last executing test programs: 12.596139842s ago: executing program 3 (id=6440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80) connect$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x1}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="140000001000010000007c000000060a030400000000000000000a0000050900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f304fdd672bad09dfb040000000000000009f9580dabf95ddc91967c200800024000000000080001004c4f470009000200730500320000000004000580140000001100010000000000000000000100000a", @ANYBLOB="4f7e0dac568300"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg$inet6(r7, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="bb2b4e2bfc", 0x5}], 0x1}}], 0x1, 0x40000) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r8, 0xec) accept4$bt_l2cap(r8, 0x0, 0x0, 0x800) 12.236087333s ago: executing program 3 (id=6443): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="110000001e00"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12.216839323s ago: executing program 3 (id=6444): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x3f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x41, 0x1, 0x3}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) (async) pread64(r8, 0x0, 0x0, 0x2) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003900010325bd6feefcffffff06000000"], 0x14}}, 0x40800) unshare(0x2020600) r9 = socket(0x1d, 0x80805, 0x7bff) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0904000000000000000002000002600004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000020001800e000100636f6e6e6c696d69740000000c00028008000140000000040900010073797a30000000000900020073797a3200"], 0xb4}}, 0x4080) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="bd70000400"/20, @ANYRES32=0x0, @ANYBLOB="0005000000800000300012800b00010062726964676500002000028005002d00010000000c001e0002000000000000000500290001000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000180)={r13, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000003c0)={r13, 0x200, 0xb1a9, 0x3ff}, 0x10) 5.074927787s ago: executing program 2 (id=6517): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newaddrlabel={0x24, 0x48, 0x10, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x18, 0x0, r1, 0xb}, [@IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x24}}, 0x24048044) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2000cc0, r5}, 0x38) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000104", @ANYRES32=r13], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r18], 0x1c}}, 0x840) r19 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_ife={0xe4, 0x1, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x10001}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0x800, 0x4, 0x1, 0x2541}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0xf9d789ddd9ad5042, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x5, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r20}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r21}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20040082) 4.913774583s ago: executing program 1 (id=6520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x9, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x38}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, 0x26, 0x109, 0x870bd22, 0xfffffffa, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0xd}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf2505000000280001800d0001007564703a73797a32000000001400028008000206000000000800010019000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) 4.521937362s ago: executing program 0 (id=6525): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r0, 0x8) (async) listen(r0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x0) 4.459713938s ago: executing program 0 (id=6526): r0 = socket$key(0xf, 0x3, 0x2) shutdown(r0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000000)={{r0}, "ddc4963094fcd42a65dd63874dcfcc4fb5b8e9902170aaf48a4c7e7a3452c3556b90bbc72055aad824779159ecdedbe2445805fee4b11d97f08a7e9d1564979c63f13aedd07758ef9f51a1dafd5978afcfc88ecae070ccf4c5f36c3d606078cee9cf9081c4f8c73e46db7b98c340e8cc28fa6fd8481ea5e13b6ef2842808783f89e0d28e0488f2f5eb3255d2b9ef49efcde61908f454ab237c78fe0a4ed18ba4b958e7b001415cfae05f87beb41a51512a89a5a84f1d8f73530b27612a0bf33bf9ca774dff0dc50898a923bdddfe974e4b0e50e43647bf7383e7a4dc2e4d5b9fa13cdfba16cf2c77db3fb14afdc606ce4b0978a22797ad44131a0b220210a3239b4a32c51aeadb7d369659ff7e8bef7d42af6f75a49f76ecfa42d36cf2657fef48b1bf930bdf361463d8d489eb22276174236612b0c20ab245426c4e31866aed38e9b15c4c38b533d1a3075639052d54f135984321cea44148c84f14b1770bdb252dd9d8087c7deefebeab36006caf65187947b3198b8cf9e4d73cce49a2d79a6d8fcede61c42450cf6a0fbcb46c747b5ea8274554f78ee21fe711b53907658e515605afb61d105467cf34d01bd19a48c2a202075e939180aa6f0426bcd5f8f71e6294e7b7793f1464e0f3e18193bc16a39326fe4f5058ad04da993e4b78d22ffccd2af1afaeb1ee743dcf330917b62377a5206916bcccf537dbd69bb7e897596bee8a8ad257c105b2cfc983e25ea610617d96e52159ddde8ff3548744d992f01f3b7be3903b5c6907c90bef650dd08f7df40c21c23e0d275556704586e08b37da74bc5777b930d3e98366607568e97440be4e7ceee1d4564fb727355d01ac0a1888662d3ff5f90a1fab4f9de37ec7c1930ebefb48b270083a7c39df89c3c11af6d4406709c363b071753128ac25841cf3728db38f7e5b15da4d0725204b08d76d9895f8bcace72e34c1c20e0fb1b63556e021e5208211d547d30d953194a083175323c60025d1d75c2508c767a5a121f18d3bdd055d5a7a8257641beafad345f676212a86424544df59ad532d94679f1515d61f465bd22d6772481d0594bc707c5e5521aa73b7ad54bf9a8ab50839c1e21097daa862ca1510d931f38fd5999fdad9cb95f2e7617687b3b03285dc27defe7020b12b4faedf50aca6393cc1ac71cb5daf22f1efb5e86706a16d0b8cafd7405217e3ee25fd43eef5a66870198b85bf72846966ca5e0beda8b7a5c04d7feeba88fd0accb5e2f34df2184102636d107353a2c9db7ec7d3e10f062502b025363d5ce6f0291475a9f3dec463ae1712bc05a4cfdaeb45b12db8e2a4412b4da0fa0c06dbb6c661ee2ff684d573861b8ddb6230b829619e700f94f30a0d02e0fab8fc5e073d518c1fb5af98f4516a3e3f0fb1c06c9ca12aae2ae4921418885e7531ed1ebb76211525642bf10ee75a9323b9f61ac58c3c56af39fd9b4363ef9fdd7f127e66b3b53cf4621c59e55660aeff582477f84f53e7772ff503bbb3874beb3d3300d71ae64b94665121f1fbaa580b23ab2961d060dc3e231d20e0af51f2e42416ecc6c5dfbde5edc43da15955a2e51ac6cbddea3aaf2ab013b77988c71729ec035657a6c244a8edfe4130fc7e533d9f29366c8e46291eeabc58e17e4fd2f3eb047f746407e8a61c2a51548c058ee800aaf9b35daa59e75f2d593e3acb988c537b5321bdbbc09c01e5e0170143d758b88372331bacbf6b0edb4621b9f14ddd21ea202c01dcd2a6ab8ccdd394d1c3faf08d3dc61000b53d902be1c0a177ee5b32823e73fc1bfd3f8978ecb835649136e3ca8316772308435926edff1e9911c87a9a1700e50e4e2cf70d0b3174f88f23f5d2364467d98614508824214cfb01d0f1e65f55fdacae61f9875a1fa5ad5a90e2b3542a5e5d2b8f74bfff741f9012f820398248a82b320aa595653ee5440e6260836c0d7138966a39ac5ec757618f64c82b5da6854d05c43b8a44ab085e60b703c6ceec4a8d24ba30a1af74b6d8a6313c0f49e797ddf4086f9763921e3ffb44be48b3a26554bdd00d23ccbe6019b5652953c2dda183a89dd555d4c2af53571d4cc500bd878719cc8aaa9c85d84ec2c61341807dffd18fb2b800f388231d5f5d50748cea0780a3a588bb92f2d644f6f9384c732eef24765f306ff0446eb88aab60d751195f42cc2af86b1c2de383048c43e9a639dcd912383addfb61853926ed2baa534162837f5ec1eb17183355f2481f53da7396f4f83cc3e87c768b8b3b1081b153fcf7285ad9468c9b72a804238c7e016ecb4c738290bb65cee6cfb2b3ccef3bfe0e84fedb6b0741d9c92d84218d75dee920c3ad2cf8879291b5270661e8894023acfa6dc434ba3e45f83254499eea049ee9d296218b0c5292aa1f0ee3c9dd65711947731c1826907713e410241f5bab0e79812339aa954ac5251403ffd02bf430ad1751ae58b08dce5c89c67d4420a21da67fcb3007cbcbda99042b8c61f049ad0ec328f0796f11e271d7f5104a61d0e9f1f2ef26c0cfd90f1ff8642df6a432ffd1d8490bd68c89ad2b100644dd27b4f90ed420dfce0fd8821e70bbdbbd0fb61dc1e59c44201381feb553d21648d74bd6541d342a2aea8ebfabe9f750e3d55d1aea744b318868a5a81dee7ae66e92c0254f17f468e3513344d0d7393a07560117e6ee55b7dbb6a965ed80e07a2e67073be41dd32bd27913724ec1bda71660ac2351f94ac17c81acb4deb129d753cfe8952159a8cfbebb145eeaa68de42c513f2efc46fd26964a0bc7b13a310704035fad19457a7ec1ae8bce5c57f27384a2c7b97fb1188e7356f3121d87a467c7fc889ab6fb1c16e9e2f538d6baea7d800aee8e6833a48661a87a409072aa5dc871393144ecb8315f11d2a400b0d33acf9315724f45afc034e49b987038adca5649670fa15480e6e12b604c5d7e672490a327718096edec6978ac5e5b6d3382effe8f341d92754efd20060921d2b32f67bc6336ddd5c0d9b2e57d8195f0e0f0882f498b090feaab62f759e917d678254746e3d98491e41f604e6e602753dbc67ef1fc3af4c0008df1b8b20bea26a7cda5d8ba489d689d31ecbe902ba6a3b405c76a3a1fba45f1868565fd223f6aec3a590522e58c4ab382164a578706efc919632dc00a7b6fc88ee2fb19f19664eefef63f026e321820e686028754fbe1797fe9638ce87c2dde111605e8a93a23e98df00820359424bf51d02827ee6b2a04886784a8d760ff552f92b43b245f9f55743a2ee25379b808d057f088e68811d5f2957aa18ef3727f59557fa9c1ac73377ef54a7a1426f302d8976ff9bdd623fcab4432c1cdf14cc7f5b73452466286f9947239ab9ef84682eebe0f0377e017e2fe9137a55528cdfc81a98cf59c79fa1dd795ba2f1a63531ac037eca584fa1e1a564dfc3ff2aea470b22e39d18cd1e32f99d5340ebd20910420a073b7675ebd3defa5f1af0f66d193c81c7b7d3c159df498db2484249406777aef2a0e1b11b9515bcd192a71fc81b297d4498e275e4029d1706445a6f9d027a4448b60067276df1c65fd7ae68c0543f35f9975d616b98990e09587dde1c6ef5b92c2b9c65a63fb3c5cd99e428e3df37e0ce4861294f80f30daa6b3a41e5e25eb7a9d7bed5f91a6597799dbfc99f336c97ee3bee43d7b855a955c33213f0c01f2af4991c74851dbff7a7ee5310f4309ebbb8ca7d078c0a17cb533c12a0096d3289d3175e3b80ce4c206ac6af08ab078e2ff91b30328b351b191a6a9f49bd78d3065442466d427c47421fcc9d16fe339fceb983802026142abf9746ec0899c91d92bdb972cfa04651f9765682b5095df0241a77cd83912eda5ab08288de427aa46ad9afc132df68e7dc724af8e337eb1d972481425f189df99a1b1f3af03e1a013e642a9b67b3a07a8c26d9f3a66f95d195df7964b2d194485f52046184f293730b1f0c41c7acbbe50fb1ab54123d24d74c08fe5f931479e54427ebe2a8c42c00ac8646c8d025e12735e9ab12e14e7ec07e7938f11514d8f9c997a080e14b9d9bccc0637bac6b7fb6ebe2244af4f1e1d17f897f2cceb31decc079ab37a55cf94d914e37a12fa7d4908015e0b222a55c665dcd956d4820d801ef0e9ffe3a89381d0d288773c15fea6e62b33349d671a30e3b00f05d0d90ca6babf9c11f0c471bcd06ce5560e26fe0d87debb42600c5091490e7d21f9b3f499d75843046072d3849e11441f5df01c107edd515e505ae0a853d2a336760d4bcd2437f73f13e14e3fe8c517cc0e440bdf2c95e1a3a1547494cf4cb8cf7b9aaad4dddcd02bc0cb6b1afd8c145ef5086b08e976a42face9e2f154ab2e2cdab96e639a757f3f49479a4d3c9fceaaf6b282a26b6e6cf0bbac3fda9453578bcace2b2f82d7a341aaff3b8b319348990188306af59a1461941358ac385542dc4e734f48db03450026753e79b0dab25e4c2fe66d3ba5a5dc42b8494da1be9af60f0b0aae23afb50229804f41400358c6b6652967f8b8cce599d7de5d00b3906cb5b79a583c435e5574aa680de02c41d64e22b50b2038a4cd2133ce5d785d14b5cfcec77bc3ba9fe643f6df792f7b8361d90698b69f84c3338f11eab5842fc448481042cea2258645f928e8110e98f6090b9ed2bfef2101c8aef71b4b2a81fd1acf7086b6d9a104a12d3de54ebfaae4e5ca7f00ca6b4245fc7b56ab6e5ca508ed9807f510b3f29f3114d394299feea8415ad048eb2bbf250e72c7f974bf84b3f49c80921c441c611cf39d4c52c0d7fd0e0705d5d4f1f077dda8a45c54e8282993c61bccb55f16e02cb0be4b885d291a5e5619329f43f5b88723f9c2b3393fbfab9093ce3ab0ba64d06984785316052a28f86d1d7d0cbd60e417106d5728d4936a1703f5c60172c0daf952b19b2a07eb4b326db308165e880ea492c78005781f0ec17f018112bbec1f23f0c7a8715bd827b04c18d07d21c6c11099bd455608d158e3e786b6a78883a6db2293ba880ca7015e46b729fad55a24ad1458ccc11d9ec7e317458c7e8b32f28d20b3ecb70fd80c41ce7d0e9495e364ae7dcf2e5d3dccdd99be18d722af47a56f4eda497fa1c465ddb51774ed0550ef8cf57ce8fb43241f4fa59e6c2322fe38efc107e239d751c238a760beb126c0037068311b9f79a678a8b2d9b2b0c21b37a914be5ae1fc871e9c3223b62c04468d1693af9f348c55f518c57dcc15c33401cfbe46ff5208eab55e133639a81caa207ca85f0ca76e91f5f7249ca055b0fe0ae3539c9eeb716e95f2476eeb6015d355ee51ffeaf16ce439be82b58e0c5c5eae83e30c775ab7d66b3da7ed3c27b8982fd76d3e69660c51e832bafa3b7f3324f04260dafe49aece87bd0c4f7f6e746e1c7eba7f936e19795cb9f89ef36d582bcfce162139f803f3ecea992366c5235853255c7e2b4accc5a7db084a40c9347b275b8ef7fea9e19ea6e33175b85be5e2d6b759045f7944ea0c762083ba99744a4a1874068a81f24d30be21648d8d25ebac2f0a0d316337f22032bf5e3960b6c8ed4156b6f0c6835e70f7a87c45f5f5bf968e54821bffe9e920269242d7a8cb365a61aabc4f8dddceafc661b0a88c3ad1a7c9c832058406fd8636f02f7b550a399ebdc8fb1fe3a47c98faccf88e90cd8ea6ae40a784c7150435b0bffdce014141841339da5d130ccb3a53f122f884c5e482a8469646b71a6367ff0ce29df68c8801b44fc1556e91354a55503807f8e0173b00afb703d2dc18e68bb3d250f12f4e676f2f56aa9b5964acc96c01b552f566cf61969626b11811"}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001000), 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000001040)=[@window={0x3, 0x200, 0x1}, @mss={0x2, 0xe}, @sack_perm], 0x3) ioctl$sock_proto_private(r1, 0x89e2, &(0x7f0000001080)="8ff399f85e7140c8a71fb9314803aee318c01779cde3f7c5413c4333eeafcdf3ce441b766b1085132e9261f72f10809ef43c9b2ee5699e02bcc34fc7d53d0630dcf9bbc24fdd93b892b2fc1d5565ced3cb8a73c169d0aa6bdcd5c8362e96afe1a1150daa06efe49a998a1c244ad47fa951ac0537bb6d9b88814f34a167") ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000001140)={0x5292, 0x20, '\x00', 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0]}) write$cgroup_subtree(r1, &(0x7f0000001180)={[{0x2b, 'net_cls'}]}, 0x9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000011c0)={0x8, 'veth1_to_team\x00', {'bridge0\x00'}, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001200)={'gre0\x00', 0x0}) writev(r1, &(0x7f0000002580)=[{&(0x7f0000001240)="2efa9e3365c5843db96f19", 0xb}, {&(0x7f0000001280)}, {&(0x7f00000012c0)="7efb0e11b1a4eab26e0ef1de88834f5d5a2842eeb9e119ea83566bfcd90a2530ef2e59fa867f38eb9a171dfcd503", 0x2e}, {&(0x7f0000001300)="e95691affc0a7878de82a5e47cff41f121b6d6bbc2680e7faa39cb9b0ca4ca6b69740671143dd54b0f419106e31e3c39f097274a6b7705620f2ff4cc384429a4c8dc84d7135388e9c81747a7d0c5e759f7a0a42743d336566714aadfe2bb3fbaf25cf9b737a3cc76020ea3cef6faf68ccf0f9769034f00bcdfaa1ef7fb13cdc619759f1042938b3d899a726b6f5a33aaab1ef508a32f02d41266ecb718c845b0794a728d60907c73f3c9ee4c2906b1a9b19a95f33f6acea532400c409781f96680825b459e9a3c372215b8797722cb2bc8a075a749987694cc2c54e2ba", 0xdd}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="485369722d1e8c9366287011da396e7621d8a65156e3510a763b3c320f6fbddb2092d17bcff8cbf0e4e21a420c07fee5c72692ccabef3093ae9e6c391166dd6195aa8761a0d29509003e6d43e8cb037e711ceacc18ee8dfbfc6fc790cdde2c41a311fdc79aaa7c55e9d65fa79597a0", 0x6f}, {&(0x7f0000002480)="673686d362eca499ddd6411d7283cbc6987d1603f976b4fc7289f5f215507e6b690c1e53006b2ea3139cd7ddcc8b8557d32b882c484e0c162971ab89d8a673c7649ee24cb55ae3e811245d44eaced23f4e987bf0434a130c07aa85e7da2775d7775f00619f08df74dc20d30f868394595fc9eaa61419fa0187b13369fada14cd8884c61b69c703395d5dacc78471cc0b0c90ce544b2f0536d05fbcd8dbdf177c88e2b8ae62370bc1f546ec4bf9c2aa2af80940615c80d2c31617fd8633800e64f44f4e675133e746088eb2a4", 0xcc}], 0x7) r3 = socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000002600)={0x10000001}) sendmsg$nl_route(r1, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)=@mpls_newroute={0x50, 0x18, 0x800, 0x70bd25, 0x25dfdbfc, {0x1c, 0x10, 0x0, 0x3, 0x0, 0x3, 0x37, 0x4, 0x2700}, [@RTA_VIA={0x14, 0x12, {0x3d, "db0aab78f1d1059644da33cfbac2"}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7f}, @RTA_DST={0x8, 0x1, {0x4, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000002780)={'veth1\x00', 0x1000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000027c0)={0x7ff, 0x7ff, 0x7}, 0x8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002840), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000003ac0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003a80)={&(0x7f0000002880)={0x11f0, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1014, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "31ce19d6b5a16d0e6719bf33a8a623e65251f76751f340dfcd934ede3e3b3418f074bb5583e6ee6a833d2e46ea0059f5d1429005c3dcbee46434537946d14efabce183c875182c0fe94ba857185ad540f54838fb37ba4613e9c914cc3c90685c3306f2dab3e777047728d9c2cd067b1ec6d90a72e2d98adc7c67d7062861ee411c99532642932d4c2cc9e1084eaee1d4e5436f2d6b41a652e49f781c7aa7656b935f37fcf03e757e1367a54840e30cac7b70540c16ba7e1465993de704ba266c59945372c5950619de034f9addefaa8bb5af3f9397b1161110e3b9fc682cc933cf84078ab5ad7f4630380eeb74a34a7d3c104c4a41a8cf32f6d046bf6cc11a8c177fbdabee98901f6ba896fe61578928b16594ba8c3fc04bbfa56a08a2d8030db90bd8447c60df7e19af7d59899e112e0d0287e74a8f31ad0825c6fed329552bf9cb297b228da31a20ec94527409547ea75985bf5822eb9b47bc527ce5f5ace8cb1ab060379815bd76fcef617459836d4ff8bcfa9bdcc7a234f6792e9e6ceee74f25074f90f3a1f2c8c027d6f2367937e80ecd4ee1ceb2b25c07ca37e419f02d995785375f2dac05fea4bdb5846aacc849d03b41a768304783aaab7f7b109dcf8d7ca7a4bf4cc31f87cedf5320ebf3d8ae5b79a2b542f090ab4ed70d3867c1e1f43894995fc21fdf13cd5dffc2ccdfb48eaaa1367ab12c8d8baf8d4be30724b94a98f39dcd7bf99be7590de57c111775822c988b2d96a9886275b7305dbd070297e5406df5be38277cd955e7709d9bc720fed43acaffe6ec94fbe3bf4786095d644047a883fc779dff77431fc62c598ee016071d6e3e3c339eef419f419e5f854dc1303b61c53052b507effa2308dcff3ac28201537777e250c4da2e9da87273e20a4e40e08a464ae0623d642ff862c029df2bcb2b4ed805271b396da8403035186cd742670ddd9cfd055ee292b959e575d253bdf2a64195ce1371fa45ecc6e0cf3caaee291e6da7705d6d7886f72e64a898ee897d492840865fd408b50f2d10720182bb35e38f1d5a8c5725bb193ca7256366ffda0615037e8bead7a728377213c5a69174f02f40f530f7ce2eefb39f2a9ea50a584c8f5f34244111a0a37e710ad59f5d2134af888cb21095200849bcb1d778d71f0cd0480b36d6be1339d16a4b27888ae74a451625a2e658629204466db18a8951532f6d6e4537afe1e0b8700e9dc2f5b5fe5da7dc34eda2f7cbc710ebe27cbd7b2110eff81f1092d22716960a1206fe6232f59192ce1e64cdaed7807669f298d012384f6fa760118d84235b8c535b4d58cf69f9f2bb6ead76fdbfd78f9e2b2f6552a825584f8143d83ea1250026328a560763b792be75e554c85a16d98c3646cbf1c1a19de98b0ce574df7d89b0e87f7d1e3cf000ad36c63e2f46161f3f4f6389e795ec2424c43b3eab47d5ffab9bc52d860b13a83c406f4254f081434f074efaa437b3eba0af73decbbe411cd14264561c6c172d137861fd947b2ccd837755a011c55bd663c048fde1e93df54670d89a3eebe3166936988af3ee5f15ed5d033b13d8d0c5b2edc95f864c4ede604f58044bee16c67b2bb4c0f8563a9da729f08c5f87c01c94654b5fffcd5ff62c4f727bb3498dc94d06802f6eee3694de4dd1fe481f898c758d65ebd70c3cc0be12759448b037c7b2c7263de71304729371c98c940207e8335aaf4cd5820d99c0da8df596a55e2c474aa54cb43ddbe782288501cdeab37c6ced128ec63c3c2027cd17d1113ba203da4dba044835095db47b13cd5524630c3a1bde076e655f82f682b771678392f1820756f59891bca752698d6c6e1cda271937865b0835c0bdee3d306d674ba7105819356b0c2f67da0b5bbfad7e5cf276021b2d712aa4ed2d4f3ead38302e1fe82d897b6239890fa05b464bdfaf426a6e0040ddc1c2660224bc7ed2f36a53cd01bc811bb8132676ec836aa7a494ab223b078dcb573e6960103d044a243ce713732c2a8553a9bc7f366f036e7e4bfb55c49f0c1aba01d93a5e1d69341c435e442c72cef0f7ef1d7aed4a4764c8c4b51e7dfe61a807f65821a2348927c7ea3bdf3bd6d5527a14e66eef157d55ae06869d7d3dd91dcc634b48eeee808ab8f75e7d829ad1bbc16546b3a613c09e2a0961ab4964ebdb3f27a3c15cb801d3e3364f161e7ae792dbc746f4feae26e809198cdce273c6e09597bd91e3dadcbf94cf26ae989cff8b4eb61f0e4df43408212e08e9909c64ffaa4a8ab817c28ad8deea6f5da0acc9595cb841c42d7db3c794ce1c5244ad69c727a90f88ba3c2173d2eac3eaa6af6f8332b244a9512b0a78762a1d3e6eb1305fe7775542482fe7c1c311abd836b3698a5fd36b36e38792a55bea97bd77337527663de6b1c6a7489dad6a2e11befa38970ea960ee27bc20a448f41424f71a3c2d76433efbdb3da24cafb7db7c9aa8b322a05d31f6c8cb2516864fab5873a02135514873dd9a3e87f908f8934feb84bd098cba99df263bc07ed3d781ebf30f00bc92cda10671b88854e6da41285d108a29c2522c1655ce828e68e63e3749792a34675ed4dfb5d83b1b7eaf78b9232d181394d273a5130b60de8c7f83a31b85ae8e518bf23f361a0b051a5dd10cc4de566847e053e76c93d6572e024d7b97bc8bd0c8c117c4bbb034242f18610ed54b045e60b866b7db23c98de2eec4ea04dd35cb8c677201988f5c77e0c2d12e9788e69b6c17de2f4ea3ee953f200322db52e1dab504c199862234cbd68a0980eb00afd861ef4c870d0cf2274defd49d12ffd8f95974ab84aba58e130f9bc215e17836f5419cba2b7e46e547e05ad9168327740a610abe4133cd154a526e621e859d2675de0dc8aa4c9ead0645044d57eff89f780b65f4f8fc9070dcc2321cad5ec100f8acaf478f50b91c51199bf9bf27bfb8921f1b74ce4bdff54978a4c5790e1fcba4484eccc3f5332eea21044df6f6fd4ae577e01b6193949618d6ebfc053eed406ff4983f9853f6b8350f7b081a70b0b99690eba2b09f6e66b98e7e196cf57f4e66980eb61573e1983e3ebbf443819c2b99f61d4a4a92b7e35e5d099d5d8703698482ab76bff6cc987ea6e9ac62cafb8791e6f6d0f5f2d87ccd80af7ea4cfa4ac3d92f7c8ee1739e9c999f2dc4d2e54c8d682717807c32e80c41111da7a4d82820aac9e1efdb0b51e053d2cda31c611d81d6c96df025a6607a8588c3310caedb2d4decd40a1c9c6737134ea2cda52fac58cb2c5bf8e52943c5a7074160c52288fad216b541bb41c34b8d1d65613c79aee763ceaaa22cdf305cc08f4179368dae259ef51113c9970f67b9823fc381a2f551dedbb2b67027d2c37e3b554397ab407d69f11bf419d54136af057d6ef153ea9d33d969eb051db4b9e1051a4662afbd97ce8bc01f87e21fdcfa0ccb662e620b4b6c56cee6beeaefd17eeb675187199b0c06c69c35e55f2966fdde0acb9e33592ba1074ebacda01d2b3db77f670412164ce7139de3d88c930abcfcd2a15605a7574feaabb839f4b5d18e2fb00b29932b3288fe829532b8cbc63b3d6fcde58834e0e721ea0b68d0c2cfec70f5b72b9adac45344ac62da649fc47c95cae0e62abc768d89f66c7c3fe9149fb3e6a17da01d3267cff4ccc9b44bb8a4a4412290b2b22e922cdf0ffc14230435494ec378cfd8f3013f6152968b23ae527e20a9bbbdce54363ae92440aafba48e9fb4181d640a4332ab5667705af83713b310d44311a2d123c9409bcd20d30d59c0c0534b0153756828525ef6a6d2d643a0a10cb26e38df9985c8a4cd8746b75736546c482b1c4fc049130e49e1c991f1c3bac6c16bc7f27a087cb57f3ec0a6c5bdae5eba624a586534f0d3ea39237e22fe4916621fbb7f4b914ea7eacef82be29e83a2095afc10d83b4bf2e65378a9cd4d73e824fc5cba946da32bb0b0eea196c513483e2c107d0b9e8de9683258ad3e87372256d403f923c0540b90622167cf647007db30ee95a5fa18e7d00adc82b3cd88b986ba2d85598f4060ffb1b09cd9b24bf5fac8d36ce8740caa0b5df476e702fc5b349651bfcc6f3f87090705a92715af3d5896eb1c310a44f5c0a7d20ee3216d5947c9bcd57f8ea44b80c410af4e5513d606cc1c74e7e91b0bdd906c602acf320cdcf9f8b73402ca7f2e26f393658529d79a5083c7d4aa99924bccef004986f9e61f3d7ceb2b830f93261ca547dd5707427201e921f3860c968ab0656fac432c9fb2a50f7e21cf2005e1aee314833d34abc62fb779fb0bb0c69a0a9be228bdf4b20404965867a7120aedd634f78524aefb01c00863812093888ada17ec8fa190a17b9747c1845a594b89856d9664adee4b446d10fb1cc1a42c88236cde64a215d61d82883e8041b242dc95ec6aa263c8a25cb1fcb673dc147329cb87ebda4980217e2fa9ca8ed27f758ade2de0f7dcba17e61f6ab50468d219eb98cb724ef2069558150d68962776b135a9cc61c2d9d2db0954fc24a5645b6dffdc7cc5438f87b488b8faaea1c6e90710009491a96992aadcb5fcf9f69565610a41d55611963ee59568a4c9f2bddeea3d37716da00daf174a2980bf9671fa8ffe2e53c8faee2b5a6414d31cfb3421c9b76dcdcf207c9667a1061a6796741e16acc47536c52449f709feff410fc3b07e4dd0b1e3188d1a3ced205466a18aa56becb77826bb4ffb6066c9b2727c0de612c74b80ed9a2e004b13b5efacf6753e3374ad038084adc4405affec6c8c5b798eeb805f5f7cf8541f3109a36069cc4498a6553fb9b8165bfdaeb97c81141707c534087d2ea0ed81ce5d8eacb5690cbbd7b7d38b5c683f0f10fbea088e755864627c1d009ad6bf09e1c646aab362af1f46cc122c802f4b83699536da45a3e5d54b2fa07956879f85727d6c15d322be70e46514777ba495c4d7412e65b969262c6e680ffb0c7bb0c3977c7074e5d437b39f820f46649f0d66e6e0f6fef03e3abd7b440ecd922e1eb422267099caf6064fff6a13cde89e5279636199cd4e7a60f34c4da067eabbef0be4479db6d3fb9955fc3b2cd10b7a1263297a5a1b7ff9a11dcb7891ff457dc2926d724ffba608789470c32cbb2d20b6cdb2f02334116c168b2fd267c186cdc9498a700279e7683d1213897762780d71ba5823c7620b078bd7326edb4cc4de57116dbda71cfdb1b7af92af4be50cc0419f0d659550211fb258356d1569e00a567a438e0ce515501974fc85d8fb653cec9517745e852b0514f1ebdcb88cdef3f7fde01b81ed5e21b868ff16a78c439007c0f3a2173694a5a223fbc283056f586eadaae6abd37a223b301807338249fe82562bac89e90b1d4af8f9395e71093e71d8604bed2ba45499a8bd57c0d41121a5c34ceb112f3b91df1d5ffffeb57752210d46195e93c3e3efc20d9e22f67970fad4a14cfc57b991da739323bc9a71092939bd52fb09b1f1e4310be9cc6afa23a91d0682555ce6da3a425bde80fbeb99c72e7eb90a9aca958a3d27f4579e86bb17b053796f5379ab28bb5ff44b6a8b0517ae9788883e0385ace7c3e9d6f20814d9b778276029990b97ca66de20398f3ac09cb2c3553246a64df5dce260a5fe8dcea6d5336a797160d9a8607ce538785d810bc62117befef759bda8411c6244e54fe5ac9998130165397dacf783c63d3121d61e824edc9fa16189dbdf4def7dae677f9994ff3a58c296adbc2507ce58f8f8642c72574d5bba2c91b51b65dea054c1db6d971632cf9a39d4c85dc1275bb0a72830b8f0f451ea02c37274777a6a0d17085e747f07fcea005e3a1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffffff00, @remote, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x50b7, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "16dd834a3e773c7d74916d7bd41d1ae82ed21d7ef6d35ea07e93f9d8312b68ade8c2c738de1409c06ad9343b695c4b914cc1cf8ec90868ec02f3ba3e27fec51f996e6f1492de9c418aafda67a048a6247833395207d0b459e0fd87af7824270bc187e7d9834c29842a1f6ff74745477f328fb7fea04b75371aaca57ef95a9f41e0e960579e6c2c8bac1eefa47f93a382a18556d9fd31df490703edb0accff76ea4ea36413734fab56d05c07dff65fd1956ca745eed8803edc24a654a657b2220a8a29ab3523dbbb5b5933eeac4a3cf4fd966"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e9f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000003b40)={&(0x7f0000003b00)=[{0x7, 0x9, 0x5, 0x8}, {0x7f1, 0x5, 0x9}], 0x2}) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000003b80)=@assoc_value={0x0, 0x1}, 0x8) ioctl$FICLONE(r0, 0x40049409, r4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000003bc0)=0x1d2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003c40), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000003d40)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x28, r8, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x42}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000009) 4.385941106s ago: executing program 4 (id=6528): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x10000001, 0x91b1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf7e0b011b0e56fe0}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000805}, 0x8000) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x11c, 0x14, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@generic="44f0393578ea2a2580ffae384205c48bb08c9a08538c90862562b70e534e15ea2d4f24a1299bed0cab476fd5c3a9c218774baae0cb3e638941e091bdc86f411c9a7392de1a08154cf6385dedc2a2a0ee4e22d5831f505da478a8676ff716c0"]}, 0x11c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffaa, 0x0, 0xffffffffffffffff, 0x48}, 0x48) 2.887806751s ago: executing program 3 (id=6529): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r3, @ANYBLOB="f4031a80f0032d80"], 0x414}], 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_ts_info}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0) r6 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000002fe0d00000000000062010c00000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r8) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe0ad1b42a4118436}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="02002abd7000fcdbdf25010000000000000007410000000600180000800073797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000010380)={0xa, 0x10, &(0x7f0000010640)=ANY=[@ANYRESOCT=r9, @ANYRES64=r9, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000010600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r9, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xfffffffe}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x17}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5c, 0xbe, "28105290b65ebd0c77b665ef7c108cb8f3bb8895419f63c2e7e784dc73f17a8ae7c761521dcca75df7adce44018aa0de1ab4cbe0a098430542a262b91e43d9e9ba10583ea8b409c3e918f5bb0ba0e47f03e9b51ad6ec12d4"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r12}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x8000) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 1.953042497s ago: executing program 1 (id=6530): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1200000004000000040000001100000000000000a3cf91dca63a6cd49dd0cf349a5b16def1297a8b8d6fc3fffebd9452e2a41b905bf45f376388fa786131196555f9cd45498e75cdd093c3174e9d924cf4a4f43cfa7fb40a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000410000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.933763425s ago: executing program 4 (id=6531): socket(0x1, 0x5, 0xffffffc2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x38) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) socket(0x10, 0x3, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x8, 0xf, 0x0, 0x1, 0xb69}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9f) socket$nl_generic(0x10, 0x3, 0x10) 1.925870073s ago: executing program 0 (id=6532): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) setsockopt$inet6_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000000)=0x401, 0x4) 1.84336507s ago: executing program 2 (id=6533): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x880) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@empty, @multicast1, 0x0}, &(0x7f0000000380)=0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newtclass={0x64, 0x28, 0x103, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa, 0xffff}, {0xa, 0xd}, {0x8, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_RATE={0x6, 0x5, {0x12, 0xb5}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xae}}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x20008001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x4) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r7) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x140, r9, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xac, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "562cf5ca7e81a056697bf3f70496101621e5892e31b88dd7e2b2d9a00c6bcc49"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f6d9b7287d80b970abc1c7d4eb21e9d7"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0c17ce26ab49606445dd6287306d515093981e1d1e20f7f762a13232f72e73b0"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b409fae9458553a5ab26ea092a4abdfe"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c09d95b83b13fef54a509ead5aaa5701"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "133c3bd05ecff38ee958b714ef34f443"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8e213f2864a2f54db8301881e02d2911"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x359}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "73d0a1ff1203f0bf297062ad83f7076f"}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = getpid() r11 = getuid() r12 = getgid() setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000840)={r10, r11, r12}, 0xc) ioctl$sock_ifreq(r5, 0x8916, &(0x7f0000000880)={'vlan1\x00', @ifru_mtu=0x7}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r9, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3b5cc6f688e4339d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000040}, 0x81) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000a40)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r7, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r13, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4008104) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x11, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @alu={0x7, 0x1, 0x7, 0x4, 0x6, 0x80, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xebb3c3f241cf10b3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x16, 0xd8, &(0x7f0000000c40)=""/216, 0x40f00, 0x15, '\x00', r6, 0x25, r5, 0x8, &(0x7f0000000d40)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r5, r5, r5, r5, r5, r5, r5, r5, r5], &(0x7f0000000dc0)=[{0x1, 0x5, 0x1, 0xb}, {0x1, 0x3, 0xb, 0x9}, {0x2, 0x1, 0x1, 0x2}], 0x10, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000ec0)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f00)={r15, r16, 0x25, 0x4, @void}, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r17, 0x39c99dd537f7b38, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x41010) sendmmsg$inet(r5, &(0x7f0000001380)=[{{&(0x7f0000001080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001200)=[{&(0x7f00000010c0)="c5988da8af70bfcbf37f5ac070099084291514a6bd467c18e614721f3d7c8190a68dde57be305a35451ccae47cd854b5d2390a26d0955147dad9192170c98eaa", 0x40}, {&(0x7f0000001100)="7362f657e3134035661ecddce944564cfe617a05343e5f75508af0adbc967f716f7a1010df9ee41821f71c7e20e95f036aad97df30268c1ad3ae1b1f4f9db49e37edac7919c41060c91a46556b2b962bc1c1e4ff76c854b8a67d34812a8087570f", 0x61}, {&(0x7f0000001180)="e79e5f9f3fdef17e617f337aff86d1665b20b5640f012f1a021610258b7df7e7754551d00cf89720a6e744dba431446feb0bdb69bd45a9c839cfcce6a879c5a8ff51e40409adb7c549fee991a04378506486905478fd696fc0e6e3d15c10ce09324871a68e336a6c5a50efbd112674a5e4830c8cf1f2a81765e8", 0x7a}], 0x3, &(0x7f0000001240)=[@ip_ttl={{0x14}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x39, [@empty, @remote, @empty, @local, @empty, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x43}, @loopback, @local, @private=0xa010102]}, @rr={0x7, 0x1b, 0xd7, [@dev={0xac, 0x14, 0x14, 0x29}, @multicast1, @loopback, @multicast2, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x94, 0x3, 0x9, [{@multicast2, 0x7e83}, {@multicast2, 0x9}, {@multicast2, 0x1758}]}, @lsrr={0x83, 0x17, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @rand_addr=0x64010102]}, @cipso={0x86, 0x3e, 0x0, [{0x6, 0x12, "6deea7c2e8cbd2e9b8e95b87c0c73a7a"}, {0x5, 0x2}, {0x2, 0x12, "06f0e33b391c00b0e6647c0a08b6a98e"}, {0x6, 0x8, "01d13d8e9d80"}, {0x5, 0xa, "da18a1a679c224e7"}]}, @noop, @timestamp_addr={0x44, 0x14, 0x84, 0x1, 0x8, [{@private=0xa010101, 0x40}, {@multicast2, 0x7}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x110}}], 0x1, 0x20048000) getpid() 1.756375699s ago: executing program 3 (id=6534): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xf) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x1) socketpair$tipc(0x1e, 0x8eeeba690f938ee3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000001c0)=0x1000, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r4, r3, 0x0, 0x10000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, 0x0, 0x0, 0x4008001, 0x80) sendfile(r5, r3, 0x0, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008d010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100ffffffff9500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000082000000850000000600000045000600040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.755220707s ago: executing program 0 (id=6535): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 2', 0x1b) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e24, 0x880000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7cf28b12}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x886}}], 0x18}, 0x80c4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @empty, 0x78f}, 0x1c) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000f0ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = socket$inet6(0xa, 0x2, 0x0) unshare(0x4000400) syz_emit_ethernet(0x86, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa30cebbab092486dd6000100000503a00fe80000000000000000000000000003cff0200000000007ced78d100000000010400907800000000604aa19800003c00fe8000000000000000000000000000bbfc0200000000000000000000000000002f02040144000000fe8000000000000000000000000000230000000081000000"], 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r10, 0x40047451, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x23, &(0x7f00000000c0)="9f1bdd", 0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e20, @local}, {0x307}, 0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'nr0\x00'}) close(0x4) 1.690707339s ago: executing program 2 (id=6536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000007000000080000000100000080000000c08b3f3634e384ad48022ffe85e4e2b92db9ee45ed430791221321b6a9112c82b183ea0c1bd8e2cd72f52d04b580de88468236e94bb6df53a30a1b584cc7d7485e5032e915e002ec9a96bcdb237be65a10cb46680c46eff1ddd9af31c5ee7709238442fc1935c8eb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r3, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="e3013080e80001804000038006000300a3aa0000060001000300000006000100000000000c000400000100000000000006000300feff000006000300a2aa0000060001000200000008000100020000000c00050000000000000000000c000500ebfd00000000000058000380080002000100000006000100020000000800020003000000060001000000000006000300a2aa00000800020002000000060003000000000006000100000000000c00040000000000"], 0x264}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103000000000000000002000000090001"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1f}, 0x80) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @random="77f9a5b8955c", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@canfd={0xd, {{0x2, 0x1}, 0x12, 0x3, 0x0, 0x0, "0511b94d773efc1ab87cd6ac88be0851c8e4cbda45c83c1ba71f30bfc27464521b9a276e96f66fdb0102a25a31bac5cfb5b838e8177fdeb164be579793fb20e9"}}}}, 0x0) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) close(0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00000004400010029bd7000040000000100000004004880b8000180b4004c08000000000000003bff5168d86c3f6bd3feac2cabf40793135b6f279ca6acf52000b57d7ed355667675c2fb028a665545619fe90ef4dcf04832e9871ce105857955842bf423a9395c49488d59bedbcd4025f2b8a92b0044ffff00000000000000c290b77dca18cf9e2b5f92c62f790a34261151ed70a729504a339a39cc67ac0030000980f1e1a63d5295834bfc4477f6f8e6d1dcfa10b6232c9e25ed04001380100020800c008e00390e000000000000a41875cf3e067505ccff63e663c5ff370f8f45ca63e6ec3eafa18dfc07da089b9a5d4971d97c8ad4dc50080d5fbf23a97cacd4d1bc008a05ba847d8c70c99ed0edfc20f3112b997ea3d81c9e5a9db5c9afe61056f51efbdc5fc1a053762d5c14"], 0xd0}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 1.665601232s ago: executing program 4 (id=6537): clock_gettime(0x4, &(0x7f00000000c0)) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000500)={{}, "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"}) (async) r1 = socket(0x22, 0x3, 0x0) r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e0021000000000000000000070000001e000000000000000a0002", @ANYRES8=r3], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000000100)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c00ea09000ec0dbae00067b0a0000000d0085a168d0bf46d32345653610648d270001000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000f2523249000000000000000000000000200a5bf6a5c97977671bce23d5c538eccd0f8b149cca246af839883649cffc1ddde864800b0a7f8959f4f6135251228179a110cf2d1fb6ca19eb1c6e", 0xbc, 0x10001, 0x0, 0x0) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000340)=0x101, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r9, 0xd4}, 0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r9, 0x81}, &(0x7f0000000280)=0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10d140, 0x0) ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) 1.563534066s ago: executing program 1 (id=6538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x148}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002840)=@delchain={0x52c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x500, 0x2, [@TCA_BPF_ACT={0x4fc, 0x1, [@m_bpf={0x100, 0x11, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x190, 0x5, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x77, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a07563"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xa0, 0x1b, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}]}, {0x51, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe39"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x1c8, 0x13, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}, @TCA_IPT_TARG={0x45, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a"}}]}, {0x129, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02fb1d34f0dc8917bc6a1b7ffa0d4bbddada56c96a3f61363e90cdb6db84cab4aff681e54e5af5ebafd066309a6e03c9bdba1eb03c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000203030a8000000000000000010000020800044000000020080003400000000709000200000100000200000008000340000000060900020000000000020000000800010001"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4084804) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) (async) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8002020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x24000000) 1.367373735s ago: executing program 0 (id=6539): socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000000)=0x2ffffffc, 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r6, &(0x7f0000000500)="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", 0xff, 0x1400c895, &(0x7f0000000600)={0x11, 0x11, r3, 0x1, 0x2}, 0x14) sendto$packet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61123000000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.352571542s ago: executing program 1 (id=6540): syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x4}}}}}}, 0x0) 1.123081487s ago: executing program 1 (id=6541): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000000000018000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000400000071107b000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x136, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000600), 0x54}, 0xfff}], 0x1, 0x40003100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, 0x0, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x8, 0x10}, 0xc) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66", 0x63}, {&(0x7f0000002c40)}], 0x3, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x2, 0xffff, 0x8, 0x10021, r4, 0x2, '\x00', r6, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @value=r7}, 0x50) syz_emit_ethernet(0x5e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500282c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa5e0402"], 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r8, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000300)={0x6, 'geneve0\x00', {0x5}, 0x23f}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) bind$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5784, 0x1}, 0xe) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x364, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x2f0, 0x8, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}]}, {0x16c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010104}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "65fa3771e689192a856aa387a5983013c240a4958d256f9fe0f1ffc79a569afc"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x321f}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x364}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000) 1.063574931s ago: executing program 2 (id=6542): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async, rerun: 32) readv(r1, &(0x7f0000002c40)=[{0x0}, {&(0x7f0000002d00)=""/4112, 0x1010}], 0x2) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200cf", @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRESHEX], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r4], 0x20) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7, '\x00', r6, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) 1.045029365s ago: executing program 3 (id=6543): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000feffffff00000000060000001801000020756ca500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0f00008500000006000000b7080000000000007b8af8ff00000000b7080000000000877b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000f70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r1, @ANYBLOB="0c000180040090d6", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r5, &(0x7f00000006c0)={0x1d, r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0xd4, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x4, 0x6, "ecaa25", 0x9a, 0x29, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "f77f527c45266c967dbf9e6d4334de8d27a4ab6a41a6b7c1f93b382c581e8432255362b3fdca226a31a9d23c070bbc65de68e16486cf29397810ba064a49c2d7093cd9b1fe0dc0899290b13a96f1bdd67de0acbfe988186f9a9f734fc22d90c16e4a723c4c03f9a84c59d29e981a0a1575f5ddd12e1d6b67e0dc5eb7d3fa2885909cdb77c8e0c08ed4f3c7b9ef10f7ae0869816d7781ef0beaf7"}}}}}, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0x9, [@fwd={0x7}, @func_proto, @datasec={0xd, 0x3, 0x0, 0xf, 0x3, [{0x5, 0x0, 0xfffffffc}, {0x5, 0x3, 0x2}, {0x3, 0x7, 0x9}], "5fadde"}, @func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x2e, 0x2e]}}, 0x0, 0x79}, 0x28) socket$inet(0x2, 0xa, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 803.765024ms ago: executing program 1 (id=6544): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x7}}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f5ff0000", @ANYRES16=r1, @ANYBLOB="0100fcffffff0400000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0), 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000e240000002400000008000000000000000000000b03000000000000000000000d00000000040000000000000c020000000000000061612e00"], 0x0, 0x44, 0x0, 0x1}, 0x28) (async) listen(0xffffffffffffffff, 0x709) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000009060300000000000000000007000000240007800c000180082101407f0000010c001480080001400a010100060004405000000005000100060000000900020073797a3100000000"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001b14010029bd7000ffdbe825080045006d46e539"], 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0xc0) (async) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x81) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 616.259548ms ago: executing program 4 (id=6545): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) close(0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000c0ffffff000000000a000000850000002800000095aace00000000207bccec1219dfa6c4e7fe2922357943295feeb348b7324562a2d8d71936a6554a34ba29a465cfa4da6f99410a607b21afbf280d7060b881be9836ec59b9aefe8f18b6c4f035e573e55469fe548c4ea1f75d93567f61dfb5f0f987e26a13287d9c6cdc77e4498bcdce7358941995d1ae8c6fc26d1956dce666e05fc99b81946ec89144"], &(0x7f0000000040)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002", @ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000280), 0x10) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000240)={r4, r8}) 419.126963ms ago: executing program 0 (id=6546): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0xa5dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 348.139866ms ago: executing program 2 (id=6547): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x5, 0x18, 0x0, 0x0, @binary='\n'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r1 = socket$inet6(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000001c0)={{r2, &(0x7f0000000080)='batadv_slave_1\x00', 0x80080, &(0x7f00000000c0)={@align=0x2, {0x6, 0x0, 0xfffffe01, 0x8}}, 0xd30, &(0x7f0000000100), &(0x7f0000000140)=0x8}, {[0x8, 0x6, 0x10000, 0x10001]}, 0xdd4, 0x0, &(0x7f0000000180)}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r5, 0x120, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x68}}, 0x40001) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) (async) r8 = gettid() (async) r9 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r7, @ANYBLOB="089805000750050008001300", @ANYRES32=r8, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x2004c802}, 0x4000010) sendmsg$nl_netfilter(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, 0x2, 0x6, 0x801, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@typed={0x8, 0x11e, 0x0, 0x0, @ipv4=@empty}, @generic="44fc5054b9c259ba149ad94d04218bf8423cdda3247e7a2bab22f15d853fffe366e3ae0c11663b9a2a5231c2e33dce6ecd5fafc1016b108b555f3b483a7f94edd459fdb3a07fae1c2d1ddf1aea79559b629b84ed39a47528a609064ddd9e8875107b6437995babbbd261c55bbbf64aed0b528a3ee4312a20e7a8"]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 319.48518ms ago: executing program 4 (id=6548): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}}, 0x0) 204.23926ms ago: executing program 4 (id=6549): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x2, @short={0x2, 0xffff}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="07fb0000", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xc, 0x40, 0x8, 0x80000000}, {0x8, 0x7f, 0x8, 0xff}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r5, 0x0, 0x80, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0xb}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x29, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a01f9130003006e657464657673696d3000000000000014001680100001800c0007000200000000000000140014"], 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) 0s ago: executing program 2 (id=6550): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) kernel console output (not intermixed with test programs): ivated: batadv_slave_0 [ 819.518394][T30234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 819.698647][T30249] tipc: Enabling of bearer rejected, already enabled [ 819.699009][T30244] __nla_validate_parse: 5 callbacks suppressed [ 819.699023][T30244] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5844'. [ 820.157435][ C0] Dropped outbound packet type=88ca [ 820.172436][T30268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5848'. [ 820.200446][T30268] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 820.200446][T30268] Please contact the netfilter-devel mailing list or update your nftables rules. [ 820.261157][T30268] netlink: 'syz.2.5848': attribute type 10 has an invalid length. [ 820.334380][T30268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.356887][T30279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5852'. [ 820.405758][T30268] team0: Port device bond0 added [ 820.527662][T30287] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5853'. [ 820.545609][T30287] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5853'. [ 820.941496][T30314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5858'. [ 821.195933][ C0] Dropped outbound packet type=88ca [ 821.507883][T30338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5865'. [ 821.611447][T30325] macvlan0: left promiscuous mode [ 821.665311][T30325] tipc: Resetting bearer [ 821.665499][T30325] syzkaller0: left promiscuous mode [ 821.665516][T30325] syzkaller0: left allmulticast mode [ 821.714972][T30345] netlink: 'syz.3.5867': attribute type 8 has an invalid length. [ 821.768920][T30325] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 821.905014][T30348] netlink: 'syz.3.5867': attribute type 8 has an invalid length. [ 822.059064][T30325] sit3: left promiscuous mode [ 822.236811][ C0] Dropped outbound packet type=88ca [ 822.267541][T30336] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 822.271644][T30335] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 822.455994][T30345] bond10: option ad_user_port_key: invalid value (65535) [ 822.456020][T30345] bond10: option ad_user_port_key: allowed values 0 - 1023 [ 822.461004][T30345] bond10 (unregistering): Released all slaves [ 822.690899][T30353] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 822.722727][T30362] netlink: 67 bytes leftover after parsing attributes in process `syz.4.5869'. [ 822.991985][T30385] sctp: [Deprecated]: syz.4.5872 (pid 30385) Use of int in maxseg socket option. [ 822.991985][T30385] Use struct sctp_assoc_value instead [ 823.025548][T30385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.154343][T30389] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5873'. [ 823.174600][T30389] netlink: 'syz.1.5873': attribute type 11 has an invalid length. [ 823.275962][ C0] Dropped outbound packet type=88ca [ 823.458238][T30399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5877'. [ 824.167111][T30440] 8021q: adding VLAN 0 to HW filter on device bond13 [ 824.168395][T30440] bond13: entered promiscuous mode [ 824.177442][T30440] team0: Port device bond13 added [ 824.316615][ C0] Dropped outbound packet type=88ca [ 824.610155][T30470] FAULT_INJECTION: forcing a failure. [ 824.610155][T30470] name failslab, interval 1, probability 0, space 0, times 0 [ 824.610186][T30470] CPU: 1 UID: 0 PID: 30470 Comm: syz.4.5892 Not tainted syzkaller #0 PREEMPT(full) [ 824.610207][T30470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 824.610218][T30470] Call Trace: [ 824.610225][T30470] [ 824.610233][T30470] dump_stack_lvl+0xe8/0x150 [ 824.610265][T30470] should_fail_ex+0x410/0x560 [ 824.610291][T30470] should_failslab+0xa8/0x100 [ 824.610314][T30470] ? skb_clone+0x212/0x3a0 [ 824.610341][T30470] kmem_cache_alloc_noprof+0xa1/0x600 [ 824.610373][T30470] ? skb_clone+0x212/0x3a0 [ 824.610402][T30470] skb_clone+0x212/0x3a0 [ 824.610430][T30470] __netlink_deliver_tap+0x413/0x860 [ 824.610469][T30470] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.610498][T30470] netlink_deliver_tap+0x19c/0x1b0 [ 824.610526][T30470] netlink_sendskb+0x68/0x140 [ 824.610555][T30470] netlink_rcv_skb+0x2a4/0x4a0 [ 824.610582][T30470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 824.610608][T30470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 824.610649][T30470] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.610675][T30470] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.610706][T30470] netlink_unicast+0x7bd/0x940 [ 824.610747][T30470] netlink_sendmsg+0x813/0xb40 [ 824.610785][T30470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.610828][T30470] ? apparmor_socket_sendmsg+0x18b/0x360 [ 824.610855][T30470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.610881][T30470] sock_sendmsg_nosec+0x13a/0x180 [ 824.610905][T30470] ____sys_sendmsg+0x54e/0x850 [ 824.610935][T30470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.610970][T30470] ? import_iovec+0x73/0xa0 [ 824.610997][T30470] ___sys_sendmsg+0x2a5/0x360 [ 824.611020][T30470] ? __lock_acquire+0x747/0x2de0 [ 824.611045][T30470] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.611107][T30470] ? __fget_files+0x2a/0x420 [ 824.611132][T30470] ? __fget_files+0x3a2/0x420 [ 824.611167][T30470] __x64_sys_sendmsg+0x1b1/0x290 [ 824.611196][T30470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 824.611243][T30470] do_syscall_64+0x166/0x520 [ 824.611265][T30470] ? trace_irq_disable+0x3b/0x140 [ 824.611285][T30470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.611304][T30470] ? clear_bhb_loop+0x70/0xc0 [ 824.611326][T30470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.611345][T30470] RIP: 0033:0x7fcb2599e159 [ 824.611365][T30470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.611380][T30470] RSP: 002b:00007fcb267d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.611401][T30470] RAX: ffffffffffffffda RBX: 00007fcb25c25fa0 RCX: 00007fcb2599e159 [ 824.611415][T30470] RDX: 0000000020000808 RSI: 0000200000000000 RDI: 0000000000000003 [ 824.611427][T30470] RBP: 00007fcb267d5090 R08: 0000000000000000 R09: 0000000000000000 [ 824.611439][T30470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.611451][T30470] R13: 00007fcb25c26038 R14: 00007fcb25c25fa0 R15: 00007ffe4548e2c8 [ 824.611483][T30470] [ 824.646143][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 825.116816][T30483] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 825.153980][T30476] netlink: 'syz.4.5894': attribute type 1 has an invalid length. [ 825.257012][T30488] __nla_validate_parse: 3 callbacks suppressed [ 825.257036][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5898'. [ 825.287930][T30476] 8021q: adding VLAN 0 to HW filter on device bond14 [ 825.302444][T30489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5894'. [ 825.365915][ C0] Dropped outbound packet type=88ca [ 825.413209][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5898'. [ 825.711008][T30506] netlink: 'syz.0.5899': attribute type 1 has an invalid length. [ 825.951124][T30517] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 825.983760][T30508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5908'. [ 826.102842][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 826.103111][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 826.103336][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 826.103555][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 826.103777][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 826.103995][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 826.396450][ C0] Dropped outbound packet type=88ca [ 826.714153][T30567] FAULT_INJECTION: forcing a failure. [ 826.714153][T30567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.714184][T30567] CPU: 0 UID: 0 PID: 30567 Comm: syz.1.5918 Not tainted syzkaller #0 PREEMPT(full) [ 826.714202][T30567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.714212][T30567] Call Trace: [ 826.714219][T30567] [ 826.714227][T30567] dump_stack_lvl+0xe8/0x150 [ 826.714256][T30567] should_fail_ex+0x410/0x560 [ 826.714280][T30567] _copy_from_user+0x2d/0xb0 [ 826.714304][T30567] __sys_bind+0x1c6/0x410 [ 826.714331][T30567] ? __pfx___sys_bind+0x10/0x10 [ 826.714361][T30567] ? __pfx_ksys_write+0x10/0x10 [ 826.714398][T30567] __x64_sys_bind+0x7a/0x90 [ 826.714418][T30567] do_syscall_64+0x166/0x520 [ 826.714438][T30567] ? trace_irq_disable+0x3b/0x140 [ 826.714456][T30567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.714475][T30567] ? clear_bhb_loop+0x70/0xc0 [ 826.714497][T30567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.714515][T30567] RIP: 0033:0x7f8b7339e159 [ 826.714531][T30567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.714546][T30567] RSP: 002b:00007f8b74207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 826.714565][T30567] RAX: ffffffffffffffda RBX: 00007f8b73625fa0 RCX: 00007f8b7339e159 [ 826.714578][T30567] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 826.714590][T30567] RBP: 00007f8b74207090 R08: 0000000000000000 R09: 0000000000000000 [ 826.714601][T30567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.714611][T30567] R13: 00007f8b73626038 R14: 00007f8b73625fa0 R15: 00007ffedafd7268 [ 826.714640][T30567] [ 827.436024][ C0] Dropped outbound packet type=88ca [ 827.570915][T30606] FAULT_INJECTION: forcing a failure. [ 827.570915][T30606] name failslab, interval 1, probability 0, space 0, times 0 [ 827.570947][T30606] CPU: 1 UID: 0 PID: 30606 Comm: syz.0.5929 Not tainted syzkaller #0 PREEMPT(full) [ 827.570968][T30606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 827.570979][T30606] Call Trace: [ 827.570988][T30606] [ 827.570996][T30606] dump_stack_lvl+0xe8/0x150 [ 827.571029][T30606] should_fail_ex+0x410/0x560 [ 827.571064][T30606] should_failslab+0xa8/0x100 [ 827.571091][T30606] __kmalloc_cache_noprof+0xa3/0x600 [ 827.571112][T30606] ? tipc_nametbl_insert_publ+0x64/0x13d0 [ 827.571238][T30606] ? tipc_nametbl_insert_publ+0x64/0x13d0 [ 827.571272][T30606] tipc_nametbl_insert_publ+0x64/0x13d0 [ 827.571303][T30606] ? do_raw_spin_lock+0x12b/0x2f0 [ 827.571332][T30606] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 827.571359][T30606] ? tipc_net+0x45/0x270 [ 827.571383][T30606] ? tipc_net+0x45/0x270 [ 827.571408][T30606] ? tipc_nametbl_publish+0x9f/0x270 [ 827.571437][T30606] tipc_nametbl_publish+0x121/0x270 [ 827.571470][T30606] tipc_sk_publish+0x1cd/0x430 [ 827.571529][T30606] ? __pfx_tipc_sk_publish+0x10/0x10 [ 827.571560][T30606] ? __local_bh_enable_ip+0xd6/0x140 [ 827.571591][T30606] tipc_sk_bind+0x1ee/0x300 [ 827.571621][T30606] __sys_bind+0x2e3/0x410 [ 827.571645][T30606] ? __pfx___sys_bind+0x10/0x10 [ 827.571678][T30606] ? __pfx_ksys_write+0x10/0x10 [ 827.571715][T30606] __x64_sys_bind+0x7a/0x90 [ 827.571736][T30606] do_syscall_64+0x166/0x520 [ 827.571759][T30606] ? trace_irq_disable+0x3b/0x140 [ 827.571778][T30606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.571798][T30606] ? clear_bhb_loop+0x70/0xc0 [ 827.571821][T30606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.571841][T30606] RIP: 0033:0x7ff91b19e159 [ 827.571859][T30606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.571876][T30606] RSP: 002b:00007ff91bfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 827.571897][T30606] RAX: ffffffffffffffda RBX: 00007ff91b425fa0 RCX: 00007ff91b19e159 [ 827.571911][T30606] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 827.571924][T30606] RBP: 00007ff91bfb4090 R08: 0000000000000000 R09: 0000000000000000 [ 827.571937][T30606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.571948][T30606] R13: 00007ff91b426038 R14: 00007ff91b425fa0 R15: 00007ffc00a87e78 [ 827.571981][T30606] [ 828.318055][T30632] netlink: 'syz.0.5935': attribute type 7 has an invalid length. [ 828.476953][ C0] Dropped outbound packet type=88ca [ 828.858634][T30657] xt_hashlimit: size too large, truncated to 1048576 [ 828.887895][T30659] FAULT_INJECTION: forcing a failure. [ 828.887895][T30659] name failslab, interval 1, probability 0, space 0, times 0 [ 828.887936][T30659] CPU: 0 UID: 0 PID: 30659 Comm: syz.4.5943 Not tainted syzkaller #0 PREEMPT(full) [ 828.887954][T30659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.887965][T30659] Call Trace: [ 828.887972][T30659] [ 828.887981][T30659] dump_stack_lvl+0xe8/0x150 [ 828.888013][T30659] should_fail_ex+0x410/0x560 [ 828.888039][T30659] should_failslab+0xa8/0x100 [ 828.888061][T30659] __kmalloc_cache_noprof+0xa3/0x600 [ 828.888083][T30659] ? tipc_nametbl_insert_publ+0x443/0x13d0 [ 828.888108][T30659] ? tipc_nametbl_insert_publ+0x443/0x13d0 [ 828.888139][T30659] tipc_nametbl_insert_publ+0x443/0x13d0 [ 828.888166][T30659] ? do_raw_spin_lock+0x12b/0x2f0 [ 828.888195][T30659] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 828.888220][T30659] ? tipc_net+0x45/0x270 [ 828.888246][T30659] ? tipc_nametbl_publish+0x9f/0x270 [ 828.888274][T30659] tipc_nametbl_publish+0x121/0x270 [ 828.888303][T30659] tipc_sk_publish+0x1cd/0x430 [ 828.888333][T30659] ? __pfx_tipc_sk_publish+0x10/0x10 [ 828.888364][T30659] ? __local_bh_enable_ip+0xd6/0x140 [ 828.888392][T30659] tipc_sk_bind+0x1ee/0x300 [ 828.888422][T30659] __sys_bind+0x2e3/0x410 [ 828.888447][T30659] ? __pfx___sys_bind+0x10/0x10 [ 828.888480][T30659] ? __pfx_ksys_write+0x10/0x10 [ 828.888512][T30659] __x64_sys_bind+0x7a/0x90 [ 828.888533][T30659] do_syscall_64+0x166/0x520 [ 828.888552][T30659] ? trace_irq_disable+0x3b/0x140 [ 828.888572][T30659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.888591][T30659] ? clear_bhb_loop+0x70/0xc0 [ 828.888614][T30659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.888632][T30659] RIP: 0033:0x7fcb2599e159 [ 828.888648][T30659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.888667][T30659] RSP: 002b:00007fcb267d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 828.888688][T30659] RAX: ffffffffffffffda RBX: 00007fcb25c25fa0 RCX: 00007fcb2599e159 [ 828.888702][T30659] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 828.888714][T30659] RBP: 00007fcb267d5090 R08: 0000000000000000 R09: 0000000000000000 [ 828.888727][T30659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.888739][T30659] R13: 00007fcb25c26038 R14: 00007fcb25c25fa0 R15: 00007ffe4548e2c8 [ 828.888771][T30659] [ 828.888817][T30659] tipc: Service creation failed, no memory [ 828.945472][T30663] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 829.516136][ C0] Dropped outbound packet type=88ca [ 830.391017][T30702] __nla_validate_parse: 16 callbacks suppressed [ 830.391037][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'. [ 830.391795][T30709] xt_check_table_hooks: 56 callbacks suppressed [ 830.391896][T30709] x_tables: duplicate underflow at hook 2 [ 830.484685][T30711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5949'. [ 830.556675][ C0] Dropped outbound packet type=88ca [ 830.830605][T30725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5957'. [ 830.905647][T30730] FAULT_INJECTION: forcing a failure. [ 830.905647][T30730] name failslab, interval 1, probability 0, space 0, times 0 [ 830.905684][T30730] CPU: 0 UID: 0 PID: 30730 Comm: syz.0.5960 Not tainted syzkaller #0 PREEMPT(full) [ 830.905708][T30730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.905727][T30730] Call Trace: [ 830.905735][T30730] [ 830.905744][T30730] dump_stack_lvl+0xe8/0x150 [ 830.905778][T30730] should_fail_ex+0x410/0x560 [ 830.905801][T30730] ? __alloc_skb+0x1db/0x7a0 [ 830.905822][T30730] should_failslab+0xa8/0x100 [ 830.905845][T30730] ? __alloc_skb+0x1db/0x7a0 [ 830.905864][T30730] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 830.905894][T30730] ? __alloc_skb+0x1db/0x7a0 [ 830.905921][T30730] __alloc_skb+0x1db/0x7a0 [ 830.905945][T30730] tipc_buf_acquire+0x2b/0xe0 [ 830.905964][T30730] tipc_named_publish+0x266/0x770 [ 830.905991][T30730] tipc_nametbl_publish+0x15e/0x270 [ 830.906020][T30730] tipc_sk_publish+0x1cd/0x430 [ 830.906049][T30730] ? __pfx_tipc_sk_publish+0x10/0x10 [ 830.906080][T30730] ? __local_bh_enable_ip+0xd6/0x140 [ 830.906108][T30730] tipc_sk_bind+0x1ee/0x300 [ 830.906138][T30730] __sys_bind+0x2e3/0x410 [ 830.906160][T30730] ? __pfx___sys_bind+0x10/0x10 [ 830.906192][T30730] ? __pfx_ksys_write+0x10/0x10 [ 830.906227][T30730] __x64_sys_bind+0x7a/0x90 [ 830.906248][T30730] do_syscall_64+0x166/0x520 [ 830.906270][T30730] ? trace_irq_disable+0x3b/0x140 [ 830.906289][T30730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.906307][T30730] ? clear_bhb_loop+0x70/0xc0 [ 830.906331][T30730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.906350][T30730] RIP: 0033:0x7ff91b19e159 [ 830.906368][T30730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.906384][T30730] RSP: 002b:00007ff91bfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 830.906406][T30730] RAX: ffffffffffffffda RBX: 00007ff91b425fa0 RCX: 00007ff91b19e159 [ 830.906420][T30730] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 830.906432][T30730] RBP: 00007ff91bfb4090 R08: 0000000000000000 R09: 0000000000000000 [ 830.906444][T30730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.906456][T30730] R13: 00007ff91b426038 R14: 00007ff91b425fa0 R15: 00007ffc00a87e78 [ 830.906493][T30730] [ 830.906564][T30730] tipc: Publication distribution failure [ 831.096757][T30729] netlink: 'syz.1.5958': attribute type 10 has an invalid length. [ 831.096868][T30729] tipc: Resetting bearer [ 831.187922][T30729] tipc: Disabling bearer [ 831.268059][T30729] team0 (unregistering): Port device netdevsim1 removed [ 831.606092][ C0] Dropped outbound packet type=88ca [ 831.714562][ T4931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 831.726219][ T4931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 831.728143][ T4931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 831.731140][ T4931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 831.752765][ T4931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 832.089562][T18284] syz_tun (unregistering): left allmulticast mode [ 832.453786][T30788] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5971'. [ 832.636664][ C0] Dropped outbound packet type=88ca [ 832.739671][T21953] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.739707][T21953] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.789841][T30777] netlink: 'syz.1.5970': attribute type 30 has an invalid length. [ 832.790064][T30780] netlink: 'syz.1.5970': attribute type 30 has an invalid length. [ 833.527684][T30785] 0·: left allmulticast mode [ 833.527710][T30785] hsr_slave_0: left allmulticast mode [ 833.527724][T30785] hsr_slave_1: left allmulticast mode [ 833.613657][T30785] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 833.623158][T30785] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 833.623180][T30785] mac80211_hwsim hwsim30 wlan0: left allmulticast mode [ 833.640716][T30785] veth3: left allmulticast mode [ 833.649446][T30785] geneve2: left promiscuous mode [ 833.649842][T30785] vlan4: left allmulticast mode [ 833.649851][T30785] bridge3: left allmulticast mode [ 833.686089][ C0] Dropped outbound packet type=88ca [ 833.769108][T21953] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.769142][T21953] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.833791][T15726] s`z1: Port: 1 Link DOWN [ 833.834247][T29563] wg2 speed is unknown, defaulting to 1000 [ 833.834277][T29563] syz2: Port: 1 Link DOWN [ 833.837822][T19322] Bluetooth: hci1: command tx timeout [ 833.983251][T30835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5981'. [ 834.099811][T21953] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.099846][T21953] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.352502][T21953] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.352536][T21953] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.716668][ C0] Dropped outbound packet type=88ca [ 834.922704][T30755] lo speed is unknown, defaulting to 1000 [ 835.039102][T30755] wg2 speed is unknown, defaulting to 1000 [ 835.056910][T30870] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5989'. [ 835.349512][T21953] batadv1: left allmulticast mode [ 835.349560][T21953] batadv1: left promiscuous mode [ 835.353097][T21953] bridge0: port 3(batadv1) entered disabled state [ 835.531180][T21953] pim6reg: left allmulticast mode [ 835.531727][T21953] dvmrp0: left allmulticast mode [ 835.756050][ C0] Dropped outbound packet type=88ca [ 835.917077][T19322] Bluetooth: hci1: command tx timeout [ 836.144635][T21953] geneve0 (unregistering): left promiscuous mode [ 836.195748][T21953] bridge0 (unregistering): left promiscuous mode [ 836.409999][T21953] bond0 (unregistering): Released all slaves [ 836.422516][T21953] bond1 (unregistering): Released all slaves [ 836.442889][T21953] bond2 (unregistering): Released all slaves [ 836.463778][T21953] bond3 (unregistering): Released all slaves [ 836.480520][T21953] bond4 (unregistering): (slave veth5): Releasing active interface [ 836.482491][T21953] bond4 (unregistering): Released all slaves [ 836.512331][T21953] bond5 (unregistering): (slave veth7): Releasing active interface [ 836.539481][T21953] bond5 (unregistering): (slave veth9): Releasing active interface [ 836.542655][T21953] bond5 (unregistering): Released all slaves [ 836.587050][T21953] bond6 (unregistering): Released all slaves [ 836.609753][T21953] bond7 (unregistering): Released all slaves [ 836.648551][T21953] bond8 (unregistering): (slave wireguard0): Releasing backup interface [ 836.648576][T21953] wireguard0: left promiscuous mode [ 836.653966][T21953] bond8 (unregistering): Released all slaves [ 836.735369][T21953] bond9 (unregistering): (slave veth13): Releasing active interface [ 836.756327][T21953] bond9 (unregistering): Released all slaves [ 836.796854][ C0] Dropped outbound packet type=88ca [ 836.849451][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 836.961533][T30938] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5995'. [ 836.984919][T30938] Bluetooth: MGMT ver 1.23 [ 837.031602][T30755] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.032015][T30755] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.032171][T30755] bridge_slave_0: entered allmulticast mode [ 837.034611][T30755] bridge_slave_0: entered promiscuous mode [ 837.044472][T30755] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.044587][T30755] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.044761][T30755] bridge_slave_1: entered allmulticast mode [ 837.048382][T30755] bridge_slave_1: entered promiscuous mode [ 837.164959][T30755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.279866][T30755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.280296][T21953] ovs-s!: left promiscuous mode [ 837.611442][T21953] tipc: Disabling bearer [ 837.630646][T21953] tipc: Left network mode [ 837.692760][T30961] bond11 (unregistering): Released all slaves [ 837.753606][T30755] team0: Port device team_slave_0 added [ 837.759497][T30755] team0: Port device team_slave_1 added [ 837.836024][ C0] Dropped outbound packet type=88ca [ 837.961953][T30973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6000'. [ 837.976639][T30755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.976656][T30755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.976679][T30755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.007529][T30755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.007547][T30755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.007570][T30755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.013167][T19322] Bluetooth: hci1: command tx timeout [ 838.465526][T30755] hsr_slave_0: entered promiscuous mode [ 838.467706][T30755] hsr_slave_1: entered promiscuous mode [ 838.468398][T30755] debugfs: 'hsr0' already exists in 'hsr' [ 838.468416][T30755] Cannot create hsr debugfs directory [ 838.510663][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 838.651434][T31004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6009'. [ 838.877083][ C0] Dropped outbound packet type=88ca [ 839.522935][T31048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6013'. [ 839.927004][ C0] Dropped outbound packet type=88ca [ 839.932107][T31058] netlink: 'syz.1.6013': attribute type 1 has an invalid length. [ 839.935586][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 840.081192][T19322] Bluetooth: hci1: command tx timeout [ 840.759708][T31076] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 840.787617][T31076] netlink: 'syz.4.6020': attribute type 1 has an invalid length. [ 840.789935][T31082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6021'. [ 840.967475][ C0] Dropped outbound packet type=88ca [ 840.975461][T31076] 8021q: adding VLAN 0 to HW filter on device bond15 [ 841.017698][T31082] IPVS: Error connecting to the multicast addr [ 841.478644][T31090] team_slave_0: entered allmulticast mode [ 841.491266][T31111] bridge0: port 1(erspan0) entered blocking state [ 841.491403][T31111] bridge0: port 1(erspan0) entered disabled state [ 841.491566][T31111] erspan0: entered allmulticast mode [ 841.916315][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 842.015923][ C0] Dropped outbound packet type=88ca [ 842.410799][T31139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6030'. [ 842.739532][T31153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6029'. [ 842.739568][T31153] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6029'. [ 842.890176][T30755] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 842.939611][T30755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.940673][T30755] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 843.003727][T30755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 843.021107][T30755] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 843.036494][ C0] Dropped outbound packet type=88ca [ 843.151727][T30755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 843.167767][T30755] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 843.169911][T31163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6032'. [ 843.339327][T30755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.397126][T31167] pim6reg: entered allmulticast mode [ 843.404066][T28434] udevd[28434]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 844.076121][ C0] Dropped outbound packet type=88ca [ 844.080653][T21953] hsr_slave_0: left promiscuous mode [ 844.218519][T21953] hsr_slave_1: left promiscuous mode [ 844.613111][T21953] batadv_slave_1: left promiscuous mode [ 844.651826][T21953] veth0_macvtap: left promiscuous mode [ 844.688578][T21953] veth1_vlan: left promiscuous mode [ 844.688710][T21953] veth0_vlan: left promiscuous mode [ 845.116865][ C0] Dropped outbound packet type=88ca [ 845.133317][T31251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6043'. [ 845.244374][T31253] openvswitch: netlink: Missing key (keys=40, expected=100) [ 845.720628][T13983] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 845.742716][T31214] netlink: 'syz.1.6037': attribute type 1 has an invalid length. [ 845.742777][T31214] netlink: 'syz.1.6037': attribute type 2 has an invalid length. [ 845.799845][T15726] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 845.848942][T31245] bridge0: left promiscuous mode [ 845.853475][T31245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.861623][T31245] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.910611][T31245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.954450][T31245] batadv_slave_1: left promiscuous mode [ 845.966182][T31245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.969240][ T30] audit: type=1800 audit(1789823643.769:30): pid=31266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6044" name="r" dev="tmpfs" ino=2991 res=0 errno=0 [ 845.975324][T31245] veth1_vlan: left promiscuous mode [ 845.977397][T31245] veth0_vlan: left promiscuous mode [ 845.979629][T31245] veth0_vlan: entered promiscuous mode [ 845.983028][T31245] veth1_vlan: entered promiscuous mode [ 846.000350][T31245] veth1_macvtap: left promiscuous mode [ 846.001625][T31245] veth0_macvtap: entered promiscuous mode [ 846.006051][T31245] veth1_macvtap: entered promiscuous mode [ 846.093637][T31245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 846.102442][T31245] batman_adv: batadv0: Interface activated: ip6gretap1 [ 846.144395][T31245] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 846.165902][ C0] Dropped outbound packet type=88ca [ 846.526462][T31290] netlink: 'syz.4.6051': attribute type 21 has an invalid length. [ 846.526489][T31290] IPv6: NLM_F_CREATE should be specified when creating new route [ 846.529802][T31290] netlink: 'syz.4.6051': attribute type 1 has an invalid length. [ 846.600335][T31275] syzkaller0: entered promiscuous mode [ 846.600357][T31275] syzkaller0: entered allmulticast mode [ 846.644739][T31297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6052'. [ 846.702713][T31290] 8021q: adding VLAN 0 to HW filter on device bond16 [ 846.736913][T31291] bond16: (slave veth3): Enslaving as an active interface with a down link [ 846.793761][T31300] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 846.824435][T31300] bond16: (slave batadv1): making interface the new active one [ 846.848727][T31300] batadv1: entered promiscuous mode [ 846.850771][T31300] bond16: (slave batadv1): Enslaving as an active interface with an up link [ 847.197606][ C0] Dropped outbound packet type=88ca [ 847.360132][T31316] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 847.624678][T31319] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 848.246813][ C0] Dropped outbound packet type=88ca [ 849.286690][ C0] Dropped outbound packet type=88ca [ 850.337128][ C0] Dropped outbound packet type=88ca [ 850.847163][T31290] bond16 (unregistering): (slave veth3): Releasing active interface [ 850.849355][T31290] bond16 (unregistering): (slave batadv1): Releasing active interface [ 850.849380][T31290] batadv1: left promiscuous mode [ 850.851020][T31290] bond16 (unregistering): Released all slaves [ 850.984637][T30755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.102831][T30755] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.120130][T31334] lo: entered promiscuous mode [ 851.120304][T31334] tunl0: entered promiscuous mode [ 851.120418][T31334] gre0: entered promiscuous mode [ 851.120549][T31334] gretap0: entered promiscuous mode [ 851.120776][T31334] ip_vti0: entered promiscuous mode [ 851.123523][T31334] ip6_vti0: entered promiscuous mode [ 851.123643][T31334] sit0: entered promiscuous mode [ 851.123750][T31334] ip6tnl0: entered promiscuous mode [ 851.123857][T31334] ip6gre0: entered promiscuous mode [ 851.123969][T31334] syz_tun: entered promiscuous mode [ 851.124978][T31334] bridge0: entered promiscuous mode [ 851.125136][T31334] bond0: entered promiscuous mode [ 851.125264][T31334] team0: entered promiscuous mode [ 851.127377][T31334] nlmon0: entered promiscuous mode [ 851.127519][T31334] batadv0: entered promiscuous mode [ 851.127654][T31334] vxcan0: entered promiscuous mode [ 851.127787][T31334] vxcan1: entered promiscuous mode [ 851.127919][T31334] wg0: entered promiscuous mode [ 851.128057][T31334] wg1: entered promiscuous mode [ 851.128189][T31334] wg2: entered promiscuous mode [ 851.130522][T31334] veth0_to_bridge: entered promiscuous mode [ 851.130690][T31334] bridge_slave_0: entered promiscuous mode [ 851.130831][T31334] veth1_to_bridge: entered promiscuous mode [ 851.132125][T31334] bridge_slave_1: entered promiscuous mode [ 851.132274][T31334] veth1_to_bond: entered promiscuous mode [ 851.132413][T31334] bond_slave_1: entered promiscuous mode [ 851.132565][T31334] veth0_to_team: entered promiscuous mode [ 851.142642][T31334] team_slave_0: entered promiscuous mode [ 851.150308][T31334] veth1_to_team: entered promiscuous mode [ 851.150487][T31334] team_slave_1: entered promiscuous mode [ 851.150630][T31334] veth1_to_batadv: entered promiscuous mode [ 851.150764][T31334] batadv_slave_1: entered promiscuous mode [ 851.150895][T31334] xfrm0: entered promiscuous mode [ 851.151037][T31334] veth0_to_hsr: entered promiscuous mode [ 851.151331][T31334] veth1_to_hsr: entered promiscuous mode [ 851.151624][T31334] 0·: entered promiscuous mode [ 851.151761][T31334] veth1_virt_wifi: entered promiscuous mode [ 851.151894][T31334] veth0_virt_wifi: entered promiscuous mode [ 851.152031][T31334] virt_wifi0: entered promiscuous mode [ 851.152166][T31334] veth1_vlan: entered promiscuous mode [ 851.152302][T31334] vlan0: entered promiscuous mode [ 851.152567][T31334] vlan1: entered promiscuous mode [ 851.152832][T31334] macvlan0: entered promiscuous mode [ 851.152964][T31334] macvlan1: entered promiscuous mode [ 851.153103][T31334] ipvlan0: entered promiscuous mode [ 851.153241][T31334] ipvlan1: entered promiscuous mode [ 851.153618][T31334] macvtap0: entered promiscuous mode [ 851.153754][T31334] macsec0: entered promiscuous mode [ 851.153950][T31334] geneve1: entered promiscuous mode [ 851.154068][T31334] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 851.154188][T31334] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 851.154303][T31334] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 851.154413][T31334] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 851.154519][T31334] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 851.154654][T31334] mac80211_hwsim hwsim34 wlan2: entered promiscuous mode [ 851.154889][T31334] bond1: entered promiscuous mode [ 851.155010][T31334] macsec1: entered promiscuous mode [ 851.155120][T31334] syztnl0: entered promiscuous mode [ 851.155228][T31334] veth2: entered promiscuous mode [ 851.155359][T31334] veth3: entered promiscuous mode [ 851.155491][T31334] bond2: entered promiscuous mode [ 851.155598][T31334] bond3: entered promiscuous mode [ 851.180582][T31334] bond4: entered promiscuous mode [ 851.180732][T31334] bond5: entered promiscuous mode [ 851.180850][T31334] bond6: entered promiscuous mode [ 851.180967][T31334] bond7: entered promiscuous mode [ 851.181086][T31334] bond8: entered promiscuous mode [ 851.181297][T31334] veth4: entered promiscuous mode [ 851.181427][T31334] veth5: entered promiscuous mode [ 851.181583][T31334] veth6: entered promiscuous mode [ 851.181715][T31334] veth7: entered promiscuous mode [ 851.181842][T31334] veth8: entered promiscuous mode [ 851.191353][T31334] veth9: entered promiscuous mode [ 851.191524][T31334] syztnl2: entered promiscuous mode [ 851.191639][T31334] bond9: entered promiscuous mode [ 851.191757][T31334] bond10: entered promiscuous mode [ 851.191874][T31334] ip6tnl1: entered promiscuous mode [ 851.191995][T31334] bond11: entered promiscuous mode [ 851.192116][T31334] ip6tnl2: entered promiscuous mode [ 851.192221][T31334] ip6tnl3: entered promiscuous mode [ 851.195080][T31334] bond12: entered promiscuous mode [ 851.195212][T31334] bridge1: entered promiscuous mode [ 851.195337][T31334] vlan3: entered promiscuous mode [ 851.198072][T31334] bridge2: entered promiscuous mode [ 851.198196][T31334] ip6gre1: entered promiscuous mode [ 851.198300][T31334] dvmrp8: entered promiscuous mode [ 851.198406][T31334] geneve2: entered promiscuous mode [ 851.201164][T31334] mac80211_hwsim hwsim52 wlan3: entered promiscuous mode [ 851.201315][T31334] mac80211_hwsim hwsim53 wlan4: entered promiscuous mode [ 851.201448][T31334] bond14: entered promiscuous mode [ 851.201567][T31334] bridge3: entered promiscuous mode [ 851.203257][T31334] vlan4: entered promiscuous mode [ 851.203521][T31334] veth0: entered promiscuous mode [ 851.203656][T31334] veth1: entered promiscuous mode [ 851.203792][T31334] bridge4: entered promiscuous mode [ 851.203903][T31334] bond13: entered promiscuous mode [ 851.204023][T31334] mac80211_hwsim hwsim59 wlan5: entered promiscuous mode [ 851.204149][T31334] veth10: entered promiscuous mode [ 851.205609][T31338] netlink: 'syz.4.6063': attribute type 25 has an invalid length. [ 851.205928][T31339] netlink: 'syz.4.6063': attribute type 25 has an invalid length. [ 851.207329][T31334] veth11: entered promiscuous mode [ 851.207607][T31334] ip6tnl4: entered promiscuous mode [ 851.209279][T31334] mac80211_hwsim hwsim62 wlan6: entered promiscuous mode [ 851.210035][T31334] macvtap1: entered promiscuous mode [ 851.210184][T31334] macvtap2: entered promiscuous mode [ 851.210320][T31334] mac80211_hwsim hwsim63 wlan7: entered promiscuous mode [ 851.213071][T31334] veth12: entered promiscuous mode [ 851.213241][T31334] veth13: entered promiscuous mode [ 851.213377][T31334] ipip0: entered promiscuous mode [ 851.213639][T31334] gre1: entered promiscuous mode [ 851.262563][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.262682][ T6436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.300889][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.300992][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.306477][T31342] netlink: 'syz.0.6062': attribute type 29 has an invalid length. [ 851.306498][T31342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6062'. [ 851.367105][ C0] Dropped outbound packet type=88ca [ 851.467235][T31343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6062'. [ 851.562631][T21953] IPVS: stop unused estimator thread 0... [ 851.680515][T31346] 8021q: VLANs not supported on syzkaller0 [ 851.850140][T31350] ovs-s: entered promiscuous mode [ 852.077709][T31358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6068'. [ 852.084435][T31358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6068'. [ 852.321213][T31368] netlink: 'syz.4.6071': attribute type 3 has an invalid length. [ 852.321387][T31368] netlink: 'syz.4.6071': attribute type 3 has an invalid length. [ 852.346755][T31368] netlink: 'syz.4.6071': attribute type 3 has an invalid length. [ 852.346929][T31368] netlink: 'syz.4.6071': attribute type 3 has an invalid length. [ 852.347428][T31368] netlink: 'syz.4.6071': attribute type 3 has an invalid length. [ 852.347578][T31368] netlink: 'syz.4.6071': attribute type 3 has an invalid length. [ 852.348027][T31368] netlink: 'syz.4.6071': attribute type 3 has an invalid length. [ 852.396138][ C0] Dropped outbound packet type=88ca [ 852.482314][T31385] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 852.522906][T31369] IPVS: stopping master sync thread 31385 ... [ 852.699327][T30755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.887777][T30755] veth0_vlan: entered promiscuous mode [ 852.913438][T30755] veth1_vlan: entered promiscuous mode [ 853.014466][T30755] veth0_macvtap: entered promiscuous mode [ 853.039683][T30755] veth1_macvtap: entered promiscuous mode [ 853.128795][T30755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.178265][T30755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.236689][T13983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.261031][T31404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6078'. [ 853.282620][T31410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 853.408972][T13983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.409017][T13983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.409048][T13983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.446624][ C0] Dropped outbound packet type=88ca [ 853.552520][T13983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.552542][T13983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.579598][T31422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6082'. [ 853.584762][T31415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6080'. [ 853.584783][T31415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6080'. [ 853.603225][T31422] netdevsim netdevsim1 »»»»»»: renamed from netdevsim0 (while UP) [ 853.652184][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.652205][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.843219][T31429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5965'. [ 854.115551][T31435] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 854.251489][T31435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.270933][T31435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.290563][T31435] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 854.350207][T31435] bond0 (unregistering): Released all slaves [ 854.353359][ T4931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 854.379849][ T4931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 854.381444][ T4931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 854.382309][ T4931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 854.382892][ T4931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 854.486182][ C0] Dropped outbound packet type=88ca [ 854.641626][T31450] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6089'. [ 854.728506][T31456] lo: left promiscuous mode [ 854.743832][T31456] tunl0: left promiscuous mode [ 854.745258][T31456] gre0: left promiscuous mode [ 854.759975][T31456] gretap0: left promiscuous mode [ 854.763582][T31456] ip_vti0: left promiscuous mode [ 854.764880][T31456] ip6_vti0: left promiscuous mode [ 854.798742][T31456] sit0: left promiscuous mode [ 854.804677][T31456] ip6tnl0: left promiscuous mode [ 854.821770][T31456] ip6gre0: left promiscuous mode [ 854.824938][T31456] syz_tun: left promiscuous mode [ 854.849164][T31456] bridge0: left promiscuous mode [ 854.854975][T31456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.855612][T31456] team0: left promiscuous mode [ 854.855630][T31456] bond0: left promiscuous mode [ 854.890667][T31456] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.904087][T31456] nlmon0: left promiscuous mode [ 854.905322][T31456] batadv0: left promiscuous mode [ 854.917553][T31456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.918228][T31456] vxcan0: left promiscuous mode [ 854.919339][T31456] vxcan1: left promiscuous mode [ 855.089816][T31456] wg0: left promiscuous mode [ 855.146614][T31456] wg1: left promiscuous mode [ 855.149999][T31456] wg2: left promiscuous mode [ 855.152410][T31456] veth0_to_bridge: left promiscuous mode [ 855.153902][T31456] bridge_slave_0: left promiscuous mode [ 855.154867][T31456] veth1_to_bridge: left promiscuous mode [ 855.158155][T31456] bridge_slave_1: left promiscuous mode [ 855.158997][T31456] veth1_to_bond: left promiscuous mode [ 855.160897][T31456] bond_slave_1: left promiscuous mode [ 855.161714][T31456] veth0_to_team: left promiscuous mode [ 855.163067][T31456] team_slave_0: left promiscuous mode [ 855.163906][T31456] veth1_to_team: left promiscuous mode [ 855.189235][T31456] team_slave_1: left promiscuous mode [ 855.190805][T31456] veth1_to_batadv: left promiscuous mode [ 855.192185][T31456] batadv_slave_1: left promiscuous mode [ 855.193125][T31456] xfrm0: left promiscuous mode [ 855.194933][T31456] veth0_to_hsr: left promiscuous mode [ 855.230282][T31456] veth1_to_hsr: left promiscuous mode [ 855.242667][T31456] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 855.242691][T31456] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.242741][T31456] 0·: left promiscuous mode [ 855.244274][T31456] veth1_virt_wifi: left promiscuous mode [ 855.253648][T31456] veth0_virt_wifi: left promiscuous mode [ 855.260320][T31456] virt_wifi0: left promiscuous mode [ 855.273765][T31456] veth1_vlan: left promiscuous mode [ 855.282732][T31456] vlan0: left promiscuous mode [ 855.282896][T31456] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 855.380246][T10829] s`z1: Port: 1 Link ACTIVE [ 855.517085][ C0] Dropped outbound packet type=88ca [ 855.663700][T29565] wg2 speed is unknown, defaulting to 1000 [ 855.663740][T29565] syz2: Port: 1 Link ACTIVE [ 855.927404][T31484] RDS: rds_bind could not find a transport for ::ffff:172.20.20.35, load rds_tcp or rds_rdma? [ 856.395587][T31509] __nla_validate_parse: 7 callbacks suppressed [ 856.395607][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6099'. [ 856.480648][ T4931] Bluetooth: hci3: command tx timeout [ 856.556091][ C0] Dropped outbound packet type=88ca [ 856.721594][T13983] veth11: left allmulticast mode [ 856.721622][T13983] veth11: left promiscuous mode [ 856.721852][T13983] bridge6: port 2(veth11) entered disabled state [ 857.081691][T13983] veth9: left allmulticast mode [ 857.081716][T13983] veth9: left promiscuous mode [ 857.085471][T13983] bridge6: port 1(veth9) entered disabled state [ 857.151408][T13983] bridge0: left allmulticast mode [ 857.163934][T13983] dummy0: left allmulticast mode [ 857.217426][T13983] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 857.511906][T13983] batman_adv: batadv0: Removing interface: ip6gretap1 [ 857.596449][ C0] Dropped outbound packet type=88ca [ 857.603784][T31558] vcan0: tx address claim with dlc 0 [ 857.609590][T31558] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6106'. [ 857.687335][T13983] bond6 (unregistering): (slave gretap2): Releasing active interface [ 857.855702][T13983] bond2 (unregistering): (slave gretap1): Releasing active interface [ 857.873860][T13983] bond4 (unregistering): (slave gre1): Releasing backup interface [ 857.904830][T13983] bond7 (unregistering): (slave geneve4): Releasing active interface [ 858.023030][T13983] bond0 (unregistering): Released all slaves [ 858.030218][T13983] bond1 (unregistering): Released all slaves [ 858.041470][T13983] bond2 (unregistering): Released all slaves [ 858.053602][T13983] bond3 (unregistering): (slave veth7): Releasing active interface [ 858.054822][T13983] bond3 (unregistering): (slave batadv1): Releasing active interface [ 858.055493][T13983] bond3 (unregistering): Released all slaves [ 858.084019][T13983] bond4 (unregistering): Released all slaves [ 858.095197][T13983] bond5 (unregistering): Released all slaves [ 858.108712][T13983] bond6 (unregistering): Released all slaves [ 858.120804][T13983] bond7 (unregistering): Released all slaves [ 858.132840][T13983] bond8 (unregistering): Released all slaves [ 858.145086][T13983] bond9 (unregistering): Released all slaves [ 858.171063][T13983] bond10 (unregistering): Released all slaves [ 858.370299][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 858.395213][T31441] wg2 speed is unknown, defaulting to 1000 [ 858.477486][T13983] tipc: Disabling bearer [ 858.502170][T13983] tipc: Disabling bearer [ 858.502305][T13983] tipc: Left network mode [ 858.557086][ T4931] Bluetooth: hci3: command tx timeout [ 858.647072][ C0] Dropped outbound packet type=88ca [ 859.138848][T31586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6110'. [ 859.319523][T31586] ip6gretap0: entered allmulticast mode [ 859.585110][T31512] wg2 speed is unknown, defaulting to 1000 [ 859.676668][ C0] Dropped outbound packet type=88ca [ 860.291679][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6115'. [ 860.494010][T31640] ip_tables: iptables: counters copy to user failed while replacing table [ 860.545534][T31636] sctp: [Deprecated]: syz.2.6116 (pid 31636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 860.545534][T31636] Use struct sctp_sack_info instead [ 860.590258][T31625] bond15: entered promiscuous mode [ 860.590280][T31625] bond15: entered allmulticast mode [ 860.622502][T31632] bond15: (slave wireguard0): The slave device specified does not support setting the MAC address [ 860.622984][T31632] bond15: (slave wireguard0): Error -95 calling set_mac_address [ 860.644402][ T4931] Bluetooth: hci3: command tx timeout [ 860.692956][T31441] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.693127][T31441] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.693336][T31441] bridge_slave_0: entered allmulticast mode [ 860.695399][T31441] bridge_slave_0: entered promiscuous mode [ 860.720719][ C0] Dropped outbound packet type=88ca [ 860.730548][T31644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6118'. [ 860.730579][T31644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6118'. [ 860.832572][T31644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6118'. [ 860.832606][T31644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6118'. [ 860.833217][T31441] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.833372][T31441] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.833527][T31441] bridge_slave_1: entered allmulticast mode [ 860.880343][T31441] bridge_slave_1: entered promiscuous mode [ 861.171246][T31640] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.171283][T31640] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.299292][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 861.393676][T13983] hsr_slave_0: left promiscuous mode [ 861.531967][T13983] veth1_macvtap: left promiscuous mode [ 861.531991][T13983] veth0_macvtap: left promiscuous mode [ 861.532059][T13983] veth1_vlan: left promiscuous mode [ 861.532094][T13983] veth0_vlan: left promiscuous mode [ 861.766432][ C0] Dropped outbound packet type=88ca [ 862.224952][T31441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.230865][T31441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.280741][T31663] pim6reg: entered allmulticast mode [ 862.318570][T31441] team0: Port device team_slave_0 added [ 862.320378][T31441] team0: Port device team_slave_1 added [ 862.482281][T31640] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.482316][T31640] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.577488][T31687] openvswitch: netlink: EtherType 200 is less than min 600 [ 862.726644][ T4931] Bluetooth: hci3: command tx timeout [ 862.774509][T31689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6128'. [ 862.799873][ C0] Dropped outbound packet type=88ca [ 862.818757][T31640] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.818794][T31640] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.865075][T31441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.865092][T31441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.865115][T31441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.870880][T31441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.870896][T31441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.870919][T31441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.046314][T31697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6131'. [ 863.161021][T31441] hsr_slave_0: entered promiscuous mode [ 863.169069][T31441] hsr_slave_1: entered promiscuous mode [ 863.174734][T31441] debugfs: 'hsr0' already exists in 'hsr' [ 863.174755][T31441] Cannot create hsr debugfs directory [ 863.616731][T31640] netdevsim netdevsim1 »»»»»» (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.616772][T31640] netdevsim netdevsim1 »»»»»» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.708873][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 863.836327][ C0] Dropped outbound packet type=88ca [ 863.875690][T13983] IPVS: stop unused estimator thread 0... [ 864.125454][T31730] ip6tnl2: entered allmulticast mode [ 864.307292][ T6436] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.307325][ T6436] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.596509][ T6436] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.596544][ T6436] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.631496][T31751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6138'. [ 864.667031][ T6436] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.667066][ T6436] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.667100][ T6436] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.667123][ T6436] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.805317][T31753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6138'. [ 864.875978][ C0] Dropped outbound packet type=88ca [ 865.156098][T31786] validate_nla: 23 callbacks suppressed [ 865.156210][T31786] netlink: 'syz.4.6142': attribute type 1 has an invalid length. [ 865.156223][T31786] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6142'. [ 865.203154][T31774] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6140'. [ 865.205325][T31784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6140'. [ 865.560210][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6145'. [ 865.767644][T31809] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6146'. [ 865.879976][T31441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.898199][T31441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.898988][T31799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6144'. [ 865.899011][T31441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 865.926317][ C0] Dropped outbound packet type=88ca [ 865.941127][T31441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.941979][T31441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 865.967142][T31441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.006998][T31441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 866.029170][T31441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.274864][T31832] SET target dimension over the limit! [ 866.325408][T31441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.364395][T31441] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.384760][T13983] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.386905][T13983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.435189][T21953] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.435311][T21953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.453645][T31837] IPVS: ip_vs_add_dest(): server weight less than zero [ 866.465460][T31837] IPVS: ip_vs_add_dest(): server weight less than zero [ 866.527861][T31845] 8021q: VLANs not supported on ip6gre0 [ 866.956012][ C0] Dropped outbound packet type=88ca [ 867.996656][ C0] Dropped outbound packet type=88ca [ 868.050833][T31441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.182590][T31441] veth0_vlan: entered promiscuous mode [ 868.218608][T31441] veth1_vlan: entered promiscuous mode [ 868.360943][T31441] veth0_macvtap: entered promiscuous mode [ 868.390668][T31441] veth1_macvtap: entered promiscuous mode [ 868.532646][T31441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.644056][T31441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.938267][ T6436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.941700][ T6436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.942172][ T6436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.942205][ T6436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.036961][ C0] Dropped outbound packet type=88ca [ 869.354229][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.354252][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.524505][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.524526][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.716023][T31983] __nla_validate_parse: 5 callbacks suppressed [ 869.716044][T31983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6175'. [ 869.716061][T31983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6175'. [ 869.716075][T31983] netlink: 'syz.4.6175': attribute type 4 has an invalid length. [ 869.765269][T31987] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 869.780307][T31983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6175'. [ 869.890545][T31998] netlink: zone id is out of range [ 869.890561][T31998] netlink: zone id is out of range [ 869.890570][T31998] netlink: zone id is out of range [ 869.890578][T31998] netlink: zone id is out of range [ 869.890586][T31998] netlink: zone id is out of range [ 869.890593][T31998] netlink: zone id is out of range [ 869.890601][T31998] netlink: zone id is out of range [ 869.890609][T31998] netlink: zone id is out of range [ 869.890617][T31998] netlink: zone id is out of range [ 870.086686][ C0] Dropped outbound packet type=88ca [ 870.310576][T32011] bridge_slave_0: left allmulticast mode [ 870.310602][T32011] bridge_slave_0: left promiscuous mode [ 870.317682][T32011] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.472279][T19322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 870.485653][T19322] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 870.493548][T19322] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 870.513477][T19322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 870.514831][T19322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 870.655620][T32014] netlink: 564 bytes leftover after parsing attributes in process `syz.3.6181'. [ 870.724428][T32014] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input35 [ 871.117322][ C0] Dropped outbound packet type=88ca [ 871.239956][T29561] infiniband s`z1: ib_query_port failed (-19) [ 871.253600][ T6436] smbdirect: ib_dev[s`z1] removed [ 872.158165][ C0] Dropped outbound packet type=88ca [ 872.668086][ T4931] Bluetooth: hci2: command tx timeout [ 872.842680][T32042] wg2 speed is unknown, defaulting to 1000 [ 873.196143][ C0] Dropped outbound packet type=88ca [ 873.531190][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6197'. [ 873.766285][T32012] wg2 speed is unknown, defaulting to 1000 [ 874.237744][ C0] Dropped outbound packet type=88ca [ 874.718592][ T4931] Bluetooth: hci2: command tx timeout [ 874.934947][T32162] syzkaller1: entered allmulticast mode [ 874.983210][T32075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 875.258215][T13983] vlan2: left allmulticast mode [ 875.258237][T13983] geneve0: left allmulticast mode [ 875.258467][T13983] bridge0: port 1(vlan2) entered disabled state [ 875.286062][ C0] Dropped outbound packet type=88ca [ 875.323754][T13983] batadv1: left allmulticast mode [ 875.323975][T13983] bridge0: port 3(batadv1) entered disabled state [ 875.396759][T32182] netlink: 564 bytes leftover after parsing attributes in process `syz.1.6203'. [ 875.410461][T13983] erspan0: left allmulticast mode [ 875.410486][T13983] erspan0: left promiscuous mode [ 875.410696][T13983] bridge3: port 1(erspan0) entered disabled state [ 875.474567][T13983] dvmrp8: left allmulticast mode [ 875.551587][T32190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input36 [ 875.776090][T32197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6207'. [ 876.114336][T13983] team0: Port device bond0 removed [ 876.117767][T13983] bond0 (unregistering): Released all slaves [ 876.140724][T13983] bond1 (unregistering): Released all slaves [ 876.171993][T13983] bond2 (unregistering): Released all slaves [ 876.201701][T13983] bond3 (unregistering): Released all slaves [ 876.226031][T13983] bond4 (unregistering): Released all slaves [ 876.246740][T13983] bond5 (unregistering): Released all slaves [ 876.276370][T13983] bond6 (unregistering): Released all slaves [ 876.296259][T13983] bond7 (unregistering): Released all slaves [ 876.317314][T13983] bond8 (unregistering): Released all slaves [ 876.317665][ C0] Dropped outbound packet type=88ca [ 876.355234][T13983] bond9 (unregistering): Released all slaves [ 876.375461][T13983] bond10 (unregistering): Released all slaves [ 876.395531][T13983] bond11 (unregistering): Released all slaves [ 876.423178][T13983] bond12 (unregistering): Released all slaves [ 876.448164][T13983] bond14 (unregistering): Released all slaves [ 876.473912][T13983] bond13 (unregistering): Released all slaves [ 876.476150][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 876.501438][T13983] bond15 (unregistering): Released all slaves [ 876.694991][T29565] wg2 speed is unknown, defaulting to 1000 [ 876.695031][T29565] syz2: Port: 1 Link DOWN [ 876.708735][T32012] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.708921][T32012] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.709086][T32012] bridge_slave_0: entered allmulticast mode [ 876.710849][T32012] bridge_slave_0: entered promiscuous mode [ 876.808689][ T4931] Bluetooth: hci2: command tx timeout [ 876.836948][T32217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6208'. [ 876.900888][T32012] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.900994][T32012] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.901170][T32012] bridge_slave_1: entered allmulticast mode [ 876.927911][T32012] bridge_slave_1: entered promiscuous mode [ 877.069132][T13983] ovs-s: left promiscuous mode [ 877.140188][T32012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.143671][T32012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.254981][T32012] team0: Port device team_slave_0 added [ 877.264080][T32012] team0: Port device team_slave_1 added [ 877.366144][ C0] Dropped outbound packet type=88ca [ 877.397941][T32012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.397958][T32012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.397978][T32012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.401800][T32012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.401815][T32012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.401838][T32012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.610204][T13983] IPVS: stopping backup sync thread 27601 ... [ 877.910148][T32243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6213'. [ 877.993018][T32012] hsr_slave_0: entered promiscuous mode [ 877.994083][T32012] hsr_slave_1: entered promiscuous mode [ 877.994772][T32012] debugfs: 'hsr0' already exists in 'hsr' [ 877.994791][T32012] Cannot create hsr debugfs directory [ 878.279078][T32273] netlink: 'syz.4.6216': attribute type 2 has an invalid length. [ 878.279101][T32273] netlink: 'syz.4.6216': attribute type 1 has an invalid length. [ 878.347835][T32222] net_ratelimit: 2 callbacks suppressed [ 878.347861][T32222] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 878.411420][ C0] Dropped outbound packet type=88ca [ 878.672699][T32280] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6217'. [ 878.829236][T32291] sctp: [Deprecated]: syz.4.6220 (pid 32291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 878.829236][T32291] Use struct sctp_sack_info instead [ 878.892017][ T4931] Bluetooth: hci2: command tx timeout [ 879.372658][T32298] netlink: 15320 bytes leftover after parsing attributes in process `syz.3.6223'. [ 879.436141][ C0] Dropped outbound packet type=88ca [ 879.742691][T32320] openvswitch: netlink: Duplicate or invalid key (type 0). [ 879.880912][T32329] netlink: 'syz.1.6222': attribute type 3 has an invalid length. [ 879.880932][T32329] netlink: 'syz.1.6222': attribute type 1 has an invalid length. [ 879.880944][T32329] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6222'. [ 879.932536][T32320] netlink: Conntrack attr has 8 unknown bytes [ 879.932573][T32320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.945238][T32330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6225'. [ 880.049929][T32318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.195382][T32318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.218380][T32322] netlink: 'syz.4.6225': attribute type 2 has an invalid length. [ 880.229684][T32334] gretap0: entered promiscuous mode [ 880.409049][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 880.476498][ C0] Dropped outbound packet type=88ca [ 880.536338][T32342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6230'. [ 880.562704][T32347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6231'. [ 880.610682][T32352] FAULT_INJECTION: forcing a failure. [ 880.610682][T32352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.610714][T32352] CPU: 0 UID: 0 PID: 32352 Comm: syz.0.6232 Not tainted syzkaller #0 PREEMPT(full) [ 880.610735][T32352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.610746][T32352] Call Trace: [ 880.610763][T32352] [ 880.610772][T32352] dump_stack_lvl+0xe8/0x150 [ 880.610805][T32352] should_fail_ex+0x410/0x560 [ 880.610834][T32352] _copy_from_user+0x2d/0xb0 [ 880.610861][T32352] ___sys_sendmsg+0x1c6/0x360 [ 880.610885][T32352] ? __lock_acquire+0x747/0x2de0 [ 880.610909][T32352] ? __pfx____sys_sendmsg+0x10/0x10 [ 880.610970][T32352] ? __fget_files+0x2a/0x420 [ 880.610994][T32352] ? __fget_files+0x3a2/0x420 [ 880.611031][T32352] __x64_sys_sendmsg+0x1b1/0x290 [ 880.611067][T32352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 880.611112][T32352] do_syscall_64+0x166/0x520 [ 880.611135][T32352] ? trace_irq_disable+0x3b/0x140 [ 880.611154][T32352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.611179][T32352] ? clear_bhb_loop+0x70/0xc0 [ 880.611202][T32352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.611224][T32352] RIP: 0033:0x7f758e19e159 [ 880.611246][T32352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.611264][T32352] RSP: 002b:00007f758f073028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.611285][T32352] RAX: ffffffffffffffda RBX: 00007f758e425fa0 RCX: 00007f758e19e159 [ 880.611299][T32352] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 880.611311][T32352] RBP: 00007f758f073090 R08: 0000000000000000 R09: 0000000000000000 [ 880.611323][T32352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.611334][T32352] R13: 00007f758e426038 R14: 00007f758e425fa0 R15: 00007fffe7ee4538 [ 880.611369][T32352] [ 880.628310][T13983] batman_adv: batadv0: Removing interface: macvtap1 [ 880.739406][T32357] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 880.794103][T32359] netlink: 'syz.0.6233': attribute type 1 has an invalid length. [ 880.863871][T13983] batman_adv: batadv0: Removing interface: macvtap2 [ 881.078815][T32361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.078918][T32361] batadv_slave_1: entered promiscuous mode [ 881.078932][T32361] batadv_slave_1: entered allmulticast mode [ 881.083295][T32347] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 881.146536][T32357] macvlan2: entered promiscuous mode [ 881.146559][T32357] macvlan2: entered allmulticast mode [ 881.525973][ C0] Dropped outbound packet type=88ca [ 881.642703][T32381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6237'. [ 882.321551][T32391] ÿÿÿ: renamed from bond_slave_0 (while UP) [ 882.356601][T32392] bridge9: entered allmulticast mode [ 882.391250][T32404] tipc: Cannot configure node identity twice [ 882.492339][T13983] hsr_slave_0: left promiscuous mode [ 882.510291][T13983] hsr_slave_1: left promiscuous mode [ 882.566433][ C0] Dropped outbound packet type=88ca [ 882.931129][T32424] netlink: 564 bytes leftover after parsing attributes in process `syz.4.6244'. [ 883.106512][T32432] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input37 [ 883.596175][ C0] Dropped outbound packet type=88ca [ 883.788925][T21953] smbdirect: ib_dev[syz2] removed [ 883.902740][T32441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6246'. [ 884.105113][T32443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6247'. [ 884.112677][T32012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 884.141045][T32012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 884.154692][T32012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 884.184532][T32450] netlink: zone id is out of range [ 884.184547][T32450] netlink: zone id is out of range [ 884.184555][T32450] netlink: zone id is out of range [ 884.184562][T32450] netlink: zone id is out of range [ 884.184569][T32450] netlink: zone id is out of range [ 884.184576][T32450] netlink: zone id is out of range [ 884.184585][T32450] netlink: zone id is out of range [ 884.184592][T32450] netlink: zone id is out of range [ 884.184599][T32450] netlink: zone id is out of range [ 884.184608][T32450] netlink: zone id is out of range [ 884.184933][T32012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 884.185507][T32450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6249'. [ 884.185525][T32450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6249'. [ 884.185549][T32450] netlink: 'syz.4.6249': attribute type 11 has an invalid length. [ 884.185562][T32450] netlink: 'syz.4.6249': attribute type 14 has an invalid length. [ 884.188522][T32012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 884.293118][T32012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 884.336997][T32012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 884.390590][T32458] netlink: 'syz.3.6252': attribute type 9 has an invalid length. [ 884.393110][T32012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 884.461138][T32459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6251'. [ 884.461165][T32459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6251'. [ 884.636370][ C0] Dropped outbound packet type=88ca [ 884.665415][T32012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.738913][T32012] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.819175][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.819299][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.825047][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.825181][ T6129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.921756][T13983] IPVS: stop unused estimator thread 0... [ 884.930923][T32477] bond12: (slave .`): Releasing active interface [ 885.014088][T32477] bond11: (slave veth0_to_bond): Releasing backup interface [ 885.627824][T32519] netlink: 'syz.1.6265': attribute type 4 has an invalid length. [ 885.675995][ C0] Dropped outbound packet type=88ca [ 885.722745][T32523] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 885.722791][T32523] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 885.723679][T32523] __nla_validate_parse: 1 callbacks suppressed [ 885.723695][T32523] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6266'. [ 885.829414][T32012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.937802][T32012] veth0_vlan: entered promiscuous mode [ 885.959719][T32012] veth1_vlan: entered promiscuous mode [ 886.017716][T32012] veth0_macvtap: entered promiscuous mode [ 886.031819][T32012] veth1_macvtap: entered promiscuous mode [ 886.077861][T32012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.095620][T32012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.206870][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.208266][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.208346][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.208445][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.510150][T21952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.510173][T21952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.639977][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.640000][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.716790][ C0] Dropped outbound packet type=88ca [ 886.816426][T32561] syzkaller1: entered promiscuous mode [ 886.816446][T32561] syzkaller1: entered allmulticast mode [ 886.901707][T32563] syzkaller1: entered promiscuous mode [ 886.901730][T32563] syzkaller1: entered allmulticast mode [ 887.043129][T19322] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 887.054748][T19322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 887.062779][T19322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 887.071816][T19322] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 887.072399][T19322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 887.296711][T32575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6275'. [ 887.540494][T32585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6277'. [ 887.540854][T32584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6277'. [ 887.714874][T32592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6278'. [ 887.765906][ C0] Dropped outbound packet type=88ca [ 887.904006][T32599] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6280'. [ 887.904040][T32599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6280'. [ 887.904054][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6280'. [ 887.951251][T32599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6280'. [ 887.951348][T32599] bridge_slave_1: left allmulticast mode [ 887.951368][T32599] bridge_slave_1: left promiscuous mode [ 887.951590][T32599] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.994580][T32599] bridge_slave_0: left allmulticast mode [ 887.994607][T32599] bridge_slave_0: left promiscuous mode [ 887.994821][T32599] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.040021][T21952] IPVS: starting estimator thread 0... [ 888.136618][T32610] IPVS: using max 32 ests per chain, 76800 per kthread [ 888.162110][T32613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6283'. [ 888.479913][T32616] bond16: entered allmulticast mode [ 888.584470][T32633] ip6gretap0: entered allmulticast mode [ 888.692935][T32630] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input38 [ 888.806254][ C0] Dropped outbound packet type=88ca [ 888.974809][T32642] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 888.974837][T32642] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 889.196039][ T4931] Bluetooth: hci5: command tx timeout [ 889.250355][T32647] netlink: 'syz.0.6292': attribute type 16 has an invalid length. [ 889.250377][T32647] netlink: 'syz.0.6292': attribute type 17 has an invalid length. [ 889.250564][T32648] netlink: 'syz.0.6292': attribute type 16 has an invalid length. [ 889.250577][T32648] netlink: 'syz.0.6292': attribute type 17 has an invalid length. [ 889.408767][T32658] netlink: 'syz.3.6295': attribute type 26 has an invalid length. [ 889.421825][T32647] batadv_slave_1: left promiscuous mode [ 889.421846][T32647] batadv_slave_1: left allmulticast mode [ 889.423906][T32647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.837561][ C0] Dropped outbound packet type=88ca [ 890.105693][T32565] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.106123][T32565] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.106283][T32565] bridge_slave_0: entered allmulticast mode [ 890.108487][T32565] bridge_slave_0: entered promiscuous mode [ 890.118023][T32565] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.118192][T32565] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.118338][T32565] bridge_slave_1: entered allmulticast mode [ 890.121722][T32565] bridge_slave_1: entered promiscuous mode [ 890.225141][T32565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.233940][T32565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.348731][T32565] team0: Port device team_slave_0 added [ 890.357178][T32565] team0: Port device team_slave_1 added [ 890.432810][T32565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.432829][T32565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.432853][T32565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.434414][T32565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.434428][T32565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.434449][T32565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.524498][T32565] hsr_slave_0: entered promiscuous mode [ 890.535494][T32565] hsr_slave_1: entered promiscuous mode [ 890.544383][T32565] debugfs: 'hsr0' already exists in 'hsr' [ 890.544405][T32565] Cannot create hsr debugfs directory [ 890.728531][T32699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input39 [ 890.878408][ C0] Dropped outbound packet type=88ca [ 890.883676][T32565] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.883698][T32565] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.000066][T32565] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.000100][T32565] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.099868][T32565] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.099892][T32565] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.182396][T32565] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.182430][T32565] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.277564][ T4931] Bluetooth: hci5: command tx timeout [ 891.350453][T32707] __nla_validate_parse: 7 callbacks suppressed [ 891.350472][T32707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6308'. [ 891.384399][T32707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6308'. [ 891.450797][T32712] xt_hashlimit: size too large, truncated to 1048576 [ 891.541886][T32714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6310'. [ 891.916253][ C0] Dropped outbound packet type=88ca [ 892.168628][T32738] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.6315'. [ 892.213771][T32565] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 892.245481][T32565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 892.248724][T32565] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 892.274234][T32565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 892.279754][T32565] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 892.300080][T32565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 892.313957][T32565] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 892.325544][T32565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.410703][T32755] FAULT_INJECTION: forcing a failure. [ 892.410703][T32755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.410743][T32755] CPU: 1 UID: 0 PID: 32755 Comm: syz.0.6318 Not tainted syzkaller #0 PREEMPT(full) [ 892.410764][T32755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 892.410775][T32755] Call Trace: [ 892.410783][T32755] [ 892.410792][T32755] dump_stack_lvl+0xe8/0x150 [ 892.410825][T32755] should_fail_ex+0x410/0x560 [ 892.410853][T32755] _copy_to_user+0x31/0xb0 [ 892.410880][T32755] simple_read_from_buffer+0xe1/0x170 [ 892.410912][T32755] proc_fail_nth_read+0x1bb/0x230 [ 892.410941][T32755] ? common_file_perm+0x20e/0x2b0 [ 892.410967][T32755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 892.410999][T32755] ? rw_verify_area+0x24a/0x4c0 [ 892.411028][T32755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 892.411055][T32755] vfs_read+0x213/0xa80 [ 892.411088][T32755] ? __pfx___mutex_lock+0x10/0x10 [ 892.411113][T32755] ? __pfx_vfs_read+0x10/0x10 [ 892.411142][T32755] ? __fget_files+0x2a/0x420 [ 892.411171][T32755] ? __fget_files+0x3a2/0x420 [ 892.411194][T32755] ? __fget_files+0x2a/0x420 [ 892.411226][T32755] ksys_read+0x150/0x270 [ 892.411258][T32755] ? __pfx_ksys_read+0x10/0x10 [ 892.411295][T32755] do_syscall_64+0x166/0x520 [ 892.411316][T32755] ? trace_irq_disable+0x3b/0x140 [ 892.411334][T32755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.411353][T32755] ? clear_bhb_loop+0x70/0xc0 [ 892.411375][T32755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.411394][T32755] RIP: 0033:0x7f758e15e98e [ 892.411412][T32755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 892.411427][T32755] RSP: 002b:00007f758f072fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 892.411445][T32755] RAX: ffffffffffffffda RBX: 00007f758f0736c0 RCX: 00007f758e15e98e [ 892.411458][T32755] RDX: 000000000000000f RSI: 00007f758f0730a0 RDI: 0000000000000004 [ 892.411470][T32755] RBP: 00007f758f073090 R08: 0000000000000000 R09: 0000000000000000 [ 892.411482][T32755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.411493][T32755] R13: 00007f758e426038 R14: 00007f758e425fa0 R15: 00007fffe7ee4538 [ 892.411524][T32755] [ 892.775106][T32565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.799120][T32565] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.824999][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.825115][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.853841][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.853959][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.942016][T32767] netlink: 564 bytes leftover after parsing attributes in process `syz.0.6319'. [ 892.966354][ C0] Dropped outbound packet type=88ca [ 892.996678][T32767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input40 [ 893.360323][ T4931] Bluetooth: hci5: command tx timeout [ 893.421923][ T316] erspan0: left allmulticast mode [ 893.422199][ T316] bridge0: port 1(erspan0) entered disabled state [ 893.511031][ T322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6325'. [ 893.768877][ T330] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6326'. [ 893.996155][ C0] Dropped outbound packet type=88ca [ 894.059125][ T347] net_ratelimit: 3 callbacks suppressed [ 894.059144][ T347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 894.133654][T32565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.211766][T32565] veth0_vlan: entered promiscuous mode [ 894.226097][T32565] veth1_vlan: entered promiscuous mode [ 894.272754][T32565] veth0_macvtap: entered promiscuous mode [ 894.299196][T32565] veth1_macvtap: entered promiscuous mode [ 894.346716][T32565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.377001][T32565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.457860][ T353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6332'. [ 894.491851][T21953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.492738][T13983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.528685][T21953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.528730][T21953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.649108][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.649130][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.725545][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.725567][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.831942][ T369] No such timeout policy "s " [ 894.831962][ T369] netlink: Failed to associated timeout policy 's ' [ 894.980507][ T364] tipc: Resetting bearer [ 895.038287][ C0] Dropped outbound packet type=88ca [ 895.437701][ T4931] Bluetooth: hci5: command tx timeout [ 895.789326][T19322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 895.791274][T19322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 895.796566][T19322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 895.817430][T19322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 895.823722][T19322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 895.983320][ T398] netlink: 564 bytes leftover after parsing attributes in process `syz.2.6342'. [ 896.076077][ C0] Dropped outbound packet type=88ca [ 896.179348][ T402] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input41 [ 896.908382][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6349'. [ 896.921835][T21953] pim6reg: left allmulticast mode [ 897.112676][T21953] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 897.116471][ C0] Dropped outbound packet type=88ca [ 897.408569][T21953] bond8 (unregistering): (slave gretap1): Releasing active interface [ 897.412908][ T444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6351'. [ 897.633469][T21953] bond10 (unregistering): (slave geneve3): Releasing active interface [ 897.833074][T21953] bond1 (unregistering): Released all slaves [ 897.846923][T21953] bond2 (unregistering): Released all slaves [ 897.852839][T21953] bond3 (unregistering): Released all slaves [ 897.880122][T21953] bond4 (unregistering): Released all slaves [ 897.894371][T21953] bond5 (unregistering): Released all slaves [ 897.909966][T21953] bond6 (unregistering): Released all slaves [ 897.916706][T19322] Bluetooth: hci4: command tx timeout [ 897.939917][T21953] bond7 (unregistering): Released all slaves [ 897.953828][T21953] bond0 (unregistering): Released all slaves [ 897.968131][T21953] bond8 (unregistering): Released all slaves [ 897.975743][T21953] bond9 (unregistering): Released all slaves [ 898.003389][T21953] bond10 (unregistering): Released all slaves [ 898.019134][T21953] bond11 (unregistering): (slave lo): Releasing backup interface [ 898.019572][T21953] bond11 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 898.021315][T21953] bond11 (unregistering): Released all slaves [ 898.060898][T21953] bond12 (unregistering): Released all slaves [ 898.074644][T21953] bond13 (unregistering): left promiscuous mode [ 898.075297][T21953] team0: Port device bond13 removed [ 898.094485][T21953] bond13 (unregistering): Released all slaves [ 898.108633][T21953] bond14 (unregistering): Released all slaves [ 898.122575][T21953] bond15 (unregistering): Released all slaves [ 898.141336][T21953] bond16 (unregistering): Released all slaves [ 898.156059][ C0] Dropped outbound packet type=88ca [ 898.175218][ T426] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 898.175376][ T431] netlink: 'syz.0.6350': attribute type 4 has an invalid length. [ 898.187763][ T434] ip6erspan0: entered allmulticast mode [ 898.499486][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 898.662862][T21953] tipc: Left network mode [ 899.099578][ T474] Bluetooth: MGMT ver 1.23 [ 899.200292][ C0] Dropped outbound packet type=88ca [ 899.331512][ T479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6356'. [ 899.331545][ T479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6356'. [ 899.434442][ T479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6356'. [ 899.435642][ T479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6356'. [ 899.577820][ T6129] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.577879][ T6129] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.577914][ T6129] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.577947][ T6129] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.595225][ T487] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6357'. [ 899.775494][ T492] FAULT_INJECTION: forcing a failure. [ 899.775494][ T492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.775526][ T492] CPU: 0 UID: 0 PID: 492 Comm: syz.1.6358 Not tainted syzkaller #0 PREEMPT(full) [ 899.775547][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 899.775559][ T492] Call Trace: [ 899.775567][ T492] [ 899.775576][ T492] dump_stack_lvl+0xe8/0x150 [ 899.775609][ T492] should_fail_ex+0x410/0x560 [ 899.775636][ T492] _copy_from_user+0x2d/0xb0 [ 899.775661][ T492] __sys_sendto+0x2a9/0x5a0 [ 899.775684][ T492] ? ksys_write+0x1e6/0x270 [ 899.775718][ T492] ? __pfx___sys_sendto+0x10/0x10 [ 899.775738][ T492] ? __mutex_unlock_slowpath+0x731/0x900 [ 899.775787][ T492] ? __pfx_ksys_write+0x10/0x10 [ 899.775815][ T492] __x64_sys_sendto+0xde/0x100 [ 899.775839][ T492] do_syscall_64+0x166/0x520 [ 899.775860][ T492] ? trace_irq_disable+0x3b/0x140 [ 899.775877][ T492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.775895][ T492] ? clear_bhb_loop+0x70/0xc0 [ 899.775916][ T492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.775935][ T492] RIP: 0033:0x7fee19d9e159 [ 899.775952][ T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.775968][ T492] RSP: 002b:00007fee17fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 899.775989][ T492] RAX: ffffffffffffffda RBX: 00007fee1a026090 RCX: 00007fee19d9e159 [ 899.776003][ T492] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000007 [ 899.776015][ T492] RBP: 00007fee17fd5090 R08: 0000200000000300 R09: 000000000000001c [ 899.776028][ T492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.776040][ T492] R13: 00007fee1a026128 R14: 00007fee1a026090 R15: 00007ffcac4043f8 [ 899.776072][ T492] [ 900.005583][T19322] Bluetooth: hci4: command tx timeout [ 900.183042][ T478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.183080][ T478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.245924][ C0] Dropped outbound packet type=88ca [ 900.507799][ T504] netlink: 564 bytes leftover after parsing attributes in process `syz.1.6360'. [ 900.578980][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 900.596962][T30024] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 900.599108][ T504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input42 [ 900.756805][ T478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.756841][ T478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.787976][ T510] openvswitch: netlink: Duplicate or invalid key (type 0). [ 900.788011][ T510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.039450][ T478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.039486][ T478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.075634][ T6129] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 901.300809][ C0] Dropped outbound packet type=88ca [ 901.314699][ T478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.314735][ T478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.367699][T29563] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 901.908410][ T549] FAULT_INJECTION: forcing a failure. [ 901.908410][ T549] name failslab, interval 1, probability 0, space 0, times 0 [ 901.908510][ T549] CPU: 0 UID: 0 PID: 549 Comm: syz.2.6370 Not tainted syzkaller #0 PREEMPT(full) [ 901.908530][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.908540][ T549] Call Trace: [ 901.908548][ T549] [ 901.908556][ T549] dump_stack_lvl+0xe8/0x150 [ 901.908586][ T549] should_fail_ex+0x410/0x560 [ 901.908610][ T549] ? __alloc_skb+0x1db/0x7a0 [ 901.908629][ T549] should_failslab+0xa8/0x100 [ 901.908650][ T549] ? __alloc_skb+0x1db/0x7a0 [ 901.908667][ T549] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 901.908691][ T549] ? __alloc_skb+0x18d/0x7a0 [ 901.908710][ T549] ? __alloc_skb+0x1db/0x7a0 [ 901.908734][ T549] __alloc_skb+0x1db/0x7a0 [ 901.908756][ T549] alloc_skb_with_frags+0xc6/0x760 [ 901.908787][ T549] sock_alloc_send_pskb+0x878/0x990 [ 901.908827][ T549] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 901.908849][ T549] ? ip6_pol_route+0x163/0x14d0 [ 901.908965][ T549] ? ip6_pol_route+0x10f2/0x14d0 [ 901.908980][ T549] ? ip6_pol_route+0x163/0x14d0 [ 901.909007][ T549] __ip6_append_data+0x2de9/0x40c0 [ 901.909072][ T549] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 901.909135][ T549] ? ip6_mtu+0x7d/0x4a0 [ 901.909156][ T549] ? __pfx___ip6_append_data+0x10/0x10 [ 901.909173][ T549] ? ip6_mtu+0x38c/0x4a0 [ 901.909190][ T549] ? __pfx_ip6_mtu+0x10/0x10 [ 901.909206][ T549] ? ip6_setup_cork+0x631/0xfb0 [ 901.909230][ T549] ip6_make_skb+0x2af/0x320 [ 901.909250][ T549] ? sk_dst_check+0x25/0x480 [ 901.909267][ T549] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 901.909286][ T549] ? __pfx_ip6_make_skb+0x10/0x10 [ 901.909318][ T549] ? ip6_dst_hoplimit+0x65/0x3e0 [ 901.909334][ T549] ? ip6_dst_hoplimit+0x65/0x3e0 [ 901.909354][ T549] udpv6_sendmsg+0x1dfb/0x2610 [ 901.909418][ T549] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 901.909437][ T549] ? udp_lib_get_port+0x177b/0x1c60 [ 901.909505][ T549] ? inet_send_prepare+0x1b4/0x260 [ 901.909554][ T549] ? lockdep_hardirqs_on+0x7b/0x110 [ 901.909574][ T549] ? inet_send_prepare+0x1b4/0x260 [ 901.909589][ T549] ? __local_bh_enable_ip+0xd6/0x140 [ 901.909611][ T549] ? inet_send_prepare+0x1b4/0x260 [ 901.909629][ T549] ? inet6_sendmsg+0xe4/0x120 [ 901.909681][ T549] ? __pfx_inet6_sendmsg+0x10/0x10 [ 901.909703][ T549] sock_sendmsg_nosec+0x90/0x180 [ 901.909723][ T549] __sys_sendto+0x408/0x5a0 [ 901.909743][ T549] ? ksys_write+0x1e6/0x270 [ 901.909769][ T549] ? __pfx___sys_sendto+0x10/0x10 [ 901.909786][ T549] ? __mutex_unlock_slowpath+0x731/0x900 [ 901.909833][ T549] ? __pfx_ksys_write+0x10/0x10 [ 901.909861][ T549] __x64_sys_sendto+0xde/0x100 [ 901.909884][ T549] do_syscall_64+0x166/0x520 [ 901.909902][ T549] ? trace_irq_disable+0x3b/0x140 [ 901.909919][ T549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.909944][ T549] ? clear_bhb_loop+0x70/0xc0 [ 901.909965][ T549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.909981][ T549] RIP: 0033:0x7fa2e099e159 [ 901.909998][ T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.910012][ T549] RSP: 002b:00007fa2e18f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 901.910030][ T549] RAX: ffffffffffffffda RBX: 00007fa2e0c25fa0 RCX: 00007fa2e099e159 [ 901.910042][ T549] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000007 [ 901.910052][ T549] RBP: 00007fa2e18f6090 R08: 0000200000000300 R09: 000000000000001c [ 901.910064][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.910073][ T549] R13: 00007fa2e0c26038 R14: 00007fa2e0c25fa0 R15: 00007ffc9ff4c3e8 [ 901.910102][ T549] [ 901.921021][ T6129] IPVS: starting estimator thread 0... [ 902.017408][ T551] IPVS: using max 32 ests per chain, 76800 per kthread [ 902.088575][T19322] Bluetooth: hci4: command tx timeout [ 902.327108][ C0] Dropped outbound packet type=88ca [ 902.363432][ T547] s: renamed from veth0 (while UP) [ 902.373421][ T50] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 902.381565][ T50] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 902.400045][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.400114][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.451255][ T6413] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 902.512808][ T564] xt_l2tp: missing protocol rule (udp|l2tpip) [ 902.531301][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.534145][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.534388][ T393] bridge_slave_0: entered allmulticast mode [ 902.572256][ T393] bridge_slave_0: entered promiscuous mode [ 902.781718][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 902.782389][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.782490][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.782645][ T393] bridge_slave_1: entered allmulticast mode [ 902.792799][ T393] bridge_slave_1: entered promiscuous mode [ 902.915408][ T393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.009304][ T583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6377'. [ 903.253826][T21953] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 903.377372][ C0] Dropped outbound packet type=88ca [ 903.383182][T21953] team0 (unregistering): Port device team_slave_1 removed [ 903.421708][T21953] team0 (unregistering): Port device team_slave_0 removed [ 903.599095][ T393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.630614][ T584] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 903.630850][ T588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6378'. [ 903.687936][ T6129] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.687965][ T6129] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.690560][ T393] team0: Port device team_slave_0 added [ 903.691357][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.691385][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.693952][ T393] team0: Port device team_slave_1 added [ 903.839977][ T158] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.840008][ T158] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.854904][ T393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.854922][ T393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.854944][ T393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.872186][ T393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.872203][ T393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.872225][ T393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.039285][ T393] hsr_slave_0: entered promiscuous mode [ 904.040359][ T393] hsr_slave_1: entered promiscuous mode [ 904.041047][ T393] debugfs: 'hsr0' already exists in 'hsr' [ 904.041065][ T393] Cannot create hsr debugfs directory [ 904.166375][T19322] Bluetooth: hci4: command tx timeout [ 904.204503][ T610] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6383'. [ 904.396074][ C0] Dropped outbound packet type=88ca [ 905.113249][T21953] IPVS: stop unused estimator thread 0... [ 905.129073][ T644] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 905.436439][ C0] Dropped outbound packet type=88ca [ 905.688127][ T659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6392'. [ 905.871884][ T659] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 905.871910][ T659] bridge1: entered promiscuous mode [ 906.083476][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 906.122059][ T671] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 906.330000][ T679] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6396'. [ 906.471203][ T683] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6396'. [ 906.471225][ T683] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6396'. [ 906.471301][ T683] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6396'. [ 906.485997][ C0] Dropped outbound packet type=88ca [ 906.979126][ T703] FAULT_INJECTION: forcing a failure. [ 906.979126][ T703] name failslab, interval 1, probability 0, space 0, times 0 [ 906.979158][ T703] CPU: 1 UID: 0 PID: 703 Comm: syz.0.6400 Not tainted syzkaller #0 PREEMPT(full) [ 906.979179][ T703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.979191][ T703] Call Trace: [ 906.979198][ T703] [ 906.979208][ T703] dump_stack_lvl+0xe8/0x150 [ 906.979244][ T703] should_fail_ex+0x410/0x560 [ 906.979276][ T703] should_failslab+0xa8/0x100 [ 906.979299][ T703] ? skb_clone+0x212/0x3a0 [ 906.979324][ T703] kmem_cache_alloc_noprof+0xa1/0x600 [ 906.979355][ T703] ? skb_clone+0x212/0x3a0 [ 906.979384][ T703] skb_clone+0x212/0x3a0 [ 906.979410][ T703] __netlink_deliver_tap+0x413/0x860 [ 906.979446][ T703] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.979472][ T703] netlink_deliver_tap+0x19c/0x1b0 [ 906.979497][ T703] netlink_unicast+0x781/0x940 [ 906.979525][ T703] netlink_sendmsg+0x813/0xb40 [ 906.979552][ T703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.979578][ T703] ? apparmor_socket_sendmsg+0x98/0x360 [ 906.979597][ T703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.979616][ T703] sock_sendmsg_nosec+0x13a/0x180 [ 906.979633][ T703] ____sys_sendmsg+0x54e/0x850 [ 906.979657][ T703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.979683][ T703] ? import_iovec+0x73/0xa0 [ 906.979705][ T703] ___sys_sendmsg+0x2a5/0x360 [ 906.979722][ T703] ? __lock_acquire+0x747/0x2de0 [ 906.979743][ T703] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.979792][ T703] ? __fget_files+0x2a/0x420 [ 906.979810][ T703] ? __fget_files+0x3a2/0x420 [ 906.979836][ T703] __x64_sys_sendmsg+0x1b1/0x290 [ 906.979856][ T703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.979893][ T703] do_syscall_64+0x166/0x520 [ 906.979911][ T703] ? trace_irq_disable+0x3b/0x140 [ 906.979926][ T703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.979953][ T703] ? clear_bhb_loop+0x70/0xc0 [ 906.979972][ T703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.979987][ T703] RIP: 0033:0x7f758e19e159 [ 906.980003][ T703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.980016][ T703] RSP: 002b:00007f758f073028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.980034][ T703] RAX: ffffffffffffffda RBX: 00007f758e425fa0 RCX: 00007f758e19e159 [ 906.980046][ T703] RDX: 0000000000048880 RSI: 0000200000000280 RDI: 0000000000000003 [ 906.980056][ T703] RBP: 00007f758f073090 R08: 0000000000000000 R09: 0000000000000000 [ 906.980065][ T703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.980075][ T703] R13: 00007f758e426038 R14: 00007f758e425fa0 R15: 00007fffe7ee4538 [ 906.980102][ T703] [ 906.983586][ T703] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 907.051508][ T703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 907.058089][ T703] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 907.518971][ C0] Dropped outbound packet type=88ca [ 907.785317][ T734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6403'. [ 907.804393][ T730] netlink: 'syz.3.6404': attribute type 21 has an invalid length. [ 907.804415][ T730] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6404'. [ 907.919257][ T730] netlink: 'syz.3.6404': attribute type 4 has an invalid length. [ 907.919278][ T730] netlink: 'syz.3.6404': attribute type 5 has an invalid length. [ 908.510054][ T745] __nla_validate_parse: 3 callbacks suppressed [ 908.510074][ T745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6406'. [ 908.556018][ C0] Dropped outbound packet type=88ca [ 908.616188][ T757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6406'. [ 908.768645][ T742] syzkaller0: entered promiscuous mode [ 908.768670][ T742] syzkaller0: entered allmulticast mode [ 908.778173][ T393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 908.818636][ T393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 908.819497][ T393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 908.858357][ T393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 908.927813][ T763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6410'. [ 909.050279][ T771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6411'. [ 909.050302][ T771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6411'. [ 909.050649][ T772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6411'. [ 909.050663][ T772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6411'. [ 909.085967][ T393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 909.120029][ T393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.121975][ T393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 909.162677][ T393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.606364][ C0] Dropped outbound packet type=88ca [ 909.910969][ T806] netlink: 'syz.1.6416': attribute type 4 has an invalid length. [ 910.642997][ C0] Dropped outbound packet type=88ca [ 911.681541][ C0] Dropped outbound packet type=88ca [ 912.735881][ C0] Dropped outbound packet type=88ca [ 913.609619][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 913.765880][ C0] Dropped outbound packet type=88ca [ 914.275387][ T854] batman_adv: batadv0: Adding interface: macvtap1 [ 914.275405][ T854] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.275431][ T854] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 914.366789][ T393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.445637][ T858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6422'. [ 914.464615][ T393] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.480263][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.480381][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.532063][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.532155][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.550359][ T853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6421'. [ 914.593107][ T853] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6421'. [ 914.593722][ T865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6424'. [ 914.618494][ T853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6421'. [ 914.796344][ C0] Dropped outbound packet type=88ca [ 915.836260][ C0] Dropped outbound packet type=88ca [ 916.202464][ T917] hsr_slave_0: left promiscuous mode [ 916.216228][ T917] hsr_slave_1: left promiscuous mode [ 916.446077][ T393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.766971][ T971] syz_tun: entered allmulticast mode [ 916.876000][ C0] Dropped outbound packet type=88ca [ 917.031488][ T393] veth0_vlan: entered promiscuous mode [ 917.084253][ T393] veth1_vlan: entered promiscuous mode [ 917.267822][ T393] veth0_macvtap: entered promiscuous mode [ 917.281458][ T393] veth1_macvtap: entered promiscuous mode [ 917.329869][ T393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.349049][ T393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.416690][ T158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.417175][ T158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.417252][ T158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.417290][ T158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.489980][ T998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6446'. [ 917.490006][ T998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6446'. [ 917.641573][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.641589][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.702009][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.702030][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.731910][ T1001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6447'. [ 917.731931][ T1001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6447'. [ 917.734829][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6447'. [ 917.809169][ T158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.809216][ T158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.809254][ T158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.809289][ T158] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.916392][ C0] Dropped outbound packet type=88ca [ 918.049925][ T1008] mac80211_hwsim hwsim74 wlan1: entered promiscuous mode [ 918.059608][ T1008] batman_adv: batadv0: Interface activated: macvtap1 [ 918.106418][ T6413] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 918.448299][ T1032] veth2: entered allmulticast mode [ 918.480354][ T1032] bond1: (slave veth2): Enslaving as an active interface with an up link [ 918.923158][ T1065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input43 [ 918.956061][ C0] Dropped outbound packet type=88ca [ 919.046276][T15726] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 919.072359][ T1062] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input44 [ 919.232697][ T1083] netlink: 'syz.1.6458': attribute type 23 has an invalid length. [ 919.347821][ T1087] netlink: 'syz.1.6460': attribute type 12 has an invalid length. [ 919.347840][ T1087] netlink: 'syz.1.6460': attribute type 29 has an invalid length. [ 919.347869][ T1087] netlink: 'syz.1.6460': attribute type 1 has an invalid length. [ 919.527143][ T1093] __nla_validate_parse: 15 callbacks suppressed [ 919.527165][ T1093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6462'. [ 919.997865][ C0] Dropped outbound packet type=88ca [ 920.150666][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6468'. [ 920.214737][ T1119] bridge0: port 3(bond0) entered blocking state [ 920.214894][ T1119] bridge0: port 3(bond0) entered disabled state [ 920.215050][ T1119] bond0: entered allmulticast mode [ 920.215066][ T1119] bond_slave_0: entered allmulticast mode [ 920.215082][ T1119] bond_slave_1: entered allmulticast mode [ 920.239256][ T1119] bond0: entered promiscuous mode [ 920.239282][ T1119] bond_slave_0: entered promiscuous mode [ 920.239553][ T1119] bond_slave_1: entered promiscuous mode [ 920.242183][ T1119] bridge0: port 3(bond0) entered blocking state [ 920.242404][ T1119] bridge0: port 3(bond0) entered forwarding state [ 920.294332][ T1118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6468'. [ 920.380102][ T1131] syzkaller0: entered promiscuous mode [ 920.380126][ T1131] syzkaller0: entered allmulticast mode [ 920.404734][ T1133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6473'. [ 920.404748][ T1133] netlink: 356 bytes leftover after parsing attributes in process `syz.2.6473'. [ 920.404756][ T1133] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6473'. [ 920.449109][ T1133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6473'. [ 920.855749][ T1152] syzkaller1: entered promiscuous mode [ 920.856223][ T1152] syzkaller1: entered allmulticast mode [ 921.045860][ C0] Dropped outbound packet type=88ca [ 921.093041][ T1164] netlink: 564 bytes leftover after parsing attributes in process `syz.2.6481'. [ 921.126343][ T1164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input45 [ 921.751218][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6486'. [ 921.819899][ T1178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6485'. [ 922.076242][ C0] Dropped outbound packet type=88ca [ 922.218385][ T1192] netlink: 'syz.4.6491': attribute type 7 has an invalid length. [ 922.218407][ T1192] netlink: 'syz.4.6491': attribute type 3 has an invalid length. [ 922.234830][ T842] udevd[842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 922.270830][ T1192] netlink: 'syz.4.6491': attribute type 32 has an invalid length. [ 922.900694][ T1220] nbd: socks must be embedded in a SOCK_ITEM attr [ 922.900950][ T1220] block nbd8: shutting down sockets [ 923.125841][ C0] Dropped outbound packet type=88ca [ 923.193883][ T1237] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 923.193921][ T1237] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 923.193958][ T1237] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 923.231589][ T1237] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 923.408663][ T1244] netlink: 'syz.2.6507': attribute type 2 has an invalid length. [ 923.854229][ T1246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 924.156613][ C0] Dropped outbound packet type=88ca [ 924.310430][ T1273] netlink: Only one type of NAT may be specified [ 924.310463][ T1273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.420479][ T1282] syzkaller1: entered promiscuous mode [ 924.420502][ T1282] syzkaller1: entered allmulticast mode [ 924.600376][ T1298] veth0: entered promiscuous mode [ 924.623956][ T1301] __nla_validate_parse: 8 callbacks suppressed [ 924.623976][ T1301] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6517'. [ 924.658736][ T1297] veth0: left promiscuous mode [ 924.764184][ T1306] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6523'. [ 924.854333][ T1309] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 925.206800][ C0] Dropped outbound packet type=88ca [ 926.236605][ C0] Dropped outbound packet type=88ca [ 926.441969][ T1324] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.6529'. [ 926.616323][ T1327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6529'. [ 927.276014][ C0] Dropped outbound packet type=88ca [ 927.317445][ T1275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 927.743574][ T1353] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6536'. [ 927.791519][ T1348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6536'. [ 927.831822][ T1348] netlink: zone id is out of range [ 927.831838][ T1348] netlink: zone id is out of range [ 927.831846][ T1348] netlink: zone id is out of range [ 927.831854][ T1348] netlink: zone id is out of range [ 927.831862][ T1348] netlink: zone id is out of range [ 927.831870][ T1348] netlink: zone id is out of range [ 927.831878][ T1348] netlink: zone id is out of range [ 927.921313][ T1361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6537'. [ 928.078819][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.078843][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.103435][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.103457][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.319224][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 928.320180][ C0] Dropped outbound packet type=88ca [ 928.413087][T19322] block nbd8: Receive control failed (result -22) [ 928.413951][ T1377] nbd8: detected capacity change from 0 to 32 [ 928.423393][ T2000] block nbd8: Dead connection, failed to find a fallback [ 928.423418][ T2000] block nbd8: shutting down sockets [ 928.423613][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.423745][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.426395][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.426424][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.426587][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.426609][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.426714][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.426736][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.427150][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.427173][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.427461][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.427482][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.428490][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.428513][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.428684][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.428710][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.432447][ T842] ldm_validate_partition_table(): Disk read failed. [ 928.432596][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.432631][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.432749][ T2000] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 928.432772][ T2000] Buffer I/O error on dev nbd8, logical block 0, async page read [ 928.437793][ T842] Dev nbd8: unable to read RDB block 0 [ 928.440812][ T842] nbd8: unable to read partition table [ 928.669498][ T842] ldm_validate_partition_table(): Disk read failed. [ 928.669947][ T842] Dev nbd8: unable to read RDB block 0 [ 928.670372][ T842] nbd8: unable to read partition table [ 928.883199][ T1396] net_ratelimit: 7 callbacks suppressed [ 928.883221][ T1396] openvswitch: netlink: Flow actions attr not present in new flow. [ 929.089711][ T1411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6548'. [ 929.228848][ T1407] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 929.356047][ C0] Dropped outbound packet type=88ca [ 929.358882][ T1377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 929.358906][ T1377] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 929.369314][ T1415] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 929.450043][ T1418] [ 929.452408][ T1418] ====================================================== [ 929.459444][ T1418] WARNING: possible circular locking dependency detected [ 929.466493][ T1418] syzkaller #0 Not tainted [ 929.470898][ T1418] ------------------------------------------------------ [ 929.477963][ T1418] syz.2.6550/1418 is trying to acquire lock: [ 929.483984][ T1418] ffffffff8ee90160 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 929.493165][ T1418] [ 929.493165][ T1418] but task is already holding lock: [ 929.500520][ T1418] ffff8880232d36b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 929.510386][ T1418] [ 929.510386][ T1418] which lock already depends on the new lock. [ 929.510386][ T1418] [ 929.520787][ T1418] [ 929.520787][ T1418] the existing dependency chain (in reverse order) is: [ 929.529804][ T1418] [ 929.529804][ T1418] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 929.537507][ T1418] __might_fault+0xcb/0x130 [ 929.542533][ T1418] _copy_from_user+0x28/0xb0 [ 929.547637][ T1418] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 929.554134][ T1418] ip_generic_getfrag+0x149/0x2d0 [ 929.559678][ T1418] __ip6_append_data+0x3b26/0x40c0 [ 929.565341][ T1418] ip6_append_data+0x108/0x270 [ 929.570651][ T1418] rawv6_sendmsg+0x1298/0x18c0 [ 929.575965][ T1418] sock_sendmsg_nosec+0x10e/0x180 [ 929.581527][ T1418] ____sys_sendmsg+0x54e/0x850 [ 929.586843][ T1418] ___sys_sendmsg+0x2a5/0x360 [ 929.592052][ T1418] __x64_sys_sendmsg+0x1b1/0x290 [ 929.597515][ T1418] do_syscall_64+0x166/0x520 [ 929.602648][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.609069][ T1418] [ 929.609069][ T1418] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 929.616802][ T1418] lock_sock_nested+0x41/0x100 [ 929.622097][ T1418] inet_shutdown+0x6a/0x390 [ 929.627118][ T1418] nbd_mark_nsock_dead+0x2cb/0x550 [ 929.632841][ T1418] recv_work+0x1cee/0x1e10 [ 929.637777][ T1418] process_scheduled_works+0xc3d/0x1630 [ 929.643861][ T1418] worker_thread+0xa47/0xfb0 [ 929.648970][ T1418] kthread+0x38b/0x480 [ 929.653549][ T1418] ret_from_fork+0x514/0xb70 [ 929.658650][ T1418] ret_from_fork_asm+0x1a/0x30 [ 929.663937][ T1418] [ 929.663937][ T1418] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 929.671584][ T1418] __mutex_lock+0x19d/0x1550 [ 929.676692][ T1418] nbd_queue_rq+0x373/0xff0 [ 929.681792][ T1418] blk_mq_dispatch_rq_list+0x499/0x1990 [ 929.687951][ T1418] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 929.694863][ T1418] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 929.701381][ T1418] blk_mq_run_work_fn+0x16c/0x300 [ 929.707074][ T1418] process_scheduled_works+0xc3d/0x1630 [ 929.713156][ T1418] worker_thread+0xa47/0xfb0 [ 929.718273][ T1418] kthread+0x38b/0x480 [ 929.722863][ T1418] ret_from_fork+0x514/0xb70 [ 929.727969][ T1418] ret_from_fork_asm+0x1a/0x30 [ 929.733294][ T1418] [ 929.733294][ T1418] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 929.740508][ T1418] __mutex_lock+0x19d/0x1550 [ 929.745631][ T1418] nbd_queue_rq+0xc1/0xff0 [ 929.750618][ T1418] blk_mq_dispatch_rq_list+0x499/0x1990 [ 929.756720][ T1418] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 929.763601][ T1418] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 929.771405][ T1418] blk_mq_run_work_fn+0x16c/0x300 [ 929.776965][ T1418] process_scheduled_works+0xc3d/0x1630 [ 929.783046][ T1418] worker_thread+0xa47/0xfb0 [ 929.788172][ T1418] kthread+0x38b/0x480 [ 929.792774][ T1418] ret_from_fork+0x514/0xb70 [ 929.797886][ T1418] ret_from_fork_asm+0x1a/0x30 [ 929.803179][ T1418] [ 929.803179][ T1418] -> #3 (set->srcu){.+.+}-{0:0}: [ 929.810326][ T1418] __synchronize_srcu+0xc9/0x2f0 [ 929.815837][ T1418] elevator_switch+0x1e8/0x7b0 [ 929.821233][ T1418] elevator_change+0x2fa/0x480 [ 929.826534][ T1418] elevator_set_default+0x375/0x440 [ 929.832257][ T1418] blk_register_queue+0x3f3/0x4e0 [ 929.837902][ T1418] __add_disk+0x6b8/0xdb0 [ 929.842765][ T1418] add_disk_fwnode+0x100/0x3a0 [ 929.848071][ T1418] nbd_dev_add+0x733/0xb60 [ 929.853022][ T1418] nbd_init+0x168/0x1f0 [ 929.857830][ T1418] do_one_initcall+0x250/0x870 [ 929.863137][ T1418] do_initcall_level+0x10a/0x1a0 [ 929.868661][ T1418] do_initcalls+0x59/0xa0 [ 929.873529][ T1418] kernel_init_freeable+0x29d/0x3e0 [ 929.879257][ T1418] kernel_init+0x22/0x1d0 [ 929.884121][ T1418] ret_from_fork+0x514/0xb70 [ 929.889238][ T1418] ret_from_fork_asm+0x1a/0x30 [ 929.894543][ T1418] [ 929.894543][ T1418] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 929.902373][ T1418] __mutex_lock+0x19d/0x1550 [ 929.907505][ T1418] elevator_change+0x1af/0x480 [ 929.912799][ T1418] elevator_set_none+0xb5/0x140 [ 929.918179][ T1418] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 929.924535][ T1418] nbd_start_device+0x189/0xb30 [ 929.929929][ T1418] nbd_genl_connect+0x167d/0x1cd0 [ 929.935490][ T1418] genl_family_rcv_msg_doit+0x233/0x340 [ 929.941576][ T1418] genl_rcv_msg+0x614/0x7a0 [ 929.946620][ T1418] netlink_rcv_skb+0x226/0x4a0 [ 929.951924][ T1418] genl_rcv+0x28/0x40 [ 929.956604][ T1418] netlink_unicast+0x7bd/0x940 [ 929.961905][ T1418] netlink_sendmsg+0x813/0xb40 [ 929.967198][ T1418] sock_sendmsg_nosec+0x13a/0x180 [ 929.972755][ T1418] ____sys_sendmsg+0x54e/0x850 [ 929.978048][ T1418] ___sys_sendmsg+0x2a5/0x360 [ 929.983253][ T1418] __x64_sys_sendmsg+0x1b1/0x290 [ 929.988730][ T1418] do_syscall_64+0x166/0x520 [ 929.993853][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.000268][ T1418] [ 930.000268][ T1418] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 930.008898][ T1418] blk_alloc_queue+0x544/0x690 [ 930.014180][ T1418] __blk_mq_alloc_disk+0x194/0x390 [ 930.019807][ T1418] nbd_dev_add+0x494/0xb60 [ 930.024753][ T1418] nbd_init+0x168/0x1f0 [ 930.029427][ T1418] do_one_initcall+0x250/0x870 [ 930.034800][ T1418] do_initcall_level+0x10a/0x1a0 [ 930.040265][ T1418] do_initcalls+0x59/0xa0 [ 930.045109][ T1418] kernel_init_freeable+0x29d/0x3e0 [ 930.050829][ T1418] kernel_init+0x22/0x1d0 [ 930.055685][ T1418] ret_from_fork+0x514/0xb70 [ 930.060788][ T1418] ret_from_fork_asm+0x1a/0x30 [ 930.066081][ T1418] [ 930.066081][ T1418] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 930.073288][ T1418] __lock_acquire+0x164c/0x2de0 [ 930.078865][ T1418] lock_acquire+0x115/0x350 [ 930.083879][ T1418] fs_reclaim_acquire+0x71/0x100 [ 930.089326][ T1418] prepare_alloc_pages+0x149/0x600 [ 930.094955][ T1418] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 930.101267][ T1418] alloc_pages_mpol+0x21e/0x390 [ 930.106633][ T1418] alloc_pages_noprof+0xb1/0x2b0 [ 930.112102][ T1418] __pud_alloc+0x3a/0x460 [ 930.116952][ T1418] handle_mm_fault+0x2519/0x3750 [ 930.122405][ T1418] do_user_addr_fault+0x746/0x1340 [ 930.128025][ T1418] exc_page_fault+0x6a/0xc0 [ 930.133038][ T1418] asm_exc_page_fault+0x26/0x30 [ 930.138403][ T1418] rep_movs_alternative+0x30/0xa0 [ 930.143951][ T1418] _copy_from_user+0x7a/0xb0 [ 930.149063][ T1418] rfcomm_dev_ioctl+0x1b4/0x21c0 [ 930.154602][ T1418] sock_do_ioctl+0x101/0x320 [ 930.159715][ T1418] sock_ioctl+0x57a/0x7e0 [ 930.164566][ T1418] __se_sys_ioctl+0xfc/0x170 [ 930.169676][ T1418] do_syscall_64+0x166/0x520 [ 930.174802][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.181213][ T1418] [ 930.181213][ T1418] other info that might help us debug this: [ 930.181213][ T1418] [ 930.191425][ T1418] Chain exists of: [ 930.191425][ T1418] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 930.191425][ T1418] [ 930.204015][ T1418] Possible unsafe locking scenario: [ 930.204015][ T1418] [ 930.211524][ T1418] CPU0 CPU1 [ 930.216945][ T1418] ---- ---- [ 930.222313][ T1418] rlock(&mm->mmap_lock); [ 930.226720][ T1418] lock(sk_lock-AF_INET6); [ 930.233731][ T1418] lock(&mm->mmap_lock); [ 930.240571][ T1418] lock(fs_reclaim); [ 930.244552][ T1418] [ 930.244552][ T1418] *** DEADLOCK *** [ 930.244552][ T1418] [ 930.252732][ T1418] locks held by syz.2.6550/1418: 2, last CPU#1: [ 930.259060][ T1418] #0: ffffffff90401ba0 (rfcomm_ioctl_mutex){+.+.}-{4:4}, at: rfcomm_dev_ioctl+0x187/0x21c0 [ 930.269271][ T1418] #1: ffff8880232d36b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 930.279195][ T1418] [ 930.279195][ T1418] stack backtrace: [ 930.285072][ T1418] CPU: 1 UID: 0 PID: 1418 Comm: syz.2.6550 Not tainted syzkaller #0 PREEMPT(full) [ 930.294341][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 930.304400][ T1418] Call Trace: [ 930.307683][ T1418] [ 930.310624][ T1418] dump_stack_lvl+0xe8/0x150 [ 930.315215][ T1418] print_circular_bug+0x2e2/0x300 [ 930.320244][ T1418] check_noncircular+0x12f/0x150 [ 930.325182][ T1418] __lock_acquire+0x164c/0x2de0 [ 930.330029][ T1418] ? __lock_acquire+0x747/0x2de0 [ 930.334958][ T1418] ? is_bpf_text_address+0x292/0x2b0 [ 930.340246][ T1418] ? kernel_text_address+0xa5/0xe0 [ 930.345375][ T1418] ? __kernel_text_address+0xd/0x30 [ 930.350598][ T1418] lock_acquire+0x115/0x350 [ 930.355104][ T1418] ? prepare_alloc_pages+0x149/0x600 [ 930.360406][ T1418] fs_reclaim_acquire+0x71/0x100 [ 930.365344][ T1418] ? prepare_alloc_pages+0x149/0x600 [ 930.370627][ T1418] prepare_alloc_pages+0x149/0x600 [ 930.375728][ T1418] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 930.381533][ T1418] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 930.387849][ T1418] ? __pfx_policy_nodemask+0x10/0x10 [ 930.393137][ T1418] alloc_pages_mpol+0x21e/0x390 [ 930.397987][ T1418] alloc_pages_noprof+0xb1/0x2b0 [ 930.402926][ T1418] __pud_alloc+0x3a/0x460 [ 930.406434][ C0] Dropped outbound packet type=88ca [ 930.412464][ T1418] handle_mm_fault+0x2519/0x3750 [ 930.417403][ T1418] ? __pfx_mt_find+0x10/0x10 [ 930.422067][ T1418] ? handle_mm_fault+0xf1/0x3750 [ 930.427001][ T1418] ? __pfx_handle_mm_fault+0x10/0x10 [ 930.432304][ T1418] ? __lock_acquire+0x747/0x2de0 [ 930.437328][ T1418] ? lock_mm_and_find_vma+0xa7/0x340 [ 930.442620][ T1418] do_user_addr_fault+0x746/0x1340 [ 930.447742][ T1418] exc_page_fault+0x6a/0xc0 [ 930.452247][ T1418] asm_exc_page_fault+0x26/0x30 [ 930.457086][ T1418] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 930.462903][ T1418] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 930.482508][ T1418] RSP: 0018:ffffc90003dc7ab8 EFLAGS: 00050202 [ 930.488569][ T1418] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 930.496542][ T1418] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90003dc7bd0 [ 930.504506][ T1418] RBP: ffffc90003dc7cb0 R08: ffffc90003dc7be7 R09: 1ffff920007b8f7c [ 930.512477][ T1418] R10: dffffc0000000000 R11: fffff520007b8f7d R12: ffff88807ee1f000 [ 930.520459][ T1418] R13: dffffc0000000000 R14: ffffc90003dc7bd0 R15: 0000200000000100 [ 930.528439][ T1418] _copy_from_user+0x7a/0xb0 [ 930.533040][ T1418] rfcomm_dev_ioctl+0x1b4/0x21c0 [ 930.537974][ T1418] ? kasan_quarantine_put+0xbb/0x1f0 [ 930.543265][ T1418] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 930.548637][ T1418] ? tomoyo_path_number_perm+0x219/0x5f0 [ 930.554275][ T1418] ? do_vfs_ioctl+0x116f/0x1530 [ 930.559125][ T1418] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 930.564151][ T1418] sock_do_ioctl+0x101/0x320 [ 930.568743][ T1418] ? __pfx_sock_do_ioctl+0x10/0x10 [ 930.573854][ T1418] ? hook_file_ioctl+0x1f2/0x600 [ 930.578791][ T1418] sock_ioctl+0x57a/0x7e0 [ 930.583122][ T1418] ? __pfx_sock_ioctl+0x10/0x10 [ 930.587966][ T1418] ? __fget_files+0x2a/0x420 [ 930.592550][ T1418] ? __fget_files+0x3a2/0x420 [ 930.597222][ T1418] ? __fget_files+0x2a/0x420 [ 930.601807][ T1418] ? bpf_lsm_file_ioctl+0x9/0x20 [ 930.606775][ T1418] ? __pfx_sock_ioctl+0x10/0x10 [ 930.611629][ T1418] __se_sys_ioctl+0xfc/0x170 [ 930.616213][ T1418] do_syscall_64+0x166/0x520 [ 930.620802][ T1418] ? trace_irq_disable+0x3b/0x140 [ 930.625816][ T1418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.631874][ T1418] ? clear_bhb_loop+0x70/0xc0 [ 930.636542][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.642436][ T1418] RIP: 0033:0x7fa2e099e159 [ 930.646845][ T1418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.666448][ T1418] RSP: 002b:00007fa2e18f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.674865][ T1418] RAX: ffffffffffffffda RBX: 00007fa2e0c25fa0 RCX: 00007fa2e099e159 [ 930.682828][ T1418] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004 [ 930.690800][ T1418] RBP: 00007fa2e0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 930.698770][ T1418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.706751][ T1418] R13: 00007fa2e0c26038 R14: 00007fa2e0c25fa0 R15: 00007ffc9ff4c3e8 [ 930.715180][ T1418] [ 930.783100][ T1377] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 930.783122][ T1377] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 930.864439][ T1377] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 930.868069][ T1377] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 930.872169][ T1377] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 930.872189][ T1377] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 930.909268][ T1377] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 930.909288][ T1377] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 931.133005][ T5277] veth0_vlan: left promiscuous mode [ 931.142731][T15726] veth0_vlan: entered promiscuous mode [ 931.435847][ C0] Dropped outbound packet type=88ca [ 932.486143][ C0] Dropped outbound packet type=88ca [ 933.515871][ C0] Dropped outbound packet type=88ca [ 934.556090][ C0] Dropped outbound packet type=88ca [ 935.605888][ C0] Dropped outbound packet type=88ca [ 936.646354][ C0] Dropped outbound packet type=88ca [ 937.675864][ C0] Dropped outbound packet type=88ca [ 938.716062][ C0] Dropped outbound packet type=88ca