last executing test programs: 1m5.44023326s ago: executing program 2 (id=3165): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r3, &(0x7f0000000800)=@un=@abs, &(0x7f0000000880)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd25, 0x5}}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1a"], 0x0, 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 1m5.079826575s ago: executing program 2 (id=3167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0xa838, 0xfff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000980), &(0x7f00000009c0), 0x8}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r4, @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4000045}, 0x22000800) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f00000001c0)='\x01\r\x00\xb5\x9c\x84SfA\xb9\xfe(\xbeb\x9a\xd7\xf9\x80\xd1w1\xa6MN\xd9D\xc6b\x06\xcc\xda6@o\x00\xf5RWX@cg\x17\x9f\xb94\xcf\xef\xc3\xb0\xcc\xa6\xd386v\xc6\x1d*\xd6\xf9\t\x0f\x7f^\x92\xf0\x93\xa2\xda\xf1\xa0\xf8\xb7\x9d\x81\xcd\x97\xd6\x94\xcc\xcbm\xc3\x96\xa0]M7\x00]\xf3z\xfd?\x1e0\xb8\xd8\xeb\xd3\xdcem\xcan5K\x8d!\x14\xf8C\xf4\x13k\xdc\x17J\xb7\xc4\xe6\x18%\nP\x171}\x1b\xb4&\xd9\x04\xa5\xb1\xabWJ/\t\xd1\xd0\x840\x14\xf7\x91\xecF\xed\xc5b\x00lon2\xc90s\x92\xba\x1e\xa2| \xfdp\x91U$\xff\x9a,\xfa:A\x956\x14\x9bl[\xa5=q\x8d`\x13\xf5\xe4\xdb@*:\xc6\x81O%\xe0\xc2\x0f\x90\x7f\xadBK9\x82\xe0\x84\xc1n\x0f\xddkN\xac\x86\xd2-J\xc5\x98\xc0?\x8e2{\x8b\xd5x\xe1\xfbT\xc6w\xbb\x97_\xd5\x92d\xb8t\x88 \xfc&\a\xd7\x15B\x01\xdc\x11\xe6\xd4\xf8\x9db=\x9f\xa29vi\x17e`\xe7\xfat{\xcf\xed\xd6>6\x7f\xa2\x00w\xd1\xe7>F\xd8\b\x91\xc2I\xbc\xc8H\xf1\x97\xd9\xe3HO\xe2|7!', 0x80001, 0x0, 0x1, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b40)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000b80)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000000bc0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x15, 0x3}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x2c, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x3a) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x88, 0x0, 0x1, 0x9, 0x9, 0x1, 0x8}}, @common=@dst={{0x48}, {0x8, 0x1, 0x0, [0x3, 0x7, 0x0, 0x6, 0x0, 0x1ff, 0x7ff, 0x51, 0x58, 0xda, 0x5, 0x3, 0x5, 0x2, 0x22f6], 0x9}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x854, 'syz0\x00', {0x5}}}}, {{@ipv6={@empty, @private1, [0xff, 0xffffffff, 0xff000000], [0x0, 0x0, 0xffffffff, 0xff], 'veth0_to_hsr\x00', 'caif0\x00', {}, {0xff}, 0x21, 0x59, 0x7, 0x6a}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x51ee8674, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000380), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)=0x124) r10 = socket(0xa, 0x3, 0xff) socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_int(r10, 0x29, 0x33, &(0x7f0000000b00)=0x7ffffefc, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r10, 0x29, 0x35, &(0x7f0000000c40)=0x2, 0x4) 1m4.737198895s ago: executing program 2 (id=3172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000001c0)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000280)="f2", &(0x7f00000002c0)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000800), 0x8, 0x10, &(0x7f0000000840), 0x10}, 0x94) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r5) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000580)={'bridge_slave_1\x00', @random="250ff0dd7085"}) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000880)=@assoc_value={0x0}, 0x0) (async) r7 = socket(0x1, 0x80802, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000008c0)={0x10000001}) epoll_pwait(r8, &(0x7f0000000900)=[{}], 0x1, 0x80100000, 0x0, 0x0) shutdown(r7, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000940)=[{{&(0x7f00000009c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000a40)}], 0x1}}, {{&(0x7f0000000a80)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="89", 0x1}], 0x1}}], 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x17, &(0x7f0000000b40)=@sack_info={r6, 0xef, 0x6}, 0xc) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000c00)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000040)={&(0x7f0000000100)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110003000040004"], 0x28}, 0x4004004) 1m4.39054005s ago: executing program 2 (id=3177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 10.203010711s ago: executing program 2 (id=3180): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{}, {0x9, 0xc1, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@LOG={0x0, 'LOG\x00', 0x0, {0xf7, 0x0, "d100975bb89532d2d5cb43525b50e520cda9cd2249f70741246d1fe722b1"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0xfffffffffffffdab, '\x00', 0x0, 0xffffffff}}}}, 0xff12) socket$kcm(0x10, 0x2, 0x0) unshare(0x8040480) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xb, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r5}, &(0x7f0000001280), &(0x7f00000012c0)=r6}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001300)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r7, 0x5, 0xb68, 0x0, &(0x7f0000001500)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001580)='memory.swap.events\x00', 0x275a, 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) sendfile(r9, r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0}, &(0x7f0000001600)=0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="2400000645350d0027bd7000fbdbdf250a3f20ab0202c8050070000008001900", @ANYRES32=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001700)) getgid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001740), &(0x7f0000001780)=0xc) 10.193452009s ago: executing program 2 (id=3185): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f0008000000180012800800010073697400", @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) listen(r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x1, 'veth0_to_bridge\x00', {}, 0x4}) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000101}, 0x4) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) close(r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x19) close(r5) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) unshare(0x2000000) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x2c, r11, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x4, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000855}, 0x810) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000640)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r9, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, &(0x7f00000003c0)="a6a76f933a73cceece66b3dd432c1af72d80a3c21cf796421cea35ebb3e5586dfc450e03f3237fbd5afc565398f9dd41697adb2c32f74199f4ab6fba5f75d3388afe9e98ff4fa0d68783d69c725bd7f23fa29f319e8258d9b757d5fc241ee8c16dd00274b0e54b83d609e16bc551257831d86b866c315f593407cc0735f57f4a857c3db5b42ba8dec580b7ce9374f5b92f721f35002fd7c690295367c7fb0a2f347b67ccc37ca77dd5d5bae2b4223c06143f22a8472984512bf84bb160f78c137aa563320edf98eccb07ebbf02fad082d9db9855bc4195", 0xd7) accept4(r13, &(0x7f0000000340)=@xdp, &(0x7f0000000180)=0x80, 0x80000) 3.415784938s ago: executing program 4 (id=3232): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000200)=0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beac", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595", 0x23}, {&(0x7f0000000600)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9", 0x4b}, {0x0}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000680)=0xdf8, 0x4) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000700)="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", 0x35c}], 0x1) recvmmsg(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/7, 0x7}, 0x1a6}], 0x1, 0x12001, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 3.374490298s ago: executing program 3 (id=3233): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509fdff00000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={&(0x7f0000000000)="0a9a308be1d10465a5afaa1eb99cf29222577dc378f88f7141915f5f75955c52b5c2b407dc23edb722dac7127e14f5ed34e210db3a5d87058bcbc2", &(0x7f0000000100)=""/57, &(0x7f0000000200)="799b5afcc26fa4af05771e84c082ef8cff7e83802501a7638c8846", &(0x7f0000000240)="8d0acd0f79be911dc9df949a57ada56c0647dd11bff34073f5c99f165d589fba83f12b9458a4c41d60d63c8eee412be990e943f2674bf5b2431aa226e5a676acf3e5e927d19b640bf1e5f6c5e40aff1b902024b80b01570975dc741563af17500f989178428435ae867043caba07d87c63", 0x4, r1}, 0x38) close(0x3) 2.602373086s ago: executing program 0 (id=3236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0x8, 0x8, &(0x7f0000000380)="0000ffffffffa060", &(0x7f00000003c0)=""/8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x10, 0x4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000001d00)='GPL\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x3, 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000002f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002fc0)={@cgroup=r4, r4, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003000)={0x3, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003040)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003080)={r6, r3, 0x4, r4}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f00000030c0)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000003100)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000003140), 0x3) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000003180)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a3df08cf1f5ef48d"}, 0x38) writev(r7, &(0x7f00000031c0)=[{&(0x7f0000003200)="f9f9ce1089bfa146f634eca9603b2fa3a2cd8d4981cacf3c167389b9ae845e59030adc342efca0580d429546b60dd1f2f1e39943bcdf13deed882485d0e6c680e624faac01d70f4d8d3d1592dc4fe105f55b1e148c3b3d47540d69a738f29ff3ca17644b074eb095fcea7b2c3a1ff16975ab4408f58242c6a43561baa2593ac11e11b9e71bcbb4db3c5fae3628497e1877670b6bb1aaa87b59058285e3549920f617af265c6023212177f99d5132ae6b47604f", 0xb3}], 0x1) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x110, r0, 0xdf469000) bpf$TOKEN_CREATE(0x24, &(0x7f0000001ac0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000b0000000600000002000093080000000900000008400008b60200000800000002000000355900800400000000000010020000000000302e002e61002e2e"], &(0x7f0000000a40)=""/4089, 0x41, 0xff9, 0x1, 0x3}, 0x28) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000000100)={0x0, 0xea60}, 0x10) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000100000000a00000014000780080012400000000305001500440000000500010006001600050005000a00000005000400000000000900020073797a300000800011000300686173683a6e65742c6e657400000000"], 0x60}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1800e1e5eff9010401000000000000002d"], 0x20}}, 0x0) bind$nfc_llcp(r8, &(0x7f0000000480)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x82, "a8011a1b9e6ae27a9359f7cbd783bb386972d417c319ee95f569ad0a80beeeafe342c6d6a38fbc56c5c27e54528434e8979e460f146ae9c29be23064599cf8", 0x16}, 0x60) 2.516280483s ago: executing program 4 (id=3237): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x84, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008015}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000457de1b83b805d0cf7c60002d80a000000a986c0580108e133f3c9f59adcbd70233ae22dc8562b94b6e87a13e1263c66a597e947fc96dfc9891f4b130b920b05a9d6a1e9a810cf0058416402a9359108675da5bed1338fdc94138a8b0c0cde946bcdc9183a1e39c9d442e366bffee9b866b32415c0b113b94ef2", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x6, 0xc, &(0x7f0000001dc0)=ANY=[], &(0x7f0000001e00)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r3, 0x2000000, 0x8a, 0x0, &(0x7f0000000ac0)="630b008646dc3f0adf33c9f7b986e0d251344dafa489c78c38f8094be113b6ba1fd63706469c372d9a1719d3dfba225b0531be523c869ef784cea1f2de2b677d63e60bddf4051020c1c222d1b4d83e8949a026300f2b0e2bbf383f9aefc7c07e412e1dd55713089435efeb13ad2ad18bcbd2386e44a58bf3ef970a52e9ec9229a1cd552c0190fc540b2c", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000001dc0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001f00)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000001f40)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000001f80)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000006c0)={0x0, 0x3}, &(0x7f0000000700)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) ioctl$sock_proto_private(r6, 0x89e3, &(0x7f00000007c0)="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") sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b80)={0x160, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x58}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x4}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x7}, {0x7, 0x2}, {0x5, 0x5}, {0x4, 0x6}, {0x6, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x1}, {0x1, 0x4}, {0x6, 0x2}, {0x3, 0x2}, {0x4, 0x5}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x2, 0x9}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x6}, {0x5, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0xa}, {0x7, 0x1}, {0x2, 0x8}, {0x2, 0x7}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x1}, {0x7, 0x6}, {0x2, 0x2}, {0x4}, {0x3}, {0x4, 0x5}, {0x0, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0xb, 0xb, 0x48]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x549, 0x10, 0x6431, 0x8, 0x401, 0x212, 0x4]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x30, 0x16, 0x1, 0x5f, 0x15, 0x0, 0x5, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0x2}, {0x2}, {0x2, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x6, 0x5}, {0x5, 0x2}, {0x2, 0x8}, {0x2}, {0x3, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x0, 0x2}, {0x0, 0xa}, {0x2, 0x5}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0xc, 0x60, 0x30, 0x9, 0x18, 0x30, 0x60, 0x3c, 0x36, 0x6c, 0x24, 0x6, 0xc, 0x6, 0x9, 0xb, 0xc, 0x1b, 0x1b, 0xc, 0x12, 0x1b, 0x48, 0x6c, 0x48, 0x3, 0x2, 0x48, 0x1, 0xb, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x7, 0x7, 0x6, 0x5, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x18001}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r7, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r6, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f0000000500)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 2.288420793s ago: executing program 3 (id=3238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x10, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020003000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0fffff3c70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000d0ffffff0000b7050000080000004608f1ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.178410836s ago: executing program 3 (id=3240): r0 = socket(0x400000000010, 0x3, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3}, 0x4) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="0204000308005100c081e08077792c0100000000000000010016004e210000020001000000000000ed000000000000030005000000000002000000ac1414bb0000000000000000"], 0x40}, 0x1, 0x7}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf42, 0x4) (async) sendto$packet(r1, &(0x7f0000000140)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f00000001c0)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x3}, 0x4) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r5, &(0x7f0000000280)={0x2, 0xffff, @local}, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="578d2ddf2e37bd7000fbdbdf250200001a14000180080003007f0000010600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r9, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x5c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044c60}, 0x82) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0xc0, 0x0, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcadf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc5}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x617}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xde}]}, 0xc0}, 0x1, 0x0, 0x0, 0x240048c0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="611228000000000061133c0000000000bf1000000000000025000200f7e4ffff3d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmmsg(r5, &(0x7f0000000300), 0x2d, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) 2.067047968s ago: executing program 1 (id=3241): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="190200000a0000000000000000ffefffd40a00009000000000000000000800dc"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x7d, &(0x7f0000000180)=""/125, 0x41000, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000800), 0x4000190, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000840)={0x0, 0x1, 0x1, 0x1}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000005c0)=0x407f, 0x4) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000600)=0x4800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000640)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x1, 0x3f, 0x240, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x6}, 0x50) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000480)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$unix(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x117, 0x2, {0xffffffffffffffff}}}], 0x40, 0x20048811}}], 0x1, 0x4000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000080b39d205fd215133518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000000095000000000000006e98ffff0000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000680)={r9, 0xf340, 0x7, "9e502f228c74d09316487ed8f8740d552f20a9d05ff70afe7aee6636560a48ee3ed3973a4864cc81a02d93e457d39418e2d1bd69d34ceb5991afc0c92ac367110a699473fbf5ca574a6fedc92407394f200c4b32e1a082e866a87e6976b37e63646fe593cfc35f4bcaa03f9282d896d66b1cf19227f96e0531a761de23d4f76185ca0a533e53e01c897afea4d585b6babaafbed4a0bf2cac3b37f9928a77b0"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000006, 0x12, r10, 0xa8753000) 1.883624979s ago: executing program 0 (id=3242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1e, 0x4, &(0x7f0000001180)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x42}]}, &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="f7", 0x1}], 0x300, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000000a0a1500"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000000a0a1500"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800)=ANY=[], 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800)=ANY=[], 0xfe33) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000010000000500000000000000fbffffffffffffff00000000000000000000000040004000000000000000000200000004000000000200000000000000000100000000000084010500fc020000000000000000000000000001000004d43c0000000200000000000000000000000000ffff000000000735000004000000070000000000000002000000ac1414aa000000000000000000000000000004d33c0000000a000000ac1e00010000000000000000000000000000000004010c00050000000f00000008000000ac1414aa000000000000000000000000000004d42b0000000a000000fe8800000000000000000000000001010235000001020200a7010000810000000400000064010101000000000000000000000000000004d5330000000a00000064010102000000000000000000000000023500000003070004000000000000000000000000000000000000000000000000000000000004d5330000000a000000640101000000000000000000000000000135000001024000090000000400000001000000ac1414aa000000000000000000000000000004d43200000000000000ac1414aa000000000000000000000000ff3400000e"], 0x23c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x38, r9, 0x1, 0x0, 0x800000, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x2008040) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r10, &(0x7f0000000b00)=[{{&(0x7f0000000b80)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="957a1055d27ae347", 0x8}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9757}}], 0x18}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd5400fcdbdf258100000008000300", @ANYRES32=r11, @ANYBLOB="06006600c78800001600330084000b00ffffffffffffffffffffffff060000000a0006"], 0x4c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000014) sendmsg$nl_route_sched(r5, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff3, 0xffff}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xf}}]}}]}, 0x3c}}, 0x20044000) socket$nl_route(0x10, 0x3, 0x0) 1.684699582s ago: executing program 1 (id=3243): bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x13, 0x4, &(0x7f0000001300)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0xb9}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000001340)='GPL\x00', 0x5, 0xff92, &(0x7f0000001380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x7000000}, 0x36c, 0x10, &(0x7f00000014c0), 0x26}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xb, 0x1, 'mangle\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8082) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd25, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff3}, {0xa, 0xc}, {0xfff3, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0xb1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0xa48, 0x8e0, 0xb, 0x148, 0x8e0, 0x148, 0x9b0, 0x230, 0x242, 0x9b0, 0x215, 0x3, 0x0, {[{{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffff00, 'virt_wifi0\x00', 'wg0\x00', {}, {}, 0x73, 0x1, 0x40}, 0x0, 0x878, 0x8e0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x3}, {0x8}, {0xebd, 0x3}, {0x8, 0x1}, {0xff, 0x2}, {0x80, 0x1}, {0x3ff, 0x2}, {0x10001, 0x2}, {0xed}, {0xa06}, {0xffffffff, 0x1}], [{0x9, 0x1e}, {0x5, 0x4}, {0x4, 0x6}, {0xe4f8, 0x4}, {0x3, 0x1}, {0x401, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x940, 0xc}, {0xa, 0x8}, {0x3, 0x2}], 0x4, 0x2}, {[{0x8, 0x1}, {0x3, 0x2}, {0xa48e, 0x1}, {0x2, 0x1}, {0x1e, 0x3}, {0x1}, {0x8001}, {0xfa0}, {0x7, 0x2}, {0x5}, {0x2, 0x2}], [{0x0, 0x6a7}, {0x6, 0xffffffff}, {0x3, 0x41}, {0x20000000, 0x7ff}, {0x4, 0x4}, {0xff800000, 0x1}, {0x6, 0x8}, {0x401, 0x401}, {0x5, 0x5}, {0x7fff, 0x1ff}, {0x6, 0x100}], 0x2, 0x8}, {[{0x8, 0x3}, {0x9, 0x2}, {0x4, 0x2}, {0x6}, {0x40, 0x2}, {0x9, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {}, {0x8000, 0x3}, {0xfffffff1}], [{0x5, 0xf7b}, {0x400}, {0x2, 0x6}, {0x6, 0x10000}, {0x4, 0x6}, {0x6, 0xa131}, {0x7, 0x3}, {0xffffffff}, {0x5, 0x40}, {0x0, 0xf8000000}, {0x5}], 0x1, 0x5}, {[{0x4c2f, 0x1}, {0x73, 0x1}, {0x2}, {0x2, 0x1}, {0xc, 0x3}, {0x2, 0x3}, {0x9, 0x2}, {0xd, 0x3}, {0x5, 0x3}, {0x1, 0x2}, {0x7}], [{0x7005d414, 0x3}, {0x9, 0xa}, {0x6, 0x3745}, {0x7fffffff, 0x1}, {0xfffffffd, 0x4}, {0x0, 0x800}, {0xc, 0x3ff}, {0x6, 0xffff5108}, {0xdb, 0x1}, {0xb, 0xc2df}, {0x6, 0x1}], 0x9, 0x3}, {[{0x9, 0x3}, {0x1, 0x2}, {0xb3, 0x3}, {0x8, 0x1}, {0x6, 0x3}, {0x7}, {0x316, 0x3}, {0x4}, {0x5c7, 0x1}, {0x6}, {0x1, 0x1}], [{0x3c, 0x5}, {0x8, 0x7}, {0xfffffffb, 0x59de3913}, {0x100, 0x7}, {0x3, 0x5cf0}, {0x8, 0x5}, {0x7, 0x3}, {0xca, 0x5}, {0x80000001, 0x6}, {0xfffffffc, 0x39}, {0x800, 0x9}], 0x5, 0x6}, {[{0x30000, 0x1}, {0x9, 0x2}, {0x6}, {0x101, 0x2}, {0x5, 0x2}, {0x4c}, {0x6bd, 0x3}, {0x8, 0x1}, {0x5}, {0x7, 0x3}, {0x2, 0x1}], [{0x3, 0x8}, {0x7e, 0x38000}, {0x1, 0x1}, {0x9, 0x8}, {0x10001}, {0x5, 0x6}, {0x41, 0x100}, {0x10001, 0x3}, {0x8, 0x7fff}, {0x7, 0x4}, {0x81, 0x10000}], 0x8, 0x3}, {[{0x400}, {0x8000}, {0x9}, {0xffffff7f}, {0x9}, {0x7fff, 0x1}, {0x7f}, {0x5, 0x1}, {0x7f, 0x2}, {0x7fff, 0x2}, {0x80000000, 0x3}], [{0x1, 0x8bbb}, {0x6, 0x7}, {0xb, 0x8001}, {0x1000, 0xfffffff9}, {0x80, 0xa}, {0x6, 0xfffff801}, {0x8, 0x5}, {0x0, 0xb8}, {0xfff, 0xfffffffa}, {0x0, 0x3ff}, {0x5, 0x8001}], 0xa, 0x3}, {[{0x1, 0x1}, {0x8}, {0x6cf8, 0x2}, {0x8, 0x1}, {0x9, 0x1}, {0x6, 0x3}, {0x8, 0x1}, {0x6, 0x2}, {0x2, 0x2}, {0x5}, {0x3, 0x3}], [{0x5, 0x81}, {0x7, 0x4}, {0x1, 0x9}, {0x2, 0x5}, {0x5, 0x7}, {0xc0, 0x3}, {0x620, 0x9}, {0x0, 0x5}, {0x6, 0xe7c}, {0x9, 0x8}, {0x6, 0xfffffffc}], 0xb, 0xa}, {[{0x800, 0x2}, {0x80000001}, {}, {0x8, 0x2}, {0x7, 0x1}, {0x8001, 0x3}, {0x0, 0x3}, {0xffffffff, 0x2}, {0xfff, 0x2}, {0xc81}, {0x10, 0x3}], [{0xfb, 0xa58b}, {0x3, 0xffffff19}, {0x3, 0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x7f, 0x6}, {0xadec0000, 0x3}, {0x6, 0x87}, {0x80000000, 0x8}, {0x9, 0x7}, {0x4, 0x6}], 0x6, 0x6}, {[{0x8001, 0x3}, {0x6}, {0x8}, {0x8, 0x3}, {0x1, 0x2}, {0x7, 0x78920b0b5ea67a77}, {0x6cc, 0x2}, {0x100, 0x2}, {0x9}, {0x7, 0x3}, {0x10000}], [{0x6ee6, 0x2}, {0x9, 0x10000}, {0x10, 0x3}, {0x400, 0x3}, {0x7, 0x7}, {0x5, 0x2}, {0x5652, 0x4}, {0xe, 0x10}, {0x5, 0x9}, {0x0, 0x3}, {0x383, 0x8}], 0x6, 0x5}, {[{0x200, 0x3}, {0x5, 0x1}, {0x1, 0x3}, {0xfffffffc}, {0x48000, 0x2}, {0xe, 0x2}, {0x1, 0x2}, {0x4}, {0x9, 0x1}, {0x7, 0x1}, {0xe}], [{0x80000001, 0x3}, {0x4, 0x9}, {0x4, 0x3ff}, {0x1b4d, 0x7fffffff}, {0x80, 0xe0f1}, {0xb, 0xf}, {0x6, 0x4}, {0x7, 0x5}, {0x6, 0x200}, {0x8e, 0x4}, {0x10, 0x86e}], 0xb, 0x8}], 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x0, 0x5, 'netbios-ns\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0xfffd, [0x1, 0x0, 0x2, 0x2, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xaa8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e40)={0xe0, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x14}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000f40)=0x10, 0x4) sendmmsg$inet6(r3, &(0x7f0000000f80)=[{{&(0x7f0000001000)={0xa, 0x4e23, 0xcb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c, &(0x7f0000001040)=[{&(0x7f0000001080)="a7", 0x1}], 0x1}}, {{&(0x7f00000010c0)={0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000001140)=']', 0x1}], 0x1}}], 0x2, 0x200400c0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.516092945s ago: executing program 4 (id=3244): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, 0x2, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000200)={@private=0xe1010203, @empty, 0x1}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000280)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) sendfile(r0, r4, 0x0, 0x20000f2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.505856833s ago: executing program 3 (id=3245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9102}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a00)={r3, &(0x7f0000000a40)}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x4}}]}}]}, 0x44}}, 0x4084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x4}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) socket$inet(0x2, 0xa, 0x8) (async) r4 = socket$inet(0x2, 0xa, 0x8) writev(r4, &(0x7f0000000b80)=[{&(0x7f0000000b40)="7dea77d15ac24409a4458b83f65f7e6cceead4b891c4927ed764311cae0ebe461eb0d82b1d66cefa", 0x28}], 0x1) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r6) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a40)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="600000000101030000000000000000000a0000004400028006000340000300000c00028005000100120000002c000180140003"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f00000005c0), 0x56) (async) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f00000005c0), 0x56) sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f0000000780)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f0000000780)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.428750245s ago: executing program 0 (id=3246): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xffffffff) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)=0xfff) write$ppp(r0, &(0x7f0000000140), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x52, &(0x7f0000000200)=0x2, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/7, 0x7}, 0x1a6}], 0x1, 0x12001, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.333374196s ago: executing program 4 (id=3247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000b86f0026ff5e6a0f287813c3ed4405aa21c9958c21fee558a3eba18b8129958f7c93177ef85820bf5674a4961d7c0072a83ef8cde94669cca7eb05db0a223df2764f1319a8ac96382b453456ca4e701b32e5f9a7ea1a5277e9f8df62fb22d2afd7b4cbc93c39e109effd88c58bc4def1b393424d2d7ba6bc6aaf22"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) unshare(0xa020480) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x366, 0x10, &(0x7f0000000580), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)={@map=r4, r3, 0x5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1a, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff18100000", @ANYRES32=r0, @ANYBLOB="0000004dfab69c4cbcbdd37254e3000095000002000000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4aa}, 0x94) 1.075160033s ago: executing program 4 (id=3248): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xb8, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004800}, 0xc005) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000020, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x5, &(0x7f0000000f00)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xc, &(0x7f0000001000)=ANY=[], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001080)={r7, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a40)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000000440)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 1.073742692s ago: executing program 1 (id=3249): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x10, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020003000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0fffff3c70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000001100000000b7050000080000004608f1ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 913.807585ms ago: executing program 3 (id=3250): ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@local, @remote, @broadcast}, &(0x7f0000000280)=0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'raw\x00', 0x0, [0x1, 0xfffffffa, 0x9, 0x726, 0x3]}, &(0x7f0000000340)=0x54) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000380)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f00000003c0)=0xc) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000400)=0x8, 0x4) socketpair(0x3, 0x5, 0x6, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000500)={0x2, @broadcast, 0x4e22, 0x4, 'lblc\x00', 0x2, 0x108e18fb, 0x10}, 0x2c) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000640)={r0, &(0x7f0000000540)='\x00', 0x84800, &(0x7f0000000580)={@_ha_fsid={[0x2, 0x56]}, {0xfff9, 0x1, 0x1, 0x36a80000000}}, 0x7, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x8000}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000680)={0x40, 0xfff9, 0x9}, 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000006c0)=@srh={0x67, 0x8, 0x4, 0x4, 0x0, 0x0, 0x7, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x16}, @remote, @mcast1]}, 0x48) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000740)={0x1, 0x80000001}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000780)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={r4, 0x20, &(0x7f0000000b80)={&(0x7f00000009c0)=""/197, 0xc5, 0x0, &(0x7f0000000ac0)=""/183, 0xb7}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1d, 0x1, &(0x7f00000007c0)=@raw=[@alu={0x7, 0x1, 0xd, 0xb, 0x7, 0xfffffffffffffffe, 0x8}], &(0x7f0000000800)='syzkaller\x00', 0xf6, 0xe5, &(0x7f0000000840)=""/229, 0x41100, 0x60, '\x00', r7, @lsm=0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0x10, 0x4, 0xc}, 0x10, r8, r4, 0x4, 0x0, &(0x7f0000000c00)=[{0x1, 0x5, 0x6}, {0x0, 0x5, 0xa, 0x9}, {0x0, 0x4, 0x9, 0x8}, {0x5, 0x1, 0x5, 0x6}], 0x10, 0x4}, 0x94) r9 = openat$cgroup_int(r4, &(0x7f0000000d00)='cpu.idle\x00', 0x2, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000008, 0x110, r4, 0x180000000) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000d40)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r10, 0x4c012000) connect$inet6(r1, &(0x7f0000000d80)={0xa, 0x4e20, 0x5, @empty, 0x1}, 0x1c) connect$bt_rfcomm(r3, &(0x7f0000000dc0)={0x1f, @none, 0x2}, 0xa) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r3) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000f40)={&(0x7f0000000e00), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r11, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x48800) poll(&(0x7f0000000f80)=[{r9, 0x40}, {r9, 0x9128}, {r1, 0x4}, {r6, 0x200}, {r1}, {r5, 0x44}], 0x6, 0x3ff) 833.221339ms ago: executing program 1 (id=3251): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0xffffffffffffffd2}, 0x48) r0 = socket(0x2d, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x24) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a0000c387c131cb62034300000000850000001600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 752.648207ms ago: executing program 0 (id=3252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000700)='1', 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800100006000000010000000300000b0000000000002e"], &(0x7f0000000900)=""/3, 0x46, 0x3, 0x1}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048b1}, 0x8c0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x1, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0xe}, 0x94) 617.598967ms ago: executing program 1 (id=3253): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xd, &(0x7f0000000540)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}, @generic={0xb7}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000600)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000640)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000680), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a3df08cf1f5ef48d"}, 0x38) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000740)="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", 0x4000}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ec0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2886}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x1cf94b1f273faa1b}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x2400c000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r8, &(0x7f0000001080)=[{{&(0x7f00000010c0)=@rc={0x1f, @none, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000001140)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffd9}}], 0x18}}], 0x1, 0x404c8c5) write$cgroup_int(r0, &(0x7f0000000180), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f00000001c0)) r9 = socket$kcm(0x2d, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r9}, 0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000005f2e3061300d302e613000"], &(0x7f0000000080)=""/3, 0x30, 0x3, 0x0, 0xe}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x5, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 503.696757ms ago: executing program 3 (id=3254): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000004c0)=0xf42, 0x4) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/22, 0x16}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) read(r2, &(0x7f0000000240)=""/90, 0x5a) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r1, r1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000003c0)=0x1, 0x4) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000440)=[{&(0x7f0000000480)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000019c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000001780)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000017c0)=0x33, 0x8) listen(r5, 0x8) sendto(0xffffffffffffffff, &(0x7f0000001800), 0xfeb5, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) 332.260955ms ago: executing program 0 (id=3255): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@printk={@ld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa0}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xd2}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 209.433837ms ago: executing program 0 (id=3256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='GPL\x00', 0x779, 0x15, &(0x7f00000000c0)=""/21, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x9, 0x8, 0xac22}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x2, 0x8, 0x3}, {0x3, 0x5, 0xd, 0xb}, {0x9, 0x204, 0xd, 0xb}, {0x5, 0x4, 0x5, 0x9}, {0x0, 0x4, 0x8}, {0x0, 0x3, 0x8, 0x6}, {0x5, 0x4, 0x0, 0x8}, {0x3, 0x1, 0x9, 0x6}, {0x5, 0x2, 0x2, 0x2}], 0x10, 0x8}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xb39e, 0x37, &(0x7f0000000400)=""/55, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x10539, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x5, 0x3, 0x7, 0x2}, {0x0, 0x1, 0xf, 0x7}], 0x10, 0xfffffff9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=0xffffffffffffffff, 0x0, 0x1, 0x5, &(0x7f00000005c0)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x64, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup=r4, r0, 0x7495cf6c03dee157, 0x20, r1, @void, @void, @void, @value=r5, r3}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r8, &(0x7f0000000ac0)='\x00', 0x60002, &(0x7f0000000b00)={@_ha_fsid={[0x14eb, 0x9]}, {0x100, 0x7ff, 0xc, 0x7acdc6c9}}, 0x1ff, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0x7}, 0x1, &(0x7f0000000d00)=[{0x1, 0x2, &(0x7f0000000bc0)='cpuset.effective_mems\x00', &(0x7f0000000c00)="165305a5c8a0b01cc12f272f93202209cf59e120eec87b6a11122612b51f486eab5b4198ccf3233fb45a38be8478553cb631efe9b43ed3664c8ec7d6d7a2972c51b59e7acff301e6c300fe1de263f2c4cf0d7d50a28c82f3da23c4a871bb30cb02cfd26492a1422134d060da4d956774238b9f1e437da6eba3c8db748c18a1053f461d22aa43da5fa39858b92bd4efa08dacad45f238ae6663b77b30fc33d6dfc2bd8e8c7e9d20add3b3de5cd2ef6532426946da4dbe945a60228a37475636636372563611d82b66cc820345637868cef02f", 0xd2, 0x2}]}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r2) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r10, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x8}]}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1c3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000041) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = accept(r9, &(0x7f0000000fc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000001040)=0x80) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001080)=0x0) sendmsg$netlink(r4, &(0x7f00000027c0)={&(0x7f0000000f00)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002740)=[{&(0x7f0000000f40)={0x60, 0x2e, 0x200, 0x70bd27, 0x25dfdbfe, "", [@generic="54c05a5b1d172bae2c72fb3228643c928c72c02df22f6b017632cb68fcb252ebb4909649bc4746b0895ab0c9508bd525f0232d3a3ac37846e7f0bb5da70ed876754ce8d65621030f11f1b1e0e0"]}, 0x60}, {&(0x7f00000010c0)={0x13cc, 0x21, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@loopback}, @nested={0x11c, 0x3a, 0x0, 0x1, [@generic="f123d513ad91318a031c8b11f8e731e688adb0a2a341c44b2f96a438554317a9ffc3ce7c4bde7c9cb74bb88daf7c3781fbae39705ec50150a747ed4ba485e36c242a43ab90cf1c7d573b1bd87e5273fc2b170b957137eb5376dd23cfb06be9f7c42070ec9b32b6d2e5d54705e11cadb7841cabe02868c92aaedc", @typed={0x8, 0x36, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r13}, @generic="3e7317754433a1d426dd8b53ba74095d62e654f6981f8fc2", @typed={0x8, 0x14a, 0x0, 0x0, @fd=r2}, @generic="342af9b587e91baa853e175aa40e1a9e78e67ff2e5165bd86eb70db1ccd2222b2c3531", @generic="87a37dafa558ef5716f3f4aaf2d10dbb8f6f596ca437fe08824bbfe73b12fda1a89ca67612408699c3c910dd048833f952f7865cb35f9cd38f0a7c17b9bcac01c6e2dde0ea120452966536"]}, @nested={0x106d, 0x5, 0x0, 0x1, [@generic="634810922dcaf40160f631eb1d199035e768f8c83d38798400a51a137cac17938b5a650508face33627815339dafd5f0c05a8262cc8f960758431ffec38ce96f5d1fe22964c7436de82ce45e1c95ed52e3", @nested={0x4, 0x9d}, @nested={0x4, 0x18}, @nested={0x4, 0x45}, @generic="03c134a9b6f37badd961a8e5cec370ef05bd009f6d76b301040d81399fef9d27ab08739dac41cffb5ea05597744f41360bc70a067f06a9f1d12a12b913e789dd40567fc0d48b5306c65bfe6907a4d58b591e7e4e65969489b029f140786e96ac679f1ba8489353476c7cc83fbae3d080b19e31194b70ddc863f790b96e0596be92ed196c9e5cce03c025b2e4c8ef39e5c5c9d2a85ccd812b4e092efa15af77a636661f37190af5f4b999646fb284204481cbe8f6bb81a0c84ded0bdd94db02adf2549f5416cf9c3f77493fa40c3eb1bd7ea50ee87b556f370959fe205ab096bf4d3477af56dff105ce08301f08b52b25d0abb6a00ea13440d43e8404268291522bef66fcea1b159d73b20a20e86db275895fbefcce6a50bc8ff18c74f4a4b167e77777e4cd6cb8d4cd573d2b218decd0262d2ec3e3de193aec7647df6e65687fa9223c4f3a20dacfcf5d7dcd2d1c44ecc4954d18df644d89ff7fb7c6a6ce4556f96c1934d4746b350a73961575a2674c3450bac62e87abaeec7b9767b7a163c265c8f90988037e8f943519bbe5a43615c7de75bce94e0126f2173ca5d972e20bf380594101c871b929578b7abafdea89a4d80ebcde8f1c367b525d2e808f88a8777a1ddf7d1835ff65207d1559ac95be59f41b8131f6baaf43c9dfa5dbd57769973ecff5e2f9f3d7c2c2aa61686a43c3894135d8a587cb0e1e5f3e1888017e695d4a30b64529b5b0ececd20f5f8b879a4dfa23c975ff4eb34d49a2cb7b6ad07e052067173fed6913497960ea94d6ce152f2be45f11b2cad569baaa2071701693a4a98f18730707789688d3a0c2e498d3da6dc965926f855604e32b8c378cbc47aef83f040c5a1227eba865868a16bd4b13fa0b87aa887570428cac360512ca1355a7ee6608fd820a4f41120bb7f8d76e8970cf781031f44fb9a7ef2da36f81776b479e4a483d54c882f081444aaefe3b2971cfbfd7955221e21b9804e851a95228c080575031d789b244911812500f3a46a89369505be098f7f6d9eb1bf06a28ac7261b9dd00fa7ad5f6aea79414bb3d3369e72cc2632441e0f1bdc010e0117a29a9784ee29b7c84a782cef19ca845ff354541eb38e6f1029ef8c966eb62387aeeec4f3a98123ec5fc8deeaf092c274e241409e26caf25726c4799bb9b2a961b4aa6db3b3f02b799de99dab3d69d95e73e5a4a9ebaa847dcb61a8df9235437c3c3406ab381a80df9080e0313f9e90146a76df50d6f5c17a119781c592b3c7ea5c38bdfd9f4635c43c780b7cdc3f2e3f040846bd24521376f80972181701f788190c6c00a99ea00c4ac37741c49e75c450cb9607eae95c654473ab727128f04f8a843a5a43342cb5d9578310da74f9ddea2e387aedefbe0c30449ab49b97512750340b21b6cceeb74ce10b2bf8f51053206222e4b07df26ec92119c871a771faebd8cabe8f4341c4e996c6b77bdfa69b552386557deffd1f8d604b14e802551bd795325be046de557231b0e23138021916f0a6e803052c1828fdb32c9848196bf8df309ebdc6086e73517a80225deee205d7f7e80c30a10d5f81db263b45406f2326e1190c7705834c9882aed85abee84bee609dfb3d05b5a43aada7e7dc96807670e8435fbd86f611a7a62b130fa52add0a8eaf08bbf39c5fe71a0283eda85879acf9cded94d9acef75437e46508f352ee592b52791f4105a7d8c4aca8062e0a3e4cbd6cd9c0bdb1fcadc1423ed0db18f3b4cb502ca9b30de941ae36207162f286914a8fac610530041755634290e39ce6d2b9c34d611da41bbd3e552f11c97179a56c76885ca7a9dc1355e63519b3491f8d4b827e4756fe6a317153c9674c9276d28fb588b588843c681cc49f905f98660dbc7519e406dc4dfd0629137ea9cd03d0c34c802acc96783d83c7de40beca297420cc4f00a267d9f2d7b9e2365818c9d6ce601c3f8eb758c70e4f0bfa533b38735a4976b972f72c92ef164fbd25dd710d20a2f1f19657e8315ae3aba5188c1b70f1f1e4204bdca8b435fddbc6169c53abe32af24358175fd92477c5d3c1c4e2e46e5787212a50e8854e5a389dccb793580dadfb87184914aaebbe96aa4dd67734592cc9f162d62a1906ec7fbd759ea3d28dbfb388ec7a8da00f72290362a276f1638fb1e4d086c72598c682ba117462a6dc53ad4e25cadc90da873c8b57d52ad9231a0c4eb0efe3943b67763a115b8dc5317fc54aa4ec779b3f19a36646ef76fd816eb169788dcee8b1d539b10662d8182928430558d5ed00bd967b19b0aff0321bcb2ba7175fa815c59d3ffeee7c57d45d15016b4f3bd3446a95b44cecaa502f2dac60ee3865bc0a168e745db7cd8e5d315eb75c1196123bb50397704f95e7df8e51f4b37426331afbdf654265a580255ccd516a0881f351b75bdbcae7731cd22ca63402195134113cd9cbcbc6f332f37535c7df55f3d91372d30527218b9d9d37c07d56e25bf4ee296988feb2b4e4fc69550539527d508cca37e6d16a45478ec2197eed4eeaec2ec84d4cae8bfc7213d03ddd4bb2c8dbfe0afecf760dffce8ef95672ee53cda2a03c838e6b959621e846fcdbc900ac9da5d67a385153040f58155e2878578e2e26d2608a0559cc81c08d2ecfb7997da4244bf4661d4eec3592db768a61a974922b55eca7448b29555ca9a427d350f472fdfbfbb6f2470e09a257dc5c586ab96c459833fd01df637de0e5b661e87274ced9ceb51fd4f51dda4bd34b43be395e931864c981403e5365ab2b0e7cc14aed64b6e2da1f230c8e1aa0f2abcef3d1e173ca0b9a9233e2b049ea3248e6c3ba7118436048d31f07ff668d3debef3ad68285c929c2912b059298be3f29b214aeca8d4ed2d40fa08bcd25d5ed4d755015fb328589a5fdfd6ebef12ab8b45cd604adc310a58e210e726ee1e06b575f079c9b4d2958429b9c2da158db3bf4dd8a3867778d5fd22ddb410dca7b150fed3ea02ac5a3915537adf0f7d69d17c9e714f3e52e3d98fb64eda8d0bde5503e129f3d60a33cebceae7792b09312e589c4b02b86046cb39177ff1ab5037877b5f2d7c33488ae657135c84ed5d43b221d260144e255ac5e3b9a43f05561ff4e961fda75415c80af08662637ce36037417509c93265f50afe0e331f02e85817757b69320f202295421d80ea0636278b5f3171d2fa526de60bfe77fde33df769792361e29777c2ed2d5a58bec965d98ecf54700d0e9bd3bccc032e1c0ed72261034dd263ae1e5892d371674460cf381a23fb77ed1084de9e16570e4708a901dd1edb7752839bfffe9705ae801a56256163337b5fa75aec0fd5e6abd27cb3f909cb94ac0e62c56a1f7e7d0e08f250933d01a4840bbf0b790db7827a2f3378599b795b635ffdf13f78be5a9efe91be48d222d8ac567185fad3bba44bc77603e8c695778177dce2640ef41fd0d953c9e4975527ff38460d95f289dc389cc5e2de9994a967e907208270ce941f4107216ee2d1d4db9571965a8741525b5136c601279fe78fa102652b43d57246e5b458b2e259e2a068893effd240b14201da906ba54124b82d79ceabf125ec0c6e25b13c52cf97ba993f7504ae4f1a99aa8c6e130e32fb4805f640222054e01713426989d358cf627139e98c7634d5b230260ace52c7133885f45d3588373995295b975c366b7b172e7417c2047bd9062e76833a042056d0e37803fd8828e896f50c08a7eba4ecdf98a747b287506875cadb4fbf680466b5e3bed764136d8759560e4623e4e136cbbe3c2f0b985adf31c5ecbfc4fe581342660b542b7f0d657725dcf3b7a8047e2b07ff45b85131d1c3e1a5fb7b35963901f1e4a046bb55f4ab380a3fb45b3805f8963beb0a12370d6e9c4cd57662d40bd8b19fb565076238cb765a67f459c3daea48015920646b4563f245fbe02e41876ee3b1042556f5ad362f5f1e428d77b1490642c4849faada2b11c435b615b4cd3f1eaf078ff524b17e069dfca554734cb47a7beb5b102e980f2a0baa70ff4eb20171915c7ede93c5bfb8665d962d8448e622e862434176bf2778575300c569dd6dae963704ef6ed487cf844001f958a063ef7f5bc0b99b5704a5cc2e69ab3977407db70fda9608c7bce68a1369d3637c43d6689d757a6a6bde520f102332c058995f4a3c2da2ae095f5c1c02112831c362f9b0f753f165b947e3d9d60d834cb07c8ddd596536de4fdac64239288cea2a34c10d6dadfe3dc013deb053cb2db69b65e6877b63c86cd60c004a95b7994b70524a478a8910bbbdf0417a433e89d15552b72a756824743c1eb7bc2a93355640cfb4e15706af232e3a0c023db7e736df9a4026d5454333ba1b2233332887fa9052b0b5098ed1478002a4dc9f24353c02edc6dfa72f2082758dc372be9cdae1ff2a8aa0913ecf8fd5c78a58c1f2e7524c665ff19453692d732d4d3993a5d05d24769d239ae54409f87f142d975e44f4a0b65a2f918c25a9b27a470f55f1c27a9be88a5733761f6bbaf7d2f1586630e69c024833ae15bca3ff8539f95b568eadd7770d671c40a97ba427d5df4606418f02a6eafdae7f8cea0cae43ec71b1a2601c4913c59fd0b59f540ab615f1a13ce3900df3a861711b8597262224d448ac648249a2158303ce97ae9be8b01f941fbc8dd65dae6309968622d3dd4531fb4307fc5d420ce2c69a06482dc4b33760296e5832b45538025ca3de66443bc688effd2f65d63b20e77c40925667f7a9a5fc93d341f2661a10f10a13065d1cc0f8e810264aff20000b9a75f667c3bf62dcde5240d2db9ed5e8247cb5f526a89b5f6a989b42b92476240e334894f182efb96aad9c3325a4b38019f587ff1d00d2fbd191b91b32458aa1babda8dc75e1805540848c0d79e6d60219d51b635e308785fa79dccefaaa76ef9c6bdb77ec8d0a20b06c1b860d446c0baf7e0363ac25e14f6ee1f2e21646be681ae3eea27a62561cfb19b099f023a025d98d5c3a84c97fd504b9277666811debdb7763f9354248070904fdd193de3335b1c7f6faa7ead137c5d32f879744f2547f4fde16ada342c537f3747a3aab6219a4d9e10e6ffdebb44a43931940120326402cc7bd16a806f44f8b5315fd519ee954424ca2a0fdbf32e17ce62d898cff3adcaf0a5480a04b5aca3d72ed756488348fd694ae23fe4298231f1205c422a5751b42a6b207545082864a32eb798e69b957c85e6ac824bb77a3faf04ce82f2384d799f83cdbac350837e48f8ffad964ab34203b6c5f247e5b373faf16be1b159581efaca5cc20336ed836e03cb08f0de01d1f8918a17032ea8de4d2a8b9a839a01597fd1791438436340f984d11a7c2e401cd5e25b1d064289796f24af13399cf8194752f2bed3fa0cba0cb6faa14a6ca9fcb0c9de29098c6b4d08c0b38b01edca155ffccd9edf112c6d88a1a7545c47f4e7bfe12032f64e525544c984fca7c27b8f8d4a72461af1897ea4196b1b1831ebbd742e9d1fae0b358c1d4f52b80655d80f2de3552b091ceff7f5333cbfc9685c10f72e7a9b2ab8e52b69ac4ea583b224ad7f459515b5e7bf68b51c65afc24f218e9b8fafddded407fa5a019169a65d609fa1eb66261caa80b874cf2b30240148eea905549ac951d285e3f7ea00ae50f212a980f2bb1f15cad88028ab594034a0247e4c34e677fae077389995136a30c1355a47aab91399d881a17f85d6d3843959d970a28644f55d7ed2aca829c597d91baa9c4173235a4ad13a47c21c745b3949d07d36fb3632a1aa87fb61a10f433366b42e92afcb15922c066995fa4bbbe5ab4c99bf2cb2", @typed={0x4, 0x129}, @typed={0x8, 0x104, 0x0, 0x0, @fd=r2}]}, @nested={0x134, 0xa1, 0x0, 0x1, [@generic="c19f1e9b8569378d35eb6172577ed861023f857a22ef6ea88be5105d59f16109aec77d381d730d5605c71dffc2be664573d0fa8bf99a491d86e22751ed096cf92f4c22ccbd2bbad6ab583ca28569cbfb411a4bc24f1a4d67fa24d1cb3994f110595075f5aab4ba4e3383f74d5b5d8bbfd6e4a247bcf9dd6ad5b091e9cb909fc179ee9f", @typed={0x8, 0x38, 0x0, 0x0, @pid=r14}, @typed={0x48, 0x42, 0x0, 0x0, @binary="c2a6297476cd7933132c3f393223b510ad5303527f11142cf83e4695dd74f3e057910318954c15647dc6aef7701616f9d06dc482417bfbcb152d048f871d3f70120df805"}, @generic="f46a03512648d2efaccceaa3d2992adb308d4e0b6ca3461dc28e23b677d1544c7741136bf202c397c205d3d9f71c3b119300fd1ad37de6f809fdc743ac8d0c30ad5f655978", @generic="6436b8cde4c6", @typed={0x8, 0x66, 0x0, 0x0, @u32=0xcc7b}, @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @generic="60d2"]}, @generic="a175bea40afdd95f8c2d24d21f845a3f7ca04df69ab9853758d8da0f9f4e32822de7a0f2464d56b2a02679570fa7de3241f4b7aa4d569d61d2088f668b845dc32bae9e23b04e6c6eff69a817f1f87f4712b733139beda943666d8341466e73a3f8592fb5f5955fdc67d69ccfa6efd5204df3eccd95e9a57897891a1b96a56757a128ead2ef79b7d42a6c609440ef1fd9412b9ca5fbae443490bc0f1d0a86c8bd8afca2e037720cdb170e4a0861c36b13792a1713b78fabc9aafde4c90cc904c45727c6fe083162b1b708032293ffc4a339f1caa1756d3c95835e0ba12fe0cd9f682bc6d60718219ab35e3d7388caa8cac13689"]}, 0x13cc}, {&(0x7f00000024c0)={0x1e4, 0x36, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x1d3, 0x166, 0x0, 0x1, [@nested={0x4, 0x118}, @generic="091a2dc447326241609bbeadc5f74590a499ee8b916aac540111ec9456ffdcc2e8101d9a1051e5e0a92cd743affa91e3819741c10056919741dcdabf156e308863753d9869e7083d7c05615476f79aa88395008625bb60730bbbffb80c02f5f96715f6e0faffb816b11fe148a13ad9c8541b5f13734f51b5a901478610cd234903c50e52687096c08f0310f3ad5a606dde8a1a0be9", @typed={0x4, 0x10a}, @generic="056e1a3f5ab612ff22c43745b90d3d42f0ea485de8616d02de3b5abcfe2cb637337a4e35e329d614b545dc171f0bd5a27cdaf0cae831b5ca38de16e4b870bb708bc8390c75", @typed={0xc, 0xd7, 0x0, 0x0, @u64=0x7fa}, @generic="dcd07dfcaa4b7104c044e638e4e2604cfdc811312352751ac4b6a7ee1046d908f7b327289ec60b0bab0471be79fea4a962dbb19259b45be2b908b804", @generic="153dc113e20ff6f14b1c7935b399250d7ebae5a225395b2d5694", @generic="cdcd064287b6d7f43dd008b7116d8d0848738d79562b41a57e1eaf0783201e4af0b82cd2489c2d164686ea3f5fec68b509511492bda6bd68811e662b206b6be6907c014f42fed70df8b7d517b20094f966080e85fc7998313eb1347f26ee6ac717a74011e41186e4aae23d9e2e7ceea5708b0c65031746fbcf966ea586294df173df7679b0f090", @nested={0x4, 0x96}]}]}, 0x1e4}, {&(0x7f00000026c0)={0x68, 0x12, 0x210, 0x70bd2d, 0x25dfdbfc, "", [@generic="6a2af5c88a48bbfb7ea840f098992fd220ac2d68717de0e9192076570c98ae5f6907dc48422202a2520029b0ed2859de4144069230dca529aab7bf785ce6c716ba1799e7aaea579b9d8ef152db6b7f135dabdc7542685f"]}, 0x68}], 0x4, &(0x7f0000002780)=[@rights={{0x20, 0x1, 0x1, [r11, r9, 0xffffffffffffffff, r11]}}], 0x20, 0x891}, 0x24008011) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000002800)) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000002840)=0x0) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000002880)={{{@in=@multicast2, @in=@loopback, 0x4e20, 0x81, 0x4e23, 0x6, 0xa, 0xa0, 0x20, 0x3a, r6, r15}, {0x5, 0x3, 0xc, 0x7, 0x7, 0xf950, 0xa, 0x1}, {0xffffffffffffffff, 0x9, 0x7ff, 0x4}, 0x2, 0x6e6bbc, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x3505, 0x5, 0x0, 0x2, 0x6, 0x80, 0x1}}, 0xe8) r16 = socket$netlink(0x10, 0x3, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r16) syz_genetlink_get_family_id$gtp(&(0x7f00000029c0), r16) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002b40)=r7, 0x4) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c00)={0x0, 0x16, &(0x7f0000002a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x3, 0x9, 0x3, 0xfffffffffffffffc, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x2, 0x4, 0x3, 0x2, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x0, 0xd, 0x9, 0x6, 0xffffffffffffffe0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000002ac0)='GPL\x00', 0xfffffffb, 0x0, &(0x7f0000002b00), 0x41000, 0x10, '\x00', r6, 0x0, r17, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002b80)={0x5, 0x6, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=[r4, r9, r4], 0x0, 0x10, 0x6}, 0x94) r19 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002d00), r9) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x78, r19, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008084}, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000002e40)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x1d, r6, r15}, {0x5, 0x4, 0x8000, 0x4ce5, 0x1, 0xfffffffffffffff7, 0x3}, {0x4, 0x9, 0x7, 0xc}, 0x800, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x0, 0x2, 0x0, 0xb0, 0x0, 0xc, 0x1000000}}, 0xe8) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000002f40)) r20 = accept4$vsock_stream(r9, 0x0, &(0x7f0000002f80), 0x80800) ioctl$XFS_IOC_FD_TO_HANDLE(r18, 0xc038586a, &(0x7f00000030c0)={r20, &(0x7f0000002fc0)='-%}*\x00', 0x88800, &(0x7f0000003000)={@_ha_fsid={[0x5, 0x4]}, {0x6, 0x7ff, 0x9, 0x3}}, 0x2000000, &(0x7f0000003040), &(0x7f0000003080)=0x5}) sendmsg$sock(r20, &(0x7f0000005500)={&(0x7f0000003100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000005400)=[{&(0x7f0000003180)="733fb5a6e04b5932cd06d17c34b4ba3d2ba33843681401bc13549f7107318442d12ae6343a15c0ad0ba31e54039d6784eb56b851d4f136e5afe1a2f04ece3b3f6d4c36a793e38dd36d1712bfe129e93ba0ea593b49c5ac0948b67ec4926475531162ebfab48ee38235cfcea6449b129f29815e650ccd52fdf75dd99eddcb44322101dec0cf519af633b96175bb65ecff06d16e1b8c58407da4fae43eae9215ea11772bca7f5817377eb2db82da3dbf7a08d5633ac983de26b18a280fe062f303e509f25f848667f530fdf7b11e8f0f2c", 0xd0}, {&(0x7f0000003280)="54889216cf7080c7ac95180d0025fe4d48c96c56b456be738d98894b878feb50f1c0de9ee91933b35c17494701b676050098c68e3cccd09564", 0x39}, {&(0x7f00000032c0)="6ff5c23b06770df850030e08ede0295a9d1141fc13eb2defcb94b00cc927fe3ea2bd06de8b0b607166f9038c685a51e83e81b46cb958477b111ade", 0x3b}, {&(0x7f0000003300)="3f35daca2a0d0dd62fd9259b541d307db06910d72dfa43432f24527b6c5640a78840bfde4856bbe0e74ec2f0d1b07192485da51d67cdec58efa17488bfaf13044bf2c6e678293c75aeddf4a7044cca01a404349655073efc6e31021a18f4752bcec0f46e740cb3792597a4cdd94dc698cc40d9fe7d3812c79afb3b41f28e45e6803a9e", 0x83}, {&(0x7f00000033c0)="4040d679d71097f553027922830489387cf8b2c175f02a3dbc1eabfe204baa64ff7eca6d9be8523076772e67156cbd6babb9f64e548249840a1b81ece0", 0x3d}, {&(0x7f0000003400)="f5d00f629da8056d324bd903d2c1415f8b8493a6d12708b1864b2b0a4e8ede7cb8cf5ada4b1ca416c21a4f98eb96f03104215873fa54de7ca4f49bad7b6c99dfdd0423005723cba17b29df10a81980d0ed582f61a72c6cd151e437ee95b41071625845eb38a71bdd5e712cca12eac57d90d1a0955a650e25b30ffacd48fbd5b8a1de8fd450552ab0fde23f8a5f121d1fbc2003824b0bbac32df3eadfa51ff0905104a87779b998dd86d9a021d257596fc1425da7cc739c7f9261aa6c695a5de345df1997f2991b906b112ab25b9fa59f0c92dbcdad91720cb0b8ee79295572a5c5d4382f6570d469ec4f349510987674e4589502ec4dc3d50ab436a870eacff8342f971d00dfab59656d0f85d2e991bd247c3705929ba0b78bc15b06011cfb96e71d9b621752efb5469f582c304cdc274524260f310a8f32ae4b65d627d7e7e2f1e2c0418d2d083b94ee3c9c63f1719978a4935fcc27b930c9c9654e056b558648fa507f64b53459b17b3ed4ffd6b0245c8f481080e8b3e4055db0ce8818c85188f142078e5df2767f05f8394efd688e10e959a0ef2f4d65333d171a55891f2af6ecf9291d9f28ea41de5cfbb7d21934d48028fbf3e610d8840f1a60001bad1550a9911f989e230e12dbbf4f89d1284a3c35818d1fb2482f95b604f098d4c9e215ba70cf75b2dd3c0e54bd23107e5db1a134053b497e654a94bb10290384a52aed0aef39d0c59b8a6dd7f40fa7ed22e1bfcf2ad35ff26df13fe5a8ad4cb126d2fdfaf50f152990f3b905e4df0a8a54778e9ade10524190acd3f19d7977dab1dba51092c1f7833a06a9ddb27a42e442929be83115c4d6b1135616da1d3bc191666a87063108d294eb7ca2cc370f46cbe00adba022a76d67bba4dc868c63de5268f4b76a942c25fe76ff54f59c65784acd72e1653c5b6dda966b1bb273a5e8dc459234e9b1c4bbd0c88f124dc033d55a0c82254da15589707ace78ccf1afc8437c8c196c60a20ec46e49b1da2c4ac5983ee7f13eec85a6c3d61d0ca8074b5e89c928cb09d1e24a634611d4406302b5f38503183cbbdb2f760b2ff9346242000faeb54aab7ff4e25bec2435dde3805df4666d4bb1bcac6c452dec18435e6a05d168c1d8661d6d7a83d8036998044df2513364d9c8a3a0873641aca87e0d347c2f1a4cc7c9448127ab7dfb0887ae11ed4f95343b127e0fbb5945bbdf85236512dc77c2330631f4702f1781669bad06cc7eb5e3a18d99cca88920add7a9cd530adcb3fda53eb7749722ad5bfc09b6d93f06988d1ac79b9fbc58adc1642b1d734c5a3caf3223f26a64a86e84a8b81565168255ea2693b6d87deb9991f460532c885ba207d2a5b2568ae222f60c4dccc85feca00cd52aed4956f3c9ccfa8062451317212f29f8cd49781d43db1545f705b3ec9ab2826cf9002faf968429ee95ed22dfea72fd41595a0319b7ea8cf4ec355b34e42ede469f6504bae0fb3f95ddfe2e73450fff6a495acf7a5709ab68cc2f92500d9d426586d0b5aa188f075931d816d566eed4a83d557ec4459569cb8e8c922ed14e510213c3e67240380b318b32b6183da02375e244aa45c71cafef2d1188f39b46ed07652462626efc2914e85f2d9e7cb0d8b0a3c35d9c422591b6b358a8816b4ddcb691f90543f69ff97680918b1baca81fdcbe1fd9c3018a74df6d02b6dff625e147e8c81b77ff845fc5f3d7f67decddf1579b886d69673c5e2c7099f768667da8f44d20be4687ff7c99b0aa1ac8e158776a571248ccf21ec296e5db90e089029566543a240e895f8d89ebdfe2f97fce9c3330b4d0f73ea9d2e9226b482f620fbf9e97e3cb7ee72fb77ea4b478d8c1fd9b3fe8ad2a730491d66ce0a3966c5a364debf0f01ea69864b1b3b42ab85b78d8a71448d033fcbbedcf6b5ce6cc9cd87e2a90836ccc89f43ecacb0d8f9b40e31bfad1f7f51fd2977516eeb2e8271d868851df214f89d831df5f0d5933e2f0b574ad0a74e0a83b65d7952d61dab0610355787c502bfa9e48eba49eeb3087c3cd33172138b9a5833fff26a7876ee0204fe7bb9deb79791f7ee11097457fde2da12a2b133c59f732f866200dccc056ac608d6a8a2444118d163ee52c7f7a76ab660cbc6069e4436ba284083372f0b1b355fb1f1309146af58d5749df0a3135cc90bc2687d0b8e393933117a3ee026237e3a561520caea06a89330a2515abc6ea3635b572f522c5ed74f37d834604a119e4972888883fa0f33fff1139b2f3bab89c842f1a35680e6182adaaa8b86716530efb44a0157780ca80e5dc65597ec6b60ed5c084eb878583748032b60069c37f6fc2619937fbb000ced60bf3ece05c6c2c85f39b3af1c9e1e1dc482c3deb83ef8df7d934da2a8ac1ca6c30c60677af174fd8feb5d2ceef3f34b1b6322a7d5e59111f352be41f2be5bc4a30b1da3e871dc0735c9ee296bf403c2ed03ea8cd737a748f3190389ebb662f227a086cfa5ed25c393d0d4d81e054b3a7f5998428fce1f843c24d5a6f28390b9bfa88c4fd0b5d5b74d8dd32e3d76c800236b7e1c0112cf171030e50ec2fe217f3f70a7ae4804e14d4fdfdda791707a6e85f7abe0d132d68de2a0293b3684dedf08d2d2e61cc82715b01809bd00b93120195f71442d444ba32eb8355597797c00f3795889a619521aa2f7555e66fbf7453cffed0a1ad29c6ce735767b6066db32bffd76b7941857d0a014a47616eb592a543eb97834db7a37a71e38c589861459390fc56f647fcc8350c21050e2746ae9ad88cadd2138796796882229e58e37dff7dc4c1c6be42750cf12c2104f2c35bd239e39a025b0da612537eed6b6ff0209c3c2a728abe28ef2199a570e0da203dc450dbe31d5b6228d4b68e394820283f5846e1ca0cecca141064fb06fff26738324382f6a41e5b451712c357ac02564e91997c37c0eeb3561c854067481f28493800c3cbd090e0db7e5f2141eb072e468c14dff535b87a39243f94e6d61f0bd1f523ff1ddf14217e906e0b9405c699ea5be19f294a0e6400e0babc3c38ec0bc9d8b32598ead1443b83fc3b23f650f8f27e78e4a9978be45e7b4068792da47a6030ae45db0c92261ca6938989e855aeb4a3def5df523bea3bd295a64c9aba1a0fef3c48636d4955f80cd6219985d8a72b8a00310b7489215d56fe530aa822cc64b0b57e2d85462e04d7a62828d104c09a66c626c4f76f889399ae8d70b74c51cd68c87915f57a4c20c85674d0fba1a48d6e8a56539334aa3a278a885d288755daf68b715f2965fee94a3b491a32e5aeb269e41dc07dc2dfcea1b5f45a17ec3f841fcf4249aa3b634287adbdde22ae4e4ac3406cbd2aa3ed1a198cada32240bbd63c269807f116b1bdfc7299030f102aa6cc7ee8fd293c7095566ea1ee6c72479b2012c3603a7600d604ef0aa86b1b04fec0e32e0a1838e6193881d6b53bfdf7e051f937f2bdc5f4c2887dd31be27a926bed5edda7a78f03821e262e5a957b67b0499bf237b396f61c2756ea00c3327b2a4685c4e2c4036aff27822b0708454cfafa88d1d2b89d4fefd0ae660a1015d5f7638721f76f0ac4390621ed8a97879665dd515da911ae1202047c3be6081992e45e641f6f5cf242812cea5b83f7414f3f65fb3829671bca24a3a9ad27b50c055457ba4d381d6cda0adb775d4e0cf54081eb4c7e1f1c8b68f22120a35fc9080cdbc14941cd08d32a85dc2d1d9db843eb139a9f2389198cccc2d0a8c5f5c44a80131c1df1a4f4bb2bc122f87899f676485ce94e758d1c848187a81ac64ef1c2c0d8359d49834eeecc1d5b445652c794643dff84aeff9af91465785ac3c2bc694484f530ee6cab37ff19021c64aa3aed4c878fed7cbcbbc80d94f129ba34212e65c291e9c43c461797d7d6e39223edcefc53dd6c1dafb4093eeefb63a621580137cb73df32685e9cfbcb30382893af8a7506a6a9632d8a95276acc8fabd6df453b3a44d230b0e5fceae597abc8d5a022298220a6c78cb8b2eb4f574e84e15c9f6dda3f9606acb288782123f7b355498270b50ad5e7d27f4c70b1b104a02f52cd8fa6471110768ea41e01a1ae905aac1ad674a43a5f374755f4f3db51fd183f5dd15a9ef1f3b7bec3c7f44d5905ee7c1a24769f8e7c1a0af2a576fd6c12ab7ea528b240070ef24ffc53233d9c74dd3a3047dfa778e6f4bfb13054ca1823790116df287d6c42d8a388132ef125fde503783f80ab8d38df835cf5fb8b9b2073ba6594180577eba5f92c5e6403931727a668ca86d55449ffb346ed9cc6e18cfe3ff2cdbd360b7636e79a23776fd218e11f50e289c4aad1ef2e535f844904540a0d41f6636483500abd8e184591fbea405147f585d5360ae446dc18113c82ac8c081c4c6f07e5898c9023b112d183558c26a99a67631069be49017848cf8901c36a1f7ad43d2ccd57dd438576d39e8e37b6e9336df8a5bb2224a1a6237edc9499743efe34d8c3aabc2a89d621de36d4f45a8f9c3755d61a5ad289e86a9dfa80bbfa816f7c30ecc79a86e4fc80ee5aba1fa0be2614ffbf272a7eb8ef7443e0fc3de5470c0829e945efc7ea360c82e8b6dcbded2a7ac8a1f65b646f4ae4d6b71ac230838c5c9d9c322c9aaf1e18f3043417ea03c17e667a04082a7bb4067ec9e108e9674000231fd898ed806448e01d335493a42fcc41e40a112ffcff9cd13295d54b63d4d7bab3167c272d6c61a1adae8ff859c98551e0400cd3cb22096e4c2f0c6fb709876e9a7350fbdeb3eff5cea59a5a05702adc25943e96ce11ad7577a5ae8e5e740d479579c75b45cda981f71cb14ee026217ea05a58ed05ae52067e756e7cf124773f2855a11e0e863ece47b235bb9dc01fdaa050636e15d82e6f62173093c769dccd5b82cce34aaa0b61514fca3d6b377a5218bf46e6f796ad848e890dec30656d260f35b5cf9cba9023d43ba857bbbcb04388208d44bcde125e7f01f63a8e47c86bbb58b41f2b63973ddca597dc54f92beb19b63c1f3f251b8406afb3bc13b50285756d54047d9ef1a3f2a71b393146e8780a1398491dd42e610497356a72ccad3884bdae99422bf1c2cf17984d8be47f65f3929ad91d29f8fdc22169f48d72cefd3d863939322f269c8673d6743a3edfdbb7992697e97a79d081cde48c27c2a735525b7cd9ba4681808e59c4fe70e739b71985a71abaca16aed6022af344448aa5ceab17e6054b3f4df1bfc6b57276f9ad490d9b7d3720c3c17bd3ba52080dc804642de0862027aab1c5ef3dda2e2fcdec371accce5c927a946315b9eab84074a61f6f9d8a6b6e6a4c13c53ff6209d5d13e2325a5775bf396cb86dafe756ef9574ed444a161bddbc4832745b85d7c59c9f85152a3d07960191be97a0194bd12a18b2b33d201cc013763e265071e227b4c1aca0eb0df3f2e2d29f308d6346396fd1befadb83802a561618e1542295ec944f2edf221de32701a8dd91471bdae8811b971f2d49f7351dfc31d90b6cb50bd8490245b0b5ed39aef07d8f5d3db53a61feb44f86a6fb325a9704d56089bcf4048c40648a78d95617b31563a528d248a1ecce96add5871c6bc45c65fb84bcca956be5db7fe2090eba8b7dfe2e7ebff9e494219a08793026159166152dc0c232e9ee98a2c4af98ce9d2257737d9c4e3b766266ff75119b051472b114649910d9be1500785da238be75e9c18142311a97dd8668835169deb48e801eee294da876ca35c551b360ef494d1f60630822efb393f82152f875e813f753e089d50b50c62342d7f99a35b7ca45a1ff4c1280d6504dc4f7626f88c88315", 0x1000}, {&(0x7f0000004400)="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", 0x1000}], 0x7, &(0x7f0000005480)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x4e}}, @mark={{0x14, 0x1, 0x24, 0xfffffff7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}], 0x78}, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 164.203129ms ago: executing program 4 (id=3257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c010000100001000000000000000000ac1e0101000000000000000000000000fc0200000000000000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000b00)={r0, &(0x7f0000000a00)='\x00', 0x80, &(0x7f0000000a40)={@_ha_fsid={[0x7]}, {0xff, 0xfffd, 0x7, 0x2}}, 0x47, &(0x7f0000000a80), &(0x7f0000000ac0)=0x3}) bind$l2tp(r4, &(0x7f0000000b40)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = socket(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000300)="3995f6e068", 0x5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018808000100", @ANYRES32=r5, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000090000000000000008000000911168000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=3258): socket$inet6(0xa, 0x3, 0x8000000003c) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000001880)="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", 0x1000, 0x40, &(0x7f0000002880)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000001880)="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", 0x1000, 0x40, &(0x7f0000002880)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000580)="06c3", 0x2}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): rt of bond. [ 439.628564][T14562] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 439.628584][T14562] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 439.702180][T14565] x_tables: duplicate underflow at hook 1 [ 439.702293][T14565] x_tables: duplicate underflow at hook 1 [ 439.702364][T14565] x_tables: duplicate underflow at hook 1 [ 439.702433][T14565] x_tables: duplicate underflow at hook 1 [ 439.702502][T14565] x_tables: duplicate underflow at hook 1 [ 439.702580][T14565] x_tables: duplicate underflow at hook 1 [ 439.702639][T14565] x_tables: duplicate underflow at hook 1 [ 439.702729][T14565] x_tables: duplicate underflow at hook 1 [ 439.702794][T14565] x_tables: duplicate underflow at hook 1 [ 439.702888][T14565] x_tables: duplicate underflow at hook 1 [ 439.784883][T14574] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 439.784899][T14574] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 439.856826][T14582] batadv_slave_0: entered promiscuous mode [ 439.912842][T14582] ip6tnl4: entered allmulticast mode [ 439.983120][T14582] batadv_slave_0: left promiscuous mode [ 440.010007][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.010081][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.086566][T14602] netlink: 'syz.1.2114': attribute type 1 has an invalid length. [ 440.177247][T14607] openvswitch: netlink: Message has 37 unknown bytes. [ 440.177297][T14607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.179382][T14608] openvswitch: netlink: Message has 37 unknown bytes. [ 440.179411][T14608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.391198][T14622] ipt_REJECT: ECHOREPLY no longer supported. [ 440.498562][T10368] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.498602][T10368] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.498633][T10368] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.498661][T10368] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.033819][T14665] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 441.036745][T14665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.044106][T14666] xt_l2tp: missing protocol rule (udp|l2tpip) [ 441.654061][T14688] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 441.654081][T14688] __nla_validate_parse: 24 callbacks suppressed [ 441.654091][T14688] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2136'. [ 441.847159][T14696] batadv_slave_0: Caught tx_queue_len zero misconfig [ 441.956493][T14703] tipc: Enabling of bearer rejected, already enabled [ 442.032952][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 442.035825][T14704] xt_hashlimit: max too large, truncated to 1048576 [ 442.116458][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2143'. [ 442.133847][T14714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'. [ 442.195209][T14718] batadv_slave_0: entered promiscuous mode [ 442.211031][T14717] batadv_slave_0: left promiscuous mode [ 442.578518][T14731] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 442.717142][T14731] bond8 (unregistering): Released all slaves [ 442.770738][ T5630] block nbd1: Receive control failed (result -32) [ 443.862819][T14775] netlink: 'syz.1.2160': attribute type 1 has an invalid length. [ 443.906723][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2162'. [ 443.906759][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2162'. [ 443.907037][T14781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2162'. [ 443.947376][T14775] 8021q: adding VLAN 0 to HW filter on device bond10 [ 443.951340][T14783] bond10: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 443.977305][T14783] bond10: entered allmulticast mode [ 444.329050][T14810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2166'. [ 444.497311][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 444.497365][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 444.532583][T14816] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 444.672964][T14833] set_target_v3_checkentry: 23 callbacks suppressed [ 444.672981][T14833] SET target dimension over the limit! [ 444.702901][T14836] syzkaller0: MTU not usable for tipc bearer [ 444.702937][T14836] tipc: Enabling of bearer rejected, failed to enable media [ 444.792258][T14841] netlink: 'syz.4.2175': attribute type 29 has an invalid length. [ 445.009354][T14849] rxe_eth0 speed is unknown, defaulting to 1000 [ 445.784588][T14873] netlink: 'syz.2.2182': attribute type 266 has an invalid length. [ 446.572345][T14908] bond7: option fail_over_mac: invalid value (127) [ 446.585792][T14908] bond7 (unregistering): Released all slaves [ 446.936395][T14932] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 447.093739][T14932] bridge5: entered allmulticast mode [ 447.435981][T14957] FAULT_INJECTION: forcing a failure. [ 447.435981][T14957] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 447.436023][T14957] CPU: 1 UID: 0 PID: 14957 Comm: syz.2.2204 Not tainted syzkaller #0 PREEMPT(full) [ 447.436043][T14957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 447.436059][T14957] Call Trace: [ 447.436067][T14957] [ 447.436076][T14957] dump_stack_lvl+0xe8/0x150 [ 447.436117][T14957] should_fail_ex+0x3eb/0x540 [ 447.436144][T14957] _copy_from_user+0x2d/0xb0 [ 447.436168][T14957] __sys_connect+0x155/0x450 [ 447.436189][T14957] ? __pfx___sys_connect+0x10/0x10 [ 447.436218][T14957] ? __pfx_ksys_write+0x10/0x10 [ 447.436251][T14957] __x64_sys_connect+0x7a/0x90 [ 447.436270][T14957] do_syscall_64+0x166/0x520 [ 447.436292][T14957] ? trace_irq_disable+0x3b/0x140 [ 447.436315][T14957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.436333][T14957] ? clear_bhb_loop+0x70/0xc0 [ 447.436355][T14957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.436376][T14957] RIP: 0033:0x7f869b19fb19 [ 447.436396][T14957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.436410][T14957] RSP: 002b:00007f86993f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 447.436432][T14957] RAX: ffffffffffffffda RBX: 00007f869b425fa0 RCX: 00007f869b19fb19 [ 447.436444][T14957] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 447.436455][T14957] RBP: 00007f86993f6090 R08: 0000000000000000 R09: 0000000000000000 [ 447.436465][T14957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.436475][T14957] R13: 00007f869b426038 R14: 00007f869b425fa0 R15: 00007fff1cd97fb8 [ 447.436504][T14957] [ 447.533247][T14963] __nla_validate_parse: 6 callbacks suppressed [ 447.534402][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'. [ 447.655343][T14952] tun0: tun_chr_ioctl cmd 1074025677 [ 447.655419][T14952] tun0: linktype set to 778 [ 447.662880][T14921] tun0: tun_chr_ioctl cmd 1074025681 [ 447.674332][T14963] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 447.842928][T14972] tipc: Enabled bearer , priority 0 [ 447.966216][T14972] syzkaller0: entered promiscuous mode [ 447.966237][T14972] syzkaller0: entered allmulticast mode [ 447.966605][T14972] tipc: Resetting bearer [ 448.001972][T14985] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2210'. [ 448.062412][T14980] tipc: Resetting bearer [ 449.728138][T14980] tipc: Disabling bearer [ 449.813842][ T29] tipc: Node number set to 3060560571 [ 449.853153][T15022] FAULT_INJECTION: forcing a failure. [ 449.853153][T15022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.853180][T15022] CPU: 0 UID: 0 PID: 15022 Comm: syz.2.2216 Not tainted syzkaller #0 PREEMPT(full) [ 449.853199][T15022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 449.853210][T15022] Call Trace: [ 449.853217][T15022] [ 449.853225][T15022] dump_stack_lvl+0xe8/0x150 [ 449.853258][T15022] should_fail_ex+0x3eb/0x540 [ 449.853286][T15022] _copy_to_user+0x31/0xb0 [ 449.853322][T15022] simple_read_from_buffer+0xe1/0x170 [ 449.853352][T15022] proc_fail_nth_read+0x1bb/0x230 [ 449.853374][T15022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.853407][T15022] ? rw_verify_area+0x24a/0x4c0 [ 449.853452][T15022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.853470][T15022] vfs_read+0x213/0xa80 [ 449.853500][T15022] ? __pfx___mutex_lock+0x10/0x10 [ 449.853524][T15022] ? __pfx_vfs_read+0x10/0x10 [ 449.853553][T15022] ? __fget_files+0x2a/0x420 [ 449.853573][T15022] ? __fget_files+0x3a2/0x420 [ 449.853594][T15022] ? __fget_files+0x2a/0x420 [ 449.853641][T15022] ? fdget+0x1ac/0x250 [ 449.853672][T15022] ksys_read+0x150/0x270 [ 449.853703][T15022] ? __pfx_ksys_read+0x10/0x10 [ 449.853740][T15022] do_syscall_64+0x166/0x520 [ 449.853762][T15022] ? trace_irq_disable+0x3b/0x140 [ 449.853796][T15022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.853827][T15022] ? clear_bhb_loop+0x70/0xc0 [ 449.853850][T15022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.853867][T15022] RIP: 0033:0x7f869b16034e [ 449.853911][T15022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 449.853928][T15022] RSP: 002b:00007f86993f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.853947][T15022] RAX: ffffffffffffffda RBX: 00007f86993f66c0 RCX: 00007f869b16034e [ 449.853960][T15022] RDX: 000000000000000f RSI: 00007f86993f60a0 RDI: 0000000000000004 [ 449.853987][T15022] RBP: 00007f86993f6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.854016][T15022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.854026][T15022] R13: 00007f869b426038 R14: 00007f869b425fa0 R15: 00007fff1cd97fb8 [ 449.854071][T15022] [ 450.192726][T15036] netlink: 'syz.3.2221': attribute type 83 has an invalid length. [ 450.224189][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'. [ 450.295579][T15029] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 450.792523][T15058] ip_tables: iptables: counters copy to user failed while replacing table [ 451.012478][T15069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2229'. [ 451.177092][T15078] netlink: 'syz.2.2234': attribute type 10 has an invalid length. [ 451.228103][T15082] netlink: 'syz.0.2235': attribute type 61 has an invalid length. [ 451.228124][T15082] netlink: 'syz.0.2235': attribute type 62 has an invalid length. [ 451.228809][T15078] team0: Device bond0 failed to register rx_handler [ 451.270490][T15082] macvlan4: entered allmulticast mode [ 451.270509][T15082] bridge0: entered allmulticast mode [ 451.270543][T15082] bridge0: entered promiscuous mode [ 451.357444][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 451.370038][T15093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2237'. [ 451.395700][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 451.631385][T15107] netlink: 'syz.2.2243': attribute type 2 has an invalid length. [ 451.667932][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 451.808951][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 451.808984][T15119] netlink: 'syz.2.2245': attribute type 30 has an invalid length. [ 451.835444][T15119] vxlan1: entered promiscuous mode [ 451.835463][T15119] vxlan1: entered allmulticast mode [ 451.853350][T15121] netlink: 'syz.3.2246': attribute type 1 has an invalid length. [ 451.869646][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 451.869672][T15122] netlink: 'syz.2.2245': attribute type 30 has an invalid length. [ 451.893268][T15121] bond7: entered promiscuous mode [ 451.893692][T15121] 8021q: adding VLAN 0 to HW filter on device bond7 [ 451.904823][T15121] Bluetooth: hci0: unsupported parameter 5134 [ 451.904839][T15121] Bluetooth: hci0: unsupported parameter 8192 [ 451.904849][T15121] Bluetooth: hci0: unsupported parameter 5134 [ 451.904860][T15121] Bluetooth: hci0: unsupported parameter 8192 [ 451.915519][T15122] vxlan1: entered promiscuous mode [ 451.915535][T15122] vxlan1: entered allmulticast mode [ 452.439127][T15141] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 454.718716][T15141] bond11 (unregistering): Released all slaves [ 454.815660][T15145] __nla_validate_parse: 3 callbacks suppressed [ 454.815677][T15145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2251'. [ 454.909384][T15148] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 455.089637][T15154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2255'. [ 455.106234][T15162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2258'. [ 455.213337][T15170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2258'. [ 455.213439][T15170] lo: left promiscuous mode [ 455.242400][T15170] tunl0: left promiscuous mode [ 455.255651][T15170] gre0: left promiscuous mode [ 455.295111][T15170] gretap0: left promiscuous mode [ 455.350019][T15170] ip_vti0: left promiscuous mode [ 455.360533][T15170] sit0: left promiscuous mode [ 455.392120][T15170] ip6tnl0: left promiscuous mode [ 455.403742][T15170] ip6gre0: left promiscuous mode [ 455.415824][T15170] syz_tun: left promiscuous mode [ 455.426976][T15170] ip6gretap0: left promiscuous mode [ 455.445763][T15170] bridge0: left promiscuous mode [ 455.450803][T15170] vcan0: left promiscuous mode [ 455.454987][T15170] bond0: left promiscuous mode [ 455.459574][T15170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.464483][T15170] team0: left promiscuous mode [ 455.465639][T15170] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.484997][T15170] nlmon0: left promiscuous mode [ 455.496697][T15170] batadv0: left promiscuous mode [ 455.504096][T15170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.505827][T15170] veth0: left promiscuous mode [ 455.519563][T15170] veth1: left promiscuous mode [ 455.546183][T15170] wg0: left promiscuous mode [ 455.555351][T15170] wg1: left promiscuous mode [ 455.566743][T15170] wg2: left promiscuous mode [ 455.579302][T15170] veth0_to_bridge: left promiscuous mode [ 455.582222][T15170] bridge_slave_0: entered promiscuous mode [ 455.582979][T15170] veth1_to_bridge: left promiscuous mode [ 455.585769][T15170] bridge_slave_1: left promiscuous mode [ 455.593744][T15170] bond_slave_0: left promiscuous mode [ 455.594769][T15170] veth1_to_bond: left promiscuous mode [ 455.599676][T15170] bond_slave_1: left promiscuous mode [ 455.601635][T15170] veth0_to_team: left promiscuous mode [ 455.606459][T15170] team_slave_0: left promiscuous mode [ 455.607339][T15170] veth1_to_team: left promiscuous mode [ 455.618710][T15170] veth0_to_batadv: left promiscuous mode [ 455.622183][T15170] batadv_slave_0: left promiscuous mode [ 455.629044][T15170] veth1_to_batadv: left promiscuous mode [ 455.632993][T15170] batadv_slave_1: left promiscuous mode [ 455.644914][T15170] veth0_to_hsr: left promiscuous mode [ 455.651022][T15170] veth1_to_hsr: left promiscuous mode [ 455.657105][T15170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 455.657123][T15170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.657172][T15170] hsr0: left promiscuous mode [ 455.666218][T15170] veth1_virt_wifi: left promiscuous mode [ 455.671636][T15170] veth0_virt_wifi: left promiscuous mode [ 455.672891][T15170] virt_wifi0: left promiscuous mode [ 455.672907][T15170] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 455.691797][ T1563] s`z1: Port: 1 Link ACTIVE [ 455.852791][T15187] tipc: Enabling of bearer rejected, already enabled [ 455.913874][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 455.936182][T15202] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 455.936201][T15202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2269'. [ 456.105618][T15211] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.135097][T15211] Bluetooth: hci0: unsupported parameter 5134 [ 456.135116][T15211] Bluetooth: hci0: unsupported parameter 8192 [ 456.135127][T15211] Bluetooth: hci0: unsupported parameter 5134 [ 456.135137][T15211] Bluetooth: hci0: unsupported parameter 8192 [ 456.222395][T15219] netlink: 'syz.3.2273': attribute type 3 has an invalid length. [ 456.296676][T15224] openvswitch: netlink: Message has 1 unknown bytes. [ 456.296745][T15224] openvswitch: netlink: Actions may not be safe on all matching packets [ 456.305835][T15224] batadv_slave_0: entered promiscuous mode [ 456.310884][T15223] batadv_slave_0: left promiscuous mode [ 456.554157][T15242] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2279'. [ 456.554729][T15243] syzkaller1: entered promiscuous mode [ 456.554746][T15243] syzkaller1: entered allmulticast mode [ 456.584081][T15242] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2279'. [ 456.636411][T15245] netlink: 'syz.1.2277': attribute type 4 has an invalid length. [ 456.646878][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 456.703354][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 456.739130][ T62] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.752871][ T8648] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.752909][ T8648] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.760252][ T1197] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.839988][T15255] bond4: (slave veth0_to_bond): Releasing backup interface [ 456.874849][T15255] bond0: (slave bond_slave_0): Releasing backup interface [ 456.927362][T15255] bond0: (slave bond_slave_1): Releasing backup interface [ 456.990395][T15255] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.991959][T15264] tipc: Enabling of bearer rejected, failed to enable media [ 457.054059][T15263] vlan0: entered promiscuous mode [ 457.054078][T15263] bridge5: entered promiscuous mode [ 457.054671][T15263] vlan0: left allmulticast mode [ 457.054685][T15263] bridge5: left allmulticast mode [ 457.252450][ T30] audit: type=1800 audit(1794138920.467:8): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2288" name=63633F206C6F6F705F6865616465723F2069646F6D20696E736E233A206C6976655F726567735F6265666F7265293A0A2020202020202020202D31202020303A202E312E2E2E2E2E2E2E2E2028313829207238203D2030783363333130303030300A2020202020202020202030202020323A202E312E2E2E2E2E2E382E20283835292063616C6C2070632B360A2020202020202020202032202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666 dev="tmpfs" ino=2168 res=0 errno=-22 [ 457.954832][T15318] netlink: zone id is out of range [ 457.954866][T15318] netlink: set zone limit has 4 unknown bytes [ 458.062872][T15322] vcan0: tx address claim with dest, not broadcast [ 458.169526][T15336] veth0_macvtap: left promiscuous mode [ 458.347387][T15349] netlink: 'syz.1.2305': attribute type 4 has an invalid length. [ 460.079327][ T5642] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 460.079357][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 460.079376][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 460.079386][ T5642] Call Trace: [ 460.079392][ T5642] [ 460.079400][ T5642] dump_stack_lvl+0xe8/0x150 [ 460.079432][ T5642] dump_header+0xd3/0x4b0 [ 460.079459][ T5642] oom_kill_process+0x3ab/0x9e0 [ 460.079486][ T5642] out_of_memory+0xfb1/0x13b0 [ 460.079503][ T5642] ? try_charge_memcg+0xc0d/0x15e0 [ 460.079527][ T5642] ? __pfx_out_of_memory+0x10/0x10 [ 460.079543][ T5642] ? do_raw_spin_unlock+0xf5/0x200 [ 460.079566][ T5642] try_charge_memcg+0xcc3/0x15e0 [ 460.079603][ T5642] ? __pfx_try_charge_memcg+0x10/0x10 [ 460.079634][ T5642] ? charge_memcg+0x47/0x310 [ 460.079657][ T5642] charge_memcg+0x1dd/0x310 [ 460.079680][ T5642] __mem_cgroup_charge+0x25/0x80 [ 460.079703][ T5642] filemap_add_folio+0x140/0x4e0 [ 460.079726][ T5642] __filemap_get_folio_mpol+0x4fa/0xff0 [ 460.079752][ T5642] filemap_fault+0x9ce/0x12c0 [ 460.079775][ T5642] ? filemap_map_pages+0x1d1/0x2170 [ 460.079795][ T5642] ? __pfx_filemap_fault+0x10/0x10 [ 460.079817][ T5642] ? __pfx_filemap_map_pages+0x10/0x10 [ 460.079834][ T5642] ? lock_acquire+0x115/0x350 [ 460.079859][ T5642] __do_fault+0x138/0x2a0 [ 460.079876][ T5642] ? do_pte_missing+0x139f/0x3570 [ 460.079891][ T5642] do_pte_missing+0x21d2/0x3570 [ 460.079917][ T5642] ? handle_mm_fault+0xee/0x2f80 [ 460.079935][ T5642] handle_mm_fault+0x1807/0x2f80 [ 460.079959][ T5642] ? handle_mm_fault+0xee/0x2f80 [ 460.079980][ T5642] ? __pfx_handle_mm_fault+0x10/0x10 [ 460.079992][ T5642] ? lock_vma_under_rcu+0x45a/0x500 [ 460.080027][ T5642] do_user_addr_fault+0xb35/0x1480 [ 460.080053][ T5642] ? trace_page_fault_user+0x84/0x1e0 [ 460.080071][ T5642] exc_page_fault+0x6a/0xc0 [ 460.080090][ T5642] asm_exc_page_fault+0x26/0x30 [ 460.080104][ T5642] RIP: 0033:0x7fa45626cd31 [ 460.080118][ T5642] Code: 85 65 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 83 8a ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 7c 89 ee 00 48 01 d1 [ 460.080129][ T5642] RSP: 002b:00007fff4fd04540 EFLAGS: 00010202 [ 460.080142][ T5642] RAX: 0000001b34524000 RBX: 00000000000005fd RCX: 00000000000700f8 [ 460.080151][ T5642] RDX: 000000000f405aa1 RSI: 00007fff4fd045d0 RDI: 0000000000000001 [ 460.080160][ T5642] RBP: 00007fff4fd0457c R08: 000000003a2dedbb R09: 3fffffffffffffff [ 460.080169][ T5642] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 460.080178][ T5642] R13: 00000000000927c0 R14: 00000000000701f4 R15: 00007fff4fd045d0 [ 460.080203][ T5642] [ 460.087422][ T5642] memory: usage 307200kB, limit 307200kB, failcnt 562 [ 460.087438][ T5642] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 460.087450][ T5642] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 460.095249][ T5642] Memory cgroup stats for /syz3: [ 460.095429][ T5642] cache 0 [ 460.095437][ T5642] rss 0 [ 460.095443][ T5642] rss_huge 0 [ 460.095449][ T5642] shmem 0 [ 460.095455][ T5642] mapped_file 0 [ 460.095460][ T5642] dirty 0 [ 460.095466][ T5642] writeback 0 [ 460.095472][ T5642] workingset_refault_anon 4 [ 460.095478][ T5642] workingset_refault_file 0 [ 460.095484][ T5642] swap 229376 [ 460.095489][ T5642] swapcached 12288 [ 460.095494][ T5642] pgpgin 65725 [ 460.095500][ T5642] pgpgout 65722 [ 460.095506][ T5642] pgfault 111685 [ 460.095512][ T5642] pgmajfault 5 [ 460.095517][ T5642] inactive_anon 8192 [ 460.095524][ T5642] active_anon 4096 [ 460.095529][ T5642] inactive_file 0 [ 460.095535][ T5642] active_file 0 [ 460.095541][ T5642] unevictable 0 [ 460.095547][ T5642] hierarchical_memory_limit 314572800 [ 460.095553][ T5642] hierarchical_memsw_limit 9223372036854771712 [ 460.095560][ T5642] total_cache 0 [ 460.095566][ T5642] total_rss 0 [ 460.095572][ T5642] total_rss_huge 0 [ 460.095577][ T5642] total_shmem 0 [ 460.095583][ T5642] total_mapped_file 0 [ 460.095594][ T5642] total_dirty 0 [ 460.095600][ T5642] total_writeback 0 [ 460.095606][ T5642] total_workingset_refault_anon 4 [ 460.095612][ T5642] total_workingset_refault_file 0 [ 460.095618][ T5642] total_swap 229376 [ 460.095624][ T5642] total_swapcached 12288 [ 460.095630][ T5642] total_pgpgin 65725 [ 460.095636][ T5642] total_pgpgout 65722 [ 460.095642][ T5642] total_pgfault 111685 [ 460.095648][ T5642] total_pgmajfault 5 [ 460.095654][ T5642] total_inactive_anon 8192 [ 460.095660][ T5642] total_active_anon 4096 [ 460.095666][ T5642] total_inactive_file 0 [ 460.095672][ T5642] total_active_file 0 [ 460.095678][ T5642] total_unevictable 0 [ 460.095684][ T5642] anon_cost 0 [ 460.095689][ T5642] file_cost 0 [ 460.095695][ T5642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2308,pid=15351,uid=0 [ 460.096877][ T5642] Memory cgroup out of memory: Killed process 15351 (syz.3.2308) total-vm:102476kB, anon-rss:1272kB, file-rss:23048kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 460.781653][ T5295] veth0_macvtap: entered promiscuous mode [ 462.113936][T15439] __nla_validate_parse: 12 callbacks suppressed [ 462.113955][T15439] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2318'. [ 462.176115][T15453] netlink: 'syz.0.2320': attribute type 1 has an invalid length. [ 462.234606][T15456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2320'. [ 462.285418][T15453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2320'. [ 462.285578][T15458] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2321'. [ 462.285663][T15461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2322'. [ 462.319542][T15458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2321'. [ 462.346246][T15458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2321'. [ 462.544523][T15472] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 462.544523][T15472] Please contact the netfilter-devel mailing list or update your nftables rules. [ 462.545060][T15467] rxe_eth0 speed is unknown, defaulting to 1000 [ 462.735305][T15481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2324'. [ 463.038313][T15488] xt_bpf: check failed: parse error [ 463.126588][T15490] xt_connbytes: Forcing CT accounting to be enabled [ 463.839402][T15496] syzkaller0: left promiscuous mode [ 463.839423][T15496] syzkaller0: left allmulticast mode [ 464.138288][T15504] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 467.183383][T15521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2335'. [ 467.183730][T15524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2335'. [ 467.323610][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 467.364392][T15527] batman_adv: batadv0: Interface activated: syz_tun [ 467.575618][T15551] sctp: [Deprecated]: syz.3.2345 (pid 15551) Use of int in max_burst socket option. [ 467.575618][T15551] Use struct sctp_assoc_value instead [ 467.613909][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 467.683681][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 467.706559][T15563] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 467.783034][T15561] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2348'. [ 467.922228][T15572] xt_recent: Unsupported userspace flags (000000c5) [ 467.943090][T15574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2352'. [ 467.943160][T15574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2352'. [ 467.985643][T15577] tipc: Enabling of bearer rejected, failed to enable media [ 468.043071][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2354'. [ 468.043281][T15584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2354'. [ 468.368008][T15601] ip_vti0: entered promiscuous mode [ 468.648847][T15629] netlink: 'syz.1.2367': attribute type 4 has an invalid length. [ 468.873719][T15636] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 470.226041][T15693] veth0: left allmulticast mode [ 470.226063][T15693] veth0: left promiscuous mode [ 470.226260][T15693] bridge0: port 1(veth0) entered disabled state [ 470.557607][T15703] syzkaller1: entered allmulticast mode [ 471.272150][T15723] ip6tnl5: entered allmulticast mode [ 472.040625][T15769] syzkaller1: entered promiscuous mode [ 472.040646][T15769] syzkaller1: entered allmulticast mode [ 472.060194][T15769] Bluetooth: hci0: unsupported parameter 5134 [ 472.060210][T15769] Bluetooth: hci0: unsupported parameter 8192 [ 472.060236][T15769] Bluetooth: hci0: unsupported parameter 5134 [ 472.060247][T15769] Bluetooth: hci0: unsupported parameter 8192 [ 472.137229][T15777] ip_tables: iptables: counters copy to user failed while replacing table [ 472.385594][T15793] __nla_validate_parse: 11 callbacks suppressed [ 472.385752][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'. [ 472.385778][T15793] netlink: 'syz.2.2412': attribute type 30 has an invalid length. [ 472.408366][T15793] vxlan1: entered promiscuous mode [ 472.408387][T15793] vxlan1: entered allmulticast mode [ 472.424787][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'. [ 472.462523][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'. [ 472.462576][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 472.463004][T15792] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2413'. [ 472.463025][T15792] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2413'. [ 472.464704][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 472.465010][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 472.466149][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2415'. [ 472.466311][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 472.466335][T15792] openvswitch: netlink: EtherType 520 is less than min 600 [ 472.556573][T15800] bond9: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 472.570211][T15800] bond9 (unregistering): Released all slaves [ 472.893339][T15818] bridge0: entered allmulticast mode [ 473.918382][T15881] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.350092][T15896] syzkaller0: entered promiscuous mode [ 474.350114][T15896] syzkaller0: entered allmulticast mode [ 474.804249][T15937] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.486764][T15977] sctp: [Deprecated]: syz.3.2450 (pid 15977) Use of int in maxseg socket option. [ 475.486764][T15977] Use struct sctp_assoc_value instead [ 475.984135][T16002] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 475.984996][T15996] tipc: Enabling of bearer rejected, failed to enable media [ 476.294506][T16012] syzkaller0: entered promiscuous mode [ 476.294527][T16012] syzkaller0: entered allmulticast mode [ 476.363079][T16020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 476.409803][T16020] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 476.416368][T16020] syzkaller0: left promiscuous mode [ 476.416385][T16020] syzkaller0: left allmulticast mode [ 476.452734][T16020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 476.524067][T16022] ip6tnl7: entered promiscuous mode [ 476.524085][T16022] ip6tnl7: entered allmulticast mode [ 477.126268][T16036] tc_dump_action: action bad kind [ 477.429782][T16052] siw: device registration error -23 [ 477.436412][T16052] __nla_validate_parse: 14 callbacks suppressed [ 477.436428][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2469'. [ 477.590564][T16058] netlink: 'syz.0.2473': attribute type 1 has an invalid length. [ 477.590585][T16058] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2473'. [ 477.951082][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 478.077604][T16072] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 478.332850][T16074] netlink: 'syz.1.2478': attribute type 3 has an invalid length. [ 478.444011][T16079] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 478.535285][T16083] netlink: 'syz.3.2482': attribute type 21 has an invalid length. [ 478.535378][T16083] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 478.535390][T16083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2482'. [ 478.550654][T16086] netlink: 'syz.3.2482': attribute type 21 has an invalid length. [ 478.550743][T16086] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 478.550754][T16086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2482'. [ 478.745016][T16100] ip_tables: iptables: counters copy to user failed while replacing table [ 478.751611][T16101] ip_tables: iptables: counters copy to user failed while replacing table [ 478.955052][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2492'. [ 479.099358][T16118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.201164][T16129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.584677][T16149] netlink: 'syz.4.2502': attribute type 8 has an invalid length. [ 479.902401][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 479.902420][T16162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2506'. [ 479.982049][T16166] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2508'. [ 480.135113][T16178] netlink: 'syz.3.2512': attribute type 4 has an invalid length. [ 480.135133][T16178] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2512'. [ 480.742026][T16201] TC_ACT_REPEAT abuse ? [ 480.868589][T16208] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 480.870664][T16208] batman_adv: batadv0: Adding interface: gretap1 [ 480.870679][T16208] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.870800][T16208] batman_adv: batadv0: Interface activated: gretap1 [ 481.135001][T16222] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.157438][T16222] tipc: Enabled bearer , priority 23 [ 481.741210][T16244] block nbd0: NBD_DISCONNECT [ 481.741236][T16244] block nbd0: Send disconnect failed -32 [ 481.741253][T16244] block nbd0: Send disconnect failed -32 [ 481.741270][T16244] block nbd0: shutting down sockets [ 482.193952][T16263] dummy0 (unregistering): left promiscuous mode [ 482.207400][T16275] netlink: 'syz.3.2540': attribute type 1 has an invalid length. [ 482.393689][T16275] bond9: entered promiscuous mode [ 482.395850][T16275] 8021q: adding VLAN 0 to HW filter on device bond9 [ 482.465324][T16287] 8021q: adding VLAN 0 to HW filter on device bond10 [ 482.474818][T16287] bond9: (slave bond10): making interface the new active one [ 482.474837][T16287] bond10: entered promiscuous mode [ 482.482313][T16287] bond9: (slave bond10): Enslaving as an active interface with an up link [ 482.911340][T16332] netlink: 'syz.1.2550': attribute type 13 has an invalid length. [ 482.911592][T16333] netlink: 'syz.1.2550': attribute type 13 has an invalid length. [ 482.919092][T16333] __nla_validate_parse: 12 callbacks suppressed [ 482.919107][T16333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2550'. [ 483.109152][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 483.159925][T16356] netlink: 'syz.2.2556': attribute type 2 has an invalid length. [ 483.165335][T16356] !: entered promiscuous mode [ 483.185949][T16356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2556'. [ 483.185966][T16356] netlink: 468 bytes leftover after parsing attributes in process `syz.2.2556'. [ 483.185983][T16356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2556'. [ 483.186842][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2556'. [ 483.186917][T16356] !: left promiscuous mode [ 483.424624][T16363] erspan1: entered promiscuous mode [ 483.551671][T16369] netlink: 'syz.2.2559': attribute type 11 has an invalid length. [ 483.551692][T16369] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2559'. [ 483.614318][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 483.614403][T16371] nftables ruleset with unbound chain [ 483.646348][T16366] tipc: Enabled bearer , priority 0 [ 483.762637][T16381] netlink: 'syz.4.2562': attribute type 1 has an invalid length. [ 483.770279][T16366] syzkaller0: entered promiscuous mode [ 483.770299][T16366] syzkaller0: entered allmulticast mode [ 483.770904][T16366] tipc: Resetting bearer [ 483.842023][T16384] dummy0: left promiscuous mode [ 483.874177][T16365] tipc: Resetting bearer [ 483.874609][T16381] netlink: 'syz.4.2562': attribute type 10 has an invalid length. [ 483.874626][T16381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2562'. [ 483.933494][T16384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.933510][T16384] IPv6: NLM_F_CREATE should be set when creating new route [ 483.933554][T16384] IPv6: NLM_F_CREATE should be set when creating new route [ 485.256607][T16365] tipc: Disabling bearer [ 501.450944][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.897176][T16394] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 523.142554][T16408] 8021q: adding VLAN 0 to HW filter on device bond11 [ 523.156149][T16413] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2569'. [ 523.173973][T16408] bond0: (slave bond11): Enslaving as an active interface with an up link [ 523.220497][T16416] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2569'. [ 523.434844][T16417] team0 (unregistering): Port device team_slave_1 removed [ 523.495797][T16416] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2569'. [ 523.513446][T16419] netlink: 'syz.0.2573': attribute type 1 has an invalid length. [ 523.649092][T16434] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 523.667336][T16437] netlink: 'syz.3.2577': attribute type 10 has an invalid length. [ 523.722959][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 523.765799][T16434] 8021q: adding VLAN 0 to HW filter on device bond11 [ 523.824941][T16434] bond11: (slave bridge11): making interface the new active one [ 523.826291][T16434] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 523.914752][T16446] syzkaller1: entered promiscuous mode [ 523.914773][T16446] syzkaller1: entered allmulticast mode [ 523.973357][T16452] ip_tables: iptables: counters copy to user failed while replacing table [ 524.065852][T16451] batman_adv: batadv0: Removing interface: veth0 [ 524.076513][T16451] bond0: (slave veth0_to_bond): Releasing backup interface [ 524.082569][T16451] veth0_to_bond: left promiscuous mode [ 524.084496][T16451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.309586][T16474] syzkaller1: entered promiscuous mode [ 524.309607][T16474] syzkaller1: entered allmulticast mode [ 524.346757][T16465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2586'. [ 524.511149][T16488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2591'. [ 524.722378][T16490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2591'. [ 525.200622][T16517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2597'. [ 525.278479][T16521] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2599'. [ 525.700842][T16540] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2608'. [ 526.001293][T16560] ip_tables: iptables: counters copy to user failed while replacing table [ 526.029480][T16560] netlink: 'syz.2.2615': attribute type 1 has an invalid length. [ 526.030622][T16567] ip_tables: iptables: counters copy to user failed while replacing table [ 526.129553][T16560] bond7: entered promiscuous mode [ 526.134142][T16560] 8021q: adding VLAN 0 to HW filter on device bond7 [ 526.194862][T16561] macvtap1: entered allmulticast mode [ 526.230627][T16572] macvtap2: entered allmulticast mode [ 526.232564][T16573] netlink: 'syz.1.2613': attribute type 3 has an invalid length. [ 526.283041][T16583] netlink: 'syz.0.2619': attribute type 4 has an invalid length. [ 526.285210][T16560] bond7: (slave bridge0): making interface the new active one [ 526.285228][T16560] bridge0: entered promiscuous mode [ 526.310502][T16560] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 526.316438][T16578] sctp: [Deprecated]: syz.3.2618 (pid 16578) Use of int in max_burst socket option. [ 526.316438][T16578] Use struct sctp_assoc_value instead [ 526.595139][T16578] netlink: 'syz.3.2618': attribute type 4 has an invalid length. [ 526.609093][T16578] netlink: 'syz.3.2618': attribute type 4 has an invalid length. [ 526.625159][T16578] netlink: 'syz.3.2618': attribute type 4 has an invalid length. [ 526.640885][T16578] netlink: 'syz.3.2618': attribute type 4 has an invalid length. [ 530.077264][T16620] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 530.170295][T16630] __nla_validate_parse: 12 callbacks suppressed [ 530.170329][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 530.291956][ T30] audit: type=1107 audit(1794138993.507:9): pid=16638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='—ìi±hø¦þÙéÿ²²h«¥KµB1‘…ÉS@E_1âŸö²­¶ü(›Ã7ÞÜö9>ï [ 536.665687][ T5629] dump_stack_lvl+0xe8/0x150 [ 536.665786][ T5629] dump_header+0xd3/0x4b0 [ 536.665809][ T5629] oom_kill_process+0x3ab/0x9e0 [ 536.665835][ T5629] out_of_memory+0xfb1/0x13b0 [ 536.665847][ T5629] ? try_charge_memcg+0xc0d/0x15e0 [ 536.665928][ T5629] ? __pfx_out_of_memory+0x10/0x10 [ 536.665948][ T5629] ? do_raw_spin_unlock+0xf5/0x200 [ 536.665991][ T5629] try_charge_memcg+0xcc3/0x15e0 [ 536.666029][ T5629] ? __pfx_try_charge_memcg+0x10/0x10 [ 536.666061][ T5629] ? charge_memcg+0x47/0x310 [ 536.666080][ T5629] charge_memcg+0x1dd/0x310 [ 536.666095][ T5629] ? mem_cgroup_swapin_charge_folio+0x2b/0x180 [ 536.666104][ T5629] mem_cgroup_swapin_charge_folio+0x11a/0x180 [ 536.666116][ T5629] __swap_cache_alloc_folio+0x4de/0x990 [ 536.666152][ T5629] swap_cluster_readahead+0x4f2/0x640 [ 536.666167][ T5629] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 536.666180][ T5629] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.666201][ T5629] swapin_readahead+0x1a3/0xc60 [ 536.666219][ T5629] ? lock_acquire+0x115/0x350 [ 536.666231][ T5629] ? __pfx_swapin_readahead+0x10/0x10 [ 536.666241][ T5629] ? swap_table_get+0x1e/0x260 [ 536.666255][ T5629] ? swap_table_get+0x1e/0x260 [ 536.666265][ T5629] ? swap_table_get+0x1e/0x260 [ 536.666273][ T5629] ? swap_table_get+0x1e/0x260 [ 536.666287][ T5629] ? swap_cache_get_folio+0x315/0x390 [ 536.666296][ T5629] ? get_swap_device+0xd7/0x1c0 [ 536.666309][ T5629] do_swap_page+0x752/0x4b80 [ 536.666337][ T5629] ? lock_acquire+0x115/0x350 [ 536.666354][ T5629] ? __lock_acquire+0x747/0x2de0 [ 536.666365][ T5629] ? do_swap_page+0x123/0x4b80 [ 536.666379][ T5629] ? __pfx_do_swap_page+0x10/0x10 [ 536.666392][ T5629] ? __pte_offset_map+0x1ae/0x240 [ 536.666405][ T5629] ? pte_offset_map_rw_nolock+0xea/0x160 [ 536.666416][ T5629] handle_mm_fault+0x1327/0x2f80 [ 536.666434][ T5629] ? handle_mm_fault+0xee/0x2f80 [ 536.666449][ T5629] ? __pfx_handle_mm_fault+0x10/0x10 [ 536.666458][ T5629] ? lock_vma_under_rcu+0x45a/0x500 [ 536.666482][ T5629] do_user_addr_fault+0xb35/0x1480 [ 536.666510][ T5629] ? trace_page_fault_user+0x84/0x1e0 [ 536.666524][ T5629] exc_page_fault+0x6a/0xc0 [ 536.666626][ T5629] asm_exc_page_fault+0x26/0x30 [ 536.666653][ T5629] RIP: 0033:0x7f869b16034e [ 536.666688][ T5629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 536.666697][ T5629] RSP: 002b:00007fff1cd98298 EFLAGS: 00010246 [ 536.666733][ T5629] RAX: 0000000000000000 RBX: 000055558d8ed500 RCX: 00007f869b16034e [ 536.666740][ T5629] RDX: 00007fff1cd982f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.666747][ T5629] RBP: 00007fff1cd9835c R08: 0000000000000000 R09: 0000000000000000 [ 536.666752][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 536.666758][ T5629] R13: 00000000000927c0 R14: 0000000000082ddf R15: 00007fff1cd983b0 [ 536.666776][ T5629] [ 536.676554][ T5629] memory: usage 307200kB, limit 307200kB, failcnt 852 [ 536.676571][ T5629] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 536.676583][ T5629] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 536.676594][ T5629] Memory cgroup stats for /syz2: [ 536.676729][ T5629] cache 0 [ 536.676736][ T5629] rss 0 [ 536.676741][ T5629] rss_huge 0 [ 536.676747][ T5629] shmem 0 [ 536.676752][ T5629] mapped_file 0 [ 536.676758][ T5629] dirty 0 [ 536.676764][ T5629] writeback 0 [ 536.676769][ T5629] workingset_refault_anon 4 [ 536.676776][ T5629] workingset_refault_file 67 [ 536.676782][ T5629] swap 217088 [ 536.676788][ T5629] swapcached 4096 [ 536.676793][ T5629] pgpgin 97984 [ 536.676799][ T5629] pgpgout 97983 [ 536.676805][ T5629] pgfault 147107 [ 536.676810][ T5629] pgmajfault 10 [ 536.676816][ T5629] inactive_anon 0 [ 536.676821][ T5629] active_anon 4096 [ 536.676827][ T5629] inactive_file 0 [ 536.676833][ T5629] active_file 0 [ 536.676838][ T5629] unevictable 0 [ 536.676844][ T5629] hierarchical_memory_limit 314572800 [ 536.676850][ T5629] hierarchical_memsw_limit 9223372036854771712 [ 536.676857][ T5629] total_cache 0 [ 536.676863][ T5629] total_rss 0 [ 536.676869][ T5629] total_rss_huge 0 [ 536.676874][ T5629] total_shmem 0 [ 536.676880][ T5629] total_mapped_file 0 [ 536.676886][ T5629] total_dirty 0 [ 536.676892][ T5629] total_writeback 0 [ 536.676897][ T5629] total_workingset_refault_anon 4 [ 536.676904][ T5629] total_workingset_refault_file 67 [ 536.676910][ T5629] total_swap 217088 [ 536.676916][ T5629] total_swapcached 4096 [ 536.676922][ T5629] total_pgpgin 97984 [ 536.676928][ T5629] total_pgpgout 97983 [ 536.676933][ T5629] total_pgfault 147109 [ 536.676939][ T5629] total_pgmajfault 10 [ 536.676944][ T5629] total_inactive_anon 0 [ 536.676951][ T5629] total_active_anon 4096 [ 536.676957][ T5629] total_inactive_file 0 [ 536.676963][ T5629] total_active_file 0 [ 536.676968][ T5629] total_unevictable 0 [ 536.676974][ T5629] anon_cost 0 [ 536.676980][ T5629] file_cost 0 [ 536.676986][ T5629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2723,pid=16956,uid=0 [ 536.678231][ T5629] Memory cgroup out of memory: Killed process 16956 (syz.2.2723) total-vm:106712kB, anon-rss:1268kB, file-rss:27528kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 538.614735][T16978] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 538.780694][T16994] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 538.780841][T16994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2728'. [ 538.893121][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2730'. [ 538.893157][T17001] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 539.022351][T17017] ip_tables: iptables: counters copy to user failed while replacing table [ 539.648697][T17060] netlink: 'syz.2.2745': attribute type 3 has an invalid length. [ 539.648718][T17060] netlink: 'syz.2.2745': attribute type 1 has an invalid length. [ 539.648732][T17060] NCSI netlink: No device for ifindex 0 [ 539.741295][T17066] ip_tables: iptables: counters copy to user failed while replacing table [ 540.380807][T17111] __nla_validate_parse: 6 callbacks suppressed [ 540.380825][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 540.490686][T17114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2757'. [ 540.636458][T17122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2764'. [ 540.636685][T17121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2764'. [ 540.774176][T17127] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2766'. [ 540.774203][T17127] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2766'. [ 540.792586][T17135] ip6t_hbh: Not strict - not implemented [ 540.986040][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 541.051944][T17150] netlink: 'syz.3.2773': attribute type 12 has an invalid length. [ 541.051964][T17150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2773'. [ 541.381710][T17165] netlink: 'syz.3.2776': attribute type 1 has an invalid length. [ 542.141132][T17187] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2781'. [ 542.202575][T17183] netlink: 'syz.4.2781': attribute type 1 has an invalid length. [ 542.256717][T17183] 8021q: adding VLAN 0 to HW filter on device bond13 [ 542.330267][T17197] syzkaller1: entered promiscuous mode [ 542.330291][T17197] syzkaller1: entered allmulticast mode [ 542.393252][T17197] netlink: 'syz.3.2784': attribute type 4 has an invalid length. [ 542.622735][T17214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2789'. [ 543.173498][T17239] netlink: 'syz.2.2794': attribute type 4 has an invalid length. [ 543.221682][T17244] netlink: 'syz.4.2797': attribute type 3 has an invalid length. [ 546.217422][T17288] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 546.355137][T17296] __nla_validate_parse: 4 callbacks suppressed [ 546.355156][T17296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2815'. [ 546.399345][T17298] netlink: 'syz.2.2814': attribute type 1 has an invalid length. [ 546.522359][T17298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2814'. [ 546.570503][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 546.604465][T17298] bond8: (slave bridge7): making interface the new active one [ 546.606590][T17298] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 546.866399][T17327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.093061][T17343] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 547.125833][T17340] bond10 (unregistering): Released all slaves [ 547.126396][T17341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'. [ 547.282633][T17339] 8021q: adding VLAN 0 to HW filter on device bond13 [ 547.310346][T17339] bond12: (slave bond13): making interface the new active one [ 547.310795][T17339] bond12: (slave bond13): Enslaving as an active interface with an up link [ 547.350900][T17349] bond12: (slave gretap2): Enslaving as a backup interface with an up link [ 547.353463][T17343] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 547.368733][T17353] ipvlan1: entered promiscuous mode [ 547.370577][T17353] bridge0: port 1(ipvlan1) entered blocking state [ 547.372148][T17353] bridge0: port 1(ipvlan1) entered disabled state [ 547.372281][T17353] ipvlan1: entered allmulticast mode [ 547.372294][T17353] bridge0: entered allmulticast mode [ 547.376507][T17353] ipvlan1: left allmulticast mode [ 547.376521][T17353] bridge0: left allmulticast mode [ 547.425091][T17339] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 547.460404][T17354] syzkaller0: entered promiscuous mode [ 547.460425][T17354] syzkaller0: entered allmulticast mode [ 547.499588][T17360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2832'. [ 547.534487][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2828'. [ 547.544009][T17362] xt_l2tp: v2 doesn't support IP mode [ 547.673249][T17371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2837'. [ 547.676040][T17372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2837'. [ 547.737638][T17374] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2836'. [ 547.742662][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'. [ 547.902687][T17372] NFSD: Failed to start, no listeners configured. [ 548.272858][T17371] NFSD: Failed to start, no listeners configured. [ 548.378514][T17404] bridge0: Device is already in use. [ 548.934881][T17432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.941243][T17439] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 548.941260][T17439] netlink: 'syz.1.2853': attribute type 4 has an invalid length. [ 548.995666][T17443] netlink: 'syz.2.2854': attribute type 1 has an invalid length. [ 549.075689][T17447] macvlan0: entered promiscuous mode [ 549.075709][T17447] macvlan0: entered allmulticast mode [ 549.077896][T17447] bond10: entered promiscuous mode [ 549.078040][T17447] bond10: entered allmulticast mode [ 549.079541][T17447] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 549.110059][T17447] bond10: left allmulticast mode [ 549.110079][T17447] bond10: left promiscuous mode [ 549.330332][T17461] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 549.344669][T17461] block nbd0: not configured, cannot reconfigure [ 549.695640][T17482] dummy0: left promiscuous mode [ 549.702887][T17482] netlink: 'syz.2.2860': attribute type 10 has an invalid length. [ 549.704778][T17482] dummy0: entered promiscuous mode [ 549.914585][T17497] netlink: ct family unspecified [ 550.016513][T17495] 1ªX¹¦Dö»: entered promiscuous mode [ 550.016535][T17495] 1ªX¹¦Dö»: left allmulticast mode [ 550.039664][T17500] ip_tables: iptables: counters copy to user failed while replacing table [ 550.049079][ T172] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.049118][ T172] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.049147][ T172] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.049175][ T172] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.275662][T17509] netlink: 'syz.2.2868': attribute type 19 has an invalid length. [ 550.685828][T17533] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.696168][T17533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.706168][T17533] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.707237][T17533] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.722654][T17533] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 550.816033][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.819009][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.820974][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.823069][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.828743][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.256741][T17549] syzkaller1: entered promiscuous mode [ 551.256763][T17549] syzkaller1: entered allmulticast mode [ 551.393485][T17555] ipt_REJECT: ECHOREPLY no longer supported. [ 551.488919][T17560] __nla_validate_parse: 12 callbacks suppressed [ 551.488938][T17560] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2875'. [ 551.558386][ T62] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.558431][ T62] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.558464][ T62] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.558496][ T62] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.766009][ T172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.766041][ T172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.989422][ T172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.989453][ T172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.224502][ T172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.224533][ T172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.456121][T17594] nbd: illegal input index -1 [ 552.459403][ T172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.459432][ T172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.495171][T17530] rxe_eth0 speed is unknown, defaulting to 1000 [ 552.685546][T17594] NFSD: Failed to start, no listeners configured. [ 552.888296][ T5630] Bluetooth: hci5: command tx timeout [ 552.945207][T17624] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2886'. [ 553.178610][T17633] netlink: 'syz.3.2887': attribute type 1 has an invalid length. [ 553.231969][T17621] syzkaller1: entered promiscuous mode [ 553.231989][T17621] syzkaller1: entered allmulticast mode [ 553.269729][ T30] audit: type=1800 audit(1794139016.487:10): pid=17635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2888" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2749 res=0 errno=-22 [ 553.309774][T17638] sctp: [Deprecated]: syz.3.2887 (pid 17638) Use of int in max_burst socket option. [ 553.309774][T17638] Use struct sctp_assoc_value instead [ 553.363150][T17633] bond12: entered promiscuous mode [ 553.363546][T17633] 8021q: adding VLAN 0 to HW filter on device bond12 [ 553.390340][ T172] bridge_slave_1: left allmulticast mode [ 553.390377][ T172] bridge_slave_1: left promiscuous mode [ 553.391572][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.440396][ T172] dvmrp0: left allmulticast mode [ 553.843501][ T172] 0ªX¹¦Dö» (unregistering): left promiscuous mode [ 554.000141][ T172] bridge0 (unregistering): left allmulticast mode [ 554.079128][ T172] team0: Port device bridge4 removed [ 554.120402][ T172] bond0 (unregistering): left promiscuous mode [ 554.120423][ T172] bond_slave_0: left promiscuous mode [ 554.120550][ T172] bond_slave_1: left promiscuous mode [ 554.159952][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.182022][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.184502][ T172] bond0 (unregistering): Released all slaves [ 554.220049][ T172] bond1 (unregistering): Released all slaves [ 554.248762][ T172] bond2 (unregistering): (slave veth5): Releasing active interface [ 554.254620][ T172] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 554.266583][ T172] bond2 (unregistering): Released all slaves [ 554.296711][ T172] bond3 (unregistering): (slave veth7): Releasing backup interface [ 554.316581][ T172] bond3 (unregistering): Released all slaves [ 554.328356][ T172] bond4 (unregistering): Released all slaves [ 554.335913][ T172] bond5 (unregistering): Released all slaves [ 554.353102][ T172] bond6 (unregistering): Released all slaves [ 554.373231][ T172] bond7 (unregistering): Released all slaves [ 554.384515][ T172] bond8 (unregistering): Released all slaves [ 554.397391][ T172] bond9 (unregistering): Released all slaves [ 554.582784][ T62] smbdirect: ib_dev[syz1] removed [ 554.607290][T17667] syzkaller0: left promiscuous mode [ 554.607310][T17667] syzkaller0: left allmulticast mode [ 554.660585][ T29] infiniband syz1: ib_query_port failed (-19) [ 554.824675][ T172] tipc: Disabling bearer [ 554.840006][ T172] tipc: Left network mode [ 554.978342][ T5630] Bluetooth: hci5: command tx timeout [ 555.028111][T17712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.220642][T17722] wg2: Caught tx_queue_len zero misconfig [ 555.377380][T17730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2903'. [ 555.405466][T17730] netlink: 'syz.2.2903': attribute type 61 has an invalid length. [ 555.405486][T17730] netlink: 'syz.2.2903': attribute type 268 has an invalid length. [ 555.857046][T17748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 556.064464][T17756] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2908'. [ 556.407026][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2913'. [ 556.481369][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.481476][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.481602][T17530] bridge_slave_0: entered allmulticast mode [ 556.512543][T17530] bridge_slave_0: entered promiscuous mode [ 556.518708][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.518807][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.518925][T17530] bridge_slave_1: entered allmulticast mode [ 556.528183][T17530] bridge_slave_1: entered promiscuous mode [ 556.722290][T17781] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2912'. [ 556.723805][T17793] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 556.959408][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.968809][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.048485][ T5630] Bluetooth: hci5: command tx timeout [ 558.464071][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2918'. [ 558.543399][T17530] team0: Port device team_slave_0 added [ 558.592183][T17530] team0: Port device team_slave_1 added [ 558.791408][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.791425][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.791445][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.799650][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.799663][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.799684][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.843559][T17819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2923'. [ 559.128262][ T5630] Bluetooth: hci5: command tx timeout [ 559.236235][ T172] veth1_vlan: left allmulticast mode [ 559.236520][ T172] veth1_vlan: left promiscuous mode [ 559.236571][ T172] veth0_vlan: left promiscuous mode [ 559.269390][T17842] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 559.269629][T17842] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 559.664378][ T172] team0 (unregistering): Port device team_slave_1 removed [ 559.817133][T17854] netlink: 'syz.3.2929': attribute type 12 has an invalid length. [ 559.817257][T17855] netlink: 'syz.3.2929': attribute type 12 has an invalid length. [ 559.844591][T17530] hsr_slave_0: entered promiscuous mode [ 559.845616][T17530] hsr_slave_1: entered promiscuous mode [ 559.846472][T17530] debugfs: 'hsr0' already exists in 'hsr' [ 559.846499][T17530] Cannot create hsr debugfs directory [ 560.339132][T17866] netlink: 'syz.3.2933': attribute type 4 has an invalid length. [ 560.339917][T17866] netlink: 'syz.3.2933': attribute type 4 has an invalid length. [ 560.522887][ T172] IPVS: stop unused estimator thread 0... [ 560.528257][T17883] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2937'. [ 560.528387][T17883] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» [ 560.566176][T17883] 0ªX¹¦Dö»: left promiscuous mode [ 560.566198][T17883] 0ªX¹¦Dö»: entered allmulticast mode [ 560.741356][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'. [ 560.780069][T17897] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 561.668930][T17946] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2950'. [ 561.696253][T17530] netdevsim netdevsim0 netdevsim0: renamed from eth2 [ 561.729603][T17530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.735331][T17530] netdevsim netdevsim0 netdevsim1: renamed from eth3 [ 561.780092][T17530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.780708][T17530] netdevsim netdevsim0 netdevsim2: renamed from eth4 [ 561.811741][T17530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.821670][T17530] netdevsim netdevsim0 netdevsim3: renamed from eth5 [ 561.847160][T17530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.152688][T17964] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2953'. [ 562.274294][T17974] syzkaller1: entered promiscuous mode [ 562.274317][T17974] syzkaller1: entered allmulticast mode [ 562.471850][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.515384][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.515515][ T8648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.554042][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.554144][ T8648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.569622][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 562.891255][T18000] syzkaller1: entered promiscuous mode [ 562.891275][T18000] syzkaller1: entered allmulticast mode [ 562.896093][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.489192][T18004] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 563.543519][T18011] syzkaller1: entered promiscuous mode [ 563.543541][T18011] syzkaller1: entered allmulticast mode [ 563.606676][T18035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.133757][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 564.284300][T17530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.335782][T18056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2971'. [ 564.369124][T18061] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2972'. [ 564.496424][T17530] veth0_vlan: entered promiscuous mode [ 564.507172][T17530] veth1_vlan: entered promiscuous mode [ 564.703922][T17530] veth0_macvtap: entered promiscuous mode [ 564.798459][T17530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.835813][T17530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.909287][ T1197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.909325][ T1197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.909354][ T1197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.909383][ T1197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.006186][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'. [ 565.006205][T18086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2978'. [ 565.139658][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 565.139689][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 565.139706][T18092] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 565.486234][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2980'. [ 565.571950][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.571970][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.761169][T18111] syzkaller0: entered promiscuous mode [ 565.761191][T18111] syzkaller0: entered allmulticast mode [ 565.764344][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.764361][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.381162][T18125] ip_tables: iptables: counters copy to user failed while replacing table [ 566.466981][T17533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 566.480805][T17533] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 566.488685][T17533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 566.498330][T17533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 566.499549][T17533] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 566.715161][ T5642] batman_adv: batadv0: Removing interface: syz_tun [ 566.840918][T18143] veth1_macvtap: entered promiscuous mode [ 566.841380][T18143] macsec1: entered promiscuous mode [ 567.087333][T18156] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 567.160099][T18159] __nla_validate_parse: 5 callbacks suppressed [ 567.160118][T18159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2996'. [ 567.359745][T18128] rxe_eth0 speed is unknown, defaulting to 1000 [ 567.930382][T18128] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.930547][T18128] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.930664][T18128] bridge_slave_0: entered allmulticast mode [ 567.932391][T18128] bridge_slave_0: entered promiscuous mode [ 567.966366][T18128] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.966803][T18128] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.966927][T18128] bridge_slave_1: entered allmulticast mode [ 567.991212][T18128] bridge_slave_1: entered promiscuous mode [ 568.042513][T18128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.045861][T18128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.102955][T18128] team0: Port device team_slave_0 added [ 568.106694][T18128] team0: Port device team_slave_1 added [ 568.149268][T18128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.149283][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.149305][T18128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.151258][T18128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.151270][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.151292][T18128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.270098][T18128] hsr_slave_0: entered promiscuous mode [ 568.271173][T18128] hsr_slave_1: entered promiscuous mode [ 568.271978][T18128] debugfs: 'hsr0' already exists in 'hsr' [ 568.271992][T18128] Cannot create hsr debugfs directory [ 568.569660][ T5630] Bluetooth: hci3: command tx timeout [ 568.831348][T18128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 568.836664][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 568.838157][T18128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 568.844192][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.845368][T18128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 568.854810][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 568.855847][T18128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 568.874760][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.989019][T18128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.005744][T18128] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.012984][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.013086][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.022822][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.022938][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.523383][T18128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.575487][T18128] veth0_vlan: entered promiscuous mode [ 569.591929][T18128] veth1_vlan: entered promiscuous mode [ 569.632213][T18128] veth0_macvtap: entered promiscuous mode [ 569.637467][T18128] veth1_macvtap: entered promiscuous mode [ 569.653685][T18128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.669697][T18128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.711554][ T8648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.713354][ T8648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.713392][ T8648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.713420][ T8648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.810894][ T8648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.810915][ T8648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.855847][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.855865][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.648105][ T5630] Bluetooth: hci3: command tx timeout [ 572.728419][ T5630] Bluetooth: hci3: command tx timeout [ 574.807957][ T5630] Bluetooth: hci3: command tx timeout [ 609.398977][T20005] netlink: 'syz.0.2997': attribute type 9 has an invalid length. [ 609.464678][T20009] block nbd0: server does not support multiple connections per device. [ 609.502587][T20009] block nbd0: shutting down sockets [ 609.711509][T20031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 609.985932][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3004'. [ 610.243499][T20009] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 610.243536][T20009] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 610.363201][T20009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.363223][T20009] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 610.404494][T20060] 0: reclassify loop, rule prio 0, protocol 03 [ 610.419638][T20054] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3007'. [ 610.422990][T20063] netlink: 'syz.2.3007': attribute type 10 has an invalid length. [ 610.423006][T20063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3007'. [ 610.520395][T20063] dummy0: entered allmulticast mode [ 610.521014][T20063] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 610.570925][T17533] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 610.577184][T17533] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 610.585440][T17533] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 610.602498][T17533] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 610.603152][T17533] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 610.654648][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 610.655372][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 610.655684][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 610.656833][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 610.657594][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 610.896128][ T62] smbdirect: ib_dev[s`z1] removed [ 610.914463][ T5938] infiniband s`z1: ib_query_port failed (-19) [ 611.029069][T20081] ip6gre2: entered promiscuous mode [ 611.029091][T20081] ip6gre2: entered allmulticast mode [ 611.382749][ T152] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.495028][T20107] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 611.546517][ T152] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.562699][ T30] audit: type=1804 audit(1794139074.777:11): pid=20105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3016" name="/newroot/613/cgroup.controllers" dev="tmpfs" ino=3160 res=1 errno=0 [ 611.562744][ T30] audit: type=1800 audit(1794139074.777:12): pid=20105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3016" name="cgroup.controllers" dev="tmpfs" ino=3160 res=0 errno=-22 [ 611.723638][ T152] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.855802][ T152] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.915266][T20129] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3020'. [ 611.957233][T20037] rxe_eth0 speed is unknown, defaulting to 1000 [ 612.021095][T20124] ieee802154 phy0 wpan0: encryption failed: -22 [ 612.457702][ T51] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.457753][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.457783][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.512465][T20154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 612.514629][T10362] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.728072][T17533] Bluetooth: hci4: command tx timeout [ 612.816550][ T152] batman_adv: batadv0: Interface deactivated: gretap1 [ 612.816750][ T152] tipc: Resetting bearer [ 612.915206][T20175] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 612.915519][T20175] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 612.915836][T20175] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 612.916133][T20175] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 612.934317][T20175] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 613.295678][ T152] batman_adv: batadv0: Removing interface: gretap1 [ 613.329724][ T152] bond12 (unregistering): (slave gretap2): Releasing backup interface [ 613.360632][ T152] bond6 (unregistering): (slave geneve4): Releasing active interface [ 613.409672][ T152] tipc: Disabling bearer [ 613.427599][ T152] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 613.428675][ T152] bridge0 (unregistering): left allmulticast mode [ 613.471669][ T152] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 613.471693][ T152] bridge2 (unregistering): left promiscuous mode [ 613.493317][ T152] team0: Port device bridge3 removed [ 613.517057][ T152] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 613.517141][ T152] bridge5 (unregistering): left promiscuous mode [ 613.589892][ T152] bond11 (unregistering): (slave bridge11): Releasing active interface [ 613.606270][ T152] bond0 (unregistering): Released all slaves [ 613.615975][ T152] bond1 (unregistering): Released all slaves [ 613.626934][ T152] bond2 (unregistering): Released all slaves [ 613.640506][ T152] bond3 (unregistering): Released all slaves [ 613.676961][ T152] bond4 (unregistering): (slave veth7): Releasing active interface [ 613.686687][ T152] bond4 (unregistering): Released all slaves [ 613.715327][ T152] bond5 (unregistering): Released all slaves [ 613.739355][ T152] bond6 (unregistering): Released all slaves [ 613.778100][ T152] bond7 (unregistering): (slave veth9): Releasing active interface [ 613.780924][ T152] bond7 (unregistering): Released all slaves [ 613.819082][ T152] bond8 (unregistering): Released all slaves [ 613.834960][ T152] bond9 (unregistering): Released all slaves [ 613.849649][ T152] bond10 (unregistering): Released all slaves [ 613.883103][ T152] bond11 (unregistering): Released all slaves [ 613.894731][ T152] bond12 (unregistering): (slave bond13): Releasing backup interface [ 613.895293][ T152] bond12 (unregistering): Released all slaves [ 613.911387][ T152] bond13 (unregistering): Released all slaves [ 614.141458][ T152] ovs-dp0: left promiscuous mode [ 614.173669][T20208] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3033'. [ 614.189677][T20208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3033'. [ 614.310316][ T152] tipc: Disabling bearer [ 614.338448][ T152] tipc: Left network mode [ 614.517393][ T152] IPVS: stopping backup sync thread 11841 ... [ 614.807610][T17533] Bluetooth: hci4: command tx timeout [ 615.207636][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 615.215477][T20266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3043'. [ 615.215509][T20266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3043'. [ 615.223166][T20265] net_ratelimit: 61 callbacks suppressed [ 615.223271][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.223505][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.223686][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.231113][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.231311][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.231508][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.231935][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.232145][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.232326][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.236231][T20037] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.238662][T20037] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.239478][T20265] Dead loop on virtual device lo (net 1276), fix it urgently! [ 615.240794][T20037] bridge_slave_0: entered allmulticast mode [ 615.247735][T20037] bridge_slave_0: entered promiscuous mode [ 615.371516][T20037] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.371745][T20037] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.371898][T20037] bridge_slave_1: entered allmulticast mode [ 615.375822][T20037] bridge_slave_1: entered promiscuous mode [ 615.535988][T20037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.580377][T20037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.633293][T20283] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3050'. [ 615.845860][T20288] syzkaller0: entered promiscuous mode [ 615.845882][T20288] syzkaller0: entered allmulticast mode [ 615.901683][T20037] team0: Port device team_slave_0 added [ 615.950351][T20037] team0: Port device team_slave_1 added [ 616.191375][T20037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.191393][T20037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.191416][T20037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.296999][ T152] hsr_slave_0: left promiscuous mode [ 616.310392][ T152] hsr_slave_1: left promiscuous mode [ 616.373561][T20313] Cannot find del_set index 0 as target [ 616.544255][T20320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3056'. [ 616.599466][T20321] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3056'. [ 616.887783][T17533] Bluetooth: hci4: command tx timeout [ 617.122063][T20037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.122080][T20037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.122219][T20037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.216567][T20323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.216591][T20323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.230779][T20323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.230808][T20323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.284976][T20321] bond13: entered promiscuous mode [ 617.285035][T20321] bond13: entered allmulticast mode [ 617.285464][T20321] 8021q: adding VLAN 0 to HW filter on device bond13 [ 617.511180][T20037] hsr_slave_0: entered promiscuous mode [ 617.515371][T20037] hsr_slave_1: entered promiscuous mode [ 617.853673][ T152] IPVS: stop unused estimator thread 0... [ 618.024189][T20351] netlink: 'syz.2.3063': attribute type 3 has an invalid length. [ 618.024210][T20351] netlink: 'syz.2.3063': attribute type 1 has an invalid length. [ 618.024222][T20351] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3063'. [ 618.024235][T20351] NCSI netlink: No device for ifindex 0 [ 618.339032][T20037] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.380494][T20364] netlink: 'syz.4.3066': attribute type 1 has an invalid length. [ 618.380517][T20364] netlink: 'syz.4.3066': attribute type 1 has an invalid length. [ 618.532131][T20037] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.684800][T20037] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.841314][T20037] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.967560][T17533] Bluetooth: hci4: command tx timeout [ 619.283055][T20404] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3073'. [ 619.283110][T20404] netlink: 'syz.2.3073': attribute type 9 has an invalid length. [ 619.283124][T20404] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3073'. [ 619.283136][T20404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3073'. [ 619.427629][T20409] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3074'. [ 620.263779][T20431] bridge0: entered allmulticast mode [ 622.668902][T20494] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3079'. [ 622.761916][T20037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 622.788569][T20037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.789597][T20037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 622.801393][T20494] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3079'. [ 622.859039][T20037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.872229][T20494] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3079'. [ 622.919925][T20037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 622.964842][T20037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.965635][T20037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 623.009835][T20037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.097987][T20504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3081'. [ 623.103994][T20512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3081'. [ 623.333482][T20508] syzkaller1: entered promiscuous mode [ 623.333502][T20508] syzkaller1: entered allmulticast mode [ 623.442055][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3085'. [ 623.442075][T20538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3085'. [ 623.444726][T20538] netlink: 'syz.4.3085': attribute type 25 has an invalid length. [ 623.444742][T20538] netlink: 'syz.4.3085': attribute type 3 has an invalid length. [ 623.444753][T20538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3085'. [ 623.445757][T20037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.519884][T20037] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.539217][T20544] syzkaller1: entered promiscuous mode [ 623.539236][T20544] syzkaller1: entered allmulticast mode [ 623.570719][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.570819][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.601343][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.601453][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.673494][T20546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3086'. [ 623.673518][T20546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3086'. [ 624.023341][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.023485][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.023612][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.023729][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.067806][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.068008][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.068142][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.068262][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.068392][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.068513][T20565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.163832][T20570] 8021q: VLANs not supported on eql [ 624.173741][T20567] bond0: (slave bond_slave_1): Releasing backup interface [ 624.282094][T20578] netlink: 'syz.4.3091': attribute type 4 has an invalid length. [ 624.334159][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.347203][ T1317] net_ratelimit: 42 callbacks suppressed [ 624.347218][ T1317] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 624.347323][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.450382][T20594] openvswitch: netlink: IPv4 tunnel dst address is zero [ 624.907038][T20619] block nbd0: Unsupported socket: should be TCP or UNIX. [ 625.093164][T20626] netlink: 'syz.2.3103': attribute type 21 has an invalid length. [ 625.125057][T20631] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 625.126759][T20631] bond1 (unregistering): Released all slaves [ 625.177124][T20037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.406066][T20037] veth0_vlan: entered promiscuous mode [ 625.423105][T20037] veth1_vlan: entered promiscuous mode [ 625.510668][T20649] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 625.511232][T20645] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 625.518838][T20650] ip_tables: iptables: counters copy to user failed while replacing table [ 625.609898][T20037] veth0_macvtap: entered promiscuous mode [ 625.617054][T20643] netpci0: tun_chr_ioctl cmd 1074025678 [ 625.617071][T20643] netpci0: group set to 0 [ 625.662046][T20037] veth1_macvtap: entered promiscuous mode [ 625.762840][T20037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.795797][T20037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.858125][ T172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.868989][ T172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.869314][ T172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.869441][ T172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.227740][T10362] IPVS: starting estimator thread 0... [ 626.244164][T10362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.244183][T10362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.317666][T20688] IPVS: using max 28 ests per chain, 67200 per kthread [ 626.356148][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.356168][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.795643][T20713] ip_tables: iptables: counters copy to user failed while replacing table [ 627.196101][T20742] netlink: 'syz.2.3121': attribute type 1 has an invalid length. [ 627.841666][T20781] FAULT_INJECTION: forcing a failure. [ 627.841666][T20781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.841695][T20781] CPU: 0 UID: 0 PID: 20781 Comm: syz.0.3125 Not tainted syzkaller #0 PREEMPT(full) [ 627.841714][T20781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 627.841725][T20781] Call Trace: [ 627.841732][T20781] [ 627.841740][T20781] dump_stack_lvl+0xe8/0x150 [ 627.841776][T20781] should_fail_ex+0x3eb/0x540 [ 627.841912][T20781] _copy_from_user+0x2d/0xb0 [ 627.842002][T20781] ___sys_recvmsg+0x173/0x5a0 [ 627.842090][T20781] ? __pfx____sys_recvmsg+0x10/0x10 [ 627.842114][T20781] ? lock_acquire+0x115/0x350 [ 627.842148][T20781] ? __fget_files+0x2a/0x420 [ 627.842212][T20781] ? __fget_files+0x3a2/0x420 [ 627.842230][T20781] ? __fget_files+0x2a/0x420 [ 627.842251][T20781] ? fdget+0x1ac/0x250 [ 627.842273][T20781] do_recvmmsg+0x31a/0x800 [ 627.842300][T20781] ? __pfx_do_recvmmsg+0x10/0x10 [ 627.842332][T20781] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 627.842395][T20781] ? fdget+0x1ac/0x250 [ 627.842421][T20781] __x64_sys_recvmmsg+0x198/0x250 [ 627.842445][T20781] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 627.842478][T20781] do_syscall_64+0x166/0x520 [ 627.842528][T20781] ? trace_irq_disable+0x3b/0x140 [ 627.842564][T20781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.842584][T20781] ? clear_bhb_loop+0x70/0xc0 [ 627.842606][T20781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.842623][T20781] RIP: 0033:0x7f6e9d59fb19 [ 627.842640][T20781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.842663][T20781] RSP: 002b:00007f6e9e553028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 627.842683][T20781] RAX: ffffffffffffffda RBX: 00007f6e9d825fa0 RCX: 00007f6e9d59fb19 [ 627.842695][T20781] RDX: 0000000000000001 RSI: 0000200000004b80 RDI: 0000000000000003 [ 627.842707][T20781] RBP: 00007f6e9e553090 R08: 0000000000000000 R09: 0000000000000000 [ 627.842718][T20781] R10: 0000000000012001 R11: 0000000000000246 R12: 0000000000000001 [ 627.842728][T20781] R13: 00007f6e9d826038 R14: 00007f6e9d825fa0 R15: 00007ffcf2b90858 [ 627.842760][T20781] [ 627.968423][T20777] __nla_validate_parse: 3 callbacks suppressed [ 627.968441][T20777] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3124'. [ 628.350870][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 628.361423][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 628.369904][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 628.382695][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 628.383331][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 628.717284][T20808] ip_tables: iptables: counters copy to user failed while replacing table [ 628.733036][T20813] netlink: 'syz.1.3132': attribute type 4 has an invalid length. [ 628.733054][T20813] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3132'. [ 628.912169][T20825] erspan1: entered promiscuous mode [ 629.261768][T20843] tipc: Started in network mode [ 629.261796][T20843] tipc: Node identity ded4d32700a3, cluster identity 4711 [ 629.263907][T20843] tipc: Enabled bearer , priority 10 [ 629.290813][T20852] FAULT_INJECTION: forcing a failure. [ 629.290813][T20852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.290838][T20852] CPU: 0 UID: 0 PID: 20852 Comm: syz.0.3137 Not tainted syzkaller #0 PREEMPT(full) [ 629.290857][T20852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 629.290868][T20852] Call Trace: [ 629.290875][T20852] [ 629.290882][T20852] dump_stack_lvl+0xe8/0x150 [ 629.290915][T20852] should_fail_ex+0x3eb/0x540 [ 629.290941][T20852] _copy_to_user+0x31/0xb0 [ 629.290966][T20852] simple_read_from_buffer+0xe1/0x170 [ 629.291077][T20852] proc_fail_nth_read+0x1bb/0x230 [ 629.291149][T20852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.291171][T20852] ? rw_verify_area+0x24a/0x4c0 [ 629.291225][T20852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.291242][T20852] vfs_read+0x213/0xa80 [ 629.291271][T20852] ? __pfx___mutex_lock+0x10/0x10 [ 629.291295][T20852] ? __pfx_vfs_read+0x10/0x10 [ 629.291319][T20852] ? __fget_files+0x2a/0x420 [ 629.291339][T20852] ? __fget_files+0x3a2/0x420 [ 629.291359][T20852] ? __fget_files+0x2a/0x420 [ 629.291383][T20852] ? fdget+0x1ac/0x250 [ 629.291411][T20852] ksys_read+0x150/0x270 [ 629.291437][T20852] ? __pfx_ksys_read+0x10/0x10 [ 629.291472][T20852] do_syscall_64+0x166/0x520 [ 629.291510][T20852] ? trace_irq_disable+0x3b/0x140 [ 629.291538][T20852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.291556][T20852] ? clear_bhb_loop+0x70/0xc0 [ 629.291578][T20852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.291594][T20852] RIP: 0033:0x7f6e9d56034e [ 629.291611][T20852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 629.291624][T20852] RSP: 002b:00007f6e9e552fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.291642][T20852] RAX: ffffffffffffffda RBX: 00007f6e9e5536c0 RCX: 00007f6e9d56034e [ 629.291654][T20852] RDX: 000000000000000f RSI: 00007f6e9e5530a0 RDI: 0000000000000004 [ 629.291665][T20852] RBP: 00007f6e9e553090 R08: 0000000000000000 R09: 0000000000000000 [ 629.291676][T20852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.291685][T20852] R13: 00007f6e9d826038 R14: 00007f6e9d825fa0 R15: 00007ffcf2b90858 [ 629.291717][T20852] [ 629.819880][T20798] rxe_eth0 speed is unknown, defaulting to 1000 [ 629.922580][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'. [ 630.056017][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'. [ 630.105102][T20891] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3145'. [ 630.186611][T20891] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 630.234050][T20891] bond1 (unregistering): Released all slaves [ 630.294480][T20900] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3148'. [ 630.378735][ T5722] tipc: Node number set to 3732394791 [ 630.489173][T17533] Bluetooth: hci0: command tx timeout [ 630.741972][T20924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 630.790431][T20910] Bluetooth: MGMT ver 1.23 [ 630.805252][T20910] IPVS: stopping master sync thread 6076 ... [ 631.106804][T20942] xt_hashlimit: size too large, truncated to 1048576 [ 631.225590][T20948] netlink: 'syz.1.3160': attribute type 21 has an invalid length. [ 631.341263][T20952] netlink: 'syz.1.3160': attribute type 21 has an invalid length. [ 631.372100][T20957] xt_hashlimit: size too large, truncated to 1048576 [ 631.424409][T20798] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.427150][T20798] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.427313][T20798] bridge_slave_0: entered allmulticast mode [ 631.454652][T20798] bridge_slave_0: entered promiscuous mode [ 631.475761][T20798] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.475867][T20798] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.475992][T20798] bridge_slave_1: entered allmulticast mode [ 631.500209][T20798] bridge_slave_1: entered promiscuous mode [ 631.560287][T20798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.563054][T20798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.612736][T20798] team0: Port device team_slave_0 added [ 631.615599][T20798] team0: Port device team_slave_1 added [ 631.662392][T20798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.662408][T20798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.662429][T20798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.664560][T20798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.664573][T20798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.664594][T20798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.695369][T20970] block nbd0: server does not support multiple connections per device. [ 631.696678][T20970] block nbd0: shutting down sockets [ 631.954865][T20798] hsr_slave_0: entered promiscuous mode [ 631.964783][T20798] hsr_slave_1: entered promiscuous mode [ 631.965512][T20798] debugfs: 'hsr0' already exists in 'hsr' [ 631.965526][T20798] Cannot create hsr debugfs directory [ 632.508923][T20798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.508953][T20798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.568850][ T5630] Bluetooth: hci0: command tx timeout [ 632.742123][T20798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.742163][T20798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.775422][T21014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3177'. [ 632.808307][T17533] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 632.901404][T20798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.901434][T20798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.920203][T21026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3181'. [ 632.920262][T21026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3181'. [ 633.023724][T20798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.023755][T20798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.299272][T21047] __nla_validate_parse: 1 callbacks suppressed [ 633.299291][T21047] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3185'. [ 633.346649][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3184'. [ 633.438871][T20798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 633.443268][T20798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 633.443908][T20798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 633.470262][T20798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 633.471618][T20798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 633.476791][T20798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 633.489059][T20798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 633.511023][T20798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 633.654361][T20798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.688252][T20798] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.712937][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.713089][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.715186][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.715284][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.264633][T20798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.581894][T20798] veth0_vlan: entered promiscuous mode [ 634.603984][T20798] veth1_vlan: entered promiscuous mode [ 634.647718][T17533] Bluetooth: hci0: command 0x040f tx timeout [ 634.667152][T20798] veth0_macvtap: entered promiscuous mode [ 634.685763][T20798] veth1_macvtap: entered promiscuous mode [ 634.712652][T20798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.739241][T20798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.778161][ T1197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.779130][ T1197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.779165][ T1197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.779195][ T1197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.955125][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.955146][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.036797][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.036817][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.727560][T17533] Bluetooth: hci0: command 0x040f tx timeout [ 638.811302][T17533] Bluetooth: hci0: command 0x040f tx timeout [ 685.772611][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.784896][ T1317] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 685.784951][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 687.093190][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 687.100003][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 687.114265][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 687.127203][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 687.136793][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 687.214346][T22860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3194'. [ 687.214402][T22860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3194'. [ 687.593030][T22864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3193'. [ 687.634729][ T5629] syz_tun (unregistering): left allmulticast mode [ 687.826877][ T172] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.999104][ T172] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.110171][T22875] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 688.161077][ T172] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.295617][ T172] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.310961][T22855] rxe_eth0 speed is unknown, defaulting to 1000 [ 688.365945][T22909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3202'. [ 688.384569][T22909] vlan2: entered allmulticast mode [ 688.384615][T22909] dummy0: entered allmulticast mode [ 688.608507][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.662508][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.719179][ T51] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.719231][ T51] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.855100][ T172] dvmrp6: left allmulticast mode [ 688.870888][ T172] tipc: Resetting bearer [ 688.972337][ T172] batman_adv: batadv0: Removing interface: ip6gretap1 [ 688.994988][T22934] FAULT_INJECTION: forcing a failure. [ 688.994988][T22934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.995015][T22934] CPU: 1 UID: 0 PID: 22934 Comm: syz.1.3209 Not tainted syzkaller #0 PREEMPT(full) [ 688.995034][T22934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 688.995043][T22934] Call Trace: [ 688.995051][T22934] [ 688.995059][T22934] dump_stack_lvl+0xe8/0x150 [ 688.995096][T22934] should_fail_ex+0x3eb/0x540 [ 688.995124][T22934] _copy_to_user+0x31/0xb0 [ 688.995150][T22934] simple_read_from_buffer+0xe1/0x170 [ 688.995189][T22934] proc_fail_nth_read+0x1bb/0x230 [ 688.995212][T22934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 688.995234][T22934] ? rw_verify_area+0x24a/0x4c0 [ 688.995260][T22934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 688.995277][T22934] vfs_read+0x213/0xa80 [ 688.995305][T22934] ? __pfx___mutex_lock+0x10/0x10 [ 688.995332][T22934] ? __pfx_vfs_read+0x10/0x10 [ 688.995357][T22934] ? __fget_files+0x2a/0x420 [ 688.995376][T22934] ? __fget_files+0x3a2/0x420 [ 688.995395][T22934] ? __fget_files+0x2a/0x420 [ 688.995420][T22934] ? fdget+0x1ac/0x250 [ 688.995448][T22934] ksys_read+0x150/0x270 [ 688.995474][T22934] ? __pfx_ksys_read+0x10/0x10 [ 688.995509][T22934] do_syscall_64+0x166/0x520 [ 688.995530][T22934] ? trace_irq_disable+0x3b/0x140 [ 688.995554][T22934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.995572][T22934] ? clear_bhb_loop+0x70/0xc0 [ 688.995593][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.995610][T22934] RIP: 0033:0x7fe0b8f6034e [ 688.995627][T22934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 688.995642][T22934] RSP: 002b:00007fe0b9da8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 688.995660][T22934] RAX: ffffffffffffffda RBX: 00007fe0b9da96c0 RCX: 00007fe0b8f6034e [ 688.995672][T22934] RDX: 000000000000000f RSI: 00007fe0b9da90a0 RDI: 0000000000000004 [ 688.995682][T22934] RBP: 00007fe0b9da9090 R08: 0000000000000000 R09: 0000000000000000 [ 688.995693][T22934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.995703][T22934] R13: 00007fe0b9226038 R14: 00007fe0b9225fa0 R15: 00007ffdc4c42eb8 [ 688.995734][T22934] [ 689.146575][T10362] IPVS: starting estimator thread 0... [ 689.150167][T22938] netlink: 'syz.1.3210': attribute type 1 has an invalid length. [ 689.223146][ T5630] Bluetooth: hci1: command tx timeout [ 689.257786][T22939] IPVS: using max 29 ests per chain, 69600 per kthread [ 689.341403][ T172] tipc: Disabling bearer [ 689.341835][ T172] smc: removing net device syzkaller0 with user defined pnetid SYZ0 [ 689.379316][ T172] bond7 (unregistering): (slave bridge0): Releasing backup interface [ 689.379339][ T172] bridge0 (unregistering): left promiscuous mode [ 689.406432][ T172] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 689.441731][ T172] bond5 (unregistering): (slave macvlan2): Releasing active interface [ 689.472946][ T172] bond0 (unregistering): Released all slaves [ 689.485695][ T172] bond1 (unregistering): Released all slaves [ 689.503895][ T172] bond2 (unregistering): Released all slaves [ 689.524819][ T172] bond3 (unregistering): Released all slaves [ 689.544368][ T172] bond4 (unregistering): Released all slaves [ 689.559219][ T172] bond5 (unregistering): Released all slaves [ 689.574519][ T172] bond6 (unregistering): Released all slaves [ 689.626978][ T172] bond7 (unregistering): Released all slaves [ 689.643161][ T172] bond8 (unregistering): Released all slaves [ 689.662535][ T172] bond9 (unregistering): Released all slaves [ 689.689240][ T172] bond10 (unregistering): Released all slaves [ 689.706836][ T172] bond11 (unregistering): Released all slaves [ 689.738910][ T172] bond12 (unregistering): Released all slaves [ 689.753867][ T172] bond13 (unregistering): Released all slaves [ 689.782571][T22924] veth0_to_bond: entered allmulticast mode [ 690.034852][T22940] bond1: (slave geneve2): making interface the new active one [ 690.035600][T22940] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 690.045284][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 690.045311][T22952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3214'. [ 690.178534][ T51] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 690.179776][ T51] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 690.179819][ T51] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 690.179851][ T51] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 690.243354][ T172] tipc: Left network mode [ 690.738954][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 690.738977][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 690.792829][T22982] skbuff: bad partial csum: csum=65535/2 headroom=2 headlen=65543 [ 691.152942][T22976] syzkaller0: entered promiscuous mode [ 691.152965][T22976] syzkaller0: entered allmulticast mode [ 691.291786][T23004] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 691.291800][T23004] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3222'. [ 691.297945][ T5630] Bluetooth: hci1: command tx timeout [ 692.197998][ T30] audit: type=1800 audit(1794139155.407:13): pid=23014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3226" name="blkio.bfq.time_recursive" dev="tmpfs" ino=335 res=0 errno=-22 [ 693.115220][T23024] syzkaller0: entered promiscuous mode [ 693.115241][T23024] syzkaller0: entered allmulticast mode [ 693.342740][T23054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'. [ 693.369168][ T5630] Bluetooth: hci1: command tx timeout [ 693.425171][T23063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3231'. [ 694.200192][ T172] hsr_slave_0: left promiscuous mode [ 694.201021][ T172] hsr_slave_1: left promiscuous mode [ 694.461975][T23096] xt_NETMAP: bad MAP_IPS. [ 694.847276][T22855] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.851725][T22855] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.851847][T22855] bridge_slave_0: entered allmulticast mode [ 694.853473][T22855] bridge_slave_0: entered promiscuous mode [ 694.860909][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 695.172490][T22855] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.172600][T22855] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.172737][T22855] bridge_slave_1: entered allmulticast mode [ 695.181260][T22855] bridge_slave_1: entered promiscuous mode [ 695.226103][T23134] netlink: 480 bytes leftover after parsing attributes in process `syz.0.3242'. [ 695.226170][T23134] netlink: 480 bytes leftover after parsing attributes in process `syz.0.3242'. [ 695.301637][T23134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3242'. [ 695.303791][T23136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3242'. [ 695.340532][T22855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.351408][T22855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.363508][T23134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'. [ 695.409637][T23142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.450490][ T5630] Bluetooth: hci1: command tx timeout [ 695.462202][T22855] team0: Port device team_slave_0 added [ 695.482821][T22855] team0: Port device team_slave_1 added [ 695.617297][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 695.617321][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3245'. [ 695.624754][T22855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.624768][T22855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.624790][T22855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.626858][T22855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.626870][T22855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.626891][T22855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.677093][T22855] hsr_slave_0: entered promiscuous mode [ 695.684119][T22855] hsr_slave_1: entered promiscuous mode [ 695.685981][T22855] debugfs: 'hsr0' already exists in 'hsr' [ 695.685996][T22855] Cannot create hsr debugfs directory [ 695.860367][ T172] IPVS: stop unused estimator thread 0... [ 695.973638][T23163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 696.385079][T23176] netlink: set zone limit has 8 unknown bytes [ 696.412263][T23182] netlink: 'syz.1.3253': attribute type 1 has an invalid length. [ 696.494343][T23182] bond2: entered promiscuous mode [ 696.494769][T23182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.543051][T22855] netdevsim netdevsim2 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.647342][T23184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.661532][T23184] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 696.661554][T23184] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 696.732078][T23184] bond2: (slave wireguard0): making interface the new active one [ 696.732101][T23184] wireguard0: entered promiscuous mode [ 696.733689][T23184] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 696.781698][T22855] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.883275][T22855] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.968066][T23203] nbd: socks must be embedded in a SOCK_ITEM attr [ 697.040098][T22855] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.043629][T23203] block nbd0: shutting down sockets [ 697.051484][T23207] ip6_tables: ip6tables: counters copy to user failed while replacing table ** replaying previous printk message ** [ 697.051484][T23207] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 697.068917][T22855] [ 697.083665][T22855] ====================================================== [ 697.090700][T22855] WARNING: possible circular locking dependency detected [ 697.097801][T22855] syzkaller #0 Not tainted [ 697.102199][T22855] ------------------------------------------------------ [ 697.109196][T22855] syz-executor/22855 is trying to acquire lock: [ 697.115417][T22855] ffff88801d28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 697.125350][T22855] [ 697.125350][T22855] but task is already holding lock: [ 697.132699][T22855] ffffffff90c20c20 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 697.141457][T22855] [ 697.141457][T22855] which lock already depends on the new lock. [ 697.141457][T22855] [ 697.151883][T22855] [ 697.151883][T22855] the existing dependency chain (in reverse order) is: [ 697.160915][T22855] [ 697.160915][T22855] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 697.168192][T22855] __mutex_lock+0x197/0x15a0 [ 697.173294][T22855] get_device_parent+0x16f/0x3a0 [ 697.178736][T22855] device_add+0x2d4/0xb80 [ 697.183569][T22855] device_create+0x269/0x300 [ 697.188663][T22855] msr_device_create+0x33/0x50 [ 697.193955][T22855] cpuhp_invoke_callback+0x434/0x810 [ 697.199761][T22855] cpuhp_thread_fun+0x362/0x780 [ 697.205123][T22855] smpboot_thread_fn+0x5f8/0xb30 [ 697.210563][T22855] kthread+0x38b/0x480 [ 697.215140][T22855] ret_from_fork+0x514/0xb70 [ 697.220265][T22855] ret_from_fork_asm+0x1a/0x30 [ 697.225532][T22855] [ 697.225532][T22855] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 697.233160][T22855] cpuhp_thread_fun+0x127/0x780 [ 697.238540][T22855] smpboot_thread_fn+0x5f8/0xb30 [ 697.244029][T22855] kthread+0x38b/0x480 [ 697.248616][T22855] ret_from_fork+0x514/0xb70 [ 697.253718][T22855] ret_from_fork_asm+0x1a/0x30 [ 697.258994][T22855] [ 697.258994][T22855] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 697.266705][T22855] cpus_read_lock+0x3d/0x160 [ 697.271806][T22855] static_key_slow_inc+0x12/0x30 [ 697.277269][T22855] tcp_md5_do_add+0x1d4/0x390 [ 697.282581][T22855] tcp_v6_parse_md5_keys+0x550/0x670 [ 697.288437][T22855] do_tcp_setsockopt+0x1250/0x1f80 [ 697.294099][T22855] do_sock_setsockopt+0x17c/0x1b0 [ 697.299628][T22855] __x64_sys_setsockopt+0x13d/0x1b0 [ 697.305334][T22855] do_syscall_64+0x166/0x520 [ 697.310431][T22855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.316828][T22855] [ 697.316828][T22855] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 697.324540][T22855] lock_sock_nested+0x41/0x100 [ 697.329867][T22855] inet_shutdown+0x6a/0x390 [ 697.334944][T22855] nbd_mark_nsock_dead+0x2cb/0x550 [ 697.340657][T22855] sock_shutdown+0x15e/0x260 [ 697.345751][T22855] nbd_clear_sock+0x24/0x170 [ 697.350855][T22855] nbd_config_put+0x477/0x7e0 [ 697.356034][T22855] nbd_genl_connect+0x19b8/0x1cd0 [ 697.361590][T22855] genl_family_rcv_msg_doit+0x233/0x340 [ 697.367729][T22855] genl_rcv_msg+0x614/0x7a0 [ 697.372738][T22855] netlink_rcv_skb+0x226/0x4a0 [ 697.378014][T22855] genl_rcv+0x28/0x40 [ 697.382503][T22855] netlink_unicast+0x8ef/0xa80 [ 697.387771][T22855] netlink_sendmsg+0x7f0/0xb20 [ 697.393036][T22855] sock_sendmsg_nosec+0x14e/0x190 [ 697.398569][T22855] ____sys_sendmsg+0x54e/0x850 [ 697.403836][T22855] ___sys_sendmsg+0x2a5/0x360 [ 697.409020][T22855] __x64_sys_sendmsg+0x1b1/0x290 [ 697.414460][T22855] do_syscall_64+0x166/0x520 [ 697.419554][T22855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.425953][T22855] [ 697.425953][T22855] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 697.433576][T22855] __mutex_lock+0x197/0x15a0 [ 697.438671][T22855] nbd_queue_rq+0x373/0xff0 [ 697.443677][T22855] blk_mq_dispatch_rq_list+0x499/0x1990 [ 697.449826][T22855] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 697.456694][T22855] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 697.463182][T22855] blk_mq_run_work_fn+0x167/0x2f0 [ 697.468710][T22855] process_scheduled_works+0xc3d/0x1630 [ 697.474765][T22855] worker_thread+0xa47/0xfb0 [ 697.479864][T22855] kthread+0x38b/0x480 [ 697.484438][T22855] ret_from_fork+0x514/0xb70 [ 697.489531][T22855] ret_from_fork_asm+0x1a/0x30 [ 697.494825][T22855] [ 697.494825][T22855] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 697.502013][T22855] __mutex_lock+0x197/0x15a0 [ 697.507112][T22855] nbd_queue_rq+0xc1/0xff0 [ 697.512041][T22855] blk_mq_dispatch_rq_list+0x499/0x1990 [ 697.518095][T22855] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 697.524926][T22855] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 697.531409][T22855] blk_mq_run_work_fn+0x167/0x2f0 [ 697.536936][T22855] process_scheduled_works+0xc3d/0x1630 [ 697.542986][T22855] worker_thread+0xa47/0xfb0 [ 697.548084][T22855] kthread+0x38b/0x480 [ 697.552655][T22855] ret_from_fork+0x514/0xb70 [ 697.557748][T22855] ret_from_fork_asm+0x1a/0x30 [ 697.563013][T22855] [ 697.563013][T22855] -> #5 (set->srcu){.+.+}-{0:0}: [ 697.570114][T22855] __synchronize_srcu+0xca/0x2f0 [ 697.575590][T22855] elevator_switch+0x1e8/0x7b0 [ 697.580878][T22855] elevator_change+0x2fa/0x480 [ 697.586152][T22855] elevator_set_default+0x375/0x440 [ 697.591859][T22855] blk_register_queue+0x404/0x4f0 [ 697.597447][T22855] __add_disk+0x6b8/0xdb0 [ 697.602280][T22855] add_disk_fwnode+0x100/0x3a0 [ 697.607550][T22855] nbd_dev_add+0x733/0xb60 [ 697.612469][T22855] nbd_init+0x168/0x1f0 [ 697.617208][T22855] do_one_initcall+0x250/0x870 [ 697.622474][T22855] do_initcall_level+0x10a/0x1a0 [ 697.627984][T22855] do_initcalls+0x59/0xa0 [ 697.632817][T22855] kernel_init_freeable+0x29d/0x3e0 [ 697.638525][T22855] kernel_init+0x22/0x1d0 [ 697.643355][T22855] ret_from_fork+0x514/0xb70 [ 697.648449][T22855] ret_from_fork_asm+0x1a/0x30 [ 697.653717][T22855] [ 697.653717][T22855] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 697.661514][T22855] __mutex_lock+0x197/0x15a0 [ 697.666609][T22855] elevator_change+0x1af/0x480 [ 697.671878][T22855] elevator_set_none+0xb5/0x140 [ 697.677235][T22855] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 697.683545][T22855] nbd_start_device+0x189/0xb30 [ 697.688901][T22855] nbd_genl_connect+0x167d/0x1cd0 [ 697.694428][T22855] genl_family_rcv_msg_doit+0x233/0x340 [ 697.700480][T22855] genl_rcv_msg+0x614/0x7a0 [ 697.705486][T22855] netlink_rcv_skb+0x226/0x4a0 [ 697.710758][T22855] genl_rcv+0x28/0x40 [ 697.715254][T22855] netlink_unicast+0x8ef/0xa80 [ 697.720532][T22855] netlink_sendmsg+0x7f0/0xb20 [ 697.725796][T22855] sock_sendmsg_nosec+0x14e/0x190 [ 697.731333][T22855] ____sys_sendmsg+0x54e/0x850 [ 697.736614][T22855] ___sys_sendmsg+0x2a5/0x360 [ 697.741801][T22855] __x64_sys_sendmsg+0x1b1/0x290 [ 697.747249][T22855] do_syscall_64+0x166/0x520 [ 697.752351][T22855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.758751][T22855] [ 697.758751][T22855] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 697.767366][T22855] blk_alloc_queue+0x544/0x690 [ 697.772648][T22855] __blk_mq_alloc_disk+0x194/0x390 [ 697.778263][T22855] nbd_dev_add+0x494/0xb60 [ 697.783187][T22855] nbd_init+0x168/0x1f0 [ 697.787853][T22855] do_one_initcall+0x250/0x870 [ 697.793126][T22855] do_initcall_level+0x10a/0x1a0 [ 697.798570][T22855] do_initcalls+0x59/0xa0 [ 697.803403][T22855] kernel_init_freeable+0x29d/0x3e0 [ 697.809104][T22855] kernel_init+0x22/0x1d0 [ 697.813941][T22855] ret_from_fork+0x514/0xb70 [ 697.819034][T22855] ret_from_fork_asm+0x1a/0x30 [ 697.824301][T22855] [ 697.824301][T22855] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 697.831500][T22855] fs_reclaim_acquire+0x71/0x100 [ 697.836945][T22855] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 697.843175][T22855] alloc_inode+0xb8/0x1b0 [ 697.848095][T22855] iget_locked+0x12c/0x690 [ 697.853024][T22855] kernfs_get_inode+0x4f/0x770 [ 697.858291][T22855] kernfs_get_tree+0x5dc/0x9a0 [ 697.863598][T22855] vfs_get_tree+0x92/0x2a0 [ 697.868551][T22855] do_new_mount+0x325/0xb00 [ 697.873593][T22855] __se_sys_mount+0x31d/0x420 [ 697.878773][T22855] do_syscall_64+0x166/0x520 [ 697.883871][T22855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.890270][T22855] [ 697.890270][T22855] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 697.898242][T22855] down_write+0x91/0x200 [ 697.902998][T22855] kernfs_remove_by_name_ns+0x4e/0x140 [ 697.908960][T22855] device_links_driver_bound+0x4ab/0x1440 [ 697.915241][T22855] driver_bound+0xd8/0x2e0 [ 697.920210][T22855] really_probe+0x774/0xae0 [ 697.925217][T22855] __driver_probe_device+0x1e8/0x360 [ 697.931003][T22855] driver_probe_device+0x4f/0x240 [ 697.936532][T22855] __device_attach_driver+0x270/0x410 [ 697.942406][T22855] bus_for_each_drv+0x258/0x2f0 [ 697.947763][T22855] __device_attach+0x2bd/0x430 [ 697.953037][T22855] device_initial_probe+0x9c/0x100 [ 697.958649][T22855] __bus_probe_device+0x126/0x220 [ 697.964179][T22855] device_add+0x7d7/0xb80 [ 697.969026][T22855] faux_device_create_with_groups+0x1a5/0x2b0 [ 697.975649][T22855] regulator_dummy_init+0x19/0x40 [ 697.981241][T22855] regulator_init+0xca/0x110 [ 697.986344][T22855] do_one_initcall+0x250/0x870 [ 697.991616][T22855] do_initcall_level+0x10a/0x1a0 [ 697.997061][T22855] do_initcalls+0x59/0xa0 [ 698.001891][T22855] kernel_init_freeable+0x29d/0x3e0 [ 698.007592][T22855] kernel_init+0x22/0x1d0 [ 698.012422][T22855] ret_from_fork+0x514/0xb70 [ 698.017516][T22855] ret_from_fork_asm+0x1a/0x30 [ 698.022782][T22855] [ 698.022782][T22855] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 698.031371][T22855] __lock_acquire+0x164c/0x2de0 [ 698.036728][T22855] lock_acquire+0x115/0x350 [ 698.041734][T22855] down_read+0x45/0x320 [ 698.046398][T22855] kernfs_remove+0x35/0x80 [ 698.051320][T22855] __kobject_del+0xe0/0x310 [ 698.056430][T22855] kobject_del+0x45/0x60 [ 698.061172][T22855] cleanup_glue_dir+0x1a3/0x220 [ 698.066526][T22855] device_del+0x77d/0x8f0 [ 698.071356][T22855] unregister_netdevice_many_notify+0x181a/0x1d80 [ 698.078360][T22855] unregister_netdevice_queue+0x2f5/0x340 [ 698.084584][T22855] nsim_destroy+0x275/0x800 [ 698.089650][T22855] __nsim_dev_port_del+0x14e/0x200 [ 698.095266][T22855] nsim_dev_reload_destroy+0x2e6/0x4e0 [ 698.101228][T22855] nsim_drv_remove+0x58/0x170 [ 698.106416][T22855] device_release_driver_internal+0x42b/0x7d0 [ 698.112986][T22855] bus_remove_device+0x444/0x560 [ 698.118432][T22855] device_del+0x524/0x8f0 [ 698.123263][T22855] device_unregister+0x21/0xf0 [ 698.128528][T22855] del_device_store+0x2b5/0x370 [ 698.133946][T22855] kernfs_fop_write_iter+0x3a4/0x540 [ 698.139736][T22855] vfs_write+0x612/0xba0 [ 698.144488][T22855] ksys_write+0x150/0x270 [ 698.149322][T22855] do_syscall_64+0x166/0x520 [ 698.154421][T22855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.160817][T22855] [ 698.160817][T22855] other info that might help us debug this: [ 698.160817][T22855] [ 698.171023][T22855] Chain exists of: [ 698.171023][T22855] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 698.171023][T22855] [ 698.184435][T22855] Possible unsafe locking scenario: [ 698.184435][T22855] [ 698.191903][T22855] CPU0 CPU1 [ 698.197250][T22855] ---- ---- [ 698.202631][T22855] lock(gdp_mutex); [ 698.206512][T22855] lock(cpuhp_state-up); [ 698.213341][T22855] lock(gdp_mutex); [ 698.219739][T22855] rlock(&root->kernfs_supers_rwsem); [ 698.225179][T22855] [ 698.225179][T22855] *** DEADLOCK *** [ 698.225179][T22855] [ 698.233299][T22855] locks held by syz-executor/22855: 8, last CPU#1: [ 698.239863][T22855] #0: ffff88807fd82478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 698.248730][T22855] #1: ffff88807b2c1080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 698.258454][T22855] #2: ffff88802adbe788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 698.268446][T22855] #3: ffffffff90eec780 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 698.278710][T22855] #4: ffff88805590c128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0 [ 698.289225][T22855] #5: ffff88805590a258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 698.299219][T22855] #6: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 698.308170][T22855] #7: ffffffff90c20c20 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 698.317287][T22855] [ 698.317287][T22855] stack backtrace: [ 698.323158][T22855] CPU: 1 UID: 0 PID: 22855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 698.332681][T22855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 698.342718][T22855] Call Trace: [ 698.345990][T22855] [ 698.348907][T22855] dump_stack_lvl+0xe8/0x150 [ 698.353490][T22855] print_circular_bug+0x2e2/0x300 [ 698.358506][T22855] check_noncircular+0x12f/0x150 [ 698.363432][T22855] __lock_acquire+0x164c/0x2de0 [ 698.368279][T22855] lock_acquire+0x115/0x350 [ 698.372771][T22855] ? kernfs_remove+0x35/0x80 [ 698.377350][T22855] down_read+0x45/0x320 [ 698.381499][T22855] ? kernfs_remove+0x35/0x80 [ 698.386074][T22855] kernfs_remove+0x35/0x80 [ 698.390478][T22855] __kobject_del+0xe0/0x310 [ 698.394964][T22855] kobject_del+0x45/0x60 [ 698.399199][T22855] cleanup_glue_dir+0x1a3/0x220 [ 698.404041][T22855] device_del+0x77d/0x8f0 [ 698.408357][T22855] ? __pfx_device_del+0x10/0x10 [ 698.413193][T22855] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 698.419347][T22855] ? netdev_unregister_kobject+0x347/0x450 [ 698.425217][T22855] unregister_netdevice_many_notify+0x181a/0x1d80 [ 698.431625][T22855] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 698.438376][T22855] ? __mutex_lock+0x305/0x15a0 [ 698.443126][T22855] ? lock_acquire+0x115/0x350 [ 698.447788][T22855] ? __kfree_rcu_sheaf+0x21/0x690 [ 698.452805][T22855] unregister_netdevice_queue+0x2f5/0x340 [ 698.458511][T22855] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 698.464737][T22855] ? mutex_destroy+0x39/0xf0 [ 698.469333][T22855] nsim_destroy+0x275/0x800 [ 698.473828][T22855] __nsim_dev_port_del+0x14e/0x200 [ 698.478920][T22855] nsim_dev_reload_destroy+0x2e6/0x4e0 [ 698.484362][T22855] ? __pfx_nsim_bus_remove+0x10/0x10 [ 698.489633][T22855] nsim_drv_remove+0x58/0x170 [ 698.494296][T22855] device_release_driver_internal+0x42b/0x7d0 [ 698.500350][T22855] bus_remove_device+0x444/0x560 [ 698.505280][T22855] ? __pfx_bus_remove_device+0x10/0x10 [ 698.510731][T22855] ? kernfs_remove_by_name_ns+0x101/0x140 [ 698.516446][T22855] device_del+0x524/0x8f0 [ 698.520763][T22855] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 698.526638][T22855] ? __pfx_device_del+0x10/0x10 [ 698.531473][T22855] ? lock_acquire+0x115/0x350 [ 698.536141][T22855] device_unregister+0x21/0xf0 [ 698.540888][T22855] del_device_store+0x2b5/0x370 [ 698.545726][T22855] ? __pfx_del_device_store+0x10/0x10 [ 698.551093][T22855] ? sysfs_file_kobj+0x1e4/0x230 [ 698.556040][T22855] ? sysfs_kf_write+0x166/0x260 [ 698.560879][T22855] ? __pfx_sysfs_kf_write+0x10/0x10 [ 698.566065][T22855] kernfs_fop_write_iter+0x3a4/0x540 [ 698.571343][T22855] vfs_write+0x612/0xba0 [ 698.575581][T22855] ? __pfx_vfs_write+0x10/0x10 [ 698.580334][T22855] ? do_sys_openat2+0x18d/0x200 [ 698.585171][T22855] ? kmem_cache_free+0x182/0x650 [ 698.590095][T22855] ? fdget+0x16b/0x250 [ 698.594152][T22855] ksys_write+0x150/0x270 [ 698.598468][T22855] ? __pfx_ksys_write+0x10/0x10 [ 698.603311][T22855] do_syscall_64+0x166/0x520 [ 698.607889][T22855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.613941][T22855] ? clear_bhb_loop+0x70/0xc0 [ 698.618600][T22855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.624476][T22855] RIP: 0033:0x7f19d756034e [ 698.628874][T22855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 698.648464][T22855] RSP: 002b:00007ffd80f17ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 698.656860][T22855] RAX: ffffffffffffffda RBX: 00005555614da500 RCX: 00007f19d756034e [ 698.664815][T22855] RDX: 0000000000000001 RSI: 00007ffd80f17f80 RDI: 0000000000000005 [ 698.672772][T22855] RBP: 00007f19d7638447 R08: 0000000000000000 R09: 0000000000000000 [ 698.680725][T22855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.688682][T22855] R13: 00007ffd80f17f80 R14: 00007ffd80f187c0 R15: 0000000000000003 [ 698.696642][T22855] [ 698.890822][T22855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 698.899548][T22855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.901602][T22855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 698.920124][T22855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.921775][T22855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 698.940382][T22855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.942149][T22855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 698.956779][T22855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.107234][T22855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.125685][T22855] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.136202][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.136261][ T8648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.141904][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.141967][ T8648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.473627][T22855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.512106][T22855] veth0_vlan: entered promiscuous mode [ 699.524862][T22855] veth1_vlan: entered promiscuous mode [ 699.549657][T22855] veth0_macvtap: entered promiscuous mode [ 699.552547][T22855] veth1_macvtap: entered promiscuous mode [ 699.574339][T22855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.586357][T22855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.623219][T22855] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 699.650506][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.650524][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.651898][T22855] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 699.694114][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.694132][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.731039][ T1197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.731495][ T1197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.731526][ T1197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.731553][ T1197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.731579][ T1197] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.731605][ T1197] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.731630][ T1197] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.731655][ T1197] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0