last executing test programs: 22.417561726s ago: executing program 0 (id=1652): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f", 0x11}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0x987}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000004d40)=""/4100, 0x1004}], 0x1}, 0x40000020) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x840000000002, 0x3, 0xff) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r3) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1e) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x7, @multicast2}}, 0x1e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000d00)={0x2, 0x100, @private=0xa010100}, 0x10) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 21.802393773s ago: executing program 0 (id=1660): unshare(0x6020480) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000045}, 0x20048007) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) getsockopt$inet_pktinfo(r0, 0x406, 0x8, 0x0, 0x0) 20.787897337s ago: executing program 0 (id=1673): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0xa, 0x94f) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0xb) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000100)={0x7, 'sit0\x00', {0x6}, 0xac}) splice(r2, 0x0, r5, 0x0, 0x80, 0x2) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r10}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, 0x48}}, 0x400c0c0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f00000008c0)={r8}, &(0x7f0000000340)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) unshare(0x20000400) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r12, 0x40047451, &(0x7f0000000200)=0x8000) sendto$packet(r11, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @remote}, 0x14) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xa4a8b48}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x33}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) 20.224495698s ago: executing program 3 (id=1675): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x18) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r7, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000106000000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7c4b20000bc7a287b8af8ff00000000bfa200000000000007020000f8ffff7fb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7c4b20000bc7a287b8af8ff00000000bfa200000000000007020000f8ffff7fb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @private2, @mcast1, [@dstopts={0x2b}]}}}}}}}, 0x0) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 19.743214101s ago: executing program 0 (id=1678): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xfffffffffffffe34, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r1 = socket(0x26, 0x2, 0x3) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@gettaction={0x198, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde5}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffff0d00}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6f}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x840}, 0x40) 19.532607222s ago: executing program 0 (id=1681): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x2f}}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x0, 0x3501}]}, 0xc8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x9}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x2, 0x18, 0x6b, 0x9, 0x229, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_sec_ctx={0x8, 0x18, 0x3, 0x7f, 0x34, "1a5b3325afcacd77a18d28f385fd4dbb9c1a57bce423b3c275ae7bd4c4ddc8a4cfe90f91871f7b8d46e2a473f635db6fde829ca0"}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb0, 0x5, {0x6, 0xff, 0x4, 0x8, 0x0, 0x2, 0x0, @in=@private=0xa010102, @in6=@mcast1}}, @sadb_ident={0x2, 0xb, 0x2, 0x0, 0x6}, @sadb_address={0x3, 0x6, 0x33, 0xa0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_key={0x4, 0x9, 0xa8, 0x0, "9442de7529640e222d0e4e29c7e22aec8ca84c6aab"}, @sadb_ident={0x2, 0xa, 0x0, 0x0, 0x8}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@private2, 0x29, 0x10, 0x4}, @sadb_lifetime={0x4, 0x3, 0x401, 0x1, 0x81, 0x6}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd2d}]}, 0x1148}}, 0x20000001) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) bind$inet6(r7, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd70007affa19afd6ade8a3c0004803519010673797a3100ff07002c00078008000400040000000800010018000000080002000900000008000400050000000800040000040000"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x40, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 19.199112513s ago: executing program 3 (id=1683): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0xf0, 0x260, 0xf0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.054026179s ago: executing program 3 (id=1686): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r0, 0x7, 0x6, &(0x7f0000000000)=""/13, &(0x7f0000000040)=0xd) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x0) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x81, @any, 0xa8a, 0x2}, 0xe) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000200)=0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000240)={r1, 0xfeda, 0x6, "4f89bf5cde7b29300c086618c4804cec1dadd87e28c59d89aad0391ccd"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa100250}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x240480c4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440)={0x9, 0x3ff, 0x0, 0xfff}, 0x8) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000480)={0x14, 0x1, {0x7, @usage=0xffffffffffffffff, 0x0, 0xdb, 0xcd, 0x100000000, 0x7b8, 0x7fe000000000, 0x67, @struct={0xfffff800, 0x7}, 0x10001, 0x4, [0x8, 0x1ff, 0x1, 0x100000000, 0x1]}, {0x9, @usage, 0x0, 0x2, 0xffff, 0x4000, 0xec2, 0x2, 0x10, @struct={0x10, 0xffffffff}, 0x80000001, 0x5, [0x8, 0xc, 0xfffffffffffffffe, 0x7, 0x2, 0x7fff]}, {0x57, @struct={0x7ff, 0x3}, 0x0, 0x5082, 0x82c9, 0x2000000, 0xcde1, 0x5, 0x10, @usage=0x2800000, 0x4, 0x101, [0x1, 0x4, 0x4, 0x60000000000000, 0x8, 0x6]}, {0x7ff, 0x10, 0x3}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000880)={r6, 0x8, 0x0, [0xfffffffffffffffd, 0x8, 0x3, 0x6, 0x123], [0x81, 0x1, 0x3, 0xffffffffffff5060, 0xbbe9, 0x1, 0x100000000, 0x9, 0xbe0, 0x8000000000000000, 0x4, 0xfffffffffffff28b, 0x0, 0x2, 0x100, 0x6, 0x5, 0x7, 0x1, 0x7, 0xfffffffffffffffc, 0x7, 0x40, 0x68, 0x1, 0x4, 0x81, 0x4, 0x800, 0xff, 0xfe8, 0x3, 0xbbfb, 0x10000, 0xfffffffffffffffe, 0x2, 0x7fffffffffffffff, 0x0, 0x3, 0x0, 0x8, 0x4, 0x4, 0x6, 0x80000000, 0x1, 0x40, 0x7f, 0xa2f, 0x5, 0xad, 0x80000000, 0x4, 0x3472a3fb, 0x436a85a5, 0x4, 0x5, 0x9, 0x3, 0x9, 0x8, 0x258, 0x94, 0x4, 0x0, 0x1, 0x7dd0c8ec, 0x4, 0x1ff, 0x3, 0x7, 0x9, 0x4, 0x4dc4, 0x3ff, 0x4, 0x1, 0x0, 0x8, 0x3ff, 0x5ab, 0x7, 0xffffffffffffff80, 0x0, 0xfffffffffffffffc, 0x8, 0xde, 0x71390fe, 0x9, 0x7, 0x0, 0x6, 0x1c00000000, 0x77b, 0x1, 0x692a, 0x9, 0xfc, 0x4, 0x8, 0x8000000000000000, 0x400, 0x6, 0x5, 0x5f250208, 0x7, 0x0, 0x4, 0x401, 0x10, 0x6d, 0xffffffff, 0x5, 0x100000001, 0xffff, 0x0, 0x7b70875c, 0x1, 0xf, 0x8, 0x7ff]}) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000cc0)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = accept4(r1, &(0x7f0000000d40)=@nfc_llcp, &(0x7f0000000dc0)=0x80, 0x800) splice(r7, &(0x7f0000000e00)=0xe72, r5, &(0x7f0000000e40)=0xc701, 0xfd, 0x8) socketpair(0x2a, 0x1, 0x7, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x94, r3, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000001040)={0x0, 0x40}, &(0x7f0000001080)=0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001100), r9) sendmsg$L2TP_CMD_TUNNEL_DELETE(r9, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, r11, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x44}}, 0x80) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000001240)) sendto$inet(r7, &(0x7f0000001280)="f6fbb465136f9d2cc847fe4e95130385074b29c2a77400a1b7b84624e26b57f3c76d135994b0327903f42d4898c3bc67eae83ba05dc1c168efc8cb0bf26431d9712ba65583d32aeb9e0c209d9f40ff06906ff8bfdab1c6909d87aa25be246f3dbe58b93918be8d7beaf12582ebbbe742c25ac9d778bc9fe3523664615dc11eff4065fd57a23ec97afc8aed0b73012be0023fd4f99eef41095c6a9aaed58c4baa9ff515df814b1f1b5594ea10d557", 0xae, 0x400c000, &(0x7f0000001340)={0x2, 0x4e20, @remote}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r10, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", ""]}, 0x14}}, 0x20048040) 18.863872241s ago: executing program 0 (id=1687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'macvtap0\x00', {}, 0x200}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x5) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) read(r5, &(0x7f0000000080)=""/189, 0xbd) r6 = socket(0x2a, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x3, 0x7, 0x7, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x880) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0x4}, {0xfff1, 0xfff1}, {0x6, 0x1e}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x5f, 0x2, [@TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0xac, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_PORT_SELF={0x8c}]}, 0x6e}}, 0x20000010) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, r11, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 18.80995049s ago: executing program 3 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=0xffffffffffffffff, 0x11, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000005500)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x44854) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r3, 0x0, 0xff40) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r6 = socket(0xa, 0x2, 0x0) connect$unix(r6, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x2c, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x140f, 0xee70877cfbc8a0b9, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x41804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0) 18.025542802s ago: executing program 2 (id=1695): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000180)=""/29, &(0x7f00000001c0)=0x1d) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = getuid() sendmsg$unix(r1, &(0x7f0000001dc0)={&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)="5ff261224a95470ecfc650424a107a5527d316ee74bb023c2cf67231f0798a7c7c1944946b5e4e721c78f228f427b10dbef88ef3f57204196ace0f2b33ac67000c1ebacff6fab48938907a81a36e83cbf9bab8292ec544104a93a116103b5b97b5babe400438e4de3783896b8d7651905e3ba8346cd81b9b9275c27b946366d623e3550c054b473a0804215ea0ae78467c418838dccd0b25025f4e6da160239f87a71a9b01d2f792a0f88ee97c2a79967177ca209d7fc1c0cb276be689df", 0xbe}, {&(0x7f0000000280)="78af096d3fe6df013291e090e07b1abe9de55eb4c208eeb33d7252387db5db4be879a897e5cae24abfc13e51f30d5bebca95d010aa0ff8e2629ca2", 0x3b}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="5fedee59afd36695e9ae91c49f094cc25510f89fa258a0e76b6f79db00d26fa1e4bf7eb27d32b24387b1500ca7b2b4fa416b44f9a3898a97fd8e6f337f33bb596cee969b5dbef92417fb907766e5aadd43f203fa68f6ecd06209c4411e7de09fd3dbc34dbbd231ff129030747c4af6650702544b9fa52f6004d0074f2d0da3bc5a2847a29e511d0f6b69697c5a4c1f7917580fbd8afaba3dac15f1c91d59197025d6303e72bc02fbe4634f8f7f0abaa233f3280b5838500355bcd9947992a3760c7f2dc2f314942fada71a21733ba1d5b2c9", 0xd2}, {&(0x7f0000001c40)="442ebd93d5fd6b0de9d3254388ff6765085d858f925ad7525f8363c28bb42c10d20291fc8c6c88dff66c9b48f60c12ebc324d5542bf51dc09351c8c3ea1b98af1c72767b24ac2ebf1ada60de21f047d9968e4862e452253a6b8f4fc15929f80dac648614204f921f99295f62bdfb5f24da6adae83d3d3b58711ff37071fdc2d29704c8f9d94f76e0f3ed907af57d015be2a00ebf44fcd92ff0c3030121e10234a1f4b3c7275bcae7ed108d0d69706ad64a2ed46abc6892bea09a9a60e3e2fdc6df6c3a2af6b2c7c518cf124465", 0xcd}, {&(0x7f0000000340)="dc813389f69d9d8fad138ea33b249ceda74cb0272479a2d247bd18311b49e102357be1dc9472d1bb400171973973008fe759cf47f9aa966e", 0x38}], 0x6, &(0x7f0000001d40)=[@rights={{0x1c, 0x1, 0x1, [r3, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x58, 0xc810}, 0x20000000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x8, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x40040) r8 = socket(0x10, 0x803, 0x8) ioctl$BTRFS_IOC_FS_INFO(r8, 0x8400941f, &(0x7f0000000500)) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) 17.890860073s ago: executing program 1 (id=1696): sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd0102", 0x19}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r5, 0x111, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000b8c42ee70000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000fffdffffb702000008000000b70300000000000085000000c70000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 17.742025849s ago: executing program 3 (id=1698): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0xffdfffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRESDEC=r2, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="2ecc3841285ccfc0f1a424465c8136a49e90a848a35f2dd23dc3187c89859d5f96bf72"], 0x50}}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f00000003c0)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x200000, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x60, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1200000, 0x800, 0xf, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 17.67500751s ago: executing program 1 (id=1699): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffe0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xcb}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) listen(r4, 0x7d4165c9) listen(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @empty, 0x4}}, 0x0, 0x0, 0x40, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0xfffffffffffffd59, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc081}, 0x20000000) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) 17.61380351s ago: executing program 4 (id=1700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa01000}, 0xc, &(0x7f0000000600)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x29, 0xc, "d066cbf0d6489a6080ef9def348928a0b93cca0281a5d16aa4c4991606bcc144e4254c5181"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x6c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x280, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}, @NFTA_RULE_EXPRESSIONS={0x14c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x400}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8679}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x772}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xd83}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcb}]}}}]}, @NFTA_RULE_USERDATA={0xa3, 0x7, 0x1, 0x0, "6ef334236978b638ea9eecbfea995a4e4422827088982c2bbaf0054d40f0ac3e3380191ec2885932ca8c8f77f7ce6124e335b6e6c8c86597b6f46cd54c341d402c866517fe7da6a38978cf4d6731f18df23a7c715d01036d99576371d1d5355afa08b42266f1f4ed84642a650bb3b4aea28cd598fb3ccfc618dea7d466fc8bf0603f7d481c8bd250972839bdff318235eb0b12ad4d91a85ffe2b293fbd7dff"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5c19577bff7538a5, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1281613e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7b242a12}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x62779918}]}]}, @NFT_MSG_NEWRULE={0x150, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x104, 0x7, 0x1, 0x0, "f96dcdbe283c727d57919a28242650370a43d1a10b206a780ad138d6b80d98646accb6af8fb7b32a865814b9023a0c74aaf6e42eb0567104491bc1b874f9a7a47f258129732278209ce826b3435a5c0a5a1941d0934147dd8a8148f07bbb85ca4c1c8dbe34d2f3d5329bee3bc756ccbc0d265dea91ba59b53504e1ddcb61137d10331d59b317a31080d036bbecc4fa2343e705035cae8e29116c2e817b67683ba3e8ee409808d3f4bbd944052f5d96864ce4bbfb73e688d37e1050fa4fe42606bb2eb161a0650f812c1edd907007a14756d466132792b0d753a7319cf26efb91ad9e831395014158d2b39f381cb6f1b6c97ae84a1f573269503d59e2c4f50733"}, @NFTA_RULE_USERDATA={0xc, 0x7, 0x1, 0x0, "b94ca5efb0d955ce"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c0}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x81}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0xc, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = accept(r1, &(0x7f0000000900)=@x25={0x9, @remote}, &(0x7f0000000980)=0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0}, &(0x7f0000000b00)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000bc0)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x7ff, 0x5, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0xcbb, 0x2ce, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x77, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@loopback, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x8}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000e80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10c, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c1) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r2) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x68, r10, 0x20, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x44) syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001080), 0x3) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r2) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001200)="dada88552a7ff10748569ea24627c7e06ab6e8be9549b3c4e7238567ebf9b660b4e6e3ef5c8d2cffcda31e570b87a883eafded75fd244a3ba8caf3737cd15056a47f89752bd90d153be6cdbe61ab4d59f0584727a75543b76e419ba2060ec33e668283f23a741edd01b807378d7e55e85ae2d590a3e5cccaf3961a59f0c34a96f460838dc943957a77dbf8613d454b685817cf5dd755c9e640e860480d4ee6cae15cfb017890f2", 0xa7}, {&(0x7f00000012c0)="e6f5fe6757aace90f11b600f696a8b9d10bcd5b40bf65a587261b6fba9ef1d9397dd1f38b2eff89a8da62ada96f140e5f63a124b8924b251b01752e9264f27b7187c4145f67293de8321658108b1f355a67d3108f01210bcd4a3e25a2648d9c2f30d975e66b1d43c946973f1f2d400c12d6c1920eac091f92bd42f455ca7fbe907ee6af8206fb59bee8c0648cd0ca09eb04261af2189b69d76b8fd78adc565d66a56d503de51b9d566cc91a09e20d677ad6552e08176c1e5480b76000b035ced02fcd4702798ebfb2c31484e8917266a1caa29b9d090da", 0xd7}, {&(0x7f00000013c0)="d420db05011b7e90a476ec1d76dc524664e680a48ffcccbae11319e874032403bfb7977577dcab3bab9a5eba8e9fa698e898f99603db3f6e7a0e8284a1edff96faebb8e449e68a81ef83765dfd9a23f7eeed6b602cb87756e5ced30394f73d889a4784f485af032ac52dfaff171307fcf83d303af8c7ceb8d8599f980f03dcfd5fb087ce7a5b47a28205520b385578a81886612fb42b358a1326041cc2ca1ef302ad7e83c9638c44bbca644ead1300f09480a4e7193d5574b37ca3b0a46dfc4a3f60b950b0f0fb093c5ace82e6beb98978968a", 0xd3}], 0x3}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, r12, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002380)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f0000001740)={0xbfc, r14, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x438, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x4}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x203}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'W/)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'meta\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^-}--\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']\\\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(&\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffe}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x88}, @ETHTOOL_A_BITSET_VALUE={0xf9, 0x4, "c76b0059a831b72d668117200a517d2e119d50ebe5083c98c48fde9815a642f5dbaa93ba5d8247ebc129e0aad479e2eb9065e6923922ce2592371eb7c85c2c2ac055c683d684e1643883894d1d86f1e98514fc14af72973aa6f9a485359090b528ee3273321757bd6e4faf287e3fc60323b92b56698bcd9e51315c7d078c1bd77ac5f2ef9ec390d16be34669496a3a6ab6d2f218ba9ce854df36d6f5bdf2951e4429f75d7caba791a0a8eb16aa452dd063b1e32efcd6231e077049c8725cdd1a485c0ddce9114e2429e73beca5a4f967a4afc2672c8d6cac943922bb1c6183984b82b741fa4798537bd567a74db7f43805f122745f"}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "2c0a2638774ae2a4c3403e6c91e6da59f68815ae759b23939973cff765915e772327aa1f67275824f29102195e3afbc98087383b0b9fd09e6bc6eed6d5103095ca0ea00428f1bc0d41b6ca2cc3ef26a3084ab9b56e29fac1eb72e9d7f7f14071843d4fea2a8eb9cb608ed1b764cd36b98802146f83f87202e7207e1918de7b8499c57bb88c8b8ba07469be52668a4f63ff004216e1766e39aa8af14f6d034ad3bb2dc61010ac67e5801115de569ffbb28caff29b8f900cbc8c76e2714e9ce6f41766d31501a23b464b4bc968794cb4b9f0cd4f4f2ba0dc08ffdf388e3cff0a0eced3b46772563da5a7aa9dab48483f911611"}, @ETHTOOL_A_BITSET_VALUE={0x1f, 0x4, "442af9150e06d0719ded77ecb5926c4c2c337711a9d91ed92c981d"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x12c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'socket\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*{&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1d62}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'socket\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeeae}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x200, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')@$[$;\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '!,\'\x83-*:^}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe87d}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "103a04606f6902d92a3b6cc2ef9acf9adbe243c1cfdf427302bebc0fc4a739d30718c824e869b468ef1bb57d1c40bf72ab1f6179c632d6b91e5e99ff7a257c8cff93909ec2a2936b9cdfeb0e1c2125ae733ba4eabba3e2961fe33e5db821e168b881d1cdbdceae12c590fae046ac2d08ba72a5b15aacd0e79f8442ad89a8127c19cce755f8d66adb50179012ee33575894b6b9eb8666d06323c8b8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, '<'}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "1f1ceb0dcf092f40a56ff395ffebf9821189dfdc2fe383ed9b591eb9e1cc7bb205ddb4627dfef12c54f4ff759ec0f4e0df641bb0f2bd23592e544553a100c7b6750f4ead"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd31f}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "327c0c24671ce161429f8b1454e788a034128f8972649b9be257800e713229f632fc1accc27e6d2e8b34329523695f"}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '$\']!-#{&]{.*\x00'}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':]@-*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'last\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg2\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*&$:\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'tunnel\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x74}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'last\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf8c}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c771f11}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}]}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&-#+[--\x8c\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$):\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x859}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1f, 0x4, "83747a49fc4e3eae4521d75200267916c1e5457e3396ff724024d7"}]}]}, 0xbfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040014) getpeername$unix(r2, &(0x7f00000023c0)=@abs, &(0x7f0000002440)=0x6e) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x60, r12, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x72}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x58f}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 17.454607836s ago: executing program 1 (id=1701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000001c0)=0x9e, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x34, 0x2c, 0xd2b, 0x801, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0xfff1}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24044094) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 17.311790699s ago: executing program 4 (id=1702): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x5, 0x4) (async) r1 = socket(0x15, 0x4, 0x5) (async) r2 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd6f}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0xd, 0x1, 0x7, 0xfffffffffffffff4, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xd9, &(0x7f0000000140)=""/217, 0x83d00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xd, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x1, 0xa, 0xb}, {0x3, 0x3, 0xc, 0xd}, {0x2, 0x1, 0x3}], 0x10, 0x5}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000400)={r1, r4}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x40, 0x0, [0x7, 0x9, 0x3, 0x3, 0x6], [0x9, 0x8, 0x3, 0x9, 0x8bf3, 0x7ff, 0xa59, 0x9, 0x2, 0x0, 0x2, 0x80000001, 0x2, 0x4, 0x6d, 0x3, 0xa, 0xf5e, 0x9, 0xa2, 0x5, 0x8000000000000001, 0x0, 0xfffffffffffffff9, 0x5, 0x4525, 0x4, 0x7f, 0x5, 0x3c0, 0x4, 0x7, 0x5, 0x9, 0x7, 0x4, 0x3, 0x0, 0x1000, 0xffffffffffff0d03, 0xfff, 0xf1, 0xfff, 0x8, 0x1, 0x40, 0x1, 0x5, 0x6, 0x1, 0x4, 0x7fffffff, 0x0, 0xfffffffffffffffa, 0x2, 0xffffffffffff9b05, 0x62a, 0x9, 0x3, 0x8000000000000001, 0x80, 0x7fffffffffffffff, 0x8, 0x6, 0x7, 0x5, 0x8000000000000000, 0x80, 0xfc, 0x4, 0x401, 0xffffffffffffffff, 0x41cf37cf, 0x5c8d, 0x0, 0x0, 0xfffffffffffffffb, 0x4, 0xc9a, 0x4, 0x0, 0x1, 0x0, 0x99, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x6191, 0x7, 0xecb, 0x5, 0x1, 0x1, 0xa2, 0x3ff, 0x4, 0x9, 0x3ff, 0x8000000000000000, 0x7, 0x0, 0x7f, 0xfff, 0x8, 0x3, 0xb9, 0x4, 0xa, 0x1, 0x0, 0x8, 0x78, 0x10000, 0x9, 0x5, 0x1, 0x2, 0x5, 0x9, 0x4, 0x4]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000880)={r5, "4852e0ff018ef83e973eb3056c65ae36"}) (async) sendto$l2tp(r4, &(0x7f0000001880)="e6aa26e5ff8023ba2d01ba5a714fb547b364e98139d89925481b161d5d078667f9eb", 0x22, 0x4004000, &(0x7f00000018c0)={0x2, 0x0, @local, 0x4}, 0x10) (async) pselect6(0x40, &(0x7f0000001900)={0xe2b, 0x6, 0x9, 0x100, 0x1, 0xfff, 0x2, 0x9}, &(0x7f0000001940)={0x3, 0x3, 0x1c000, 0x0, 0xc000000000000, 0xfd9, 0x3, 0xfffffffffffffffe}, &(0x7f0000001980)={0x7, 0x1000, 0x4, 0x2, 0xf, 0x1, 0x8000000000000001, 0x3ff}, 0xfffffffffffffffc, &(0x7f0000001a00)={&(0x7f00000019c0)={[0x8]}, 0x8}) (async) bind$alg(r0, &(0x7f0000001a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) r6 = accept4$nfc_llcp(r1, &(0x7f0000001ac0)={0x27, 0x0}, &(0x7f0000001b40)=0x60, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001b80)={'wlan1\x00'}) r8 = accept4$x25(r0, &(0x7f0000001bc0), &(0x7f0000001c00)=0x12, 0x80800) ioctl$BTRFS_IOC_FS_INFO(r8, 0x8400941f, &(0x7f0000001c40)) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002080), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x30, r9, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x4) (async) ppoll(&(0x7f0000002180)=[{r2, 0x200}, {r1, 0x1002}], 0x2, &(0x7f00000021c0)={0x77359400}, &(0x7f0000002200)={[0xe9d]}, 0x8) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000002240)={0x3, 'sit0\x00', {0x6}, 0x30}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000002280)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0xb, 0x5, 0x1, 0x300f859d, 0x98, 0x800, 0x8}, &(0x7f0000002340)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000002380)={r11, 0x7}, 0x8) (async) r12 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r12, 0x4008b100, &(0x7f00000023c0)={0x18, 0x0, {0x2, @remote, 'ipvlan1\x00'}}) (async, rerun: 64) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r13, &(0x7f0000002500)={&(0x7f0000002400), 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x34, r14, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x894}, 0x4800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000002540)={r11, 0x4}, &(0x7f0000002580)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000025c0)={r15, 0x8, 0x10}, 0xc) 17.072154582s ago: executing program 1 (id=1703): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 16.912764862s ago: executing program 1 (id=1704): socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x2020600) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000600)=""/14, 0x200000, 0x1000, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3, 0x42}], 0x1, 0x0, 0x0, 0xfffffffffffffff7) pselect6(0x40, &(0x7f0000000300)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x100, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xa90, 0x9, 0x6, 0x0, 0x3665}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r6}, 0x2c, 0x7, 0x7}) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 16.767808699s ago: executing program 2 (id=1705): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x40000000000004) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ffe6b5600d698cff9e14f096dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x29) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000900)=ANY=[@ANYRES32=r7, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="05c14b4269aa19a3d349ecb99e6a8986ae5948985fa8d725d6cd4cf2817e0b2fd5f9b692fe4babc96158cef649021a034b1bf77aebb58186216e9d", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)={@map=r11, r8, 0x2f, 0x2028, 0x4, @void, @void, @value=r12}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff03000008000900010000f308000700030000001400"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c00078008001340000017e50500050002000000050001000613000064e2954de1b3978c92bc188cccb6742dc2e019454ee2335a268ed89f48a07fa866f8622ac750dd0ec2a53b4b76096bd64eac3529ee1e9ee319a0a62e2b288c22e22393ba77511be38e3ed465840c710fc8e5843766f6c139f529"], 0x54}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="ceaaa581b74be1bb0b4eb259da1e549ff3b844"], 0x44}}, 0x4000050) r14 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r14, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r14, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400) 16.463070235s ago: executing program 2 (id=1706): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x500}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x25}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x20, 0x6, 0xfff, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x68, 0x0, 0x2f, 0x4, 0x0, @loopback, @multicast1, {[@end]}}}}}) 16.349559396s ago: executing program 4 (id=1707): unshare(0x2040400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_emit_ethernet(0x62, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, '\a\x00'}, @window={0x3, 0x3, 0x81}, @md5sig={0x13, 0x12, "f5c0f39d4786d7de941aad9f438da5f2"}]}}}}}}}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='neigh_create\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$netrom(r3, 0x0, 0x0) (async) bind$netrom(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) socket(0xb, 0x80000, 0x109b) unshare(0x100) (async) unshare(0x100) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 16.211031073s ago: executing program 2 (id=1708): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0x6}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @float={0xb, 0x0, 0x0, 0x10, 0x4}, @enum64={0x10, 0x5, 0x0, 0x13, 0x0, 0x2, [{0x5, 0x5, 0x8000}, {0x6, 0x0, 0x7}, {0xf, 0xa, 0x5}, {0x8, 0x200, 0x80000001}, {0x4, 0x4, 0x675}]}]}, {0x0, [0x61, 0x2e, 0x2e]}}, &(0x7f00000005c0)=""/92, 0x99, 0x5c, 0x0, 0x32a}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0x6}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @float={0xb, 0x0, 0x0, 0x10, 0x4}, @enum64={0x10, 0x5, 0x0, 0x13, 0x0, 0x2, [{0x5, 0x5, 0x8000}, {0x6, 0x0, 0x7}, {0xf, 0xa, 0x5}, {0x8, 0x200, 0x80000001}, {0x4, 0x4, 0x675}]}]}, {0x0, [0x61, 0x2e, 0x2e]}}, &(0x7f00000005c0)=""/92, 0x99, 0x5c, 0x0, 0x32a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4002}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) (async) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fbdbdf255a00000008000300", @ANYRES32=r9, @ANYBLOB="a4c1ee39b30cb71a292ebcdb727901ba3483d5ae3950c84732f2ffffffdd1df88382b29dd4380ebb4f919b78f52d7004a783fe481b5fb75a4b2b321468"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x4}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x20}}, 0x4000000) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) 16.166268284s ago: executing program 4 (id=1709): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="80097f9d362a730bcb32cbd1113b2e77ad6cdc21b0aee1fbb678a5ca9e098b8d36f858f0e2d054a1a9c6c1eecfd33248489276a2045ac92256bae4e1be73e06351cf5692bf08217643d715000000000000000036d4a5c42e2ba9db347e29de7dfb66c8b0acea000000000000a1769bea"], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1500000006400000", @ANYRES32, @ANYBLOB="004afec1be44e273a27acf7acb51cc0e9a09c5577009fcf90600d3f2c9", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5a8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16=r8, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x4044004) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 16.148993162s ago: executing program 3 (id=1710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) close(0x4) syz_emit_ethernet(0x3a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000002c0)={0x400, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "9f9058f907d4dc"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000012c0)={r5, 0x3026}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 15.980864524s ago: executing program 1 (id=1711): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x39, 0x1, 0x10000, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0xe, 0x1}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0xffffffff, 0xf761, 0x10000, {0xff, 0x2, 0x6f83, 0x57e, 0x5}, {0x1, 0x1, 0x1000, 0x280, 0x8, 0x2}, 0x2, 0xfffffdde, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x14}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x34, 0x13, 0x400, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r11, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r8}, 0x94) 15.415767274s ago: executing program 4 (id=1712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110528bd7000ffdbdf2509000000440003"], 0x58}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 15.311851415s ago: executing program 2 (id=1713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffffe}, [@jmp={0x7, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x1}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000004000000632af8ff00000000b509010000000000c3aaf8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.190043669s ago: executing program 4 (id=1714): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) unshare(0x8040480) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x0, 0x0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000000000000300"/28], 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r6, 0x1000) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1, &(0x7f0000000500)=@raw=[@ldst={0x1, 0x3, 0x6, 0x9, 0xb, 0x80, 0x7ffffffffffffff2}], &(0x7f0000000580)='syzkaller\x00', 0x400, 0x0, &(0x7f00000005c0), 0x41100, 0x60, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x5, 0xff}, 0x10, r4, r1, 0x3, &(0x7f00000007c0)=[r5, r6, r7], &(0x7f0000000800)=[{0x1, 0x5, 0x6, 0x7}, {0x2, 0x1, 0x4, 0x4}, {0x2, 0x2, 0x6, 0x6}], 0x10, 0x5}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000009c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2, 0x7, 0x792, 0x3, "93d2e1b0f73c4b310bb3c999be5a45b2e400ce5470f96f91b2c255e10f525ad0e54e89f5bf1d08896ac3d122daf537a8ae7870afc8232688d38ec14991d242d774e81914963001d70ab12b6421d94aaca5ff490a321c0e7075d7a0e76b99a000fffafbff6d227fb58a380237ba45c6bc5d40482701bd92e07a28d70a80f38c39"}) r8 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r8, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}}, 0x1c}}, 0x0) unshare(0x6a040000) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r9, 0x0, 0x200000000000c, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf008400"/32, @ANYRES32=r11, @ANYBLOB="04000800"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$AUDIT_TTY_GET(r10, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f8, 0x4, 0x70bd27, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r12, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) 15.148214108s ago: executing program 2 (id=1715): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffec, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = accept4(r0, &(0x7f0000001d80)=@xdp, &(0x7f0000001e00)=0x80, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e80)={0x0, 0x0}, &(0x7f0000001ec0)=0xc) sendmsg$nl_xfrm(r8, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)=@report={0xe8, 0x20, 0x400, 0x70bd2a, 0x25dfdbff, {0x2b, {@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@remote, 0x4e22, 0x0, 0x4e24, 0xfffa, 0xa, 0xa0, 0x0, 0x1, 0x0, r9}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_auth_trunc={0x8b, 0x14, {{'sha1-ssse3\x00'}, 0x1f8, 0x180, "d6756f544af06cf15be7c5a26d6627112e550e41b0c0f4a3b8d653c0003389dfbff9422d6bce0fa13f0e93ac22c98583cd53740b52d0fe10d48e441bcea098"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000840) sendmsg$rds(r0, &(0x7f0000001d40)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1, &(0x7f0000001a80)=[@mask_cswp={0x58, 0x114, 0x9, {{0x47, 0x5}, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x5, 0x84f, 0x7, 0x4, 0x2, 0x9, 0x5}}, @fadd={0x58, 0x114, 0x6, {{0x7d0c, 0x5}, &(0x7f00000002c0)=0x9, &(0x7f0000000300)=0x7, 0x9231, 0x1, 0x8, 0x507d, 0x10, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0xb1d, 0x6}, &(0x7f0000000340)=0x200, &(0x7f0000000380)=0x1980, 0xe5a9, 0x9, 0x4, 0x1000, 0x8, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x80000000, 0x5f43}, &(0x7f00000003c0)=0x10000, &(0x7f0000000400), 0x7f, 0x2, 0x30, 0xfffffffffffffffa, 0x20, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x7, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x6ca0}, {&(0x7f0000000440)=""/211, 0xd3}, &(0x7f0000001900)=[{&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/109, 0x6d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/247, 0xf7}, {&(0x7f0000001800)=""/230, 0xe6}], 0x5, 0x48, 0x4}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x80}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x4}, &(0x7f0000001980)=0x5, &(0x7f00000019c0)=0x6996, 0x3, 0x4, 0x200, 0xd0f, 0x20, 0x80000001}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x3}, &(0x7f0000001a00)=0x800, &(0x7f0000001a40), 0x2174c85f, 0x10001, 0x9, 0x6, 0x0, 0x7}}], 0x288, 0x20004880}, 0x20008800) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x0, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000020000000004a", @ANYRES32=0x0, @ANYBLOB="000000000c010000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12, @ANYBLOB="0a000100f3"], 0x48}}, 0x0) 3.116824641s ago: executing program 32 (id=1687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'macvtap0\x00', {}, 0x200}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x5) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) read(r5, &(0x7f0000000080)=""/189, 0xbd) r6 = socket(0x2a, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x3, 0x7, 0x7, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x880) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0x4}, {0xfff1, 0xfff1}, {0x6, 0x1e}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x5f, 0x2, [@TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0xac, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_PORT_SELF={0x8c}]}, 0x6e}}, 0x20000010) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, r11, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1.119152239s ago: executing program 33 (id=1710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) close(0x4) syz_emit_ethernet(0x3a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000002c0)={0x400, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "9f9058f907d4dc"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000012c0)={r5, 0x3026}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 97.761746ms ago: executing program 34 (id=1711): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x39, 0x1, 0x10000, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0xe, 0x1}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0xffffffff, 0xf761, 0x10000, {0xff, 0x2, 0x6f83, 0x57e, 0x5}, {0x1, 0x1, 0x1000, 0x280, 0x8, 0x2}, 0x2, 0xfffffdde, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x14}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x34, 0x13, 0x400, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r11, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r8}, 0x94) 59.530411ms ago: executing program 35 (id=1715): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffec, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = accept4(r0, &(0x7f0000001d80)=@xdp, &(0x7f0000001e00)=0x80, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e80)={0x0, 0x0}, &(0x7f0000001ec0)=0xc) sendmsg$nl_xfrm(r8, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)=@report={0xe8, 0x20, 0x400, 0x70bd2a, 0x25dfdbff, {0x2b, {@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@remote, 0x4e22, 0x0, 0x4e24, 0xfffa, 0xa, 0xa0, 0x0, 0x1, 0x0, r9}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_auth_trunc={0x8b, 0x14, {{'sha1-ssse3\x00'}, 0x1f8, 0x180, "d6756f544af06cf15be7c5a26d6627112e550e41b0c0f4a3b8d653c0003389dfbff9422d6bce0fa13f0e93ac22c98583cd53740b52d0fe10d48e441bcea098"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000840) sendmsg$rds(r0, &(0x7f0000001d40)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1, &(0x7f0000001a80)=[@mask_cswp={0x58, 0x114, 0x9, {{0x47, 0x5}, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x5, 0x84f, 0x7, 0x4, 0x2, 0x9, 0x5}}, @fadd={0x58, 0x114, 0x6, {{0x7d0c, 0x5}, &(0x7f00000002c0)=0x9, &(0x7f0000000300)=0x7, 0x9231, 0x1, 0x8, 0x507d, 0x10, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0xb1d, 0x6}, &(0x7f0000000340)=0x200, &(0x7f0000000380)=0x1980, 0xe5a9, 0x9, 0x4, 0x1000, 0x8, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x80000000, 0x5f43}, &(0x7f00000003c0)=0x10000, &(0x7f0000000400), 0x7f, 0x2, 0x30, 0xfffffffffffffffa, 0x20, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x7, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x6ca0}, {&(0x7f0000000440)=""/211, 0xd3}, &(0x7f0000001900)=[{&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/109, 0x6d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/247, 0xf7}, {&(0x7f0000001800)=""/230, 0xe6}], 0x5, 0x48, 0x4}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x80}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x4}, &(0x7f0000001980)=0x5, &(0x7f00000019c0)=0x6996, 0x3, 0x4, 0x200, 0xd0f, 0x20, 0x80000001}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x3}, &(0x7f0000001a00)=0x800, &(0x7f0000001a40), 0x2174c85f, 0x10001, 0x9, 0x6, 0x0, 0x7}}], 0x288, 0x20004880}, 0x20008800) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x0, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000020000000004a", @ANYRES32=0x0, @ANYBLOB="000000000c010000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12, @ANYBLOB="0a000100f3"], 0x48}}, 0x0) 0s ago: executing program 36 (id=1714): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) unshare(0x8040480) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x0, 0x0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000000000000300"/28], 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r6, 0x1000) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1, &(0x7f0000000500)=@raw=[@ldst={0x1, 0x3, 0x6, 0x9, 0xb, 0x80, 0x7ffffffffffffff2}], &(0x7f0000000580)='syzkaller\x00', 0x400, 0x0, &(0x7f00000005c0), 0x41100, 0x60, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x5, 0xff}, 0x10, r4, r1, 0x3, &(0x7f00000007c0)=[r5, r6, r7], &(0x7f0000000800)=[{0x1, 0x5, 0x6, 0x7}, {0x2, 0x1, 0x4, 0x4}, {0x2, 0x2, 0x6, 0x6}], 0x10, 0x5}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000009c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2, 0x7, 0x792, 0x3, "93d2e1b0f73c4b310bb3c999be5a45b2e400ce5470f96f91b2c255e10f525ad0e54e89f5bf1d08896ac3d122daf537a8ae7870afc8232688d38ec14991d242d774e81914963001d70ab12b6421d94aaca5ff490a321c0e7075d7a0e76b99a000fffafbff6d227fb58a380237ba45c6bc5d40482701bd92e07a28d70a80f38c39"}) r8 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r8, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}}, 0x1c}}, 0x0) unshare(0x6a040000) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r9, 0x0, 0x200000000000c, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf008400"/32, @ANYRES32=r11, @ANYBLOB="04000800"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$AUDIT_TTY_GET(r10, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f8, 0x4, 0x70bd27, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r12, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) kernel console output (not intermixed with test programs): 0274][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.623784][ T6158] Bluetooth: MGMT ver 1.23 [ 118.889597][ T6162] x_tables: duplicate underflow at hook 2 [ 119.111907][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 119.602931][ T5853] Bluetooth: hci4: command tx timeout [ 120.014869][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.64'. [ 120.685607][ T6209] ip_vti0: entered promiscuous mode [ 120.746805][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 120.756745][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 120.988203][ T6225] tipc: Started in network mode [ 121.050321][ T6225] tipc: Node identity 1e115bd30d4a, cluster identity 4711 [ 121.120086][ T6225] tipc: Enabled bearer , priority 0 [ 121.363325][ T6230] syzkaller0: entered promiscuous mode [ 121.390855][ T6230] syzkaller0: entered allmulticast mode [ 121.459055][ T6211] tipc: Resetting bearer [ 121.502832][ T6211] tipc: Disabling bearer [ 121.594568][ T6259] netlink: 'syz.2.67': attribute type 12 has an invalid length. [ 122.195772][ T6286] erspan0: entered promiscuous mode [ 122.207591][ T6287] netlink: 104 bytes leftover after parsing attributes in process `syz.0.72'. [ 122.528861][ T6301] syzkaller0: entered promiscuous mode [ 122.545717][ T6301] syzkaller0: entered allmulticast mode [ 122.730481][ T6304] vxcan3: entered allmulticast mode [ 123.475395][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 123.566740][ T6322] raw_sendmsg: syz.3.81 forgot to set AF_INET. Fix it! [ 123.788738][ T6328] Illegal XDP return value 8 on prog (id 37) dev N/A, expect packet loss! [ 123.835108][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 123.879807][ T6331] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 123.898035][ T6331] netlink: 224 bytes leftover after parsing attributes in process `syz.3.84'. [ 124.392433][ T6342] IPv6: Can't replace route, no match found [ 124.423896][ T6346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.497563][ T6346] bond0: (slave rose0): Enslaving as an active interface with an up link [ 124.562491][ T6347] bond1: option ad_select: invalid value (34) [ 124.573806][ T6347] bond1 (unregistering): Released all slaves [ 124.675375][ T6355] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 124.891237][ T6364] netlink: 'syz.4.91': attribute type 3 has an invalid length. [ 125.205413][ T6375] IPVS: length: 145 != 8 [ 125.295750][ T6369] tipc: Enabling of bearer rejected, failed to enable media [ 126.467548][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 127.167481][ T6440] netlink: 'syz.2.109': attribute type 30 has an invalid length. [ 127.180764][ T6431] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 127.199538][ T6431] netlink: 'syz.3.105': attribute type 2 has an invalid length. [ 127.773278][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 127.933892][ T6472] warning: `syz.3.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.331043][ T6474] syzkaller0: entered promiscuous mode [ 128.354677][ T6474] syzkaller0: entered allmulticast mode [ 128.395146][ T6482] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 128.921740][ T6494] netlink: 'syz.4.120': attribute type 8 has an invalid length. [ 129.092377][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 130.674394][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053f2c000: rx timeout, send abort [ 130.684527][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053ee1000: rx timeout, send abort [ 130.693261][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053f2c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.714528][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053ee1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 131.151847][ T6493] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 131.520674][ T6540] ip6gre1: entered promiscuous mode [ 131.530158][ T6540] ip6gre1: entered allmulticast mode [ 131.595500][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.615751][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.624153][ T5909] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.687391][ T6546] netlink: 'syz.0.134': attribute type 11 has an invalid length. [ 131.972484][ T6560] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 132.083787][ T6564] syz.1.139 uses old SIOCAX25GETINFO [ 132.110345][ T6560] netlink: 220 bytes leftover after parsing attributes in process `syz.0.137'. [ 132.210909][ T5909] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.238657][ T180] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.503671][ T6580] xt_hashlimit: max too large, truncated to 1048576 [ 132.532000][ T6580] xt_bpf: check failed: parse error [ 132.940167][ T6595] netlink: 'syz.1.145': attribute type 83 has an invalid length. [ 133.406183][ T6618] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.153'. [ 133.406248][ T6621] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.153'. [ 133.985486][ T6634] netlink: 'syz.3.158': attribute type 1 has an invalid length. [ 134.016589][ T6634] netlink: 224 bytes leftover after parsing attributes in process `syz.3.158'. [ 134.038660][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 134.075206][ T6638] netlink: 5 bytes leftover after parsing attributes in process `syz.1.159'. [ 134.123871][ T6639] pim6reg: entered allmulticast mode [ 134.146134][ T6645] trusted_key: syz.3.161 sent an empty control message without MSG_MORE. [ 134.268080][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 134.312707][ T6653] macsec2: entered promiscuous mode [ 134.334674][ T6653] macsec2: entered allmulticast mode [ 134.541785][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'. [ 134.564845][ T6663] netlink: 7 bytes leftover after parsing attributes in process `syz.1.165'. [ 135.358140][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.731278][ T6709] ipt_REJECT: TCP_RESET invalid for non-tcp [ 135.748885][ T6709] tipc: Enabling of bearer rejected, failed to enable media [ 136.007231][ T6721] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.155659][ T6724] netlink: 268 bytes leftover after parsing attributes in process `syz.1.187'. [ 136.175642][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 136.220055][ T6724] netlink: 42 bytes leftover after parsing attributes in process `syz.1.187'. [ 136.536545][ T6740] tipc: Enabled bearer , priority 0 [ 136.586980][ T6740] syzkaller0: entered promiscuous mode [ 136.630737][ T6740] syzkaller0: entered allmulticast mode [ 136.637126][ T6745] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 137.041667][ T6745] bond2: entered promiscuous mode [ 137.047323][ T6745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.067472][ T6756] tipc: Resetting bearer [ 137.084668][ T6736] tipc: Resetting bearer [ 137.116601][ T6736] tipc: Disabling bearer [ 137.383840][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.202'. [ 137.610549][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'. [ 138.229899][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 138.243371][ T6824] bond0: (slave sit0): Error: Device type is different from other slaves [ 138.533323][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.718813][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 138.850757][ T6846] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 138.889195][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 139.022474][ T6852] bond0: (slave erspan0): Error: Device type is different from other slaves [ 139.295848][ T6873] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.562220][ T6883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 139.590900][ T6883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 139.597925][ T6883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 139.605248][ T6883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 139.612450][ T6883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 139.619546][ T6883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 139.626579][ T6883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 139.633768][ T6883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 139.640792][ T6883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 140.860186][ T6922] tipc: Can't bind to reserved service type 1 [ 140.940337][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 141.078875][ T6930] netlink: 'syz.3.227': attribute type 1 has an invalid length. [ 141.465401][ T6958] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 141.621806][ T6957] ip6tnl3: entered promiscuous mode [ 141.640592][ T6957] ip6tnl3: entered allmulticast mode [ 142.639087][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 142.654271][ T7002] netlink: 72 bytes leftover after parsing attributes in process `syz.2.246'. [ 142.822505][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.247'. [ 142.925914][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 142.958049][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.457452][ T7026] tipc: Started in network mode [ 143.498307][ T7026] tipc: Node identity d6fc27ab8ab1, cluster identity 4711 [ 143.517514][ T7026] tipc: Enabled bearer , priority 0 [ 143.641839][ T7039] syzkaller0: entered promiscuous mode [ 143.648137][ T7039] syzkaller0: entered allmulticast mode [ 143.658266][ T7039] tipc: Resetting bearer [ 143.705544][ T7018] tipc: Resetting bearer [ 145.336450][ T7018] tipc: Disabling bearer [ 145.373706][ T5950] tipc: Node number set to 1548560299 [ 145.558952][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 145.577506][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 146.343533][ T7098] syzkaller1: entered promiscuous mode [ 146.352981][ T7098] syzkaller1: entered allmulticast mode [ 146.441284][ T7100] syzkaller0: entered promiscuous mode [ 146.450470][ T7100] syzkaller0: entered allmulticast mode [ 146.664483][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 148.725484][ T7183] syzkaller0: entered promiscuous mode [ 148.740191][ T7183] syzkaller0: entered allmulticast mode [ 148.886185][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 148.941224][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 148.985611][ T7196] net_ratelimit: 1785 callbacks suppressed [ 148.985632][ T7196] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.005896][ T7199] netlink: 'syz.1.292': attribute type 4 has an invalid length. [ 149.014206][ T7199] netlink: 240 bytes leftover after parsing attributes in process `syz.1.292'. [ 149.516458][ T7214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.295'. [ 150.588570][ T7218] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 150.777760][ T7226] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 150.783764][ T7234] netlink: 36 bytes leftover after parsing attributes in process `syz.4.302'. [ 150.804795][ T7226] bond3 (unregistering): Released all slaves [ 150.939732][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 150.950213][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 150.959946][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'. [ 151.276917][ T7253] netlink: 'syz.4.304': attribute type 2 has an invalid length. [ 151.293301][ T7253] netlink: 'syz.4.304': attribute type 9 has an invalid length. [ 151.301417][ T7253] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.304'. [ 151.829732][ T7262] bond1 (unregistering): Released all slaves [ 152.215165][ T7275] bridge0: entered promiscuous mode [ 152.581741][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 152.598566][ T7282] netlink: 48 bytes leftover after parsing attributes in process `syz.2.312'. [ 152.607708][ T7282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'. [ 152.657129][ T7282] vlan2: entered allmulticast mode [ 152.675699][ T7282] dummy0: entered allmulticast mode [ 153.446753][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.320'. [ 153.452241][ T7299] netlink: 51 bytes leftover after parsing attributes in process `syz.3.318'. [ 153.462189][ T7307] netlink: 'syz.4.320': attribute type 1 has an invalid length. [ 153.804359][ T7314] netlink: 'syz.4.323': attribute type 13 has an invalid length. [ 153.941914][ T7314] gretap0: refused to change device tx_queue_len [ 153.958296][ T7314] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 153.991492][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 154.738802][ T7349] tipc: Started in network mode [ 154.743929][ T7349] tipc: Node identity 12cd373cc5d7, cluster identity 4711 [ 154.768102][ T7349] tipc: Enabled bearer , priority 0 [ 154.793553][ T7345] syzkaller0: entered promiscuous mode [ 154.819101][ T7345] syzkaller0: entered allmulticast mode [ 154.901360][ T7345] tipc: Resetting bearer [ 154.923520][ T7344] tipc: Resetting bearer [ 154.953310][ T7354] netlink: 'syz.1.333': attribute type 21 has an invalid length. [ 154.963122][ T7344] tipc: Disabling bearer [ 154.998913][ T7355] pim6reg: entered allmulticast mode [ 155.064507][ T7351] pim6reg: left allmulticast mode [ 155.445093][ T7375] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 155.654617][ T7384] x_tables: duplicate underflow at hook 3 [ 155.676936][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 155.855570][ T7389] netlink: 7 bytes leftover after parsing attributes in process `syz.3.340'. [ 155.867183][ T7391] netlink: 7 bytes leftover after parsing attributes in process `syz.3.340'. [ 155.913323][ T7391] netlink: 'syz.3.340': attribute type 21 has an invalid length. [ 155.913335][ T7389] netlink: 'syz.3.340': attribute type 21 has an invalid length. [ 155.913425][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 156.555364][ T7423] tipc: Started in network mode [ 156.560891][ T7423] tipc: Node identity 4ae635149306, cluster identity 4711 [ 156.570780][ T7423] tipc: Enabled bearer , priority 0 [ 156.582515][ T7423] syzkaller0: entered promiscuous mode [ 156.590612][ T7423] syzkaller0: entered allmulticast mode [ 156.606050][ T7423] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.090517][ T7427] tipc: Resetting bearer [ 157.188424][ T7428] delete_channel: no stack [ 157.217677][ T7428] tipc: Resetting bearer [ 157.276360][ T7428] tipc: Disabling bearer [ 157.365331][ T7430] netlink: 'syz.2.350': attribute type 2 has an invalid length. [ 157.678044][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.878301][ T7468] Unknown options in mask b7f2 [ 157.945092][ T7471] __nla_validate_parse: 1 callbacks suppressed [ 157.945113][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.362'. [ 158.543451][ T7500] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 158.601321][ T7500] nbd: error processing sock list [ 158.910594][ T7513] syzkaller1: entered promiscuous mode [ 158.916584][ T7513] syzkaller1: entered allmulticast mode [ 158.922291][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 159.004000][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.369'. [ 159.610383][ T7522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.759053][ T7522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.043640][ T7522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.282131][ T7522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.301749][ T7556] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.623734][ T6184] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.792177][ T6184] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.870162][ T3455] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.986863][ T384] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.257021][ T7583] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.385986][ T7578] pim6reg1: entered promiscuous mode [ 161.427779][ T7578] pim6reg1: entered allmulticast mode [ 161.721037][ T7574] delete_channel: no stack [ 161.985085][ T7576] bond1: option miimon: invalid value (18446744073709551607) [ 161.992939][ T7576] bond1: option miimon: allowed values 0 - 2147483647 [ 162.007202][ T7576] bond1 (unregistering): Released all slaves [ 162.058377][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 162.227139][ T7618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.382'. [ 162.286393][ T7615] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 162.574902][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 162.689191][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 162.830050][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.397'. [ 162.955550][ T7639] netlink: 364 bytes leftover after parsing attributes in process `syz.1.399'. [ 163.369262][ T7647] netlink: 68 bytes leftover after parsing attributes in process `syz.0.401'. [ 163.478528][ T5901] udevd[5901]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 163.522092][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.531473][ T7655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.578587][ T7647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.401'. [ 163.872952][ T7666] bridge0: entered promiscuous mode [ 163.908493][ T7666] macsec1: entered promiscuous mode [ 163.929828][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 163.944614][ T7666] bridge0: port 3(macsec1) entered blocking state [ 163.952256][ T7666] bridge0: port 3(macsec1) entered disabled state [ 163.963215][ T7666] macsec1: entered allmulticast mode [ 163.970197][ T7666] bridge0: entered allmulticast mode [ 163.985209][ T7666] macsec1: left allmulticast mode [ 163.992377][ T7666] bridge0: left allmulticast mode [ 164.001220][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 164.015283][ T7666] bridge0: left promiscuous mode [ 164.242736][ T7683] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 164.527193][ T7694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.414'. [ 164.713354][ T7704] syzkaller0: entered promiscuous mode [ 164.740626][ T7704] syzkaller0: entered allmulticast mode [ 164.818256][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 164.865083][ T7709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.419'. [ 164.895862][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.419'. [ 165.136294][ T7711] bond0: (slave bond_slave_1): Releasing backup interface [ 165.209830][ T7721] syzkaller0: entered promiscuous mode [ 165.257510][ T7721] syzkaller0: entered allmulticast mode [ 165.311346][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 165.371679][ T7727] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 165.380248][ T7721] tipc: Enabled bearer , priority 0 [ 165.505177][ T7727] bond2: entered promiscuous mode [ 165.588845][ T7727] bond2: entered allmulticast mode [ 165.608727][ T7727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.631668][ T7737] netlink: 'syz.4.423': attribute type 15 has an invalid length. [ 165.649245][ T7741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.789254][ T7720] tipc: Resetting bearer [ 165.950287][ T7720] tipc: Disabling bearer [ 166.476599][ T7763] netlink: 'syz.3.433': attribute type 16 has an invalid length. [ 166.518849][ T7763] netlink: 'syz.3.433': attribute type 3 has an invalid length. [ 166.700063][ T7765] team0 (unregistering): Port device team_slave_0 removed [ 166.852621][ T7765] team0 (unregistering): Port device team_slave_1 removed [ 167.397006][ T31] audit: type=1800 audit(1765063567.360:2): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.443" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 167.432420][ T7807] syz.2.443 (7807) used greatest stack depth: 17880 bytes left [ 167.452178][ T7805] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 167.478385][ T7805] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 167.535366][ T7805] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 167.898299][ T7824] : renamed from bond_slave_0 (while UP) [ 168.065405][ T7833] netlink: 'syz.2.451': attribute type 3 has an invalid length. [ 168.201108][ T7835] __nla_validate_parse: 8 callbacks suppressed [ 168.201131][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 168.246319][ T7835] sit0: Master is either lo or non-ether device [ 168.487275][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.762201][ T7851] netlink: 'syz.4.455': attribute type 2 has an invalid length. [ 168.871335][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.455'. [ 168.915799][ T7851] : entered promiscuous mode [ 170.602107][ T7893] Bluetooth: MGMT ver 1.23 [ 170.644957][ T7892] netlink: 'syz.0.463': attribute type 4 has an invalid length. [ 170.698323][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'. [ 170.773237][ T7897] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 171.093869][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'. [ 171.104037][ T7908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.613066][ T7927] netlink: 44 bytes leftover after parsing attributes in process `syz.1.476'. [ 171.964936][ T7945] tipc: Enabled bearer , priority 10 [ 171.972978][ T7946] netlink: 52 bytes leftover after parsing attributes in process `syz.3.482'. [ 171.977544][ T7945] tipc: Enabling of bearer rejected, already enabled [ 172.000955][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.010197][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.459783][ T7964] bridge2: entered promiscuous mode [ 173.046587][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 173.352265][ T7978] 8021q: VLANs not supported on vcan0 [ 173.369486][ T7978] netlink: 'syz.3.490': attribute type 33 has an invalid length. [ 173.389916][ T7978] netlink: 152 bytes leftover after parsing attributes in process `syz.3.490'. [ 173.422342][ T7978] `: renamed from team0 (while UP) [ 173.547440][ T7988] netlink: 11 bytes leftover after parsing attributes in process `syz.1.492'. [ 173.726793][ T7993] netlink: 64 bytes leftover after parsing attributes in process `syz.2.494'. [ 173.746050][ T5922] IPVS: starting estimator thread 0... [ 173.868468][ T7994] IPVS: using max 27 ests per chain, 64800 per kthread [ 174.089036][ T8001] vlan2: entered allmulticast mode [ 174.090089][ T8003] netlink: 'syz.2.496': attribute type 3 has an invalid length. [ 174.557638][ T8007] can: request_module (can-proto-5) failed. [ 174.825433][ T8027] geneve3: entered promiscuous mode [ 174.875757][ T8028] bridge_slave_1: left allmulticast mode [ 174.891741][ T8028] bridge_slave_1: left promiscuous mode [ 174.907919][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.568422][ T8042] ip6_vti0 speed is unknown, defaulting to 1000 [ 175.634711][ T8042] ip6_vti0 speed is unknown, defaulting to 1000 [ 175.662954][ T8042] ip6_vti0 speed is unknown, defaulting to 1000 [ 176.165167][ T8042] infiniband syz2: set active [ 176.172313][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 176.197915][ T8042] infiniband syz2: added ip6_vti0 [ 176.206702][ T8042] syz2: rxe_create_cq: returned err = -12 [ 176.228245][ T8042] infiniband syz2: Couldn't create ib_mad CQ [ 176.234731][ T8042] infiniband syz2: Couldn't open port 1 [ 176.360654][ T8042] RDS/IB: syz2: added [ 176.365343][ T8042] smc: adding ib device syz2 with port count 1 [ 176.399352][ T8042] smc: ib device syz2 port 1 has no pnetid [ 176.410610][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 176.423649][ T8042] ip6_vti0 speed is unknown, defaulting to 1000 [ 176.538371][ T8056] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 176.556585][ T8056] netlink: 2 bytes leftover after parsing attributes in process `syz.1.512'. [ 176.575052][ T8056] batadv_slave_1: entered promiscuous mode [ 176.590670][ T8056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.611086][ T8056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.664285][ T8056] bridge0: port 3(batadv_slave_1) entered blocking state [ 176.719798][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 176.761567][ T8056] bridge0: port 3(batadv_slave_1) entered disabled state [ 176.812556][ T8056] batadv_slave_1: entered allmulticast mode [ 176.832099][ T8056] bridge0: port 3(batadv_slave_1) entered blocking state [ 176.839461][ T8056] bridge0: port 3(batadv_slave_1) entered forwarding state [ 177.280935][ T8080] netlink: 96 bytes leftover after parsing attributes in process `syz.1.518'. [ 177.338853][ T8042] ip6_vti0 speed is unknown, defaulting to 1000 [ 177.768896][ T8042] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.193896][ T8042] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.598589][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 178.648189][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.524'. [ 178.775418][ T7151] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.786048][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 178.795501][ T8104] svc: failed to register nfsdv3 RPC service (errno 111). [ 178.818332][ T7151] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.832773][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.524'. [ 178.845208][ T7151] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.870039][ T8104] svc: failed to register nfsaclv3 RPC service (errno 111). [ 178.888211][ T7151] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.994628][ T8042] ip6_vti0 speed is unknown, defaulting to 1000 [ 179.392318][ T8121] netlink: 244 bytes leftover after parsing attributes in process `syz.2.529'. [ 179.473087][ T8122] No such timeout policy "syz1" [ 179.781914][ T8130] x_tables: duplicate underflow at hook 1 [ 180.547458][ T8162] netlink: 112 bytes leftover after parsing attributes in process `syz.3.537'. [ 180.589279][ T8161] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.606047][ T8169] netlink: 324 bytes leftover after parsing attributes in process `syz.0.539'. [ 180.788143][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 181.582187][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 181.685687][ T8213] netlink: 'syz.4.544': attribute type 1 has an invalid length. [ 181.891322][ T8213] bond3: entered promiscuous mode [ 181.896926][ T8213] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.414771][ T8224] netlink: 44 bytes leftover after parsing attributes in process `syz.0.551'. [ 182.429122][ T8219] syzkaller0: entered promiscuous mode [ 182.450157][ T8219] syzkaller0: entered allmulticast mode [ 182.537054][ T8219] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 182.571413][ T8219] tipc: Enabled bearer , priority 0 [ 182.595666][ T8218] tipc: Resetting bearer [ 182.667000][ T8218] tipc: Disabling bearer [ 182.724885][ T8228] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 183.108531][ T8243] bpq0: entered promiscuous mode [ 183.146417][ T8235] ip6_vti0 speed is unknown, defaulting to 1000 [ 183.185778][ T8243] bpq0: left promiscuous mode [ 183.882017][ T8273] netlink: 'syz.2.564': attribute type 4 has an invalid length. [ 184.140060][ T8283] netlink: 'syz.3.567': attribute type 12 has an invalid length. [ 184.148282][ T8283] netlink: 'syz.3.567': attribute type 29 has an invalid length. [ 184.156105][ T8283] __nla_validate_parse: 3 callbacks suppressed [ 184.156124][ T8283] netlink: 148 bytes leftover after parsing attributes in process `syz.3.567'. [ 184.173676][ T8283] netlink: 59 bytes leftover after parsing attributes in process `syz.3.567'. [ 184.540408][ T8287] syz.2.566 (8287) used obsolete PPPIOCDETACH ioctl [ 184.644139][ T8296] netlink: 'syz.3.569': attribute type 33 has an invalid length. [ 184.668159][ T8296] netlink: 152 bytes leftover after parsing attributes in process `syz.3.569'. [ 184.795486][ T8296] ip6_vti0 speed is unknown, defaulting to 1000 [ 184.821860][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 184.965786][ T8314] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20002 [ 185.606809][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 186.048451][ T8341] vxcan1: entered allmulticast mode [ 186.623400][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.588'. [ 186.643592][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.588'. [ 186.786014][ T8344] Cannot find set identified by id 1 to match [ 186.831324][ T8371] macvlan0: entered allmulticast mode [ 186.840703][ T8371] veth1_vlan: entered allmulticast mode [ 187.118288][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.269538][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 187.362800][ T8397] sctp: [Deprecated]: syz.2.595 (pid 8397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.362800][ T8397] Use struct sctp_sack_info instead [ 187.587389][ T8405] netlink: 64 bytes leftover after parsing attributes in process `syz.2.596'. [ 187.604268][ T8404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.597'. [ 187.615497][ T8405] block nbd0: not configured, cannot reconfigure [ 187.880099][ T8406] veth1_vlan (unregistering): left allmulticast mode [ 188.536155][ T8429] openvswitch: netlink: Flow key attr not present in new flow. [ 188.541414][ T8427] dummy0: entered promiscuous mode [ 188.567018][ T8427] `: entered promiscuous mode [ 188.572211][ T8427] team_slave_0: entered promiscuous mode [ 188.578426][ T8427] team_slave_1: entered promiscuous mode [ 188.591135][ T8427] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 188.601894][ T8427] hsr1: Slave B (`) is not up; please bring it up to get a fully working HSR network [ 188.869597][ T8444] tipc: Enabled bearer , priority 10 [ 189.227208][ T8449] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 189.261745][ T8449] __nla_validate_parse: 4 callbacks suppressed [ 189.261765][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.611'. [ 189.739189][ T8470] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.784075][ T8470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'. [ 189.810046][ T8470] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 189.955497][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.620'. [ 189.985750][ T8475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.064527][ T5982] tipc: Node number set to 324754387 [ 190.126748][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 190.161166][ T8475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.286427][ T8475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.396850][ T8475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.514944][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.575271][ T1164] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.605956][ T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.634858][ T8503] sit1: entered promiscuous mode [ 190.658748][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.012821][ T8518] syzkaller0: entered promiscuous mode [ 191.058554][ T8518] syzkaller0: entered allmulticast mode [ 191.105462][ T8526] tipc: Enabled bearer , priority 0 [ 191.231148][ T8534] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 191.306558][ T8534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.352474][ T8536] bond2: (slave ip6gretap1): making interface the new active one [ 191.420785][ T8536] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 191.430742][ T8517] tipc: Resetting bearer [ 191.466306][ T8517] tipc: Disabling bearer [ 191.486966][ T8534] erspan0: entered allmulticast mode [ 191.505477][ T8534] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 191.532430][ T8536] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 191.815883][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 191.856314][ T8558] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.066034][ T8566] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.128992][ T8564] vlan0: entered promiscuous mode [ 192.146629][ T8574] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 192.190436][ T8574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.297217][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.640'. [ 192.351034][ T8584] netlink: 277 bytes leftover after parsing attributes in process `syz.2.641'. [ 192.485080][ T8578] bridge3: entered allmulticast mode [ 192.787689][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 192.869096][ T8609] netlink: 68 bytes leftover after parsing attributes in process `syz.2.646'. [ 193.162478][ T8619] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 193.248749][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 193.276718][ T8628] netlink: 'syz.1.651': attribute type 11 has an invalid length. [ 193.498720][ T8636] sctp: [Deprecated]: syz.2.654 (pid 8636) Use of int in max_burst socket option. [ 193.498720][ T8636] Use struct sctp_assoc_value instead [ 193.865671][ T8656] bond1: option arp_validate: invalid value (18446744073491447809) [ 193.877176][ T8656] bond1 (unregistering): Released all slaves [ 194.002555][ T8652] ip6_vti0 speed is unknown, defaulting to 1000 [ 195.867733][ T8747] tipc: Enabled bearer , priority 0 [ 195.908225][ T8737] syzkaller0: entered promiscuous mode [ 195.918559][ T8737] syzkaller0: entered allmulticast mode [ 196.145004][ T8737] tipc: Resetting bearer [ 196.197470][ T8735] tipc: Resetting bearer [ 196.255233][ T8735] tipc: Disabling bearer [ 196.748913][ T8779] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20004 [ 197.091166][ T8795] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.100337][ T8791] IPVS: Unknown mcast interface: vcan0 [ 198.117259][ T8836] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.140292][ T8833] __nla_validate_parse: 4 callbacks suppressed [ 198.140312][ T8833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.694'. [ 198.282300][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 198.827789][ T8857] xfrm0 speed is unknown, defaulting to 1000 [ 198.848916][ T8857] xfrm0 speed is unknown, defaulting to 1000 [ 198.912434][ T8857] xfrm0 speed is unknown, defaulting to 1000 [ 199.041006][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.702'. [ 199.070460][ T8883] syzkaller0: entered promiscuous mode [ 199.076864][ T8883] syzkaller0: entered allmulticast mode [ 199.921955][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 199.936867][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.082492][ T8917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.711'. [ 200.140791][ T8857] infiniband syz1: set active [ 200.145741][ T5981] xfrm0 speed is unknown, defaulting to 1000 [ 200.168934][ T8857] infiniband syz1: added xfrm0 [ 200.209811][ T8857] syz1: rxe_create_cq: returned err = -12 [ 200.215665][ T8857] infiniband syz1: Couldn't create ib_mad CQ [ 200.243869][ T8857] infiniband syz1: Couldn't open port 1 [ 200.383579][ T8857] RDS/IB: syz1: added [ 200.392032][ T8857] smc: adding ib device syz1 with port count 1 [ 200.426205][ T8857] smc: ib device syz1 port 1 has no pnetid [ 200.434010][ T5909] xfrm0 speed is unknown, defaulting to 1000 [ 200.444144][ T8857] xfrm0 speed is unknown, defaulting to 1000 [ 200.577398][ T8940] netlink: 'syz.2.717': attribute type 1 has an invalid length. [ 200.652739][ T8940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.676833][ T8940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'. [ 200.825655][ T8940] bond3: entered promiscuous mode [ 200.848440][ T8940] bond3: entered allmulticast mode [ 201.085664][ T8948] netlink: 260 bytes leftover after parsing attributes in process `syz.1.719'. [ 201.202953][ T8943] bond3 (unregistering): Released all slaves [ 201.231640][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.721'. [ 201.238357][ T8857] xfrm0 speed is unknown, defaulting to 1000 [ 201.332085][ T8954] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 201.358187][ T8954] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 201.646421][ T8964] Bluetooth: MGMT ver 1.23 [ 201.696736][ T8970] ip6_vti0 speed is unknown, defaulting to 1000 [ 201.929471][ T8857] xfrm0 speed is unknown, defaulting to 1000 [ 202.501148][ T8989] netlink: 128 bytes leftover after parsing attributes in process `syz.3.729'. [ 202.650070][ T8970] xfrm0 speed is unknown, defaulting to 1000 [ 203.023473][ T8857] xfrm0 speed is unknown, defaulting to 1000 [ 203.499501][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 203.511683][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 203.534600][ T8857] xfrm0 speed is unknown, defaulting to 1000 [ 203.973982][ T9037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.737'. [ 204.191914][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 204.233878][ T9046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 204.269869][ T9046] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 204.326414][ T9050] netlink: 68 bytes leftover after parsing attributes in process `syz.3.744'. [ 204.345493][ T9046] erspan1: entered allmulticast mode [ 204.442404][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 204.559573][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.745'. [ 204.628656][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 204.894419][ T9066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.747'. [ 204.970905][ T9073] xt_connbytes: Forcing CT accounting to be enabled [ 204.991355][ T9075] xt_hashlimit: invalid rate [ 205.210804][ T9079] syzkaller1: entered promiscuous mode [ 205.237678][ T9079] syzkaller1: entered allmulticast mode [ 205.668631][ T9101] veth4: entered allmulticast mode [ 205.938489][ T9117] openvswitch: netlink: Flow key attribute not present in set flow. [ 206.373395][ T9135] dvmrp0: entered allmulticast mode [ 206.901796][ T9162] tipc: Enabled bearer , priority 0 [ 206.939863][ T9164] syzkaller0: entered promiscuous mode [ 206.948622][ T9164] syzkaller0: entered allmulticast mode [ 206.968176][ T9166] syzkaller0: entered promiscuous mode [ 206.973930][ T9166] syzkaller0: entered allmulticast mode [ 206.983587][ T9166] 0: reclassify loop, rule prio 0, protocol 800 [ 207.105235][ T9175] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 207.183727][ T9165] tipc: Resetting bearer [ 207.223308][ T9165] tipc: Disabling bearer [ 207.260403][ T9176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.321856][ T9177] veth7: entered promiscuous mode [ 207.360589][ T9177] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 207.497733][ T9182] x_tables: duplicate underflow at hook 3 [ 207.533444][ T9182] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.583088][ T9184] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 0, id = 0 [ 207.833603][ T9193] netlink: 'syz.0.778': attribute type 13 has an invalid length. [ 207.983696][ T9193] gretap0: refused to change device tx_queue_len [ 208.023317][ T9193] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 208.058225][ T9182] xfrm0 speed is unknown, defaulting to 1000 [ 208.796839][ T9218] ipt_REJECT: TCP_RESET invalid for non-tcp [ 209.079349][ T9224] gretap1: entered promiscuous mode [ 209.449460][ T9241] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 209.467753][ T9228] syzkaller1: entered promiscuous mode [ 209.499588][ T9228] syzkaller1: entered allmulticast mode [ 209.586500][ T9248] __nla_validate_parse: 6 callbacks suppressed [ 209.586520][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.790'. [ 209.638294][ T9248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.790'. [ 209.707468][ T9248] ip6gretap1: entered allmulticast mode [ 210.042800][ T9264] sctp: [Deprecated]: syz.1.793 (pid 9264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.042800][ T9264] Use struct sctp_sack_info instead [ 211.222260][ T9299] siw: device registration error -23 [ 211.255951][ T9296] bond4: entered promiscuous mode [ 211.270235][ T9296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.523511][ T9309] veth1_to_batadv: entered promiscuous mode [ 211.795799][ T9321] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 211.874643][ T9314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.031776][ T9321] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.102018][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.811'. [ 212.115287][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 212.119717][ T9322] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 212.135966][ T9322] bond3: (slave batadv1): making interface the new active one [ 212.145826][ T9322] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 212.165295][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.811'. [ 212.227520][ T9314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.270795][ T9335] netlink: 56 bytes leftover after parsing attributes in process `syz.4.812'. [ 212.281631][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 212.300301][ T9336] netlink: 48 bytes leftover after parsing attributes in process `syz.4.812'. [ 212.312482][ T9335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.812'. [ 212.414129][ T9321] bond3 (unregistering): (slave batadv1): Releasing active interface [ 212.429204][ T9321] bond3 (unregistering): Released all slaves [ 212.500756][ T9314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.656836][ T9340] netlink: 'syz.2.814': attribute type 298 has an invalid length. [ 212.675008][ T9314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.751318][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 213.001743][ T9338] batadv_slave_0: entered promiscuous mode [ 213.089869][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.189741][ T9337] batadv_slave_0: left promiscuous mode [ 213.439863][ T1164] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.532950][ T1164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.623033][ T1164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.639560][ T9366] svc: failed to register nfsdv3 RPC service (errno 111). [ 213.660970][ T9366] svc: failed to register nfsaclv3 RPC service (errno 111). [ 213.938169][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.990438][ T9384] syzkaller0: entered promiscuous mode [ 213.996747][ T9384] syzkaller0: entered allmulticast mode [ 214.175844][ T9375] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.201524][ T9390] tipc: Enabled bearer , priority 0 [ 214.239032][ T9390] syzkaller0: entered promiscuous mode [ 214.248938][ T9390] syzkaller0: entered allmulticast mode [ 214.327554][ T9390] tipc: Resetting bearer [ 214.351092][ T9389] tipc: Resetting bearer [ 214.444274][ T9389] tipc: Disabling bearer [ 214.804848][ T9428] __nla_validate_parse: 5 callbacks suppressed [ 214.804866][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 214.842266][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 214.869091][ T9432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.200179][ T9375] xfrm0 speed is unknown, defaulting to 1000 [ 215.474478][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 215.826183][ T9461] bond1: Unable to set down delay as MII monitoring is disabled [ 215.862889][ T9461] bond1 (unregistering): Released all slaves [ 216.671896][ T9506] netlink: 'syz.4.852': attribute type 14 has an invalid length. [ 217.316565][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'. [ 217.351960][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'. [ 217.570192][ T9539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 217.659087][ T9542] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 218.096604][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.105670][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.293708][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 218.392754][ T9560] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 218.694071][ T9560] bond1: entered promiscuous mode [ 218.724918][ T9560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.090730][ T9578] netlink: 'syz.1.872': attribute type 3 has an invalid length. [ 219.103542][ T9581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.873'. [ 219.120286][ T9578] netlink: 64 bytes leftover after parsing attributes in process `syz.1.872'. [ 219.145097][ T9578] block nbd0: not configured, cannot reconfigure [ 219.274848][ T9578] netlink: 14 bytes leftover after parsing attributes in process `syz.1.872'. [ 219.821289][ T9593] netlink: 36 bytes leftover after parsing attributes in process `syz.4.876'. [ 220.165478][ T9616] ip6tnl2: entered promiscuous mode [ 220.562323][ T9633] xt_hashlimit: overflow, try lower: 3/0 [ 220.659514][ T9629] netlink: set zone limit has 4 unknown bytes [ 220.761947][ T9639] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 220.840034][ T9645] bond1: entered promiscuous mode [ 220.858005][ T9645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.047415][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 221.200514][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'. [ 221.911613][ T9713] netlink: 136 bytes leftover after parsing attributes in process `syz.1.902'. [ 221.990931][ T9715] netlink: 'syz.2.905': attribute type 39 has an invalid length. [ 221.999761][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 222.075395][ T9719] netlink: 'syz.3.907': attribute type 3 has an invalid length. [ 222.128953][ T9719] syz_tun: left allmulticast mode [ 222.188646][ T9725] siw: device registration error -23 [ 222.209779][ T9725] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.219456][ T9725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.227444][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.234889][ T9725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.324549][ T9725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.332830][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 222.409110][ T9728] : renamed from vlan1 (while UP) [ 222.681393][ T9740] netlink: 'syz.0.912': attribute type 11 has an invalid length. [ 222.699697][ T9740] netlink: 'syz.0.912': attribute type 11 has an invalid length. [ 222.719932][ T9740] netlink: 224 bytes leftover after parsing attributes in process `syz.0.912'. [ 222.874852][ T9736] bridge7: entered promiscuous mode [ 222.909631][ T9736] bridge7: entered allmulticast mode [ 222.918550][ T9740] netlink: 'syz.0.912': attribute type 33 has an invalid length. [ 222.940876][ T9740] netlink: 152 bytes leftover after parsing attributes in process `syz.0.912'. [ 224.030077][ T9797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.923'. [ 224.096363][ T9794] ip6_vti0 speed is unknown, defaulting to 1000 [ 224.437366][ T9810] xt_hashlimit: size too large, truncated to 1048576 [ 224.449131][ T5982] IPVS: starting estimator thread 0... [ 224.487437][ T9810] xt_hashlimit: max too large, truncated to 1048576 [ 224.557946][ T9813] IPVS: using max 27 ests per chain, 64800 per kthread [ 224.595490][ T9815] bridge4: entered promiscuous mode [ 224.610338][ T9815] bridge4: entered allmulticast mode [ 224.672544][ T9794] xfrm0 speed is unknown, defaulting to 1000 [ 225.190320][ T9832] netlink: 76 bytes leftover after parsing attributes in process `syz.1.934'. [ 225.315819][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 225.434929][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 225.452406][ T9839] netlink: 'syz.3.936': attribute type 83 has an invalid length. [ 226.048279][ T9858] netlink: 'syz.1.940': attribute type 13 has an invalid length. [ 226.676379][ T9858] bridge0: port 3(batadv_slave_1) entered disabled state [ 226.683897][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.692449][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.162059][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.601087][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 227.603820][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 227.607552][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 227.843645][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 227.868081][ T9868] tipc: Enabling of bearer rejected, failed to enable media [ 227.912312][ T6256] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.952609][ T6256] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.028751][ T6256] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.069227][ T6256] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.111347][ T6256] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.139681][ T6256] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.152836][ T9892] tipc: Enabled bearer , priority 0 [ 228.166820][ T9895] netlink: 64 bytes leftover after parsing attributes in process `syz.3.947'. [ 228.186739][ T6256] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.198517][ T6256] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.210111][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'. [ 228.231519][ T9892] syzkaller0: entered promiscuous mode [ 228.237337][ T9892] syzkaller0: entered allmulticast mode [ 228.256090][ T9899] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 228.271221][ T9892] tipc: Resetting bearer [ 228.286223][ T9899] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 228.301535][ T9890] tipc: Resetting bearer [ 228.338094][ T9899] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 228.351957][ T9890] tipc: Disabling bearer [ 228.474148][ T9910] netlink: 52 bytes leftover after parsing attributes in process `syz.0.950'. [ 228.566269][ T9902] syzkaller0: entered promiscuous mode [ 228.599011][ T9902] syzkaller0: entered allmulticast mode [ 228.759411][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 228.768921][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 228.827382][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 228.992935][ T9942] tipc: Enabled bearer , priority 0 [ 229.001132][ T9942] syzkaller0: entered promiscuous mode [ 229.006925][ T9942] syzkaller0: entered allmulticast mode [ 229.101370][ T9943] tipc: Resetting bearer [ 230.657697][ T9940] tipc: Resetting bearer [ 230.675273][ T9940] tipc: Disabling bearer [ 230.739124][ T5902] tipc: Node number set to 3608819516 [ 230.924134][ T9971] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 231.051263][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 231.075978][ T9971] tipc: Enabled bearer , priority 0 [ 231.098704][ T9979] syzkaller0: entered promiscuous mode [ 231.128187][ T9979] syzkaller0: entered allmulticast mode [ 231.146954][ T9979] tipc: Resetting bearer [ 231.152956][ T9979] syzkaller0: tun_net_xmit 90 [ 231.239656][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.969'. [ 231.288203][ C0] syzkaller0: tun_net_xmit 90 [ 231.290734][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 231.308628][T10003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.969'. [ 231.370188][ T9994] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 231.416326][ T9994] bond3 (unregistering): Released all slaves [ 231.427964][ C0] syzkaller0: tun_net_xmit 90 [ 231.488925][T10002] bridge0: Device is already in use. [ 231.498938][T10003] bridge0: Device is already in use. [ 231.577939][ C0] syzkaller0: tun_net_xmit 90 [ 231.642656][ T9970] tipc: Resetting bearer [ 231.676415][ T9970] tipc: Disabling bearer [ 232.171348][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 232.187649][T10025] netlink: 'syz.4.974': attribute type 8 has an invalid length. [ 232.219656][T10038] netlink: 96 bytes leftover after parsing attributes in process `syz.0.979'. [ 232.269113][T10020] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.287041][T10036] macvtap1: entered promiscuous mode [ 232.303165][T10036] macvtap1: entered allmulticast mode [ 232.338800][T10036] bond_slave_0: entered promiscuous mode [ 232.375966][T10036] bond0: entered allmulticast mode [ 232.411804][T10036] bond_slave_0: entered allmulticast mode [ 232.488026][T10036] bond0: entered promiscuous mode [ 232.515261][T10036] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 232.606224][T10036] team0: Device macvtap1 failed to register rx_handler [ 232.638389][T10036] bond0: left allmulticast mode [ 232.655585][T10036] bond_slave_0: left allmulticast mode [ 232.676048][T10036] bond0: left promiscuous mode [ 232.688906][T10036] bond_slave_0: left promiscuous mode [ 232.780014][T10020] xfrm0 speed is unknown, defaulting to 1000 [ 232.800329][T10025] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.865609][T10055] netlink: 96 bytes leftover after parsing attributes in process `syz.3.982'. [ 232.929846][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 232.993638][T10055] vlan2: entered allmulticast mode [ 232.999629][T10055] gretap0: entered allmulticast mode [ 233.200170][T10072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.984'. [ 233.288392][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 233.721032][T10066] ip6_vti0 speed is unknown, defaulting to 1000 [ 233.765379][T10025] xfrm0 speed is unknown, defaulting to 1000 [ 234.381089][T10113] bond3 (unregistering): Released all slaves [ 234.413379][T10116] netlink: 'syz.3.996': attribute type 3 has an invalid length. [ 234.422373][T10105] ip6_vti0 speed is unknown, defaulting to 1000 [ 234.424424][T10066] xfrm0 speed is unknown, defaulting to 1000 [ 234.691188][T10124] netlink: 'syz.2.998': attribute type 49 has an invalid length. [ 235.039198][T10103] ip6_vti0 speed is unknown, defaulting to 1000 [ 235.283131][T10150] tipc: Enabled bearer , priority 0 [ 235.298640][T10150] syzkaller0: entered promiscuous mode [ 235.304865][T10150] syzkaller0: entered allmulticast mode [ 235.456682][T10154] tipc: Resetting bearer [ 235.494584][T10149] tipc: Resetting bearer [ 235.531468][T10149] tipc: Disabling bearer [ 235.578146][T10105] xfrm0 speed is unknown, defaulting to 1000 [ 235.871559][T10166] tipc: Enabled bearer , priority 0 [ 235.904160][T10166] tipc: Resetting bearer [ 235.929083][T10165] tipc: Disabling bearer [ 236.183440][T10174] __nla_validate_parse: 5 callbacks suppressed [ 236.183462][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 236.263131][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 236.294827][T10103] xfrm0 speed is unknown, defaulting to 1000 [ 236.461107][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 236.487018][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 236.514705][ T3481] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.723748][ T3481] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.748526][ T3481] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.869285][ T3481] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.995944][T10181] ip6_vti0 speed is unknown, defaulting to 1000 [ 237.485202][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 237.508407][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 237.526279][T10202] netlink: 'syz.2.1018': attribute type 13 has an invalid length. [ 237.550702][T10202] netlink: 'syz.2.1018': attribute type 11 has an invalid length. [ 237.555045][T10205] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1019'. [ 237.614931][T10203] ip6tnl2: entered allmulticast mode [ 237.770192][T10181] xfrm0 speed is unknown, defaulting to 1000 [ 238.439753][T10224] tipc: Enabled bearer , priority 0 [ 238.465416][T10227] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 238.588662][T10224] syzkaller0: entered promiscuous mode [ 238.604841][T10224] syzkaller0: entered allmulticast mode [ 238.745581][T10227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.771161][T10224] tipc: Resetting bearer [ 238.792037][T10239] pimreg: entered allmulticast mode [ 238.799222][T10240] pimreg: left allmulticast mode [ 238.842822][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 239.069013][T10223] tipc: Resetting bearer [ 239.104113][T10223] tipc: Disabling bearer [ 240.081135][T10273] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 240.498236][T10286] netlink: 'syz.3.1039': attribute type 1 has an invalid length. [ 240.546939][T10286] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 240.760850][T10310] netlink: 'syz.4.1044': attribute type 6 has an invalid length. [ 240.779128][T10307] netlink: 'syz.0.1046': attribute type 1 has an invalid length. [ 240.853416][T10307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.895711][T10307] vlan1: entered allmulticast mode [ 240.916282][T10307] bond2: entered allmulticast mode [ 240.989226][T10307] bond2: (slave gretap1): making interface the new active one [ 240.997997][T10307] gretap1: entered allmulticast mode [ 241.006408][T10307] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 241.045164][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'. [ 241.055042][T10324] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.064606][T10321] hsr_slave_0: left promiscuous mode [ 241.088241][T10321] hsr_slave_1: left promiscuous mode [ 241.172256][T10327] netlink: 4308 bytes leftover after parsing attributes in process `syz.1.1048'. [ 241.256729][T10337] netlink: 'syz.3.1049': attribute type 10 has an invalid length. [ 241.356556][T10328] tipc: Resetting bearer [ 241.444344][T10342] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1050'. [ 241.454413][T10342] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1050'. [ 241.477089][T10337] bridge0: port 3(macsec0) entered blocking state [ 241.555671][T10337] bridge0: port 3(macsec0) entered disabled state [ 241.736060][T10337] macsec0: entered allmulticast mode [ 241.770574][T10337] veth1_macvtap: entered allmulticast mode [ 241.796697][T10337] macsec0: entered promiscuous mode [ 241.812895][T10337] bridge0: port 3(macsec0) entered blocking state [ 241.819634][T10337] bridge0: port 3(macsec0) entered forwarding state [ 241.879801][T10342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1050'. [ 242.043768][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1055'. [ 242.074883][T10324] xfrm0 speed is unknown, defaulting to 1000 [ 242.243256][T10367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 242.482819][T10377] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 242.544894][T10383] netlink: 'syz.0.1062': attribute type 2 has an invalid length. [ 242.620181][T10383] : entered promiscuous mode [ 243.211301][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 243.492124][T10425] bond3: (slave xfrm0): Device is not bonding slave [ 243.528005][T10425] bond3: option active_slave: invalid value (xfrm0) [ 243.546228][T10425] bond3 (unregistering): Released all slaves [ 243.989296][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 244.001209][T10450] tipc: Enabled bearer , priority 0 [ 244.051712][T10450] syzkaller0: entered promiscuous mode [ 244.061314][T10450] syzkaller0: entered allmulticast mode [ 244.128762][T10450] tipc: Resetting bearer [ 244.249537][T10457] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1077'. [ 244.281524][T10450] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1077'. [ 244.308755][T10471] x_tables: duplicate underflow at hook 3 [ 244.318795][T10447] tipc: Resetting bearer [ 244.374775][T10447] tipc: Disabling bearer [ 244.432649][T10478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1086'. [ 244.465179][T10478] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 244.523694][T10478] x_tables: duplicate underflow at hook 3 [ 244.566282][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.594106][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.608204][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.618653][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.625212][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.649113][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.675907][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.698324][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.726270][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.734264][T10483] ip6t_srh: unknown srh match flags 4000 [ 244.887227][T10500] netem: change failed [ 244.944724][T10499] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.277335][T10499] xfrm0 speed is unknown, defaulting to 1000 [ 245.308512][T10504] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.339850][T10517] delete_channel: no stack [ 245.948541][T10504] xfrm0 speed is unknown, defaulting to 1000 [ 245.954841][ T31] audit: type=1800 audit(1765063645.910:3): pid=10537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1102" name="memory.events" dev="tmpfs" ino=1176 res=0 errno=0 [ 246.037980][ T31] audit: type=1804 audit(1765063645.920:4): pid=10537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1102" name="memory.events" dev="tmpfs" ino=1176 res=1 errno=0 [ 246.496180][T10559] netlink: 'syz.1.1110': attribute type 12 has an invalid length. [ 246.518768][T10559] netlink: 'syz.1.1110': attribute type 29 has an invalid length. [ 246.549402][T10560] __nla_validate_parse: 4 callbacks suppressed [ 246.549422][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 246.821809][T10559] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 246.861020][T10559] netlink: 'syz.1.1110': attribute type 2 has an invalid length. [ 246.900371][T10559] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 246.933077][T10559] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1110'. [ 247.349637][T10571] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1112'. [ 247.408204][T10575] tipc: Enabled bearer , priority 0 [ 247.439325][T10574] syzkaller0: entered promiscuous mode [ 247.444959][T10574] syzkaller0: entered allmulticast mode [ 247.688207][T10572] tipc: Resetting bearer [ 247.789457][T10572] tipc: Disabling bearer [ 247.991924][T10592] veth0_virt_wifi: renamed from veth0_vlan [ 248.126141][T10596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1119'. [ 248.428375][T10613] IPv6: Can't replace route, no match found [ 248.746183][T10623] netlink: 'syz.3.1124': attribute type 12 has an invalid length. [ 248.787209][T10623] netlink: 'syz.3.1124': attribute type 12 has an invalid length. [ 248.990112][T10638] FAULT_INJECTION: forcing a failure. [ 248.990112][T10638] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 249.048612][T10638] CPU: 0 UID: 0 PID: 10638 Comm: syz.3.1128 Not tainted syzkaller #0 PREEMPT(full) [ 249.048657][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.048678][T10638] Call Trace: [ 249.048690][T10638] [ 249.048699][T10638] dump_stack_lvl+0x189/0x250 [ 249.048732][T10638] ? __pfx____ratelimit+0x10/0x10 [ 249.048755][T10638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.048775][T10638] ? __pfx__printk+0x10/0x10 [ 249.048801][T10638] ? __might_fault+0xb0/0x130 [ 249.048838][T10638] should_fail_ex+0x414/0x560 [ 249.048869][T10638] _copy_from_iter+0x1cd/0x1630 [ 249.048909][T10638] ? __pfx__copy_from_iter+0x10/0x10 [ 249.048935][T10638] ? __build_skb_around+0x22d/0x3c0 [ 249.048970][T10638] ? netlink_sendmsg+0x642/0xb30 [ 249.048989][T10638] ? skb_put+0x11b/0x210 [ 249.049022][T10638] netlink_sendmsg+0x6b2/0xb30 [ 249.049053][T10638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.049078][T10638] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.049101][T10638] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.049129][T10638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.049151][T10638] __sock_sendmsg+0x21c/0x270 [ 249.049179][T10638] __sys_sendto+0x3bd/0x520 [ 249.049210][T10638] ? __pfx___sys_sendto+0x10/0x10 [ 249.049235][T10638] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 249.049277][T10638] ? __fget_files+0x3a0/0x420 [ 249.049308][T10638] ? ksys_write+0x22a/0x250 [ 249.049336][T10638] ? __pfx_ksys_write+0x10/0x10 [ 249.049365][T10638] __x64_sys_sendto+0xde/0x100 [ 249.049397][T10638] do_syscall_64+0xfa/0xf80 [ 249.049425][T10638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.049445][T10638] ? clear_bhb_loop+0x60/0xb0 [ 249.049470][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.049506][T10638] RIP: 0033:0x7fd8fa78f749 [ 249.049531][T10638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.049548][T10638] RSP: 002b:00007fd8f89f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 249.049578][T10638] RAX: ffffffffffffffda RBX: 00007fd8fa9e5fa0 RCX: 00007fd8fa78f749 [ 249.049593][T10638] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 249.049610][T10638] RBP: 00007fd8f89f6090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 249.049624][T10638] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 249.049636][T10638] R13: 00007fd8fa9e6038 R14: 00007fd8fa9e5fa0 R15: 00007fff24911fc8 [ 249.049670][T10638] [ 249.926816][ T5813] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.965554][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 250.304918][T10684] geneve2: entered promiscuous mode [ 250.351251][T10693] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1140'. [ 250.646409][T10702] FAULT_INJECTION: forcing a failure. [ 250.646409][T10702] name failslab, interval 1, probability 0, space 0, times 0 [ 250.662290][T10702] CPU: 1 UID: 0 PID: 10702 Comm: syz.0.1144 Not tainted syzkaller #0 PREEMPT(full) [ 250.662319][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.662331][T10702] Call Trace: [ 250.662346][T10702] [ 250.662355][T10702] dump_stack_lvl+0x189/0x250 [ 250.662384][T10702] ? __pfx____ratelimit+0x10/0x10 [ 250.662410][T10702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.662432][T10702] ? __pfx__printk+0x10/0x10 [ 250.662463][T10702] ? __pfx___up_read+0x10/0x10 [ 250.662500][T10702] should_fail_ex+0x414/0x560 [ 250.662530][T10702] should_failslab+0xa8/0x100 [ 250.662561][T10702] kmem_cache_alloc_noprof+0x74/0x6f0 [ 250.662586][T10702] ? skb_clone+0x212/0x3a0 [ 250.662612][T10702] skb_clone+0x212/0x3a0 [ 250.662637][T10702] __netlink_deliver_tap+0x404/0x850 [ 250.662672][T10702] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.662694][T10702] netlink_deliver_tap+0x19c/0x1b0 [ 250.662734][T10702] netlink_unicast+0x7fa/0x9e0 [ 250.662774][T10702] ? __pfx_netlink_unicast+0x10/0x10 [ 250.662807][T10702] ? netlink_sendmsg+0x642/0xb30 [ 250.662825][T10702] ? skb_put+0x11b/0x210 [ 250.662858][T10702] netlink_sendmsg+0x805/0xb30 [ 250.662889][T10702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.662914][T10702] ? aa_sock_msg_perm+0xf1/0x1b0 [ 250.662937][T10702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.662965][T10702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.662986][T10702] __sock_sendmsg+0x21c/0x270 [ 250.663014][T10702] __sys_sendto+0x3bd/0x520 [ 250.663045][T10702] ? __pfx___sys_sendto+0x10/0x10 [ 250.663071][T10702] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 250.663114][T10702] ? __fget_files+0x3a0/0x420 [ 250.663144][T10702] ? ksys_write+0x22a/0x250 [ 250.663173][T10702] ? __pfx_ksys_write+0x10/0x10 [ 250.663208][T10702] __x64_sys_sendto+0xde/0x100 [ 250.663240][T10702] do_syscall_64+0xfa/0xf80 [ 250.663267][T10702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.663286][T10702] ? clear_bhb_loop+0x60/0xb0 [ 250.663311][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.663331][T10702] RIP: 0033:0x7f21d858f749 [ 250.663356][T10702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.663372][T10702] RSP: 002b:00007f21d93eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 250.663393][T10702] RAX: ffffffffffffffda RBX: 00007f21d87e5fa0 RCX: 00007f21d858f749 [ 250.663408][T10702] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 250.663420][T10702] RBP: 00007f21d93eb090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 250.663434][T10702] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 250.663445][T10702] R13: 00007f21d87e6038 R14: 00007f21d87e5fa0 R15: 00007fffd79d8738 [ 250.663479][T10702] [ 252.129127][T10759] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 252.294320][T10759] bond2 (unregistering): Released all slaves [ 253.295941][T10793] FAULT_INJECTION: forcing a failure. [ 253.295941][T10793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.318553][T10793] CPU: 0 UID: 0 PID: 10793 Comm: syz.1.1158 Not tainted syzkaller #0 PREEMPT(full) [ 253.318583][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.318596][T10793] Call Trace: [ 253.318604][T10793] [ 253.318612][T10793] dump_stack_lvl+0x189/0x250 [ 253.318641][T10793] ? __pfx____ratelimit+0x10/0x10 [ 253.318667][T10793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.318689][T10793] ? __pfx__printk+0x10/0x10 [ 253.318717][T10793] ? __might_fault+0xb0/0x130 [ 253.318756][T10793] should_fail_ex+0x414/0x560 [ 253.318785][T10793] _copy_from_user+0x2d/0xb0 [ 253.318815][T10793] kstrtouint_from_user+0xc4/0x170 [ 253.318851][T10793] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 253.318902][T10793] proc_fail_nth_write+0x88/0x200 [ 253.318930][T10793] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.318963][T10793] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.318991][T10793] vfs_write+0x27e/0xb30 [ 253.319027][T10793] ? __pfx_vfs_write+0x10/0x10 [ 253.319055][T10793] ? __fget_files+0x2a/0x420 [ 253.319078][T10793] ? __fget_files+0x3a0/0x420 [ 253.319095][T10793] ? __fget_files+0x2a/0x420 [ 253.319123][T10793] ksys_write+0x145/0x250 [ 253.319152][T10793] ? __pfx_ksys_write+0x10/0x10 [ 253.319181][T10793] ? do_syscall_64+0xbe/0xf80 [ 253.319212][T10793] do_syscall_64+0xfa/0xf80 [ 253.319240][T10793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.319260][T10793] ? clear_bhb_loop+0x60/0xb0 [ 253.319284][T10793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.319303][T10793] RIP: 0033:0x7f31a4f8e1ff [ 253.319322][T10793] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 253.319338][T10793] RSP: 002b:00007f31a5e8f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 253.319360][T10793] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f31a4f8e1ff [ 253.319373][T10793] RDX: 0000000000000001 RSI: 00007f31a5e8f0a0 RDI: 0000000000000007 [ 253.319385][T10793] RBP: 00007f31a5e8f090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 253.319399][T10793] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000001 [ 253.319411][T10793] R13: 00007f31a51e6038 R14: 00007f31a51e5fa0 R15: 00007fff83385a88 [ 253.319446][T10793] [ 253.692571][T10802] netlink: 'syz.1.1161': attribute type 4 has an invalid length. [ 253.913247][T10807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.081709][T10813] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 254.250959][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 254.368063][T10813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.374860][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1165'. [ 254.577940][T10812] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1165'. [ 254.798051][T10827] tap0: tun_chr_ioctl cmd 2148553947 [ 254.807463][T10827] tap0: tun_chr_ioctl cmd 2147767521 [ 254.821712][T10828] tipc: Enabled bearer , priority 0 [ 254.830274][T10828] syzkaller0: entered promiscuous mode [ 254.830312][T10827] netlink: 11788 bytes leftover after parsing attributes in process `syz.1.1169'. [ 254.835772][T10828] syzkaller0: entered allmulticast mode [ 254.880751][T10827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.960760][T10839] tipc: Resetting bearer [ 255.137852][T10846] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 255.169724][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 255.297169][T10846] syzkaller0: entered promiscuous mode [ 255.368017][T10846] syzkaller0: entered allmulticast mode [ 255.494314][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 255.948172][T10825] tipc: Resetting bearer [ 255.999303][T10825] tipc: Disabling bearer [ 257.802835][T10887] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.808787][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 257.832159][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 257.842199][T10883] netlink: 'syz.3.1179': attribute type 10 has an invalid length. [ 257.915058][T10894] netlink: 'syz.0.1181': attribute type 10 has an invalid length. [ 257.971876][T10883] syz.3.1179 (10883) used greatest stack depth: 15520 bytes left [ 257.982091][T10895] netlink: 'syz.0.1181': attribute type 10 has an invalid length. [ 258.085773][T10895] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 258.117973][T10897] ip6_vti0 speed is unknown, defaulting to 1000 [ 258.570864][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 259.029575][T10897] xfrm0 speed is unknown, defaulting to 1000 [ 259.079349][T10918] ip6_vti0 speed is unknown, defaulting to 1000 [ 259.522860][T10918] xfrm0 speed is unknown, defaulting to 1000 [ 259.904482][T10929] xt_hashlimit: max too large, truncated to 1048576 [ 260.655178][T10949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 260.848997][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 261.250091][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 261.270841][T10966] openvswitch: netlink: Flow actions attr not present in new flow. [ 261.362022][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 261.372510][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.006462][T10972] erspan0: entered allmulticast mode [ 262.018167][T10972] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1205'. [ 262.086017][T10979] ip6_vti0 speed is unknown, defaulting to 1000 [ 262.475629][T10992] 8021q: VLANs not supported on sit0 [ 262.552829][T10979] xfrm0 speed is unknown, defaulting to 1000 [ 263.393960][T11005] netlink: 'syz.1.1216': attribute type 16 has an invalid length. [ 264.232582][T11022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 264.707603][T11054] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x91 [ 264.819844][T11034] ip6_vti0 speed is unknown, defaulting to 1000 [ 265.095972][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 265.308929][T11069] netlink: 'syz.3.1228': attribute type 1 has an invalid length. [ 265.468100][T11069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.476116][T11081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1228'. [ 265.741766][T11034] xfrm0 speed is unknown, defaulting to 1000 [ 266.211848][T11086] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 266.254735][T11086] bond6 (unregistering): Released all slaves [ 266.450200][T11069] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1228'. [ 266.723378][T11110] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1235'. [ 267.265518][T11130] netlink: 'syz.3.1240': attribute type 29 has an invalid length. [ 267.298815][ T31] audit: type=1804 audit(1765063667.260:5): pid=11130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1240" name="/newroot/257/cgroup.controllers" dev="tmpfs" ino=1334 res=1 errno=0 [ 267.363042][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 267.365699][ T31] audit: type=1800 audit(1765063667.270:6): pid=11130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1240" name="cgroup.controllers" dev="tmpfs" ino=1334 res=0 errno=0 [ 267.480812][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 267.482731][T11142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.704987][T11138] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.145412][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1246'. [ 268.532798][T11144] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.560180][T11138] xfrm0 speed is unknown, defaulting to 1000 [ 268.692067][T11173] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1250'. [ 269.352414][T11175] ip6_vti0 speed is unknown, defaulting to 1000 [ 269.367718][T11144] xfrm0 speed is unknown, defaulting to 1000 [ 269.671646][T11197] batadv1: entered allmulticast mode [ 269.687143][T11197] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 270.135754][T11216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1257'. [ 270.188172][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'. [ 270.269186][T11185] ip6_vti0 speed is unknown, defaulting to 1000 [ 270.297266][T11175] xfrm0 speed is unknown, defaulting to 1000 [ 270.784469][T11232] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1260'. [ 270.984391][T11185] xfrm0 speed is unknown, defaulting to 1000 [ 271.405152][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 271.501755][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 271.762243][T11264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1265'. [ 271.819686][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 271.844539][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 271.905545][T11268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1267'. [ 271.944813][T11268] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1267'. [ 271.958570][T11268] nbd: must specify a device to reconfigure [ 272.134505][T11270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.305745][T11280] netlink: 'syz.4.1272': attribute type 12 has an invalid length. [ 273.381020][T11280] sit0: entered promiscuous mode [ 273.401874][T11280] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1272'. [ 273.947027][T11293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1275'. [ 274.411705][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 274.422609][T11320] ip6_vti0 speed is unknown, defaulting to 1000 [ 274.445396][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 274.689726][T11320] xfrm0 speed is unknown, defaulting to 1000 [ 274.695342][T11323] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.383421][T11355] netlink: 'syz.3.1294': attribute type 8 has an invalid length. [ 275.519213][T11323] xfrm0 speed is unknown, defaulting to 1000 [ 275.532901][T11359] xt_policy: neither incoming nor outgoing policy selected [ 275.738755][T11369] veth0_to_bridge: entered promiscuous mode [ 275.815077][T11369] veth0_to_bridge: left promiscuous mode [ 276.138805][T11383] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 276.270583][T11383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.328629][T11391] bond3: (slave geneve2): making interface the new active one [ 276.339043][T11391] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 276.381977][T11394] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 276.395100][T11394] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 276.426373][T11394] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 276.523908][ T5902] IPVS: starting estimator thread 0... [ 276.534437][T11401] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 276.626753][ T1164] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.648778][T11403] IPVS: using max 28 ests per chain, 67200 per kthread [ 276.701241][ T1164] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.756393][ T6252] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.779873][T11411] sctp: [Deprecated]: syz.4.1310 (pid 11411) Use of int in max_burst socket option. [ 276.779873][T11411] Use struct sctp_assoc_value instead [ 276.795072][ T6252] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 277.037634][T11420] gretap1: entered allmulticast mode [ 277.083970][T11430] __nla_validate_parse: 1 callbacks suppressed [ 277.083993][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1316'. [ 277.297714][T11441] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1317'. [ 277.298357][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1316'. [ 277.494252][T11446] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 277.655296][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 277.946923][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1321'. [ 278.021215][T11464] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.041876][T11464] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 278.635188][T11464] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.651297][T11464] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 278.856512][T11464] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.883376][T11464] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 278.929961][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1330'. [ 278.979786][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1333'. [ 278.993746][T11504] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1333'. [ 279.004608][T11504] tipc: Invalid UDP bearer configuration [ 279.004671][T11504] tipc: Enabling of bearer rejected, failed to enable media [ 279.023098][T11464] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.043264][T11464] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.180536][ T30] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.193355][ T30] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.210109][T11513] vxcan2: entered allmulticast mode [ 279.235333][ T30] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.244455][ T30] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.274697][ T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.282978][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 279.291524][ T30] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.313660][ T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.322387][T11515] block nbd0: Unsupported socket: should be TCP or UNIX. [ 279.330930][ T30] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.414442][T11518] netlink: 'syz.2.1336': attribute type 3 has an invalid length. [ 279.571201][T11517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1332'. [ 279.674456][T11526] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.054700][T11526] xfrm0 speed is unknown, defaulting to 1000 [ 280.587650][T11545] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.919197][T11554] syz.2.1346: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 280.937650][T11545] xfrm0 speed is unknown, defaulting to 1000 [ 281.008112][T11554] CPU: 1 UID: 0 PID: 11554 Comm: syz.2.1346 Not tainted syzkaller #0 PREEMPT(full) [ 281.008142][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.008155][T11554] Call Trace: [ 281.008163][T11554] [ 281.008172][T11554] dump_stack_lvl+0x189/0x250 [ 281.008200][T11554] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 281.008236][T11554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.008257][T11554] ? __pfx__printk+0x10/0x10 [ 281.008285][T11554] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 281.008317][T11554] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 281.008357][T11554] warn_alloc+0x214/0x310 [ 281.008392][T11554] ? __pfx_warn_alloc+0x10/0x10 [ 281.008434][T11554] ? __get_vm_area_node+0x28f/0x300 [ 281.008460][T11554] ? xskq_create+0xbf/0x170 [ 281.008498][T11554] __vmalloc_node_range_noprof+0x690/0x12d0 [ 281.008558][T11554] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.008589][T11554] ? __kasan_kmalloc+0x93/0xb0 [ 281.008624][T11554] vmalloc_user_noprof+0xad/0xf0 [ 281.008651][T11554] ? xskq_create+0xbf/0x170 [ 281.008674][T11554] xskq_create+0xbf/0x170 [ 281.008701][T11554] xsk_init_queue+0xb0/0x110 [ 281.008726][T11554] xsk_setsockopt+0x57b/0x8d0 [ 281.008752][T11554] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.008777][T11554] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.008811][T11554] ? aa_sock_opt_perm+0xff/0x1a0 [ 281.008839][T11554] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 281.008866][T11554] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.008889][T11554] do_sock_setsockopt+0x17c/0x1b0 [ 281.008925][T11554] __x64_sys_setsockopt+0x13f/0x1b0 [ 281.008961][T11554] do_syscall_64+0xfa/0xf80 [ 281.008990][T11554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.009010][T11554] ? clear_bhb_loop+0x60/0xb0 [ 281.009036][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.009055][T11554] RIP: 0033:0x7f365878f749 [ 281.009073][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.009090][T11554] RSP: 002b:00007f36596cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.009111][T11554] RAX: ffffffffffffffda RBX: 00007f36589e5fa0 RCX: 00007f365878f749 [ 281.009126][T11554] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 281.009138][T11554] RBP: 00007f3658813f91 R08: 0000000000000004 R09: 0000000000000000 [ 281.009150][T11554] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 281.009162][T11554] R13: 00007f36589e6038 R14: 00007f36589e5fa0 R15: 00007fffa7cbc668 [ 281.009198][T11554] [ 281.009261][T11554] Mem-Info: [ 281.279233][T11554] active_anon:8751 inactive_anon:0 isolated_anon:0 [ 281.279233][T11554] active_file:3269 inactive_file:39956 isolated_file:0 [ 281.279233][T11554] unevictable:768 dirty:73 writeback:0 [ 281.279233][T11554] slab_reclaimable:11658 slab_unreclaimable:237551 [ 281.279233][T11554] mapped:31508 shmem:2520 pagetables:1263 [ 281.279233][T11554] sec_pagetables:0 bounce:0 [ 281.279233][T11554] kernel_misc_reclaimable:0 [ 281.279233][T11554] free:1178719 free_pcp:13214 free_cma:0 [ 281.325559][T11554] Node 0 active_anon:35004kB inactive_anon:0kB active_file:13076kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126032kB dirty:292kB writeback:0kB shmem:8544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13184kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.407879][T11554] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.478609][T11554] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.551457][T11554] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 281.575838][T11554] Node 0 DMA32 free:804796kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30404kB inactive_anon:0kB active_file:13076kB inactive_file:159620kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:41004kB local_pcp:19160kB free_cma:0kB [ 281.613559][T11554] lowmem_reserve[]: 0 0 0 0 0 [ 281.643519][T11554] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.682250][T11554] lowmem_reserve[]: 0 0 0 0 0 [ 281.687528][T11554] Node 1 Normal free:3895324kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16484kB local_pcp:8384kB free_cma:0kB [ 281.750323][T11554] lowmem_reserve[]: 0 0 0 0 0 [ 281.755763][T11554] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 281.788454][T11554] Node 0 DMA32: 3*4kB (ME) 144*8kB (UM) 309*16kB (UM) 735*32kB (UME) 287*64kB (UME) 113*128kB (UME) 68*256kB (UME) 18*512kB (UME) 5*1024kB (UM) 7*2048kB (UM) 170*4096kB (UM) = 804860kB [ 281.808555][T11554] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 281.825680][T11554] Node 1 Normal: 223*4kB (UM) 48*8kB (UME) 50*16kB (UME) 134*32kB (UME) 27*64kB (UME) 11*128kB (UME) 5*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895324kB [ 281.850499][T11554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.868023][T11554] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.877464][T11554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.884088][T11561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.906147][T11565] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 281.915606][T11566] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 281.923848][T11554] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.943974][T11554] 44610 total pagecache pages [ 281.949821][T11554] 0 pages in swap cache [ 281.954128][T11554] Free swap = 124996kB [ 281.961023][T11554] Total swap = 124996kB [ 281.965523][T11554] 2097051 pages RAM [ 281.976169][T11554] 0 pages HighMem/MovableOnly [ 281.981635][T11554] 424280 pages reserved [ 281.986137][T11554] 0 pages cma reserved [ 282.078113][T11567] bond3 (unregistering): (slave vlan0): Releasing backup interface [ 282.089602][T11567] bond3 (unregistering): Released all slaves [ 282.146711][T11572] pimreg: entered allmulticast mode [ 282.154290][T11572] pimreg: left allmulticast mode [ 282.224886][T11573] __nla_validate_parse: 2 callbacks suppressed [ 282.224907][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 282.247724][T11575] Cannot find del_set index 4 as target [ 282.258929][T11575] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 282.267091][T11575] netlink: 'syz.0.1350': attribute type 2 has an invalid length. [ 282.275379][T11576] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 282.314864][T11575] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 282.347929][T11575] netlink: 'syz.0.1350': attribute type 2 has an invalid length. [ 282.386311][T11576] netlink: 'syz.0.1350': attribute type 2 has an invalid length. [ 282.489563][T11582] netlink: 'syz.2.1352': attribute type 9 has an invalid length. [ 282.602524][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 282.807378][T11597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1355'. [ 283.091745][T11607] netlink: 'syz.3.1358': attribute type 7 has an invalid length. [ 283.111732][T11607] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1358'. [ 283.129498][T11610] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 283.271484][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'. [ 283.348663][T11622] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.388111][T11625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.500929][T11625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.574343][ T24] IPVS: starting estimator thread 0... [ 283.687940][T11638] IPVS: using max 28 ests per chain, 67200 per kthread [ 283.859678][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 283.997470][T11622] xfrm0 speed is unknown, defaulting to 1000 [ 284.372393][T11662] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.443529][T11661] bond4: (slave gretap3): making interface the new active one [ 284.459424][T11661] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 284.556726][T11676] validate_nla: 1 callbacks suppressed [ 284.556746][T11676] netlink: 'syz.4.1375': attribute type 15 has an invalid length. [ 284.598747][T11676] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1375'. [ 284.818457][T11696] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 285.378345][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 285.637524][T11738] netlink: 'syz.0.1394': attribute type 10 has an invalid length. [ 285.645992][T11738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1394'. [ 285.655540][T11738] dummy0: entered promiscuous mode [ 285.729094][T11738] bond0: (slave dummy0): Releasing backup interface [ 285.763355][T11738] bridge0: port 3(dummy0) entered blocking state [ 285.771660][T11738] bridge0: port 3(dummy0) entered disabled state [ 285.779226][T11738] dummy0: entered allmulticast mode [ 285.793404][T11748] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 286.218684][T11770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1402'. [ 286.224568][T11768] Unsupported ieee802154 address type: 0 [ 286.462079][T11793] sctp: [Deprecated]: syz.1.1403 (pid 11793) Use of int in maxseg socket option. [ 286.462079][T11793] Use struct sctp_assoc_value instead [ 287.026690][T11817] netlink: 'syz.3.1411': attribute type 2 has an invalid length. [ 287.157187][T11817] !: entered promiscuous mode [ 287.171041][T11823] syzkaller1: entered promiscuous mode [ 287.176678][T11823] syzkaller1: entered allmulticast mode [ 287.376574][T11823] ipvlan3: entered promiscuous mode [ 287.385671][T11823] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 287.432261][T11837] ip6_vti0 speed is unknown, defaulting to 1000 [ 287.481046][T11844] pim6reg1: entered promiscuous mode [ 287.509163][T11844] pim6reg1: entered allmulticast mode [ 287.868526][T11864] bridge1: entered promiscuous mode [ 287.874144][T11864] bridge1: entered allmulticast mode [ 287.914656][T11843] delete_channel: no stack [ 287.972230][T11837] xfrm0 speed is unknown, defaulting to 1000 [ 288.154443][T11867] syzkaller1: entered promiscuous mode [ 288.168493][T11867] syzkaller1: entered allmulticast mode [ 288.215538][T11880] tipc: Enabled bearer , priority 0 [ 288.224357][T11874] syzkaller0: entered promiscuous mode [ 288.258501][T11874] syzkaller0: entered allmulticast mode [ 288.388278][T11873] tipc: Resetting bearer [ 288.449949][T11873] tipc: Disabling bearer [ 288.550608][T11887] mac80211_hwsim hwsim8 ÿÿÿÿÿÿ: renamed from wlan0 [ 288.773409][T11891] syzkaller1: entered promiscuous mode [ 288.781588][T11891] syzkaller1: entered allmulticast mode [ 289.071836][T11903] __nla_validate_parse: 2 callbacks suppressed [ 289.071864][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1432'. [ 289.088894][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 289.100141][T11901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1430'. [ 289.244232][T11903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.498041][T11922] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1438'. [ 289.519435][T11922] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1438'. [ 289.559103][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 289.590830][T11927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1436'. [ 289.638462][T11930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1439'. [ 290.136982][T11951] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 290.212965][T11948] vxcan1: entered allmulticast mode [ 290.475856][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 290.655788][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 290.839638][T11953] Cannot find set identified by id 0 to match [ 290.845892][T11955] tipc: Enabled bearer , priority 0 [ 290.865526][T11959] syzkaller0: entered promiscuous mode [ 290.871805][T11959] syzkaller0: entered allmulticast mode [ 290.908728][T11968] tipc: Resetting bearer [ 290.935242][T11945] tipc: Resetting bearer [ 291.001836][T11945] tipc: Disabling bearer [ 291.318321][T11988] ip6_vti0 speed is unknown, defaulting to 1000 [ 291.836092][T11988] xfrm0 speed is unknown, defaulting to 1000 [ 291.836555][T11991] ip6_vti0 speed is unknown, defaulting to 1000 [ 292.351678][ T180] IPVS: starting estimator thread 0... [ 292.423349][T11991] xfrm0 speed is unknown, defaulting to 1000 [ 292.512911][T12021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.626088][T12023] IPVS: using max 29 ests per chain, 69600 per kthread [ 292.838241][T12034] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 292.940043][T12043] geneve4: entered promiscuous mode [ 293.016041][T12043] bond6: option ad_select: invalid value (34) [ 293.028140][T12043] bond6 (unregistering): Released all slaves [ 293.430172][T12060] vxcan1: entered allmulticast mode [ 293.824979][T12069] tipc: Started in network mode [ 293.830249][T12069] tipc: Node identity b69977f81f2f, cluster identity 4711 [ 293.838573][T12069] tipc: Enabled bearer , priority 0 [ 293.846723][T12065] ip6_vti0 speed is unknown, defaulting to 1000 [ 293.866684][T12070] syzkaller0: entered promiscuous mode [ 293.890604][T12070] syzkaller0: entered allmulticast mode [ 293.981617][T12070] tipc: Resetting bearer [ 294.001254][T12068] tipc: Resetting bearer [ 294.037106][T12068] tipc: Disabling bearer [ 294.708270][T12091] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.858780][T12091] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.870654][T12065] xfrm0 speed is unknown, defaulting to 1000 [ 295.038380][T12103] __nla_validate_parse: 4 callbacks suppressed [ 295.038405][T12103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1477'. [ 295.313471][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 295.519089][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 295.522651][T12091] xfrm0 speed is unknown, defaulting to 1000 [ 296.324833][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 296.886446][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 296.913119][T12134] pim6reg: entered allmulticast mode [ 296.931329][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 297.012510][T12135] pim6reg: left allmulticast mode [ 297.072496][T12143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1487'. [ 297.183708][T12142] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 297.295213][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 297.362227][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 297.374639][T12156] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1490'. [ 297.549858][T12159] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1491'. [ 297.576846][T12159] netlink: 'syz.1.1491': attribute type 2 has an invalid length. [ 297.586486][T12159] netlink: 'syz.1.1491': attribute type 8 has an invalid length. [ 297.667628][T12163] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 297.698239][T12161] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.132406][T12176] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.141123][T12161] xfrm0 speed is unknown, defaulting to 1000 [ 298.514977][T12191] openvswitch: netlink: Message has -2 unknown bytes. [ 298.522532][T12192] openvswitch: netlink: Message has -2 unknown bytes. [ 298.530445][T12191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.553436][T12192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.768317][T12176] xfrm0 speed is unknown, defaulting to 1000 [ 299.197334][T12227] nbd: must specify at least one socket [ 299.249001][T12217] bond6: entered promiscuous mode [ 299.253427][T12228] netlink: 'syz.2.1505': attribute type 10 has an invalid length. [ 299.257110][T12217] bond6: entered allmulticast mode [ 299.282369][T12217] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.679169][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.686585][T12234] bridge0: port 2(bridge_slave_1) entered listening state [ 299.694215][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.701496][T12234] bridge0: port 1(bridge_slave_0) entered listening state [ 299.725996][T12234] bridge0: port 3(dummy0) entered blocking state [ 299.733193][T12234] bridge0: port 3(dummy0) entered listening state [ 299.746173][T12234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.924854][T12254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.072291][ C1] ICMPv6: NA: 82:40:3e:8b:c0:9c advertised our address fe80::8040:3eff:fe8b:c09c on bond4! [ 300.224340][T12258] tipc: Enabled bearer , priority 10 [ 300.234031][T12261] __nla_validate_parse: 5 callbacks suppressed [ 300.234051][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 300.280955][T12258] tipc: Enabled bearer , priority 0 [ 300.391796][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1512'. [ 300.848391][T12298] netlink: 'syz.2.1518': attribute type 1 has an invalid length. [ 300.887439][T12303] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1516'. [ 301.011499][T12310] openvswitch: netlink: Missing valid actions attribute. [ 301.158350][T12310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.650577][T12298] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 301.737332][ T5902] tipc: Node number set to 3655349524 [ 302.076111][T12336] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 302.117750][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1523'. [ 302.239282][T12343] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 302.240566][T12343] netlink: 'syz.0.1527': attribute type 29 has an invalid length. [ 302.289931][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'. [ 302.444536][T12343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.552048][T12345] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.662282][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 303.255387][T12345] xfrm0 speed is unknown, defaulting to 1000 [ 303.594996][T12390] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 303.657192][T12391] netlink: 'syz.0.1538': attribute type 29 has an invalid length. [ 303.663700][T12390] bridge_slave_0: left allmulticast mode [ 303.671747][T12390] bridge_slave_0: left promiscuous mode [ 303.677895][T12390] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.756303][T12390] bridge_slave_1: left allmulticast mode [ 303.763259][T12390] bridge_slave_1: left promiscuous mode [ 303.776113][T12390] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.811925][T12390] bond0: (slave bond_slave_0): Releasing backup interface [ 303.845552][T12390] bond0: (slave bond_slave_1): Releasing backup interface [ 303.990444][T12390] team0: Port device team_slave_0 removed [ 304.037112][T12390] team0: Port device team_slave_1 removed [ 304.065819][T12390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.076765][T12390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.087187][T12390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.101395][T12390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.115824][T12390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.195283][T12395] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 304.212467][T12395] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 304.306037][T12400] bond7: (slave gretap1): making interface the new active one [ 304.316312][T12400] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 304.368701][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 304.388892][T12421] syzkaller0: entered promiscuous mode [ 304.394443][T12421] syzkaller0: entered allmulticast mode [ 304.752887][T12444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1548'. [ 304.953266][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 305.143351][T12461] netlink: 'syz.2.1552': attribute type 4 has an invalid length. [ 305.174115][T12446] ip6gretap2: entered promiscuous mode [ 305.192154][T12446] ip6gretap2: entered allmulticast mode [ 305.562075][T12467] tipc: Enabled bearer , priority 0 [ 305.595298][T12463] tipc: Enabled bearer , priority 0 [ 305.608774][T12463] syzkaller0: entered promiscuous mode [ 305.614929][T12463] syzkaller0: entered allmulticast mode [ 305.623225][T12467] syzkaller0: entered promiscuous mode [ 305.630357][T12467] syzkaller0: entered allmulticast mode [ 305.641976][T12463] netlink: 70 bytes leftover after parsing attributes in process `syz.2.1554'. [ 305.724629][T12468] tipc: Resetting bearer [ 305.749266][T12467] tipc: Resetting bearer [ 305.774487][T12462] tipc: Resetting bearer [ 305.831374][T12462] tipc: Disabling bearer [ 305.843048][T12466] tipc: Resetting bearer [ 305.884949][T12466] tipc: Disabling bearer [ 306.022727][T12476] Cannot find add_set index 3 as target [ 306.410956][T12507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1565'. [ 306.433985][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1565'. [ 306.865906][T12523] ip6_vti0 speed is unknown, defaulting to 1000 [ 306.958053][T12526] netlink: 'syz.4.1570': attribute type 10 has an invalid length. [ 307.305809][T12523] xfrm0 speed is unknown, defaulting to 1000 [ 307.558597][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 307.895954][T12553] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1577'. [ 308.018888][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 308.030082][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 308.046518][T12560] netlink: 'syz.3.1579': attribute type 3 has an invalid length. [ 309.028144][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 309.247412][T12609] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1592'. [ 309.257253][T12609] openvswitch: netlink: Flow actions attr not present in new flow. [ 309.912181][T12622] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1595'. [ 310.091093][T12628] netlink: 'syz.0.1597': attribute type 4 has an invalid length. [ 310.305174][T12636] syzkaller0: entered promiscuous mode [ 310.311657][T12636] syzkaller0: entered allmulticast mode [ 310.387042][T12636] tipc: Enabled bearer , priority 0 [ 310.456291][T12644] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.519505][T12635] tipc: Resetting bearer [ 310.579794][T12635] tipc: Disabling bearer [ 310.747614][T12653] __nla_validate_parse: 3 callbacks suppressed [ 310.747636][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 310.950822][T12644] xfrm0 speed is unknown, defaulting to 1000 [ 311.194139][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 311.321445][T12686] team1: entered promiscuous mode [ 311.338053][T12686] team1: entered allmulticast mode [ 311.347447][T12686] 8021q: adding VLAN 0 to HW filter on device team1 [ 311.384910][T12692] bond6: option ad_user_port_key: invalid value (65535) [ 311.447635][T12692] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 311.489410][T12692] bond6 (unregistering): Released all slaves [ 311.717988][T12707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1619'. [ 311.742256][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 311.833653][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 311.874270][T12704] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.024244][T12716] netlink: 'syz.1.1622': attribute type 11 has an invalid length. [ 312.061686][T12716] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1622'. [ 312.136779][T12704] xfrm0 speed is unknown, defaulting to 1000 [ 312.197273][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 312.223383][T12725] tipc: Enabling of bearer rejected, failed to enable media [ 312.245052][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 312.530460][T12734] tipc: Enabled bearer , priority 0 [ 312.698269][T12740] netlink: 'syz.3.1629': attribute type 10 has an invalid length. [ 312.824248][T12730] tipc: Resetting bearer [ 313.340477][T12752] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 313.349300][T12752] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1632'. [ 313.360187][T12752] NCSI netlink: No device for ifindex 0 [ 314.697422][T12730] tipc: Disabling bearer [ 314.880521][T12752] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 315.339234][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1636'. [ 316.230630][T12818] dvmrp0: entered allmulticast mode [ 316.390512][T12829] __nla_validate_parse: 1 callbacks suppressed [ 316.390532][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 316.493649][T12837] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1653'. [ 316.539783][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 316.567523][T12839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.574902][T12839] IPv6: NLM_F_CREATE should be set when creating new route [ 316.584526][T12839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.591868][T12839] IPv6: NLM_F_CREATE should be set when creating new route [ 317.150488][T12866] bond7: option all_slaves_active: invalid value (13) [ 317.163740][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 317.177038][T12866] bond7 (unregistering): Released all slaves [ 317.261072][T12869] tipc: Enabled bearer , priority 0 [ 317.300098][T12873] tipc: Enabling of bearer rejected, already enabled [ 317.329713][T12869] syzkaller0: entered promiscuous mode [ 317.338084][T12869] syzkaller0: entered allmulticast mode [ 317.490173][T12868] tipc: Resetting bearer [ 317.551399][T12868] tipc: Disabling bearer [ 317.614108][T12890] ip6_vti0 speed is unknown, defaulting to 1000 [ 317.752092][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 317.761938][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 317.775796][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 317.820037][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 317.859304][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 317.883646][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 317.995757][T12890] xfrm0 speed is unknown, defaulting to 1000 [ 319.404427][T12949] nbd: device at index 0 is going down [ 319.470582][ T6256] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.493264][ T6256] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.651973][ T6256] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.665687][T12763] udevd[12763]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 319.682339][ T6256] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.999390][T12968] sctp: [Deprecated]: syz.2.1685 (pid 12968) Use of int in max_burst socket option. [ 319.999390][T12968] Use struct sctp_assoc_value instead [ 320.121462][T12995] netlink: 'syz.1.1690': attribute type 2 has an invalid length. [ 320.156702][T12994] : entered promiscuous mode [ 320.185375][T12999] netlink: 'syz.1.1690': attribute type 2 has an invalid length. [ 320.320440][T13004] netlink: 'syz.1.1691': attribute type 6 has an invalid length. [ 320.330898][T13004] netlink: 'syz.1.1691': attribute type 6 has an invalid length. [ 320.435392][T13009] geneve3: entered promiscuous mode [ 320.443375][ T6256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 320.456535][ T6256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 320.476786][ T6256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 320.503352][ T6256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 320.772186][T13021] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 320.872666][T13021] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.919085][T13021] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.027698][T13031] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 321.045195][T13031] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 321.151967][T13021] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.175829][T13021] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.330589][T13021] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.346199][T13021] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.440778][T13021] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.451164][T13021] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.685674][ T6256] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.696782][ T6256] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.719044][ T6256] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.727655][ T6256] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.761429][ T6256] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.781532][ T6256] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.833101][ T6256] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.842270][ T6256] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.009754][T13067] bond6: option arp_validate: invalid value (18446744073491447809) [ 322.030528][T13067] bond6 (unregistering): Released all slaves [ 322.770322][T13100] __nla_validate_parse: 8 callbacks suppressed [ 322.770345][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1710'. [ 322.802210][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 322.812214][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.683216][T13130] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.056434][T13130] xfrm0 speed is unknown, defaulting to 1000 [ 329.839475][ C1] bridge0: port 3(dummy0) entered learning state [ 329.846786][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 329.854142][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 359.917973][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.925292][ C1] bridge0: topology change detected, propagating [ 359.932124][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.939520][ C1] bridge0: topology change detected, propagating [ 359.946106][ C1] bridge0: port 3(dummy0) entered forwarding state [ 359.952713][ C1] bridge0: topology change detected, propagating [ 384.240464][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 384.251632][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.559975][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 445.680407][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 445.689643][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 466.808887][ T32] INFO: task kworker/1:8:5982 blocked for more than 143 seconds. [ 466.816783][ T32] Not tainted syzkaller #0 [ 466.821938][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.831174][ T32] task:kworker/1:8 state:D stack:23424 pid:5982 tgid:5982 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 466.843444][ T32] Workqueue: events rfkill_sync_work [ 466.848891][ T32] Call Trace: [ 466.852207][ T32] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 466.855147][ T32] __schedule+0x14bc/0x5000 [ 466.859848][ T32] ? __pfx___schedule+0x10/0x10 [ 466.865436][ T32] ? schedule+0x91/0x360 [ 466.869928][ T32] schedule+0x165/0x360 [ 466.874438][ T32] schedule_preempt_disabled+0x13/0x30 [ 466.880440][ T32] __mutex_lock+0x7e6/0x1350 [ 466.885099][ T32] ? __mutex_lock+0x5bb/0x1350 [ 466.890378][ T32] ? nfc_rfkill_set_block+0x50/0x2e0 [ 466.895730][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 466.901204][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 466.906483][ T32] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 466.913316][ T32] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 466.920050][ T32] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 466.925828][ T32] nfc_rfkill_set_block+0x50/0x2e0 [ 466.931404][ T32] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 466.937184][ T32] rfkill_set_block+0x1d2/0x440 [ 466.942635][ T32] rfkill_sync_work+0x114/0x200 [ 466.968070][ T32] ? process_scheduled_works+0x9ef/0x1770 [ 466.973951][ T32] process_scheduled_works+0xad1/0x1770 [ 466.997210][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 467.009698][ T32] worker_thread+0x8a0/0xda0 [ 467.014908][ T32] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 467.028271][ T32] ? __kthread_parkme+0x7b/0x200 [ 467.033320][ T32] kthread+0x711/0x8a0 [ 467.037445][ T32] ? __pfx_worker_thread+0x10/0x10 [ 467.042852][ T32] ? __pfx_kthread+0x10/0x10 [ 467.047676][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.053256][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 467.058610][ T32] ? __pfx_kthread+0x10/0x10 [ 467.063328][ T32] ret_from_fork+0x599/0xb30 [ 467.068379][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 467.073584][ T32] ? __switch_to_asm+0x39/0x70 [ 467.078811][ T32] ? __switch_to_asm+0x33/0x70 [ 467.083718][ T32] ? __pfx_kthread+0x10/0x10 [ 467.089042][ T32] ret_from_fork_asm+0x1a/0x30 [ 467.093904][ T32] [ 467.096999][ T32] INFO: task syz.0.1687:12982 blocked for more than 143 seconds. [ 467.105283][ T32] Not tainted syzkaller #0 [ 467.110400][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.119441][ T32] task:syz.0.1687 state:D stack:26232 pid:12982 tgid:12982 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 467.131655][ T32] Call Trace: [ 467.135192][ T32] [ 467.138253][ T32] __schedule+0x14bc/0x5000 [ 467.142857][ T32] ? stack_trace_save+0x9c/0xe0 [ 467.147998][ T32] ? __pfx___schedule+0x10/0x10 [ 467.152909][ T32] ? schedule+0x91/0x360 [ 467.157196][ T32] schedule+0x165/0x360 [ 467.161572][ T32] schedule_timeout+0x9a/0x270 [ 467.166479][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 467.172020][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.177380][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 467.182827][ T32] ? wait_for_completion+0x267/0x5d0 [ 467.188234][ T32] wait_for_completion+0x2bf/0x5d0 [ 467.193549][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 467.199522][ T32] ? __flush_work+0xd2/0xbc0 [ 467.204147][ T32] ? __flush_work+0xd2/0xbc0 [ 467.208857][ T32] __flush_work+0x9b9/0xbc0 [ 467.213395][ T32] ? __flush_work+0xd2/0xbc0 [ 467.218275][ T32] ? __pfx___flush_work+0x10/0x10 [ 467.223431][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 467.228999][ T32] ? __pfx___cancel_work+0x10/0x10 [ 467.234169][ T32] ? nfc_genl_device_removed+0x23c/0x330 [ 467.239983][ T32] ? __cancel_work_sync+0x5c/0x110 [ 467.245281][ T32] __cancel_work_sync+0xbe/0x110 [ 467.250498][ T32] rfkill_unregister+0x92/0x220 [ 467.255436][ T32] nfc_unregister_device+0x96/0x2a0 [ 467.260803][ T32] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 467.266581][ T32] virtual_ncidev_close+0x56/0x90 [ 467.271775][ T32] __fput+0x44c/0xa70 [ 467.275808][ T32] task_work_run+0x1d4/0x260 [ 467.280811][ T32] ? __pfx_task_work_run+0x10/0x10 [ 467.286347][ T32] ? __se_sys_close_range+0x4ed/0x650 [ 467.292226][ T32] ? exit_to_user_mode_loop+0x55/0x4f0 [ 467.297861][ T32] exit_to_user_mode_loop+0xff/0x4f0 [ 467.303213][ T32] ? rcu_is_watching+0x15/0xb0 [ 467.309244][ T32] do_syscall_64+0x2e3/0xf80 [ 467.314171][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.320919][ T32] ? clear_bhb_loop+0x60/0xb0 [ 467.325654][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.332316][ T32] RIP: 0033:0x7f21d858f749 [ 467.337026][ T32] RSP: 002b:00007fffd79d8898 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 467.345719][ T32] RAX: 0000000000000000 RBX: 000000000004e163 RCX: 00007f21d858f749 [ 467.353798][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 467.362257][ T32] RBP: 00007f21d87e7da0 R08: 0000000000000001 R09: 0000001ed79d8b8f [ 467.371123][ T32] R10: 0000001b30520000 R11: 0000000000000246 R12: 00007f21d87e5fac [ 467.379606][ T32] R13: 00007f21d87e5fa0 R14: ffffffffffffffff R15: 00007fffd79d89b0 [ 467.387784][ T32] [ 467.390872][ T32] INFO: task syz.3.1710:13092 blocked for more than 143 seconds. [ 467.399115][ T32] Not tainted syzkaller #0 [ 467.404165][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.413335][ T32] task:syz.3.1710 state:D stack:28128 pid:13092 tgid:13091 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 467.425703][ T32] Call Trace: [ 467.429569][ T32] [ 467.432804][ T32] __schedule+0x14bc/0x5000 [ 467.437472][ T32] ? __pfx___schedule+0x10/0x10 [ 467.443530][ T32] ? schedule+0x91/0x360 [ 467.448083][ T32] schedule+0x165/0x360 [ 467.452381][ T32] schedule_preempt_disabled+0x13/0x30 [ 467.458087][ T32] __mutex_lock+0x7e6/0x1350 [ 467.462819][ T32] ? __mutex_lock+0x5bb/0x1350 [ 467.468073][ T32] ? rfkill_fop_open+0x12d/0x820 [ 467.473316][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 467.478487][ T32] ? rfkill_fop_open+0x5a/0x820 [ 467.483569][ T32] ? __raw_spin_lock_init+0x45/0x100 [ 467.489153][ T32] ? __init_waitqueue_head+0xa9/0x150 [ 467.494568][ T32] rfkill_fop_open+0x12d/0x820 [ 467.499821][ T32] ? __pfx_rfkill_fop_open+0x10/0x10 [ 467.505153][ T32] misc_open+0x2d5/0x350 [ 467.509472][ T32] chrdev_open+0x4cc/0x5e0 [ 467.513935][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 467.519094][ T32] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 467.525475][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 467.530524][ T32] do_dentry_open+0x7ce/0x1420 [ 467.535441][ T32] vfs_open+0x3b/0x340 [ 467.540275][ T32] ? path_openat+0x33f3/0x3dd0 [ 467.545366][ T32] path_openat+0x340e/0x3dd0 [ 467.550055][ T32] ? do_sys_openat2+0xbc/0x200 [ 467.554931][ T32] ? __x64_sys_openat+0x138/0x170 [ 467.560116][ T32] ? __pfx_path_openat+0x10/0x10 [ 467.565288][ T32] ? __lock_acquire+0x6b6/0x2cf0 [ 467.570295][ T32] do_filp_open+0x1fa/0x410 [ 467.574843][ T32] ? __pfx_do_filp_open+0x10/0x10 [ 467.580015][ T32] ? _raw_spin_unlock+0x28/0x50 [ 467.584933][ T32] ? alloc_fd+0x64c/0x6c0 [ 467.589422][ T32] do_sys_openat2+0x121/0x200 [ 467.594430][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.599783][ T32] ? rcu_is_watching+0x15/0xb0 [ 467.604788][ T32] __x64_sys_openat+0x138/0x170 [ 467.609866][ T32] do_syscall_64+0xfa/0xf80 [ 467.614465][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.620774][ T32] ? clear_bhb_loop+0x60/0xb0 [ 467.625526][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.632198][ T32] RIP: 0033:0x7fd8fa78f749 [ 467.636946][ T32] RSP: 002b:00007fd8f89f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 467.645615][ T32] RAX: ffffffffffffffda RBX: 00007fd8fa9e5fa0 RCX: 00007fd8fa78f749 [ 467.654054][ T32] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 467.662349][ T32] RBP: 00007fd8fa813f91 R08: 0000000000000000 R09: 0000000000000000 [ 467.670417][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.678778][ T32] R13: 00007fd8fa9e6038 R14: 00007fd8fa9e5fa0 R15: 00007fff24911fc8 [ 467.687902][ T32] [ 467.691140][ T32] INFO: task syz.1.1711:13103 blocked for more than 144 seconds. [ 467.703576][ T32] Not tainted syzkaller #0 [ 467.708684][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.717572][ T32] task:syz.1.1711 state:D stack:28152 pid:13103 tgid:13102 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 467.729725][ T32] Call Trace: [ 467.733035][ T32] [ 467.735980][ T32] __schedule+0x14bc/0x5000 [ 467.740751][ T32] ? __pfx___schedule+0x10/0x10 [ 467.745659][ T32] ? schedule+0x91/0x360 [ 467.750070][ T32] schedule+0x165/0x360 [ 467.754264][ T32] schedule_preempt_disabled+0x13/0x30 [ 467.760004][ T32] __mutex_lock+0x7e6/0x1350 [ 467.764658][ T32] ? __lock_acquire+0x6b6/0x2cf0 [ 467.769698][ T32] ? __mutex_lock+0x5bb/0x1350 [ 467.774603][ T32] ? misc_open+0x51/0x350 [ 467.779137][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 467.784225][ T32] misc_open+0x51/0x350 [ 467.788444][ T32] chrdev_open+0x4cc/0x5e0 [ 467.792899][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 467.797986][ T32] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 467.804375][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 467.809478][ T32] do_dentry_open+0x7ce/0x1420 [ 467.814308][ T32] vfs_open+0x3b/0x340 [ 467.818532][ T32] ? path_openat+0x33f3/0x3dd0 [ 467.823336][ T32] path_openat+0x340e/0x3dd0 [ 467.828195][ T32] ? do_sys_openat2+0xbc/0x200 [ 467.832991][ T32] ? __x64_sys_openat+0x138/0x170 [ 467.838210][ T32] ? __pfx_path_openat+0x10/0x10 [ 467.843189][ T32] ? __lock_acquire+0x6b6/0x2cf0 [ 467.848237][ T32] do_filp_open+0x1fa/0x410 [ 467.852815][ T32] ? __pfx_do_filp_open+0x10/0x10 [ 467.857945][ T32] ? _raw_spin_unlock+0x28/0x50 [ 467.862851][ T32] ? alloc_fd+0x64c/0x6c0 [ 467.867210][ T32] do_sys_openat2+0x121/0x200 [ 467.871988][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.877226][ T32] ? rcu_is_watching+0x15/0xb0 [ 467.882353][ T32] __x64_sys_openat+0x138/0x170 [ 467.887488][ T32] do_syscall_64+0xfa/0xf80 [ 467.892597][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.898759][ T32] ? clear_bhb_loop+0x60/0xb0 [ 467.903546][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.909670][ T32] RIP: 0033:0x7f31a4f8f749 [ 467.914206][ T32] RSP: 002b:00007f31a5e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 467.923129][ T32] RAX: ffffffffffffffda RBX: 00007f31a51e5fa0 RCX: 00007f31a4f8f749 [ 467.931365][ T32] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 467.939434][ T32] RBP: 00007f31a5013f91 R08: 0000000000000000 R09: 0000000000000000 [ 467.947624][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.956091][ T32] R13: 00007f31a51e6038 R14: 00007f31a51e5fa0 R15: 00007fff83385a88 [ 467.964629][ T32] [ 467.967902][ T32] [ 467.967902][ T32] Showing all locks held in the system: [ 467.976175][ T32] 1 lock held by khungtaskd/32: [ 467.981316][ T32] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 467.991486][ T32] 2 locks held by getty/5589: [ 467.996192][ T32] #0: ffff88814d0710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 468.006858][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 468.017395][ T32] 4 locks held by kworker/1:8/5982: [ 468.022820][ T32] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 468.033956][ T32] #1: ffffc90004d67b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 468.046763][ T32] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 468.057349][ T32] #3: ffff88804f609100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 468.067153][ T32] 1 lock held by syz.0.1687/12982: [ 468.072695][ T32] #0: ffff88804f609100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 468.087915][ T32] 2 locks held by syz.3.1710/13092: [ 468.093201][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.101853][ T32] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 468.112222][ T32] 1 lock held by syz.1.1711/13103: [ 468.117355][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.126025][ T32] 1 lock held by syz.4.1714/13124: [ 468.131226][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.139925][ T32] 1 lock held by syz.2.1715/13128: [ 468.145074][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.153693][ T32] 1 lock held by syz-executor/13164: [ 468.159185][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.167868][ T32] 1 lock held by syz-executor/13166: [ 468.173193][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.181743][ T32] 1 lock held by syz-executor/13170: [ 468.187081][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.195741][ T32] 1 lock held by syz-executor/13171: [ 468.201142][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.209816][ T32] 1 lock held by syz-executor/13172: [ 468.215150][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.223937][ T32] 1 lock held by syz-executor/13177: [ 468.229293][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.238075][ T32] 1 lock held by syz-executor/13181: [ 468.243637][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.252236][ T32] 1 lock held by syz-executor/13184: [ 468.257551][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.266219][ T32] 1 lock held by syz-executor/13185: [ 468.271720][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.280420][ T32] 1 lock held by syz-executor/13187: [ 468.285750][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.294295][ T32] 1 lock held by syz-executor/13192: [ 468.299664][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.308191][ T32] 1 lock held by syz-executor/13194: [ 468.313496][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.322330][ T32] 1 lock held by syz-executor/13196: [ 468.327803][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.336526][ T32] 1 lock held by syz-executor/13198: [ 468.342001][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.350554][ T32] 1 lock held by syz-executor/13201: [ 468.355850][ T32] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 468.364572][ T32] [ 468.366920][ T32] ============================================= [ 468.366920][ T32] [ 468.375584][ T32] NMI backtrace for cpu 0 [ 468.375607][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 468.375631][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.375641][ T32] Call Trace: [ 468.375649][ T32] [ 468.375657][ T32] dump_stack_lvl+0x189/0x250 [ 468.375687][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.375708][ T32] ? __pfx__printk+0x10/0x10 [ 468.375747][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 468.375770][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 468.375793][ T32] ? __pfx__printk+0x10/0x10 [ 468.375823][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 468.375856][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 468.375881][ T32] watchdog+0xf3c/0xf80 [ 468.375912][ T32] ? watchdog+0x1e2/0xf80 [ 468.375945][ T32] kthread+0x711/0x8a0 [ 468.375973][ T32] ? __pfx_watchdog+0x10/0x10 [ 468.375997][ T32] ? __pfx_kthread+0x10/0x10 [ 468.376024][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.376049][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 468.376074][ T32] ? __pfx_kthread+0x10/0x10 [ 468.376106][ T32] ret_from_fork+0x599/0xb30 [ 468.376140][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 468.376183][ T32] ? __switch_to_asm+0x39/0x70 [ 468.376207][ T32] ? __switch_to_asm+0x33/0x70 [ 468.376230][ T32] ? __pfx_kthread+0x10/0x10 [ 468.376258][ T32] ret_from_fork_asm+0x1a/0x30 [ 468.376302][ T32] [ 468.376310][ T32] Sending NMI from CPU 0 to CPUs 1: [ 468.524463][ C1] NMI backtrace for cpu 1 [ 468.524483][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 468.524503][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.524515][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 468.524554][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 468.524570][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 468.524592][ C1] RAX: dbd067da7b6cf000 RBX: ffffffff8197438a RCX: dbd067da7b6cf000 [ 468.524606][ C1] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660 [ 468.524618][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 468.524631][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 468.524644][ C1] R13: 1ffff1100395db70 R14: 0000000000000001 R15: 0000000000000001 [ 468.524655][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 468.524670][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.524682][ C1] CR2: 0000562c77dbbf40 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 468.524697][ C1] Call Trace: [ 468.524707][ C1] [ 468.524714][ C1] default_idle+0x13/0x20 [ 468.524738][ C1] default_idle_call+0x73/0xb0 [ 468.524766][ C1] do_idle+0x1ea/0x520 [ 468.524784][ C1] ? irqentry_exit+0x5ba/0x660 [ 468.524809][ C1] ? __pfx_do_idle+0x10/0x10 [ 468.524843][ C1] cpu_startup_entry+0x44/0x60 [ 468.524861][ C1] start_secondary+0x101/0x110 [ 468.524885][ C1] common_startup_64+0x13e/0x147 [ 468.524916][ C1]