last executing test programs: 3m53.539890182s ago: executing program 3 (id=2919): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1, 0x800, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a000000000000000000000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r3}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x2, {0x2, 0xff, 0x2}, 0xff}, 0x18) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b70300000000000000b60a0100000000000f000000000000001801000020756c2500000000002020f8ff000000002d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000000095000000000000000000000000e8ff0000000000000024a5d0a8a382432d766be5270bd4c5646a0b24a31ab21da1559e255ee80135536902bd481d125233a22dd475a9435df0b37c8a8a15d2c484c6bf1a58c2efe9f33ff7e67b0c219fbd8a1c3df5aea0fe931f78c8a804a0f9910322138a7f8921d78d119db98599b4dc9b57d4d1015525f7c619c9794527a135132d5cd9b87ae7829e16202010590317608c9adfad46706dad8c7c84f9fc03cad1f39b0ee38b5323b50000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x8, &(0x7f0000000600)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000080)=""/208, 0xd0}, &(0x7f0000000180), 0x70}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r4, &(0x7f00000004c0)=""/249, 0xf9, 0x21, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x42, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a32000000180a010100000000000000000200000908000740000000020900010073797a310000000014000380080002400000000a080002400000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e6174002c000000060a0104ff3a6e8b2507c3b7d4ca5100000000000000000100000008000b4000000000040004800900010073797a3000000000140000001180010000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 3m52.49321191s ago: executing program 3 (id=2924): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x0, 0x218, 0x300, 0x300, 0x300, 0x8000000, 0x0, {[{{@arp={@local, @local, 0xffffffff, 0xffffff00, 0xc, 0x5, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x51c, 0x6, 0xafb1, 0x4, 0x7, 'macsec0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x208}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1ff, 'syz0\x00', {0x9}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @loopback, 0x1, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x43}, @multicast1, 0xffffff00, 0xffffffff, 0xb, 0x10, {@mac=@random="af0631d193f7", {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x4, 0x9, 0x8, 0x1, 0x7, 'vcan0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0xb26ecf94b02dfb41}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0xffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x80000, 0x400000) r2 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r3, 0x29, 0x50, &(0x7f0000000540)=0x17, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000080)=""/25, &(0x7f0000000000)=0x19) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x3, @local}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e23, 0xbd, @empty, 0x3ff}, @in={0x2, 0x4e23, @empty}], 0xb8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x3, @local}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e23, 0xbd, @empty, 0x3ff}, @in={0x2, 0x4e23, @empty}], 0xb8) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000440)={'ipvlan0\x00'}) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000440)={'ipvlan0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x3}, {0x0, 0xa}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x3}, {0x0, 0xa}}}, 0x24}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000200), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000cc0)="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"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000006040000000800000001040000f7ffffff060000000100000000000000000700000000"], 0x0, 0x3e, 0x0, 0xffffffff}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x0, 0x0, 0x228, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff000000, 0xff000000, 0x0, 0xffffff00], 'lo\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0x0, 0x0, 0x40}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x4}}, @common=@ah={{0x30}, {[0x4d3, 0x4d4], 0x0, 0x6, 0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6}, {0x4}, {0x4, 0x1, 0x1}, 0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private1, [0xff, 0xffffff00, 0x0, 0xff], [0xff000000, 0xff, 0xff, 0xff], 'veth0_virt_wifi\x00', 'veth1_vlan\x00', {0xff}, {}, 0x33, 0x5, 0x8, 0x18}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'pimreg\x00'}}}, {{@ipv6={@mcast2, @empty, [0xffffffff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0xff, 0xff], 'ip6gre0\x00', 'sit0\x00', {}, {}, 0xff, 0xfd, 0x0, 0xa}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@hbh={{0x48}, {0x7, 0x6, 0xc6982bd1f1da567d, [0x6, 0x0, 0x1, 0x0, 0x81, 0x5, 0x2b0e, 0x15, 0x1, 0x7, 0x2, 0x7, 0x8, 0xc, 0x1, 0x6], 0x9}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa1a, 0xffff, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x0, 0x0, 0x228, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff000000, 0xff000000, 0x0, 0xffffff00], 'lo\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0x0, 0x0, 0x40}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x4}}, @common=@ah={{0x30}, {[0x4d3, 0x4d4], 0x0, 0x6, 0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6}, {0x4}, {0x4, 0x1, 0x1}, 0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private1, [0xff, 0xffffff00, 0x0, 0xff], [0xff000000, 0xff, 0xff, 0xff], 'veth0_virt_wifi\x00', 'veth1_vlan\x00', {0xff}, {}, 0x33, 0x5, 0x8, 0x18}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'pimreg\x00'}}}, {{@ipv6={@mcast2, @empty, [0xffffffff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0xff, 0xff], 'ip6gre0\x00', 'sit0\x00', {}, {}, 0xff, 0xfd, 0x0, 0xa}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@hbh={{0x48}, {0x7, 0x6, 0xc6982bd1f1da567d, [0x6, 0x0, 0x1, 0x0, 0x81, 0x5, 0x2b0e, 0x15, 0x1, 0x7, 0x2, 0x7, 0x8, 0xc, 0x1, 0x6], 0x9}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa1a, 0xffff, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x480b1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xfff1}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x44080) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x44080) 3m52.162301973s ago: executing program 3 (id=2926): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0xffffe000) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x2}, 0x1, 0x2, 0x0, 0x0, "29688952ad473ef185e04ab6183d31d77caa73dff1c123f07367d2a652bcf53666729391ee37873b4220692541361faaab6e4c2cd27873eb1ecce98e7ddba3c7"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "01f8ffff0599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0xb, 0x801, 0x0, 0x0, {0x5}, [@NFTA_COMPAT_NAME={0x8, 0x1, '-)\xa0\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xa, 0x1, 'vcan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4011}, 0x20008400) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xfffffffd) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000340)=0xaf, &(0x7f0000000380)=0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x70, 0x2, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000090}, 0x48405) 3m51.820513044s ago: executing program 3 (id=2929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x12) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x5b, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x4000) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x321300, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000e5597a03a9b73db4f8c3f823cf9190155d1fefb272932f685ba3d20337c4dba827f6463c9ff493ac164ac9bf949c6119a48bc95e5d3426262fddcc100d1b399cd190cd32b84229bc18aae03866da0e0d5be4eb98d63fb9ae944f6fe443f21a941a6535217e0de730ab3cddcc12fdecb26a30161b3fb251edcefc7a4421013c7011b6cb604b3e06ac54a2566c", @ANYRES16=r4, @ANYBLOB="00042bbd7000fedbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x90) 3m51.395910416s ago: executing program 3 (id=2937): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x89}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3m51.032040061s ago: executing program 3 (id=2940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x40080) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x0, 0x3, 0x200}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b000000000000000500", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff181100006fad67496193f847e64ad97cce5aef0a5f689e83c8ad1fd26b87bc25f8ddbd358d1f6064b5a2ece90dcb315e579c9f3cd6", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], 0x0, 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x2, 0xb, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x1, 0x3, 0xe, 0x4}, {0x5, 0x3, 0x5, 0x9}], 0x10, 0x1ff}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x2000c450) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000001280), 0x4) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r7, 0x0, 0x2002) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000840)=[0x0], 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="02000000a61c8cb2cb1490df", @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd1, &(0x7f0000000140)=0xe, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x9, 0x40, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x26, 0x0, 0x9, 0x0, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x29, 0x3, [{0x5, 0x5, "097fd3"}, {0x5, 0xd, "e71e9695fb0b3cd634dd5e"}, {0x2, 0x11, "2d09963bf5ade039b6afb72f2bc8d5"}]}, @timestamp={0x44, 0xc, 0x71, 0x0, 0x7, [0x8, 0x8001]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f40)=ANY=[], 0x44}, 0x1, 0x2000000000000000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 3m35.14297304s ago: executing program 32 (id=2940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x40080) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x0, 0x3, 0x200}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b000000000000000500", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff181100006fad67496193f847e64ad97cce5aef0a5f689e83c8ad1fd26b87bc25f8ddbd358d1f6064b5a2ece90dcb315e579c9f3cd6", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], 0x0, 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x2, 0xb, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x1, 0x3, 0xe, 0x4}, {0x5, 0x3, 0x5, 0x9}], 0x10, 0x1ff}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x2000c450) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000001280), 0x4) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r7, 0x0, 0x2002) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000840)=[0x0], 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="02000000a61c8cb2cb1490df", @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd1, &(0x7f0000000140)=0xe, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x9, 0x40, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x26, 0x0, 0x9, 0x0, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x29, 0x3, [{0x5, 0x5, "097fd3"}, {0x5, 0xd, "e71e9695fb0b3cd634dd5e"}, {0x2, 0x11, "2d09963bf5ade039b6afb72f2bc8d5"}]}, @timestamp={0x44, 0xc, 0x71, 0x0, 0x7, [0x8, 0x8001]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f40)=ANY=[], 0x44}, 0x1, 0x2000000000000000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 2m14.533898678s ago: executing program 5 (id=3380): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x81, 0x693, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7800, 0x2, 0x5}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7, 0xf896, 0xac70, 0xfff, {{0x27, 0x4, 0x1, 0x3e, 0x9c, 0x67, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x0, 0x12, "7c00f1e00ae117b348aae89ae37141f2"}, {0x2, 0x5, "f724a0"}, {0x0, 0x3, "a7"}, {0x5, 0x9, "2a81dfa930aaec"}, {0x6, 0x3, "95"}]}, @timestamp_addr={0x44, 0x44, 0xeb, 0x1, 0x9, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x6}, {@broadcast, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xe}, {@private=0xa010100, 0x2}, {@empty, 0x80}, {@multicast2, 0x5}]}, @lsrr={0x83, 0x17, 0x54, [@remote, @remote, @multicast2, @private=0xa010102, @broadcast]}]}}}}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x50}, 0x800) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000001680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001640)={&(0x7f0000000580)={0x10a0, r7, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1a4, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x6}, {0x1, 0x3}, {0x2, 0x4}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x6}, {0x4}, {0x3, 0x5}, {}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0xa}, {0x5, 0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x4}, {0x2}, {0x0, 0x3}, {0x6, 0x6}, {0x6, 0x8}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x3, 0x3}, {0x5, 0x4}, {0x5}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x2, 0x6}, {0x0, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x7}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0x3}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x24, 0x1, 0x70, 0x0, 0x18, 0x9, 0x36, 0xc, 0x6c, 0xb, 0x12, 0x1b, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x12, 0xb, 0x1, 0x48, 0x9, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x71ee, 0x9b27, 0x3, 0x5, 0x7, 0xa, 0x5]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x8}, {0x3, 0x1}, {0x5, 0x5}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x5, 0x5}, {0x7, 0x3}, {0x2, 0x7}, {0x1}, {0x6, 0xa}, {0x1}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x6}, {0x6}, {0x4, 0x5}, {0x5, 0x9}, {0x7, 0x1}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x5, 0x5, 0x62, 0x4, 0x1, 0x5, 0x5, 0x48, 0x60, 0x1b, 0x18, 0x48, 0x24, 0x1b, 0x2, 0x1]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x98}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}]}]}, @NL80211_ATTR_TID_CONFIG={0x1e0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x27}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdf}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbb}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x96}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9b, 0xfff9, 0x88f, 0x7f, 0xf, 0x1400, 0x2]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x3, 0x1b, 0x0, 0x48, 0x5]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x4, 0x36, 0x2, 0xc, 0x2, 0x30, 0x6c, 0x6c, 0x3, 0x36, 0x79, 0x5, 0x9, 0x30, 0x2, 0x6c, 0x4, 0x18, 0x3, 0x1e, 0x3, 0x6, 0x30, 0x60, 0x4, 0xb, 0x3, 0x4, 0x6, 0x18]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x61c3, 0xdd, 0x3c93, 0x1000, 0x7, 0x1000, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x5, 0x1b, 0x9, 0xf, 0x2, 0x3, 0xb, 0x36, 0x9, 0x44, 0x48, 0xb, 0x60, 0x12, 0x5, 0x4, 0x48, 0x9, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x5, 0x1, 0xff7f, 0x5, 0x1, 0x7]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc, 0x7, 0x7, 0xffff, 0x0, 0x82bc, 0x4]}}]}]}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x7}, {0x3}, {0x1, 0x1}, {0x7, 0x3}, {0x0, 0x5}, {0x6}, {0x5, 0x3}, {0x4, 0xa}, {0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x7468d1d9ba2ac16, 0x4, 0x30, 0x18, 0x16, 0x1b, 0x2, 0x48, 0x24, 0x18, 0x5, 0x6, 0x30, 0x60, 0x1b, 0x4, 0x48, 0x9, 0x48, 0x6, 0x18, 0x30, 0x24, 0x2, 0x1, 0x6c, 0xc, 0x24, 0x4]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xe44, 0x60a, 0x77e, 0x2, 0x5, 0x3, 0x8001]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x154, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x32}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x32}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffff80}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x79}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}]}]}, @NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x240, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x3}, {0x7, 0x7}, {0x7, 0x6}, {0x3, 0x1}, {0x1, 0x6}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x2}, {0x1, 0x7}, {0x3, 0x8}, {0x4, 0x9}, {0x2, 0x1}, {0x1}, {0x7, 0x5}, {0x6}, {0x0, 0x9}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x8}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x2}, {0x1, 0x2}, {0x1, 0x9}, {0x1}, {0x7, 0x6}, {0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x3, 0x1}, {}, {0x3, 0x9}, {0x5}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x3e33, 0xe, 0x4, 0x1, 0x1, 0xfffd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0xb, 0x24, 0x16, 0x48, 0x2, 0xd, 0x3, 0x48, 0x12, 0x0, 0x60, 0x4bbba5db0b620465]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x2}, {0x3, 0x2}, {0x5, 0x4}, {0x4, 0x9}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0x4}, {0x3, 0x5}, {0x5, 0x7}, {0x1, 0x4}, {0x3, 0x7}, {0x6, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x6, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x9}, {0x5}, {0x4, 0x4}, {0x5, 0xa}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x2}, {0x1, 0x3}, {0x4}, {0x5, 0xa}, {0x4, 0x3}, {0x4, 0xa}, {0x7, 0x1}, {0x3, 0x3}, {0x4}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0xa}, {0x7, 0x4}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {0x7, 0x7}, {0x3, 0x9}, {0x7}, {0x5}, {0x2, 0x5}, {0x7, 0xa}, {0x6}, {0x0, 0x6}, {0x5}, {0x3, 0x5}, {0x4, 0x4}, {0x3, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x1b, 0xc]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x3}, {0x1, 0x8}, {0x4, 0x6}, {0x7}, {0x0, 0x6}, {0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x7}, {0x4, 0x9}, {0x4, 0xa}, {0x2, 0x8}, {0x3, 0x6}, {0x1, 0x2}, {0x3}, {0x6}, {0x5, 0x4}, {0x5, 0xa}, {0x7, 0xa}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x17}, {0x3, 0x2}, {0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x7}, {0x6, 0x6}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x9}, {0x3, 0x7}, {0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x7, 0xa}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x5, 0x2}, {}, {}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x4}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x4}, {0x3, 0x4}, {0x3, 0x3}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x1000, 0x9, 0x1, 0x8, 0x100, 0x8e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x5, 0x2, 0xc180, 0xffff, 0x2, 0xf937]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x38d, 0x607, 0x8, 0x4826, 0x8, 0xfff8, 0x58, 0x6]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x48, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x4, 0x6, 0x3, 0x9, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x81, 0x8000, 0xfffe, 0x5, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x36, 0x0, 0x4, 0x94e46206b73eb378, 0x1b, 0x1b, 0x30, 0x30, 0x16, 0x3, 0x36, 0x6d, 0x30, 0xc, 0xb, 0x24, 0x4, 0x60, 0x6, 0x4, 0x30, 0x48, 0xb, 0x4, 0x2, 0x6c, 0xc, 0x30, 0x1, 0x4]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x4, 0x4}, {0x3, 0x5}, {}, {0x4, 0x3}, {0x3, 0x9}, {0x7, 0x8}, {0x5, 0x1}, {0x4}, {0x5, 0x2}, {0x3, 0x7}, {0x7}, {0x6, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x5, 0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x7, 0x1}, {}, {0x0, 0x6}, {0x1}, {0x1, 0x8}, {}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0xf}, {0x5, 0x3}, {0x3, 0x8}, {0x4, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x78}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x99}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x48, 0x5, 0x30, 0x24, 0x18, 0x2, 0x30, 0xb, 0x0, 0x18, 0x2, 0x9, 0x16, 0x24, 0x1b, 0x60, 0x5, 0x1, 0x6, 0x30, 0x0, 0xb, 0x1b, 0x3e, 0x4, 0x2, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a49, 0x1, 0xa, 0x182, 0x2, 0x1, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x626, 0x9, 0x200, 0x40, 0x571f, 0x1, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0x8, 0x3, 0x800, 0x2, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x9, 0xebe4, 0x8c, 0x2, 0x8, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x3, 0x3, 0xc880, 0x9, 0xf, 0x425]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xb073, 0x7, 0x7, 0x3, 0xff, 0x22, 0x3]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x18, 0x30, 0x1b, 0x6c, 0x30, 0x18, 0x9, 0x5a, 0xc, 0x525edbfa574978c3, 0x60, 0x60, 0x48, 0x24, 0x1b, 0x1b, 0x48, 0x2b, 0x30, 0x9, 0x2, 0x6, 0x6c, 0x1, 0x5, 0x30, 0x48, 0xb, 0x1b, 0x6c]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9d, 0x5, 0x3, 0x401, 0x10, 0x5, 0x8, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xff52, 0x5, 0x6, 0x0, 0x3, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x7, 0x6, 0xc00, 0xfffc, 0x8, 0x401, 0x634]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x48, 0x3, 0x4, 0x18, 0xc, 0x6, 0x60, 0x30, 0x36, 0x1, 0x3, 0x24, 0x4, 0x6, 0x3b, 0x3, 0x16, 0x18, 0x6, 0x3, 0x16, 0x1, 0x18]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x4, 0x16, 0x1b, 0x30, 0x4, 0xb, 0x3, 0x48, 0x16, 0x2, 0x3, 0x2d, 0xb, 0x6c, 0x3, 0x48, 0x12, 0x6c]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x0, 0x4, 0xfffb, 0x2, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x6}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {}, {0x0, 0x7}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x5}, {0x2, 0x5}, {0x4, 0x4}, {0x0, 0xa}, {0x5}, {0x2, 0x9}, {0x0, 0x8}, {0x3}, {0x2, 0x4}, {0x6, 0x1}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x9}, {0x5, 0x5}, {0x7, 0x1}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0x9}, {0x7, 0xa}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x1}, {0x2, 0x3}, {0x2}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x7}, {0x4, 0x8}, {0x5, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xce}]}]}, @NL80211_ATTR_TID_CONFIG={0x578, 0x11d, 0x0, 0x1, [{0x540, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x520, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x400, 0x5, 0x5, 0x7, 0x3ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x6, 0x10, 0x8f, 0x5, 0x1, 0xc]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x1}, {0x2, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x4}, {0x2, 0x8}, {0x4}, {0x2, 0xa}, {0x5}, {0x3, 0x3}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x6}, {0x6, 0x6}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x5}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x2}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x5}, {0x2, 0x1}, {0x5, 0x7}, {0x5, 0xa}, {0x4, 0x6}, {0x6, 0x5}, {0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x3}, {0x7, 0x9}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x6}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x4}, {0x2, 0x9}, {0x6, 0x3}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x9}, {0x5, 0x3}, {0x5}, {0x2}, {0x6, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x1}, {0x7, 0x5}, {0x2}, {0x2, 0x4}, {0x5, 0x6}, {0x2}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x3}, {0x4}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x9}, {0x2}, {}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0xa}, {0x1, 0x9}, {0x4, 0x7}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x8}, {0x2, 0xa}, {0x2, 0x2}, {0x2, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x4}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x3}, {0x4, 0x7}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x4, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x6, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0x5}, {0x6}, {0x3, 0x1}, {0x1, 0x5}, {0x3}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x6, 0x7}, {0x7, 0x9}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x5, 0x6}, {0x6, 0x6}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x27, 0x4, 0x18, 0x5, 0x6, 0x36, 0x12, 0x2, 0x1, 0x9, 0xc, 0x60, 0x4e, 0x30, 0x18, 0xc, 0x16, 0x1b, 0x6, 0x6c, 0x48, 0x8, 0x30, 0x4, 0x48, 0x18, 0x30]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x2, 0x9, 0x10, 0x68b4, 0x8, 0x1, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x16, 0x16, 0xb, 0x6, 0x9, 0x60, 0x29, 0x60, 0x5, 0xb, 0x48, 0x24, 0x2, 0x60, 0x48, 0x5, 0x1, 0x3, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x0, 0x1, 0x1, 0x7ff, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0xa, 0x7, 0x7ff, 0x0, 0xbd, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x1, 0x2, 0x0, 0xde4c, 0x400, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x2, 0x1, 0x9, 0xffff, 0x4, 0xb, 0x5]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x6}, {0x6, 0x5}, {0x2, 0xa}, {0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x5}, {0x2, 0x7}, {0x3, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x5}, {0x4, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x3, 0x2}, {0x7, 0x3}, {0x7, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0x3}, {0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0xa}, {0x4, 0x1}, {0x7, 0xa}, {0x2, 0x6}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x2}, {}, {0x6, 0x3}, {0x2, 0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x2}, {0x7, 0x9}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x5, 0x9}, {0x2, 0x5}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x4}, {0x4, 0x1}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x5}, {0x7, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x2}, {0x5, 0x9}, {0x0, 0x4}, {0x0, 0x8}, {0x5}, {0x1, 0x8}, {0x3, 0x5}, {0x4}, {}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x7}, {0x5, 0x9}, {0x2, 0x5}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x2}, {0x3, 0x9}, {0x7}, {0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x6, 0xa}, {0x7, 0x2}, {0x7, 0x2}, {0x1, 0x1}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x6}, {0x2}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x6}, {0x5, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x1, 0xc, 0x2, 0x36, 0x6c, 0xc, 0x2, 0x27, 0x60, 0x0, 0xe1903b4a9f141304]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x4}, {0x0, 0x1}, {0x4, 0x8}, {0x7, 0xa}, {0x5, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x2}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x1}, {0x3, 0x7}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x5, 0x7}, {0x4, 0x3}, {0x6, 0x3}, {0x7, 0x5}, {0x7, 0x5}, {0x0, 0x8}, {0x7}, {0x3, 0x2}, {0x4}, {0x0, 0x9}, {0x2, 0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x4, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x4, 0x4}, {0x1}, {0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x7}, {0x3, 0x6}, {0x6, 0x9}, {0x4, 0x6}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x6}, {0x1}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0x1}, {0x7, 0x3}, {0x4, 0x1}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x24, 0x24, 0x60, 0x12, 0x24, 0x5, 0x36, 0xb, 0x4, 0x3b, 0x3, 0x4, 0x1e, 0x6, 0x4, 0x1, 0x31]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x48, 0xd, 0x2, 0x14, 0x60, 0xc, 0x1b, 0x16, 0x12, 0x4, 0x16, 0x6, 0x36, 0x1b, 0x2, 0x5, 0x48, 0x9, 0x1, 0x48, 0xc, 0x12, 0x12, 0x1b, 0x31, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x24, 0xb, 0x30, 0x5, 0x5, 0x3, 0x4, 0x5, 0x4, 0x1, 0x48, 0x36, 0x30, 0x4, 0x18, 0x6c, 0x9, 0x6c, 0x6, 0x0, 0x60, 0x70, 0x1, 0xc, 0x3]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x9, 0x12, 0x48, 0x1, 0x30, 0x30, 0x30, 0x5, 0xc, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x8, 0x3, 0x9, 0xd, 0x3, 0xd]}}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x40, 0xd4, 0x6, 0x1e71, 0x4, 0xfff5, 0xec2]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x4}, {0x7}, {0x7, 0x9}, {0x6, 0x7}, {}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0xf}, {0x6, 0x2}, {0x5, 0x4}, {0x5, 0x6}, {0x1, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x9, 0x47f9, 0x70, 0xf, 0x7, 0x1]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x3}, {0x5, 0x6}, {0x4, 0x7}, {0x3, 0x8}, {0x4}, {0x0, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x7}, {0x3, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0xa}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x2}, {0x3, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x6}, {0x2, 0x2}, {0x3, 0x8}, {0x7, 0x8}, {0x7, 0xa}, {0x0, 0x1}, {0x3}, {0x4, 0x7}, {0x6, 0x3}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0x6}, {0x7, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x7, 0x3}, {0x6, 0x2}, {0x4, 0x1}, {0x7}, {0x3, 0x6}, {0x6, 0x2}, {0x7, 0xa}, {}, {0x7, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x5}, {0x1, 0xa}, {0x3, 0x8}, {0x2, 0x5}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x0, 0x8}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0x9}, {0x4, 0x5}, {0x5, 0xa}, {0x3}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {}, {0x1}, {0x6, 0x1}, {0x6, 0x4}, {0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x5}, {0x6}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0xa}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x7, 0x8001, 0x9, 0x9, 0x9, 0xa61a]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x5, 0x30, 0x16, 0x12, 0x12, 0x0, 0x6c, 0x2, 0x1, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x5}, {0x4, 0x7}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x4, 0x7}, {0x5, 0x4}, {0x3, 0x6}, {0x3, 0x5}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x3}, {0x5, 0x7}, {0x6, 0x7}, {0x2, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4529, 0x9439, 0x5, 0x9, 0x2, 0x8001, 0x2, 0x2]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x2, 0x16, 0x1, 0x0, 0x11, 0x48, 0x12, 0x48, 0xb, 0x1f]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x30, 0x2, 0x60, 0x5, 0x60, 0x24, 0x1b, 0x16, 0x1, 0x3, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xd4, 0x7, 0x9, 0x56, 0xe, 0x584, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x93}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffe}]}]}]}, 0x10a0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008014) (async) recvfrom$packet(r6, &(0x7f00000016c0)=""/188, 0xbc, 0x60010040, &(0x7f0000001780)={0x11, 0x2, r2, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000017c0)={r6, r3, 0x25, 0x8, @void}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x18, 0x1404, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x8844) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x34, r7, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004850) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40048040) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7fff, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000008) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r6) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001d80)={'bond_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000002100)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001dc0)={0x2cc, r13, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x208, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1a4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x413b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x73}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd57}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',:\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '!,\xeb{%$\'!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^\\@]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\]\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "2e3d1674d7397d57bfcb2a03b46b2c6c820779c573046a81b44eedb619e1b91e690250d67c3614e769c8198a89454c8d57db00a53310b6a8082257b87e655743028766d7ecb7c0afbe252264e43b54f4550a71a8f4aa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2cc}}, 0x40010) (async) bind$inet6(r10, &(0x7f0000002140)={0xa, 0x4e21, 0x8, @private1, 0xb}, 0x1c) (async) r15 = openat$cgroup_ro(r6, &(0x7f0000002180)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$nl_route(r15, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)=@ipv6_newaddrlabel={0x44, 0x48, 0x400, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8, 0x0, r4, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20008811) (async) ioctl$sock_proto_private(r6, 0x89eb, &(0x7f0000002300)="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") (async) socket$unix(0x1, 0x5, 0x0) 2m14.299393352s ago: executing program 5 (id=3383): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2m14.090989683s ago: executing program 5 (id=3387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'ip6tnl0\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000048027b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m13.615975522s ago: executing program 5 (id=3392): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x874, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x844, 0x2, [@TCA_BASIC_POLICE={0x42c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x80}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6b9a, 0x9, 0x5, 0x4, 0x4, 0x289, 0xd1, 0x9, 0x0, 0x8, 0x3, 0x7, 0x5, 0x19e, 0x3ff, 0x10001, 0x4, 0x2, 0x4, 0x0, 0x1000, 0x2, 0x5, 0x6, 0x0, 0x6, 0x2, 0x50e, 0x7f, 0x3, 0xf, 0x7fff, 0x3, 0x6, 0x9, 0xfffff8b3, 0xfffffffe, 0xffff, 0xccc0, 0x7f, 0x8, 0x65a, 0x3, 0x3, 0xd9, 0xffff, 0xa3a, 0x5, 0x5, 0x5, 0x400, 0x3, 0xff, 0x5, 0x6, 0x1, 0x8802, 0x80000000, 0x5, 0xb911, 0xa000004, 0x69e4, 0x7, 0x3, 0x8, 0x8, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x2, 0xd, 0x2, 0x2, 0x2, 0x2, 0x917, 0x2, 0xa7, 0x7, 0x8, 0x1, 0x7, 0xc3, 0x5, 0x1, 0x1, 0x9, 0x5, 0x4, 0xb, 0x7, 0x9, 0x63, 0xfffffe00, 0x2040, 0x2, 0x90c7, 0x3, 0x1000, 0x8, 0x8, 0x698c, 0x7ff, 0x1, 0x9, 0x8001, 0x7e9, 0x2, 0x6, 0x2c, 0x10, 0x2, 0x0, 0x1, 0xb, 0x8, 0x200, 0x8000, 0x4, 0x9, 0x9, 0x2, 0x3, 0xfffffdc8, 0xfff, 0x6, 0x9, 0x100, 0x80, 0x1, 0xa9, 0x6, 0x3, 0x2de, 0x3, 0x1, 0x4, 0x101, 0x6, 0x1000, 0x0, 0x5, 0x0, 0x3, 0x9, 0x16c, 0x1, 0x8000, 0x1, 0x8, 0x9, 0x7, 0x99, 0x3, 0x8, 0x8, 0x4b81, 0x7fffffff, 0x10000, 0x7, 0x5, 0x3, 0x8, 0xffff, 0x401, 0x2a53, 0x9, 0x40, 0x7, 0xd80, 0xfff, 0x8, 0x0, 0x4, 0x29, 0x9, 0x8, 0x7ff, 0x2, 0x8, 0x7f, 0x0, 0x401, 0x7, 0x8, 0x7ff, 0x800, 0x1, 0x6, 0xffffffff, 0x3, 0xff, 0x0, 0x8, 0x7, 0x6, 0x9, 0x5, 0xffffffff, 0xdba, 0xdf5, 0x6, 0x1, 0x4, 0xf8, 0x800, 0x9, 0x5, 0x1, 0x9, 0x2, 0x7, 0x7, 0x5, 0x432, 0x9, 0x5, 0x2, 0x2, 0x6, 0x4, 0x8, 0xa, 0x5, 0x6e06, 0x44, 0x4, 0x8, 0x2, 0x0, 0x2, 0x8, 0x7, 0xfffff001, 0x4, 0x6, 0x7f, 0x4, 0x800, 0x10, 0x10001, 0x1ff, 0x6, 0x9, 0xfffff1f7, 0x1, 0xb94, 0x80000001, 0x4, 0x6, 0x3, 0x6, 0x8001]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x410, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x98, 0xa, 0x3, 0x4, 0x5299, 0x4, 0x3, 0xffff949e, 0x100, 0x3, 0xe05, 0x0, 0x4, 0xfffff001, 0x8001, 0x1ff, 0x6, 0x2, 0x7, 0x80000000, 0x10001, 0x81, 0x1, 0x2, 0x40, 0x1, 0x0, 0x93, 0x2, 0x0, 0x7, 0x80000001, 0x1, 0x9, 0xe2a, 0x1, 0x9, 0x4, 0x2, 0xfff, 0x1ff, 0x5, 0x1, 0x7, 0x80000000, 0x4, 0x6, 0xfffffff7, 0x8001, 0x0, 0x800, 0x8, 0x83, 0x7f, 0x0, 0x10, 0x3, 0x0, 0x8, 0x6, 0xfffffffc, 0xfffffe00, 0x3, 0x9, 0x5a93, 0x1000, 0x300000, 0x9, 0x73, 0x2, 0xf, 0x2, 0x0, 0x2, 0x60, 0x1ff, 0x3ff, 0x4, 0x7, 0x1, 0x9df, 0x1ff, 0x0, 0x7, 0x8, 0x4ab, 0x76, 0x3, 0x3e, 0x1, 0x7, 0x3, 0x80000000, 0x0, 0x9, 0x7, 0x64de, 0xffff, 0x800, 0x10001, 0xfffffffe, 0x5, 0x66, 0x1, 0x148dc91a, 0xf2, 0x6, 0x400, 0x5, 0x8, 0x100, 0x10000, 0x7, 0xb, 0x8, 0x4, 0x7, 0x5a, 0x9, 0x5, 0x6, 0x101, 0x3, 0x7, 0x200, 0x8, 0xfffffffe, 0x8, 0x5, 0xfffffffc, 0x1, 0xb, 0x6, 0x9, 0x0, 0x7, 0x6, 0xf78, 0x5, 0x4, 0x1, 0x9, 0x8000, 0x1, 0x46b, 0x9, 0x2, 0x9, 0xde48, 0xa00, 0x6, 0x2, 0x200, 0x9, 0xc5, 0xcfb, 0xa, 0x8, 0x1, 0x2cb, 0x7, 0x3e4, 0x7, 0x5, 0x7ff, 0xfb49, 0x8, 0x0, 0xfd, 0xfffffff8, 0x7, 0x8f71, 0x400, 0x9, 0x2, 0x1e1, 0x20000000, 0x4, 0x7, 0x7, 0x0, 0x7fffffff, 0x2357, 0x200, 0x9, 0x2, 0x2, 0x7c, 0x6, 0xfffffc00, 0x6, 0x8, 0x3, 0x3ff, 0x6, 0x0, 0x9, 0x0, 0x2, 0x12000000, 0x85, 0xf, 0x101, 0x10001, 0x8, 0x2, 0x4, 0xa8, 0x2, 0x8, 0x0, 0xffffffff, 0x8, 0x5, 0x2, 0x10000, 0x3, 0x9, 0x18, 0x4, 0x2, 0x1ff, 0x80000000, 0x7ff, 0x5, 0x8, 0x10, 0x40, 0xfff, 0x6, 0x7, 0x80000001, 0x3, 0x9, 0x1, 0x8, 0x0, 0x2ee257b4, 0xc, 0x0, 0x10000, 0x40, 0x8, 0x9, 0x0, 0xa03, 0xb7, 0x73, 0x3, 0x7, 0x0, 0x3, 0x2d, 0x8, 0xffffa942, 0x3]}]}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2m13.471835812s ago: executing program 5 (id=3393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x27}, 0x6e) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x4, 0x8}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x403, 0xfffffff8, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0xa90}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8001}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xe46}]}}}]}, 0x4c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 2m13.251201799s ago: executing program 5 (id=3394): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001a00)=""/227, 0xe3}], 0x1}, 0xa}], 0x2, 0x40000102, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0xa, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000080) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000800529a3e34ba9007ff002d0f00000000000000000000200000000000000000ffff0a01920000000000000000000000000000984899fbebb91438990c8f9a7c87aced25e9fc2736742a6fc37c4336d48ce50d0f9e36df7f749b1c1695f069a27c82ef8230bfba775e4e3677602ce6aeb9b8de0c"], 0x40, 0x4855}, 0x24000052) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x307, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1, 0x5}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast2}}, @sadb_key={0x0, 0x8, 0x0, 0x0, "30e55454e733a8159202c9b980b796f790a786fb4457ee606a292c50"}, @sadb_lifetime={0x4, 0x4}]}, 0x98}}, 0x4000001) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1m58.142129003s ago: executing program 33 (id=3394): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001a00)=""/227, 0xe3}], 0x1}, 0xa}], 0x2, 0x40000102, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0xa, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000080) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000800529a3e34ba9007ff002d0f00000000000000000000200000000000000000ffff0a01920000000000000000000000000000984899fbebb91438990c8f9a7c87aced25e9fc2736742a6fc37c4336d48ce50d0f9e36df7f749b1c1695f069a27c82ef8230bfba775e4e3677602ce6aeb9b8de0c"], 0x40, 0x4855}, 0x24000052) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x307, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1, 0x5}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast2}}, @sadb_key={0x0, 0x8, 0x0, 0x0, "30e55454e733a8159202c9b980b796f790a786fb4457ee606a292c50"}, @sadb_lifetime={0x4, 0x4}]}, 0x98}}, 0x4000001) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 51.92223549s ago: executing program 2 (id=4320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRES32=r0], 0x10b8}, 0x186) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c00048034000180"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292e254c7b6ef915d564c90c200", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000010) recvmsg$unix(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x2200) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@delchain={0x44, 0x65, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x6, 0xffe0}, {0xf, 0xe}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 51.546343194s ago: executing program 2 (id=4323): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f00000000c0), 0x12) close(r1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x2, 0xb, 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x17, 0x800, 0x70bd2d, 0x25dfdbfc, {0x16}, [@typed={0x8, 0xf6, 0x0, 0x0, @uid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9c0300001800040729bd7000fbdbdf25ac1414aa000000000000000000000000ff0100000000000000000000000000014e2000044e200005020040e05e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d32b000000e0000002000000000000000000000000050000000000000000000000000000000100000000000000010000000000000009000000000000006d000000000000000000000000000000008001000000000003000000000000000100000000000000f40000000000000003000000000000000700000005000000030000b2d289255861a62e8c8d002bbd7000000000000a0002fd000000000000000001000000000000004b0002006374722874776f66697368290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000fb439a00660003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000295f7f78b1d02796360f1a5b36e9469859b9caa4c715052869924223835600002400090006000000000000000600000000000000020000000000000001000000000000001c00040001004e234e2000006401010200000000000000000000000008000c0001800000640001007368613531322d737373653300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000003c786c146621c43ee7d277d72a66b0eb0c415567a1dd9b2a05b4f883e4000600ac1414bb000000000000000000000000000004000000000000000000000000014e2300024e2100000a0020a0080000006146a3", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ac14143b000000000000000000000000000004d23300000000000000000000000000000000000001ff0f0000000000000101000000000000000000000000000000100000000000000500000000000000ff030000000000000b00000000000000040000000000000005000000000000000a000000000000000300000000000000ff07000000000000aa00000009000000080000002cbd700001350000020002021400000000000000600001006e68706f6c79313330352d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000046f9496daf581f61c5e65248c10771f7c0b8bc68cdc0b7c8"], 0x39c}, 0x1, 0x0, 0x0, 0x41}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x40c, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {0x1a}, [@nested={0x10d, 0x165, 0x0, 0x1, [@nested={0x4, 0x6}, @generic="af63dae42558bd89fc5ffcada38ee4b6a03957bf88bb556bbd942bc9a53942a1fc4d0b5e1d2d497c", @nested={0x4, 0x15c}, @typed={0x8, 0x143, 0x0, 0x0, @fd}, @generic="c0dbd4031de5855d078f1c47ffaec752182e8f369b1c83ce5a4f43c2c773bee83eb8f5aab861c61be4c28755e338ff5f3ce261bceea6c3dacd647d8e1a439bfacbe4c98a473a2ccd0046c8b12306928d5962218bd3092f740cb357df7212f478199a26e112330b7fe17806cf3556d04a84f744db44b99cfb47731f12514066c92e73321329d4602b59ba02ba91ee25248896d04d74bf3613cb9cf121bf83f71a68ef9cfc8816c4a57eb45f8674177efe65f3682fe0", @nested={0x4, 0x141}, @nested={0x4, 0x11}, @typed={0x8, 0x15, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xda, 0x0, 0x0, @u64=0x4}]}, @typed={0xfc, 0x95, 0x0, 0x0, @binary="07557cc492d70d8c2d8f3595a20f0e7b45161e7d923d986aa106e0d17442399063873466d7273ff3cdabbca5323788b003f9ad53c73003d32fc3f77f8e08f37292da491bb5ea51ef54cd83d5e447cd49e48d862ed6e6795dae387884d242802ae7b17b1d13188056afa6b6c95fb76c1738e386574306440b59cd161624a04e0ea48e7656d0b194284a6bda986c0ac1096221900f1c895fab75ecf8241fa3f1a7981d965da9f551f58de12f64e77d679f31804bcf0e8f5c16c3352b57e519d9c9b3f3893f2e5861003b7dc6d7ac2e9323ad4d84b23e49eae7e9400599a06a3d5084da91bf8ef99af332efd1552899ed16091f82633f85a4c5"}, @typed={0x8, 0xcb, 0x0, 0x0, @uid}, @nested={0x87, 0x2f, 0x0, 0x1, [@typed={0x8, 0x137, 0x0, 0x0, @uid}, @typed={0x4, 0x111}, @nested={0x4, 0xd8}, @generic="779a8561100c0d0373509761b88ec13c5b38e5a4697d7a4290", @generic="663fbbfe86b1424ab78e65fe485a794c932f4567211ed73c362caf3345ec2a7afb6048ee548a2266b19da06b02fb1bea7261775fd74f8f2e893f8ffc02029524a172fbbd4188170d66abbf2312290414eb1bdf4d2ec9", @nested={0x4, 0x117}]}, @generic="a84617933d2bace2be46cbfdd3770389406e5aba6a2911e106276586b1dd12c3048c3d3bf09105d25e2e0b430c06a6ce86876f44dcb34ea1b77d8123e32ce9c6ef430be1aedc201af2d844aacffa11075d26a17e45d200426fb02c2548636f367d499e8841fa299d373ad3983b874cc72dddc504292b927dbb6e41ef1f3fa69419c47a0e010636b93aaa74ec7d7c5413090479a099ad2448061230e12755bf7618a1bc3380b514b96516ec65ea74eb154d433676d6e266b864f900fcbf7175136f32806dfa45162babbe1d1b51ce233f6d665271678cc35cac692f6ae1909b0ce8", @typed={0xc, 0xc9, 0x0, 0x0, @u64=0x2a0}, @generic="5c995cabcd3ab9f98313c7333078821be4ca5b63a54c36422a001ff644fa5a5c72d5413bc22135ed18e2ddbf1220f2380a790fe1902d18e7d53f09eda81d5653c771509ee329061003dc560027200007e7d5e15c0610095f35402187234c36", @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x135, 0x0, 0x0, @uid=r2}]}, 0x40c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x24, r5, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "02"}]}, 0x24}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000601000000004400050000000000000080010000000000000001000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x88000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x18}, 0x4ff97) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000d6000026549a5fa8367192247c000000000000000000dc0984c000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r11, r11], 0x0, 0x10, 0x1000}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x8000000, 0x1, 0x40400, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r12, 0x0, 0x8000000}, 0x27) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRESOCT=r3, @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 51.343831387s ago: executing program 2 (id=4325): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440", 0x21) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000400)={{r2, &(0x7f0000000000)='GPL\x00', 0xc0000, &(0x7f0000000040)={@align=0x2, {0x1, 0x0, 0x3, 0xa}}, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0xf}, {[0x1, 0x1, 0x4, 0x6]}, 0x4, 0x40, &(0x7f0000000200)=""/64}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x70}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x48400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x1405, 0x800, 0x70bd2d, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 51.257749157s ago: executing program 2 (id=4327): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xe95}], 0x1, 0x8000, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'veth0_vlan\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r6, 0x3, 0x6, @remote}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x24, 0x11, 0x1, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810) 50.396130014s ago: executing program 2 (id=4334): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x6, 0x800}, &(0x7f0000000340)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f00000001c0)=0x209, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x1, 0x4b, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x1f}, {0x6, 0x8, 0x0, 0x3}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f00000004c0)="20f443d82e46119b9acee2e8963544ee153771661af721323f063ac53c3eadeeab8eb6f98c3e1987db296ac99fcc929a9d23ccc4e1d062908cdde5b5a2fc6a6c56839f5987e45e0dfa8020ddb0fd66fe96ffdf13548bd59a759316516b423693abd7acdf61197fbac6dd13d46ee44d08e27c9dc84c500b0a26c56b036b10976a389c9048a7fdf7c1815930a4f5dde481951fca149444f147de8eb22dca6b50") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x8, @local, 0x3}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x38) sendto$inet6(r6, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/4096, 0x1000}, 0xf8d}], 0x1, 0x10122, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'gre0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x0, 0x6, {{0x2c, 0x4, 0x3, 0x9, 0xb0, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, {[@generic={0x7, 0x12, "a0e170ab2596b5b7cd8bb49aa113601d"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x92, 0x3, 0x9, [{@private=0xa010100, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xf0}, {@multicast1, 0x88}, {@rand_addr=0x64010100, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0xa9, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe7}, {@broadcast, 0xf}, {@empty, 0xfffffffd}]}, @ssrr={0x89, 0xf, 0x23, [@multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100]}, @end, @rr={0x7, 0x17, 0x10, [@local, @empty, @loopback, @loopback, @multicast1]}, @lsrr={0x83, 0x13, 0xab, [@empty, @broadcast, @broadcast, @multicast1]}, @timestamp_addr={0x44, 0xc, 0xa9, 0x1, 0x9, [{@remote, 0x7}]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@ipv6_getroute={0x74, 0x1a, 0x2, 0x70bd26, 0x25dfdbfe, {0xa, 0x14, 0x10, 0x0, 0xff, 0x1, 0x0, 0xa, 0x1000}, [@RTA_PREF={0x5, 0x14, 0x1}, @RTA_GATEWAY={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @RTA_OIF={0x8, 0x4, r11}, @RTA_IIF={0x8, 0x3, r8}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x5, 0x9, r11}}, @RTA_PREF={0x5, 0x14, 0x2f}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x7}}, @RTA_PRIORITY={0x8, 0x6, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) 49.62833114s ago: executing program 2 (id=4338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000080) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00B', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2501000000040001801c0002800c00018008000100070000000c0001800800010006000000"], 0x34}, 0x1, 0x0, 0x0, 0x2001}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000008000069104e000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 34.628343142s ago: executing program 34 (id=4338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000080) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00B', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2501000000040001801c0002800c00018008000100070000000c0001800800010006000000"], 0x34}, 0x1, 0x0, 0x0, 0x2001}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000008000069104e000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 4.404367023s ago: executing program 1 (id=4746): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100c39042abd700000000000fe0c0000", @ANYRES32=0x0, @ANYBLOB="011a02003537a940140012800b00010065727370616e0000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 4.34048672s ago: executing program 1 (id=4749): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x50, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0xd, 0x0, 0x0, {{0xf}, {0x4}, {0x7, 0x6, "672101"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x50, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0xd, 0x0, 0x0, {{0xf}, {0x4}, {0x7, 0x6, "672101"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socket(0x2, 0x5, 0x0) (async) r5 = socket(0x2, 0x5, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000000)) ioctl$sock_x25_SIOCADDRT(r5, 0x891a, &(0x7f0000000040)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x4, 'team0\x00'}) (async) ioctl$sock_x25_SIOCADDRT(r5, 0x891a, &(0x7f0000000040)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x4, 'team0\x00'}) 3.975961602s ago: executing program 1 (id=4754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x80000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffa}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "06ec87"}}]}, 0x140}}, 0x844) 3.738720471s ago: executing program 1 (id=4759): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) pselect6(0x69, &(0x7f00000001c0)={0xfc5, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x8000000000000000, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x3f, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x30}}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250300000008000100", @ANYRESHEX=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x91) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$vsock_stream(0x28, 0x1, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x1, 0x803, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x100, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0xf2dbd8e418e4b022}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r17}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r18 = socket(0x10, 0x3, 0x0) sendmmsg(r18, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r14], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 3.691643408s ago: executing program 0 (id=4760): unshare(0x20000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x2a060400) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x400) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', r8, 0x2f, 0x2, 0x7, 0xfffff51e, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x20, 0x9a4, 0x2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x1, @private0, 0x6a69}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf, 0x30}, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x8, 0x0, &(0x7f0000000000)="259a53f271a76d26", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x9c}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) 3.47074569s ago: executing program 6 (id=4762): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x10009, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000140), 0xffffffffffffff42) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000f001000010400"/20, @ANYRES32=0x0, @ANYRES64=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg\x00', 0x1000}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg\x00', 0x1000}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000600)="5c2e1fdf00fefaac990f33327de10393f37d5632c7a9a18e03c9497ec788e5fdf9dfdbca1ca60e3c150cde04ff404d04ec214470fcdfdb024d53917aeffb4f9b831fb39d82c5282b249ecad6dd1c029261a730d43e8175eb8f5550a7dc", 0x5d}], 0x1}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000600)="5c2e1fdf00fefaac990f33327de10393f37d5632c7a9a18e03c9497ec788e5fdf9dfdbca1ca60e3c150cde04ff404d04ec214470fcdfdb024d53917aeffb4f9b831fb39d82c5282b249ecad6dd1c029261a730d43e8175eb8f5550a7dc", 0x5d}], 0x1}, 0x0) ppoll(&(0x7f0000000140)=[{r5, 0x82d2}, {r5, 0xc122}], 0x2, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000140)=[{r5, 0x82d2}, {r5, 0xc122}], 0x2, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3.143508124s ago: executing program 0 (id=4766): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x44) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x44) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) 3.110988913s ago: executing program 4 (id=4767): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8}, {0xfff3, 0x9}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfffc}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001002abd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000059779b7b136c19907f82a6e9b4630a4a9e20bbbb8250d79010d1700ada48506622ca0c5e60b02e0899dce1fbc0b379ff827f"], 0x1c}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000200)=[{r2, 0x1210}], 0x1, 0x1ff8) (async) poll(&(0x7f0000000200)=[{r2, 0x1210}], 0x1, 0x1ff8) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x3ffd}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5000}]}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x3ffd}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5000}]}}]}, 0x40}}, 0x0) unshare(0x2c020400) unshare(0x40380) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r7 = socket(0x15, 0x5, 0x0) connect$unix(r7, &(0x7f00000003c0)=@abs={0xa}, 0x6e) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000040)=0x8) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000040)=0x8) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100001005f58772f0000000085ff00003e000000000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100001005f58772f0000000085ff00003e000000000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r10, 0x8004b707, 0x0) (async) ioctl$NS_GET_OWNER_UID(r10, 0x8004b707, 0x0) 3.030735379s ago: executing program 0 (id=4768): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002540)=""/4117, 0x1015}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}, 0x800}, {{&(0x7f0000003940)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x3}], 0x5, 0x20000, 0x0) 2.851933168s ago: executing program 4 (id=4769): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x700, 0x7800, 0x3398, 0x9, {{0x1e, 0x4, 0x3, 0x8, 0x78, 0x67, 0x0, 0x10, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xc4, 0x3, 0x0, [{@empty, 0x1}, {@local, 0x5}, {@multicast1, 0x1}]}, @rr={0x7, 0x13, 0x3a, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x34, 0x68, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@private=0xa010101, 0x4}, {@broadcast, 0x3}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x6}, {@remote, 0x16}]}, @noop]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0xfffffffffffffd88, &(0x7f0000000280)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0xc4, @loopback, 0x8}], 0x3c) 2.807651429s ago: executing program 6 (id=4770): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x10, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20008c, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xc, 0x9, 0x9, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc05}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 2.78982759s ago: executing program 4 (id=4771): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB=';'], 0x20) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x20000000000000be, &(0x7f0000000400)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095", @ANYBLOB="e7165f12e2884b0623a209b33530f406a645de62f5a8687fa61b47e0db5e0b7c08a00eab514653e86f1b3f986e25a6ee0820c75189ca621937eeb685fa8b3c36bbe2f3e8ba76d4af5c9d26948c84e56b4bb17785f475b4a07c878d71b0718afd4c6b0de4efaaaee642e7210673a6d2c251fa253e520585b24f85f22c35a5e449059c27f8b0f9bfc88fd1b1bcec250deb42bf4691948fea54de560b7e06f30b484b73d176944bc6ee0999b6a0e44155ffc478db63248b945d7be36b22473ee4804a", @ANYRES64=r0], &(0x7f00000005c0)='GPL\x00', 0x88, 0xda, &(0x7f0000000300)=""/218, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.655119045s ago: executing program 4 (id=4772): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r2) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r6, @ANYRES16=r6, @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8800) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r9, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x65}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x200000c0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) 2.599295649s ago: executing program 6 (id=4774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2.10324917s ago: executing program 6 (id=4776): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff0100670600004e000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90f89c54ca2d6b792beb3302600ff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adfff3f6daed3cdfee7de13ad4f90"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.040153438s ago: executing program 6 (id=4777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000040)="35bae4", 0x3) recvmmsg$unix(r2, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000001180)}}], 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x72, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000640)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000740)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000780)={{{@in=@broadcast, @in6=@loopback, 0x4e21, 0x0, 0x4e22, 0x8cf8, 0x2, 0x0, 0x20, 0x84, r3, r4}, {0x7f, 0x9, 0x0, 0xa5, 0xffffffffffffffff, 0x89, 0xffffffffffffffff, 0x3}, {0x3, 0xfffffffffffffffb, 0x6, 0x4}, 0x80, 0x6e6bb8, 0x1, 0x1, 0x4}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4d2, 0x16}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3506, 0x89c25c4f36342d05, 0x3, 0x5, 0x1, 0x2, 0x8}}, 0xe8) socket(0x1a, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) unshare(0x2a020400) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000203010200000000000000000180000809000200000000090000000008000340000004310800044000000020080001000100001a"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) 1.655095359s ago: executing program 7 (id=4778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32, @ANYBLOB="00000000000000001400128009000100626f6e64000000000c000280050001"], 0x3c}}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x8c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5301}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x8c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) 1.531638926s ago: executing program 7 (id=4779): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x5, 0x5, 0x9, 0x2, 0x8, 0x0, 0xc6, 0x2, 0x80, 0x8, 0xa, 0x7, 0x3}, 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800001, 0x25dfdc00, {0x2, 0x10, 0x51, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x509d884560ba1ba6, 0x3}, {0xa}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001700)={{r5}, 0x0, 0xe, @unused=[0x9, 0x9, 0x2, 0x1], @name="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"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x19, 0xffffffffffffffff, &(0x7f0000000240)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC=r9], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 1.43904795s ago: executing program 7 (id=4780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) (async, rerun: 64) r1 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800009d0000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000040)="34868893ac1aa87b3776ed8b1a00", 0x0, 0x10000, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000280)={r3, &(0x7f0000000080)='\x00', 0x20080, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0x2]}, {0x9, 0x0, 0x6, 0x9}}, 0x2, &(0x7f0000000100), &(0x7f0000000240)}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x5, 0x1, 0x21, @mcast1, @loopback={0x300, 0x460c6}, 0x700, 0x8, 0x25a1, 0x40040}}) (async, rerun: 32) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="149e00020000df2508c200005b71"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x800) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, &(0x7f0000000400)) (async, rerun: 64) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0xc2, 0x1, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x9}]}}}}}}}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000440)=0x1, 0x4) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbd3df25020000000500040001000000050004000f0000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/107, 0x6b}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4080, 0xff0}], 0x3}, 0x1}], 0x1, 0x20, 0x0) 1.313974747s ago: executing program 7 (id=4781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x800001, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r3, 0x8901, &(0x7f0000000080)) (async) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) 1.203793305s ago: executing program 7 (id=4782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xa838, 0xfff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000180), &(0x7f0000000200), 0x8}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf25050000003800058007000100696200002c00028008000400faffffff08000400ffff0000080004000700000008000400070000000800030001000080580004801300010062726f61e4636173742d6c696e6b000034000780080004001b8cef7e08000400232c000008000400070000000800040002000000080004000300000008000400050000000c0007800800030001000100040001800c000380080003000c0000004c000280340003800800010001000100080002000600000008000200ff0000000800020007000000080002000800000008000100ffff000008000100cc0500000400040008000100fffeffff0c0005800800010075647000200001800c000280080001000f0000000d0001007564703a73797a31000000001b3ca5cfd40988a15e2cd36cd9cc00d6ae3af5cd078314e2c5a563074d8d56363dd99eeb30481e65f7948a92a85ea6b37a00e6feacf4cd137a0ba8e72c1f871e80b2e92b710f5252d755e221769a99bdf3cc40bc23185b8649f89335d71f"], 0x12c}, 0x1, 0x0, 0x0, 0x200050d0}, 0x24048801) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 996.224946ms ago: executing program 6 (id=4783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010424bd7000fbdbdf252e00000008000300", @ANYRES32=r5, @ANYBLOB="0a00340001010101010100001800490008ac0f00"], 0x50}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x40800) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x94, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x72, 0x8, "84c008b51c5446fc725fab9f765a6dc600f779234288ba6f403a05faf73235356be872dfab03abe61d545c9065ac69424aa5f153bb6f53bbc24886b8270971f7421c3531106308eac879ab36a548ac4e4890e07ac3fbf2e0a950c42236ffcf81f3a102d57e78848d562412be8749"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}, 0x1, 0x0, 0x0, 0x24000850}, 0x24044010) 546.584162ms ago: executing program 0 (id=4784): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x10, 0x7, 0x7, 0x8, {{0x21, 0x4, 0x3, 0x2a, 0x84, 0x68, 0x0, 0x8, 0x2f, 0x0, @empty, @remote, {[@cipso={0x86, 0x55, 0x3, [{0x7, 0xc, "43cd3e52197a12696fed"}, {0x7, 0x10, "1f177bd97f854e716ee8675ae5fb"}, {0x6, 0x12, "8398e935e9c3b0c6462403070fd5d067"}, {0x7, 0x12, "b25338047e41b5e7682275c32f51fe43"}, {0x7, 0x2}, {0x7, 0xd, "887ce98cc67c067a1a45d6"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xb5, 0x0, 0x6, [0x0, 0xa, 0x9a60, 0x1]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x10, 0x7, 0x7, 0x8, {{0x21, 0x4, 0x3, 0x2a, 0x84, 0x68, 0x0, 0x8, 0x2f, 0x0, @empty, @remote, {[@cipso={0x86, 0x55, 0x3, [{0x7, 0xc, "43cd3e52197a12696fed"}, {0x7, 0x10, "1f177bd97f854e716ee8675ae5fb"}, {0x6, 0x12, "8398e935e9c3b0c6462403070fd5d067"}, {0x7, 0x12, "b25338047e41b5e7682275c32f51fe43"}, {0x7, 0x2}, {0x7, 0xd, "887ce98cc67c067a1a45d6"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xb5, 0x0, 0x6, [0x0, 0xa, 0x9a60, 0x1]}, @end]}}}}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xe, 0x854f, 0x14, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0xce, 0xbf, 0x2, 0xb, @mcast2, @mcast1, 0x700, 0x8000, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0xd9, 0xd590, 0x62, @dev={0xfe, 0x80, '\x00', 0x2c}, @private1, 0x0, 0x20, 0x2c2f, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2d, 0x2, 0x5, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x80, 0xfff, 0xfffffffa}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r12) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r12) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x2000, {0x0, 0x0, 0x0, r13, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r11, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r13}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) sendmsg$GTP_CMD_DELPDP(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r11, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r13}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000980)={@multicast1, @loopback}, &(0x7f00000009c0)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000980)={@multicast1, @loopback, 0x0}, &(0x7f00000009c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0xf9, 0x4, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x40, 0x1, 0x7fff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000b00)={@private, @broadcast}, &(0x7f0000000b40)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000b00)={@private, @broadcast, 0x0}, &(0x7f0000000b40)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000000b80)={0x98c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x288, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfffe, 0x5, 0x7, 0x6}, {0x7, 0x0, 0xa0, 0xf}, {0x7, 0x12, 0x7, 0x1}, {0x8d, 0xa, 0xd}, {0x1, 0x8, 0x1, 0xd86f}, {0x2, 0x80, 0x8, 0x977}, {0x200, 0xf3, 0x3b, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb33d}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9a08}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x1, 0xc, 0xa}, {0x6, 0x40, 0x10, 0x6}, {0x100, 0x0, 0x7, 0x6}]}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r1}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x91}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r15}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x98c}, 0x1, 0x0, 0x0, 0x4000804}, 0x84) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000000b80)={0x98c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x288, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfffe, 0x5, 0x7, 0x6}, {0x7, 0x0, 0xa0, 0xf}, {0x7, 0x12, 0x7, 0x1}, {0x8d, 0xa, 0xd}, {0x1, 0x8, 0x1, 0xd86f}, {0x2, 0x80, 0x8, 0x977}, {0x200, 0xf3, 0x3b, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb33d}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9a08}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x1, 0xc, 0xa}, {0x6, 0x40, 0x10, 0x6}, {0x100, 0x0, 0x7, 0x6}]}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r1}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x91}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r15}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x98c}, 0x1, 0x0, 0x0, 0x4000804}, 0x84) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 495.942744ms ago: executing program 7 (id=4785): syz_emit_ethernet(0xca, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x94, 0x3a, 0xfe, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0xdb0b, 0x9, 0x0, [{0x18, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150"}, {0x1f, 0x7, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a705"}, {0x21}]}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xa, [@const={0xc}, @struct={0x8, 0x4, 0x0, 0x4, 0x1, 0x4, [{0x10, 0x5, 0x2}, {0x4, 0x3, 0x7}, {0xd, 0x4, 0xffffffff}, {0xf, 0x2, 0x7}]}, @ptr={0xf, 0x0, 0x0, 0x2, 0x1}, @float={0xf, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x101}}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @float={0x4, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x2e, 0x2e, 0x30, 0x61, 0x30, 0x0, 0x30]}}, &(0x7f00000001c0)=""/29, 0xb2, 0x1d, 0x1, 0x101}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x80002009}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 423.321426ms ago: executing program 1 (id=4786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711826000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000104)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000480)=@udp=r1}, 0x20) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000600)={0x0, 0x401, 0xffffffff, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001240)={0x0, "9ef37e247fd0bdb43151d8f00186f94d"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000002240)={0x0, 0x1, 0x1, [0x7, 0x4, 0x4, 0x0, 0x8], [0x1799535b, 0x8, 0x7fffffff, 0x7807ab37, 0xfffffffffffffffc, 0x3, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x6, 0x8, 0xfffffffffffffff6, 0x4, 0x1, 0x80000000, 0x2, 0x8001, 0x2, 0xdc, 0x6, 0x0, 0x6f5, 0x0, 0x7, 0x6, 0x9, 0xae, 0x9, 0x7fffffff, 0x9, 0x9, 0x8, 0x185, 0x17, 0x2, 0x3, 0x7fffffff, 0x1ff, 0x2, 0x8000000000000000, 0xffffffffffffff01, 0x8, 0x22a657d, 0x0, 0x2, 0x1ff, 0x6, 0x6, 0x7, 0x4, 0x200, 0x2, 0xfffffffffffffc01, 0x8, 0x3, 0x2, 0xff80000000000000, 0x0, 0x4, 0x2, 0x54, 0x5, 0x2, 0x7, 0x0, 0x9, 0x9, 0x3, 0x101, 0x5, 0x84, 0x3, 0xfffffffffffffffd, 0x6, 0x0, 0x2, 0x5, 0x2, 0x9, 0xfffffffffffffffe, 0x10, 0x1, 0x5, 0x1000, 0x40, 0x6, 0x6, 0x0, 0x100000000, 0x81, 0x0, 0x4, 0x1, 0x2, 0x357, 0x7, 0x1, 0x3, 0x9, 0x80000000, 0x7729, 0x8000000000000001, 0x9000000, 0x80000001, 0xfffffffffffffffc, 0x5, 0x1, 0x10000, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x73, 0xffffffffffffe0ba, 0xfff, 0x9, 0x7, 0x40, 0x18000000, 0x3]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002680)={0x13, 0x2, {0x8, @usage=0x10000, r3, 0x7fffffff, 0x5, 0x8, 0x426e, 0x7, 0x8, @struct={0x7e}, 0x5, 0xffff8341, [0xffffff0000000000, 0x100000001, 0x2, 0x7, 0xfff, 0x7]}, {0x3, @usage=0x100, r4, 0x3, 0x9, 0x2, 0x6, 0x5, 0x9, @struct={0x4, 0x1}, 0x0, 0x80000000, [0x3, 0xf1c, 0x43e, 0x7, 0x92bf, 0xe7f]}, {0x5, @usage=0x8852, r5, 0x8, 0x2, 0x1, 0x0, 0xffffffffffffff43, 0x400, @usage=0x8, 0x80000001, 0x8, [0x1400000000000, 0x800, 0x2, 0x0, 0x9, 0x1]}, {0x95, 0x8, 0xfffffffffffffff7}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0xffd, 0x6, 0x1d, 0x5, 0x4, 0x27}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x4000010) getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) 256.316542ms ago: executing program 4 (id=4787): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214d", 0x2b}, {0x0}, {&(0x7f0000001000)="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", 0x463}], 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214d", 0x2b}, {0x0}, {&(0x7f0000001000)="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", 0x463}], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000109010400000000000000000a00000808000540000000170900010073797a3300000000534168814390ccbf6a6c0780ba3521fe614bac98a1f78a234f092790053dc3cf24c595f361916174cd0276cd8f1daba55191a578746756d53ddb6113b5a566e1a342cce6e902002009fa32cd62dde5d27db15b37d909c5aa92c5ef0e46b9071c42d86142563147d8fd252e6444ee2616aa565ff73fcfc6e8905cf2983907db2fee56bc1339e6e5fc6d6a64a4f924a73139cb04897b7a73aae0358be50615c2"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x44054) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000109010400000000000000000a00000808000540000000170900010073797a3300000000534168814390ccbf6a6c0780ba3521fe614bac98a1f78a234f092790053dc3cf24c595f361916174cd0276cd8f1daba55191a578746756d53ddb6113b5a566e1a342cce6e902002009fa32cd62dde5d27db15b37d909c5aa92c5ef0e46b9071c42d86142563147d8fd252e6444ee2616aa565ff73fcfc6e8905cf2983907db2fee56bc1339e6e5fc6d6a64a4f924a73139cb04897b7a73aae0358be50615c2"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x44054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="0c952bdd19b8d8f3723a0ae3f72dc3a71e3c866a4c5639f7d9a1ab045031fcd23e1e2d5e2a893fff1f852d41aac9b67ccb5b3ffaa0a242c967d0207f4fff06fb663fad53290e8feead5ec5d985ab85e04097d8904c736a2075f8200f8e5355ece76c3e148c57f53f735feaff3a637aa075fb3b6215d5531beeeeeaeb1e769a53264872799c853d6d8e527a2715d9dae7a985fdc56e967ccf5479c54e99", 0x9d}, 0x1, 0x0, 0x0, 0x404c014}, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) unshare(0x22020400) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r8, 0xffffffffffffffff, 0x2c}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r8, 0xffffffffffffffff, 0x2c}, 0x20) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) (async) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340)="8e6b373c083a4aa2195588524a06ffff8b764488e01b5c1af641399bf5fbb0f58b843bb2980b248235f47f", &(0x7f0000000380)="e1c265e436668d5b24d786ea4ca672191fd914419f807f", 0x7c, r7, 0x4}, 0x38) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ac0)=@generic={&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 39.790499ms ago: executing program 0 (id=4788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 38.750016ms ago: executing program 1 (id=4789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x8, 0x22, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000600)=""/34, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2a}, 0x50) 37.739363ms ago: executing program 4 (id=4790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 0s ago: executing program 0 (id=4791): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac14"], 0x78}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac14"], 0x78}}, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r0, 0x0, 0x0, 0x800) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000580)=[@op={0x2a, 0x117, 0x3, 0x1}, @op], 0x4}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="9d743c98d6ba81ce36d9efebfb6de188b7b617f3d155b430231050738b9aaeba5db4f14f166043fc6657ba56868d9a1444b779e27d584d557c50ef38b1662cfa43ebd2d820caeb07be36f11ea68da7b6cee5a11f46592f4380025bfe93a0e0fffef7ae6033cae128915a7cc47209cd7b7387efb03bae9746"}], 0x0, &(0x7f0000000340)=[@assoc={0x0, 0x117, 0x4, 0x3c0c}, @assoc={0x0, 0x117, 0x4, 0x18}], 0x0, 0x10}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x3a, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/89, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) (async) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) sendto$inet6(r4, &(0x7f0000000140)="8d", 0x1, 0x4004, 0x0, 0x0) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/224, 0xe0}, 0x12020) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0xf4, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000000000)=""/222, 0x41100, 0x73}, 0x94) kernel console output (not intermixed with test programs): terface with an up link [ 549.701002][T19495] netlink: 'syz.4.3476': attribute type 2 has an invalid length. [ 549.709856][T19495] netlink: 'syz.4.3476': attribute type 2 has an invalid length. [ 549.716755][T19482] macvlan2: entered promiscuous mode [ 549.732361][T19482] macvlan2: entered allmulticast mode [ 549.740898][T19482] bond2: entered promiscuous mode [ 549.746314][T19482] veth0_to_bond: entered promiscuous mode [ 549.764423][T19482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.771659][T19500] netlink: 'syz.2.3478': attribute type 2 has an invalid length. [ 549.782306][T19482] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth5 [ 549.838791][T19482] bond2: left promiscuous mode [ 549.854231][T19482] veth0_to_bond: left promiscuous mode [ 550.076228][ T1495] block nbd2: Possible stuck request ffff888027617000: control (read@0,1024B). Runtime 240 seconds [ 550.087229][ T1495] block nbd2: Possible stuck request ffff8880276171c0: control (read@1024,1024B). Runtime 240 seconds [ 550.098420][ T1495] block nbd2: Possible stuck request ffff888027617380: control (read@2048,1024B). Runtime 240 seconds [ 550.109519][ T1495] block nbd2: Possible stuck request ffff888027617540: control (read@3072,1024B). Runtime 240 seconds [ 550.830555][T19548] netlink: 'syz.1.3492': attribute type 11 has an invalid length. [ 550.854821][T19548] netlink: 'syz.1.3492': attribute type 11 has an invalid length. [ 550.864556][T11699] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.884846][T11699] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.909543][T11699] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.934619][T11699] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.028282][T19556] __nla_validate_parse: 19 callbacks suppressed [ 551.028316][T19556] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3495'. [ 551.045405][T19556] netlink: 'syz.0.3495': attribute type 9 has an invalid length. [ 551.056127][T19556] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3495'. [ 551.069000][T19556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3495'. [ 551.129277][T19558] netlink: 'syz.2.3496': attribute type 1 has an invalid length. [ 551.231630][T19558] bond7: entered promiscuous mode [ 551.246457][T19558] 8021q: adding VLAN 0 to HW filter on device bond7 [ 551.301545][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3497'. [ 551.312542][T19559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 551.340240][T19559] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 551.367366][T19559] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 551.388438][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3500'. [ 551.401162][T19559] bond7: (slave gre2): making interface the new active one [ 551.410404][T19559] gre2: entered promiscuous mode [ 551.419379][T19559] bond7: (slave gre2): Enslaving as an active interface with an up link [ 551.439033][T19567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3497'. [ 551.588490][T11699] net_ratelimit: 43 callbacks suppressed [ 551.588510][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 551.716852][T19581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.724600][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 551.802912][T19592] netlink: 'syz.0.3506': attribute type 8 has an invalid length. [ 551.822495][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3506'. [ 551.909265][T19592] veth1_to_team: entered promiscuous mode [ 551.927664][T19592] gretap0: entered promiscuous mode [ 551.942276][T19592] veth1_to_team: left promiscuous mode [ 551.959188][T19592] gretap0: left promiscuous mode [ 552.004137][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 552.113084][T19606] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 552.122441][T19606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.131386][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 552.354277][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 552.475850][ T770] bond4: (slave bridge0): failed to get link speed/duplex [ 552.564662][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.604519][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 552.701397][T19640] pim6reg: entered allmulticast mode [ 552.734926][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 552.765949][T19640] pim6reg: left allmulticast mode [ 553.253493][T19659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3521'. [ 553.547636][T19666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3524'. [ 553.573281][T19666] tipc: Invalid UDP bearer configuration [ 553.573383][T19666] tipc: Enabling of bearer rejected, failed to enable media [ 553.619435][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3524'. [ 553.636718][T19666] smc: net device wg2 applied user defined pnetid SYZ0 [ 554.947877][T19716] bond3 (unregistering): Released all slaves [ 555.595229][T19744] netlink: 'syz.4.3547': attribute type 12 has an invalid length. [ 555.676207][T19748] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:19999 [ 555.754309][T19753] nbd: nbd2 already in use [ 555.786704][T19753] block nbd2: NBD_DISCONNECT [ 555.794599][T19753] block nbd2: Send disconnect failed -32 [ 555.801273][T19753] block nbd2: shutting down sockets [ 555.818138][ C0] blk_print_req_error: 118 callbacks suppressed [ 555.818180][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.835826][ C0] buffer_io_error: 138 callbacks suppressed [ 555.835946][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 555.853985][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.863621][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.863702][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 555.863758][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.863815][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 555.902139][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 555.932189][ T1495] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.942958][ T1495] Buffer I/O error on dev nbd2, logical block 0, async page read [ 555.951707][ T1495] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 555.962618][ T1495] Buffer I/O error on dev nbd2, logical block 1, async page read [ 555.972312][ T1495] Buffer I/O error on dev nbd2, logical block 2, async page read [ 555.982203][ T1495] Buffer I/O error on dev nbd2, logical block 3, async page read [ 555.991047][ T1495] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 556.004682][ T1495] Buffer I/O error on dev nbd2, logical block 0, async page read [ 556.012460][ T1495] Buffer I/O error on dev nbd2, logical block 1, async page read [ 556.021101][ T1495] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.033054][ T1495] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 556.043118][ T1495] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 556.053300][ T7569] ldm_validate_partition_table(): Disk read failed. [ 556.073002][ T7569] Dev nbd2: unable to read RDB block 0 [ 556.095882][ T7569] nbd2: unable to read partition table [ 556.130212][ T4974] udevd[4974]: worker [7569] terminated by signal 9 (Killed) [ 556.164450][ T4974] udevd[4974]: worker [7569] failed while handling '/devices/virtual/block/nbd2' [ 556.449385][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.468366][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.491740][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.501825][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.510336][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 556.576375][T19776] Cannot find add_set index 1 as target [ 556.635283][T11702] net_ratelimit: 31 callbacks suppressed [ 556.635302][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 556.728473][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.770572][T19787] Unknown options in mask 6 [ 556.788276][T19787] __nla_validate_parse: 5 callbacks suppressed [ 556.788292][T19787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3558'. [ 556.805418][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 556.839419][T19789] netlink: 'syz.4.3559': attribute type 10 has an invalid length. [ 556.851240][T19787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3558'. [ 556.861330][T19789] bridge0: port 3(veth0) entered disabled state [ 556.868262][T19789] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.875900][T19789] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.904738][T19793] netlink: 'syz.1.3558': attribute type 1 has an invalid length. [ 556.907166][T19789] bridge0: port 3(veth0) entered blocking state [ 556.918996][T19789] bridge0: port 3(veth0) entered forwarding state [ 556.925823][T19789] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.933007][T19789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.940538][T19789] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.947761][T19789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.970283][T19789] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 556.995225][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 557.004654][T19793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3558'. [ 557.126946][T13182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.150341][T19799] FAULT_INJECTION: forcing a failure. [ 557.150341][T19799] name failslab, interval 1, probability 0, space 0, times 0 [ 557.187442][T19799] CPU: 1 UID: 0 PID: 19799 Comm: syz.2.3562 Not tainted syzkaller #0 PREEMPT(full) [ 557.187469][T19799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.187478][T19799] Call Trace: [ 557.187486][T19799] [ 557.187493][T19799] dump_stack_lvl+0xe8/0x150 [ 557.187526][T19799] should_fail_ex+0x40c/0x560 [ 557.187672][T19799] should_failslab+0xa8/0x100 [ 557.187710][T19799] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 557.187727][T19799] ? __kernfs_new_node+0xe6/0x980 [ 557.187760][T19799] ? __kernfs_new_node+0xe6/0x980 [ 557.187776][T19799] ? __kernfs_new_node+0xe6/0x980 [ 557.187799][T19799] __kernfs_new_node+0xe6/0x980 [ 557.187829][T19799] ? __pfx___kernfs_new_node+0x10/0x10 [ 557.187850][T19799] ? kernfs_root+0x1c/0x230 [ 557.187875][T19799] ? kernfs_root+0x1c/0x230 [ 557.187894][T19799] ? kernfs_root+0x1c/0x230 [ 557.187929][T19799] ? kernfs_root+0x1c/0x230 [ 557.187952][T19799] kernfs_new_node+0xea/0x140 [ 557.187979][T19799] __kernfs_create_file+0x4b/0x2e0 [ 557.187998][T19799] sysfs_add_file_mode_ns+0x237/0x300 [ 557.188025][T19799] internal_create_group+0x679/0x1180 [ 557.188061][T19799] ? __pfx_internal_create_group+0x10/0x10 [ 557.188087][T19799] ? up_write+0x19f/0x4a0 [ 557.188124][T19799] sysfs_create_groups+0x59/0x120 [ 557.188148][T19799] device_add_attrs+0x1b1/0x600 [ 557.188237][T19799] ? __pfx_device_add_attrs+0x10/0x10 [ 557.188252][T19799] ? kobject_put+0x50f/0x550 [ 557.188313][T19799] ? device_add_class_symlinks+0x21f/0x240 [ 557.188332][T19799] device_add+0x488/0xb80 [ 557.188350][T19799] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 557.188400][T19799] wakeup_source_register+0x17f/0x380 [ 557.188422][T19799] ep_insert+0xfad/0x1ae0 [ 557.188475][T19799] ? __pfx_ep_insert+0x10/0x10 [ 557.188508][T19799] ? bpf_lsm_capable+0x9/0x20 [ 557.188528][T19799] ? security_capable+0x7e/0x2c0 [ 557.188626][T19799] do_epoll_ctl_file+0x8c2/0xee0 [ 557.188655][T19799] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 557.188679][T19799] ? __fget_files+0x3a2/0x420 [ 557.188708][T19799] ? __fget_files+0x2a/0x420 [ 557.188735][T19799] __se_sys_epoll_ctl+0x162/0x230 [ 557.188760][T19799] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 557.188791][T19799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.188810][T19799] do_syscall_64+0x174/0x580 [ 557.188833][T19799] ? trace_irq_disable+0x3b/0x140 [ 557.188854][T19799] ? clear_bhb_loop+0x70/0xc0 [ 557.188877][T19799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.188896][T19799] RIP: 0033:0x7fba3019e0d9 [ 557.188914][T19799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.188927][T19799] RSP: 002b:00007fba3104f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 557.188949][T19799] RAX: ffffffffffffffda RBX: 00007fba30425fa0 RCX: 00007fba3019e0d9 [ 557.188959][T19799] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 557.188969][T19799] RBP: 00007fba3104f090 R08: 0000000000000000 R09: 0000000000000000 [ 557.188978][T19799] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 557.188988][T19799] R13: 00007fba30426038 R14: 00007fba30425fa0 R15: 00007ffd076522f8 [ 557.189015][T19799] [ 557.574590][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 557.746387][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 557.764433][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.801193][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052b9d800: rx timeout, send abort [ 557.856263][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'. [ 557.890736][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 557.959549][T19810] syzkaller0: entered promiscuous mode [ 557.974141][T19810] syzkaller0: entered allmulticast mode [ 558.001933][T19769] xfrm0 speed is unknown, defaulting to 1000 [ 558.024210][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 558.301351][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052b9e800: rx timeout, send abort [ 558.309798][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052b9d800: abort rx timeout. Force session deactivation [ 558.566159][ T50] Bluetooth: hci1: command tx timeout [ 558.577343][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3567'. [ 558.721137][T19829] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 558.745354][T19817] xfrm0 speed is unknown, defaulting to 1000 [ 558.754491][T19769] wg2 speed is unknown, defaulting to 1000 [ 558.800503][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052b9ec00: rx timeout, send abort [ 558.809271][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888052b9ec00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 558.824153][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052b9e800: abort rx timeout. Force session deactivation [ 558.886072][T19829] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 559.401346][T19845] gtp0: entered promiscuous mode [ 559.414193][T19845] gtp0: entered allmulticast mode [ 559.591760][T19855] FAULT_INJECTION: forcing a failure. [ 559.591760][T19855] name failslab, interval 1, probability 0, space 0, times 0 [ 559.646497][T19855] CPU: 0 UID: 0 PID: 19855 Comm: syz.4.3573 Not tainted syzkaller #0 PREEMPT(full) [ 559.646523][T19855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 559.646539][T19855] Call Trace: [ 559.646547][T19855] [ 559.646554][T19855] dump_stack_lvl+0xe8/0x150 [ 559.646582][T19855] should_fail_ex+0x40c/0x560 [ 559.646607][T19855] should_failslab+0xa8/0x100 [ 559.646631][T19855] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 559.646651][T19855] ? __kernfs_new_node+0xe6/0x980 [ 559.646672][T19855] ? __kernfs_new_node+0xe6/0x980 [ 559.646700][T19855] __kernfs_new_node+0xe6/0x980 [ 559.646729][T19855] ? __pfx___kernfs_new_node+0x10/0x10 [ 559.646752][T19855] ? kernfs_root+0x1c/0x230 [ 559.646778][T19855] ? kernfs_root+0x1c/0x230 [ 559.646797][T19855] ? kernfs_root+0x1c/0x230 [ 559.646815][T19855] ? kernfs_root+0x1c/0x230 [ 559.646840][T19855] kernfs_new_node+0xea/0x140 [ 559.646866][T19855] __kernfs_create_file+0x4b/0x2e0 [ 559.646886][T19855] sysfs_add_file_mode_ns+0x237/0x300 [ 559.646913][T19855] internal_create_group+0x679/0x1180 [ 559.646949][T19855] ? __pfx_internal_create_group+0x10/0x10 [ 559.646974][T19855] ? up_write+0x19f/0x4a0 [ 559.646993][T19855] sysfs_create_groups+0x59/0x120 [ 559.647018][T19855] device_add_attrs+0x1b1/0x600 [ 559.647038][T19855] ? __pfx_device_add_attrs+0x10/0x10 [ 559.647052][T19855] ? kobject_put+0x50f/0x550 [ 559.647075][T19855] ? device_add_class_symlinks+0x21f/0x240 [ 559.647095][T19855] device_add+0x488/0xb80 [ 559.647115][T19855] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 559.647139][T19855] wakeup_source_register+0x17f/0x380 [ 559.647160][T19855] ep_insert+0xfad/0x1ae0 [ 559.647196][T19855] ? __pfx_ep_insert+0x10/0x10 [ 559.647229][T19855] ? bpf_lsm_capable+0x9/0x20 [ 559.647248][T19855] ? security_capable+0x7e/0x2c0 [ 559.647277][T19855] do_epoll_ctl_file+0x8c2/0xee0 [ 559.647306][T19855] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 559.647333][T19855] ? __fget_files+0x3a2/0x420 [ 559.647352][T19855] ? __fget_files+0x2a/0x420 [ 559.647379][T19855] __se_sys_epoll_ctl+0x162/0x230 [ 559.647403][T19855] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 559.647434][T19855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.647452][T19855] do_syscall_64+0x174/0x580 [ 559.647474][T19855] ? trace_irq_disable+0x3b/0x140 [ 559.647492][T19855] ? clear_bhb_loop+0x70/0xc0 [ 559.647512][T19855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.647536][T19855] RIP: 0033:0x7f8f2d99e0d9 [ 559.647552][T19855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.647566][T19855] RSP: 002b:00007f8f2e8f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 559.647584][T19855] RAX: ffffffffffffffda RBX: 00007f8f2dc25fa0 RCX: 00007f8f2d99e0d9 [ 559.647596][T19855] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 559.647605][T19855] RBP: 00007f8f2e8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 559.647615][T19855] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 559.647626][T19855] R13: 00007f8f2dc26038 R14: 00007f8f2dc25fa0 R15: 00007ffc75f5cc28 [ 559.647653][T19855] [ 560.103451][T19817] wg2 speed is unknown, defaulting to 1000 [ 560.362186][T19769] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.369423][T19769] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.376607][T19769] bridge_slave_0: entered allmulticast mode [ 560.384201][T19769] bridge_slave_0: entered promiscuous mode [ 560.393095][T19769] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.400398][T19769] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.407914][T19769] bridge_slave_1: entered allmulticast mode [ 560.427134][T19769] bridge_slave_1: entered promiscuous mode [ 560.492448][T19769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.505001][T19769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.658336][T19769] team0: Port device team_slave_0 added [ 560.665938][ T50] Bluetooth: hci1: command tx timeout [ 560.707412][T19769] team0: Port device team_slave_1 added [ 560.820378][T19769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.827441][T19769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.954679][T19769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.996820][T19881] netlink: 'syz.2.3577': attribute type 4 has an invalid length. [ 561.013945][T19769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.020921][T19769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.047989][T19884] netlink: 'syz.2.3577': attribute type 4 has an invalid length. [ 561.091988][T19769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.281551][T19769] hsr_slave_0: entered promiscuous mode [ 561.292260][T19769] hsr_slave_1: entered promiscuous mode [ 561.299327][T19769] debugfs: 'hsr0' already exists in 'hsr' [ 561.305449][T19769] Cannot create hsr debugfs directory [ 561.408933][T19897] dvmrp8: entered allmulticast mode [ 561.556829][T19900] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3584'. [ 561.668229][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3586'. [ 561.758799][T19769] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 561.769245][T19769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.777132][T19769] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 561.786918][T19769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.794785][T19769] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 561.805373][T19769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.820638][T19769] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 561.861316][T19769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.885756][T11699] net_ratelimit: 15 callbacks suppressed [ 561.885775][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 562.164432][ T770] bond4: (slave bridge0): failed to get link speed/duplex [ 562.216820][T19938] ip6t_srh: unknown srh match flags 4000 [ 562.257954][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3593'. [ 562.299579][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.319895][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3593'. [ 562.329435][T19942] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 562.362884][T19951] Cannot find del_set index 3 as target [ 562.378409][T19769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.403014][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 562.453178][T19769] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.467642][T11702] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.474802][T11702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.491469][T11699] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.498805][T11699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.561125][T19962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3600'. [ 562.594455][T19961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3600'. [ 562.714309][ T50] Bluetooth: hci1: command tx timeout [ 562.864459][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 562.927928][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'. [ 562.984466][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 562.999073][T19987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.076500][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'. [ 563.152918][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3609'. [ 563.194335][T13182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.204256][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 563.218576][T19997] bridge0: left promiscuous mode [ 563.226409][T19997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.269486][T19997] bond1: left promiscuous mode [ 563.287125][T19997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.319065][ T5796] wg2 speed is unknown, defaulting to 1000 [ 563.347729][T11702] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 563.663374][T19769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.162339][T19769] veth0_vlan: entered promiscuous mode [ 564.180393][T19769] veth1_vlan: entered promiscuous mode [ 564.219047][T20045] netlink: 'syz.0.3619': attribute type 2 has an invalid length. [ 564.261541][T19769] veth0_macvtap: entered promiscuous mode [ 564.302034][T19769] veth1_macvtap: entered promiscuous mode [ 564.345391][T19769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.375110][T19769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.478649][T11676] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.528828][T11676] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.553890][T11676] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.654039][ T770] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.688501][T11676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.710057][T11676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.784135][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.808259][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.851065][ T5608] Bluetooth: hci1: command tx timeout [ 565.035138][ T5608] Bluetooth: hci2: command 0x041b tx timeout [ 565.090755][T20086] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 565.133222][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3552'. [ 565.144449][T20090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3632'. [ 565.145757][T20091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3632'. [ 565.377360][T20101] netlink: 'syz.0.3633': attribute type 3 has an invalid length. [ 565.387592][T20101] netlink: 'syz.0.3633': attribute type 3 has an invalid length. [ 565.397783][T20101] netlink: 'syz.0.3633': attribute type 3 has an invalid length. [ 565.431611][T20107] ip6gre1: entered allmulticast mode [ 565.698697][ T57] IPVS: starting estimator thread 0... [ 566.047532][T20126] IPVS: using max 29 ests per chain, 69600 per kthread [ 566.406721][T20145] syz_tun: entered allmulticast mode [ 566.426626][T20145] syz_tun: left allmulticast mode [ 566.915272][ T57] net_ratelimit: 37 callbacks suppressed [ 566.915290][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 567.064409][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 567.147490][T20186] FAULT_INJECTION: forcing a failure. [ 567.147490][T20186] name failslab, interval 1, probability 0, space 0, times 0 [ 567.163631][T20186] CPU: 1 UID: 0 PID: 20186 Comm: syz.2.3658 Not tainted syzkaller #0 PREEMPT(full) [ 567.163656][T20186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.163665][T20186] Call Trace: [ 567.163671][T20186] [ 567.163678][T20186] dump_stack_lvl+0xe8/0x150 [ 567.163707][T20186] should_fail_ex+0x40c/0x560 [ 567.163731][T20186] should_failslab+0xa8/0x100 [ 567.163756][T20186] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 567.163777][T20186] ? __kernfs_new_node+0xe6/0x980 [ 567.163798][T20186] ? __kernfs_new_node+0xe6/0x980 [ 567.163825][T20186] __kernfs_new_node+0xe6/0x980 [ 567.163856][T20186] ? __pfx___kernfs_new_node+0x10/0x10 [ 567.163878][T20186] ? kernfs_root+0x1c/0x230 [ 567.163904][T20186] ? kernfs_root+0x1c/0x230 [ 567.163928][T20186] ? kernfs_root+0x1c/0x230 [ 567.163946][T20186] ? kernfs_root+0x1c/0x230 [ 567.163970][T20186] kernfs_new_node+0xea/0x140 [ 567.163997][T20186] __kernfs_create_file+0x4b/0x2e0 [ 567.164018][T20186] sysfs_add_file_mode_ns+0x237/0x300 [ 567.164045][T20186] internal_create_group+0x679/0x1180 [ 567.164089][T20186] ? __pfx_internal_create_group+0x10/0x10 [ 567.164116][T20186] ? up_write+0x19f/0x4a0 [ 567.164136][T20186] sysfs_create_groups+0x59/0x120 [ 567.164160][T20186] device_add_attrs+0x1b1/0x600 [ 567.164181][T20186] ? __pfx_device_add_attrs+0x10/0x10 [ 567.164196][T20186] ? kobject_put+0x50f/0x550 [ 567.164219][T20186] ? device_add_class_symlinks+0x21f/0x240 [ 567.164240][T20186] device_add+0x488/0xb80 [ 567.164260][T20186] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 567.164288][T20186] wakeup_source_register+0x17f/0x380 [ 567.164318][T20186] ep_insert+0xfad/0x1ae0 [ 567.164358][T20186] ? __pfx_ep_insert+0x10/0x10 [ 567.164396][T20186] ? bpf_lsm_capable+0x9/0x20 [ 567.164415][T20186] ? security_capable+0x7e/0x2c0 [ 567.164444][T20186] do_epoll_ctl_file+0x8c2/0xee0 [ 567.164474][T20186] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 567.164500][T20186] ? __fget_files+0x3a2/0x420 [ 567.164518][T20186] ? __fget_files+0x2a/0x420 [ 567.164546][T20186] __se_sys_epoll_ctl+0x162/0x230 [ 567.164571][T20186] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 567.164601][T20186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.164619][T20186] do_syscall_64+0x174/0x580 [ 567.164640][T20186] ? trace_irq_disable+0x3b/0x140 [ 567.164659][T20186] ? clear_bhb_loop+0x70/0xc0 [ 567.164679][T20186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.164695][T20186] RIP: 0033:0x7fba3019e0d9 [ 567.164712][T20186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.164725][T20186] RSP: 002b:00007fba3104f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 567.164743][T20186] RAX: ffffffffffffffda RBX: 00007fba30425fa0 RCX: 00007fba3019e0d9 [ 567.164755][T20186] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 567.164764][T20186] RBP: 00007fba3104f090 R08: 0000000000000000 R09: 0000000000000000 [ 567.164774][T20186] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 567.164784][T20186] R13: 00007fba30426038 R14: 00007fba30425fa0 R15: 00007ffd076522f8 [ 567.164811][T20186] [ 567.476439][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 567.693576][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 567.765073][T20201] __nla_validate_parse: 9 callbacks suppressed [ 567.765100][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'. [ 567.783921][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3661'. [ 567.803609][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.917940][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 567.929980][T20217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3666'. [ 567.984253][T20217] netlink: 'syz.0.3666': attribute type 7 has an invalid length. [ 568.001014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.012829][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 568.028679][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.060308][T20217] netlink: 'syz.0.3666': attribute type 8 has an invalid length. [ 568.083273][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 568.178404][T20217] veth0: entered promiscuous mode [ 568.195970][T20224] FAULT_INJECTION: forcing a failure. [ 568.195970][T20224] name failslab, interval 1, probability 0, space 0, times 0 [ 568.216646][T20217] veth0: left promiscuous mode [ 568.240332][T20224] CPU: 1 UID: 0 PID: 20224 Comm: syz.2.3669 Not tainted syzkaller #0 PREEMPT(full) [ 568.240355][T20224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.240364][T20224] Call Trace: [ 568.240370][T20224] [ 568.240378][T20224] dump_stack_lvl+0xe8/0x150 [ 568.240405][T20224] should_fail_ex+0x40c/0x560 [ 568.240430][T20224] should_failslab+0xa8/0x100 [ 568.240454][T20224] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 568.240474][T20224] ? __kernfs_new_node+0xe6/0x980 [ 568.240495][T20224] ? __kernfs_new_node+0xe6/0x980 [ 568.240522][T20224] __kernfs_new_node+0xe6/0x980 [ 568.240551][T20224] ? __pfx___kernfs_new_node+0x10/0x10 [ 568.240573][T20224] ? kernfs_root+0x1c/0x230 [ 568.240599][T20224] ? kernfs_root+0x1c/0x230 [ 568.240626][T20224] ? kernfs_root+0x1c/0x230 [ 568.240644][T20224] ? kernfs_root+0x1c/0x230 [ 568.240668][T20224] kernfs_new_node+0xea/0x140 [ 568.240694][T20224] __kernfs_create_file+0x4b/0x2e0 [ 568.240715][T20224] sysfs_add_file_mode_ns+0x237/0x300 [ 568.240742][T20224] internal_create_group+0x679/0x1180 [ 568.240778][T20224] ? __pfx_internal_create_group+0x10/0x10 [ 568.240802][T20224] ? up_write+0x19f/0x4a0 [ 568.240822][T20224] sysfs_create_groups+0x59/0x120 [ 568.240846][T20224] device_add_attrs+0x1b1/0x600 [ 568.240867][T20224] ? __pfx_device_add_attrs+0x10/0x10 [ 568.240882][T20224] ? kobject_put+0x50f/0x550 [ 568.240905][T20224] ? device_add_class_symlinks+0x21f/0x240 [ 568.240925][T20224] device_add+0x488/0xb80 [ 568.240944][T20224] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 568.240968][T20224] wakeup_source_register+0x17f/0x380 [ 568.240989][T20224] ep_insert+0xfad/0x1ae0 [ 568.241026][T20224] ? __pfx_ep_insert+0x10/0x10 [ 568.241059][T20224] ? bpf_lsm_capable+0x9/0x20 [ 568.241078][T20224] ? security_capable+0x7e/0x2c0 [ 568.241104][T20224] do_epoll_ctl_file+0x8c2/0xee0 [ 568.241133][T20224] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 568.241157][T20224] ? __fget_files+0x3a2/0x420 [ 568.241175][T20224] ? __fget_files+0x2a/0x420 [ 568.241202][T20224] __se_sys_epoll_ctl+0x162/0x230 [ 568.241224][T20224] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 568.241253][T20224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.241271][T20224] do_syscall_64+0x174/0x580 [ 568.241292][T20224] ? trace_irq_disable+0x3b/0x140 [ 568.241309][T20224] ? clear_bhb_loop+0x70/0xc0 [ 568.241329][T20224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.241344][T20224] RIP: 0033:0x7fba3019e0d9 [ 568.241361][T20224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.241374][T20224] RSP: 002b:00007fba3104f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 568.241392][T20224] RAX: ffffffffffffffda RBX: 00007fba30425fa0 RCX: 00007fba3019e0d9 [ 568.241404][T20224] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 568.241413][T20224] RBP: 00007fba3104f090 R08: 0000000000000000 R09: 0000000000000000 [ 568.241423][T20224] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 568.241433][T20224] R13: 00007fba30426038 R14: 00007fba30425fa0 R15: 00007ffd076522f8 [ 568.241461][T20224] [ 568.574931][T20226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.582776][T20228] netlink: 'syz.6.3671': attribute type 1 has an invalid length. [ 568.591259][T20228] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3671'. [ 568.600379][T20228] netlink: 'syz.6.3671': attribute type 1 has an invalid length. [ 568.655069][T20233] ip_tables: iptables: counters copy to user failed while replacing table [ 568.922096][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3674'. [ 569.131378][T20231] veth0_macvtap: entered allmulticast mode [ 569.137984][T20231] veth0_macvtap: left allmulticast mode [ 569.394509][T20270] netlink: 'syz.4.3682': attribute type 3 has an invalid length. [ 569.756721][T20279] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3685'. [ 569.798952][T20279] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3685'. [ 569.820344][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3685'. [ 569.887613][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'. [ 569.920626][T20288] netlink: 'syz.2.3689': attribute type 1 has an invalid length. [ 569.995748][T20285] SET target dimension over the limit! [ 570.008475][T20285] No such timeout policy "syz0" [ 570.410666][T20308] bond9: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 570.437058][T20308] bond9 (unregistering): Released all slaves [ 570.608356][T20309] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.721849][T20320] block nbd0: not configured, cannot reconfigure [ 571.297431][T20362] netlink: 'syz.6.3708': attribute type 12 has an invalid length. [ 571.925146][T20395] net_ratelimit: 26 callbacks suppressed [ 571.925164][T20395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.979406][T20395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.988468][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 571.999693][T20395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.009724][T20395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.021433][T20395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.029825][T20395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.038173][T20395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.078447][T20395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.091361][T20395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.242503][T20407] x_tables: ip6_tables: set.2 match: invalid size 8 (kernel) != (user) 16 [ 572.815654][T20446] __nla_validate_parse: 10 callbacks suppressed [ 572.815682][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3729'. [ 573.292471][T20483] netlink: 'syz.4.3741': attribute type 14 has an invalid length. [ 573.399616][T20490] netlink: 'syz.0.3744': attribute type 1 has an invalid length. [ 573.468549][T20490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.497675][T20497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3746'. [ 573.499480][T20490] macvlan2: entered promiscuous mode [ 573.512040][T20490] macvlan2: entered allmulticast mode [ 573.517875][T20490] bond3: entered allmulticast mode [ 573.523135][T20490] bond3: entered promiscuous mode [ 573.529082][T20490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 573.537864][T20490] team0: Port device macvlan2 added [ 573.558029][T20497] ip6gre2: entered promiscuous mode [ 573.563274][T20497] ip6gre2: entered allmulticast mode [ 573.607099][T20490] bond3: (slave ip6gretap1): making interface the new active one [ 573.616017][T20490] ip6gretap1: entered promiscuous mode [ 573.622020][T20490] ip6gretap1: entered allmulticast mode [ 573.640098][T20490] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 573.668455][T20497] netlink: 'syz.2.3746': attribute type 6 has an invalid length. [ 573.676339][T20497] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3746'. [ 574.043662][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3751'. [ 574.075605][T20517] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3751'. [ 574.130621][T20517] geneve2: entered promiscuous mode [ 574.150876][T20517] geneve2: entered allmulticast mode [ 574.390578][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3753'. [ 574.416592][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3755'. [ 574.557739][T20526] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3753'. [ 574.617611][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3753'. [ 574.826891][T20556] pim6reg: entered allmulticast mode [ 574.870264][T20557] pim6reg: left allmulticast mode [ 574.895334][T20557] bridge0: left allmulticast mode [ 575.023235][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3762'. [ 575.092276][T20568] netlink: 'syz.6.3762': attribute type 2 has an invalid length. [ 575.191185][T20576] team_slave_1: Caught tx_queue_len zero misconfig [ 575.254089][T20581] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 575.271374][T20581] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 575.701490][ T57] IPVS: starting estimator thread 0... [ 575.945838][T20624] x_tables: duplicate underflow at hook 2 [ 576.018490][T20608] IPVS: using max 33 ests per chain, 79200 per kthread [ 576.096263][T20631] netlink: 'syz.0.3783': attribute type 4 has an invalid length. [ 576.142828][T20634] bond0: option downdelay: invalid value (18446744073675997440) [ 576.150516][T20634] bond0: option downdelay: allowed values 0 - 2147483647 [ 576.651003][T20670] can: request_module (can-proto-0) failed. [ 576.665600][T20673] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 576.984036][ T57] net_ratelimit: 170 callbacks suppressed [ 576.984054][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 577.125147][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 577.182988][T20706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.244153][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 577.358930][T20717] 8021q: adding VLAN 0 to HW filter on device bond9 [ 577.634714][T13182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.652422][T20720] bridge0: port 3(team0) entered disabled state [ 577.669929][T20720] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.677560][T20720] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.781135][T11055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.138632][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.193227][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.238925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.377389][T13171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.878069][T20736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.986702][T17322] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.996216][T17322] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.024169][T17322] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.044150][T17322] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.074270][T17322] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.105076][T17322] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.147824][T17322] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.174400][T17322] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.184081][T20764] __nla_validate_parse: 7 callbacks suppressed [ 579.184141][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3820'. [ 579.210604][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 579.282059][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.290945][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.300712][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3819'. [ 579.402041][T20774] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3823'. [ 579.500160][T20781] tipc: Started in network mode [ 579.505313][T20781] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 579.512474][T20781] tipc: Enabled bearer , priority 10 [ 579.932753][T20809] ipt_ECN: cannot use operation on non-tcp rule [ 580.366970][T20839] netlink: 528 bytes leftover after parsing attributes in process `syz.0.3840'. [ 580.386564][T20839] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3840'. [ 580.463436][T20842] netlink: 'syz.0.3842': attribute type 10 has an invalid length. [ 580.480029][T20842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.489262][T20842] team0: Port device netdevsim1 added [ 580.527072][T20843] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3841'. [ 580.627185][T13181] tipc: Node number set to 10136234 [ 580.895197][T20857] macsec1: entered allmulticast mode [ 580.901379][T20857] dummy0: entered allmulticast mode [ 580.910524][T20857] dummy0: entered promiscuous mode [ 580.925375][T20857] dummy0: left allmulticast mode [ 580.963689][T11054] dummy0: left promiscuous mode [ 581.130185][T20871] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 581.193081][T20875] macsec0: entered promiscuous mode [ 581.207519][T20874] macsec0: left promiscuous mode [ 582.024154][ T57] net_ratelimit: 26 callbacks suppressed [ 582.024171][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 582.074874][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.156062][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 582.249256][T20900] xfrm0 speed is unknown, defaulting to 1000 [ 582.264253][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 582.384120][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 582.500191][T20900] wg2 speed is unknown, defaulting to 1000 [ 582.504328][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 582.628993][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 582.658555][T20914] netlink: 'syz.0.3862': attribute type 26 has an invalid length. [ 582.695085][T20914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.794293][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 582.904319][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 582.922630][T20930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3866'. [ 582.978932][T20902] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 583.115068][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.546105][T20948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3872'. [ 583.890909][T20952] sctp: [Deprecated]: syz.0.3873 (pid 20952) Use of int in max_burst socket option. [ 583.890909][T20952] Use struct sctp_assoc_value instead [ 583.959964][T20953] Unsupported ieee802154 address type: 0 [ 583.971616][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 583.989116][T20862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.343693][ T5608] Bluetooth: hci1: command 0x0401 tx timeout [ 585.064131][T21038] syzkaller0: entered promiscuous mode [ 585.069615][T21038] syzkaller0: entered allmulticast mode [ 585.106875][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 585.403107][T21048] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3901'. [ 585.434292][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 587.134142][T11697] net_ratelimit: 38 callbacks suppressed [ 587.134162][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 587.254166][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 587.355330][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.364206][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 587.474091][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 587.514635][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.584383][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 587.694359][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 587.804245][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 587.867087][T21023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.917515][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 588.136358][T21064] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3908'. [ 588.371124][T21079] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 588.380959][T21079] syzkaller1: entered promiscuous mode [ 588.386987][T21079] syzkaller1: entered allmulticast mode [ 588.612946][ T29] audit: type=1804 audit(1787162768.521:16): pid=21099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3916" name="/newroot/193/cgroup.controllers" dev="tmpfs" ino=1012 res=1 errno=0 [ 588.636529][ T29] audit: type=1800 audit(1787162768.521:17): pid=21099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3916" name="cgroup.controllers" dev="tmpfs" ino=1012 res=0 errno=0 [ 588.819771][T21110] FAULT_INJECTION: forcing a failure. [ 588.819771][T21110] name failslab, interval 1, probability 0, space 0, times 0 [ 588.832506][T21110] CPU: 0 UID: 0 PID: 21110 Comm: syz.6.3920 Not tainted syzkaller #0 PREEMPT(full) [ 588.832530][T21110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.832539][T21110] Call Trace: [ 588.832547][T21110] [ 588.832554][T21110] dump_stack_lvl+0xe8/0x150 [ 588.832582][T21110] should_fail_ex+0x40c/0x560 [ 588.832605][T21110] should_failslab+0xa8/0x100 [ 588.832628][T21110] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 588.832649][T21110] ? __lock_acquire+0x683/0x2cf0 [ 588.832668][T21110] ? __kernfs_new_node+0xa9/0x980 [ 588.832686][T21110] ? __kernfs_new_node+0xa9/0x980 [ 588.832713][T21110] kstrdup+0x42/0x100 [ 588.832771][T21110] __kernfs_new_node+0xa9/0x980 [ 588.832800][T21110] ? __pfx___kernfs_new_node+0x10/0x10 [ 588.832821][T21110] ? kernfs_root+0x1c/0x230 [ 588.832847][T21110] ? kernfs_root+0x1c/0x230 [ 588.832865][T21110] ? kernfs_root+0x1c/0x230 [ 588.832881][T21110] ? kernfs_root+0x1c/0x230 [ 588.832904][T21110] kernfs_create_dir_ns+0xfe/0x230 [ 588.832932][T21110] sysfs_create_dir_ns+0x12f/0x2a0 [ 588.832955][T21110] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 588.832978][T21110] ? do_raw_spin_unlock+0xf5/0x210 [ 588.832999][T21110] kobject_add_internal+0x622/0xcd0 [ 588.833025][T21110] kobject_add+0x163/0x240 [ 588.833042][T21110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 588.833178][T21110] ? __pfx_kobject_add+0x10/0x10 [ 588.833202][T21110] ? get_device_parent+0x366/0x3a0 [ 588.833223][T21110] device_add+0x3fa/0xb80 [ 588.833244][T21110] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 588.833268][T21110] wakeup_source_register+0x17f/0x380 [ 588.833289][T21110] ep_insert+0x107b/0x1ae0 [ 588.833326][T21110] ? __pfx_ep_insert+0x10/0x10 [ 588.833359][T21110] ? bpf_lsm_capable+0x9/0x20 [ 588.833377][T21110] ? security_capable+0x7e/0x2c0 [ 588.833406][T21110] do_epoll_ctl_file+0x8c2/0xee0 [ 588.833436][T21110] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 588.833459][T21110] ? __fget_files+0x3a2/0x420 [ 588.833478][T21110] ? __fget_files+0x2a/0x420 [ 588.833505][T21110] __se_sys_epoll_ctl+0x162/0x230 [ 588.833529][T21110] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 588.833558][T21110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.833577][T21110] do_syscall_64+0x174/0x580 [ 588.833597][T21110] ? trace_irq_disable+0x3b/0x140 [ 588.833615][T21110] ? clear_bhb_loop+0x70/0xc0 [ 588.833633][T21110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.833649][T21110] RIP: 0033:0x7fe4c2b9e0d9 [ 588.833666][T21110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.833680][T21110] RSP: 002b:00007fe4c3a49028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 588.833698][T21110] RAX: ffffffffffffffda RBX: 00007fe4c2e25fa0 RCX: 00007fe4c2b9e0d9 [ 588.833708][T21110] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 588.833716][T21110] RBP: 00007fe4c3a49090 R08: 0000000000000000 R09: 0000000000000000 [ 588.833726][T21110] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 588.833734][T21110] R13: 00007fe4c2e26038 R14: 00007fe4c2e25fa0 R15: 00007ffd1f9020f8 [ 588.833762][T21110] [ 588.833773][T21110] kobject: kobject_add_internal failed for wakeup14 (error: -12 parent: wakeup) [ 588.907169][T21107] syzkaller0: entered promiscuous mode [ 589.176899][T21107] syzkaller0: entered allmulticast mode [ 589.928789][T21161] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 589.937115][T21161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3934'. [ 589.947663][T21161] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 590.081387][T21170] sctp: [Deprecated]: syz.6.3937 (pid 21170) Use of int in max_burst socket option deprecated. [ 590.081387][T21170] Use struct sctp_assoc_value instead [ 590.103719][T21172] Bluetooth: hci0: unsupported parameter 5134 [ 590.121380][T21170] syzkaller0: entered promiscuous mode [ 590.126892][T21170] syzkaller0: entered allmulticast mode [ 590.129499][T21172] Bluetooth: hci0: unsupported parameter 8192 [ 590.145665][T21172] Bluetooth: hci0: unsupported parameter 5134 [ 590.151877][T21172] Bluetooth: hci0: unsupported parameter 8192 [ 590.186437][T21172] mac80211_hwsim hwsim39 »»»»»»: renamed from wlan0 [ 590.844754][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3946'. [ 590.877404][T21202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3945'. [ 591.706659][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3948'. [ 591.912188][T21238] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 591.979293][T21236] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 592.023088][T21231] netlink: 'syz.1.3953': attribute type 30 has an invalid length. [ 592.085809][T21231] bond4: option arp_missed_max: invalid value (0) [ 592.092277][T21231] bond4: option arp_missed_max: allowed values 1 - 255 [ 592.114747][T21254] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3957'. [ 592.115451][T21231] bond4 (unregistering): Released all slaves [ 592.209694][T21255] tipc: Started in network mode [ 592.218238][T21255] tipc: Node identity 22e24400716c, cluster identity 4711 [ 592.226358][T21255] tipc: Enabled bearer , priority 0 [ 592.246903][T21255] syzkaller0: entered promiscuous mode [ 592.253543][T21255] syzkaller0: entered allmulticast mode [ 592.263115][T21255] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 592.306658][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 592.426755][T21263] team0: Device wlan0 failed to register rx_handler [ 592.468383][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'. [ 592.474667][T21264] team0: Device wlan0 failed to register rx_handler [ 592.568363][T21259] tipc: Resetting bearer [ 592.594798][T11676] net_ratelimit: 35 callbacks suppressed [ 592.594817][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 592.660218][T21252] tipc: Resetting bearer [ 592.682627][T21280] netlink: 'syz.6.3966': attribute type 5 has an invalid length. [ 592.700960][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3965'. [ 592.709857][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3965'. [ 592.713731][T21283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3965'. [ 592.730715][T21284] netlink: 'syz.6.3966': attribute type 5 has an invalid length. [ 592.743906][T21283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3965'. [ 592.754560][T21281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.755307][T21252] tipc: Disabling bearer [ 592.763229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.854348][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.954875][ T770] bond4: (slave bridge0): failed to get link speed/duplex [ 592.956252][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.972669][T21292] netlink: 'syz.0.3969': attribute type 4 has an invalid length. [ 593.043615][T21292] netlink: 'syz.0.3969': attribute type 4 has an invalid length. [ 593.191794][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 593.511640][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 593.630395][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.638971][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 593.768768][T21336] FAULT_INJECTION: forcing a failure. [ 593.768768][T21336] name failslab, interval 1, probability 0, space 0, times 0 [ 593.784178][T21336] CPU: 0 UID: 0 PID: 21336 Comm: syz.4.3984 Not tainted syzkaller #0 PREEMPT(full) [ 593.784203][T21336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 593.784212][T21336] Call Trace: [ 593.784219][T21336] [ 593.784226][T21336] dump_stack_lvl+0xe8/0x150 [ 593.784254][T21336] should_fail_ex+0x40c/0x560 [ 593.784279][T21336] should_failslab+0xa8/0x100 [ 593.784303][T21336] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 593.784323][T21336] ? __lock_acquire+0x683/0x2cf0 [ 593.784345][T21336] ? __kernfs_new_node+0xa9/0x980 [ 593.784366][T21336] ? __kernfs_new_node+0xa9/0x980 [ 593.784400][T21336] kstrdup+0x42/0x100 [ 593.784424][T21336] __kernfs_new_node+0xa9/0x980 [ 593.784453][T21336] ? kernfs_root+0x1c/0x230 [ 593.784473][T21336] ? __pfx___kernfs_new_node+0x10/0x10 [ 593.784494][T21336] ? kernfs_root+0x1c/0x230 [ 593.784520][T21336] ? kernfs_root+0x1c/0x230 [ 593.784540][T21336] ? kernfs_root+0x1c/0x230 [ 593.784565][T21336] kernfs_new_node+0xea/0x140 [ 593.784592][T21336] kernfs_create_link+0xa7/0x200 [ 593.784613][T21336] sysfs_do_create_link_sd+0x83/0x110 [ 593.784640][T21336] device_add_class_symlinks+0x1cf/0x240 [ 593.784663][T21336] device_add+0x467/0xb80 [ 593.784683][T21336] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 593.784706][T21336] wakeup_source_register+0x17f/0x380 [ 593.784727][T21336] ep_insert+0x107b/0x1ae0 [ 593.784765][T21336] ? __pfx_ep_insert+0x10/0x10 [ 593.784799][T21336] ? bpf_lsm_capable+0x9/0x20 [ 593.784817][T21336] ? security_capable+0x7e/0x2c0 [ 593.784847][T21336] do_epoll_ctl_file+0x8c2/0xee0 [ 593.784876][T21336] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 593.784901][T21336] ? __fget_files+0x3a2/0x420 [ 593.784919][T21336] ? __fget_files+0x2a/0x420 [ 593.784947][T21336] __se_sys_epoll_ctl+0x162/0x230 [ 593.784973][T21336] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 593.785004][T21336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.785023][T21336] do_syscall_64+0x174/0x580 [ 593.785046][T21336] ? trace_irq_disable+0x3b/0x140 [ 593.785064][T21336] ? clear_bhb_loop+0x70/0xc0 [ 593.785085][T21336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.785101][T21336] RIP: 0033:0x7f8f2d99e0d9 [ 593.785118][T21336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.785131][T21336] RSP: 002b:00007f8f2e8f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 593.785149][T21336] RAX: ffffffffffffffda RBX: 00007f8f2dc25fa0 RCX: 00007f8f2d99e0d9 [ 593.785160][T21336] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 593.785170][T21336] RBP: 00007f8f2e8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 593.785180][T21336] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 593.785190][T21336] R13: 00007f8f2dc26038 R14: 00007f8f2dc25fa0 R15: 00007ffc75f5cc28 [ 593.785219][T21336] [ 594.375148][T21349] --map-set only usable from mangle table [ 594.427867][T21354] vlan2: entered promiscuous mode [ 594.432945][T21354] vlan0: entered promiscuous mode [ 594.485599][T21362] netpci0: tun_chr_ioctl cmd 1074025678 [ 594.491196][T21362] netpci0: group set to 0 [ 594.665686][T21364] v: renamed from veth0_vlan (while UP) [ 595.214403][T21385] bond10: entered promiscuous mode [ 595.247482][T21385] bond10: entered allmulticast mode [ 595.266531][T21385] 8021q: adding VLAN 0 to HW filter on device bond10 [ 596.241605][T21439] atomic_op ffff888041fc89e0 conn xmit_atomic 0000000000000000 [ 596.264484][T21439] netlink: 'syz.0.4008': attribute type 1 has an invalid length. [ 596.387347][T21439] bond5: entered promiscuous mode [ 596.392891][T21439] 8021q: adding VLAN 0 to HW filter on device bond5 [ 596.427049][T21439] bond5: (slave bridge3): making interface the new active one [ 596.434566][T21439] bridge3: entered promiscuous mode [ 596.441145][T21439] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 596.558614][T21456] __nla_validate_parse: 12 callbacks suppressed [ 596.558631][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4012'. [ 596.628792][T21458] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 596.727243][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4012'. [ 596.741715][T21397] vlan2: entered allmulticast mode [ 596.748394][T21397] bridge0: port 3(vlan2) entered blocking state [ 596.755365][T21397] bridge0: port 3(vlan2) entered disabled state [ 596.763860][T21397] vlan2: entered promiscuous mode [ 596.772192][T21456] openvswitch: ovs-system: Dropping previously announced user features [ 596.811927][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'. [ 596.913683][ T770] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 596.926283][ T770] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 596.927482][T21463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4014'. [ 596.984301][ T770] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 597.004074][ T770] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 597.266437][T21479] syzkaller0: entered promiscuous mode [ 597.271951][T21479] syzkaller0: entered allmulticast mode [ 597.328155][T21484] bridge_slave_0: left allmulticast mode [ 597.371372][T21484] bridge_slave_0: left promiscuous mode [ 597.379356][T21484] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.408873][T21484] bridge_slave_1: left allmulticast mode [ 597.414570][T21484] bridge_slave_1: left promiscuous mode [ 597.420516][T21484] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.441617][T21484] bond2: (slave veth0_to_bond): Releasing active interface [ 597.470679][T21484] bond2: (slave veth5): making interface the new active one [ 597.483091][T21484] bond0: (slave bond_slave_0): Releasing backup interface [ 597.498946][T21484] bond0: (slave bond_slave_1): Releasing backup interface [ 597.513027][T21484] team0: Port device team_slave_0 removed [ 597.523816][T21484] team0: Port device team_slave_1 removed [ 597.530464][T21484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.537880][T21484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.546607][T21484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.554011][T21484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.616261][T13179] net_ratelimit: 45 callbacks suppressed [ 597.616277][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.616292][T21489] team0: No ports can be present during mode change [ 597.664054][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 597.749192][T21507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4024'. [ 597.755584][T21493] xfrm0 speed is unknown, defaulting to 1000 [ 597.802825][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 597.909825][T21516] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4028'. [ 597.924472][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4028'. [ 598.013782][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 598.131940][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 598.284459][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 598.294185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.305291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.364655][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.422901][T21536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.007264][T21577] netlink: 2248 bytes leftover after parsing attributes in process `syz.0.4041'. [ 599.099365][T21493] wg2 speed is unknown, defaulting to 1000 [ 599.317793][T21579] xfrm0 speed is unknown, defaulting to 1000 [ 599.583257][T21579] wg2 speed is unknown, defaulting to 1000 [ 600.160207][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4053'. [ 600.170258][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4053'. [ 600.329512][T21635] batadv_slave_1: entered allmulticast mode [ 600.367552][T21634] batadv_slave_1: left allmulticast mode [ 600.596535][T21649] netlink: 'syz.1.4060': attribute type 1 has an invalid length. [ 600.605391][T21649] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 600.823177][T21667] veth3: entered allmulticast mode [ 601.713250][T21702] netlink: 'syz.4.4078': attribute type 2 has an invalid length. [ 601.742836][T21702] : entered promiscuous mode [ 602.039169][T21719] __nla_validate_parse: 10 callbacks suppressed [ 602.039187][T21719] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4080'. [ 602.136695][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'. [ 602.150978][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'. [ 602.238906][T21725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4080'. [ 602.332574][T21739] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4082'. [ 602.636479][T11697] net_ratelimit: 49 callbacks suppressed [ 602.636500][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 602.691283][T21762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4090'. [ 602.703050][T21762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.711479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.746066][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.834133][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 602.937669][T21768] sctp: [Deprecated]: syz.4.4093 (pid 21768) Use of int in max_burst socket option deprecated. [ 602.937669][T21768] Use struct sctp_assoc_value instead [ 602.955013][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 602.975518][T21768] netlink: 'syz.4.4093': attribute type 1 has an invalid length. [ 603.013143][T21768] bond5: option mode: invalid value (8) [ 603.039393][T21768] bond5 (unregistering): Released all slaves [ 603.194430][T13181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.674420][T13182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.856315][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.948689][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.072694][T21777] dummy0: left promiscuous mode [ 606.110047][T21787] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4093'. [ 606.218762][T21796] netlink: 'syz.0.4094': attribute type 2 has an invalid length. [ 606.315393][T21811] 8021q: adding VLAN 0 to HW filter on device bond5 [ 606.447964][T21822] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4105'. [ 606.458174][T21822] gretap0: entered promiscuous mode [ 606.466236][T21822] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4105'. [ 606.475894][T21822] 0ªî{X¹¦: renamed from gretap0 [ 606.528713][T21822] 0ªî{X¹¦: left promiscuous mode [ 606.533790][T21822] 0ªî{X¹¦: entered allmulticast mode [ 606.609283][T21834] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 606.716248][T21846] ip6tnl2: entered promiscuous mode [ 607.175418][T21866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4115'. [ 607.252722][T21873] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4115'. [ 607.473021][T21881] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4119'. [ 607.537207][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4121'. [ 607.668544][T21895] bond6: entered promiscuous mode [ 607.674738][T21895] bond6: entered allmulticast mode [ 607.684261][ T48] net_ratelimit: 18 callbacks suppressed [ 607.684278][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 607.709418][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4123'. [ 607.721209][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'. [ 607.753361][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'. [ 607.794216][T21894] netlink: 'syz.0.4122': attribute type 11 has an invalid length. [ 607.837079][T21894] netlink: 'syz.0.4122': attribute type 14 has an invalid length. [ 607.845556][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 607.978353][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 608.094198][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 608.205518][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 608.252365][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.334183][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 608.454135][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 608.531074][T21924] xfrm0 speed is unknown, defaulting to 1000 [ 608.596969][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 608.675384][T21930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4131'. [ 608.864099][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 608.871321][T21924] wg2 speed is unknown, defaulting to 1000 [ 609.461971][T21965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4144'. [ 609.605606][T21978] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4147'. [ 609.753175][T21985] netlink: 'syz.1.4148': attribute type 13 has an invalid length. [ 610.374951][T22022] bond6: option lacp_rate: invalid value (3) [ 610.382918][T22022] bond6 (unregistering): Released all slaves [ 610.474325][T22030] syzkaller0: entered promiscuous mode [ 610.479839][T22030] syzkaller0: entered allmulticast mode [ 610.667228][T22037] xt_hashlimit: size too large, truncated to 1048576 [ 611.119178][T22054] batadv_slave_1: entered allmulticast mode [ 611.153873][T22053] batadv_slave_1: left allmulticast mode [ 611.253359][T22061] netlink: 'syz.1.4172': attribute type 2 has an invalid length. [ 611.536178][T22080] geneve0: entered promiscuous mode [ 611.703638][T22090] netlink: 'syz.0.4181': attribute type 8 has an invalid length. [ 612.462396][T22121] netlink: 'syz.6.4186': attribute type 49 has an invalid length. [ 612.482848][T22129] __nla_validate_parse: 7 callbacks suppressed [ 612.482877][T22129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4192'. [ 612.487471][T22131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4193'. [ 612.511443][T22129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4192'. [ 612.532837][T22131] block nbd0: Unsupported socket: should be TCP or UNIX. [ 612.622727][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056bf4000: rx timeout, send abort [ 612.679243][T22142] syzkaller0: entered promiscuous mode [ 612.684809][T22142] syzkaller0: entered allmulticast mode [ 612.794919][T13182] net_ratelimit: 34 callbacks suppressed [ 612.794936][T13182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.818178][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.923529][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 612.963303][T22154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4198'. [ 613.049888][T22162] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 613.122937][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056bf5000: rx timeout, send abort [ 613.131404][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056bf4000: abort rx timeout. Force session deactivation [ 613.145941][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 613.164579][T22165] bridge0: Caught tx_queue_len zero misconfig [ 613.215464][T22175] netlink: 'syz.4.4204': attribute type 1 has an invalid length. [ 613.303623][T22175] bond5: option mode: invalid value (7) [ 613.316346][T22175] bond5 (unregistering): Released all slaves [ 613.364864][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 613.487956][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 613.597669][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.625569][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 613.631257][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056bf5000: abort rx timeout. Force session deactivation [ 613.663930][T22209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4214'. [ 613.802208][T22219] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 613.804824][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 613.911130][T22221] netlink: 'syz.2.4218': attribute type 2 has an invalid length. [ 614.089694][T22233] tipc: Enabled bearer , priority 0 [ 614.133377][T22233] syzkaller0: entered promiscuous mode [ 614.144818][T22233] syzkaller0: entered allmulticast mode [ 614.167517][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'. [ 614.920544][T22240] tipc: Resetting bearer [ 614.962832][T22240] tipc: Disabling bearer [ 614.993027][T22254] veth5: entered promiscuous mode [ 614.998415][T22254] veth5: entered allmulticast mode [ 615.004766][T22254] team0: Device veth5 is up. Set it down before adding it as a team port [ 615.075498][T22266] netlink: 'syz.6.4229': attribute type 1 has an invalid length. [ 615.083385][T22266] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4229'. [ 615.092897][T22266] netlink: 'syz.6.4229': attribute type 2 has an invalid length. [ 615.100946][T22266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4229'. [ 615.122072][T22269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4227'. [ 615.302510][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4230'. [ 615.394708][T22278] team0: Port device wlan0 added [ 616.336471][T22308] netlink: 'syz.2.4239': attribute type 6 has an invalid length. [ 616.344246][T22308] netlink: 'syz.2.4239': attribute type 5 has an invalid length. [ 616.364737][T22308] netlink: 'syz.2.4239': attribute type 6 has an invalid length. [ 616.372803][T22308] netlink: 'syz.2.4239': attribute type 5 has an invalid length. [ 616.429313][T22312] xfrm0 speed is unknown, defaulting to 1000 [ 616.595236][T22316] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 616.602387][T22316] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 616.610420][T22316] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 616.951704][T22312] wg2 speed is unknown, defaulting to 1000 [ 617.094710][T22335] tc_dump_action: action bad kind [ 617.206603][T22342] bridge0: port 4(veth1) entered blocking state [ 617.243057][T22342] bridge0: port 4(veth1) entered disabled state [ 617.249823][T22342] veth1: entered allmulticast mode [ 617.257944][T22342] veth1: entered promiscuous mode [ 617.264374][T22342] bridge0: port 4(veth1) entered blocking state [ 617.270741][T22342] bridge0: port 4(veth1) entered forwarding state [ 617.446291][T22351] netlink: 'syz.4.4253': attribute type 10 has an invalid length. [ 617.473907][T22351] bond0: (slave team0): Enslaving as an active interface with an up link [ 617.679933][T22365] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.687240][T22365] bridge0: port 1(bond6) entered blocking state [ 617.693753][T22365] bridge0: port 1(bond6) entered disabled state [ 617.700271][T22365] bond6: entered allmulticast mode [ 617.707272][T22365] bond6: entered promiscuous mode [ 617.713838][T22365] bridge0: port 1(bond6) entered blocking state [ 617.720176][T22365] bridge0: port 1(bond6) entered forwarding state [ 617.776369][T11699] bridge0: port 1(bond6) entered disabled state [ 617.810719][T22369] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 617.858123][T22369] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 617.890931][T22369] net_ratelimit: 32 callbacks suppressed [ 617.890947][T22369] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 617.944450][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 618.004511][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.077894][ T770] bond4: (slave bridge0): failed to get link speed/duplex [ 618.496164][T22387] __nla_validate_parse: 7 callbacks suppressed [ 618.496184][T22387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4262'. [ 618.568915][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 618.597668][T22410] syzkaller0: entered promiscuous mode [ 618.603380][T22410] syzkaller0: entered allmulticast mode [ 618.679200][T22416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.689365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.790314][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 618.878147][T13182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.947006][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 619.362362][T22462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4283'. [ 619.382163][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4283'. [ 619.480681][T22465] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4284'. [ 619.506403][T22465] netlink: 'syz.0.4284': attribute type 1 has an invalid length. [ 619.515499][T22465] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4284'. [ 619.714237][T22475] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4287'. [ 619.730811][T22478] netlink: 'syz.0.4289': attribute type 6 has an invalid length. [ 619.876264][ T50] Bluetooth: hci1: link tx timeout [ 619.882024][ T50] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 619.894346][ T50] Bluetooth: hci1: link tx timeout [ 619.899498][ T50] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 619.912287][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4291'. [ 619.924173][T22488] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4291'. [ 619.934841][T22488] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4291'. [ 619.944106][T22490] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 619.944412][T22488] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4291'. [ 619.967162][T22488] netlink: 'syz.6.4291': attribute type 32 has an invalid length. [ 620.241180][T22510] netlink: 'syz.2.4296': attribute type 49 has an invalid length. [ 620.669579][T22534] tunl0: Caught tx_queue_len zero misconfig [ 621.810559][T22563] netlink: 'syz.4.4312': attribute type 39 has an invalid length. [ 621.926655][ T50] Bluetooth: hci1: command 0x0401 tx timeout [ 622.414972][T22587] syzkaller0: entered promiscuous mode [ 622.431467][T22587] syzkaller0: entered allmulticast mode [ 622.663040][T22595] netlink: 'syz.0.4321': attribute type 3 has an invalid length. [ 622.697434][T22595] geneve3: entered promiscuous mode [ 622.714564][T22595] geneve3: entered allmulticast mode [ 622.775388][T22599] team1: entered promiscuous mode [ 622.780494][T22599] team1: entered allmulticast mode [ 622.786018][T22599] 8021q: adding VLAN 0 to HW filter on device team1 [ 622.832099][T22599] team2: entered promiscuous mode [ 622.837283][T22599] team2: entered allmulticast mode [ 622.842947][T22599] 8021q: adding VLAN 0 to HW filter on device team2 [ 622.904159][T11699] net_ratelimit: 34 callbacks suppressed [ 622.904180][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 622.989747][T22603] syzkaller1: entered promiscuous mode [ 623.003065][T22603] syzkaller1: entered allmulticast mode [ 623.015625][T22606] veth0: entered promiscuous mode [ 623.089646][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 623.231886][T22606] bridge0: port 4(veth1) entered disabled state [ 623.270056][T22606] veth1 (unregistering): left allmulticast mode [ 623.276351][T22606] veth1 (unregistering): left promiscuous mode [ 623.282605][T22606] bridge0: port 4(veth1) entered disabled state [ 623.306495][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.314775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.344218][ T770] bond4: (slave bridge0): failed to get link speed/duplex [ 623.475442][ T770] bond4: (slave bridge0): failed to get link speed/duplex [ 623.632380][ T770] bond4: (slave bridge0): failed to get link speed/duplex [ 623.712334][T22619] __nla_validate_parse: 12 callbacks suppressed [ 623.712354][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4329'. [ 623.850022][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 623.933867][T22639] 0ªî{X¹¦: left allmulticast mode [ 624.003175][T22639] veth3: left allmulticast mode [ 624.401231][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.409689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.712184][T22639] bond6: left promiscuous mode [ 624.722164][T22639] bond6: left allmulticast mode [ 624.732598][T22639] syzkaller0: left promiscuous mode [ 624.741697][T22639] syzkaller0: left allmulticast mode [ 624.759810][T22639] team1: left promiscuous mode [ 624.767200][T22639] team1: left allmulticast mode [ 624.779674][T22639] team2: left promiscuous mode [ 624.791660][T22639] team2: left allmulticast mode [ 624.805635][T22649] tipc: Invalid UDP bearer configuration [ 624.805681][T22649] tipc: Enabling of bearer rejected, failed to enable media [ 625.284635][T22685] x_tables: duplicate underflow at hook 1 [ 625.291764][T22685] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4346'. [ 625.315498][T22682] vxcan0: tx address claim with different name [ 625.556203][T22692] syzkaller0: entered promiscuous mode [ 625.562583][T22692] syzkaller0: entered allmulticast mode [ 625.637332][T22704] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4347'. [ 625.677335][T22708] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 625.768341][T22707] syzkaller0: entered promiscuous mode [ 625.774251][T22707] syzkaller0: entered allmulticast mode [ 625.842825][T22714] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 627.076227][T22738] ip6tnl2: entered allmulticast mode [ 627.082138][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4364'. [ 627.111219][T22742] batadv_slave_1: entered promiscuous mode [ 627.149593][T22745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4367'. [ 627.160027][T22745] netlink: 'syz.4.4367': attribute type 1 has an invalid length. [ 627.188066][T22745] bond5: entered promiscuous mode [ 627.193210][T22745] bond5: entered allmulticast mode [ 627.198835][T22745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.998233][ T42] net_ratelimit: 29 callbacks suppressed [ 627.998248][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.794748][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.803042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.886233][T22774] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 629.896816][T13167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.905092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.141338][T22745] erspan1: entered allmulticast mode [ 630.168836][T22745] bond5: (slave erspan1): making interface the new active one [ 630.176557][T22745] erspan1: entered promiscuous mode [ 630.184261][T22745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.192723][T22745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.201007][T22745] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 630.223229][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 630.291900][T22741] batadv_slave_1: left promiscuous mode [ 630.318031][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4372'. [ 630.339439][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.353900][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 630.374202][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4372'. [ 630.514850][T22784] tipc: Enabled bearer , priority 0 [ 631.055145][T22819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4382'. [ 631.134644][T22814] bridge0: left allmulticast mode [ 631.403706][T22833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4386'. [ 631.629352][T22814] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 631.685731][T22814] bridge1: left allmulticast mode [ 631.699577][T22814] bridge2: left allmulticast mode [ 631.744376][T22814] veth5: left allmulticast mode [ 631.783466][T22814] bond3: left allmulticast mode [ 631.788368][T22814] ip6gretap1: left allmulticast mode [ 631.793673][T22814] bond3: left promiscuous mode [ 631.811697][T22814] ip6gretap1: left promiscuous mode [ 631.817644][T22814] macvlan2: left promiscuous mode [ 631.822669][T22814] macvlan2: left allmulticast mode [ 631.843263][T22814] bond5: left promiscuous mode [ 631.850960][T22814] bridge3: left promiscuous mode [ 631.892486][T22814] geneve3: left promiscuous mode [ 631.898365][T22814] geneve3: left allmulticast mode [ 631.931852][T13181] wg2 speed is unknown, defaulting to 1000 [ 631.937956][T13181] syz2: Port: 1 Link DOWN [ 631.945764][T11055] tipc: Node number set to 3850668876 [ 631.982818][ T770] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.991723][ T770] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.000909][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.010877][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.020436][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.030281][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.048426][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.057678][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 633.091148][T11702] net_ratelimit: 22 callbacks suppressed [ 633.091167][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.219801][T11055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.228106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.422472][T22873] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 634.085876][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.342097][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.350417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.446022][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.474179][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.483586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.577539][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.639222][T22855] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 635.648605][T22855] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 635.658144][T22855] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 635.927280][T22885] ip6tnl0: Caught tx_queue_len zero misconfig [ 636.071384][T22891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4398'. [ 636.111169][T22894] netlink: 'syz.4.4399': attribute type 1 has an invalid length. [ 636.111579][T22895] netlink: 'syz.4.4399': attribute type 1 has an invalid length. [ 636.158896][T22894] bond6: entered promiscuous mode [ 636.166771][T22894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 636.196818][T22901] Bluetooth: hci0: unsupported parameter 5134 [ 636.203146][T22901] Bluetooth: hci0: unsupported parameter 8192 [ 636.229315][T22895] 8021q: adding VLAN 0 to HW filter on device bond6 [ 636.244790][T22901] Bluetooth: hci0: unsupported parameter 5134 [ 636.244815][T22901] Bluetooth: hci0: unsupported parameter 8192 [ 636.270819][T22895] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 636.292166][T22895] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 636.299539][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4399'. [ 636.323413][T22895] bond6: (slave gre1): making interface the new active one [ 636.334212][T22895] gre1: entered promiscuous mode [ 636.355773][T22895] bond6: (slave gre1): Enslaving as an active interface with an up link [ 636.429341][T22894] bond6 (unregistering): (slave gre1): Releasing backup interface [ 636.438784][T22894] gre1: left promiscuous mode [ 636.452034][T22894] bond6 (unregistering): Released all slaves [ 636.491308][T22912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4403'. [ 636.613811][T22922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4406'. [ 636.623594][T22922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4406'. [ 636.641263][T22922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4406'. [ 636.651518][T22924] netlink: 'syz.0.4406': attribute type 15 has an invalid length. [ 636.661973][T22922] netlink: 'syz.0.4406': attribute type 15 has an invalid length. [ 636.816848][T22931] netlink: 'syz.4.4408': attribute type 3 has an invalid length. [ 636.835697][T22931] netlink: 'syz.4.4408': attribute type 4 has an invalid length. [ 636.843680][T22931] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4408'. [ 636.987669][T22931] xt_CT: No such helper "snmp_trap" [ 637.273140][T22960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4415'. [ 637.318917][T22964] netlink: 'syz.0.4417': attribute type 1 has an invalid length. [ 637.341320][T22964] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4417'. [ 637.444553][T22971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4420'. [ 637.734774][ T770] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.868315][T22874] udevd[22874]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 637.885503][T11676] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.925547][T22982] udevd[22982]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 637.936244][T11697] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.938984][T22990] sctp: [Deprecated]: syz.0.4423 (pid 22990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 637.938984][T22990] Use struct sctp_sack_info instead [ 637.955739][T11697] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.134242][T11702] net_ratelimit: 30 callbacks suppressed [ 638.134261][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 638.264898][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 638.276947][T23005] netlink: 'syz.4.4428': attribute type 7 has an invalid length. [ 638.378860][T23011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.388030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.397800][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 638.525348][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 638.634959][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.644293][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 638.644298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.765064][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 638.792265][T23000] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 639.265407][T23064] netlink: 'syz.6.4440': attribute type 1 has an invalid length. [ 639.273216][T23064] netlink: 'syz.6.4440': attribute type 12 has an invalid length. [ 639.430603][T23078] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 639.725741][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 639.761629][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 639.771842][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 639.780173][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 639.788189][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 640.211930][T23094] xfrm0 speed is unknown, defaulting to 1000 [ 640.460372][T23094] wg2 speed is unknown, defaulting to 1000 [ 640.722834][T23094] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.730455][T23094] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.738525][T23094] bridge_slave_0: entered allmulticast mode [ 640.746725][T23094] bridge_slave_0: entered promiscuous mode [ 640.758761][T23094] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.766363][T23094] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.773594][T23094] bridge_slave_1: entered allmulticast mode [ 640.781475][T23094] bridge_slave_1: entered promiscuous mode [ 640.820997][T23094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.833783][T23094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.877543][T23094] team0: Port device team_slave_0 added [ 640.886798][T23094] team0: Port device team_slave_1 added [ 640.925932][T23094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.932938][T23094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.962108][T23094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.980631][T23094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.988782][T23094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.015393][T23094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.075045][T23094] hsr_slave_0: entered promiscuous mode [ 641.081652][T23094] hsr_slave_1: entered promiscuous mode [ 641.088773][T23094] debugfs: 'hsr0' already exists in 'hsr' [ 641.095452][T23094] Cannot create hsr debugfs directory [ 641.914346][ T50] Bluetooth: hci7: command tx timeout [ 642.285016][T23066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.322078][T23094] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 642.397484][T23094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.434785][T23094] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 642.461990][T23094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.483025][T23094] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 642.515592][T23094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.515783][T23130] __nla_validate_parse: 7 callbacks suppressed [ 642.515796][T23130] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4452'. [ 642.523478][T23094] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 642.549973][T23130] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4452'. [ 642.574588][T23094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.586797][T23132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4454'. [ 642.607202][T23130] lo: entered allmulticast mode [ 642.743004][T23094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.782449][T23094] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.800205][T11697] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.800971][T23149] netlink: 'syz.6.4456': attribute type 1 has an invalid length. [ 642.807356][T11697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.809664][T23150] 8021q: VLANs not supported on ip6gre0 [ 642.839553][T11702] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.846694][T11702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.940170][T23153] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4458'. [ 643.102911][T23164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4459'. [ 643.195213][ T24] net_ratelimit: 38 callbacks suppressed [ 643.195230][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.259692][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 643.645249][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 643.672834][T23094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.802603][T23190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4466'. [ 643.814057][T23196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.841457][T23190] netlink: 'syz.0.4466': attribute type 7 has an invalid length. [ 643.876535][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 643.876717][T23190] netlink: 'syz.0.4466': attribute type 8 has an invalid length. [ 643.891413][T23190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4466'. [ 644.000519][ T50] Bluetooth: hci7: command tx timeout [ 644.024614][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 644.105352][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.113644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.250855][ T770] bond4: (slave bridge0): failed to get link speed/duplex [ 644.300694][T23217] xfrm0 speed is unknown, defaulting to 1000 [ 644.344558][T23094] veth0_vlan: entered promiscuous mode [ 644.357806][T23094] veth1_vlan: entered promiscuous mode [ 644.428475][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.429695][T23094] veth0_macvtap: entered promiscuous mode [ 644.446982][T23094] veth1_macvtap: entered promiscuous mode [ 644.468823][T23094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.508008][T23094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.598649][T23223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4472'. [ 644.634962][ T770] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.684576][T11702] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.714324][T11702] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.758436][T17322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.765675][T11702] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.766279][T17322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.878521][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.886488][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.023547][T23217] wg2 speed is unknown, defaulting to 1000 [ 645.062035][T23239] syz_tun: entered allmulticast mode [ 645.199152][T23244] netlink: 'syz.1.4476': attribute type 1 has an invalid length. [ 645.227645][T23246] xt_l2tp: unknown flags: 51 [ 645.227768][T23239] syz_tun (unregistering): left allmulticast mode [ 645.315081][T23251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4476'. [ 645.415369][T23221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4470'. [ 645.483135][T23257] tun0: tun_chr_ioctl cmd 1074025675 [ 645.488476][T23257] tun0: persist enabled [ 645.598525][T23242] syzkaller0: entered promiscuous mode [ 645.604574][T23242] syzkaller0: entered allmulticast mode [ 645.611434][T23257] tun0: tun_chr_ioctl cmd 1074025675 [ 645.616756][T23257] tun0: persist enabled [ 646.117998][ T50] Bluetooth: hci7: command tx timeout [ 646.162296][T23277] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 648.167679][ T50] Bluetooth: hci7: command tx timeout [ 648.405345][ T12] net_ratelimit: 17 callbacks suppressed [ 648.405365][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.422969][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.431262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.278039][T13181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.345567][T17323] bond4: (slave bridge0): failed to get link speed/duplex [ 649.438529][T20725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.447989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.475499][T23294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.563578][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.600715][T23308] __nla_validate_parse: 2 callbacks suppressed [ 649.600734][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4490'. [ 649.719691][T23315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4492'. [ 649.750504][T23294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.854803][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 650.006152][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 650.075741][T23318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4493'. [ 650.133438][T23334] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4496'. [ 650.382201][T23342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4498'. [ 650.406618][T23344] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4499'. [ 650.416263][T23344] unsupported nlmsg_type 40 [ 650.437904][T23347] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4500'. [ 650.534887][T23353] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4501'. [ 650.703395][T23361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4503'. [ 650.712982][T23361] netlink: 'syz.4.4503': attribute type 8 has an invalid length. [ 650.723415][T23361] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4503'. [ 651.024901][T23379] syzkaller0: left promiscuous mode [ 651.030156][T23379] syzkaller0: left allmulticast mode [ 651.280421][T23380] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 652.487810][T11702] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 652.530649][T23436] netlink: 'syz.6.4523': attribute type 21 has an invalid length. [ 652.567426][T23427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.038436][T23449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.123832][T23449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.294347][T23449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.305080][T23449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.320131][T23449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 653.331230][T23449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.348519][T23449] veth1_vlan: left promiscuous mode [ 653.360882][T23449] veth0_vlan: left promiscuous mode [ 653.376422][T23449] veth0_vlan: entered promiscuous mode [ 653.388140][T23449] veth1_vlan: entered promiscuous mode [ 653.408718][T23449] veth1_macvtap: left promiscuous mode [ 653.423143][T23449] veth0_macvtap: left promiscuous mode [ 653.430869][T23449] veth0_macvtap: entered promiscuous mode [ 653.438983][T23449] veth1_macvtap: entered promiscuous mode [ 653.456085][T23449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 653.466370][T23449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 653.475472][T23449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 653.484129][T23449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 653.487103][T23484] netlink: 'syz.4.4534': attribute type 27 has an invalid length. [ 653.495077][T23449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 653.513596][T23449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.521032][T23449] net_ratelimit: 81 callbacks suppressed [ 653.521050][T23449] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 653.571716][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.578976][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.592623][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.599958][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.658343][ T48] bridge0: port 3(team0) entered blocking state [ 653.664844][ T48] bridge0: port 3(team0) entered forwarding state [ 653.679713][T17323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.756331][T23490] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 653.797670][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 653.809885][T20725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.819289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.866637][T23487] syzkaller0: entered promiscuous mode [ 653.880309][T23487] syzkaller0: entered allmulticast mode [ 654.089392][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.099471][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.197361][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 654.205091][T17323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.214498][T17323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.343474][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 654.465145][T17323] bond4: (slave bridge0): failed to get link speed/duplex [ 654.605232][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 654.748007][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 654.873180][T23532] __nla_validate_parse: 5 callbacks suppressed [ 654.873211][T23532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4550'. [ 654.906876][T23532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4550'. [ 654.916652][T23507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4541'. [ 654.926051][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4541'. [ 654.989406][T23537] lo: entered allmulticast mode [ 655.201699][T23545] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4553'. [ 655.215079][T23545] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4553'. [ 655.333483][T23551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.362064][T23546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.629866][T23527] lo: left allmulticast mode [ 655.859943][T23577] netlink: 'syz.1.4560': attribute type 1 has an invalid length. [ 655.872419][T23577] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4560'. [ 655.885542][T23577] NCSI netlink: No device for ifindex 0 [ 656.161023][T23586] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4563'. [ 656.236533][T23588] netlink: 1004 bytes leftover after parsing attributes in process `syz.7.4564'. [ 656.331785][T23594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4565'. [ 657.106589][T23632] syzkaller0: entered promiscuous mode [ 657.124323][T23632] syzkaller0: entered allmulticast mode [ 657.441186][T23650] syzkaller0: entered promiscuous mode [ 657.447471][T23650] syzkaller0: entered allmulticast mode [ 657.458094][T23650] tipc: Started in network mode [ 657.463395][T23650] tipc: Node identity 12af50ff2136, cluster identity 4711 [ 657.474561][T23650] tipc: Enabled bearer , priority 0 [ 657.893894][T23648] tipc: Resetting bearer [ 657.932674][T23648] tipc: Disabling bearer [ 657.983658][T23670] sch_fq: defrate 8 ignored. [ 658.046020][T23670] netlink: 'syz.6.4587': attribute type 2 has an invalid length. [ 658.254518][T23678] netlink: 'syz.0.4589': attribute type 1 has an invalid length. [ 658.272186][T23678] netlink: 'syz.0.4589': attribute type 1 has an invalid length. [ 658.549668][T11702] net_ratelimit: 40 callbacks suppressed [ 658.549688][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.564606][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 658.694472][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 658.824352][T11702] bond4: (slave bridge0): failed to get link speed/duplex [ 658.860986][T23697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.944199][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 659.076465][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 659.146326][T23711] netlink: 'syz.0.4601': attribute type 13 has an invalid length. [ 659.155682][T23711] netlink: 'syz.0.4601': attribute type 17 has an invalid length. [ 659.195413][T11055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.204718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.269827][T23711] gretap0: refused to change device tx_queue_len [ 659.277481][T23711] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 659.305161][T23708] ip6gre1: entered promiscuous mode [ 659.316853][T23708] ip6gre1: entered allmulticast mode [ 659.379432][T23726] bond6: option lacp_active: invalid value (5) [ 659.443195][T23726] bond6 (unregistering): Released all slaves [ 659.460772][T23735] netlink: 'syz.7.4606': attribute type 4 has an invalid length. [ 659.585085][T23742] netlink: 'syz.0.4608': attribute type 21 has an invalid length. [ 659.611030][T23742] netlink: 'syz.0.4608': attribute type 4 has an invalid length. [ 659.618935][T23742] netlink: 'syz.0.4608': attribute type 5 has an invalid length. [ 660.864032][T23827] __nla_validate_parse: 13 callbacks suppressed [ 660.864051][T23827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4628'. [ 660.879541][T23827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4628'. [ 660.932109][T23829] syzkaller1: entered promiscuous mode [ 660.950555][T23829] syzkaller1: entered allmulticast mode [ 661.498358][T23862] lo: entered allmulticast mode [ 661.509439][T23865] tipc: Failed to remove unknown binding: 66,0,0/0:4289557383/4289557384 [ 661.518453][T23865] tipc: Failed to remove unknown binding: 66,0,0/0:4289557383/4289557384 [ 661.630878][T23877] validate_nla: 3 callbacks suppressed [ 661.630966][T23877] netlink: 'syz.0.4645': attribute type 13 has an invalid length. [ 661.887457][T11676] IPVS: starting estimator thread 0... [ 662.050567][T23898] syzkaller1: entered promiscuous mode [ 662.068001][T23898] syzkaller1: entered allmulticast mode [ 662.198639][T23902] xfrm0 speed is unknown, defaulting to 1000 [ 662.231657][T23895] IPVS: using max 38 ests per chain, 91200 per kthread [ 662.243844][T23907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4654'. [ 662.331205][T23861] lo: left allmulticast mode [ 662.435238][T23902] wg2 speed is unknown, defaulting to 1000 [ 662.633556][T23920] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 662.822061][T23931] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4660'. [ 662.960134][T23925] veth0_to_hsr: entered promiscuous mode [ 662.968527][T23925] veth0_to_hsr: left promiscuous mode [ 662.988161][T23932] syzkaller0: entered promiscuous mode [ 663.015105][T23932] syzkaller0: entered allmulticast mode [ 663.028273][T23934] syzkaller0: entered promiscuous mode [ 663.039142][T23934] syzkaller0: entered allmulticast mode [ 663.058329][T23934] tipc: Enabled bearer , priority 0 [ 663.080566][T23934] tipc: Resetting bearer [ 663.089408][T23933] tipc: Resetting bearer [ 663.131005][T23933] tipc: Disabling bearer [ 663.177848][T23946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4666'. [ 663.192266][T23929] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4662'. [ 663.560195][T11055] net_ratelimit: 37 callbacks suppressed [ 663.560214][T11055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.574289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.594035][T23959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4667'. [ 663.663183][T23960] bridge1: entered allmulticast mode [ 663.672276][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4669'. [ 663.776584][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.799930][T23966] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 663.830728][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4670'. [ 663.883856][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 663.906731][T23970] Bluetooth: MGMT ver 1.23 [ 664.047973][T23977] netlink: 'syz.7.4674': attribute type 21 has an invalid length. [ 664.056292][T23977] IPv6: NLM_F_CREATE should be specified when creating new route [ 664.066691][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4674'. [ 664.108139][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 664.147801][T23980] ip_tables: iptables: counters copy to user failed while replacing table [ 664.323481][T17323] bond4: (slave bridge0): failed to get link speed/duplex [ 664.479397][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 664.491494][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.614357][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 664.913988][T23996] syzkaller0: entered promiscuous mode [ 664.919902][T23996] syzkaller0: entered allmulticast mode [ 664.929686][T23999] nbd: couldn't find a device at index 65546 [ 664.955047][T23999] netlink: 'syz.7.4683': attribute type 1 has an invalid length. [ 665.047727][T23999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.163595][T23999] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 665.770934][T24019] x_tables: duplicate underflow at hook 1 [ 666.003704][T24027] sctp: [Deprecated]: syz.7.4691 (pid 24027) Use of int in maxseg socket option. [ 666.003704][T24027] Use struct sctp_assoc_value instead [ 666.070863][T24028] sctp: [Deprecated]: syz.7.4691 (pid 24028) Use of int in maxseg socket option. [ 666.070863][T24028] Use struct sctp_assoc_value instead [ 666.080222][T24027] sctp: [Deprecated]: syz.7.4691 (pid 24027) Use of int in max_burst socket option. [ 666.080222][T24027] Use struct sctp_assoc_value instead [ 666.473173][T24042] __nla_validate_parse: 8 callbacks suppressed [ 666.473191][T24042] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4698'. [ 666.564528][T24052] sit0: entered promiscuous mode [ 666.597457][T24052] netlink: 'syz.6.4695': attribute type 1 has an invalid length. [ 666.605487][T24052] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4695'. [ 666.798865][T24064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4702'. [ 666.922314][T24071] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4704'. [ 667.354064][ T5608] Bluetooth: hci6: command 0x0406 tx timeout [ 667.582304][T24114] xt_l2tp: missing protocol rule (udp|l2tpip) [ 667.691448][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4721'. [ 667.914020][T24138] netlink: 16170 bytes leftover after parsing attributes in process `syz.7.4724'. [ 668.012253][T24141] bond_slave_1: entered promiscuous mode [ 668.072303][T24143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4720'. [ 668.252176][T24138] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4724'. [ 668.342594][T24146] netlink: 'syz.0.4726': attribute type 1 has an invalid length. [ 668.351713][T24146] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 668.428854][T24148] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4727'. [ 668.595493][T17322] net_ratelimit: 45 callbacks suppressed [ 668.595514][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 668.630788][T24161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4732'. [ 668.647263][T24161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.731674][T11676] bond4: (slave bridge0): failed to get link speed/duplex [ 668.767749][T24163] netlink: 'syz.4.4734': attribute type 4 has an invalid length. [ 668.820160][T24167] netlink: 'syz.4.4734': attribute type 4 has an invalid length. [ 668.887091][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 668.945292][T24173] lo: Caught tx_queue_len zero misconfig [ 669.015555][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 669.030864][T24175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.054230][T11055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.063662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.299406][T24186] netlink: 'syz.6.4740': attribute type 1 has an invalid length. [ 669.439150][T24175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.521415][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 669.642156][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 669.714605][T24194] netlink: 'syz.4.4743': attribute type 1 has an invalid length. [ 669.734380][T24194] nbd: must specify a device to reconfigure [ 669.855189][T17322] bond4: (slave bridge0): failed to get link speed/duplex [ 670.093098][T24209] netlink: 'syz.1.4749': attribute type 6 has an invalid length. [ 670.101601][T24209] netlink: 'syz.1.4749': attribute type 7 has an invalid length. [ 670.111969][T24209] netlink: 'syz.1.4749': attribute type 8 has an invalid length. [ 670.122022][T24205] netlink: 'syz.1.4749': attribute type 6 has an invalid length. [ 670.131511][T24205] netlink: 'syz.1.4749': attribute type 7 has an invalid length. [ 670.568120][T24243] syzkaller1: entered promiscuous mode [ 670.574505][T24243] syzkaller1: entered allmulticast mode [ 670.655911][T24249] nbd: socks must be embedded in a SOCK_ITEM attr [ 670.847801][T24249] bond8: (slave bridge5): making interface the new active one [ 670.857264][T24249] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 671.081549][T24265] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 671.102052][T24265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.112079][T24265] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 671.123784][T24266] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 671.164720][T11676] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.176220][T11676] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.186286][T11676] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.197467][T11676] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.213705][T24272] x_tables: unsorted entry at hook 2 [ 672.351111][T24307] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 672.362040][T24307] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 672.378059][T24307] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 672.603441][T24310] __nla_validate_parse: 83 callbacks suppressed [ 672.603465][T24310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4778'. [ 672.666525][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4779'. [ 672.675820][T24312] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4779'. [ 672.692990][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4779'. [ 672.702484][T24312] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4779'. [ 672.717854][T11697] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.728438][T11697] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.739227][T11697] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.757871][T11697] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.548550][T24244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.694159][T24320] net_ratelimit: 46 callbacks suppressed [ 673.694177][T24320] bond4: (slave bridge0): failed to get link speed/duplex [ 673.796718][T24334] validate_nla: 3 callbacks suppressed [ 673.796749][T24334] netlink: 'syz.7.4785': attribute type 39 has an invalid length. [ 673.924903][T11704] bond4: (slave bridge0): failed to get link speed/duplex [ 673.970936][T24342] tunl0: Caught tx_queue_len zero misconfig [ 674.016400][T24349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4787'. [ 674.082864][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 674.238246][T11055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.246651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.256515][ T770] bond4: (slave bridge0): failed to get link speed/duplex [ 674.285080][T24360] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4791'. [ 674.308980][T24361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4791'. [ 674.323535][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4793'. [ 674.374359][T11704] bond4: (slave bridge0): failed to get link speed/duplex [ 674.461838][T24370] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 674.471331][T24370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4795'. [ 674.536353][T24374] netlink: 'syz.7.4797': attribute type 10 has an invalid length. [ 674.557416][T24374] geneve2: entered promiscuous mode [ 674.562843][T24374] geneve2: entered allmulticast mode [ 674.584050][T11699] bond4: (slave bridge0): failed to get link speed/duplex [ 674.680362][T24386] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 674.777563][ T35] bond4: (slave bridge0): failed to get link speed/duplex [ 678.764661][T11697] net_ratelimit: 46 callbacks suppressed [ 678.764697][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 678.884273][T24320] bond4: (slave bridge0): failed to get link speed/duplex [ 678.994627][T24319] bond4: (slave bridge0): failed to get link speed/duplex [ 679.104241][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 679.214445][T24320] bond4: (slave bridge0): failed to get link speed/duplex [ 679.324484][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 679.354615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.365192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.373536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.434691][T11697] bond4: (slave bridge0): failed to get link speed/duplex [ 683.794771][T11704] net_ratelimit: 54 callbacks suppressed [ 683.794808][T11704] bond4: (slave bridge0): failed to get link speed/duplex [ 683.924484][ T35] bond4: (slave bridge0): failed to get link speed/duplex [ 684.034166][ T35] bond4: (slave bridge0): failed to get link speed/duplex [ 684.144406][ T35] bond4: (slave bridge0): failed to get link speed/duplex [ 684.254218][T24319] bond4: (slave bridge0): failed to get link speed/duplex [ 684.364260][T24319] bond4: (slave bridge0): failed to get link speed/duplex [ 684.478884][T11704] bond4: (slave bridge0): failed to get link speed/duplex [ 684.594438][T24319] bond4: (slave bridge0): failed to get link speed/duplex [ 684.635169][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.644045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.759621][ T30] INFO: task syz.5.3394:19220 blocked for more than 143 seconds. [ 685.769852][ T30] Not tainted syzkaller #0 [ 685.776357][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 685.785257][ T30] task:syz.5.3394 state:D stack:27200 pid:19220 tgid:19219 ppid:17720 task_flags:0x400140 flags:0x00080002 [ 685.797726][ T30] Call Trace: [ 685.801060][ T30] [ 685.804101][ T30] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 685.808752][ T30] ? __lock_acquire+0x683/0x2cf0 [ 685.813720][ T30] ? __lock_acquire+0x683/0x2cf0 [ 685.818937][ T30] ? __pfx___schedule+0x10/0x10 [ 685.823852][ T30] ? schedule+0x90/0x2b0 [ 685.828600][ T30] schedule+0x164/0x2b0 [ 685.832791][ T30] schedule_preempt_disabled+0x13/0x30 [ 685.838986][ T30] __mutex_lock+0x7bf/0x1550 [ 685.843673][ T30] ? __mutex_lock+0x5d4/0x1550 [ 685.849138][ T30] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 685.855670][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 685.860953][ T30] ? net_generic+0x1e/0x240 [ 685.865628][ T30] ? net_generic+0x1e/0x240 [ 685.870151][ T30] ? net_generic+0x1e/0x240 [ 685.875079][ T30] ? net_generic+0x1e/0x240 [ 685.879814][ T30] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 685.894455][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 685.939746][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 685.991428][ T30] ? bpf_lsm_capable+0x9/0x20 [ 686.007023][ T30] ? security_capable+0x7e/0x2c0 [ 686.034292][ T30] genl_rcv_msg+0x614/0x7a0 [ 686.038897][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 686.046011][ T30] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 686.064644][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 686.070210][ T30] netlink_rcv_skb+0x226/0x4a0 [ 686.085073][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 686.091493][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 686.104864][ T30] ? down_read+0x2be/0x330 [ 686.114244][ T30] genl_rcv+0x28/0x40 [ 686.124469][ T30] netlink_unicast+0x7bb/0x940 [ 686.130472][ T30] netlink_sendmsg+0x813/0xb40 [ 686.144319][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.154634][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 686.164428][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.174049][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 686.184468][ T30] ____sys_sendmsg+0x54e/0x850 [ 686.194295][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.204298][ T30] ? import_iovec+0x73/0xa0 [ 686.214697][ T30] ___sys_sendmsg+0x2a5/0x360 [ 686.225601][ T30] ? __lock_acquire+0x683/0x2cf0 [ 686.235527][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.254139][ T30] ? futex_wake+0x51b/0x5f0 [ 686.258780][ T30] ? __fget_files+0x2a/0x420 [ 686.263455][ T30] ? __fget_files+0x3a2/0x420 [ 686.276413][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 686.294880][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 686.300440][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.316342][ T30] do_syscall_64+0x174/0x580 [ 686.327258][ T30] ? trace_irq_disable+0x3b/0x140 [ 686.344969][ T30] ? clear_bhb_loop+0x70/0xc0 [ 686.349732][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.365489][ T30] RIP: 0033:0x7ff674f9e0d9 [ 686.374592][ T30] RSP: 002b:00007ff675e23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.403919][ T30] RAX: ffffffffffffffda RBX: 00007ff675225fa0 RCX: 00007ff674f9e0d9 [ 686.434377][ T30] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000008 [ 686.454236][ T30] RBP: 00007ff675035024 R08: 0000000000000000 R09: 0000000000000000 [ 686.463343][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.473135][ T30] R13: 00007ff675226038 R14: 00007ff675225fa0 R15: 00007ffe26083bb8 [ 686.485755][ T30] [ 686.488952][ T30] [ 686.488952][ T30] Showing all locks held in the system: [ 686.505530][ T30] 1 lock held by khungtaskd/30: [ 686.510414][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 686.530138][ T30] 2 locks held by getty/5360: [ 686.534920][ T30] #0: ffff8880365770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 686.544826][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 686.554959][ T30] 3 locks held by kworker/0:5/5711: [ 686.560171][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 686.571208][ T30] #1: ffffc900045d7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 686.581771][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 686.630504][ T30] 1 lock held by syz-executor/17216: [ 686.635923][ T30] #0: ffff8880727d4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 686.646061][ T30] 2 locks held by syz.3.2940/17301: [ 686.651264][ T30] #0: ffffffff90099ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 686.659563][ T30] #1: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 686.670419][ T30] 2 locks held by syz-executor/17613: [ 686.675803][ T30] #0: ffff8880560acea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 686.685765][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 686.696822][ T30] 1 lock held by syz-executor/18044: [ 686.702116][ T30] 2 locks held by syz.5.3394/19220: [ 686.728261][ T30] #0: ffffffff90099ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 686.736512][ T30] #1: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 686.746559][ T30] 1 lock held by syz-executor/19769: [ 686.751897][ T30] 2 locks held by syz.2.4338/22654: [ 686.757102][ T30] #0: ffffffff90099ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 686.765345][ T30] #1: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 686.775303][ T30] 1 lock held by syz-executor/23094: [ 686.781604][ T30] [ 686.783950][ T30] ============================================= [ 686.783950][ T30] [ 686.841991][ T30] NMI backtrace for cpu 0 [ 686.842013][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 686.842032][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.842041][ T30] Call Trace: [ 686.842048][ T30] [ 686.842055][ T30] dump_stack_lvl+0xe8/0x150 [ 686.842084][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 686.842178][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 686.842219][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 686.842244][ T30] sys_info+0x135/0x170 [ 686.842261][ T30] watchdog+0xfd7/0x1030 [ 686.842287][ T30] ? watchdog+0x1c7/0x1030 [ 686.842311][ T30] kthread+0x388/0x470 [ 686.842331][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.842347][ T30] ? __pfx_kthread+0x10/0x10 [ 686.842368][ T30] ret_from_fork+0x514/0xb70 [ 686.842407][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 686.842427][ T30] ? __switch_to+0xc89/0x1420 [ 686.842448][ T30] ? __pfx_kthread+0x10/0x10 [ 686.842468][ T30] ret_from_fork_asm+0x1a/0x30 [ 686.842501][ T30] [ 686.842508][ T30] Sending NMI from CPU 0 to CPUs 1: [ 686.963988][ C1] NMI backtrace for cpu 1 [ 686.964006][ C1] CPU: 1 UID: 0 PID: 13181 Comm: kworker/1:15 Not tainted syzkaller #0 PREEMPT(full) [ 686.964024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.964040][ C1] Workqueue: rcu_gp process_srcu [ 686.964066][ C1] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 686.964086][ C1] Code: 20 bf 4b 8c 48 c7 c6 60 bf 4b 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 97 6d 99 07 65 8b 0d 8c 6d 99 07 f7 c1 ff [ 686.964100][ C1] RSP: 0018:ffffc90000a08a68 EFLAGS: 00000046 [ 686.964113][ C1] RAX: b3a258775117876f RBX: 0000000000000083 RCX: 0000000000000101 [ 686.964124][ C1] RDX: 0000000000000003 RSI: ffffffff8e4bbf22 RDI: ffffffff8c4bbf80 [ 686.964135][ C1] RBP: ffff888067dbab18 R08: ffffffff85699bea R09: 0000000000080000 [ 686.964146][ C1] R10: 0000000000000000 R11: ffff8880b8736d30 R12: 0000000000000003 [ 686.964157][ C1] R13: 0000000000000003 R14: ffff8880b8736d30 R15: ffff888067db9f00 [ 686.964168][ C1] FS: 0000000000000000(0000) GS:ffff88812504a000(0000) knlGS:0000000000000000 [ 686.964181][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.964192][ C1] CR2: 0000564201e13ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 686.964206][ C1] Call Trace: [ 686.964212][ C1] [ 686.964219][ C1] lock_release+0x259/0x3c0 [ 686.964240][ C1] ? get_random_u32+0x13a/0x8b0 [ 686.964351][ C1] ? get_random_u32+0x13a/0x8b0 [ 686.964368][ C1] get_random_u32+0x481/0x8b0 [ 686.964388][ C1] ? __pfx_get_random_u32+0x10/0x10 [ 686.964409][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 686.964430][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 686.964451][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 686.964472][ C1] __get_random_u32_below+0x14/0x90 [ 686.964491][ C1] garp_join_timer+0x11c/0x160 [ 686.964555][ C1] call_timer_fn+0x192/0x5e0 [ 686.964578][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 686.964593][ C1] ? call_timer_fn+0xd4/0x5e0 [ 686.964614][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 686.964639][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 686.964658][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 686.964674][ C1] __run_timer_base+0x652/0x8b0 [ 686.964694][ C1] ? ktime_get+0x45/0x220 [ 686.964717][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 686.964739][ C1] ? ktime_get+0x1f5/0x220 [ 686.964757][ C1] ? lapic_next_event+0x11/0x20 [ 686.964783][ C1] run_timer_softirq+0xb7/0x170 [ 686.964803][ C1] handle_softirqs+0x225/0x840 [ 686.964892][ C1] ? __irq_exit_rcu+0xca/0x220 [ 686.964911][ C1] __irq_exit_rcu+0xca/0x220 [ 686.964928][ C1] irq_exit_rcu+0x9/0x30 [ 686.964943][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 686.964965][ C1] [ 686.964970][ C1] [ 686.964975][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 686.964993][ C1] RIP: 0010:kasan_check_range+0x30/0x2c0 [ 686.965018][ C1] Code: 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d 04 37 49 39 f8 0f 82 36 02 00 00 49 b9 00 00 00 00 00 80 ff ff 0d cc cc cc 49 b9 00 00 00 00 00 00 00 ff 4c 39 cf 0f 82 14 02 [ 686.965031][ C1] RSP: 0018:ffffc9000d3378a8 EFLAGS: 00000212 [ 686.965044][ C1] RAX: 0000000000000001 RBX: ffff8880456cb8e8 RCX: ffffffff8bd543fd [ 686.965056][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880456cb8e8 [ 686.965065][ C1] RBP: ffffc9000d3379d8 R08: ffff8880456cb8f0 R09: ffff800000000000 [ 686.965077][ C1] R10: dffffc0000000000 R11: ffffed1008ad971e R12: 1ffffffff34f16b0 [ 686.965089][ C1] R13: 1ffffffff20af468 R14: 0000000000000000 R15: ffffc9000d337960 [ 686.965103][ C1] ? __mutex_unlock_slowpath+0x16d/0x900 [ 686.965131][ C1] __mutex_unlock_slowpath+0x16d/0x900 [ 686.965157][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 686.965181][ C1] ? try_check_zero+0x38a/0x4c0 [ 686.965206][ C1] process_srcu+0x863/0x16f0 [ 686.965226][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 686.965249][ C1] ? rcu_is_watching+0x15/0xb0 [ 686.965272][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 686.965288][ C1] process_scheduled_works+0xa8e/0x14e0 [ 686.965317][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.965336][ C1] ? assign_work+0x3cf/0x5d0 [ 686.965354][ C1] worker_thread+0xa47/0xfb0 [ 686.965376][ C1] ? __kthread_parkme+0x71/0x1f0 [ 686.965399][ C1] kthread+0x388/0x470 [ 686.965419][ C1] ? __pfx_worker_thread+0x10/0x10 [ 686.965434][ C1] ? __pfx_kthread+0x10/0x10 [ 686.965455][ C1] ret_from_fork+0x514/0xb70 [ 686.965476][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 686.965497][ C1] ? __switch_to+0xc89/0x1420 [ 686.965516][ C1] ? __pfx_kthread+0x10/0x10 [ 686.965536][ C1] ret_from_fork_asm+0x1a/0x30 [ 686.965566][ C1] [ 687.481172][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 687.488079][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 687.497204][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.507453][ T30] Call Trace: [ 687.510746][ T30] [ 687.513690][ T30] vpanic+0x56c/0xa60 [ 687.517707][ T30] ? __pfx___schedule+0x10/0x10 [ 687.522601][ T30] ? __pfx_vpanic+0x10/0x10 [ 687.527122][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 687.533294][ T30] panic+0xc5/0xd0 [ 687.537031][ T30] ? __pfx_panic+0x10/0x10 [ 687.541458][ T30] ? preempt_schedule_common+0x82/0xd0 [ 687.546932][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 687.552325][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 687.558759][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 687.564922][ T30] watchdog+0x1030/0x1030 [ 687.569248][ T30] ? watchdog+0x1c7/0x1030 [ 687.573654][ T30] kthread+0x388/0x470 [ 687.577725][ T30] ? __pfx_watchdog+0x10/0x10 [ 687.582389][ T30] ? __pfx_kthread+0x10/0x10 [ 687.586982][ T30] ret_from_fork+0x514/0xb70 [ 687.591564][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 687.596674][ T30] ? __switch_to+0xc89/0x1420 [ 687.601349][ T30] ? __pfx_kthread+0x10/0x10 [ 687.605928][ T30] ret_from_fork_asm+0x1a/0x30 [ 687.610693][ T30] [ 687.613998][ T30] Kernel Offset: disabled [ 687.618311][ T30] Rebooting in 86400 seconds..