last executing test programs: 11m8.84570433s ago: executing program 4 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$rds(0x15, 0x5, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000010) (async) 11m8.696143262s ago: executing program 4 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000130000001b00020000000900010073797a300000000058000000120a01040000f70000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002040000000000000001060004"], 0xbc}, 0x1, 0x0, 0x0, 0x40000811}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071180d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x8) (async) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) 11m8.453392425s ago: executing program 4 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xf}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4090}, 0x51) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000e167b2190340000100000800074000000000040006"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0xfffffffffffffd05, r4, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffff8, 0x40055}}}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b400000000000000791048000000000071001e000000000095000300"], &(0x7f00000008c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a00)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a40)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000810000085000000a700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r8}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)) 11m8.008223189s ago: executing program 4 (id=697): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r0}) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) (rerun: 32) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000b80)={0xf800, 0x5, 0x9, 0x831}, 0x8) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001600)={0xffffffffffffffff, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f00000015c0)=0x8005, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r6, &(0x7f00000000c0)="77fc8bad97102245aadcb5f9b5bfa899fffd48d5a014ff73bd6ccbbd047f7af0cf3046933cc6c77b2a72883270bc5c18558a8adfea5365b799f04a73dcbf304ff1d6d10784ed5ef61d7392c360a399aee7005e70de45e09e8723"}, 0x20) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f00000002c0)={r6, &(0x7f00000001c0)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x858000, &(0x7f0000000200)={@_ha_fsid={[0x8, 0xa]}, {0x1000, 0xb5, 0xd, 0x81}}, 0x6, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xa8}) (async) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x615, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="110100b8907800000007f6d7d6c5a10004021e0cf90006000000000000000510e26ae1c770b2eddecf7ba2ec670404020204060000000000fcf4b4ef46b67a729507b8a31ad35213a123e6f3061d7d463ee14670984c16b9c0169c39c18d650b723426bb821f873c099b1b12479f62a43212a3596bbeded107cbace24a12d9a34484fba36a74a94f26ad6ba2bc6bf77b7e292e6aa9cdf8b9975202aaf626e3ba5245e9a078931f30fa6669786a1ff3a8ece93c0490"], &(0x7f00000009c0)={0x1, 0x3, [0xcd6, 0xa9c, 0x2f2, 0xa0b]}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001180)={'tunl0\x00', &(0x7f0000001040)={'syztnl1\x00', r3, 0x7, 0x40, 0xfff, 0x2, {{0x3a, 0x4, 0x1, 0x6, 0xe8, 0x65, 0x0, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x12}, {[@lsrr={0x83, 0xb, 0x19, [@rand_addr=0x64010101, @local]}, @generic={0x88, 0x9, "f8a6d7790894cd"}, @end, @noop, @cipso={0x86, 0x34, 0x2, [{0x1, 0x4, "07d3"}, {0x5, 0xc, "84b8f857e978d2cfe379"}, {0x2, 0xc, "d2a1809d315dbd69dba5"}, {0x6, 0x12, "e9d230e0cfe3b54418b5936d29697d88"}]}, @end, @noop, @timestamp={0x44, 0x2c, 0x5, 0x0, 0x4, [0x3, 0x1, 0x8, 0x466, 0x7ff, 0x3ff, 0xfffeffff, 0x0, 0x3, 0x2]}, @cipso={0x86, 0x58, 0x3, [{0x1, 0x12, "ff4236b37c3c57f8167577d615917cac"}, {0x1, 0x11, "00e2c1c73a0ca4afb25306bb0c380b"}, {0x2, 0x12, "19a9f9eebfe07702acda3ff0e38241ae"}, {0x6, 0x9, "0888982e78d0cd"}, {0x2, 0x4, "0dd4"}, {0x7, 0x10, "8ee62b5fd2c2ce1199b739faaa61"}]}, @end]}}}}}) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001200), 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x1, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x10, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x1f, 0x13, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000008b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0xa, 0x2e, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xb11c}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @map_fd={0x18, 0x6, 0x1, 0x0, r6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6dc5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @exit, @ldst={0x0, 0x3, 0x3, 0x9, 0x8, 0x6d, 0xffffffffffffffff}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb86}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f40)='syzkaller\x00', 0x5, 0xb2, &(0x7f0000000f80)=""/178, 0x41000, 0x40, '\x00', r9, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000011c0)={0x2, 0xf, 0xf9, 0x9}, 0x10, 0xffffffffffffffff, r10, 0x1, &(0x7f0000001480)=[r12, r6, r6, r0, r6, r6, r6, r6, r6], &(0x7f00000014c0)=[{0x5, 0x1, 0x7, 0x8}], 0x10, 0xff}, 0x94) (rerun: 64) 11m7.015501804s ago: executing program 4 (id=705): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11m6.76867763s ago: executing program 4 (id=710): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)="9a835d3f1d04f5b4ee016deffaabd0ed6afe8a0942fb56762e2fd9d3a253c8c378500f49b15a812535d8cd06c8b792be1030498a503056150109b49af50c5feb584ea39f381adbdeb4bd6dda60c6c97532176a9b3987896985ecef5f26", &(0x7f00000001c0)="1d87906696aa847c62ac371f1c40a51f83f62a2d52a8624c6323768f54123e1778e56d78b22a8827e944b38610ada142baf674cd379f1340054bce6db3a55b222d8f23276dcc106243d3b9f25a0c8d3c439a6caadd14d6b16fec5c3d3bc3cdd7db", 0x8001fc, r2}, 0x38) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x14, 0x211, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000440)={r4, &(0x7f0000000340)='filter\x00', 0x208000, &(0x7f0000000380)={@align=0xff2c, {0x3, 0x9, 0x3ff, 0xc73b}}, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x6}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000002c0)={0xffff, 0x2}, 0x4) getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x1d0, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 10m51.596395979s ago: executing program 32 (id=710): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)="9a835d3f1d04f5b4ee016deffaabd0ed6afe8a0942fb56762e2fd9d3a253c8c378500f49b15a812535d8cd06c8b792be1030498a503056150109b49af50c5feb584ea39f381adbdeb4bd6dda60c6c97532176a9b3987896985ecef5f26", &(0x7f00000001c0)="1d87906696aa847c62ac371f1c40a51f83f62a2d52a8624c6323768f54123e1778e56d78b22a8827e944b38610ada142baf674cd379f1340054bce6db3a55b222d8f23276dcc106243d3b9f25a0c8d3c439a6caadd14d6b16fec5c3d3bc3cdd7db", 0x8001fc, r2}, 0x38) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x14, 0x211, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000440)={r4, &(0x7f0000000340)='filter\x00', 0x208000, &(0x7f0000000380)={@align=0xff2c, {0x3, 0x9, 0x3ff, 0xc73b}}, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x6}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000002c0)={0xffff, 0x2}, 0x4) getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x1d0, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 7m39.586417696s ago: executing program 1 (id=2267): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0xc201}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180300000100000000000000000000008500000022000000181102000000000000000000002000008004000000001900bfa100000000000007010000f8ffffffb702000008000000b70300000000008500000900"/96], &(0x7f0000000e80)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000f40)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@deltclass={0x58, 0x29, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfff2, 0xd}, {0xf}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8}}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@deltclass={0x58, 0x29, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfff2, 0xd}, {0xf}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8}}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x58}}, 0x0) getsockname$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) (async) getsockname$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c00000010000104000200000001000000000000", @ANYRES32=r3, @ANYBLOB="000100006c3000001c0012800b000100697036746e6c00000c00028006000f0003eee065"], 0x3c}}, 0xeb64d656001f6f32) (async) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c00000010000104000200000001000000000000", @ANYRES32=r3, @ANYBLOB="000100006c3000001c0012800b000100697036746e6c00000c00028006000f0003eee065"], 0x3c}}, 0xeb64d656001f6f32) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b40)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x4044004) socket$unix(0x1, 0x3, 0x0) unshare(0x60000600) (async) unshare(0x60000600) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 7m34.746023711s ago: executing program 1 (id=2296): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x6, 0x4) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000010) bind$packet(r3, &(0x7f0000000700)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000740)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={r7, 0xa0, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x1000, @mcast2, 0x10000}, @in6={0xa, 0x4e23, 0x4, @remote, 0x5}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x6b5, @remote, 0x7}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x54, @private1, 0x1}]}, &(0x7f0000000440)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x12) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x2010) 7m33.438660594s ago: executing program 1 (id=2304): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) write(r0, &(0x7f0000000000)="fdd96e4e6563742031313a61613a61613a615b00323b9b012c78bfd94b6363bacc083960f78de8d71f303411229289ae99e70f410f30b762effb1e5529c8b97ca444bf0cf0b71c77b7e6abbbf07c06e9caea0000000000000000000000000000000000004c0f5834ea745b04907ef63e49165f2f8403fca6ddce786fe56ebf2e62d3d0c70ff2b1774b601fc13ff9abd0", 0x90) 7m33.182560131s ago: executing program 1 (id=2307): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f0000000240)="060000007f00000100500000000000006d6800"/44, 0x2c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='X'], 0x6) (async) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='X'], 0x6) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000400)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x7a05, 0x1700) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000500)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000500)=0x20) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)="93d90400000300", 0xfffffffffffffd75}, {0x0}], 0x2) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000640)={0x8, 0x400, 0x9, 0x2, 0x2}) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000640)={0x8, 0x400, 0x9, 0x2, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002061b02ffffffffffffffef000000000400078005000100060000000d000300686173683a6e657400000000050004107acc225609000200730300000000090014004388001e18a606ac28abc30069702c70b7a615caec235cee506cb6e358dc1e0bbe1100b4680711fcc2bb441353d6840e82545539cbfea4f9822702b7a974c003dfe17facabd1c1e7b8ca3a5f9a6b95c22af22fd26e1a0a5bc4551545e805ee9d4f785d473761f093f79b6624a9ca220cda1940b0684583c2bee2984d3908892d8d8f73dca92a12c0a17af28de7c3fb4991cd1cc28b2d21619b2426cf11f93e623788841df8"], 0x58}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800), 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800), 0xc) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c00709210000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c0001800800030001000000"], 0x3c}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000900)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00ff0000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000e9ffffffffffffff0000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001900)={'veth0_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001900)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10000000}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) 7m32.53509099s ago: executing program 1 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000fb000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e88500000070000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa208000000000007020000f8ffffffb73d147d93000000b7040000005a88e13fcfd8491d6758b5bfe9b110a9acb370080c973926125f22af4af5f5a2cc7ae067f993043d0900000006844c682dc290a4eb0a"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={0x14, 0x0, 0x1, 0x70bd26, 0x2ddfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x44084) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x80000000}}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268e9", 0x6}], 0x2}, 0x40) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7m31.805152208s ago: executing program 1 (id=2316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x1) (async) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x1) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x4000040) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x80800) ioctl$sock_ifreq(r3, 0x8925, &(0x7f0000000400)={'syzkaller0\x00', @ifru_mtu=0x400}) (async) ioctl$sock_ifreq(r3, 0x8925, &(0x7f0000000400)={'syzkaller0\x00', @ifru_mtu=0x400}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x140a, 0x100, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x50}}, 0x4004000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r3, &(0x7f00000007c0)={&(0x7f0000000580)=@llc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/121, 0x79}], 0x2}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) bind(r3, &(0x7f0000000840)=@nfc={0x27, r6, 0xffffffffffffffff, 0x6}, 0x80) (async) bind(r3, &(0x7f0000000840)=@nfc={0x27, r6, 0xffffffffffffffff, 0x6}, 0x80) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@arena={0x21, 0x0, 0x0, 0x25, 0x400, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@arena={0x21, 0x0, 0x0, 0x25, 0x400, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={0x0, @initdev, @loopback}, &(0x7f0000000b40)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={0x0, @initdev, @loopback}, &(0x7f0000000b40)=0xc) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x18, r5}, 0x18) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x18, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x1c, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0xa, 0x5, 0x6, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000a80)='syzkaller\x00', 0x800, 0x10, &(0x7f0000000ac0)=""/16, 0x40f00, 0x10, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000bc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x9, 0x40, 0xfffffffb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[r11, r12, r13], &(0x7f0000000e00)=[{0x5, 0x1, 0x7, 0x8}], 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x1c, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0xa, 0x5, 0x6, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000a80)='syzkaller\x00', 0x800, 0x10, &(0x7f0000000ac0)=""/16, 0x40f00, 0x10, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000bc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x9, 0x40, 0xfffffffb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[r11, r12, r13], &(0x7f0000000e00)=[{0x5, 0x1, 0x7, 0x8}], 0x10, 0x4}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) (async) r14 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000f00)={0x1}, &(0x7f0000000f40)=0x8) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r14, 0x84, 0x7d, &(0x7f0000000f80)={r15, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f0000000fc0)={r15, 0x7}, &(0x7f0000001000)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r14, 0x84, 0x7c, &(0x7f0000001040)={r16, 0x6, 0x3ff}, &(0x7f0000001080)=0x8) write$nci(0xffffffffffffffff, &(0x7f00000010c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x22, {0x1, 0x7, 0x6, 0x1}}, 0x7) 7m16.279727683s ago: executing program 33 (id=2316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x1) (async) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x1) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x4000040) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x80800) ioctl$sock_ifreq(r3, 0x8925, &(0x7f0000000400)={'syzkaller0\x00', @ifru_mtu=0x400}) (async) ioctl$sock_ifreq(r3, 0x8925, &(0x7f0000000400)={'syzkaller0\x00', @ifru_mtu=0x400}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x140a, 0x100, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x50}}, 0x4004000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r3, &(0x7f00000007c0)={&(0x7f0000000580)=@llc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/121, 0x79}], 0x2}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) bind(r3, &(0x7f0000000840)=@nfc={0x27, r6, 0xffffffffffffffff, 0x6}, 0x80) (async) bind(r3, &(0x7f0000000840)=@nfc={0x27, r6, 0xffffffffffffffff, 0x6}, 0x80) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@arena={0x21, 0x0, 0x0, 0x25, 0x400, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@arena={0x21, 0x0, 0x0, 0x25, 0x400, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={0x0, @initdev, @loopback}, &(0x7f0000000b40)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={0x0, @initdev, @loopback}, &(0x7f0000000b40)=0xc) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x18, r5}, 0x18) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x18, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x1c, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0xa, 0x5, 0x6, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000a80)='syzkaller\x00', 0x800, 0x10, &(0x7f0000000ac0)=""/16, 0x40f00, 0x10, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000bc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x9, 0x40, 0xfffffffb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[r11, r12, r13], &(0x7f0000000e00)=[{0x5, 0x1, 0x7, 0x8}], 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x1c, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0xa, 0x5, 0x6, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000a80)='syzkaller\x00', 0x800, 0x10, &(0x7f0000000ac0)=""/16, 0x40f00, 0x10, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000bc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x9, 0x40, 0xfffffffb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[r11, r12, r13], &(0x7f0000000e00)=[{0x5, 0x1, 0x7, 0x8}], 0x10, 0x4}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) (async) r14 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000f00)={0x1}, &(0x7f0000000f40)=0x8) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r14, 0x84, 0x7d, &(0x7f0000000f80)={r15, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f0000000fc0)={r15, 0x7}, &(0x7f0000001000)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r14, 0x84, 0x7c, &(0x7f0000001040)={r16, 0x6, 0x3ff}, &(0x7f0000001080)=0x8) write$nci(0xffffffffffffffff, &(0x7f00000010c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x22, {0x1, 0x7, 0x6, 0x1}}, 0x7) 5m39.810703164s ago: executing program 0 (id=2986): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000840}, 0x800) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xc}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f00000004c0)=0x4, 0x4) setsockopt$packet_int(r8, 0x107, 0x10, &(0x7f0000000500)=0x1, 0x4) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}}, 0x80800) (async) syz_emit_ethernet(0xc8, &(0x7f0000000640)={@random="e7bc893251fb", @empty, @void, {@mpls_uc={0x8847, {[], @generic="d244990b345fb0aeefa85975e2c0d8d167ad963a69ef04b295b38199b0ab61a75a5e31a63e787b979c454f51a0c75dd5b09f78855237da2208d17525009b32431ae44af40613ecc5c0fe52ccb31a4a12efc5d62877fc141de790e7837b5120face7191fa9f6340d949fb77ef1fb17ed823e7497b80b4f0ea8278a010ce1129953e38d99e7f60aee0092d4c691ad7f174cb96c40290ecfcaa0278196a424670d0701325963ef692c37037f426e31064e44edc681af03a7a4c8957"}}}}, &(0x7f0000000740)={0x0, 0x2, [0x920, 0xd29, 0xcf4, 0xa27]}) (async) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_DURATION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}}, 0x20000000) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bind(r11, &(0x7f0000000a40)=@in={0x2, 0x4e20, @multicast1}, 0x80) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000ac0)) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000b00)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, @rc={0x1f, @any, 0x65}, @l2={0x1f, 0x95, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x4}) (async) close(r8) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r12, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r13, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) 5m39.318908986s ago: executing program 0 (id=2988): unshare(0x20000400) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f00000003c0)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) syz_emit_ethernet(0xfffffffffffffe24, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004700003000000000000690780a010102ac1414aa07070476bc4b4c0000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00040a0b1118ae3ee77532240055c742ed3ee28f7800ef671114fff9edb20c0000e6dbe3188b41e1d8b7f626bfa2e45d665bd85f"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="91104d0000000000", @ANYRESDEC=r0, @ANYRES32, @ANYRESHEX, @ANYRESDEC=r1, @ANYRESDEC=r2, @ANYRES8=r3], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x1e) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000001a006da900000000000000001c20e901f900ff00002d0000"], 0x1c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000800)={'syzkaller0\x00', 0xca58c30f81b6079f}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000840)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000880)={0x2, 0x4e21, @local}, 0x10) connect$inet(r8, &(0x7f00000008c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff}, {0xc, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400}, 0x24000000) sendto$inet(r8, &(0x7f0000000a00)="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", 0x6fc50de5, 0x92, 0x0, 0x0) 5m38.074400097s ago: executing program 0 (id=2992): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="5566fb8aa6", 0x5}, {&(0x7f0000000140)="ff324d434ec75697a84d04", 0xb}, {&(0x7f00000004c0)="d8b615aacdab519d63944f927b201c84b828a3d192acae7969505ba524984372bda8494ded78bcbf1483a8e2e3d4dcacffaa21caf2850d2a170a6a3775b2ef97173848f90f761c4ed9c7e2c775d9ca44b252fd0b9fcb0fe6b4a923ee33f480626f56e0b345882f48b309e3902eec3c4f7ef964ff6dc85466f97c2863bcd42092fd738614832e92d339f6351c87cb292a896bdad41c1cec9e5b5a74d74d042b8df87aae81900dd25ce501e803c066fdf03951c29851ce6bac08c78ea96db84fb80361667bfbd73ad63fa1f963135f6e352322db79a1d4ff0db99f95fdc9a83bb1e2434def49948a6b246c53c0ab5d7f3e5cdcc79faee30788d87cfa0a3881fd679d146b522630cad2840fdf1e05b035013c0a1d96e91daaafe4e354b20f00b0e48a9c1f4f0a661343153d503d080e16db3f4079c83e1f47607dab39794be6310df69f459dadab84e447828f0a3804a8d9018dc8e73ff9b7da902619e99a47d880081a9196f4b5fb52798d5c6a36db0d5383891781b449fc36ab7bdd03be04d542532ab4b3c0dced15b8d6fb44efe4a96a868ed3eb86a7718ccd5226acf4ae1a5f8bff145388959780290f3c1889a356f9a87f3777e420c816782141de4e7ec22b004e8a7388c5a9b2e34067151f0ad211db47f794af59abcd6a9afdf50599905188c861dbe2d4a8e6139cb46f56e267be93d081538f4a681e68f28942f96922f3995d2eddfaed236eb48cf2971021491ac75a71c18f33e1191694ea71ba2355c10ae93f970bbb42e6377eeb48517d7529f8786b93c24f25a75ce1b4ca6f20ccedaa8b2310d8a272fb0190ab6cc78f34f8648d4893825391593ac18387e57d9580901638969391971b6ee0b99409b6cc91a9abeb2443a32f64a3d5328102794dcafbccd605fa700911ba545dc0d79bb0d5ec74f5a639cd07041f220e71f6df7bc1a3ce87e361a2f64a54af199b86bef3cdb2890ab41e987b4b2a4dfe6f0d0905c54f88337dff14697c205cb270ca8acd4025644df83cdc2ba22f0ca323e93f9dd085615c7ac2422de5c49fb684c12ec31abd629c7ef8ce73044088740273827060394252116161a74d1f50f64aa9f6595b455bf67fab65992c3543355f4f60d94d7c2ed66c99c90921ba10f7fed1285879e3e662e06c0bc9fc86cc7bb4f08c2e576c4568b4274dbb4913b0a15f27ee5f29c9712ad1f3e02b4b77fc9be3eec4f6d20dd0e06fc34d2616681adf89381a7fd28aadad22b33d407cffc392c894ba9b572dc8fbf58a56e744a2f3123b9019558c0b7595152542d086bdf4cea9a609a9a6753211a251bdb14e87af2d47769eb87d4f6bb5c7dd197d86716d98b4e35f3ffce74420ff691aebf5d986b7344b1a5d884f670ae7c7fb4b14f8fd5f71749fcc206bda170dd42af2e4792b50930893aa235e594de22133cefa37ea4cab33db8e4f19d1b52513904f9c147da1fda5ca7c18e070b9363229781f6f612e44c86b2259aad0cf7e4454177d6c9d58546a2272b59573c285c6449774bcb706fd97617ae14145c144b515f1dc983b3cd297584bc227ee98f7fe906b243c9cf29ac94ae2f886f74f24bf164edfd86994ab0438dfbe2c7f916fa2a5663caa538c9aac8edc89bbca45b8ddf62478faea0be4460ae493cf995cbd45b0fd432657be825b5c0700172f856db7983dd21668609538db010d34bdc594f6e317ec0f0a3712c40c1f4894870149587434ec662b02a26bb0f0e8a7d26863a2997f8eca0c08baae98e55955256d0558d00d056956bd360c2575b895608150dbdb2e1207879c467284544ef1e53caf85187e23aa5186d36927a841d92486d4be8fdc7aea12edae07aa90cca113eeb84a9ba6997b22d2f8ce96ac48bef8c80c5b70f7478910c1429408f3f716f2ed84c7f42a5b13733cc72b5b7c3744dec3ba13281932650c3db05407b8840479fffa59a5de8b7432e79c9123a628537c77fa8a584284220dc9e30cde855bec02eb2a39acc7204da2515dc20407bf6f1dabb2c3a6f2aa45769efc70756150d9374d830a01f910f3c7b6e670ba85d1714101784de2e4b5ceb14c4e5a2fad0fde142d89e11cfa7f07ef936f2c43deaaf641aab58699f133aff9f3965d06071eb1a2c8f3b989de2182dd4798d30424f0ceea3b92472856cbf937ff643fb6cceaeba703d30e8c2ab6c134ce12e52b02a3baa7ac19c8039eef9143056a32a8239085f923efefa985b501a14638c96433df33abfbb5b496b09e96da9347989ab61722d6069d364d557172d9a4c9d53f2b515164d50fb896ef6246601e6fa2baaa9609fa03d74a63c52db0060ae27ad11f99f5beb03224d2c54deda376af08b37d51f823fbbc4fa2d6af217b6234067e931bcfae88b26fd02083d8539fe8bf3ce64805316261c7b5838be582483554bc37893e722f4b13752536ade661803053b30cc9c166c08f9cc2bc1f625d508739edda8e6f84cf2e4858a4d3938940fd08cc99743bfa88acaa12ec1ebbde3aa1419ad7b70d5f0ea3b6cd0478405fa3f4db043c1f5458f22b85fb6d335acc384041c300a8b03bf9b625793ac1f846931e0473972bbbf0058efdef051a93e5701b2391ca63ee5cc6896e384fc1095bf5d1aebe8905a1b05386c29b1af55411a06c0d534c78a327e179655f5cf90f20164e298d1d378d135b2736b999b3cd3488974bfb83ba8fcfc26627ddb0409db5118d0a9dc1ace377fbceca6b4170bf9b4446b4fb3b49c12f562c47e95fc0e2bdf73cf976aa0dbc334fa79a2c34f6141acb433b742a26c8eb7589e1e7e89822329d3d0d403c023e6c89f1f1009a689483f2a3d77b068840bcf119d220e5cae946692e0c95d9dd7a9abd7cf569a64724f04c4504c83cb720edbe2f9f545762bcb74eaf0291730f04916a109dc6c1cb2f26d05e79ac757e21cda5d50f3ac91e7fa92667ee51a115d53a1d15b0a5802a556773d6fcae6ad9d671779f80319fff0e2a43772341436d2ce2154f6790ba2d09a12ff9f69f8d734034f87cdc8d9551f4b9515638f83ef37b76356ea31b2191c821054150cd47c5e4a7db5ec6264adcb9376631badc817dde7fbe6becdcde5187d67f76c0ead16ca8992c917e69021c030634dffdcc1e11505f65a482b85b3964ac9236684bc70ee3cbebe596fc72951583bd85eed27d242aa036d84f0f98efa305ac6f5da635fbb370905cb73fee3ddf448ba62029742984fc0b93ef8241602d1d4de8c2286487652d0a8d9c7941f9e60db0882b4dcd6d1981b573b22a3ad9abf20c0be78bd0e63f50a5df36d474a72db0572311857637e4e15d4198cc5a2c7bd0306054c8df1199a568656e557913b495657ba39623a6d35e1e21b16d4f5bdd49cb8412faf950cd3b86cc1d6c09fb8cad950afd32bfe1cc335f7d774ac1ef1e2df9931a38a0ef2f752c5be7dddc19d75b400ab5e7f803b5e936d94ecb41ddc22a538ac3853f70d9a4082da33b9ee7ad7ca72d344aef721dfc1fee2d985e562da37242324944c13831d8ca03deb16a597afabbc3858255213ef3229f30af40c99e1b0981728d0cf3ed075eb6ff4f35a4b592b70c1e531972ae3e5bc7f8b0add9248a40a25c733559da29537c4e42231d245a475e6c3621bab4d4a4bad1705514b151ecfc567496598f0b965b9bc35d0c492f194b238e0e52c94297e0d03c082a20532f9e180eb6f3d5fa2f627d974373e5ff3cf52da659ac56215ecf149c9d0400db6a44df4d4494918dbd7609cf0c132cf8cd16850afde2374b2393de3739215c0c0fb773b0e0af72096fb8416841994494e7e4bc4e75294c8add01680731814b313db920c0ce742d89b70aeecb4f0706a276cb06f26c52eff370bd5e68a888dd759dccc2bd30a61679fc7cc3ea530f7ffaaa3a713cc0376ea07be62470798c5fbc4a890b4a67fdfd9cb948ea0d697830cfd5e503ef6b8cb258f33b9451d60c232b53a1dd8bfbb29e40bdc4c914b3", 0xaf9}], 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') recvfrom$inet(r1, 0x0, 0x0, 0x43, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x0, 0x1000003, 0x30, r4, 0x80000000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) listen(0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@map=r3, 0x35, 0x0, 0x80000006, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000200)}, 0x40) sendmsg$inet(r6, &(0x7f0000001300)={&(0x7f0000001340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="726485b5eba0", 0x6}], 0x1}, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000016c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x88, 0x1403, 0x4, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001700)=ANY=[@ANYRES64=r2, @ANYRES16=r8, @ANYRES8=0x0], 0x70}}, 0x0) bind$netlink(r5, &(0x7f0000002280)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r9, &(0x7f00000022c0)={0xa, 0x0, 0x3, @loopback}, 0x1c) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r10, &(0x7f0000000380)=[{{&(0x7f0000000400)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001080)='e', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001140)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r10, 0x1) 5m37.948586498s ago: executing program 0 (id=2993): sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004a14328ef43f827bfc73c96152628521531ec14567d027bca6657819950684546030ed334dd62a1daae57fa67c05d9562383e6a36121f3026dddb0394f502aeca628c311c8e5d35ab348259993bfc6f446a0a7d3d943e0e17b1179f211d395fd9ebb87a2460c46be888e6f21b09b22dd3fbfac"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000380)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000440)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @empty}}}], 0x20}}], 0x1, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r6, {0x5, 0xc}, {0x1, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000340)=0x4, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 5m37.086178456s ago: executing program 0 (id=2998): socket$inet_sctp(0x2, 0x4, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRESOCT=r0, @ANYBLOB="0000000000400000160012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2001c004) 5m36.465284211s ago: executing program 0 (id=3000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a4, r1, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xc6, 0x5b, "c90a629b7046367b1c052cd797c430fff6ef8143574a80a3301e7870e0f50cb7c774978cbb45beaab4f7eebe7eb7a79c0c6445f20db1e11d053a0ad103159c6469584b21f9b78071f4a9f3ce5c0485a0f7c435b008cbbb48ab4998e74659b5ac51b3c396aac9e2e0816bc48adf78c23edd72f123ee22b1a00d0ca211f04dba8df6524ff35a2c5f95e713c498432f021f5efcba3703ddb27e4aad55676ba5a0f8d5d023c805ecbb48940bf7229c3fcca5246cfe8a8ef6cb79e90fbb8579d5a30f284d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x3f, 0x5b, "c62afd1ecf5580f874b8dfe59cc0c03b15b863293965d5cf4d027cfde883c07a18db7975802490f9f32c55324e057b10293c893b1bce21d6984601"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8001}, @NL80211_ATTR_FRAME_MATCH={0x5d, 0x5b, "833e8987d09c3ece634d02eb4b82803db7d3016efb0b0914a4ab2ac666db77e093fdc1030f792822f5057d1ff30ea030124545a1e672925f49e7f3fd9451eaee1d8902c6804ed3bc43574985b2f1be3fbcc8c9c6312e11580f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8bca}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x12a}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffaf3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8d4}, 0x850) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x118, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5dcf}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xcf}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x400) write$bt_hci(0xffffffffffffffff, &(0x7f0000000680)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x2}}}, 0x5) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000007c0)={r2, &(0x7f00000006c0)='wrr\x00', 0x400, &(0x7f0000000700)={@align=0x3, {0x7, 0x48d, 0x8, 0xc}}, 0x4, &(0x7f0000000740), &(0x7f0000000780)=0x6}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@arena={0x21, 0x0, 0x0, 0x15, 0x40400, r4, 0x8, '\x00', 0x0, r5, 0x4, 0x1}, 0x50) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x11c, r6, 0x10, 0x70bd2b, 0x4, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb32b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6e1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x11c}}, 0x80) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20040000) recvfrom$l2tp6(r4, &(0x7f0000000c00)=""/162, 0xa2, 0x20, &(0x7f0000000cc0), 0x20) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r7, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000e00)=[{}], 0x8, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x210, 0x210, 0xd0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000001040), {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'team_slave_1\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x67, 0x9, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "1356", 0x1}}, @common=@hbh={{0x48}, {0x8, 0x2, 0x1, [0xd, 0x0, 0x7, 0x6, 0x4, 0x1000, 0x2, 0x4, 0x1ff, 0x2, 0xff, 0x3, 0x40, 0x9, 0x6, 0x4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x3, 0x1, [0x2, 0xa, 0x9, 0x1, 0x1, 0x81, 0x6, 0x10, 0x3, 0x8000, 0xc740, 0x1, 0x1, 0x6, 0x8, 0xfffe], 0xc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x22, "04b82111496a964e9ae773f7029072de3460b5ec833e95d2d066466394a0"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) accept$phonet_pipe(r8, 0x0, &(0x7f0000001500)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000001540)) syz_genetlink_get_family_id$batadv(&(0x7f0000001580), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x70, r6, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5b, 0xa8, @random="151f4b690be747e4b75bcd179eb08c952ac36f0f24569cd274e611b1529bb28c2f1659e2fed58c89b6f17d4f5963502ea4434cf182c0e2893e83aa70f45328a50f513b05981f868ce056a41b9b44fa18939f1748a62da8"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040401) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_MARK_MASK={0x8}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x8f0, 0x2]}, @CTA_LABELS_MASK={0x14, 0x17, [0x4, 0xb5, 0x8, 0x5]}]}, 0x44}, 0x1, 0x0, 0x0, 0x35}, 0x4050) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x3c, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8082}, 0xc8c4) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r13, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a00)="02da564adfcac3dd7f69313a6e4b0f19", 0x10}, {&(0x7f0000001a40)="a9af770a76bb550480adb301cb7e746e1bec2265", 0x14}, {&(0x7f0000001a80)="f534eea3e7357ea511cae909c648b0582caa8a97e2ca6d79298604747787e17a5698586b62b8a82cfe683e27d2886d3d03f8b364826ce9dea9bb07d83c883256e59d9221517804b686fd4a002425341b8e4624cab44f113569b0b94fb036eb89cd601c94213893403a65ff71c2525c1c8bd3689fd73cf714e0ae52", 0x7b}, {&(0x7f0000001b00)="051fb2068ff0c4b7a9641fccee2c8951cb20d02cf53c9bf0efb361eec57e23cebbc391b022c76e3196198dc5c2fe0b5ead7c1c320c8b2a3b8bfabfa52ea92f1f8694825d697e75f53aaa079e7696377a", 0x50}], 0x4, &(0x7f0000001bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x78}, 0x880) 5m21.158520209s ago: executing program 34 (id=3000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a4, r1, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xc6, 0x5b, "c90a629b7046367b1c052cd797c430fff6ef8143574a80a3301e7870e0f50cb7c774978cbb45beaab4f7eebe7eb7a79c0c6445f20db1e11d053a0ad103159c6469584b21f9b78071f4a9f3ce5c0485a0f7c435b008cbbb48ab4998e74659b5ac51b3c396aac9e2e0816bc48adf78c23edd72f123ee22b1a00d0ca211f04dba8df6524ff35a2c5f95e713c498432f021f5efcba3703ddb27e4aad55676ba5a0f8d5d023c805ecbb48940bf7229c3fcca5246cfe8a8ef6cb79e90fbb8579d5a30f284d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x3f, 0x5b, "c62afd1ecf5580f874b8dfe59cc0c03b15b863293965d5cf4d027cfde883c07a18db7975802490f9f32c55324e057b10293c893b1bce21d6984601"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8001}, @NL80211_ATTR_FRAME_MATCH={0x5d, 0x5b, "833e8987d09c3ece634d02eb4b82803db7d3016efb0b0914a4ab2ac666db77e093fdc1030f792822f5057d1ff30ea030124545a1e672925f49e7f3fd9451eaee1d8902c6804ed3bc43574985b2f1be3fbcc8c9c6312e11580f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8bca}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x12a}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffaf3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8d4}, 0x850) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x118, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5dcf}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xcf}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x400) write$bt_hci(0xffffffffffffffff, &(0x7f0000000680)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x2}}}, 0x5) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000007c0)={r2, &(0x7f00000006c0)='wrr\x00', 0x400, &(0x7f0000000700)={@align=0x3, {0x7, 0x48d, 0x8, 0xc}}, 0x4, &(0x7f0000000740), &(0x7f0000000780)=0x6}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@arena={0x21, 0x0, 0x0, 0x15, 0x40400, r4, 0x8, '\x00', 0x0, r5, 0x4, 0x1}, 0x50) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x11c, r6, 0x10, 0x70bd2b, 0x4, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb32b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6e1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x11c}}, 0x80) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20040000) recvfrom$l2tp6(r4, &(0x7f0000000c00)=""/162, 0xa2, 0x20, &(0x7f0000000cc0), 0x20) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r7, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000e00)=[{}], 0x8, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x210, 0x210, 0xd0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000001040), {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'team_slave_1\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x67, 0x9, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "1356", 0x1}}, @common=@hbh={{0x48}, {0x8, 0x2, 0x1, [0xd, 0x0, 0x7, 0x6, 0x4, 0x1000, 0x2, 0x4, 0x1ff, 0x2, 0xff, 0x3, 0x40, 0x9, 0x6, 0x4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x3, 0x1, [0x2, 0xa, 0x9, 0x1, 0x1, 0x81, 0x6, 0x10, 0x3, 0x8000, 0xc740, 0x1, 0x1, 0x6, 0x8, 0xfffe], 0xc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x22, "04b82111496a964e9ae773f7029072de3460b5ec833e95d2d066466394a0"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) accept$phonet_pipe(r8, 0x0, &(0x7f0000001500)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000001540)) syz_genetlink_get_family_id$batadv(&(0x7f0000001580), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x70, r6, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5b, 0xa8, @random="151f4b690be747e4b75bcd179eb08c952ac36f0f24569cd274e611b1529bb28c2f1659e2fed58c89b6f17d4f5963502ea4434cf182c0e2893e83aa70f45328a50f513b05981f868ce056a41b9b44fa18939f1748a62da8"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040401) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_MARK_MASK={0x8}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x8f0, 0x2]}, @CTA_LABELS_MASK={0x14, 0x17, [0x4, 0xb5, 0x8, 0x5]}]}, 0x44}, 0x1, 0x0, 0x0, 0x35}, 0x4050) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x3c, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8082}, 0xc8c4) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r13, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a00)="02da564adfcac3dd7f69313a6e4b0f19", 0x10}, {&(0x7f0000001a40)="a9af770a76bb550480adb301cb7e746e1bec2265", 0x14}, {&(0x7f0000001a80)="f534eea3e7357ea511cae909c648b0582caa8a97e2ca6d79298604747787e17a5698586b62b8a82cfe683e27d2886d3d03f8b364826ce9dea9bb07d83c883256e59d9221517804b686fd4a002425341b8e4624cab44f113569b0b94fb036eb89cd601c94213893403a65ff71c2525c1c8bd3689fd73cf714e0ae52", 0x7b}, {&(0x7f0000001b00)="051fb2068ff0c4b7a9641fccee2c8951cb20d02cf53c9bf0efb361eec57e23cebbc391b022c76e3196198dc5c2fe0b5ead7c1c320c8b2a3b8bfabfa52ea92f1f8694825d697e75f53aaa079e7696377a", 0x50}], 0x4, &(0x7f0000001bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x78}, 0x880) 6.790702937s ago: executing program 2 (id=4984): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000007c0)=0x20000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'dummy0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000840)=0x4000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0x1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x1, 0x10001, 0x4d, @mcast2, @remote, 0x20, 0x8000, 0x2a5a, 0x3}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x4, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x7, 0x100}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00', 0x0}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000001b00)={0x6f4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x1bc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x4090}, 0x40810) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000010c30000000003fff800851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000540)=""/222, 0x0, 0x8}, 0x78) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 6.320557293s ago: executing program 5 (id=4987): socket$kcm(0x21, 0x2, 0x2) (async) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000180)={'macvlan1\x00', {0x2, 0x0, @multicast1}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000000)=0x283, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004a00ebffff1f1500fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x20000010) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/84, 0x54}, 0x6}], 0x2, 0x40002002, 0x0) 6.02709982s ago: executing program 2 (id=4993): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000180)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000030000000000001308000000002e302e1c"], 0x0, 0x2a, 0x0, 0x1}, 0x28) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@delqdisc={0x34, 0x25, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0xf, 0xfff3}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_drr={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.91387989s ago: executing program 5 (id=4994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x52) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010934b1dbeff02003f8301d6e700a6b2", @ANYRES32=0x0, @ANYBLOB="a5fdad88900a00002c0012800b00010062726964676500001c000280060009000180000005002d000100000006000600460e0000"], 0x4c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x52) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010934b1dbeff02003f8301d6e700a6b2", @ANYRES32=0x0, @ANYBLOB="a5fdad88900a00002c0012800b00010062726964676500001c000280060009000180000005002d000100000006000600460e0000"], 0x4c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async) 5.871425669s ago: executing program 7 (id=4995): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000280)=0x10) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000300)={r3, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x118, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'RAS\x00'}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x80, 0xc1fb, '\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180), 0x4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x20000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@remote, 0x1, 0x0, 0x60, 0x0, [{@multicast1}, {@remote}, {}, {@initdev}, {@private}, {@private}]}}) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x6b7, 0x0, @loopback}, 0x1c) 5.631160951s ago: executing program 5 (id=4998): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0, 0x33, 0x0, 0x1, 0x39d8}, 0x28) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000006112c0c06d0739000001000000000000e657ec82899f3879cf45ddb24ecff869fc92fa60dea3937f026e4335b7ae45ea192fd1c697cf97f42b9fc9"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x9}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0x3) (async) close(0x3) socket(0x8, 0x5, 0x3) close(0x3) (async) close(0x3) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000440)=0x7, 0x4) ioctl$FIONCLEX(r0, 0x5450) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x0) close(r3) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000080)=0x4b17f693) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000bdf04a6ebad26b4a0e86ca78e500f3000000000000181100008874f7043f5355f9a3c73cce41cb4e2907cc723e778704db1f7f143dfd324bf256c0ad7d1098cc5fcdc77574ae59f03a9ebe5cd83a149b3192c583f5e173fa1185c536cbade8a05ccbf435fd0e9624175322df5ce2622288e1cb648a2d9dcf11ec032d148b8b", @ANYRES32=r5, @ANYRESHEX=r1, @ANYBLOB="b4bf3162c4ff915ed068fbee681b5f8a7568b784b5450e3cd000d0e5fb35e20852ad7913092814a4fdcb5a521ae2fc58f59741b58d17eb8fea53833d847dfe856326b74c85b82a2ddda8f72f10635f31b980a5d7404c6b14be913fc96fa511b8", @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000009a8e7a3349c4a08a3700bfa200fbffffff0007020000f8ffffff00000000850000000300000095", @ANYRES8=r5, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0xa00000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a00010029bd700093c76aec0220200001"], 0x1c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x10, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000008c0)=r9, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000008c0)=r9, 0x4) sendmsg$unix(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) (async) sendmsg$unix(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) r10 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8918, &(0x7f0000000400)={r10}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8918, &(0x7f0000000400)={r10}) 5.559140262s ago: executing program 7 (id=4999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001880), 0x8, 0x10, &(0x7f00000018c0), 0x10}, 0x44) 5.235388371s ago: executing program 2 (id=5001): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x60074}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000180)={'dummy0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000100)={0x3, 0x4, 0x1a2, 0x1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.123099135s ago: executing program 7 (id=5003): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, 0x46, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="88"}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x6}, @NL802154_ATTR_SEC_ENABLED={0xfffffffffffffd87, 0x29, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 4.555790051s ago: executing program 6 (id=5004): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@union={0x8, 0x1, 0x0, 0x5, 0x1, 0x401, [{0x10, 0x1, 0x9}]}, @restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @func={0x6, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000080)=""/146, 0x4d, 0x92, 0x0, 0x5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x4, 0x8, 0x1814}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="760a00000020000081117000000000001800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="a52e0000ef826681c9f70c000000000400000000000000000000915530edf9d1428bcca28297346295e1d8ac55d09bdf041c4e56bd1d", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300003f0040008500000083000000bf0920000000000055090100000000007b0000000000000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0xa, 0x1011, &(0x7f0000001480)=""/4113, 0x41000, 0xd, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000480)=0x220490, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20000000) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)) 4.37759445s ago: executing program 7 (id=5005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc6c2ee60220dc2ef}], 0x1, 0x4044800) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}, @CTA_LABELS_MASK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 4.204434367s ago: executing program 2 (id=5006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a98000000060a010400000000000000000a0000010900020073797a32000000000900010073797a31000000006c00048024000180090001006d6574610000000014000280080002400000000208000140"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140a, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) 3.959003915s ago: executing program 5 (id=5008): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}, {{&(0x7f0000000100)=@nl, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000600)=""/77, 0x4d}, {&(0x7f0000000740)=""/140, 0x8c}, {&(0x7f0000000800)=""/91, 0x5b}, {&(0x7f0000000ac0)=""/68, 0x44}, {&(0x7f0000000900)=""/40, 0x28}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/194, 0xc2}, {&(0x7f0000001ec0)=""/183, 0xb7}], 0x9, &(0x7f0000000c80)=""/229, 0xe5}, 0x1}], 0x2, 0x10002, 0x0) 3.786541111s ago: executing program 6 (id=5010): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d657461000000001400028008000140000000010800024000000025"], 0xdc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc4a}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x1e00, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 3.736936223s ago: executing program 5 (id=5011): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000001f2, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8044) unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000740)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) (async) r3 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0xffffffffffffff07) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$pppl2tp(r4, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a809000008000b000000000006000100070000000c000f000500000000000000050005"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000780)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) (async, rerun: 64) sendmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r10}, 0x20) recvmsg$unix(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1}, 0x2000) (async) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000700)=0x4, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r12}, &(0x7f0000000480), &(0x7f00000004c0)=r9}, 0x22) (async, rerun: 64) shutdown(r9, 0x1) (async, rerun: 64) unshare(0x22020400) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r2) (rerun: 32) 3.462648062s ago: executing program 6 (id=5013): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) 3.461838005s ago: executing program 2 (id=5014): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xe, &(0x7f0000021680)=ANY=[@ANYBLOB="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"], &(0x7f0000021b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000021bc0)={0x2}, 0x8, 0x10, &(0x7f0000021c00), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000021c40)={r1, 0x702, 0x36, 0x0, &(0x7f0000021cc0)="e460334470b8d480eb20010086ddf80c39e7d34ed50ffb4def8474246fae5bd7fd7fc979c18b04cc038cf6825bc8379d1232f0bf7a53", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='tunl0\x00'}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='syzkaller\x00'}, 0x48) close(0x3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000021f00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bb000000000000000000e0ff00000000000000000000000000000000eada8d92cbe638723844f35b377f09864bb7fbcec2f1f853839a8be3ad8e934cf65e7b43a14cd1d63c5635a29062e240cd56e90c1b16ccdbd4304728a6389dc310408db3683435ee73ce3c6bda4e13872593ecbc453b9ffdfc266d897fdd4ab77e6f302d9b9b798d4bf6ca8e3e4454fe8a9583da42fa7f7c0a977fd8e1d7f179ecc060a1a9cdd6fa9a57939a4615a3457afee44dff4bdc05cb2f09031e0475a3b3d78644762d7939ef3a9bcef042b4b63a19cd533d83330cc72faeeb2139d66d6d76dfde9076fd68509d21c108a2b77e4cf4e8c988d767f176658f96e8c343f6d2a4f4bc9baa56e690c0b4444153e1b8f50e7e979d1477d35020b9b8867585eca93e68cfd47f9989b963d1fd431d2fa74ca23113b01fddb5cf217f862a48c88589380e6b92b95335"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000021d00)={0x7, 0x1c, &(0x7f0000021dc0)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000450902000003000085200000b9520300b7020000000000007b9af0ff00000000c509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000021ec0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x4, 0x7, &(0x7f0000001480)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000062000000b70000000000000095"], &(0x7f00000014c0)='GPL\x00', 0x2, 0x20000, &(0x7f0000001500)=""/131072, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000021500)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000021580)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000021680), &(0x7f00000216c0)}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002f001b0027bd7000619978f909206c65df070bdc42ef0000000004000000080018000dac0f1d"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000280)={0xf9}, 0x1) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000180)={'ip6gre0\x00'}) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) r9 = socket$inet(0x2, 0xa, 0x40) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002001000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00db270a01000000"], 0x48}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20044854) 3.213630398s ago: executing program 6 (id=5015): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000000)={{}, "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"}) (async, rerun: 64) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001100)={0xffffffffffffffff, &(0x7f0000001000)='%($\x00', 0x0, &(0x7f0000001040)={@_ha_fsid={[0x7ff, 0x100]}, {0xfe01, 0x2, 0x5, 0x7}}, 0x0, &(0x7f0000001080), &(0x7f00000010c0)=0xd6e}) (rerun: 64) r2 = openat$cgroup_ro(r1, &(0x7f0000001140)='net_prio.prioidx\x00', 0x0, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000001180)=[{{0x4, 0x1, 0x1}, {0x2, 0x1}}, {{0x2, 0x1}, {0x4, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{}, {0x3, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}], 0x30) (async, rerun: 64) r4 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000001200)={0x1d, r5}, 0x10) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000001240)=[0x0, 0x4]) (async, rerun: 64) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@fallback=r3, r2, 0x12, 0x10, 0x0, @void, @value=r6}, 0x20) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x12000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001380)={'ip6tnl0\x00', 0x1}) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000013c0)=[{{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4}}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x1, 0x1}, {0x3}}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4}, {0x4, 0x1, 0x0, 0x1}}, {{0x2, 0x1}, {0x4}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1}}], 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r1, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0], 0x0, 0xcb, &(0x7f00000014c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700)=r8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001780), r1) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x70, r10, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001900), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x128, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8e, 0xa8, @random="1310488f14f199908cb5081c864d0cf5d84bcc7743dda41d4eb3cc155912bbc36e997cd796c2173c8d5ab4d50b3322d2e4769f88f5584c5c63eb4a2c2a96e0fbcfca21dc423dc291e99c192da603d8d667fafcd476059bb3bbee01ee6c782f77c194592f2ebd6ad7806b8605fdfc0c9062a52484db3a7363bd09c583ab852e249ee185ec674e25772fa5"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) bind$tipc(r1, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), r2) (async) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000001b40)=0xffffffffffffffff, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001b80)='nv', 0x2) (async) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000001bc0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001c00)={0x2, [0x0, 0x0]}, &(0x7f0000001c40)=0xc) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r1, 0x84, 0x85, &(0x7f0000001c80)={r12, @in={{0x2, 0x4e20, @empty}}, 0xbb4e}, &(0x7f0000001d40)=0x90) 2.762377346s ago: executing program 7 (id=5017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000580)=0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000005c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000600)={0x1, [0x0]}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000680)={r1, 0x10, "1fe473a8cb3169d4d5b7259627b5cf5b"}, &(0x7f00000006c0)=0x18) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="03", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}, 0x4000001) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000180), 0x10) listen(r2, 0x5) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0xa, 0x3, 0xff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) accept4$unix(r2, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000a800800010001000000080002"], 0x4c}}, 0x0) (async) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="52799200a2516edf4beac184ba3211e18841dce43e1fe4c2d6b5238f1cc2144c7d7015fd034f9313fb5c347c53aa41e0acf4de333c91f51ee7a4feb85e91bb9408eb839bc934ee423f001ea33e151711d392815d3af3bf0f8148", @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 2.462501841s ago: executing program 6 (id=5019): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a0100140003006e657464657673696d3000000000000034001680300001802c000c801400010000f8ffff61080000040000008100000014000107010000007b0500000900000081000000140014"], 0x7c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabcbbbbbbbbbb86dd60cedd0000183aff0000000000000000d71fb34f6ef7d69d8e00000000287f9ebe55f66a37da298c0000ff020000"], 0x0) listen(r2, 0x0) (async) listen(r2, 0x0) socket(0x2, 0xa, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000640)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r3, &(0x7f0000000640)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) (async) r4 = accept(r2, 0x0, 0x0) close(0x3) (async) close(0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000680), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000006c0), 0x24) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000800)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, r5, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x804) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x34}]}, &(0x7f0000000200)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x34}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bind$unix(r7, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) 2.22646721s ago: executing program 3 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="983bc602915e25b01f0ab95a5624949151d875ca144879bea2b1b9e0de1b1a34395ceff9b7d74a59937b2fb5df88049a6802f76be460c004083918ca6747ce88d19b35aab3ce24683c0b5f3cfb64123abb222d3a1d36f30ff303b4f688ff3a71a496f2cb77423c32f698c02cff7665bf5649525f2d7d25fc7327d81bf3fd3946951d43ed7e6b8bcb603b6f7f38a3082a6a01c5d47a54ac", @ANYRES8=r0, @ANYRESDEC=r0], 0xe1c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6ce, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x0, 0x0, 0x9, 0x5, 0x7fffffff}, @alu={0x4, 0x0, 0x4, 0x5, 0xb, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x9, 0xa, 0xb, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xafe, 0xb8, &(0x7f0000000240)=""/184, 0x41000, 0x90, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x5, 0x3, 0xfffffffa}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[{0x4, 0x4, 0x9, 0x3}, {0x4, 0x5, 0x4, 0x8}, {0x5, 0x4, 0x7, 0xd}, {0x4, 0x3, 0x2, 0x4}, {0x4, 0x5, 0xa, 0xb}, {0x4, 0x4, 0xc, 0x8}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r1, r2, 0x25, 0x10, @void}, 0x10) 2.117044674s ago: executing program 3 (id=5021): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0xff92, &(0x7f0000000540)={&(0x7f00000006c0)={0x20, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x0, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0x0, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0x0, 0x3, 0xbf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x0, 0x9, 0x1}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0x7e}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0x53}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL, @NL80211_TID_CONFIG_ATTR_TIDS={0x0, 0x5, 0xaa}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0x16, 0xb, 0x5, 0x1, 0xc, 0xb, 0x30, 0x62, 0x30, 0x12, 0x2, 0x6, 0x1b, 0x35, 0x48, 0x30, 0x1b, 0x4, 0x18, 0x9, 0x2, 0x18, 0xb, 0x36, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x7f, 0xcc00, 0x7, 0x6, 0x200, 0x49a6, 0x6, 0x3]}}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x0, 0x2, [{0x5, 0x8}, {0x2, 0x6}, {0x1, 0x18}, {0x7, 0x8}, {0x3, 0x1}, {0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x4}, {0x7, 0x7}, {0x4, 0x9}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x7}, {0x3, 0x5}, {0x6, 0x9}, {}, {0x1, 0x8}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x6}, {0x5, 0x3}, {0x6}, {0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x5}, {0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x6, 0x9}, {0x7, 0x2}, {0x1}, {0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x0, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF, @NL80211_TXRATE_HE={0x0, 0x5, {[0x6, 0x3, 0x8, 0x835, 0xfff, 0x1, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x3, 0x3}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0xa}, {0x7, 0x9}, {0x6, 0x4}, {0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x7, 0x5}, {0x6, 0x2}, {}, {0x3}, {0x0, 0xa}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x3, 0x1}, {0x0, 0x5}, {0x2}, {0x3, 0x3}, {0x3, 0x8}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x9}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x5, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0xa}, {0x4, 0xa}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x2, 0x9}, {0x3}, {0x7, 0x3}, {0x2, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x5, 0x24, 0x60, 0x16, 0x18, 0xb, 0x12, 0x3, 0x3, 0x1, 0x2, 0x5, 0x1b, 0x2, 0x1, 0x18, 0x5, 0xc, 0xc, 0x1b, 0x12, 0x48, 0x36, 0x5, 0x1, 0x1b, 0x1b, 0x6, 0x24, 0x28, 0x2]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x7fff, 0x2, 0x4, 0x9, 0x1, 0x6ca, 0x0, 0xa]}}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0xb, 0xff8d, 0x6, 0x8000, 0x8, 0x6, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x2, 0x9}, {0x0, 0x3}, {0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x2, 0x2}, {0x3, 0xa}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0x5}, {0x4}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x9}]}]}, @NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x0, 0x2, [{0x7, 0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x7}, {0x1, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x6}, {0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x3, 0x6}, {0x7, 0x9}, {0x7}, {0x6, 0x7}, {0x7, 0x1}, {0x6, 0x9}, {0x4, 0xa}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_GI, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0x1b, 0x4e, 0x6c, 0x13, 0x6, 0xb, 0x12, 0x18, 0x1]}]}, @NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0x6, 0x7c, 0x12, 0x0, 0x3, 0x5, 0x6, 0x62, 0x16, 0x18, 0x12, 0xc, 0x4, 0x18, 0x2, 0x5, 0xf101dc2ae7797dc8, 0xc, 0x1b, 0x3a, 0x30, 0x3, 0xb, 0x6c, 0x3, 0x36, 0x18, 0x12]}, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x1}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x1, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x5}, {0x4, 0x5}, {0x7, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0xa}, {0x3, 0x4}, {0x6}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0xa}]}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF]}, @NL80211_BAND_60GHZ={0x0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x0, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x60, 0xb, 0x48, 0x5, 0x3, 0x5, 0x36, 0x6c, 0x16, 0xb, 0x36, 0x48, 0x4, 0xb, 0x36, 0x4, 0xc]}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x1, 0x4bbb, 0x1000, 0x6, 0x1, 0x8, 0x6, 0x7fff]}}, @NL80211_TXRATE_LEGACY]}, @NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x0, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x36, 0x30, 0x6, 0x1b, 0x16, 0x9, 0x2d, 0x30, 0x5, 0x1b, 0x1b, 0x3, 0x6c, 0xb, 0x29, 0x2, 0x4, 0x1, 0x30, 0x5, 0x48, 0x1b, 0x9, 0x2, 0x6f, 0x30, 0x0, 0x1b, 0x24, 0x6c, 0x1, 0x3]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x95e3, 0x10, 0xf77a, 0x3, 0x3, 0x3a3a, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x3, 0x2, 0x16, 0x3, 0x5, 0x6c, 0x4, 0x24, 0x48, 0x1, 0x6, 0x9, 0x6c, 0x6, 0x1, 0x2, 0xb, 0x4d, 0x18, 0xb, 0x30, 0x6, 0x30, 0x12, 0x48, 0xb, 0x2, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x6, 0x6, 0xfffb, 0x4, 0x2, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x0, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x0, 0x3, {[0x8, 0x1, 0xca86, 0x2, 0x3ff, 0xfffc, 0x81, 0x4]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x4, 0x4, 0xb, 0x40, 0x1, 0x0, 0x6, 0x6]}}, @NL80211_TXRATE_HE_LTF, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x9, 0x16, 0xc, 0x2, 0x24, 0x1b, 0xb, 0x3, 0x6c, 0x72, 0xc, 0x1, 0x5, 0x6]}]}, @NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x0, 0x3, {[0x4, 0x0, 0xd, 0x2, 0x3ff, 0x8, 0x7fff, 0x41d8]}}, @NL80211_TXRATE_HE_LTF, @NL80211_TXRATE_HE_GI={0x0, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF, @NL80211_TXRATE_HE_GI={0x0, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x0, 0x2, [{0x2, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {}, {0x5, 0x7}, {0x1, 0x2}, {0x4, 0x6}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x7, 0x8, 0x8, 0x3, 0xf800, 0x6, 0x400, 0x80]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x0, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE, @NL80211_TID_CONFIG_ATTR_TIDS={0x0, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_OVERRIDE, @NL80211_TID_CONFIG_ATTR_OVERRIDE]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x0, 0x5, {[0x7, 0xf9, 0x1, 0x5, 0x1, 0x7, 0x5, 0xfb1b]}}, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x0, 0x2, [{0x7, 0x2}, {}, {0x3}, {0x7, 0x1}, {0x2, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x7}, {0x7}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x15}, {0x2, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x2, 0x7}, {0x3, 0x5}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x7, 0x3}, {0x2, 0x9}, {0x5, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x1}, {0x6, 0x6}, {0x0, 0x7}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0x0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0xfff, 0x6, 0x3, 0x1, 0x7fff, 0x6, 0x10]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0xa109, 0x6, 0x3ff, 0x3ff, 0x3, 0x7f, 0x7fff, 0x3ff]}}, @NL80211_TXRATE_HE_LTF, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x1a, 0x36, 0x1b, 0x18, 0x9, 0x5, 0x18, 0x48, 0x48, 0xb, 0x45, 0x48, 0x12, 0xc, 0x24, 0xc]}, @NL80211_TXRATE_GI={0x0, 0x4, 0x1}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x0, 0xa}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x0, 0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x3, 0x4}, {0x2, 0x9}, {0x6, 0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x1}, {0x1, 0x6}, {0x5, 0x2}, {0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x9}, {0x2, 0xa}, {0x3, 0x9}, {0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x4}]}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x1, 0x100, 0x4, 0x2, 0x8, 0x4, 0x6, 0x5]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x49, 0x7f, 0x9, 0x9, 0x3, 0x40, 0x1, 0x3]}}, @NL80211_TXRATE_HE_LTF, @NL80211_TXRATE_GI]}, @NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x0, 0x5, {[0x1e35, 0xd259, 0x1000, 0xa2df, 0xe0, 0x7, 0x8001, 0x7]}}, @NL80211_TXRATE_HE_GI={0x0, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x36, 0x5, 0x60, 0x60, 0x1b, 0x1b, 0x24, 0x30, 0x1]}, @NL80211_TXRATE_GI, @NL80211_TXRATE_HT={0x0, 0x2, [{0x4}, {0x7, 0x8}, {0x2}, {0x3, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x3, 0x5}, {0x3, 0x9}, {0x7}, {0x6, 0x5}, {0x4, 0x1}, {0x2, 0x6}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x3}, {0x4, 0x9}, {}, {0x2, 0x5}, {0x4, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x3}, {0x6}, {0x5, 0x7}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x6, 0x8}, {0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x3, 0x1}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x4}, {}]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0xbe, 0x7f, 0x0, 0x4, 0x2, 0x7, 0x5, 0xff7f]}}, @NL80211_TXRATE_GI, @NL80211_TXRATE_HT={0x0, 0x2, [{0x2, 0xa}, {0x5}]}]}]}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x0, 0x5, {[0x8001, 0x1, 0x3, 0x642, 0x200, 0x6, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x7, 0x5}, {0x4, 0x6}, {0x2, 0x8}, {0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x4}, {0x6, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x6}, {0x6, 0xa}, {0x4, 0x7}, {0x5, 0x6}, {0x5, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x5, 0x3}, {0x5, 0x7}, {0x1}, {0x3}, {0x6, 0x9}, {0x6, 0x3}, {0x7}, {0x1, 0x9}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x3, 0x9}, {0x1}]}]}, @NL80211_BAND_60GHZ={0x0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x0, 0x4, 0x1}, @NL80211_TXRATE_GI, @NL80211_TXRATE_HE_GI={0x0, 0x6, 0x1}, @NL80211_TXRATE_GI={0x0, 0x4, 0x1}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x10, 0x0, 0x8, 0x54, 0x0, 0x5, 0x80, 0x5]}}, @NL80211_TXRATE_GI={0x0, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x1, 0x7, 0x101, 0x4, 0xb, 0x5, 0x7, 0xb]}}]}, @NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0xc, 0x2, 0x24, 0x4, 0x5d, 0x9, 0x9, 0x60, 0x12, 0xf, 0x60, 0x3, 0x6c, 0x5, 0x2, 0x0, 0x60, 0x16, 0x2, 0x12, 0x6, 0x18, 0x1b, 0x2, 0x30, 0x12, 0x5]}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x5, 0x3, 0x9, 0x54, 0x2, 0x5, 0xe712, 0xfff8]}}, @NL80211_TXRATE_HE_GI, @NL80211_TXRATE_HT={0x0, 0x2, [{0x0, 0x4}, {}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x5}, {0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x6}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {}, {0x3, 0x4}, {0x7}, {0x6}, {0x2, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x2}, {0x5}, {0x7, 0x5}, {0x4, 0x2}, {0x7, 0x9}, {0x5, 0x7}, {0x3, 0x6}, {0x1}, {0x3}, {0x7, 0x5}, {0x5}, {0x2}, {0x0, 0x4}, {0x5, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x1, 0x6}, {0x4, 0x5}, {0x3, 0x8}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x7, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x0, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x0, 0x2, [{0x0, 0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x7, 0x5}, {0x0, 0x2}, {}, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x7}, {0x3, 0xa}, {0x3, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0xa}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x2}, @NL80211_TXRATE_HE_GI, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x40, 0xff80, 0x9, 0x7, 0x9, 0x8, 0xa95, 0x6]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x4, 0x401, 0x6, 0x6000, 0x9, 0x2f, 0x4, 0x5]}}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x1, 0x7, 0x1, 0x8, 0xff, 0x6, 0x0, 0x2]}}]}, @NL80211_BAND_60GHZ={0x0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x0, 0x4, 0x2}, @NL80211_TXRATE_GI, @NL80211_TXRATE_HE={0x0, 0x5, {[0x1, 0x5, 0x9, 0xff, 0x5, 0x7f, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x7, 0x9}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x9}, {0x5, 0x6}, {0x5, 0x8}, {0x7, 0x1}, {0x5}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {}, {0x1, 0x7}, {0x6, 0x5}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x6}, {0x7, 0x2}, {0x5, 0x4}, {0x7, 0x5}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x3, 0x5}, {0x3, 0x1}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x5fbc, 0x0, 0x40, 0x101, 0xf783, 0x8000, 0xda71, 0x3]}}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x8, 0x7f, 0x8, 0x7, 0x9, 0x13, 0xfff8, 0xfff]}}, @NL80211_TXRATE_GI={0x0, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x30, 0x18, 0x9, 0x18, 0x3, 0x36, 0x12, 0x30, 0x30, 0x36, 0x3, 0x30, 0x24, 0x6, 0x5, 0x5, 0x0, 0x30, 0x6c, 0xb, 0xc, 0x48, 0xb, 0x60, 0xb, 0xb]}]}, @NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x0, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x8231052635dbbc85, 0x12, 0x3, 0x3, 0x48, 0x6c, 0x5, 0xc, 0xc, 0x6, 0x48, 0x5, 0x18, 0x12, 0x18, 0x1, 0x3, 0xc, 0x16, 0x12, 0x1b, 0x60, 0x36, 0x9, 0x5]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x3, 0x0, 0x1cc, 0x81f2, 0x1, 0x3, 0x5, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x0, 0x6, 0x1}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x5, 0x2, 0xf, 0x1, 0xf2de, 0x20, 0x6, 0xf7a0]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0xfff6, 0x3, 0x7837, 0xfffd, 0xcff, 0x5, 0x1d8, 0x4]}}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x2, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x8}, {0x4}, {0x6, 0x8}, {0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x2, 0x3}, {0x7, 0xa}, {0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x5, 0x6}, {0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x3, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x4}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x0, 0x5, {[0x0, 0x8000, 0x643e, 0x6, 0x7, 0xdf2]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x12, 0x18, 0x1b, 0x6, 0xb, 0x6, 0x24, 0x1, 0x5, 0x27, 0x24, 0x12, 0x2, 0x6c, 0x12, 0x18, 0x60, 0x60, 0x30, 0x2, 0x4, 0x6c, 0x5, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x0, 0x5, {[0x8, 0x6, 0x4, 0xc, 0xe16, 0x6, 0x5, 0x8]}}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x0, 0x5, {[0x4800, 0x10, 0x3, 0x40, 0x0, 0x1, 0xff, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x3}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x4, 0x1b, 0x16, 0xc, 0x16, 0x6c, 0x12, 0x3, 0x48, 0x36, 0x9, 0x1, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x0, 0xc, 0x1}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x0, 0x2, [{0x2, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x7, 0x5}, {0x7, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x4}, {0x4, 0x2}, {}, {0x6, 0x4}, {0x5, 0x9}, {0x6, 0x1}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x0, 0x19}, {0x2}, {0x0, 0x9}, {0x3, 0xa}, {0x4, 0x4}, {0x0, 0x7}, {0x7}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x4}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_GI, @NL80211_TXRATE_HE_GI={0x0, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x6c, 0x6, 0x36, 0x69, 0x48, 0x48, 0x4, 0x48, 0x6, 0x16, 0x1, 0x2e, 0xc, 0x0, 0x6, 0x16, 0x4, 0x1, 0x78, 0x24, 0x60, 0x9, 0x24, 0x3, 0x18, 0x36, 0x24, 0x9, 0x18]}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x9, 0x7, 0x100, 0x80, 0x1, 0x100, 0x3, 0x5]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x8, 0xfff, 0x3, 0x8, 0xd89a, 0x2, 0x5, 0xf89]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x0, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x0, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x0, 0xb, 0x1}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0x86}]}]}]}, 0x20}}, 0x0) 1.92980693s ago: executing program 3 (id=5022): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @dev}, &(0x7f0000000080)=0x80, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="a78adc66125052b0fa776bd46ba9f45f9ce73daab1ecf9b8dbadcad0590adb77d432c890b2d30b5d0b85bae432fbe81fcd30e908f1d8a4013604650afe30cb8e593d46f01f8b04c90b08d30db08bbfe39bad292330004d0b2f2fa00c33dc0fd7d2fe030a1e7424c81aba5ac8141a8791c28e90b4991dc3dc5429754ff17a4453cbfc6c43ab3f45a44c55ac54a44739112b7e12c8a2621ede61364a40184cf1cc2ce39581dd6f03fd8068b6b5557d40f9e8", 0xb1}, {&(0x7f00000001c0)="3b74efb8d724c4814d", 0x9}, {&(0x7f0000000200)="26945a64e7766c99130f69b2c96a", 0xe}, {&(0x7f0000000240)="9f8f301decbea0a65da4c6628510b6fd78e72d4cbe526dc759dee62ef3e4f3a29fea8aec24e99cd49c41eba96b8402122cc5cecef35d0e281d508a0216d250060709cbb8a75df46514f13d533237fe6f79d0dd58928347adead7b7252e9cc8c3500768bde67e28e6f058e6e78586d1cd85bb7824287ac8e939d7a993d0bb7468620422cff2438f79c0c84d35b2c6233f17322a0fba0766c0bc9599947c05620de66a00bc78fa3647564b159762998f99def697a0d216e0815443698418bcf78374a791747e3b4d3591c09beb878b7fcabc44f7de22ec1af1c9773298511dd9ccd094b387405a8938eb", 0xe9}, {&(0x7f0000000340)="cf6e0c87076ec1a976f7496443f4d4111db5f4944381ee52c15de9292a3acb8e85088943cd24e7223b33514d969e745a9966d5aa0d49616ed0", 0x39}, {&(0x7f0000000380)="ef0187724d24df65dc1a645927f475eac4cff6dabecd4fed3cacd588cea9ae8c379eb389a120d58c41bf8db3", 0x2c}], 0x6, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x19}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf6fa}}], 0x38}}], 0x1, 0x20044000) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x97}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x4084890) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='cgroup.stat\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0}, &(0x7f0000000800)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000940)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x9, @remote, 0x1}, @in={0x2, 0x4e22, @remote}], 0x3c) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000980)="34ba6007c1081e56d423edceaa3e5f1fef2efe92eed9df2c6b26150a36d642d1982b23e250cc8ea84cb7a550fa1090ae5cdaf54dd4a0b64217fe0b4df4f59993fbab69e59b3bff726a679e4761f04c4c73e9365a0b5efec96f08df2432644df416672cfb065105d4de2574c0ce158b358fccd092440f8f83573aa43a61376536f455a9de91e7f7c178ec2698b9d799039318acc39150195bb78de19082e1913b0e561c91b0287f4b1d46e0724acc53d02e4a6ef854c76f9e40516633634d838a8494235318e0229a41f5584757ca2996c427d2ed589fe4eece0b3efc1bf416543b30e7bf35e397b3f0a46ad9") (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x60, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x60}}, 0x40) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f00)={0x1, 0x0}, 0x8) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={0xffffffffffffffff}, 0x4) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x100, 0x5, 0x10, 0x144, r4, 0x6, '\x00', r1, r4, 0x0, 0x0, 0x5, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x4, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x66}]}, &(0x7f0000000d40)='GPL\x00', 0x4, 0xd3, &(0x7f0000000d80)=""/211, 0x40f00, 0x5, '\x00', r1, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x7, 0x7, 0x3, 0xe7a}, 0x10, r12, r13, 0x0, &(0x7f0000001000)=[0xffffffffffffffff, r4, r4, r4, r14], 0x0, 0x10, 0x7fffffff}, 0x94) (async) sendmsg$nl_route(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@ipv4_getnetconf={0x1c, 0x52, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x8004) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001240)={@rand_addr, @remote, 0x0}, &(0x7f0000001280)=0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xf8, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x43}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40c1}, 0x8840) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)=@ipv6_delrule={0x44, 0x21, 0x200, 0x70bd27, 0x25dfdbfe, {0xa, 0x14, 0x20, 0x5, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x1) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r4) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r17, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffe, 0x3f}}}}, ["", ""]}, 0x28}}, 0x2000) 1.422512569s ago: executing program 3 (id=5023): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000017edf3309f11a0629e889de249f7a7d5000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x58}}, 0xc0) unshare(0x22020600) r2 = socket$tipc(0x1e, 0x2, 0x0) connect(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf00550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500"/104], &(0x7f0000000500)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 329.407801ms ago: executing program 3 (id=5024): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x4004) close(r0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@broadcast, @private=0xa010100, 0xff, 0x0, 0xe, 0xe, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="2809a18ba198", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x3, 0x2, 0x1, 0x8, 0x1000, 0xbf1, 'rose0\x00', 'netdevsim0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e4bbc3ac724d", @multicast1, @rand_addr=0x64010102, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xc5f8, 0x2, 0x3}}}, {{@arp={@loopback, @local, 0x0, 0xffffff00, 0x1, 0x8, {@mac, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0xa, 0x6, 0xffff, 0x5, 0x7, 0xb8d, 'wlan0\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 254.36017ms ago: executing program 2 (id=5025): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r2) (async) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000840)={0x11, 0x8, r3, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4880, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000580)={0x3, &(0x7f00000005c0)=[{0x40, 0x2, 0xa3, 0x3c95}, {0x20, 0x1, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x5, 0x50, 0x0, &(0x7f0000000500)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x69}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 202.911309ms ago: executing program 6 (id=5026): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000380)=ANY=[@ANYRES64=r2], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000fc0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@gettfilter={0x5c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0x10}, {0x9, 0xffe0}, {0x1, 0x8}}, [{0x8, 0xb, 0x87}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x132}, {0x8, 0xb, 0x1}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300a00000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}}, 0x0) sendto$inet(r0, &(0x7f0000000980)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000b40)='westwood', 0x8) recvfrom$inet(r0, &(0x7f0000000b80), 0x0, 0xc9102120, 0x0, 0xffffffffffffff3f) shutdown(r0, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000073112f00000000008510000002000000720000007600000095000000000000009500a50500"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000003b000001264cc26aa363b8a78c070000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 153.714797ms ago: executing program 7 (id=5027): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xffffffff, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000001140)=ANY=[], &(0x7f0000000f80)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x8, 0x10, &(0x7f0000001000)={0x0, 0x100007, 0x0, 0x2000}, 0x10, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xfffffffffffffc51) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00000000008d87924e00"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'ip_vti0\x00', r5, 0x80, 0x20, 0x5, 0x9, {{0x23, 0x4, 0x1, 0x18, 0x8c, 0x68, 0x0, 0x4, 0x2b, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @generic={0x86, 0x3, 'o'}, @noop, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x7, [{@local, 0x7ff}, {@empty, 0x80000001}]}, @timestamp_prespec={0x44, 0x2c, 0x8c, 0x3, 0x3, [{@multicast1, 0x5}, {@loopback, 0xfffff000}, {@rand_addr=0x64010101, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x9}]}, @noop, @ssrr={0x89, 0xf, 0xf7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x19}]}, @lsrr={0x83, 0x1b, 0xc7, [@empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (async) unshare(0x20000400) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360afffffff80000180000002020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff21000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x2, 0xcf, &(0x7f0000000740)=""/207}, 0x94) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000840)={0x7, 'dvmrp0\x00', {0xb5a1}, 0x7}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000010c0)={'rose0\x00', 0x112}) (async) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r1) 33.830154ms ago: executing program 3 (id=5028): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x3a, 0x2, 0x0, 0xd, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000800000000000000fdffffff180100002020692500000000002020eecff58bff00337300bfa100357fd2c1dcb5781900f8ff1f00b702000008000000b70300000200000085000000ca000000f57575e100000000"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 0s ago: executing program 5 (id=5029): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000c00)={&(0x7f0000000c40)=""/74, 0x328000, 0x1000}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b40)={@broadcast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x100}}}}}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000007c0), &(0x7f0000000b00)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/178, 0xb2}, {&(0x7f0000000a80)=""/70, 0x9e}, {&(0x7f0000001100)=""/4084, 0xff4}, {&(0x7f0000002100)=""/150, 0x96}, {&(0x7f00000021c0)=""/167, 0xa7}, {&(0x7f0000002280)=""/256, 0x100}, {&(0x7f0000002380)=""/191, 0xbf}, {&(0x7f0000002440)=""/180, 0xb4}], 0x8}, 0x1}], 0x4, 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000200)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x7, 0x3}, {0x6, 0xfd, 0xee}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x3, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x30]}}, &(0x7f0000000340)=""/262, 0x35, 0x106, 0x9}, 0x28) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x4001, 0x3, 0x1280, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11e8, 0x206, 0x240, 0x11e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x41, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffffff, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x6, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x0, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12e0) write$ppp(r1, &(0x7f0000000280)="01d4a1", 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) recvfrom$packet(r6, &(0x7f0000000500)=""/216, 0xd8, 0x10020, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x38, r7, 0x701, 0x0, 0x0, {0x2e}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc008}, 0x4048010) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = epoll_create1(0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000700010009"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000640)={r11, 0x0, &(0x7f0000000680)=""/53}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000006c0)={0x20000001}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x39c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x36c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x0, 0x0, 0x0, 0x19, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8002}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xd, 0x18}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "34098faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee45796847450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e06000000000000001ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd486731122100"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x39c}}, 0x0) kernel console output (not intermixed with test programs): mode [ 668.507045][T22396] gretap0: left allmulticast mode [ 668.507070][T22396] gretap0: left promiscuous mode [ 668.510607][T22396] macvtap2: left promiscuous mode [ 668.510629][T22396] macvtap2: left allmulticast mode [ 668.803285][T22408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3621'. [ 669.964708][T22475] netlink: 58 bytes leftover after parsing attributes in process `syz.2.3634'. [ 670.217543][T22483] netlink: 'syz.5.3637': attribute type 1 has an invalid length. [ 670.400672][T22478] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3636'. [ 670.480344][T22483] 8021q: adding VLAN 0 to HW filter on device bond14 [ 670.597466][T22485] bond14: (slave veth15): Enslaving as an active interface with a down link [ 670.738926][T22490] bond14 (unregistering): (slave veth15): Releasing active interface [ 670.767283][T22490] bond14 (unregistering): Released all slaves [ 670.898775][T22502] can: request_module (can-proto-4) failed. [ 671.006990][T22503] can: request_module (can-proto-4) failed. [ 671.114655][T22509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3641'. [ 671.203861][ T9746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.774271][ T9746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.948016][ T9746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.140569][T22534] netlink: 'syz.5.3649': attribute type 1 has an invalid length. [ 672.140590][T22534] netlink: 'syz.5.3649': attribute type 12 has an invalid length. [ 672.140601][T22534] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3649'. [ 672.244457][T22540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.641053][T22549] netlink: 'syz.3.3651': attribute type 1 has an invalid length. [ 672.752754][T22550] sctp: [Deprecated]: syz.3.3651 (pid 22550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 672.752754][T22550] Use struct sctp_sack_info instead [ 672.753002][T22550] sctp: [Deprecated]: syz.3.3651 (pid 22550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 672.753002][T22550] Use struct sctp_sack_info instead [ 672.754592][T22550] sctp: [Deprecated]: syz.3.3651 (pid 22550) Use of int in max_burst socket option. [ 672.754592][T22550] Use struct sctp_assoc_value instead [ 672.759989][T22550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3651'. [ 675.244937][T22545] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 675.250678][T22549] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 675.265388][T22539] ipip1: entered promiscuous mode [ 675.265411][T22539] ipip1: entered allmulticast mode [ 675.369664][ T9746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.704972][T22564] sctp: [Deprecated]: syz.3.3654 (pid 22564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.704972][T22564] Use struct sctp_sack_info instead [ 675.782016][ T9750] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 20004 - 0 [ 675.839694][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3656'. [ 675.986664][ T9750] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 20004 - 0 [ 676.002288][T13826] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 20004 - 0 [ 676.058681][T13826] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 20004 - 0 [ 676.174890][ T9746] tipc: Resetting bearer [ 676.180778][ T9746] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 676.816255][ T9746] bond5 (unregistering): (slave xfrm2): Releasing backup interface [ 676.816282][ T9746] xfrm2 (unregistering): left promiscuous mode [ 677.453602][ T9746] tipc: Disabling bearer [ 677.458141][ T9746] batman_adv: batadv0: Removing interface: syzkaller0 [ 677.626083][ T9746] bond0 (unregistering): Released all slaves [ 677.666506][ T9746] bond1 (unregistering): Released all slaves [ 677.708407][ T9746] bond2 (unregistering): Released all slaves [ 677.736716][ T9746] bond3 (unregistering): Released all slaves [ 677.760567][ T9746] bond4 (unregistering): Released all slaves [ 677.783598][ T9746] bond5 (unregistering): Released all slaves [ 677.900472][ T9746] bond6 (unregistering): Released all slaves [ 677.928572][ T9746] bond7 (unregistering): Released all slaves [ 677.949302][ T9746] bond8 (unregistering): Released all slaves [ 677.979430][ T9746] bond9 (unregistering): Released all slaves [ 678.006996][ T9746] bond10 (unregistering): Released all slaves [ 678.036066][ T9746] bond11 (unregistering): Released all slaves [ 678.059442][ T9746] bond12 (unregistering): Released all slaves [ 678.084956][ T9746] bond13 (unregistering): Released all slaves [ 678.117274][ T9746] bond14 (unregistering): Released all slaves [ 678.148333][ T9746] bond15 (unregistering): Released all slaves [ 678.172544][ T9746] bond16 (unregistering): Released all slaves [ 678.197830][ T9746] bond17 (unregistering): Released all slaves [ 678.224546][ T9746] bond18 (unregistering): Released all slaves [ 678.247908][ T9746] bond19 (unregistering): Released all slaves [ 678.278328][ T9746] bond20 (unregistering): Released all slaves [ 678.299412][ T9746] bond21 (unregistering): Released all slaves [ 678.326437][ T9746] bond22 (unregistering): (slave veth0_to_bond): Releasing active interface [ 678.327979][ T9746] bond22 (unregistering): Released all slaves [ 678.388336][T22575] vxcan0: entered allmulticast mode [ 678.399933][T22575] vxcan1: entered promiscuous mode [ 678.595946][T22583] macsec0: entered promiscuous mode [ 678.595973][T22583] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 678.596245][T22583] macsec0: entered allmulticast mode [ 678.596260][T22583] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 678.639320][T22583] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 678.663908][T22583] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 678.813303][T22604] tipc: Enabling of bearer rejected, already enabled [ 678.834174][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 678.834821][ T3113] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 678.836032][ T9746] tipc: Disabling bearer [ 678.836158][ T9746] tipc: Disabling bearer [ 678.840512][ T9746] tipc: Left network mode [ 678.958698][T22616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3660'. [ 679.195892][T22638] sctp: [Deprecated]: syz.7.3663 (pid 22638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 679.195892][T22638] Use struct sctp_sack_info instead [ 679.583558][T22648] netlink: 'syz.6.3666': attribute type 3 has an invalid length. [ 679.784817][T22648] syzkaller0: entered promiscuous mode [ 679.784840][T22648] syzkaller0: entered allmulticast mode [ 680.823925][T22681] tc_dump_action: action bad kind [ 680.892204][T22678] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3673'. [ 681.072566][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3675'. [ 681.176404][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3675'. [ 681.176640][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3675'. [ 681.176857][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3675'. [ 681.177066][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3675'. [ 681.179657][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3675'. [ 681.179919][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3675'. [ 681.201274][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3675'. [ 681.201487][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3675'. [ 681.505820][T22702] veth3: entered allmulticast mode [ 681.646697][ T9746] hsr_slave_0: left promiscuous mode [ 681.666647][ T9746] hsr_slave_1: left promiscuous mode [ 681.667696][ T9746] dummy0: left allmulticast mode [ 683.979703][T22726] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 683.983069][T22726] 0ªX¹¦Dö»: entered allmulticast mode [ 683.987826][ T5296] 8021q: adding VLAN 0 to HW filter on device eth11 [ 685.973217][T22819] __nla_validate_parse: 59 callbacks suppressed [ 685.973240][T22819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3694'. [ 685.996145][T22819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3694'. [ 685.996452][T22820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3694'. [ 688.176501][T22830] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3697'. [ 688.811960][T22779] netlink: 'syz.2.3687': attribute type 3 has an invalid length. [ 688.906408][T22788] netlink: 'syz.2.3687': attribute type 3 has an invalid length. [ 689.309356][T22849] netlink: 'syz.5.3701': attribute type 12 has an invalid length. [ 689.368714][ T9746] IPVS: stop unused estimator thread 0... [ 689.392913][T22844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.451370][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3700'. [ 689.589611][T22851] vlan4: entered allmulticast mode [ 689.589634][T22851] bridge2: entered allmulticast mode [ 689.608112][T22851] bridge2: port 1(erspan0) entered blocking state [ 689.609033][T22851] bridge2: port 1(erspan0) entered disabled state [ 689.609194][T22851] erspan0: entered allmulticast mode [ 689.634617][T22851] erspan0: entered promiscuous mode [ 689.636981][T22851] bridge2: port 1(erspan0) entered blocking state [ 689.637105][T22851] bridge2: port 1(erspan0) entered forwarding state [ 689.885799][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3703'. [ 690.125641][T22865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 690.370440][T22884] netlink: 'syz.7.3704': attribute type 1 has an invalid length. [ 690.370461][T22884] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3704'. [ 690.370476][T22884] nbd: must specify at least one socket [ 690.488198][ T5296] 8021q: adding VLAN 0 to HW filter on device eth12 [ 690.881421][T22896] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20001 [ 690.981196][T22904] netlink: 'syz.7.3708': attribute type 1 has an invalid length. [ 691.119166][T22904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 691.205814][T22908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.244855][T22908] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 691.342589][ T6360] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 691.395510][T22924] sctp: [Deprecated]: syz.7.3713 (pid 22924) Use of int in max_burst socket option. [ 691.395510][T22924] Use struct sctp_assoc_value instead [ 691.486824][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3712'. [ 691.506801][ T6366] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 691.974177][T22943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.977864][T22943] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 692.229467][T22954] netlink: 'syz.7.3718': attribute type 1 has an invalid length. [ 692.303510][T22954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3718'. [ 692.304337][T22954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3718'. [ 692.305328][T22954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3718'. [ 692.306299][T22954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3718'. [ 692.307059][T22954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3718'. [ 692.307905][T22954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3718'. [ 692.313583][T22954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3718'. [ 692.341118][T22954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3718'. [ 692.342678][T22954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3718'. [ 692.577054][ T5296] 8021q: adding VLAN 0 to HW filter on device eth13 [ 692.747677][T22978] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 692.747702][T22978] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 692.894346][T22989] netlink: 'syz.3.3724': attribute type 10 has an invalid length. [ 693.835215][T23015] sctp: [Deprecated]: syz.7.3730 (pid 23015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.835215][T23015] Use struct sctp_sack_info instead [ 693.943861][T23009] 8021q: VLANs not supported on ip6_vti0 [ 694.019171][T23022] vlan0: entered allmulticast mode [ 694.019192][T23022] batadv_slave_0: entered allmulticast mode [ 694.021633][T23022] batman_adv: batadv0: Adding interface: vlan0 [ 694.021647][T23022] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.021668][T23022] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 694.356031][T23035] smc: net device bond0 applied user defined pnetid SYZ2 [ 695.970057][T23092] ip_tables: iptables: counters copy to user failed while replacing table [ 697.155038][T23127] netlink: 'syz.2.3777': attribute type 15 has an invalid length. [ 697.417513][T23134] syzkaller0: entered promiscuous mode [ 697.417688][T23134] syzkaller0: entered allmulticast mode [ 697.480861][T23134] tipc: Enabled bearer , priority 0 [ 697.491786][T23142] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 697.491954][T23142] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 697.523764][T23133] tipc: Resetting bearer [ 697.740892][T23133] tipc: Disabling bearer [ 697.791662][T23150] __nla_validate_parse: 28 callbacks suppressed [ 697.793221][T23150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3786'. [ 697.933815][T23157] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 698.000584][T23160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3790'. [ 698.128379][T23164] syz_tun: entered allmulticast mode [ 698.493307][T23183] netlink: 'syz.3.3801': attribute type 10 has an invalid length. [ 698.869591][T23183] team0: Port device veth1_to_hsr added [ 700.007044][T23228] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3813'. [ 700.498933][T23244] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 700.993069][T23260] xt_NETMAP: bad rangesize 6145. [ 702.147821][T20062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 702.161172][T20062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 702.174756][T20062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 702.201590][T20062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 702.223563][T20062] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 702.351532][T23288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3836'. [ 704.289767][ T9429] syz_tun (unregistering): left allmulticast mode [ 704.292080][ T4951] Bluetooth: hci4: command tx timeout [ 704.488367][T23282] rxe_eth0 speed is unknown, defaulting to 1000 [ 704.517069][T23304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3837'. [ 705.326740][T23322] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 705.800109][T23340] lo: entered promiscuous mode [ 705.836316][T23340] tunl0: entered promiscuous mode [ 705.841602][T23340] gre0: entered promiscuous mode [ 705.880662][T23340] gretap0: entered promiscuous mode [ 705.903556][T23340] erspan0: entered promiscuous mode [ 705.910285][T23340] ip_vti0: entered promiscuous mode [ 705.921428][T23340] ip6_vti0: entered promiscuous mode [ 705.926978][T23340] sit0: entered promiscuous mode [ 705.959412][T23340] ip6tnl0: entered promiscuous mode [ 705.981451][T23340] ip6gre0: entered promiscuous mode [ 706.004980][T23340] syz_tun: entered promiscuous mode [ 706.025891][T23340] ip6gretap0: entered promiscuous mode [ 706.026212][T23340] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.026901][T23340] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.040825][T23340] bridge0: entered promiscuous mode [ 706.054563][T23340] vcan0: entered promiscuous mode [ 706.074721][T23340] bond0: entered promiscuous mode [ 706.074742][T23340] bond_slave_0: entered promiscuous mode [ 706.074981][T23340] bond_slave_1: entered promiscuous mode [ 706.092668][T23340] team0: entered promiscuous mode [ 706.092690][T23340] team_slave_0: entered promiscuous mode [ 706.092888][T23340] team_slave_1: entered promiscuous mode [ 706.134451][T23340] nlmon0: entered promiscuous mode [ 706.138775][T23340] batadv0: entered promiscuous mode [ 706.146837][T23340] vxcan0: entered promiscuous mode [ 706.154696][T23340] vxcan1: entered promiscuous mode [ 706.159775][T23340] veth0: entered promiscuous mode [ 706.207239][T23340] veth1: entered promiscuous mode [ 706.225556][T23340] wg0: entered promiscuous mode [ 706.247083][T23340] wg1: entered promiscuous mode [ 706.268066][T23340] wg2: entered promiscuous mode [ 706.278749][T23340] veth0_to_bridge: entered promiscuous mode [ 706.317297][T23340] veth1_to_bridge: entered promiscuous mode [ 706.355197][T23340] veth0_to_bond: entered promiscuous mode [ 706.367771][T23340] veth1_to_bond: entered promiscuous mode [ 706.373132][ T4951] Bluetooth: hci4: command tx timeout [ 706.388631][T23340] veth0_to_team: entered promiscuous mode [ 706.416625][T23340] veth1_to_team: entered promiscuous mode [ 706.453086][T23340] veth0_to_batadv: entered promiscuous mode [ 706.464576][T23340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.464641][T23340] batadv_slave_0: entered promiscuous mode [ 706.472223][T23340] veth1_to_batadv: entered promiscuous mode [ 706.478131][T23340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.478188][T23340] batadv_slave_1: entered promiscuous mode [ 706.488631][T23340] xfrm0: entered promiscuous mode [ 706.494631][T23340] veth0_to_hsr: entered promiscuous mode [ 706.505945][T23340] veth1_to_hsr: entered promiscuous mode [ 706.517544][T23340] hsr0: entered promiscuous mode [ 706.535659][T23340] veth1_virt_wifi: entered promiscuous mode [ 706.574319][T23340] veth0_virt_wifi: entered promiscuous mode [ 706.619924][T23340] vlan0: entered promiscuous mode [ 706.628025][T23340] vlan1: entered promiscuous mode [ 706.631281][T23340] macvlan0: entered promiscuous mode [ 706.638107][T23340] macvlan1: entered promiscuous mode [ 706.646187][T23340] ipvlan0: entered promiscuous mode [ 706.650899][T23340] ipvlan1: entered promiscuous mode [ 706.668569][T23340] veth0_macvtap: left allmulticast mode [ 706.679298][T23340] macvtap0: entered promiscuous mode [ 706.686118][T23340] macsec0: entered promiscuous mode [ 706.691551][T23340] geneve0: entered promiscuous mode [ 706.703980][T23340] geneve1: entered promiscuous mode [ 706.717624][T23340] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 706.729933][T23340] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 706.740422][T23340] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 706.750445][T23340] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 706.755058][T23340] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 706.755228][T23340] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 706.766562][T23340] bond1: entered promiscuous mode [ 706.767875][T23340] veth2: entered promiscuous mode [ 706.768031][T23340] veth3: entered promiscuous mode [ 706.768296][T23340] vlan2: entered promiscuous mode [ 706.776219][T23340] vlan3: entered promiscuous mode [ 706.785492][T23340] gtp0: entered promiscuous mode [ 706.794355][T23340] bridge1: entered promiscuous mode [ 706.798324][T23340] pimreg9: entered promiscuous mode [ 706.798942][T23340] ip6gre1: entered promiscuous mode [ 706.799131][T23340] ieee802154 phy1 wpan0: entered promiscuous mode [ 706.799259][T23340] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 706.805779][T23340] ip6gretap1: entered promiscuous mode [ 706.805798][T23340] ip6gretap1: left allmulticast mode [ 706.812359][T23340] bond2: entered promiscuous mode [ 706.834055][T23350] syz_tun: entered allmulticast mode [ 706.944771][ T9753] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.944817][ T9753] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.944848][ T9753] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.944878][ T9753] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.424294][T23386] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3862'. [ 707.834550][T23282] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.834727][T23282] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.834851][T23282] bridge_slave_0: entered allmulticast mode [ 707.836679][T23282] bridge_slave_0: entered promiscuous mode [ 707.840199][T23282] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.840360][T23282] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.840476][T23282] bridge_slave_1: entered allmulticast mode [ 707.845282][T23282] bridge_slave_1: entered promiscuous mode [ 707.885414][T23282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.898521][T23282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.966163][T23405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.076813][T23282] team0: Port device team_slave_0 added [ 708.087601][T23282] team0: Port device team_slave_1 added [ 708.251334][T23282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.251353][T23282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.251376][T23282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.274963][T23282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.274980][T23282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.275003][T23282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.451856][ T4951] Bluetooth: hci4: command tx timeout [ 708.573280][T23282] hsr_slave_0: entered promiscuous mode [ 708.579070][T23282] hsr_slave_1: entered promiscuous mode [ 708.986569][T23431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3877'. [ 708.986605][T23431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3877'. [ 709.072825][ T6369] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.072916][ T6369] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.072947][ T6369] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.072990][ T6369] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.362734][T23446] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3882'. [ 709.617778][T23457] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3888'. [ 710.078575][T23472] tipc: Resetting bearer [ 710.531861][ T4951] Bluetooth: hci4: command tx timeout [ 710.699503][T23282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.725494][T23282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.727973][T23282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 710.757680][T23282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.762676][T23282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 710.798560][T23282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.810704][T23282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 710.831130][T23282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 710.896490][T23491] syzkaller0: entered promiscuous mode [ 710.896515][T23491] syzkaller0: entered allmulticast mode [ 710.954528][T23491] tipc: Started in network mode [ 710.954558][T23491] tipc: Node identity b27bc57ce5c6, cluster identity 4711 [ 710.955092][T23491] tipc: Enabled bearer , priority 0 [ 711.018097][T23491] tipc: Resetting bearer [ 711.054684][T23489] tipc: Resetting bearer [ 711.151107][T23489] tipc: Disabling bearer [ 711.230053][T23517] xt_IDLETIMER: timeout value is too big [ 711.560855][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'. [ 712.061003][T23282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.165922][T23282] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.196650][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.196761][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.255199][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.255339][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.447073][T23553] tipc: Cannot configure node identity twice [ 713.904620][T23282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.459085][T23282] veth0_vlan: entered promiscuous mode [ 714.495682][T23282] veth1_vlan: entered promiscuous mode [ 714.576061][T23282] veth0_macvtap: entered promiscuous mode [ 714.587327][T23282] veth1_macvtap: entered promiscuous mode [ 714.639063][T23282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.663999][T23282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.702499][ T6365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.707340][ T6369] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.707394][ T6369] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.707424][ T6369] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.047173][ T9753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.047194][ T9753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.220535][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.220557][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.046724][T23659] vlan0: entered promiscuous mode [ 716.576230][T23683] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3955'. [ 717.103397][T23674] scsi_nl_rcv_msg: discarding partial skb [ 717.600914][T23703] ip_tables: iptables: counters copy to user failed while replacing table [ 717.619824][T23706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3962'. [ 718.119284][T23721] bridge_slave_0: left allmulticast mode [ 718.119645][T23721] bridge_slave_0: left promiscuous mode [ 718.127003][T23721] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.202087][T23721] bridge_slave_1: left allmulticast mode [ 718.202112][T23721] bridge_slave_1: left promiscuous mode [ 718.202332][T23721] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.249775][T23721] bond0: (slave bond_slave_0): Releasing backup interface [ 718.285268][T23721] bond0: (slave bond_slave_1): Releasing backup interface [ 718.368400][T23721] team0: Port device team_slave_0 removed [ 718.404134][T23721] team0: Port device team_slave_1 removed [ 718.407864][T23721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.407885][T23721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.420075][T23721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.420096][T23721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.437872][T23721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 718.440088][T23714] netlink: 'syz.2.3965': attribute type 1 has an invalid length. [ 718.809266][T23745] dvmrp8: entered allmulticast mode [ 718.826403][T23745] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 719.194778][T23763] batman_adv: batadv0: Adding interface: syzkaller0 [ 719.194796][T23763] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.195038][T23763] batman_adv: batadv0: Interface activated: syzkaller0 [ 719.245454][T23762] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 719.300640][T23762] batman_adv: batadv0: Removing interface: syzkaller0 [ 719.410203][T23775] tipc: Started in network mode [ 719.410233][T23775] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 719.410401][T23775] tipc: Enabled bearer , priority 7 [ 719.925572][T23792] vlan5: entered promiscuous mode [ 719.925596][T23792] macvlan0: entered promiscuous mode [ 720.610350][T23812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3988'. [ 720.740575][T14323] tipc: Node number set to 9480874 [ 720.752230][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.752608][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.752942][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.753299][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.753659][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.753990][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.754293][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.754639][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.754963][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.755274][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.755608][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.755864][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.756196][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.756564][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.756890][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.757263][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.757622][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.757965][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.760142][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.760549][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.760874][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.761309][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.765828][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.766165][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.770532][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.770887][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.772709][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.775068][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.775410][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.789295][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.789813][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.790146][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.790498][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.790833][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.791130][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.791483][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.792535][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.792855][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.793205][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.793614][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.793953][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.794300][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.794827][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.795153][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.795513][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.795865][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.796203][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.796556][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.796906][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.797242][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.797588][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.797954][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.798292][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.798637][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.798854][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.799191][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.799539][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.799775][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.799923][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.800263][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.801183][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.801425][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.802592][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.802928][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 720.806869][T23809] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 721.302725][T23823] netlink: 'syz.2.3988': attribute type 15 has an invalid length. [ 721.311475][T23823] IPv6: NLM_F_CREATE should be specified when creating new route [ 721.311608][T23823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 721.311620][T23823] IPv6: NLM_F_CREATE should be set when creating new route [ 721.540186][T23812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.621977][T23817] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 721.652279][ T4951] Bluetooth: hci4: command tx timeout [ 721.674610][ T9746] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.675239][ T9746] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.675275][ T9746] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.675305][ T9746] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.074775][T23836] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 723.611447][T23857] tc_dump_action: action bad kind [ 723.724568][T23856] openvswitch: netlink: Key type 31 is not supported [ 724.336345][T23876] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3998'. [ 726.701234][T23956] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 726.928060][T23967] ip_tables: iptables: counters copy to user failed while replacing table [ 727.113708][T23972] netlink: 'syz.7.4025': attribute type 1 has an invalid length. [ 727.286759][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 727.286778][ T30] audit: type=1800 audit(1794130974.971:90): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4029" name="blkio.bfq.time_recursive" dev="tmpfs" ino=950 res=0 errno=-22 [ 727.487930][T23984] vlan2: entered promiscuous mode [ 727.487952][T23984] bridge0: entered promiscuous mode [ 727.597630][T23997] netlink: 292 bytes leftover after parsing attributes in process `syz.7.4032'. [ 727.689402][T23998] sit2: entered promiscuous mode [ 727.698230][T24000] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4033'. [ 728.305995][T24015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4037'. [ 728.306022][T24015] openvswitch: netlink: Flow actions attr not present in new flow. [ 728.443800][T24018] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 728.759981][T24029] netlink: 'syz.2.4042': attribute type 1 has an invalid length. [ 728.760004][T24029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4042'. [ 728.865135][T24033] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4043'. [ 729.167958][T24047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4047'. [ 729.269618][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4049'. [ 729.281310][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4049'. [ 729.893956][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4056'. [ 729.911582][T24091] netlink: 280 bytes leftover after parsing attributes in process `syz.5.4055'. [ 729.918260][T24083] sctp: [Deprecated]: syz.3.4056 (pid 24083) Use of int in max_burst socket option. [ 729.918260][T24083] Use struct sctp_assoc_value instead [ 729.949495][T24093] openvswitch: netlink: Flow key attr not present in new flow. [ 729.950581][T24093] sctp: [Deprecated]: syz.7.4057 (pid 24093) Use of int in maxseg socket option. [ 729.950581][T24093] Use struct sctp_assoc_value instead [ 731.730904][T24130] scsi_nl_rcv_msg: discarding partial skb [ 731.859742][T24160] geneve1: entered promiscuous mode [ 732.006766][T24162] netlink: 'syz.3.4077': attribute type 1 has an invalid length. [ 732.113496][T24162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 732.304922][T24165] bond4: (slave geneve2): making interface the new active one [ 732.332908][T24165] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 732.334743][T24162] xfrm0: entered promiscuous mode [ 732.334762][T24162] xfrm0: entered allmulticast mode [ 732.341249][T24172] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4080'. [ 732.399213][T24180] openvswitch: netlink: IP tunnel TTL not specified. [ 732.401392][T24182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4083'. [ 732.429946][T24165] netlink: 'syz.3.4077': attribute type 4 has an invalid length. [ 732.447252][T24182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4083'. [ 732.789719][T24205] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4089'. [ 733.289988][T24219] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4091'. [ 733.891614][T24236] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4096'. [ 733.934389][T24236] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4096'. [ 734.039014][T24241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.510803][T24266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.676753][T24280] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4106'. [ 735.729576][T24282] netlink: 'syz.7.4102': attribute type 21 has an invalid length. [ 735.729658][T24282] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4102'. [ 736.421955][T24307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4113'. [ 737.649629][T24357] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4128'. [ 737.835892][T24361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4130'. [ 737.975773][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4131'. [ 737.979691][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4131'. [ 738.004535][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4131'. [ 738.063455][T24373] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 738.239500][T24376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4133'. [ 738.239583][T24376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4133'. [ 740.836546][T24388] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4138'. [ 740.874345][T24382] netlink: 79 bytes leftover after parsing attributes in process `syz.6.4135'. [ 741.105719][T24400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4140'. [ 741.113524][T24401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4140'. [ 741.175340][T24405] netlink: 'syz.6.4140': attribute type 10 has an invalid length. [ 741.175362][T24405] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4140'. [ 741.230162][T24389] syzkaller0: entered promiscuous mode [ 741.230183][T24389] syzkaller0: entered allmulticast mode [ 741.276027][T24400] 8021q: adding VLAN 0 to HW filter on device bond6 [ 741.340179][T24401] bond6: entered promiscuous mode [ 741.340293][T24401] bond6: entered allmulticast mode [ 741.423759][T24415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4142'. [ 741.637628][T24425] netlink: 'syz.6.4144': attribute type 1 has an invalid length. [ 744.995663][T24425] bond7: entered promiscuous mode [ 744.996185][T24425] 8021q: adding VLAN 0 to HW filter on device bond7 [ 745.079910][T24434] 8021q: adding VLAN 0 to HW filter on device bond7 [ 745.080281][T24434] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 745.080299][T24434] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 745.124559][T24434] bond7: (slave gre1): making interface the new active one [ 745.124582][T24434] gre1: entered promiscuous mode [ 745.127715][T24434] bond7: (slave gre1): Enslaving as an active interface with an up link [ 745.822910][T24477] tc_dump_action: action bad kind [ 745.909667][T24479] netlink: 'syz.3.4157': attribute type 11 has an invalid length. [ 745.985802][T24483] batadv_slave_1: entered promiscuous mode [ 746.290812][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4157'. [ 746.290960][T24492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.451166][T24492] batadv_slave_1 (unregistering): left promiscuous mode [ 746.451273][T24492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.954149][T24494] netlink: 'syz.5.4160': attribute type 1 has an invalid length. [ 748.323087][T24460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.326221][T24488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4159'. [ 748.504801][T24497] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4162'. [ 748.655690][T24507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4165'. [ 748.655724][T24507] openvswitch: netlink: Missing key (keys=40, expected=80) [ 748.655886][T24507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4165'. [ 748.655902][T24507] openvswitch: netlink: Missing key (keys=40, expected=80) [ 748.656032][T24507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4165'. [ 748.656047][T24507] openvswitch: netlink: Missing key (keys=40, expected=80) [ 748.656175][T24507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4165'. [ 748.656189][T24507] openvswitch: netlink: Missing key (keys=40, expected=80) [ 748.787774][T24513] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 748.788062][T24513] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 748.788278][T24513] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 748.804486][T24507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4165'. [ 748.804515][T24507] openvswitch: netlink: Missing key (keys=40, expected=80) [ 748.804682][T24507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4165'. [ 748.804696][T24507] openvswitch: netlink: Missing key (keys=40, expected=80) [ 748.804837][T24507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4165'. [ 748.804851][T24507] openvswitch: netlink: Missing key (keys=40, expected=80) [ 749.049836][T24514] pim6reg: entered allmulticast mode [ 749.213400][T24521] pim6reg: left allmulticast mode [ 749.571548][T24536] bridge5: entered promiscuous mode [ 749.571570][T24536] bridge5: entered allmulticast mode [ 749.600453][T24536] team0: Port device bridge5 added [ 749.601505][T24540] netlink: 'syz.7.4173': attribute type 1 has an invalid length. [ 749.634640][T24541] x_tables: ip_tables: osf match: only valid for protocol 6 [ 749.700468][T24540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 749.811144][T24543] bond3: (slave veth5): Enslaving as an active interface with a down link [ 749.820634][T24540] bond3: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 750.187345][T24557] veth0: entered promiscuous mode [ 751.069895][T24584] bond6: option lacp_active: invalid value (5) [ 751.082797][T24584] bond6 (unregistering): Released all slaves [ 751.135404][T24587] tipc: Failed to remove unknown binding: 66,0,2/0:425964503/425964504 [ 751.135922][T24587] tipc: Failed to remove unknown binding: 66,0,2/0:425964503/425964504 [ 751.429192][T24597] __nla_validate_parse: 60 callbacks suppressed [ 751.429212][T24597] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4190'. [ 751.779088][T24609] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4194'. [ 751.968526][T24622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4196'. [ 752.047956][T24623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'. [ 752.167928][T24621] netlink: 'syz.7.4193': attribute type 1 has an invalid length. [ 752.183912][T24610] netlink: 'syz.7.4193': attribute type 1 has an invalid length. [ 752.412841][T24622] bond6: entered promiscuous mode [ 752.413597][T24622] 8021q: adding VLAN 0 to HW filter on device bond6 [ 752.440631][T24624] 8021q: adding VLAN 0 to HW filter on device bond6 [ 752.451639][T24624] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 752.478276][T24624] bond6: (slave sit2): Error -95 calling set_mac_address [ 752.726428][T24632] netlink: 'syz.5.4197': attribute type 15 has an invalid length. [ 753.650528][T24651] tipc: Disabling bearer [ 753.739360][T24653] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 754.045506][T24698] ip6erspan0: entered allmulticast mode [ 754.153182][T24697] tap0: tun_chr_ioctl cmd 1079531642 [ 754.305907][T24697] tap0: tun_chr_ioctl cmd 2152240185 [ 754.309822][T24697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4209'. [ 754.309847][T24697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4209'. [ 754.340768][T24697] tap0: tun_chr_ioctl cmd 1074025680 [ 755.049704][T24731] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4211'. [ 755.082829][T24733] syzkaller0: entered promiscuous mode [ 755.082852][T24733] syzkaller0: entered allmulticast mode [ 755.351608][T24742] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 755.416496][T24738] tipc: Enabled bearer , priority 0 [ 755.428885][T24733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 755.559334][T24747] x_tables: unsorted underflow at hook 2 [ 755.570797][T24732] tipc: Resetting bearer [ 755.647349][T24732] tipc: Disabling bearer [ 756.010184][T24756] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 756.019531][T24754] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 756.180875][T24754] IPVS: set_ctl: invalid protocol: 47 172.30.0.6:20003 [ 756.803045][T24788] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4227'. [ 756.993447][T24800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4228'. [ 757.111083][T24809] netlink: 'syz.3.4228': attribute type 10 has an invalid length. [ 757.111105][T24809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4228'. [ 757.380433][T24800] 8021q: adding VLAN 0 to HW filter on device bond5 [ 757.450814][T24809] dummy0: entered promiscuous mode [ 757.451552][T24809] netlink: 'syz.3.4228': attribute type 10 has an invalid length. [ 757.451569][T24809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4228'. [ 757.480178][T24792] syzkaller1: entered promiscuous mode [ 757.480201][T24792] syzkaller1: entered allmulticast mode [ 757.486392][T24809] netlink: 'syz.3.4228': attribute type 10 has an invalid length. [ 757.486411][T24809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4228'. [ 757.569789][T24819] tipc: Started in network mode [ 757.569849][T24819] tipc: Node identity ac14140f, cluster identity 4711 [ 757.570128][T24819] tipc: New replicast peer: 255.255.255.255 [ 757.608654][T24819] tipc: Enabled bearer , priority 10 [ 757.682285][T24819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4229'. [ 757.720729][T24823] netlink: 'syz.5.4229': attribute type 1 has an invalid length. [ 758.180208][T24834] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4229'. [ 758.310888][T24823] bond1: entered promiscuous mode [ 758.311287][T24823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.368316][T24834] bond1: entered allmulticast mode [ 758.587275][T24823] bond1: (slave bridge1): making interface the new active one [ 758.587489][T24823] bridge1: entered promiscuous mode [ 758.588658][T24823] bridge1: entered allmulticast mode [ 758.616697][T24823] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 758.700239][T14323] tipc: Node number set to 2886997007 [ 758.950395][T24853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4237'. [ 758.971391][T24853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4237'. [ 759.065405][T24861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4240'. [ 759.180478][T24866] netlink: 'syz.3.4241': attribute type 1 has an invalid length. [ 759.217454][T24866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 759.674950][T24864] rxe_eth0 speed is unknown, defaulting to 1000 [ 759.845314][T24884] net_ratelimit: 122 callbacks suppressed [ 759.845334][T24884] ip_tables: iptables: counters copy to user failed while replacing table [ 761.219503][T24910] syzkaller1: entered promiscuous mode [ 761.219527][T24910] syzkaller1: entered allmulticast mode [ 761.253240][T24912] syzkaller0: entered promiscuous mode [ 761.253449][T24912] syzkaller0: entered allmulticast mode [ 761.812627][T20062] Bluetooth: hci4: command 0x0405 tx timeout [ 761.921612][T24933] netlink: 'syz.6.4253': attribute type 62 has an invalid length. [ 762.229965][T24940] __nla_validate_parse: 3 callbacks suppressed [ 762.229985][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 762.324323][T24943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4256'. [ 762.354332][T24947] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4259'. [ 762.681064][T24952] tipc: Enabled bearer , priority 10 [ 763.307550][T24976] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 763.326696][T24971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.364268][T24976] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 763.427846][T24950] tipc: Resetting bearer [ 763.485222][T24950] tipc: Disabling bearer [ 763.879268][T24996] ip_tables: iptables: counters copy to user failed while replacing table [ 764.186604][T25004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4271'. [ 764.295546][T25006] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4273'. [ 764.626893][T25016] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4275'. [ 764.626921][T25016] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4275'. [ 765.177700][T25026] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 765.177761][T25026] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 765.177797][T25026] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 765.522395][T25042] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4281'. [ 765.523150][T25039] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4281'. [ 765.818959][T25046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4283'. [ 765.999504][T25053] 8021q: VLANs not supported on sit0 [ 767.258288][T25072] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 767.258313][T25072] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 767.449129][T25097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4298'. [ 767.558082][T25100] netlink: 'syz.5.4299': attribute type 5 has an invalid length. [ 767.558105][T25100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4299'. [ 767.607658][T25100] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4299'. [ 767.957569][T25114] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4303'. [ 768.184101][T25120] netlink: 'syz.3.4304': attribute type 2 has an invalid length. [ 768.184127][T25120] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4304'. [ 768.805462][T25132] netlink: 'syz.3.4309': attribute type 1 has an invalid length. [ 768.967197][T25141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4309'. [ 769.008153][T25132] 8021q: adding VLAN 0 to HW filter on device bond7 [ 769.394608][T25142] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 770.340282][T25190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4317'. [ 770.681171][T25200] ip_tables: iptables: counters copy to user failed while replacing table [ 770.885559][T25204] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4320'. [ 771.906030][T25236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4330'. [ 771.906053][T25236] netlink: 356 bytes leftover after parsing attributes in process `syz.2.4330'. [ 772.074363][T25239] ip_tables: iptables: counters copy to user failed while replacing table [ 772.098352][T25239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.466923][T25249] netlink: 'syz.6.4336': attribute type 1 has an invalid length. [ 772.487081][T25247] netlink: 'syz.3.4334': attribute type 12 has an invalid length. [ 772.487102][T25247] __nla_validate_parse: 4 callbacks suppressed [ 772.487112][T25247] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4334'. [ 772.492820][T25247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4334'. [ 772.637871][T25249] bond8: entered promiscuous mode [ 772.638265][T25249] 8021q: adding VLAN 0 to HW filter on device bond8 [ 772.756737][T25265] FAULT_INJECTION: forcing a failure. [ 772.756737][T25265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.756770][T25265] CPU: 0 UID: 0 PID: 25265 Comm: syz.3.4339 Not tainted syzkaller #0 PREEMPT(full) [ 772.756791][T25265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 772.756802][T25265] Call Trace: [ 772.756810][T25265] [ 772.756818][T25265] dump_stack_lvl+0xe8/0x150 [ 772.756852][T25265] should_fail_ex+0x3eb/0x540 [ 772.756880][T25265] _copy_from_iter+0x1d3/0x1680 [ 772.756900][T25265] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 772.756935][T25265] ? __pfx__copy_from_iter+0x10/0x10 [ 772.756961][T25265] ? dev_get_by_index+0x22/0x2d0 [ 772.756985][T25265] ? dev_get_by_index+0x22/0x2d0 [ 772.757015][T25265] packet_sendmsg+0x31a6/0x5310 [ 772.757039][T25265] ? aa_label_sk_perm+0x532/0x6e0 [ 772.757066][T25265] ? lock_acquire+0x115/0x350 [ 772.757103][T25265] ? __lock_acquire+0x747/0x2de0 [ 772.757132][T25265] ? __lock_acquire+0x747/0x2de0 [ 772.757157][T25265] ? __lock_acquire+0x747/0x2de0 [ 772.757183][T25265] ? kstrtouint+0x6e/0xe0 [ 772.757208][T25265] ? __pfx_packet_sendmsg+0x10/0x10 [ 772.757229][T25265] ? aa_sk_perm+0x6ff/0x8f0 [ 772.757261][T25265] ? __pfx_lock_chain_count+0x10/0x10 [ 772.757282][T25265] ? __pfx_aa_sk_perm+0x10/0x10 [ 772.757309][T25265] ? aa_sock_msg_perm+0x144/0x210 [ 772.757332][T25265] ? apparmor_socket_sendmsg+0x98/0x360 [ 772.757358][T25265] ? __pfx_packet_sendmsg+0x10/0x10 [ 772.757381][T25265] sock_sendmsg_nosec+0x14e/0x190 [ 772.757409][T25265] __sys_sendto+0x408/0x5a0 [ 772.757426][T25265] ? ksys_write+0x1e6/0x270 [ 772.757469][T25265] ? __pfx___sys_sendto+0x10/0x10 [ 772.757485][T25265] ? __mutex_unlock_slowpath+0x731/0x900 [ 772.757521][T25265] ? fdget+0x1ac/0x250 [ 772.757563][T25265] ? __pfx_ksys_write+0x10/0x10 [ 772.757594][T25265] __x64_sys_sendto+0xde/0x100 [ 772.757616][T25265] do_syscall_64+0x166/0x520 [ 772.757637][T25265] ? trace_irq_disable+0x3b/0x140 [ 772.757661][T25265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.757679][T25265] ? clear_bhb_loop+0x70/0xc0 [ 772.757704][T25265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.757722][T25265] RIP: 0033:0x7f93b919fb19 [ 772.757739][T25265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.757754][T25265] RSP: 002b:00007f93ba06e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 772.757774][T25265] RAX: ffffffffffffffda RBX: 00007f93b9425fa0 RCX: 00007f93b919fb19 [ 772.757787][T25265] RDX: 000000000000fef2 RSI: 00002000000058c0 RDI: 0000000000000003 [ 772.757799][T25265] RBP: 00007f93ba06e090 R08: 0000200000005900 R09: 0000000000000014 [ 772.757810][T25265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.757821][T25265] R13: 00007f93b9426038 R14: 00007f93b9425fa0 R15: 00007ffddc77e728 [ 772.757852][T25265] [ 772.759060][T25256] syzkaller0: entered promiscuous mode [ 772.759077][T25256] syzkaller0: entered allmulticast mode [ 773.294818][T25262] tipc: Enabled bearer , priority 0 [ 773.338939][T25255] tipc: Resetting bearer [ 773.527730][T25284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.564076][T25255] tipc: Disabling bearer [ 773.868112][T25294] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4344'. [ 773.969942][T25301] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4346'. [ 774.001944][T25305] netlink: 'syz.5.4347': attribute type 1 has an invalid length. [ 774.161915][T13825] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.162259][ T6365] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.162294][ T6365] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.181606][T13825] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.908483][T25348] ip_tables: iptables: counters copy to user failed while replacing table [ 774.982656][T25351] x_tables: unsorted entry at hook 2 [ 775.340755][T25356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.444864][T25359] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4359'. [ 776.682285][T25379] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4364'. [ 776.852025][T20639] IPVS: ip_vs_send_async error -101 [ 776.962664][T25382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4365'. [ 776.962696][T25382] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4365'. [ 777.269635][T25392] tipc: Enabling of bearer rejected, failed to enable media [ 777.401928][T25392] xt_hashlimit: size too large, truncated to 1048576 [ 777.550115][T25397] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.870354][T25408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4371'. [ 778.247193][T25397] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.363138][T25397] vlan3 (unregistering): left promiscuous mode [ 778.363163][T25397] bridge_slave_0 (unregistering): left promiscuous mode [ 778.363243][T25397] bridge0: port 3(vlan3) entered disabled state [ 778.856907][T25428] netlink: 'syz.6.4379': attribute type 25 has an invalid length. [ 778.886163][T25430] netlink: 'syz.6.4379': attribute type 25 has an invalid length. [ 778.984543][T25433] lo: entered allmulticast mode [ 779.119181][T25439] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4381'. [ 779.139570][T25439] netlink: 'syz.3.4381': attribute type 13 has an invalid length. [ 779.538186][T25420] lo: left allmulticast mode [ 779.898205][T25466] netlink: zone id is out of range [ 779.898221][T25466] netlink: zone id is out of range [ 779.898229][T25466] netlink: set zone limit has 8 unknown bytes [ 780.174552][T25480] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 780.355215][T25485] ip_tables: iptables: counters copy to user failed while replacing table [ 780.383408][T25485] syzkaller1: entered promiscuous mode [ 780.383431][T25485] syzkaller1: entered allmulticast mode [ 780.385817][T25485] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4394'. [ 780.386652][T25485] netlink: Conntrack attr has 8 unknown bytes [ 780.420641][T25487] netlink: 'syz.3.4395': attribute type 1 has an invalid length. [ 780.470107][T25487] bond8: entered promiscuous mode [ 780.470597][T25487] 8021q: adding VLAN 0 to HW filter on device bond8 [ 780.538072][T25487] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4395'. [ 780.579508][T25491] syzkaller1: entered promiscuous mode [ 780.579692][T25491] syzkaller1: entered allmulticast mode [ 781.120495][T25506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4399'. [ 781.209394][T25506] vlan1: Caught tx_queue_len zero misconfig [ 781.346656][T25514] xt_IDLETIMER: label is empty or not nul-terminated [ 781.647496][T25523] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4405'. [ 781.763200][T25534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'. [ 781.908127][T25526] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4406'. [ 781.909794][T25529] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4406'. [ 782.198048][T25548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4409'. [ 782.619100][T25562] netlink: 'syz.3.4412': attribute type 1 has an invalid length. [ 783.350027][T25587] __nla_validate_parse: 33 callbacks suppressed [ 783.350048][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4419'. [ 783.456725][T25596] openvswitch: netlink: Actions may not be safe on all matching packets [ 783.473443][T25596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'. [ 783.494581][T25595] syz.7.4420 (25595) used obsolete PPPIOCDETACH ioctl [ 783.501987][T25595] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4420'. [ 783.502010][T25595] netlink: 11 bytes leftover after parsing attributes in process `syz.7.4420'. [ 783.502025][T25595] netlink: 11 bytes leftover after parsing attributes in process `syz.7.4420'. [ 783.502038][T25595] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4420'. [ 783.579154][T25600] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4420'. [ 783.620109][T25595] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 783.676961][T25595] bond4 (unregistering): Released all slaves [ 784.100537][T25613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4424'. [ 784.365453][T25613] netlink: 'syz.3.4424': attribute type 6 has an invalid length. [ 785.470190][T25655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 785.703183][T25668] xt_TCPMSS: Only works on TCP SYN packets [ 785.704404][T25668] Bluetooth: hci0: unsupported parameter 5135 [ 785.704423][T25668] Bluetooth: hci0: unsupported parameter 8192 [ 785.704434][T25668] Bluetooth: hci0: unsupported parameter 5135 [ 785.704445][T25668] Bluetooth: hci0: unsupported parameter 8192 [ 785.788474][T25672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4442'. [ 785.797324][T25672] sctp: [Deprecated]: syz.7.4442 (pid 25672) Use of int in max_burst socket option. [ 785.797324][T25672] Use struct sctp_assoc_value instead [ 785.950189][T25675] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 786.110052][T25678] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 786.638693][T25686] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4448'. [ 788.795304][T25780] __nla_validate_parse: 2 callbacks suppressed [ 788.795325][T25780] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4466'. [ 788.861232][T25774] netlink: 'syz.2.4464': attribute type 1 has an invalid length. [ 789.004584][T25774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 789.063372][T25790] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4469'. [ 789.116705][T25774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4464'. [ 789.232072][T25796] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4468'. [ 790.388539][T25824] macsec1: entered promiscuous mode [ 790.696138][T25832] syzkaller1: entered promiscuous mode [ 790.696162][T25832] syzkaller1: entered allmulticast mode [ 790.715181][T25832] netlink: 'syz.7.4477': attribute type 1 has an invalid length. [ 790.846021][T25838] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 790.846021][T25838] Please contact the netfilter-devel mailing list or update your nftables rules. [ 790.989606][T25846] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4480'. [ 791.027189][T25841] bridge2: entered allmulticast mode [ 791.121281][T25842] bridge3: entered allmulticast mode [ 791.806307][T25877] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4490'. [ 791.811250][T25877] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4490'. [ 791.811278][T25877] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4490'. [ 791.954887][T25882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4492'. [ 792.098237][T25873] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4489'. [ 792.491432][T25897] netlink: 'syz.6.4498': attribute type 5 has an invalid length. [ 792.726497][T25897] bond9: peer notification delay (37) is not a multiple of miimon (100), value rounded to 0 ms [ 792.786631][T25897] bond9 (unregistering): Released all slaves [ 793.363048][T25926] netlink: 'syz.6.4504': attribute type 1 has an invalid length. [ 793.746017][T25942] hsr_slave_0: left promiscuous mode [ 793.750978][T25942] hsr_slave_1: left promiscuous mode [ 794.222327][T25955] ip6erspan1: entered allmulticast mode [ 794.281139][T25955] __nla_validate_parse: 7 callbacks suppressed [ 794.281158][T25955] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4511'. [ 794.333653][T25966] xt_connbytes: Forcing CT accounting to be enabled [ 794.456192][T25971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4515'. [ 794.505017][T25966] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4513'. [ 794.739847][T25978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.768758][T25978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.479923][T25991] FAULT_INJECTION: forcing a failure. [ 795.479923][T25991] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 795.479954][T25991] CPU: 0 UID: 0 PID: 25991 Comm: syz.7.4524 Not tainted syzkaller #0 PREEMPT(full) [ 795.479974][T25991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 795.479986][T25991] Call Trace: [ 795.479993][T25991] [ 795.480000][T25991] dump_stack_lvl+0xe8/0x150 [ 795.480035][T25991] should_fail_ex+0x3eb/0x540 [ 795.480063][T25991] prepare_alloc_pages+0x21e/0x5f0 [ 795.480095][T25991] __alloc_frozen_pages_noprof+0x17c/0x410 [ 795.480120][T25991] ? __lock_acquire+0x747/0x2de0 [ 795.480145][T25991] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 795.480174][T25991] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 795.480196][T25991] ? __get_vm_area_node+0x155/0x2f0 [ 795.480214][T25991] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 795.480236][T25991] ? policy_nodemask+0x31b/0x980 [ 795.480252][T25991] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 795.480271][T25991] ? do_syscall_64+0x166/0x520 [ 795.480292][T25991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.480316][T25991] alloc_pages_mpol+0x21e/0x390 [ 795.480341][T25991] alloc_pages_noprof+0xb1/0x2b0 [ 795.480362][T25991] get_free_pages_noprof+0xf/0x80 [ 795.480386][T25991] __kasan_populate_vmalloc+0x38/0x1c0 [ 795.480410][T25991] ? do_raw_spin_unlock+0xf5/0x200 [ 795.480436][T25991] alloc_vmap_area+0xd10/0x1410 [ 795.480472][T25991] ? __pfx_alloc_vmap_area+0x10/0x10 [ 795.480488][T25991] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 795.480512][T25991] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 795.480535][T25991] ? __get_vm_area_node+0x155/0x2f0 [ 795.480559][T25991] __get_vm_area_node+0x200/0x2f0 [ 795.480586][T25991] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 795.480607][T25991] ? do_replace+0x22f/0x470 [ 795.480632][T25991] ? __lock_acquire+0x747/0x2de0 [ 795.480673][T25991] ? __pfx_process_measurement+0x10/0x10 [ 795.480702][T25991] ? lock_acquire+0x115/0x350 [ 795.480726][T25991] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 795.480759][T25991] ? do_replace+0x22f/0x470 [ 795.480781][T25991] __vmalloc_noprof+0xd2/0x120 [ 795.480801][T25991] ? do_replace+0x22f/0x470 [ 795.480827][T25991] do_replace+0x22f/0x470 [ 795.480854][T25991] ? __pfx_do_replace+0x10/0x10 [ 795.480891][T25991] ? bpf_lsm_capable+0x9/0x20 [ 795.480914][T25991] ? security_capable+0x7e/0x2c0 [ 795.480946][T25991] do_ebt_set_ctl+0x2fb/0x1020 [ 795.480974][T25991] ? __lock_acquire+0x747/0x2de0 [ 795.480996][T25991] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 795.481023][T25991] ? kstrtouint+0x6e/0xe0 [ 795.481039][T25991] ? begin_current_label_crit_section+0x299/0x830 [ 795.481062][T25991] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 795.481081][T25991] ? get_pid_task+0x20/0x1f0 [ 795.481109][T25991] ? __mutex_trylock_common+0x15f/0x270 [ 795.481139][T25991] ? __pfx___mutex_trylock_common+0x10/0x10 [ 795.481168][T25991] ? rcu_is_watching+0x16/0xb0 [ 795.481194][T25991] ? trace_contention_end+0x3d/0x140 [ 795.481231][T25991] ? nf_setsockopt+0x221/0x290 [ 795.481258][T25991] ? __mutex_unlock_slowpath+0x731/0x900 [ 795.481288][T25991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 795.481326][T25991] nf_setsockopt+0x26f/0x290 [ 795.481351][T25991] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 795.481379][T25991] do_sock_setsockopt+0x17c/0x1b0 [ 795.481403][T25991] __x64_sys_setsockopt+0x13d/0x1b0 [ 795.481428][T25991] do_syscall_64+0x166/0x520 [ 795.481449][T25991] ? trace_irq_disable+0x3b/0x140 [ 795.481472][T25991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.481490][T25991] ? clear_bhb_loop+0x70/0xc0 [ 795.481512][T25991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.481530][T25991] RIP: 0033:0x7f3d0959fb19 [ 795.481547][T25991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.481563][T25991] RSP: 002b:00007f3d0a3e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 795.481583][T25991] RAX: ffffffffffffffda RBX: 00007f3d09825fa0 RCX: 00007f3d0959fb19 [ 795.481596][T25991] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 795.481606][T25991] RBP: 00007f3d0a3e4090 R08: 00000000000004f0 R09: 0000000000000000 [ 795.481618][T25991] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 795.481629][T25991] R13: 00007f3d09826038 R14: 00007f3d09825fa0 R15: 00007fff52be3668 [ 795.481654][T25991] [ 795.652231][T25991] syz.7.4524: vmalloc error: size 256, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 795.652329][T25991] CPU: 0 UID: 0 PID: 25991 Comm: syz.7.4524 Not tainted syzkaller #0 PREEMPT(full) [ 795.652347][T25991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 795.652357][T25991] Call Trace: [ 795.652364][T25991] [ 795.652370][T25991] dump_stack_lvl+0xe8/0x150 [ 795.652400][T25991] warn_alloc+0x24d/0x270 [ 795.652424][T25991] ? lockdep_hardirqs_on+0x7b/0x110 [ 795.652460][T25991] ? __pfx_warn_alloc+0x10/0x10 [ 795.652482][T25991] ? kfree+0x1c5/0x650 [ 795.652509][T25991] ? __get_vm_area_node+0x219/0x2f0 [ 795.652537][T25991] __vmalloc_node_range_noprof+0x396/0x16f0 [ 795.652560][T25991] ? __lock_acquire+0x747/0x2de0 [ 795.652600][T25991] ? __pfx_process_measurement+0x10/0x10 [ 795.652629][T25991] ? lock_acquire+0x115/0x350 [ 795.652653][T25991] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 795.652689][T25991] ? do_replace+0x22f/0x470 [ 795.652711][T25991] __vmalloc_noprof+0xd2/0x120 [ 795.652731][T25991] ? do_replace+0x22f/0x470 [ 795.652758][T25991] do_replace+0x22f/0x470 [ 795.652785][T25991] ? __pfx_do_replace+0x10/0x10 [ 795.652818][T25991] ? bpf_lsm_capable+0x9/0x20 [ 795.652835][T25991] ? security_capable+0x7e/0x2c0 [ 795.652867][T25991] do_ebt_set_ctl+0x2fb/0x1020 [ 795.652895][T25991] ? __lock_acquire+0x747/0x2de0 [ 795.652917][T25991] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 795.652942][T25991] ? kstrtouint+0x6e/0xe0 [ 795.652958][T25991] ? begin_current_label_crit_section+0x299/0x830 [ 795.652980][T25991] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 795.652999][T25991] ? get_pid_task+0x20/0x1f0 [ 795.653028][T25991] ? __mutex_trylock_common+0x15f/0x270 [ 795.653056][T25991] ? __pfx___mutex_trylock_common+0x10/0x10 [ 795.653085][T25991] ? rcu_is_watching+0x16/0xb0 [ 795.653111][T25991] ? trace_contention_end+0x3d/0x140 [ 795.653147][T25991] ? nf_setsockopt+0x221/0x290 [ 795.653175][T25991] ? __mutex_unlock_slowpath+0x731/0x900 [ 795.653204][T25991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 795.653242][T25991] nf_setsockopt+0x26f/0x290 [ 795.653266][T25991] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 795.653294][T25991] do_sock_setsockopt+0x17c/0x1b0 [ 795.653318][T25991] __x64_sys_setsockopt+0x13d/0x1b0 [ 795.653342][T25991] do_syscall_64+0x166/0x520 [ 795.653363][T25991] ? trace_irq_disable+0x3b/0x140 [ 795.653387][T25991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.653405][T25991] ? clear_bhb_loop+0x70/0xc0 [ 795.653433][T25991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.653451][T25991] RIP: 0033:0x7f3d0959fb19 [ 795.653468][T25991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.653482][T25991] RSP: 002b:00007f3d0a3e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 795.653500][T25991] RAX: ffffffffffffffda RBX: 00007f3d09825fa0 RCX: 00007f3d0959fb19 [ 795.653513][T25991] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 795.653524][T25991] RBP: 00007f3d0a3e4090 R08: 00000000000004f0 R09: 0000000000000000 [ 795.653535][T25991] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 795.653546][T25991] R13: 00007f3d09826038 R14: 00007f3d09825fa0 R15: 00007fff52be3668 [ 795.653577][T25991] [ 795.905162][T25991] Mem-Info: [ 795.905178][T25991] active_anon:11695 inactive_anon:0 isolated_anon:0 [ 795.905178][T25991] active_file:2 inactive_file:44026 isolated_file:0 [ 795.905178][T25991] unevictable:0 dirty:56 writeback:0 [ 795.905178][T25991] slab_reclaimable:12251 slab_unreclaimable:114922 [ 795.905178][T25991] mapped:29608 shmem:549 pagetables:6174 [ 795.905178][T25991] sec_pagetables:0 bounce:0 [ 795.905178][T25991] kernel_misc_reclaimable:0 [ 795.905178][T25991] free:1250902 free_pcp:9992 free_cma:0 [ 795.905232][T25991] Node 0 active_anon:46780kB inactive_anon:0kB active_file:8kB inactive_file:175912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118432kB dirty:224kB writeback:0kB shmem:2196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16444kB pagetables:24548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 795.905280][T25991] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 795.905323][T25991] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.905375][T25991] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 795.905407][T25991] Node 0 DMA32 free:1053472kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:46780kB inactive_anon:0kB active_file:8kB inactive_file:175912kB unevictable:0kB writepending:224kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:39212kB local_pcp:23280kB free_cma:0kB [ 795.905459][T25991] lowmem_reserve[]: 0 0 1 1 1 [ 795.905488][T25991] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 795.905537][T25991] lowmem_reserve[]: 0 0 0 0 0 [ 795.905565][T25991] Node 1 Normal free:3934776kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 795.905617][T25991] lowmem_reserve[]: 0 0 0 0 0 [ 795.905646][T25991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 795.905750][T25991] Node 0 DMA32: 2338*4kB (UM) 2025*8kB (UME) 1825*16kB (UM) 1470*32kB (UME) 1080*64kB (UME) 1165*128kB (UME) 613*256kB (UME) 410*512kB (UME) 200*1024kB (UM) 45*2048kB (UM) 17*4096kB (UM) = 1053472kB [ 795.905895][T25991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 795.905995][T25991] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 3*128kB (UM) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (UM) = 3934776kB [ 795.906129][T25991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.906171][T25991] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 795.906185][T25991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.906199][T25991] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 795.906213][T25991] 44573 total pagecache pages [ 795.906224][T25991] 0 pages in swap cache [ 795.906230][T25991] Free swap = 124996kB [ 795.906237][T25991] Total swap = 124996kB [ 795.906244][T25991] 2097051 pages RAM [ 795.906250][T25991] 0 pages HighMem/MovableOnly [ 795.906256][T25991] 434380 pages reserved [ 795.906262][T25991] 0 pages cma reserved [ 796.804582][T25996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4526'. [ 797.079892][T26000] syzkaller1: entered promiscuous mode [ 797.079913][T26000] syzkaller1: entered allmulticast mode [ 797.100812][T26001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4527'. [ 797.100859][T26001] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4527'. [ 797.131580][T26000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4527'. [ 797.131618][T26000] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4527'. [ 797.693332][T26032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 797.928396][T26042] FAULT_INJECTION: forcing a failure. [ 797.928396][T26042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.928428][T26042] CPU: 0 UID: 0 PID: 26042 Comm: syz.3.4538 Not tainted syzkaller #0 PREEMPT(full) [ 797.928448][T26042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 797.928459][T26042] Call Trace: [ 797.928466][T26042] [ 797.928474][T26042] dump_stack_lvl+0xe8/0x150 [ 797.928508][T26042] should_fail_ex+0x3eb/0x540 [ 797.928535][T26042] prepare_alloc_pages+0x21e/0x5f0 [ 797.928566][T26042] __alloc_frozen_pages_noprof+0x17c/0x410 [ 797.928595][T26042] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 797.928618][T26042] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 797.928645][T26042] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 797.928673][T26042] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 797.928695][T26042] ? __get_vm_area_node+0x155/0x2f0 [ 797.928717][T26042] __alloc_pages_noprof+0x10/0x100 [ 797.928743][T26042] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 797.928777][T26042] ? alloc_pages_noprof+0x140/0x2b0 [ 797.928800][T26042] __kasan_populate_vmalloc+0xb7/0x1c0 [ 797.928831][T26042] alloc_vmap_area+0xd10/0x1410 [ 797.928866][T26042] ? __pfx_alloc_vmap_area+0x10/0x10 [ 797.928885][T26042] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 797.928909][T26042] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 797.928931][T26042] ? __get_vm_area_node+0x155/0x2f0 [ 797.928955][T26042] __get_vm_area_node+0x200/0x2f0 [ 797.928982][T26042] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 797.929003][T26042] ? do_replace+0x22f/0x470 [ 797.929027][T26042] ? __lock_acquire+0x747/0x2de0 [ 797.929069][T26042] ? __pfx_process_measurement+0x10/0x10 [ 797.929097][T26042] ? lock_acquire+0x115/0x350 [ 797.929121][T26042] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 797.929154][T26042] ? do_replace+0x22f/0x470 [ 797.929176][T26042] __vmalloc_noprof+0xd2/0x120 [ 797.929203][T26042] ? do_replace+0x22f/0x470 [ 797.929230][T26042] do_replace+0x22f/0x470 [ 797.929256][T26042] ? __pfx_do_replace+0x10/0x10 [ 797.929292][T26042] ? bpf_lsm_capable+0x9/0x20 [ 797.929309][T26042] ? security_capable+0x7e/0x2c0 [ 797.929341][T26042] do_ebt_set_ctl+0x2fb/0x1020 [ 797.929369][T26042] ? __lock_acquire+0x747/0x2de0 [ 797.929390][T26042] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 797.929417][T26042] ? kstrtouint+0x6e/0xe0 [ 797.929433][T26042] ? begin_current_label_crit_section+0x299/0x830 [ 797.929455][T26042] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 797.929474][T26042] ? get_pid_task+0x20/0x1f0 [ 797.929503][T26042] ? __mutex_trylock_common+0x15f/0x270 [ 797.929532][T26042] ? __pfx___mutex_trylock_common+0x10/0x10 [ 797.929561][T26042] ? rcu_is_watching+0x16/0xb0 [ 797.929586][T26042] ? trace_contention_end+0x3d/0x140 [ 797.929623][T26042] ? nf_setsockopt+0x221/0x290 [ 797.929651][T26042] ? __mutex_unlock_slowpath+0x731/0x900 [ 797.929681][T26042] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 797.929719][T26042] nf_setsockopt+0x26f/0x290 [ 797.929744][T26042] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 797.929772][T26042] do_sock_setsockopt+0x17c/0x1b0 [ 797.929796][T26042] __x64_sys_setsockopt+0x13d/0x1b0 [ 797.929822][T26042] do_syscall_64+0x166/0x520 [ 797.929843][T26042] ? trace_irq_disable+0x3b/0x140 [ 797.929866][T26042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.929884][T26042] ? clear_bhb_loop+0x70/0xc0 [ 797.929906][T26042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.929924][T26042] RIP: 0033:0x7f93b919fb19 [ 797.929941][T26042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.929956][T26042] RSP: 002b:00007f93ba06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 797.929975][T26042] RAX: ffffffffffffffda RBX: 00007f93b9425fa0 RCX: 00007f93b919fb19 [ 797.929988][T26042] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 797.929998][T26042] RBP: 00007f93ba06e090 R08: 00000000000004f0 R09: 0000000000000000 [ 797.930010][T26042] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 797.930020][T26042] R13: 00007f93b9426038 R14: 00007f93b9425fa0 R15: 00007ffddc77e728 [ 797.930052][T26042] [ 798.489564][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4540'. [ 798.682299][T26054] netlink: 'syz.3.4544': attribute type 8 has an invalid length. [ 798.848323][ T30] audit: type=1800 audit(1794131046.531:91): pid=26061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4546" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1601 res=0 errno=-22 [ 799.180592][T26076] FAULT_INJECTION: forcing a failure. [ 799.180592][T26076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.180622][T26076] CPU: 0 UID: 0 PID: 26076 Comm: syz.5.4551 Not tainted syzkaller #0 PREEMPT(full) [ 799.180641][T26076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 799.180651][T26076] Call Trace: [ 799.180659][T26076] [ 799.180667][T26076] dump_stack_lvl+0xe8/0x150 [ 799.180699][T26076] should_fail_ex+0x3eb/0x540 [ 799.180727][T26076] prepare_alloc_pages+0x21e/0x5f0 [ 799.180759][T26076] __alloc_frozen_pages_noprof+0x17c/0x410 [ 799.180788][T26076] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 799.180819][T26076] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 799.180844][T26076] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 799.180870][T26076] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 799.180891][T26076] ? __get_vm_area_node+0x155/0x2f0 [ 799.180912][T26076] __alloc_pages_noprof+0x10/0x100 [ 799.180935][T26076] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 799.180967][T26076] ? alloc_pages_noprof+0x140/0x2b0 [ 799.180994][T26076] __kasan_populate_vmalloc+0xb7/0x1c0 [ 799.181023][T26076] alloc_vmap_area+0xd10/0x1410 [ 799.181065][T26076] ? __pfx_alloc_vmap_area+0x10/0x10 [ 799.181081][T26076] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 799.181105][T26076] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 799.181128][T26076] ? __get_vm_area_node+0x155/0x2f0 [ 799.181152][T26076] __get_vm_area_node+0x200/0x2f0 [ 799.181179][T26076] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 799.181201][T26076] ? do_replace+0x22f/0x470 [ 799.181226][T26076] ? __lock_acquire+0x747/0x2de0 [ 799.181266][T26076] ? __pfx_process_measurement+0x10/0x10 [ 799.181294][T26076] ? lock_acquire+0x115/0x350 [ 799.181319][T26076] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 799.181352][T26076] ? do_replace+0x22f/0x470 [ 799.181374][T26076] __vmalloc_noprof+0xd2/0x120 [ 799.181394][T26076] ? do_replace+0x22f/0x470 [ 799.181421][T26076] do_replace+0x22f/0x470 [ 799.181448][T26076] ? __pfx_do_replace+0x10/0x10 [ 799.181488][T26076] ? bpf_lsm_capable+0x9/0x20 [ 799.181505][T26076] ? security_capable+0x7e/0x2c0 [ 799.181538][T26076] do_ebt_set_ctl+0x2fb/0x1020 [ 799.181566][T26076] ? __lock_acquire+0x747/0x2de0 [ 799.181594][T26076] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 799.181622][T26076] ? kstrtouint+0x6e/0xe0 [ 799.181636][T26076] ? begin_current_label_crit_section+0x299/0x830 [ 799.181656][T26076] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 799.181672][T26076] ? get_pid_task+0x20/0x1f0 [ 799.181698][T26076] ? __mutex_trylock_common+0x15f/0x270 [ 799.181727][T26076] ? __pfx___mutex_trylock_common+0x10/0x10 [ 799.181755][T26076] ? rcu_is_watching+0x16/0xb0 [ 799.181780][T26076] ? trace_contention_end+0x3d/0x140 [ 799.181816][T26076] ? nf_setsockopt+0x221/0x290 [ 799.181843][T26076] ? __mutex_unlock_slowpath+0x731/0x900 [ 799.181874][T26076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 799.181912][T26076] nf_setsockopt+0x26f/0x290 [ 799.181935][T26076] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 799.181964][T26076] do_sock_setsockopt+0x17c/0x1b0 [ 799.181988][T26076] __x64_sys_setsockopt+0x13d/0x1b0 [ 799.182012][T26076] do_syscall_64+0x166/0x520 [ 799.182032][T26076] ? trace_irq_disable+0x3b/0x140 [ 799.182055][T26076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.182071][T26076] ? clear_bhb_loop+0x70/0xc0 [ 799.182092][T26076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.182109][T26076] RIP: 0033:0x7f5e0059fb19 [ 799.182126][T26076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.182141][T26076] RSP: 002b:00007f5e01485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 799.182160][T26076] RAX: ffffffffffffffda RBX: 00007f5e00825fa0 RCX: 00007f5e0059fb19 [ 799.182173][T26076] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 799.182183][T26076] RBP: 00007f5e01485090 R08: 00000000000004f0 R09: 0000000000000000 [ 799.182195][T26076] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 799.182205][T26076] R13: 00007f5e00826038 R14: 00007f5e00825fa0 R15: 00007ffc52d12228 [ 799.182237][T26076] [ 799.658713][T26083] __nla_validate_parse: 6 callbacks suppressed [ 799.658733][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4553'. [ 799.727300][T26087] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 800.064674][T26093] ip6gre1: entered allmulticast mode [ 800.307105][T26085] bond9 (unregistering): Released all slaves [ 800.369328][T26122] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4559'. [ 800.393768][T26122] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 800.413665][T26122] netlink: 'syz.7.4559': attribute type 1 has an invalid length. [ 800.624421][T26100] rxe_eth0 speed is unknown, defaulting to 1000 [ 800.676547][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4557'. [ 800.924759][T26138] netlink: 'syz.5.4561': attribute type 2 has an invalid length. [ 800.924782][T26138] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4561'. [ 800.924797][T26138] nbd: must specify an index to disconnect [ 800.936705][T26141] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4561'. [ 801.403136][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4565'. [ 801.529094][T26158] vlan0: left promiscuous mode [ 801.569643][T26158] geneve1: left promiscuous mode [ 801.580171][T26158] vlan2: left promiscuous mode [ 801.580194][T26158] bridge0: left promiscuous mode [ 801.595638][T26158] bond1: left promiscuous mode [ 801.595659][T26158] bridge1: left promiscuous mode [ 801.600642][T26106] rxe_eth0 speed is unknown, defaulting to 1000 [ 801.912287][T26173] netlink: 'syz.5.4569': attribute type 2 has an invalid length. [ 802.444783][T26177] netlink: 'syz.7.4571': attribute type 11 has an invalid length. [ 802.448491][T26178] netlink: 'syz.7.4571': attribute type 11 has an invalid length. [ 802.595866][T26184] bond0: entered allmulticast mode [ 802.595890][T26184] bond_slave_0: entered allmulticast mode [ 802.596652][T26184] bond_slave_1: entered allmulticast mode [ 802.827989][T26194] tc_dump_action: action bad kind [ 802.897042][T26200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4573'. [ 803.871228][T26216] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4577'. [ 805.380112][T26256] syzkaller1: entered promiscuous mode [ 805.380136][T26256] syzkaller1: entered allmulticast mode [ 805.725748][T26271] syzkaller0: entered promiscuous mode [ 805.725769][T26271] syzkaller0: entered allmulticast mode [ 805.764309][T26276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4588'. [ 805.845969][T26276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4588'. [ 806.296831][T26293] batman_adv: batadv0: Adding interface: dummy0 [ 806.296851][T26293] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.307112][T26293] batman_adv: batadv0: Interface activated: dummy0 [ 806.415501][T26297] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4594'. [ 806.487474][T26296] bond9: option arp_interval: invalid value (18446744073709551615) [ 806.487500][T26296] bond9: option arp_interval: allowed values 0 - 2147483647 [ 806.521568][T26296] bond9 (unregistering): Released all slaves [ 806.778303][T26305] veth9: entered allmulticast mode [ 806.807616][T26305] bond4: (slave veth9): Enslaving as an active interface with an up link [ 806.955373][T26316] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 806.979054][T26316] xt_l2tp: v2 doesn't support IP mode [ 806.979303][T26318] xt_l2tp: v2 doesn't support IP mode [ 807.109797][T26328] netlink: 'syz.6.4605': attribute type 1 has an invalid length. [ 807.158801][T26316] xt_hashlimit: size too large, truncated to 1048576 [ 807.294933][T26333] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4603'. [ 807.510182][T26348] tipc: Enabling of bearer rejected, failed to enable media [ 807.577660][T26348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4602'. [ 808.436859][T26376] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 808.615165][T26372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.992675][T26405] syzkaller0: entered promiscuous mode [ 809.992856][T26405] syzkaller0: entered allmulticast mode [ 810.016719][T26405] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 810.793206][T26416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4626'. [ 810.968754][T26421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4627'. [ 811.048777][T26422] syzkaller0: entered promiscuous mode [ 811.509887][T26431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 811.546524][T26431] veth1_macvtap: left promiscuous mode [ 811.894857][T26439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4632'. [ 812.640445][T26454] ±ÿ: renamed from lo [ 813.475499][T26481] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4644'. [ 813.618609][T26482] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 813.618832][T26482] bond2: option tlb_dynamic_lb: invalid value (7) [ 813.640491][T26482] bond2 (unregistering): Released all slaves [ 813.669957][T26490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4645'. [ 813.696464][T26472] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4642'. [ 813.868488][T26494] pimreg0: tun_chr_ioctl cmd 1074025677 [ 813.870250][T26494] pimreg0: linktype set to 778 [ 813.889979][ T5296] veth1_macvtap: entered promiscuous mode [ 814.259889][T26503] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4648'. [ 814.770302][T26526] FAULT_INJECTION: forcing a failure. [ 814.770302][T26526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.770332][T26526] CPU: 0 UID: 0 PID: 26526 Comm: syz.3.4655 Not tainted syzkaller #0 PREEMPT(full) [ 814.770351][T26526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 814.770361][T26526] Call Trace: [ 814.770369][T26526] [ 814.770376][T26526] dump_stack_lvl+0xe8/0x150 [ 814.770408][T26526] should_fail_ex+0x3eb/0x540 [ 814.770434][T26526] _copy_from_user+0x2d/0xb0 [ 814.770456][T26526] ___sys_sendmsg+0x1c6/0x360 [ 814.770475][T26526] ? __lock_acquire+0x747/0x2de0 [ 814.770499][T26526] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.770520][T26526] ? lock_acquire+0x115/0x350 [ 814.770569][T26526] ? __fget_files+0x3a2/0x420 [ 814.770588][T26526] ? __fget_files+0x2a/0x420 [ 814.770618][T26526] __x64_sys_sendmsg+0x1b1/0x290 [ 814.770641][T26526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 814.770669][T26526] ? handle_softirqs+0x6d0/0x8d0 [ 814.770703][T26526] do_syscall_64+0x166/0x520 [ 814.770726][T26526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.770744][T26526] ? clear_bhb_loop+0x70/0xc0 [ 814.770767][T26526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.770784][T26526] RIP: 0033:0x7f93b919fb19 [ 814.770802][T26526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.770817][T26526] RSP: 002b:00007f93ba06e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.770835][T26526] RAX: ffffffffffffffda RBX: 00007f93b9425fa0 RCX: 00007f93b919fb19 [ 814.770848][T26526] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 814.770858][T26526] RBP: 00007f93ba06e090 R08: 0000000000000000 R09: 0000000000000000 [ 814.770868][T26526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.770878][T26526] R13: 00007f93b9426038 R14: 00007f93b9425fa0 R15: 00007ffddc77e728 [ 814.770908][T26526] [ 814.886383][T26527] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 814.886473][T26527] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 814.888453][T26527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 815.337752][T26536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4656'. [ 815.387921][T26536] nbd1: detected capacity change from 0 to 32 [ 815.388221][ T4951] block nbd1: Receive control failed (result -22) [ 815.415818][ T1998] block nbd1: Dead connection, failed to find a fallback [ 815.415842][ T1998] block nbd1: shutting down sockets [ 815.415929][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.416036][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.418004][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.418033][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.418405][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.418430][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.418537][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.418559][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.418661][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.418682][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.418808][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.418829][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.419472][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.419495][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.419604][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.419625][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.419667][T26395] ldm_validate_partition_table(): Disk read failed. [ 815.419753][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.419773][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.419876][ T1998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 815.419896][ T1998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 815.420338][T26395] Dev nbd1: unable to read RDB block 0 [ 815.421605][T26395] nbd1: unable to read partition table [ 815.533752][T26539] netlink: 'syz.7.4657': attribute type 1 has an invalid length. [ 815.631922][T26395] ldm_validate_partition_table(): Disk read failed. [ 815.633220][T26395] Dev nbd1: unable to read RDB block 0 [ 815.639941][T26395] nbd1: unable to read partition table [ 815.707779][T26539] 8021q: adding VLAN 0 to HW filter on device bond5 [ 815.744445][T26543] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 815.773550][T26543] bond5: entered allmulticast mode [ 815.777476][T26539] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 815.932229][T26539] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 816.048488][T26556] Bluetooth: hci0: unsupported parameter 5134 [ 816.048509][T26556] Bluetooth: hci0: unsupported parameter 8192 [ 816.048521][T26556] Bluetooth: hci0: unsupported parameter 5134 [ 816.048532][T26556] Bluetooth: hci0: unsupported parameter 8192 [ 816.120197][T26552] netlink: 'syz.3.4660': attribute type 1 has an invalid length. [ 816.120223][T26552] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4660'. [ 816.270641][T26567] FAULT_INJECTION: forcing a failure. [ 816.270641][T26567] name failslab, interval 1, probability 0, space 0, times 0 [ 816.270670][T26567] CPU: 0 UID: 0 PID: 26567 Comm: syz.6.4666 Not tainted syzkaller #0 PREEMPT(full) [ 816.270691][T26567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 816.270702][T26567] Call Trace: [ 816.270710][T26567] [ 816.270718][T26567] dump_stack_lvl+0xe8/0x150 [ 816.270752][T26567] should_fail_ex+0x3eb/0x540 [ 816.270777][T26567] ? __alloc_skb+0x1db/0x7a0 [ 816.270794][T26567] should_failslab+0xa8/0x100 [ 816.270813][T26567] ? __alloc_skb+0x1db/0x7a0 [ 816.270829][T26567] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 816.270852][T26567] ? __alloc_skb+0x18d/0x7a0 [ 816.270870][T26567] ? __alloc_skb+0x1db/0x7a0 [ 816.270896][T26567] __alloc_skb+0x1db/0x7a0 [ 816.270919][T26567] netlink_sendmsg+0x5cd/0xb20 [ 816.270945][T26567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.270966][T26567] ? aa_sock_msg_perm+0x144/0x210 [ 816.270989][T26567] ? apparmor_socket_sendmsg+0x98/0x360 [ 816.271016][T26567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.271032][T26567] sock_sendmsg_nosec+0x14e/0x190 [ 816.271059][T26567] ____sys_sendmsg+0x54e/0x850 [ 816.271087][T26567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.271116][T26567] ? import_iovec+0x73/0xa0 [ 816.271143][T26567] ___sys_sendmsg+0x2a5/0x360 [ 816.271161][T26567] ? __lock_acquire+0x747/0x2de0 [ 816.271188][T26567] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.271246][T26567] ? __fget_files+0x3a2/0x420 [ 816.271268][T26567] ? __fget_files+0x2a/0x420 [ 816.271298][T26567] __x64_sys_sendmsg+0x1b1/0x290 [ 816.271322][T26567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 816.271366][T26567] do_syscall_64+0x166/0x520 [ 816.271393][T26567] ? trace_irq_disable+0x3b/0x140 [ 816.271417][T26567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.271434][T26567] ? clear_bhb_loop+0x70/0xc0 [ 816.271457][T26567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.271474][T26567] RIP: 0033:0x7ff8c179fb19 [ 816.271491][T26567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.271506][T26567] RSP: 002b:00007ff8c2652028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.271525][T26567] RAX: ffffffffffffffda RBX: 00007ff8c1a25fa0 RCX: 00007ff8c179fb19 [ 816.271538][T26567] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 816.271550][T26567] RBP: 00007ff8c2652090 R08: 0000000000000000 R09: 0000000000000000 [ 816.271560][T26567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.271572][T26567] R13: 00007ff8c1a26038 R14: 00007ff8c1a25fa0 R15: 00007ffec09042b8 [ 816.271603][T26567] [ 816.910801][T26574] syzkaller0: entered promiscuous mode [ 816.910823][T26574] syzkaller0: entered allmulticast mode [ 816.965781][T26574] tipc: Enabled bearer , priority 0 [ 816.999233][T26579] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4667'. [ 817.018623][T26574] tipc: Resetting bearer [ 817.065298][T26573] tipc: Resetting bearer [ 817.140793][T26590] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4667'. [ 817.201439][T26582] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4669'. [ 817.201554][T26582] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4669'. [ 817.266006][T26573] tipc: Disabling bearer [ 817.814993][T26615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4674'. [ 818.523297][T26622] ip_tables: iptables: counters copy to user failed while replacing table [ 818.547840][T26623] ip_tables: iptables: counters copy to user failed while replacing table [ 820.370505][T26656] netlink: 'syz.5.4684': attribute type 1 has an invalid length. [ 820.537982][T26665] Bluetooth: hci0: unsupported parameter 5135 [ 820.538007][T26665] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 820.734086][T26661] netlink: 'syz.3.4682': attribute type 1 has an invalid length. [ 820.734109][T26661] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4682'. [ 820.784369][T26679] xt_connbytes: Forcing CT accounting to be enabled [ 820.784396][T26679] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 820.898167][T26686] netlink: 'syz.7.4692': attribute type 11 has an invalid length. [ 821.598807][T26706] netlink: 'syz.3.4694': attribute type 1 has an invalid length. [ 821.653395][T26710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4696'. [ 821.660823][T26710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4696'. [ 821.713317][T26712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4694'. [ 821.842788][T26706] 8021q: adding VLAN 0 to HW filter on device bond9 [ 821.888845][T26719] netlink: 'syz.2.4697': attribute type 1 has an invalid length. [ 821.915586][T26712] bridge4: entered promiscuous mode [ 821.945177][T26712] bond9: (slave bridge4): making interface the new active one [ 821.949366][T26712] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 822.117785][T26722] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4699'. [ 822.523522][T26740] syzkaller1: entered promiscuous mode [ 822.523545][T26740] syzkaller1: entered allmulticast mode [ 822.897136][T26745] xt_cgroup: invalid path, errno=-2 [ 823.279179][T26755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4709'. [ 823.407302][T26774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4710'. [ 823.407322][T26774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4710'. [ 823.490110][T26774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4710'. [ 823.585834][T26777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4711'. [ 823.588003][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4711'. [ 824.227514][T26796] netlink: 'syz.7.4717': attribute type 2 has an invalid length. [ 824.461595][T26796] !;: entered promiscuous mode [ 825.069963][T26806] syzkaller1: entered promiscuous mode [ 825.069985][T26806] syzkaller1: entered allmulticast mode [ 825.089289][T26809] syzkaller1: left promiscuous mode [ 825.089310][T26809] syzkaller1: left allmulticast mode [ 825.296027][T26840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 825.299539][T26835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 825.299735][T26842] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20004 [ 826.165752][T26868] vlan0: entered promiscuous mode [ 826.433410][T26880] vlan0: entered promiscuous mode [ 826.604839][T26876] veth5: entered allmulticast mode [ 826.881134][T26901] __nla_validate_parse: 5 callbacks suppressed [ 826.881156][T26901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4742'. [ 826.881176][T26901] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 827.595445][T26930] netlink: 'syz.7.4750': attribute type 1 has an invalid length. [ 827.654411][T26937] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4750'. [ 827.869402][T26930] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4750'. [ 828.581682][T26949] netlink: 272 bytes leftover after parsing attributes in process `syz.7.4753'. [ 829.419100][T26965] openvswitch: netlink: Message has -3 unknown bytes. [ 830.182757][T26990] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 830.187080][T26990] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 830.417624][T26997] xt_TCPMSS: Only works on TCP SYN packets [ 830.439215][T26997] xt_TCPMSS: Only works on TCP SYN packets [ 830.974292][T27008] ip6tnl1: entered allmulticast mode [ 830.988966][T27012] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 831.009458][ T6374] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 831.011169][ T6374] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 831.033976][T14315] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 831.281824][T27012] 8021q: adding VLAN 0 to HW filter on device bond8 [ 831.363807][T27020] Bluetooth: MGMT ver 1.23 [ 831.564058][T14315] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 831.601354][T27030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4770'. [ 832.013741][T14314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 832.108324][T27018] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 832.247065][T27044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4773'. [ 832.247089][T27044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4773'. [ 832.347468][T27045] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 832.858057][T27040] netlink: 65 bytes leftover after parsing attributes in process `syz.6.4772'. [ 833.772979][T27079] ip6erspan0: entered allmulticast mode [ 833.773653][T27082] netlink: 'syz.3.4783': attribute type 29 has an invalid length. [ 833.906230][T27087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4787'. [ 834.011646][T27088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4785'. [ 834.173494][T27091] netlink: 'syz.3.4788': attribute type 1 has an invalid length. [ 834.173545][T27091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 834.173556][T27091] IPv6: NLM_F_CREATE should be set when creating new route [ 834.400071][T27106] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4791'. [ 834.549683][T27109] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4791'. [ 834.567348][T27106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4791'. [ 834.594897][ T4951] block nbd2: Receive control failed (result -32) [ 834.781847][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 835.636558][T27143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4801'. [ 836.081086][T27147] syzkaller1: left promiscuous mode [ 836.081109][T27147] syzkaller1: left allmulticast mode [ 836.522820][T27166] netlink: 'syz.3.4807': attribute type 1 has an invalid length. [ 836.522842][T27166] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4807'. [ 836.724750][T27178] ip_tables: iptables: counters copy to user failed while replacing table [ 837.235587][T27203] netlink: 'syz.7.4817': attribute type 12 has an invalid length. [ 837.616572][T27208] __nla_validate_parse: 2 callbacks suppressed [ 837.616591][T27208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'. [ 837.648039][T27214] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4820'. [ 837.704255][T27210] tipc: Enabled bearer , priority 0 [ 837.713762][T27211] tipc: Enabling of bearer rejected, already enabled [ 837.841555][T27210] syzkaller0: entered promiscuous mode [ 837.841578][T27210] syzkaller0: entered allmulticast mode [ 837.858589][T27210] tipc: Resetting bearer [ 837.858931][T27221] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4819'. [ 837.858931][T27211] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4819'. [ 837.935049][T27228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4823'. [ 838.262171][T27239] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4824'. [ 838.268679][T27241] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4826'. [ 838.331463][ T1102] tipc: Resetting bearer [ 838.366404][T27209] tipc: Resetting bearer [ 838.501778][T27249] netlink: 'syz.7.4827': attribute type 1 has an invalid length. [ 838.889689][T27272] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4824'. [ 842.165815][T27291] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4831'. [ 842.692352][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 844.515905][T27209] tipc: Disabling bearer [ 844.534637][T27239] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.534832][T27239] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.572335][T27245] veth0_macvtap: entered allmulticast mode [ 844.715562][T27285] rxe_eth0 speed is unknown, defaulting to 1000 [ 844.987570][T27299] netlink: 'syz.5.4835': attribute type 1 has an invalid length. [ 845.127763][T27299] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4835'. [ 845.194469][T27306] syzkaller0: entered promiscuous mode [ 845.194518][T27306] syzkaller0: entered allmulticast mode [ 845.366564][T27315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.366590][T27315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.396551][T27315] batman_adv: batadv0: Interface deactivated: gretap3 [ 845.396576][T27315] batman_adv: batadv0: Removing interface: gretap3 [ 845.515935][T27316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4837'. [ 845.638348][T27325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4839'. [ 846.621820][T27350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 846.788914][T27361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4844'. [ 846.788940][T27361] openvswitch: netlink: Key type 30 is not supported [ 847.136619][T27374] xt_hashlimit: size too large, truncated to 1048576 [ 847.947957][T27388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4850'. [ 847.952888][T27388] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 848.064191][T27395] netlink: 'syz.7.4851': attribute type 1 has an invalid length. [ 848.064214][T27395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4851'. [ 848.639797][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4856'. [ 848.997424][T27424] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.024185][T27430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.216706][T27413] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4857'. [ 849.775134][T27452] syzkaller0: entered promiscuous mode [ 849.775157][T27452] syzkaller0: entered allmulticast mode [ 849.936687][T27454] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4866'. [ 851.439434][T27478] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 851.454664][T27497] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4874'. [ 851.455625][T27497] x_tables: duplicate underflow at hook 1 [ 851.769525][T27504] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4877'. [ 852.079497][ T6378] tipc: Subscription rejected, illegal request [ 852.160569][T14321] bridge0: entered promiscuous mode [ 852.672010][T27530] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 852.866470][T27533] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 853.061410][T27538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4887'. [ 853.061453][T27538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4887'. [ 853.130620][T27540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4888'. [ 853.506488][T27552] netlink: 'syz.5.4892': attribute type 1 has an invalid length. [ 853.506512][T27552] netlink: 'syz.5.4892': attribute type 2 has an invalid length. [ 853.658176][T27555] syzkaller0: entered promiscuous mode [ 853.659481][T27555] syzkaller0: entered allmulticast mode [ 853.782614][T27559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4894'. [ 853.896910][T27563] x_tables: duplicate underflow at hook 1 [ 854.035320][T27559] bridge5: entered promiscuous mode [ 854.035343][T27559] bridge5: entered allmulticast mode [ 854.080851][T27559] team0: Port device bridge5 added [ 854.581483][T27578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4900'. [ 854.685174][T27582] syz_tun: entered allmulticast mode [ 854.736772][T27579] syz_tun: left allmulticast mode [ 854.801060][T27592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4904'. [ 855.079129][T27601] netlink: 'syz.2.4903': attribute type 1 has an invalid length. [ 855.100705][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4902'. [ 855.407084][T27601] bond9: option mode: invalid value (8) [ 855.439533][T27612] ip_tables: iptables: counters copy to user failed while replacing table [ 855.445156][T27614] Bluetooth: hci0: unsupported parameter 5135 [ 855.445175][T27614] Bluetooth: hci0: unsupported parameter 8192 [ 855.445186][T27614] Bluetooth: hci0: unsupported parameter 5135 [ 855.445196][T27614] Bluetooth: hci0: unsupported parameter 8192 [ 855.446868][T27614] xt_hashlimit: max too large, truncated to 1048576 [ 855.447094][T27614] Cannot find del_set index 4 as target [ 855.520296][T27601] bond9 (unregistering): Released all slaves [ 855.770838][T27619] IPVS: Error connecting to the multicast addr [ 855.923545][T27629] netlink: 'syz.2.4912': attribute type 33 has an invalid length. [ 855.924789][T27629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4912'. [ 856.267623][T27641] sch_fq: defrate 4294967293 ignored. [ 856.489338][T27648] SET target dimension over the limit! [ 856.620579][T27657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4921'. [ 856.624195][T27654] 8021q: VLANs not supported on syzkaller1 [ 856.717000][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4922'. [ 856.747490][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4922'. [ 856.835146][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4922'. [ 857.011426][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4922'. [ 857.049724][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4922'. [ 857.070549][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4922'. [ 857.090752][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4922'. [ 857.114218][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4922'. [ 857.119681][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4922'. [ 857.637813][T27682] syz_tun (unregistering): left allmulticast mode [ 857.779611][T27688] ip6tnl2: entered allmulticast mode [ 858.001891][T27702] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 858.188601][T27717] netlink: 'syz.3.4933': attribute type 4 has an invalid length. [ 858.228386][T27717] netlink: 'syz.3.4933': attribute type 4 has an invalid length. [ 858.442187][T27723] syzkaller1: entered promiscuous mode [ 858.442210][T27723] syzkaller1: entered allmulticast mode [ 858.498435][T27728] netlink: 'syz.7.4936': attribute type 1 has an invalid length. [ 858.642080][T27736] Bluetooth: hci0: unsupported parameter 5135 [ 858.642104][T27736] Bluetooth: hci0: unsupported parameter 8192 [ 858.642115][T27736] Bluetooth: hci0: unsupported parameter 5135 [ 858.642126][T27736] Bluetooth: hci0: unsupported parameter 8192 [ 858.701857][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 858.952896][T27739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 859.029293][T27743] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 862.596056][T27873] netlink: 'syz.2.4966': attribute type 3 has an invalid length. [ 862.596078][T27873] __nla_validate_parse: 21 callbacks suppressed [ 862.596089][T27873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4966'. [ 863.679870][T27906] batman_adv: batadv0: Adding interface: veth0 [ 863.679892][T27906] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.679922][T27906] batman_adv: batadv0: Interface activated: veth0 [ 863.841268][T27914] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4976'. [ 863.934437][T27910] netlink: 'syz.5.4975': attribute type 1 has an invalid length. [ 864.119492][T27913] bond3: (slave veth0_to_bond): making interface the new active one [ 864.130870][T27913] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 864.345839][T27911] veth3: entered allmulticast mode [ 864.374325][T27911] bond3: (slave veth3): Enslaving as an active interface with a down link [ 864.490159][T27932] xt_addrtype: ipv6 does not support BROADCAST matching [ 865.081014][T27943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'. [ 865.081042][T27943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'. [ 865.774600][T27979] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4990'. [ 865.875116][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4993'. [ 866.220043][T28009] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 866.245314][T28007] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 866.265420][T28012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4999'. [ 866.265441][T28012] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4999'. [ 866.267652][T28007] bond7 (unregistering): Released all slaves [ 866.660824][T28018] netlink: 'syz.2.5001': attribute type 1 has an invalid length. [ 866.750601][T28017] netlink: 'syz.7.5003': attribute type 1 has an invalid length. [ 866.839082][T28025] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5003'. [ 867.055486][T28031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5001'. [ 867.092997][T28021] 8021q: adding VLAN 0 to HW filter on device bond10 [ 867.136450][T28021] bond9: (slave bond10): making interface the new active one [ 867.137033][T28021] bond9: (slave bond10): Enslaving as an active interface with an up link [ 867.263697][T28022] bond9: (slave gretap0): Enslaving as a backup interface with an up link [ 867.279631][T28031] 8021q: adding VLAN 0 to HW filter on device bond9 [ 867.984761][T28055] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5010'. [ 868.007805][T28055] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5010'. [ 868.194438][T28062] syzkaller0: entered promiscuous mode [ 868.194627][T28062] syzkaller0: entered allmulticast mode [ 868.234355][ T6378] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.235345][ T6378] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.235381][ T6378] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.235412][ T6378] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.285859][T28061] ip6gretap2: entered allmulticast mode [ 868.315313][T28061] batman_adv: batadv0: Adding interface: ip6gretap2 [ 868.315333][T28061] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.315359][T28061] batman_adv: batadv0: Interface activated: ip6gretap2 [ 868.717555][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5014'. [ 869.670073][T28108] netlink: 'syz.3.5021': attribute type 322 has an invalid length. [ 871.615109][T28127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5025'. [ 871.699597][T28130] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5026'. [ 871.793475][T28130] [ 871.795855][T28130] ====================================================== [ 871.802867][T28130] WARNING: possible circular locking dependency detected [ 871.809894][T28130] syzkaller #0 Not tainted [ 871.814300][T28130] ------------------------------------------------------ [ 871.821336][T28130] syz.6.5026/28130 is trying to acquire lock: [ 871.827396][T28130] ffff8880340e1818 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 871.836296][T28130] [ 871.836296][T28130] but task is already holding lock: [ 871.843660][T28130] ffff888021fbd008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 871.853080][T28130] [ 871.853080][T28130] which lock already depends on the new lock. [ 871.853080][T28130] [ 871.863482][T28130] [ 871.863482][T28130] the existing dependency chain (in reverse order) is: [ 871.872494][T28130] [ 871.872494][T28130] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 871.880327][T28130] __mutex_lock+0x197/0x15a0 [ 871.885458][T28130] elevator_change+0x1af/0x480 [ 871.890767][T28130] elevator_set_none+0xb5/0x140 [ 871.896149][T28130] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 871.902511][T28130] nbd_start_device+0x189/0xb30 [ 871.907912][T28130] nbd_genl_connect+0x167d/0x1cd0 [ 871.913461][T28130] genl_family_rcv_msg_doit+0x233/0x340 [ 871.919528][T28130] genl_rcv_msg+0x614/0x7a0 [ 871.924540][T28130] netlink_rcv_skb+0x226/0x4a0 [ 871.929824][T28130] genl_rcv+0x28/0x40 [ 871.934330][T28130] netlink_unicast+0x8ef/0xa80 [ 871.939625][T28130] netlink_sendmsg+0x7f0/0xb20 [ 871.944902][T28130] sock_sendmsg_nosec+0x14e/0x190 [ 871.950462][T28130] ____sys_sendmsg+0x54e/0x850 [ 871.955750][T28130] ___sys_sendmsg+0x2a5/0x360 [ 871.960957][T28130] __x64_sys_sendmsg+0x1b1/0x290 [ 871.966416][T28130] do_syscall_64+0x166/0x520 [ 871.971526][T28130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.977933][T28130] [ 871.977933][T28130] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 871.986530][T28130] blk_alloc_queue+0x544/0x690 [ 871.991815][T28130] __blk_mq_alloc_disk+0x194/0x390 [ 871.997451][T28130] nbd_dev_add+0x494/0xb60 [ 872.002389][T28130] nbd_init+0x168/0x1f0 [ 872.007077][T28130] do_one_initcall+0x250/0x870 [ 872.012369][T28130] do_initcall_level+0x10a/0x1a0 [ 872.017838][T28130] do_initcalls+0x59/0xa0 [ 872.022684][T28130] kernel_init_freeable+0x29d/0x3e0 [ 872.028395][T28130] kernel_init+0x22/0x1d0 [ 872.033238][T28130] ret_from_fork+0x514/0xb70 [ 872.038350][T28130] ret_from_fork_asm+0x1a/0x30 [ 872.043629][T28130] [ 872.043629][T28130] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 872.050825][T28130] fs_reclaim_acquire+0x71/0x100 [ 872.056279][T28130] __kmalloc_cache_node_noprof+0x66/0x620 [ 872.062532][T28130] create_worker+0x112/0x7c0 [ 872.067641][T28130] workqueue_prepare_cpu+0xe4/0x170 [ 872.073365][T28130] cpuhp_invoke_callback+0x434/0x810 [ 872.079180][T28130] _cpu_up+0x2ce/0x5b0 [ 872.083772][T28130] cpu_up+0x1d2/0x220 [ 872.088278][T28130] cpuhp_bringup_mask+0xb2/0x1a0 [ 872.093746][T28130] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 872.100076][T28130] bringup_nonboot_cpus+0x17/0x30 [ 872.105620][T28130] smp_init+0x32/0x110 [ 872.110208][T28130] kernel_init_freeable+0x27f/0x3e0 [ 872.115933][T28130] kernel_init+0x22/0x1d0 [ 872.120784][T28130] ret_from_fork+0x514/0xb70 [ 872.125908][T28130] ret_from_fork_asm+0x1a/0x30 [ 872.131190][T28130] [ 872.131190][T28130] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 872.138923][T28130] cpus_read_lock+0x3d/0x160 [ 872.144043][T28130] static_key_slow_inc+0x12/0x30 [ 872.149497][T28130] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 872.155726][T28130] nbd_genl_foreach_sock+0x265/0x450 [ 872.161521][T28130] nbd_genl_reconfigure+0xbbb/0x1040 [ 872.167314][T28130] genl_family_rcv_msg_doit+0x233/0x340 [ 872.173384][T28130] genl_rcv_msg+0x614/0x7a0 [ 872.178407][T28130] netlink_rcv_skb+0x226/0x4a0 [ 872.183695][T28130] genl_rcv+0x28/0x40 [ 872.188191][T28130] netlink_unicast+0x8ef/0xa80 [ 872.193480][T28130] netlink_sendmsg+0x7f0/0xb20 [ 872.198755][T28130] sock_sendmsg_nosec+0x14e/0x190 [ 872.204316][T28130] ____sys_sendmsg+0x54e/0x850 [ 872.209614][T28130] ___sys_sendmsg+0x2a5/0x360 [ 872.214806][T28130] __x64_sys_sendmsg+0x1b1/0x290 [ 872.220263][T28130] do_syscall_64+0x166/0x520 [ 872.225375][T28130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.231791][T28130] [ 872.231791][T28130] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 872.239435][T28130] __mutex_lock+0x197/0x15a0 [ 872.244539][T28130] nbd_queue_rq+0x373/0xff0 [ 872.249551][T28130] blk_mq_dispatch_rq_list+0x499/0x1990 [ 872.255631][T28130] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 872.262468][T28130] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 872.268958][T28130] blk_mq_run_work_fn+0x167/0x2f0 [ 872.274504][T28130] process_scheduled_works+0xc3d/0x1630 [ 872.280585][T28130] worker_thread+0xa47/0xfb0 [ 872.285700][T28130] kthread+0x38b/0x480 [ 872.290295][T28130] ret_from_fork+0x514/0xb70 [ 872.295409][T28130] ret_from_fork_asm+0x1a/0x30 [ 872.300694][T28130] [ 872.300694][T28130] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 872.307896][T28130] __mutex_lock+0x197/0x15a0 [ 872.313012][T28130] nbd_queue_rq+0xc1/0xff0 [ 872.317953][T28130] blk_mq_dispatch_rq_list+0x499/0x1990 [ 872.324025][T28130] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 872.330870][T28130] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 872.337366][T28130] blk_mq_run_work_fn+0x167/0x2f0 [ 872.342915][T28130] process_scheduled_works+0xc3d/0x1630 [ 872.348987][T28130] worker_thread+0xa47/0xfb0 [ 872.354093][T28130] kthread+0x38b/0x480 [ 872.358690][T28130] ret_from_fork+0x514/0xb70 [ 872.363794][T28130] ret_from_fork_asm+0x1a/0x30 [ 872.369067][T28130] [ 872.369067][T28130] -> #0 (set->srcu){.+.+}-{0:0}: [ 872.376187][T28130] __lock_acquire+0x164c/0x2de0 [ 872.381552][T28130] lock_sync+0xb3/0x130 [ 872.386229][T28130] __synchronize_srcu+0xca/0x2f0 [ 872.391690][T28130] elevator_switch+0x1e8/0x7b0 [ 872.396982][T28130] elevator_change+0x2fa/0x480 [ 872.402262][T28130] elevator_set_default+0x375/0x440 [ 872.408016][T28130] blk_register_queue+0x404/0x4f0 [ 872.413553][T28130] __add_disk+0x6b8/0xdb0 [ 872.418403][T28130] add_disk_fwnode+0x100/0x3a0 [ 872.423674][T28130] nbd_dev_add+0x733/0xb60 [ 872.428595][T28130] nbd_genl_connect+0x96c/0x1cd0 [ 872.434035][T28130] genl_family_rcv_msg_doit+0x233/0x340 [ 872.440091][T28130] genl_rcv_msg+0x614/0x7a0 [ 872.445105][T28130] netlink_rcv_skb+0x226/0x4a0 [ 872.450398][T28130] genl_rcv+0x28/0x40 [ 872.454898][T28130] netlink_unicast+0x8ef/0xa80 [ 872.460182][T28130] netlink_sendmsg+0x7f0/0xb20 [ 872.465455][T28130] sock_sendmsg_nosec+0x14e/0x190 [ 872.471004][T28130] ____sys_sendmsg+0x54e/0x850 [ 872.476280][T28130] ___sys_sendmsg+0x2a5/0x360 [ 872.481483][T28130] __x64_sys_sendmsg+0x1b1/0x290 [ 872.486939][T28130] do_syscall_64+0x166/0x520 [ 872.492048][T28130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.498461][T28130] [ 872.498461][T28130] other info that might help us debug this: [ 872.498461][T28130] [ 872.508768][T28130] Chain exists of: [ 872.508768][T28130] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 872.508768][T28130] [ 872.522420][T28130] Possible unsafe locking scenario: [ 872.522420][T28130] [ 872.529863][T28130] CPU0 CPU1 [ 872.535220][T28130] ---- ---- [ 872.540570][T28130] lock(&q->elevator_lock); [ 872.545161][T28130] lock(&q->q_usage_counter(io)#49); [ 872.553047][T28130] lock(&q->elevator_lock); [ 872.560168][T28130] sync(set->srcu); [ 872.564069][T28130] [ 872.564069][T28130] *** DEADLOCK *** [ 872.564069][T28130] [ 872.572204][T28130] locks held by syz.6.5026/28130: 6, last CPU#0: [ 872.578524][T28130] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 872.586694][T28130] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 872.595650][T28130] #2: ffff88804641d1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 872.606013][T28130] #3: ffff888021fbd090 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 872.615844][T28130] #4: ffff888021fbcb18 (&q->q_usage_counter(queue)#57){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 872.626716][T28130] #5: ffff888021fbd008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 872.636544][T28130] [ 872.636544][T28130] stack backtrace: [ 872.642421][T28130] CPU: 0 UID: 0 PID: 28130 Comm: syz.6.5026 Not tainted syzkaller #0 PREEMPT(full) [ 872.651778][T28130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 872.661832][T28130] Call Trace: [ 872.665105][T28130] [ 872.668023][T28130] dump_stack_lvl+0xe8/0x150 [ 872.672609][T28130] print_circular_bug+0x2e2/0x300 [ 872.677630][T28130] check_noncircular+0x12f/0x150 [ 872.682558][T28130] __lock_acquire+0x164c/0x2de0 [ 872.687400][T28130] ? lockdep_unlock+0x5c/0xd0 [ 872.692064][T28130] ? __lock_acquire+0x1511/0x2de0 [ 872.697078][T28130] lock_sync+0xb3/0x130 [ 872.701221][T28130] ? __synchronize_srcu+0xb6/0x2f0 [ 872.706326][T28130] ? __synchronize_srcu+0xb6/0x2f0 [ 872.711427][T28130] __synchronize_srcu+0xca/0x2f0 [ 872.716359][T28130] ? __pfx___synchronize_srcu+0x10/0x10 [ 872.721893][T28130] ? do_raw_spin_lock+0x12b/0x2f0 [ 872.726908][T28130] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 872.732700][T28130] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 872.738232][T28130] ? synchronize_srcu+0x20c/0x270 [ 872.743247][T28130] elevator_switch+0x1e8/0x7b0 [ 872.748005][T28130] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 872.753450][T28130] elevator_change+0x2fa/0x480 [ 872.758202][T28130] ? do_raw_spin_unlock+0xf5/0x200 [ 872.763300][T28130] elevator_set_default+0x375/0x440 [ 872.768489][T28130] ? __pfx_elevator_set_default+0x10/0x10 [ 872.774200][T28130] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 872.781214][T28130] ? blk_crypto_sysfs_register+0x11c/0x170 [ 872.787016][T28130] blk_register_queue+0x404/0x4f0 [ 872.792029][T28130] __add_disk+0x6b8/0xdb0 [ 872.796347][T28130] add_disk_fwnode+0x100/0x3a0 [ 872.801098][T28130] nbd_dev_add+0x733/0xb60 [ 872.805500][T28130] ? __pfx_nbd_dev_add+0x10/0x10 [ 872.810429][T28130] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 872.816218][T28130] ? bpf_lsm_capable+0x9/0x20 [ 872.820879][T28130] ? security_capable+0x7e/0x2c0 [ 872.825804][T28130] ? radix_tree_lookup+0x240/0x290 [ 872.830901][T28130] nbd_genl_connect+0x96c/0x1cd0 [ 872.835832][T28130] ? __pfx_nbd_genl_connect+0x10/0x10 [ 872.841188][T28130] ? rcu_is_watching+0x16/0xb0 [ 872.845947][T28130] ? trace_kmalloc+0x2a/0xf0 [ 872.850524][T28130] ? __kmalloc_noprof+0x387/0x710 [ 872.855537][T28130] ? __nla_parse+0x40/0x60 [ 872.859949][T28130] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 872.866269][T28130] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 872.872586][T28130] genl_family_rcv_msg_doit+0x233/0x340 [ 872.878124][T28130] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 872.884177][T28130] ? __lock_acquire+0x747/0x2de0 [ 872.889105][T28130] genl_rcv_msg+0x614/0x7a0 [ 872.893595][T28130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.898610][T28130] ? __pfx_nbd_genl_connect+0x10/0x10 [ 872.903975][T28130] netlink_rcv_skb+0x226/0x4a0 [ 872.908741][T28130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.913754][T28130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 872.919035][T28130] ? down_read+0x2b9/0x320 [ 872.923443][T28130] genl_rcv+0x28/0x40 [ 872.927410][T28130] netlink_unicast+0x8ef/0xa80 [ 872.932172][T28130] netlink_sendmsg+0x7f0/0xb20 [ 872.936921][T28130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.942192][T28130] ? aa_sock_msg_perm+0x144/0x210 [ 872.947204][T28130] ? apparmor_socket_sendmsg+0x98/0x360 [ 872.952739][T28130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.958015][T28130] sock_sendmsg_nosec+0x14e/0x190 [ 872.963029][T28130] ____sys_sendmsg+0x54e/0x850 [ 872.967779][T28130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.973055][T28130] ? import_iovec+0x73/0xa0 [ 872.977577][T28130] ___sys_sendmsg+0x2a5/0x360 [ 872.982243][T28130] ? __lock_acquire+0x747/0x2de0 [ 872.987176][T28130] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.992360][T28130] ? futex_wait+0x2a2/0x390 [ 872.996862][T28130] ? __fget_files+0x3a2/0x420 [ 873.001529][T28130] ? __fget_files+0x2a/0x420 [ 873.006107][T28130] __x64_sys_sendmsg+0x1b1/0x290 [ 873.011035][T28130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 873.016492][T28130] do_syscall_64+0x166/0x520 [ 873.021073][T28130] ? trace_irq_disable+0x3b/0x140 [ 873.026089][T28130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.032138][T28130] ? clear_bhb_loop+0x70/0xc0 [ 873.036800][T28130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.042677][T28130] RIP: 0033:0x7ff8c179fb19 [ 873.047104][T28130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.066699][T28130] RSP: 002b:00007ff8c2631028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.075098][T28130] RAX: ffffffffffffffda RBX: 00007ff8c1a26090 RCX: 00007ff8c179fb19 [ 873.083058][T28130] RDX: 0000000000000000 RSI: 0000200000001140 RDI: 0000000000000009 [ 873.091011][T28130] RBP: 00007ff8c1837b70 R08: 0000000000000000 R09: 0000000000000000 [ 873.098971][T28130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.107102][T28130] R13: 00007ff8c1a26128 R14: 00007ff8c1a26090 R15: 00007ffec09042b8 [ 873.115072][T28130] [ 873.296195][T28146] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5030'. [ 873.311825][T28130] xt_IDLETIMER: timeout value is zero [ 873.331129][T28157] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5030'. [ 873.420629][T28148] udevd[28148]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 873.472873][T28148] udevd[28148]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 880.503154][ T6378] dvmrp6: left allmulticast mode [ 880.700402][ T6378] xfrm0 (unregistering): left promiscuous mode [ 880.700436][ T6378] xfrm0 (unregistering): left allmulticast mode [ 880.700850][ T6378] team0: Port device xfrm0 removed [ 880.917568][ T6378] bond13 (unregistering): (slave bridge6): Releasing backup interface [ 880.917595][ T6378] bridge6 (unregistering): left promiscuous mode [ 880.958495][ T6378] bond0 (unregistering): Released all slaves [ 880.961434][ T6378] bond1 (unregistering): Released all slaves [ 880.968816][ T6378] bond2 (unregistering): Released all slaves [ 880.974464][ T6378] bond3 (unregistering): Released all slaves [ 880.986710][ T6378] bond4 (unregistering): (slave veth5): Releasing active interface [ 880.986735][ T6378] batadv2: entered promiscuous mode [ 880.988034][ T6378] bond4 (unregistering): (slave batadv2): Releasing active interface [ 880.988054][ T6378] batadv2: left promiscuous mode [ 880.989192][ T6378] bond4 (unregistering): (slave veth7): Releasing active interface [ 880.989748][ T6378] bond4 (unregistering): Released all slaves [ 881.003544][ T6378] bond5 (unregistering): Released all slaves [ 881.008628][ T6378] bond6 (unregistering): Released all slaves [ 881.014449][ T6378] bond8 (unregistering): Released all slaves [ 881.020416][ T6378] bond7 (unregistering): Released all slaves [ 881.031280][ T6378] bond9 (unregistering): Released all slaves [ 881.037308][ T6378] bond10 (unregistering): Released all slaves [ 881.071134][ T6378] bond11 (unregistering): (slave bond12): Releasing backup interface [ 881.089687][ T6378] bond11 (unregistering): Released all slaves [ 881.103290][ T6378] bond12 (unregistering): Released all slaves [ 881.108645][ T6378] bond13 (unregistering): Released all slaves [ 881.126477][ T6378] bond14 (unregistering): Released all slaves [ 881.229693][ T6378] !;: left promiscuous mode [ 881.280953][ T6378] tipc: Disabling bearer [ 881.281031][ T6378] tipc: Disabling bearer [ 881.281292][ T6378] tipc: Left network mode [ 881.327052][ T6378] IPVS: stopping master sync thread 10284 ... [ 881.332983][ T6378] IPVS: stopping backup sync thread 12388 ... [ 881.655810][ T6378] hsr_slave_1: left promiscuous mode [ 881.656291][ T6378] batman_adv: batadv0: Removing interface: vlan0