1298.976244][T12436] netlink: 'syz.4.9190': attribute type 13 has an invalid length. [ 1298.976265][T12436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9190'. [ 1299.050762][T12435] lo: entered allmulticast mode [ 1299.115720][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9190'. [ 1299.128183][T12435] lo: left allmulticast mode [ 1299.473827][T12455] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9196'. [ 1299.486760][T12445] syzkaller0: entered promiscuous mode [ 1299.486811][T12445] syzkaller0: entered allmulticast mode [ 1299.677763][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9196'. [ 1300.186323][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9199'. [ 1300.239158][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1300.488418][T12480] FAULT_INJECTION: forcing a failure. [ 1300.488418][T12480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.488455][T12480] CPU: 0 UID: 0 PID: 12480 Comm: syz.3.9200 Not tainted syzkaller #0 PREEMPT(full) [ 1300.488481][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1300.488495][T12480] Call Trace: [ 1300.488505][T12480] [ 1300.488515][T12480] dump_stack_lvl+0xe8/0x150 [ 1300.488555][T12480] should_fail_ex+0x410/0x560 [ 1300.488591][T12480] _copy_from_user+0x2d/0xb0 [ 1300.488623][T12480] generic_map_update_batch+0x662/0xae0 [ 1300.488672][T12480] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1300.488706][T12480] ? __fget_files+0x2a/0x420 [ 1300.488747][T12480] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1300.488779][T12480] bpf_map_do_batch+0x391/0x630 [ 1300.488815][T12480] __sys_bpf+0xbe5/0xd90 [ 1300.488851][T12480] ? __pfx___sys_bpf+0x10/0x10 [ 1300.488891][T12480] ? __fget_files+0x2a/0x420 [ 1300.488944][T12480] ? ksys_write+0x242/0x270 [ 1300.488982][T12480] ? __pfx_ksys_write+0x10/0x10 [ 1300.489034][T12480] __x64_sys_bpf+0xba/0xd0 [ 1300.489076][T12480] do_syscall_64+0x166/0x520 [ 1300.489104][T12480] ? trace_irq_disable+0x3b/0x140 [ 1300.489146][T12480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.489170][T12480] ? clear_bhb_loop+0x70/0xc0 [ 1300.489207][T12480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.489230][T12480] RIP: 0033:0x7f0b04b9e159 [ 1300.489252][T12480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.489273][T12480] RSP: 002b:00007f0b05ad3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1300.489298][T12480] RAX: ffffffffffffffda RBX: 00007f0b04e26090 RCX: 00007f0b04b9e159 [ 1300.489316][T12480] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1300.489331][T12480] RBP: 00007f0b05ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.489346][T12480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1300.489361][T12480] R13: 00007f0b04e26128 R14: 00007f0b04e26090 R15: 00007ffd2e516328 [ 1300.489399][T12480] [ 1300.625028][T11042] Bluetooth: hci4: command tx timeout [ 1301.162434][T12499] netlink: 'syz.4.9203': attribute type 8 has an invalid length. [ 1301.162455][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9203'. [ 1303.456314][T12249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.649023][T12249] veth0_vlan: entered promiscuous mode [ 1303.696064][T12505] ip_tables: iptables: counters copy to user failed while replacing table [ 1303.712088][T12506] ip6gretap0: entered promiscuous mode [ 1303.712281][T12506] macsec1: entered allmulticast mode [ 1303.712298][T12506] ip6gretap0: entered allmulticast mode [ 1303.782965][T12249] veth1_vlan: entered promiscuous mode [ 1304.036164][T12249] veth0_macvtap: entered promiscuous mode [ 1304.079037][T12249] veth1_macvtap: entered promiscuous mode [ 1304.111121][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9207'. [ 1304.256363][T12249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.256421][T12516] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9208'. [ 1304.309092][T12249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.527834][T12519] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1304.602387][ T4598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.602527][ T4598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.602563][ T4598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.602597][ T4598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.708756][T12524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9211'. [ 1304.708798][T12524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9211'. [ 1305.057765][ T4619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.057786][ T4619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.224331][T12540] netlink: 'syz.1.9212': attribute type 4 has an invalid length. [ 1305.248848][ T4598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.248869][ T4598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.335160][T12543] netlink: 'syz.1.9212': attribute type 4 has an invalid length. [ 1305.599863][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9216'. [ 1306.097331][T12579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1306.547926][T12603] xt_socket: unknown flags 0x4c [ 1306.556411][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9229'. [ 1306.556858][T12603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9229'. [ 1306.587158][T12604] ip6gretap0: entered promiscuous mode [ 1306.587324][T12604] macsec1: entered allmulticast mode [ 1306.587339][T12604] ip6gretap0: entered allmulticast mode [ 1306.662512][T12603] 0: reclassify loop, rule prio 0, protocol 03 [ 1307.029621][T12612] block nbd0: reconnected socket [ 1307.376505][T12619] netlink: 'syz.0.9231': attribute type 2 has an invalid length. [ 1307.376531][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1307.497380][ T4598] bridge_slave_0: left allmulticast mode [ 1307.497599][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.653874][T11042] block nbd0: Receive control failed (result -32) [ 1307.993672][T12650] ip6t_REJECT: ECHOREPLY is not supported [ 1308.292415][ T4598] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1308.576084][ T4598] bond0 (unregistering): Released all slaves [ 1308.585485][ T4598] bond1 (unregistering): Released all slaves [ 1308.600905][ T4598] bond2 (unregistering): Released all slaves [ 1308.610169][ T4598] bond3 (unregistering): Released all slaves [ 1308.647470][ T4598] bond4 (unregistering): Released all slaves [ 1308.665332][ T4598] bond5 (unregistering): Released all slaves [ 1308.682185][ T4598] bond6 (unregistering): Released all slaves [ 1308.698912][ T4598] bond7 (unregistering): Released all slaves [ 1308.727424][ T4598] bond8 (unregistering): Released all slaves [ 1308.958371][ T4598] tipc: Left network mode [ 1308.986434][T12672] netlink: 'syz.2.9240': attribute type 28 has an invalid length. [ 1308.986454][T12672] netlink: 'syz.2.9240': attribute type 3 has an invalid length. [ 1308.986482][T12672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9240'. [ 1309.214824][T12674] bond1: entered promiscuous mode [ 1309.214848][T12674] bond1: entered allmulticast mode [ 1309.362007][ T4598] IPVS: stopping backup sync thread 6200 ... [ 1309.575398][T12683] Bluetooth: hci0: unsupported parameter 5134 [ 1309.575422][T12683] Bluetooth: hci0: unsupported parameter 8192 [ 1309.575436][T12683] Bluetooth: hci0: unsupported parameter 5134 [ 1309.575449][T12683] Bluetooth: hci0: unsupported parameter 8192 [ 1310.282322][T12709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9251'. [ 1310.422646][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9252'. [ 1310.599335][T12725] netlink: 'syz.1.9255': attribute type 1 has an invalid length. [ 1310.639207][T12714] 8021q: VLANs not supported on vxcan1 [ 1310.665553][T12730] netlink: 'syz.0.9257': attribute type 2 has an invalid length. [ 1310.665571][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9257'. [ 1310.747503][T12725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1310.881503][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9258'. [ 1310.903649][T12732] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1310.943320][T12732] bond5: (slave batadv2): making interface the new active one [ 1310.970144][T12732] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 1311.095512][T12737] bond5 (unregistering): (slave batadv2): Releasing active interface [ 1311.133573][T12737] bond5 (unregistering): Released all slaves [ 1311.465906][T12756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9259'. [ 1311.481093][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9259'. [ 1311.736511][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9262'. [ 1311.736538][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9262'. [ 1311.736565][T12767] netlink: 'syz.1.9262': attribute type 13 has an invalid length. [ 1311.736581][T12767] netlink: 'syz.1.9262': attribute type 12 has an invalid length. [ 1312.339252][T12781] netlink: 400 bytes leftover after parsing attributes in process `syz.2.9267'. [ 1312.428884][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9267'. [ 1312.635761][ T4598] hsr_slave_0: left promiscuous mode [ 1313.061893][T12817] netlink: 'syz.1.9273': attribute type 9 has an invalid length. [ 1313.532290][T12828] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1313.540977][T12831] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1313.541577][T12828] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1315.080838][ T4598] IPVS: stop unused estimator thread 0... [ 1315.325409][T12885] __nla_validate_parse: 4 callbacks suppressed [ 1315.325430][T12885] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9284'. [ 1315.627748][T12902] netlink: 'syz.3.9287': attribute type 1 has an invalid length. [ 1315.709966][T12910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9288'. [ 1316.345277][T12930] netlink: 'syz.1.9293': attribute type 1 has an invalid length. [ 1316.393308][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9293'. [ 1316.432982][T12919] x_tables: duplicate underflow at hook 2 [ 1316.533698][T12938] netlink: 'syz.4.9295': attribute type 1 has an invalid length. [ 1316.602039][T12930] bond5: entered promiscuous mode [ 1316.622334][T12930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1316.729206][T12934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1316.729640][T12934] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1316.729664][T12934] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1316.874789][T12934] bond5: (slave wireguard1): making interface the new active one [ 1316.874814][T12934] wireguard1: entered promiscuous mode [ 1316.907180][T12934] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 1316.959333][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9299'. [ 1317.183385][T12938] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1317.285916][T12942] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1317.491589][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9302'. [ 1317.891427][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.892275][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.085839][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9305'. [ 1319.152866][T13026] gre1: entered promiscuous mode [ 1320.101850][T13053] bridge1: entered promiscuous mode [ 1320.101875][T13053] bridge1: entered allmulticast mode [ 1320.425703][T13064] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9319'. [ 1320.554459][T13070] virt_wifi0: renamed from bridge0 [ 1320.587933][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.594562][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.595048][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.595436][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.629862][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.631007][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.631733][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.647069][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.647219][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.647354][T13070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1320.798185][T13078] netlink: 'syz.3.9324': attribute type 1 has an invalid length. [ 1320.857155][T13078] macvlan2: entered promiscuous mode [ 1320.857176][T13078] macvlan2: entered allmulticast mode [ 1320.859828][T13078] bond2: entered promiscuous mode [ 1320.883640][T13078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1320.925290][T13078] bond2: left promiscuous mode [ 1320.949452][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9323'. [ 1321.194550][T13085] syzkaller0: entered promiscuous mode [ 1321.194574][T13085] syzkaller0: entered allmulticast mode [ 1321.205213][T13085] netlink: 'syz.1.9325': attribute type 1 has an invalid length. [ 1321.585866][T23172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1321.612687][T23172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1321.614729][T23172] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1321.636944][T23172] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1321.638171][T23172] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1321.641259][T11042] [ 1321.657588][T11042] ====================================================== [ 1321.664628][T11042] WARNING: possible circular locking dependency detected [ 1321.671769][T11042] syzkaller #0 Not tainted [ 1321.676197][T11042] ------------------------------------------------------ [ 1321.683244][T11042] kworker/u9:0/11042 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1321.689508][T11042] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 1321.699987][T11042] [ 1321.699987][T11042] but task is already holding lock: [ 1321.707370][T11042] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1321.716785][T11042] [ 1321.716785][T11042] which lock already depends on the new lock. [ 1321.716785][T11042] [ 1321.727201][T11042] [ 1321.727201][T11042] the existing dependency chain (in reverse order) is: [ 1321.736237][T11042] [ 1321.736237][T11042] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1321.744270][T11042] down_write+0x96/0x200 [ 1321.749055][T11042] kernfs_add_one+0x41/0x6f0 [ 1321.754191][T11042] kernfs_create_dir_ns+0x1a1/0x230 [ 1321.759940][T11042] internal_create_group+0x440/0x1180 [ 1321.765843][T11042] cpuhp_invoke_callback+0x434/0x810 [ 1321.771711][T11042] cpuhp_issue_call+0x3f0/0x750 [ 1321.777110][T11042] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1321.783725][T11042] __cpuhp_setup_state+0x3f/0x60 [ 1321.789203][T11042] do_one_initcall+0x250/0x870 [ 1321.794505][T11042] do_initcall_level+0x10a/0x1a0 [ 1321.800021][T11042] do_initcalls+0x59/0xa0 [ 1321.804890][T11042] kernel_init_freeable+0x29d/0x3e0 [ 1321.810640][T11042] kernel_init+0x22/0x1d0 [ 1321.815499][T11042] ret_from_fork+0x514/0xb70 [ 1321.820624][T11042] ret_from_fork_asm+0x1a/0x30 [ 1321.825942][T11042] [ 1321.825942][T11042] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1321.833769][T11042] [ 1321.833769][T11042] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1321.841519][T11042] cpus_read_lock+0x42/0x160 [ 1321.846661][T11042] static_key_slow_inc+0x12/0x30 [ 1321.852151][T11042] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1321.858489][T11042] nbd_genl_foreach_sock+0x265/0x450 [ 1321.864319][T11042] nbd_genl_reconfigure+0xbbb/0x1040 [ 1321.870155][T11042] genl_family_rcv_msg_doit+0x233/0x340 [ 1321.876260][T11042] genl_rcv_msg+0x614/0x7a0 [ 1321.881307][T11042] netlink_rcv_skb+0x226/0x4a0 [ 1321.886623][T11042] genl_rcv+0x28/0x40 [ 1321.891144][T11042] netlink_unicast+0x7bd/0x940 [ 1321.896452][T11042] netlink_sendmsg+0x813/0xb40 [ 1321.901751][T11042] sock_sendmsg_nosec+0x13a/0x180 [ 1321.907319][T11042] ____sys_sendmsg+0x54e/0x850 [ 1321.912630][T11042] ___sys_sendmsg+0x2a5/0x360 [ 1321.917853][T11042] __x64_sys_sendmsg+0x1b1/0x290 [ 1321.923379][T11042] do_syscall_64+0x166/0x520 [ 1321.928512][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.934945][T11042] [ 1321.934945][T11042] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1321.942633][T11042] __mutex_lock+0x19d/0x1550 [ 1321.947779][T11042] nbd_queue_rq+0x373/0xff0 [ 1321.952833][T11042] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1321.958991][T11042] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1321.965952][T11042] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1321.972478][T11042] blk_mq_run_work_fn+0x16c/0x300 [ 1321.978043][T11042] process_scheduled_works+0xc3d/0x1630 [ 1321.984234][T11042] worker_thread+0xa47/0xfb0 [ 1321.989373][T11042] kthread+0x38b/0x480 [ 1321.993974][T11042] ret_from_fork+0x514/0xb70 [ 1321.999103][T11042] ret_from_fork_asm+0x1a/0x30 [ 1322.004460][T11042] [ 1322.004460][T11042] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1322.011719][T11042] __mutex_lock+0x19d/0x1550 [ 1322.016859][T11042] nbd_queue_rq+0xc1/0xff0 [ 1322.021821][T11042] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1322.027902][T11042] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1322.034783][T11042] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1322.041318][T11042] blk_mq_run_work_fn+0x16c/0x300 [ 1322.046886][T11042] process_scheduled_works+0xc3d/0x1630 [ 1322.052970][T11042] worker_thread+0xa47/0xfb0 [ 1322.058101][T11042] kthread+0x38b/0x480 [ 1322.062712][T11042] ret_from_fork+0x514/0xb70 [ 1322.067853][T11042] ret_from_fork_asm+0x1a/0x30 [ 1322.073199][T11042] [ 1322.073199][T11042] -> #4 (set->srcu){.+.+}-{0:0}: [ 1322.080333][T11042] __synchronize_srcu+0xc9/0x2f0 [ 1322.085805][T11042] elevator_switch+0x1e8/0x7b0 [ 1322.091172][T11042] elevator_change+0x2fa/0x480 [ 1322.096507][T11042] elevator_set_default+0x375/0x440 [ 1322.102238][T11042] blk_register_queue+0x3f3/0x4e0 [ 1322.107883][T11042] __add_disk+0x6b8/0xdb0 [ 1322.112797][T11042] add_disk_fwnode+0x100/0x3a0 [ 1322.118105][T11042] nbd_dev_add+0x733/0xb60 [ 1322.123058][T11042] nbd_init+0x168/0x1f0 [ 1322.127840][T11042] do_one_initcall+0x250/0x870 [ 1322.133151][T11042] do_initcall_level+0x10a/0x1a0 [ 1322.138632][T11042] do_initcalls+0x59/0xa0 [ 1322.143498][T11042] kernel_init_freeable+0x29d/0x3e0 [ 1322.149279][T11042] kernel_init+0x22/0x1d0 [ 1322.154137][T11042] ret_from_fork+0x514/0xb70 [ 1322.159303][T11042] ret_from_fork_asm+0x1a/0x30 [ 1322.164612][T11042] [ 1322.164612][T11042] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1322.172444][T11042] __mutex_lock+0x19d/0x1550 [ 1322.177573][T11042] elevator_change+0x1af/0x480 [ 1322.182880][T11042] elevator_set_none+0xb5/0x140 [ 1322.188273][T11042] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1322.194633][T11042] nbd_start_device+0x189/0xb30 [ 1322.200045][T11042] nbd_genl_connect+0x167d/0x1cd0 [ 1322.205593][T11042] genl_family_rcv_msg_doit+0x233/0x340 [ 1322.211682][T11042] genl_rcv_msg+0x614/0x7a0 [ 1322.216802][T11042] netlink_rcv_skb+0x226/0x4a0 [ 1322.222199][T11042] genl_rcv+0x28/0x40 [ 1322.226712][T11042] netlink_unicast+0x7bd/0x940 [ 1322.232032][T11042] netlink_sendmsg+0x813/0xb40 [ 1322.237328][T11042] sock_sendmsg_nosec+0x13a/0x180 [ 1322.242887][T11042] ____sys_sendmsg+0x54e/0x850 [ 1322.248184][T11042] ___sys_sendmsg+0x2a5/0x360 [ 1322.253402][T11042] __x64_sys_sendmsg+0x1b1/0x290 [ 1322.258888][T11042] do_syscall_64+0x166/0x520 [ 1322.264025][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.270455][T11042] [ 1322.270455][T11042] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1322.279085][T11042] blk_alloc_queue+0x544/0x690 [ 1322.284386][T11042] __blk_mq_alloc_disk+0x194/0x390 [ 1322.290038][T11042] nbd_dev_add+0x494/0xb60 [ 1322.295010][T11042] nbd_init+0x168/0x1f0 [ 1322.299715][T11042] do_one_initcall+0x250/0x870 [ 1322.305018][T11042] do_initcall_level+0x10a/0x1a0 [ 1322.310512][T11042] do_initcalls+0x59/0xa0 [ 1322.315383][T11042] kernel_init_freeable+0x29d/0x3e0 [ 1322.321124][T11042] kernel_init+0x22/0x1d0 [ 1322.325995][T11042] ret_from_fork+0x514/0xb70 [ 1322.331120][T11042] ret_from_fork_asm+0x1a/0x30 [ 1322.336432][T11042] [ 1322.336432][T11042] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1322.343661][T11042] fs_reclaim_acquire+0x71/0x100 [ 1322.349148][T11042] kmem_cache_alloc_noprof+0x5f/0x600 [ 1322.355104][T11042] __kernfs_iattrs+0xdd/0x380 [ 1322.360328][T11042] kernfs_iop_setattr+0xe6/0x3f0 [ 1322.365829][T11042] notify_change+0xbba/0xea0 [ 1322.370963][T11042] do_truncate+0x1c2/0x250 [ 1322.375935][T11042] path_openat+0x15b5/0x1d60 [ 1322.381071][T11042] do_file_open+0x23e/0x4a0 [ 1322.386116][T11042] do_sys_openat2+0x115/0x200 [ 1322.391328][T11042] __x64_sys_openat+0x138/0x170 [ 1322.396721][T11042] do_syscall_64+0x166/0x520 [ 1322.401846][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.408288][T11042] [ 1322.408288][T11042] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1322.416848][T11042] __lock_acquire+0x164c/0x2de0 [ 1322.422271][T11042] lock_acquire+0x115/0x350 [ 1322.427342][T11042] down_write+0x96/0x200 [ 1322.432128][T11042] kernfs_link_sibling+0x4c7/0x5a0 [ 1322.437777][T11042] kernfs_add_one+0x2db/0x6f0 [ 1322.442991][T11042] kernfs_create_dir_ns+0x1a1/0x230 [ 1322.448727][T11042] sysfs_create_dir_ns+0x12f/0x2a0 [ 1322.454391][T11042] kobject_add_internal+0x622/0xcd0 [ 1322.460233][T11042] kobject_add+0x163/0x240 [ 1322.465269][T11042] device_add+0x3fa/0xb80 [ 1322.470154][T11042] hci_conn_add_sysfs+0xd5/0x210 [ 1322.475680][T11042] hci_conn_complete_evt+0x8a8/0x1350 [ 1322.481630][T11042] hci_event_packet+0x6cd/0xf10 [ 1322.487007][T11042] hci_rx_work+0x3ee/0x1020 [ 1322.492063][T11042] process_scheduled_works+0xc3d/0x1630 [ 1322.498146][T11042] worker_thread+0xa47/0xfb0 [ 1322.503283][T11042] kthread+0x38b/0x480 [ 1322.507912][T11042] ret_from_fork+0x514/0xb70 [ 1322.513124][T11042] ret_from_fork_asm+0x1a/0x30 [ 1322.518450][T11042] [ 1322.518450][T11042] other info that might help us debug this: [ 1322.518450][T11042] [ 1322.528690][T11042] Chain exists of: [ 1322.528690][T11042] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1322.528690][T11042] [ 1322.543166][T11042] Possible unsafe locking scenario: [ 1322.543166][T11042] [ 1322.550667][T11042] CPU0 CPU1 [ 1322.556046][T11042] ---- ---- [ 1322.561449][T11042] lock(&root->kernfs_rwsem); [ 1322.566236][T11042] lock(cpuhp_state_mutex); [ 1322.573372][T11042] lock(&root->kernfs_rwsem); [ 1322.580665][T11042] lock(&root->kernfs_iattr_rwsem); [ 1322.585964][T11042] [ 1322.585964][T11042] *** DEADLOCK *** [ 1322.585964][T11042] [ 1322.594131][T11042] locks held by kworker/u9:0/11042: 4, last CPU#0: [ 1322.600645][T11042] #0: ffff888032c8c940 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1322.611645][T11042] #1: ffffc90004297c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1322.623688][T11042] #2: ffff8880839440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1322.633572][T11042] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1322.643435][T11042] [ 1322.643435][T11042] stack backtrace: [ 1322.649340][T11042] CPU: 0 UID: 0 PID: 11042 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1322.658909][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1322.668983][T11042] Workqueue: hci5 hci_rx_work [ 1322.673683][T11042] Call Trace: [ 1322.676970][T11042] [ 1322.679916][T11042] dump_stack_lvl+0xe8/0x150 [ 1322.684542][T11042] print_circular_bug+0x2e2/0x300 [ 1322.689585][T11042] check_noncircular+0x12f/0x150 [ 1322.694574][T11042] __lock_acquire+0x164c/0x2de0 [ 1322.699496][T11042] ? __lock_acquire+0x747/0x2de0 [ 1322.704446][T11042] lock_acquire+0x115/0x350 [ 1322.708961][T11042] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1322.714288][T11042] down_write+0x96/0x200 [ 1322.718582][T11042] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1322.723885][T11042] ? __pfx_down_write+0x10/0x10 [ 1322.728752][T11042] ? kernfs_root+0x1c/0x230 [ 1322.733269][T11042] ? kernfs_root+0x1c/0x230 [ 1322.737791][T11042] ? kernfs_root+0x1c/0x230 [ 1322.742309][T11042] ? kernfs_root+0x1ea/0x230 [ 1322.746941][T11042] kernfs_link_sibling+0x4c7/0x5a0 [ 1322.752071][T11042] kernfs_add_one+0x2db/0x6f0 [ 1322.756781][T11042] kernfs_create_dir_ns+0x1a1/0x230 [ 1322.762012][T11042] sysfs_create_dir_ns+0x12f/0x2a0 [ 1322.767155][T11042] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1322.772818][T11042] ? do_raw_spin_unlock+0xf5/0x200 [ 1322.777966][T11042] kobject_add_internal+0x622/0xcd0 [ 1322.783184][T11042] kobject_add+0x163/0x240 [ 1322.787621][T11042] ? __pfx_kobject_add+0x10/0x10 [ 1322.792575][T11042] ? get_device_parent+0x366/0x3a0 [ 1322.797705][T11042] device_add+0x3fa/0xb80 [ 1322.802045][T11042] hci_conn_add_sysfs+0xd5/0x210 [ 1322.807021][T11042] hci_conn_complete_evt+0x8a8/0x1350 [ 1322.812416][T11042] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1322.818411][T11042] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1322.824241][T11042] ? skb_pull_data+0xf0/0x200 [ 1322.828947][T11042] hci_event_packet+0x6cd/0xf10 [ 1322.833823][T11042] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1322.839637][T11042] ? __pfx_hci_event_packet+0x10/0x10 [ 1322.845031][T11042] ? audit_filter_rules+0x45f0/0x5d10 [ 1322.850424][T11042] ? hci_send_to_monitor+0xe2/0x590 [ 1322.855713][T11042] hci_rx_work+0x3ee/0x1020 [ 1322.860242][T11042] ? process_scheduled_works+0x97a/0x1630 [ 1322.865989][T11042] process_scheduled_works+0xc3d/0x1630 [ 1322.871607][T11042] ? __pfx_process_scheduled_works+0x10/0x10 [ 1322.877612][T11042] ? assign_work+0x3cf/0x5d0 [ 1322.882215][T11042] worker_thread+0xa47/0xfb0 [ 1322.886836][T11042] ? __kthread_parkme+0x71/0x1f0 [ 1322.891793][T11042] kthread+0x38b/0x480 [ 1322.895867][T11042] ? __pfx_worker_thread+0x10/0x10 [ 1322.900987][T11042] ? __pfx_kthread+0x10/0x10 [ 1322.905588][T11042] ret_from_fork+0x514/0xb70 [ 1322.910283][T11042] ? __pfx_ret_from_fork+0x10/0x10 [ 1322.915417][T11042] ? __switch_to+0xc89/0x1420 [ 1322.920144][T11042] ? __pfx_kthread+0x10/0x10 [ 1322.924748][T11042] ret_from_fork_asm+0x1a/0x30 [ 1322.929533][T11042] [ 1322.952448][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9328'. [ 1322.952505][T13097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9328'. [ 1323.277287][ T1207] tipc: Disabling bearer [ 1323.801987][T13095] bond0: (slave syz_tun): Releasing backup interface [ 1324.198033][ T6358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 1324.198071][ T6358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.245876][ T6358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 1324.245899][ T6358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.286971][ T6358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 1324.287625][ T6358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.325389][ T6358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 1324.325415][ T6358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.408174][ T6358] bridge_slave_1: left allmulticast mode [ 1324.408192][ T6358] bridge_slave_1: left promiscuous mode [ 1324.408315][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.417662][ T6358] bridge_slave_0: left allmulticast mode [ 1324.417715][ T6358] bridge_slave_0: left promiscuous mode [ 1324.418073][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.524727][ T6358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.526376][ T6358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.527396][ T6358] bond0 (unregistering): Released all slaves [ 1324.529522][ T6358] bond1 (unregistering): Released all slaves [ 1324.569490][ T6358] bond2 (unregistering): Released all slaves [ 1324.945622][ T6358] hsr_slave_0: left promiscuous mode [ 1324.948673][ T6358] hsr_slave_1: left promiscuous mode [ 1324.949128][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1324.949142][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.949589][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1324.949613][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.980395][ T6358] veth1_macvtap: left promiscuous mode [ 1324.980480][ T6358] veth0_macvtap: left promiscuous mode [ 1324.980653][ T6358] veth1_vlan: left promiscuous mode [ 1324.980766][ T6358] veth0_vlan: left promiscuous mode [ 1325.133270][ T6358] team0 (unregistering): Port device team_slave_1 removed [ 1325.137087][ T6358] team0 (unregistering): Port device team_slave_0 removed [ 1325.209520][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1325.564475][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1325.832589][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1326.125437][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3