last executing test programs: 2m44.590812624s ago: executing program 0 (id=6407): r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 2m44.451297198s ago: executing program 0 (id=6409): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0xfffffffc}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m44.374387327s ago: executing program 0 (id=6412): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r5, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) (async) r6 = openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r6, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) (async) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1, 0x2, 0x1) (async) write(r3, &(0x7f0000003400)="d3", 0x1) 2m44.208955212s ago: executing program 0 (id=6415): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x8, [@enum64={0x10, 0x7, 0x0, 0x13, 0x0, 0x6, [{0xe, 0x3}, {0x6, 0xffffffff, 0x6}, {0x2, 0x7fff, 0x2}, {0xb, 0xf, 0x4}, {0xc, 0x5, 0x2}, {0x9, 0x3, 0x10}, {0xc, 0x1ff, 0x1}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x5}, @enum64={0xb, 0x4, 0x0, 0x13, 0x1, 0x0, [{0x3, 0xf, 0x3}, {0x8, 0x6, 0xffff}, {0x4, 0x528dd16c, 0x308}, {0x9, 0x400, 0x8}]}, @union={0xf, 0x3, 0x0, 0x5, 0x1, 0x5, [{0x9, 0x4}, {0x1, 0x0, 0xffffffdc}, {0xe, 0x5, 0x708}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x61, 0x0, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000180)=""/161, 0x110, 0xa1, 0x0, 0x9, 0x10000}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0xd0, 0x0, 0x0, @binary}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={r0, &(0x7f0000000280)='{{)&$\x00', 0x40000, &(0x7f0000000300)={@_ha_fsid={[0x7f, 0x3]}, {0x7ff, 0x101, 0x1ff, 0x1}}, 0x8c34, &(0x7f0000000340), &(0x7f0000000380)=0x1ff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="d40000000a0601010000000000000000030000020900020073797a320000000008000940000000029c000880100007800a000500000058b06acc0000100007800900130073797a3100000000100007800900120073797a30000000000c00078005000300b0000000100007800900120073797a3200000000100007800c0018400000000000000004100007800a001100aaaaaaaaaa2500001c000780180002801400024000000000000000000000ffffe0000001100007800c000180080001407f00000105000100070000000500010007000000"], 0xd4}, 0x1, 0x0, 0x0, 0x2000c050}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20000000000002ab, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x6, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x7, 0xa, 0x5, 0x4, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 2m44.014446372s ago: executing program 0 (id=6417): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x6}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x952f}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf257f0000000c009900010000006c000000060048006400000014005500fab976443835b89c50a2411eba41c1d9060048000c00000018003400221d89a11fc3dad7bd1347da808d2ee563cda67f060068000d0000000a00f5000802110000000000120034003219d1f256d60ff9f992d8dfd71d0000060048005e000000060048002d000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000058}, 0x8844) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r8], 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r12, &(0x7f0000000d40), 0x0}, 0x20) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0xb3) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000206010200000000000000000700000705000100070000000900020073797a31000000000c000780080013400000000e0500050002000000050004000100000015000300686173683a69702c708e63d6906e6574000000004b4bae8993fee25513cee7e44b7243f674e4a8ccfc2b1570b925eefa8222ee02fd"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0xb1d589c37691b1b, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x600448c1}, 0x40004001) 2m43.785053665s ago: executing program 0 (id=6423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r2, r1, 0x0, 0xbdc4) (async) sendfile(r2, r1, 0x0, 0xbdc4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000800000018450000fdffffff000000000000000095000000000000008c0509284311ed3d2025ccb3f07e6073616badaf3d6f9e9d97c9ce2a65fc3516565816d4543f608477f67695b03cd03e6acd79a622c750e06aaee0b82984644842a10b280539e136373d0533e50a4c4080d5a43e4baacb05f60384e680130aa24aa4ae23fa8d83cdb56cc44f9c9b273369be376157ed672b7a6dae18cfd27412eff9197481626d34b7d9c9e1e0b6de9c79c6c0c7f4b89c056866a10fd6741d49152310e23df1d1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000800000018450000fdffffff000000000000000095000000000000008c0509284311ed3d2025ccb3f07e6073616badaf3d6f9e9d97c9ce2a65fc3516565816d4543f608477f67695b03cd03e6acd79a622c750e06aaee0b82984644842a10b280539e136373d0533e50a4c4080d5a43e4baacb05f60384e680130aa24aa4ae23fa8d83cdb56cc44f9c9b273369be376157ed672b7a6dae18cfd27412eff9197481626d34b7d9c9e1e0b6de9c79c6c0c7f4b89c056866a10fd6741d49152310e23df1d1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2m28.746490855s ago: executing program 32 (id=6423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r2, r1, 0x0, 0xbdc4) (async) sendfile(r2, r1, 0x0, 0xbdc4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000800000018450000fdffffff000000000000000095000000000000008c0509284311ed3d2025ccb3f07e6073616badaf3d6f9e9d97c9ce2a65fc3516565816d4543f608477f67695b03cd03e6acd79a622c750e06aaee0b82984644842a10b280539e136373d0533e50a4c4080d5a43e4baacb05f60384e680130aa24aa4ae23fa8d83cdb56cc44f9c9b273369be376157ed672b7a6dae18cfd27412eff9197481626d34b7d9c9e1e0b6de9c79c6c0c7f4b89c056866a10fd6741d49152310e23df1d1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000800000018450000fdffffff000000000000000095000000000000008c0509284311ed3d2025ccb3f07e6073616badaf3d6f9e9d97c9ce2a65fc3516565816d4543f608477f67695b03cd03e6acd79a622c750e06aaee0b82984644842a10b280539e136373d0533e50a4c4080d5a43e4baacb05f60384e680130aa24aa4ae23fa8d83cdb56cc44f9c9b273369be376157ed672b7a6dae18cfd27412eff9197481626d34b7d9c9e1e0b6de9c79c6c0c7f4b89c056866a10fd6741d49152310e23df1d1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2m25.713970269s ago: executing program 4 (id=6799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff06, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x0, @void}, 0x10) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaa9207000000000000452c00000000002f9078ac1e0001e0000001000065580018907804000000000000005a1264d0611086dd"], 0xfdef) 2m24.784944553s ago: executing program 4 (id=6814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4010, r3, 0x3ba64000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x45}, 0x4000800) 2m24.600625997s ago: executing program 4 (id=6818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4080) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) recvmmsg(r4, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2m24.517028061s ago: executing program 4 (id=6819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}]}, 0x18}], 0x1}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x9, 0x4) r2 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r9, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) r10 = openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) pread64(r10, &(0x7f0000000100)=""/165, 0xa5, 0x9) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r13, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) ioctl$PPPIOCDISCONN(r10, 0x7439) socket$inet(0x2, 0x5, 0xa61) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 2m24.089566713s ago: executing program 4 (id=6824): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000003c0)={{&(0x7f0000000000)=[{0xf, 0x9, 0x9, {0x26c, 0x100000000}, 0x3, 0x40, 0x8001}], 0x1, 0x40, 0x4da4, 0x9}, {&(0x7f0000000080)=[{0x3e2c228e, 0x3}, {0x40, 0x401}, {0x0, 0xfffffffffffff4cf}, {0xffff, 0x800}], 0x4, 0x10, 0xa, 0x8}, {&(0x7f00000000c0)=[0x1, 0x8, 0x4, 0x4, 0x7, 0x8, 0x80], 0x7, 0x8, 0x5, 0x5}, {&(0x7f0000000280)=[{0xedf4, 0x9, 0x0, 0x4, 0x7ff}, {0xef61, 0xfffffffffffffff9, 0x9, 0x4, 0x6}, {0x2fc18a73, 0x5965, 0x100, 0x9, 0x3}, {0xbb62, 0x995, 0x1, 0x3ff, 0x9}, {0x4, 0x1, 0x3, 0x9, 0xc200000}, {0xa2, 0x2c, 0x6, 0x1, 0x3}], 0x6, 0x28, 0x1, 0x69}, {&(0x7f0000000380)=[0x73d, 0x6, 0x0], 0x3, 0x8, 0xfffb, 0x5}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 2m24.011807058s ago: executing program 4 (id=6827): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000000)='$-#\x00', 0x80400, &(0x7f00000001c0)={@_ha_fsid={[0x0, 0xe]}, {0x5, 0x6, 0x5, 0x4}}, 0x1ff, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xcbba}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000ec0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000340)={0xb34, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xbc, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x5}, {0x4, 0x2}, {}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x3, 0x1}, {0x6, 0x7}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x4}, {0x4, 0x5}, {0x6, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x2}, {}, {0x0, 0x3}, {0x4, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x12, 0x9, 0x2, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x8, 0x80, 0x0, 0x4e0c, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}]}]}, @NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x85}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x94, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x0, 0x0, 0x2, 0xf2, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3f8, 0x11d, 0x0, 0x1, [{0x208, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x60, 0xb, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x40, 0x5, 0x2, 0xf, 0xfff, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0x4, 0x6, 0x4, 0x9, 0x2c0, 0xf]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x5}, {0x5, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x4, 0x9}, {0x3, 0x5}, {0x4}, {0x5, 0x3}, {0x0, 0xa}, {0x5, 0xa}, {0x0, 0x5}, {0x1}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0x2}, {0x3}, {0x3, 0x4}, {0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0x1}, {0x5, 0x2}, {0x2, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x2}, {}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x1b}, {0x0, 0x8}, {0x5, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x4}, {0x6, 0x4}, {0x5, 0xa}, {0x7, 0xa}, {0x6, 0x3}, {0x6, 0x5}, {0x4, 0x4}, {0x4, 0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x3, 0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0xa, 0x2, 0x3, 0xfffd, 0x0, 0xfff8]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x30, 0x30, 0x30, 0x36, 0x12, 0x30, 0x18, 0x3]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x6, 0x2, 0x4, 0x5, 0x54, 0x30, 0x3, 0xb, 0x6, 0x18, 0x6c, 0x30, 0x24, 0x1b, 0x1b, 0x60, 0x12, 0x6, 0x35, 0x18, 0x1b, 0xc, 0xc, 0x6c, 0x3e, 0x48, 0x1b, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x9, 0x3, 0x8001, 0x1000, 0xfff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x36, 0x16, 0x0, 0x3, 0x2, 0x6, 0x4, 0x2, 0x36, 0x12, 0x12, 0xc, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x212, 0x1634, 0x8, 0x3, 0x8, 0x6, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xf001, 0x2, 0x5, 0x91, 0x9, 0x100]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x6, 0x7}, {0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x3}, {0x7}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfffc, 0x2, 0x7, 0xe3, 0x7, 0x2, 0xd]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x10, 0x1, 0xc, 0x4, 0x8, 0xbc, 0x7f]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x48, 0xc, 0x39, 0x5e, 0x5, 0x3, 0x2, 0xc, 0x6, 0x24, 0x5, 0x6c, 0x48, 0x1, 0x78, 0x18, 0xc, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x1, 0x0, 0x9, 0x2, 0x1000, 0xf]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x16, 0x16, 0x0, 0x3, 0x60, 0x6c, 0x4, 0x24, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x10, 0xfff8, 0x8000, 0x4, 0x9, 0xfffe, 0x8411]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x6}, {0x7, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x8}, {0x5}, {0x3, 0x5}, {0x3, 0x1}, {0x6, 0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x4}, {0x0, 0x8}, {}, {0x2, 0x1}, {0x3, 0x6}, {0x1}, {0x3, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x7}, {0x0, 0x3}, {0x0, 0x5}, {}, {0x2, 0x9}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x2}, {0x6, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x3}, {0x6}, {0x0, 0x1}, {0x1}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x6}, {0x5, 0x4}, {0x2, 0x9}, {0x1, 0x7}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x9}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x7, 0xa2, 0x101, 0x1, 0x3, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xe8, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xad}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x6}, {0x7, 0x9}, {0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x1}, {0x4, 0x9}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x3}, {0x3, 0x7}, {0x6, 0x4}, {0x7, 0x7}, {}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x5, 0x3}, {0x3, 0x1}, {0x6}, {0x2, 0x1}, {0x6, 0x8}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x3}, {0x6, 0xa}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x2}, {0x6, 0x9}, {0x1, 0x7}, {0x3, 0xa}, {0x4}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x6}, {0x5, 0x7}, {0x4}, {0x3, 0x7}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x6}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}]}]}, @NL80211_ATTR_TID_CONFIG={0x45c, 0x11d, 0x0, 0x1, [{0x37c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x360, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xca7, 0x4, 0xe, 0x740a, 0x9, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x3, 0x9}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x6}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0xa}, {0x5}, {0x1}, {0x6, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x4}, {}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x1}, {0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x9}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x9, 0x8, 0x7, 0xa7cc, 0x1000, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0xa}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x5}, {0x4, 0x2}, {0x6, 0x5}, {0x7}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x2}, {0x1, 0x3}, {0x4, 0x5}, {0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x5}, {0x7, 0x8}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x5}, {0x2, 0x1}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0x9}, {}, {0x1}, {0x4, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x4}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0x8}, {0x6, 0x6}, {0x0, 0x4}]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x48, 0x48, 0x1, 0x4, 0x2, 0x4c, 0xb, 0x1b, 0x24, 0x1, 0x30, 0x25, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xf7, 0xbb2b, 0x2, 0x2, 0x4, 0x40, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8001, 0x0, 0xfffb, 0x5, 0x7, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x3, 0x3, 0x8, 0xf1a4, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x5, 0x8, 0x1ff, 0x101, 0x68de, 0x8]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffc, 0x6, 0x8, 0x0, 0x4, 0xffff, 0x1000]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x5, 0x39, 0x4, 0x5, 0x2, 0x24, 0x60, 0x16, 0x2c, 0x24, 0x1b, 0x2, 0x9, 0x9, 0x18, 0xb, 0x1, 0x3, 0x10, 0x30, 0x24, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x48, 0x36, 0xc, 0x12, 0x65, 0x24, 0x36, 0x12]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x8}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x3}, {0x1}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0x4}, {0x6, 0x7}, {0x5, 0x1}, {0x5, 0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x2, 0x9}, {0x2, 0x6}, {0x2}, {0x0, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x9, 0x9, 0x3, 0xfff8, 0x800, 0x4bce]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x3ff, 0x5000, 0x9, 0x0, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x100, 0x4000, 0x6412, 0x2, 0x8, 0xfffd, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x7, 0x6, 0x7, 0x3, 0x6, 0x4ca1]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x2, 0x48, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xaa4, 0x1, 0xf, 0x9, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x8}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x8}, {0x7, 0x6}, {0x5}, {0x3, 0x9}, {}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x3}, {0x1, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x5, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x8}, {0x7, 0x8}, {0x2, 0x1}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0xa}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x8}, {0x7, 0x6}, {0x7, 0x9}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0x6}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x6}, {0x5, 0x9}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x36, 0x60, 0x30, 0x60, 0x60, 0x2, 0xc, 0x3, 0xd, 0x16, 0x6, 0x24, 0x28, 0x550eabf68b4ccc72, 0x6c, 0xc, 0x1b, 0x9, 0x60, 0xc, 0x12, 0x2, 0x3, 0x1, 0x1b, 0x2, 0x48, 0x5, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0xdb0130e27834bde0}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0xa}, {0x5, 0x6}, {0x6, 0x9}, {0x5, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x3, 0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x400, 0x4, 0x49ff, 0x1, 0x9, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd309, 0x6, 0x0, 0x9, 0x1ff, 0x2, 0x8, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xa, 0x6, 0x9, 0x29, 0x4, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x7, 0x7fff, 0x8000, 0x2, 0xe, 0xd0, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x327b, 0x10, 0x6, 0xfffc, 0xbc8, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x6, 0xf, 0x2, 0x80, 0xf, 0xfffd, 0x7fff]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdb}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xb34}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) 2m8.740499373s ago: executing program 33 (id=6827): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000000)='$-#\x00', 0x80400, &(0x7f00000001c0)={@_ha_fsid={[0x0, 0xe]}, {0x5, 0x6, 0x5, 0x4}}, 0x1ff, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xcbba}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000ec0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000340)={0xb34, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xbc, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x5}, {0x4, 0x2}, {}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x3, 0x1}, {0x6, 0x7}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x4}, {0x4, 0x5}, {0x6, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x2}, {}, {0x0, 0x3}, {0x4, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x12, 0x9, 0x2, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x8, 0x80, 0x0, 0x4e0c, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}]}]}, @NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x85}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x94, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x0, 0x0, 0x2, 0xf2, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3f8, 0x11d, 0x0, 0x1, [{0x208, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x60, 0xb, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x40, 0x5, 0x2, 0xf, 0xfff, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0x4, 0x6, 0x4, 0x9, 0x2c0, 0xf]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x5}, {0x5, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x4, 0x9}, {0x3, 0x5}, {0x4}, {0x5, 0x3}, {0x0, 0xa}, {0x5, 0xa}, {0x0, 0x5}, {0x1}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0x2}, {0x3}, {0x3, 0x4}, {0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0x1}, {0x5, 0x2}, {0x2, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x2}, {}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x1b}, {0x0, 0x8}, {0x5, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x4}, {0x6, 0x4}, {0x5, 0xa}, {0x7, 0xa}, {0x6, 0x3}, {0x6, 0x5}, {0x4, 0x4}, {0x4, 0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x3, 0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0xa, 0x2, 0x3, 0xfffd, 0x0, 0xfff8]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x30, 0x30, 0x30, 0x36, 0x12, 0x30, 0x18, 0x3]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x6, 0x2, 0x4, 0x5, 0x54, 0x30, 0x3, 0xb, 0x6, 0x18, 0x6c, 0x30, 0x24, 0x1b, 0x1b, 0x60, 0x12, 0x6, 0x35, 0x18, 0x1b, 0xc, 0xc, 0x6c, 0x3e, 0x48, 0x1b, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x9, 0x3, 0x8001, 0x1000, 0xfff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x36, 0x16, 0x0, 0x3, 0x2, 0x6, 0x4, 0x2, 0x36, 0x12, 0x12, 0xc, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x212, 0x1634, 0x8, 0x3, 0x8, 0x6, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xf001, 0x2, 0x5, 0x91, 0x9, 0x100]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x6, 0x7}, {0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x3}, {0x7}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfffc, 0x2, 0x7, 0xe3, 0x7, 0x2, 0xd]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x10, 0x1, 0xc, 0x4, 0x8, 0xbc, 0x7f]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x48, 0xc, 0x39, 0x5e, 0x5, 0x3, 0x2, 0xc, 0x6, 0x24, 0x5, 0x6c, 0x48, 0x1, 0x78, 0x18, 0xc, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x1, 0x0, 0x9, 0x2, 0x1000, 0xf]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x16, 0x16, 0x0, 0x3, 0x60, 0x6c, 0x4, 0x24, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x10, 0xfff8, 0x8000, 0x4, 0x9, 0xfffe, 0x8411]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x6}, {0x7, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x8}, {0x5}, {0x3, 0x5}, {0x3, 0x1}, {0x6, 0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x4}, {0x0, 0x8}, {}, {0x2, 0x1}, {0x3, 0x6}, {0x1}, {0x3, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x7}, {0x0, 0x3}, {0x0, 0x5}, {}, {0x2, 0x9}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x2}, {0x6, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x3}, {0x6}, {0x0, 0x1}, {0x1}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x6}, {0x5, 0x4}, {0x2, 0x9}, {0x1, 0x7}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x9}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x7, 0xa2, 0x101, 0x1, 0x3, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xe8, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xad}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x6}, {0x7, 0x9}, {0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x1}, {0x4, 0x9}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x3}, {0x3, 0x7}, {0x6, 0x4}, {0x7, 0x7}, {}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x5, 0x3}, {0x3, 0x1}, {0x6}, {0x2, 0x1}, {0x6, 0x8}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x3}, {0x6, 0xa}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x2}, {0x6, 0x9}, {0x1, 0x7}, {0x3, 0xa}, {0x4}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x6}, {0x5, 0x7}, {0x4}, {0x3, 0x7}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x6}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}]}]}, @NL80211_ATTR_TID_CONFIG={0x45c, 0x11d, 0x0, 0x1, [{0x37c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x360, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xca7, 0x4, 0xe, 0x740a, 0x9, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x3, 0x9}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x6}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0xa}, {0x5}, {0x1}, {0x6, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x4}, {}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x1}, {0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x9}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x9, 0x8, 0x7, 0xa7cc, 0x1000, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0xa}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x5}, {0x4, 0x2}, {0x6, 0x5}, {0x7}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x2}, {0x1, 0x3}, {0x4, 0x5}, {0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x5}, {0x7, 0x8}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x5}, {0x2, 0x1}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0x9}, {}, {0x1}, {0x4, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x4}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0x8}, {0x6, 0x6}, {0x0, 0x4}]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x48, 0x48, 0x1, 0x4, 0x2, 0x4c, 0xb, 0x1b, 0x24, 0x1, 0x30, 0x25, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xf7, 0xbb2b, 0x2, 0x2, 0x4, 0x40, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8001, 0x0, 0xfffb, 0x5, 0x7, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x3, 0x3, 0x8, 0xf1a4, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x5, 0x8, 0x1ff, 0x101, 0x68de, 0x8]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffc, 0x6, 0x8, 0x0, 0x4, 0xffff, 0x1000]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x5, 0x39, 0x4, 0x5, 0x2, 0x24, 0x60, 0x16, 0x2c, 0x24, 0x1b, 0x2, 0x9, 0x9, 0x18, 0xb, 0x1, 0x3, 0x10, 0x30, 0x24, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x48, 0x36, 0xc, 0x12, 0x65, 0x24, 0x36, 0x12]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x8}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x3}, {0x1}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0x4}, {0x6, 0x7}, {0x5, 0x1}, {0x5, 0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x2, 0x9}, {0x2, 0x6}, {0x2}, {0x0, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x9, 0x9, 0x3, 0xfff8, 0x800, 0x4bce]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x3ff, 0x5000, 0x9, 0x0, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x100, 0x4000, 0x6412, 0x2, 0x8, 0xfffd, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x7, 0x6, 0x7, 0x3, 0x6, 0x4ca1]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x2, 0x48, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xaa4, 0x1, 0xf, 0x9, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x8}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x8}, {0x7, 0x6}, {0x5}, {0x3, 0x9}, {}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x3}, {0x1, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x5, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x8}, {0x7, 0x8}, {0x2, 0x1}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0xa}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x8}, {0x7, 0x6}, {0x7, 0x9}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0x6}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x6}, {0x5, 0x9}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x36, 0x60, 0x30, 0x60, 0x60, 0x2, 0xc, 0x3, 0xd, 0x16, 0x6, 0x24, 0x28, 0x550eabf68b4ccc72, 0x6c, 0xc, 0x1b, 0x9, 0x60, 0xc, 0x12, 0x2, 0x3, 0x1, 0x1b, 0x2, 0x48, 0x5, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0xdb0130e27834bde0}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0xa}, {0x5, 0x6}, {0x6, 0x9}, {0x5, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x3, 0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x400, 0x4, 0x49ff, 0x1, 0x9, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd309, 0x6, 0x0, 0x9, 0x1ff, 0x2, 0x8, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xa, 0x6, 0x9, 0x29, 0x4, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x7, 0x7fff, 0x8000, 0x2, 0xe, 0xd0, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x327b, 0x10, 0x6, 0xfffc, 0xbc8, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x6, 0xf, 0x2, 0x80, 0xf, 0xfffd, 0x7fff]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdb}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xb34}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) 1m53.353713988s ago: executing program 3 (id=7477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m53.351756598s ago: executing program 3 (id=7478): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x4e22, @private=0xa010102}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000000904fcfffffffcdbdf25005d000000", @ANYRES32=0x0, @ANYBLOB="02550400040000001c0012800b0001006970766c616e00000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000140)="74a4a6adf750b4855027a7bc709949d7f2f02d24de6557e01fce3a5fa08b88ff6c71a39ad0decb48bae7683d281ee91ebc07dca28c6f14fe47ac3b55e6ff158e1d8e3a761362702537c95c6a95574a5afcd6fc1c588903c1facf8c2a8e14eb180b34d2450af4c057109be94cea6e766f4d195d7e6dc0f4a8e8b3a797cd831ee2377e6bed283bdad2be6b8ae8fd13a78a328081c7546733beaf9e2915bdef13c5a4681f032f71a1fdbb77609d9c9854c1b7f36f1daf431d83b67d150ea6eb25f6cc08c3ba9ebc1c6a1da1a13322c07dd9fe36b771e36d87a483b5cd6f14b558609f637111bd58f54d3481b6ab3203", 0xee, 0x40080, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) 1m53.350486045s ago: executing program 3 (id=7479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x200000, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7, 0x700, 0x7d, 0x5, {{0x8, 0x4, 0x2, 0x10, 0x20, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @private=0xa010101, {[@lsrr={0x83, 0xb, 0x14, [@multicast1, @remote]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnetconf={0x3c, 0x52, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_RP_FILTER={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x80000000}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r5}, 0x38) 1m53.289802598s ago: executing program 3 (id=7480): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900042f00fe880000000000000000000000000001fe8000000000000000000000000000aa042088be0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000a1eae070fa9a865b4df0a68c06df1d303824c33c3c154449602daf0428d21801d931a8ccd9301e51d83cdfe053b6"], 0x0) 1m53.27947543s ago: executing program 3 (id=7481): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x9022}, 0x1, 0xe, 0x9, 0x6, 0x1b, 'syz1\x00', "2f99c0f18a7c576cc90203b1187c4c1712cb060e01c7b3b6ecca74ebbb6e6a9e", "cbb73122c5c8af6277acb7c8660520e739c2fbcbbaf48e07675a968bf12a36b2", [{0x2, 0x4, {0x3, 0xc}}, {0x3, 0x5, {0x1, 0x49b}}, {0xd, 0x5, {0x1, 0x2}}, {0x82, 0x55, {0x3, 0xff}}, {0x5, 0x8, {0x3, 0x2}}, {0x3, 0x5, {0x3, 0x8589}}, {0xffff, 0x3, {0x3, 0xb46}}, {0x4, 0xfff, {0x3, 0x8}}, {0x0, 0x8000, {0x1, 0x1}}, {0x5, 0x6, {0x0, 0x8}}, {0x7, 0x4, {0x3, 0x7}}, {0x6, 0x4, {0x1, 0x5}}, {0x4, 0xe, {0x0, 0xa}}, {0x6, 0x8, {0x0, 0x7}}, {0x3, 0x855, {0x3, 0x10001}}, {0xc, 0x8, {0x1, 0x1000}}, {0xaa9, 0x5, {0x0, 0x7041dcca}}, {0x5, 0x10, {0x3, 0x6}}, {0x4, 0x8, {0x3, 0x2}}, {0x6, 0x1, {0x2, 0x2}}, {0x400, 0x5a4e, {0x2, 0x7}}, {0x8, 0xffff, {0x2, 0x7}}, {0x2, 0x10, {0x2, 0x5}}, {0x80, 0x770, {0x2, 0x1}}, {0xe, 0x3ab, {0x1, 0x211}}, {0x7, 0x6f, {0x1, 0x1}}, {0x68a, 0x0, {0x2, 0x8d}}, {0x1, 0xb, {0x2, 0x5}}, {0xe80, 0x9, {0x0, 0x6}}, {0x70, 0x4, {0x3, 0x1}}, {0xf3fb, 0xb787, {0x3, 0x5}}, {0x5, 0x8, {0x0, 0x6}}, {0x0, 0x1, {0x3, 0xf41a}}, {0xffff, 0x9, {0x0, 0x80}}, {0x0, 0xd, {0x2, 0x800}}, {0xb9, 0x2558, {0x0, 0x5}}, {0x1ae, 0x6, {0x1, 0x8}}, {0x8, 0xa78, {0x1, 0xf}}, {0xe6bb, 0x8, {0x3, 0x2}}, {0xae, 0xaffe, {0x2, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x810}, 0x4880) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x28, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000680040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m53.214095373s ago: executing program 3 (id=7482): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r3, &(0x7f0000000840)="e6aaa18c6008103c3301ee0b30894a88807936738d1866e91b6acd2e6600009d8cb3f8f8a9d40c06", 0x28, 0x4048040, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x40}, 0x4054014) 1m38.219040079s ago: executing program 34 (id=7482): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r3, &(0x7f0000000840)="e6aaa18c6008103c3301ee0b30894a88807936738d1866e91b6acd2e6600009d8cb3f8f8a9d40c06", 0x28, 0x4048040, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x40}, 0x4054014) 1m11.723993911s ago: executing program 7 (id=8147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(0x0, 0x0, 0xfffffff7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 1m10.860038787s ago: executing program 7 (id=8173): r0 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffd7f, 0x8002}}]}, 0x34}}, 0x20008000) 1m10.68167231s ago: executing program 7 (id=8176): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x19c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x148, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa445}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xace}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7cf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x140}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x140}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x78, 0x2, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x90, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x37, 0x8, "f12e0ed63ad3cd9bdcc7c6f22fc0022f04f2c0a0c8ddf2218b2a304344db0813fbbc4b54419a254bae5af71438338bbc24beb0"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x4, 0x0, 0x0, {0x3}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14}}, 0x348}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000480)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "8b3f799fb334d51d"}}}}}, 0x2e) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 1m10.399208629s ago: executing program 7 (id=8183): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x824}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}], 0x2}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)="dfbbc728e801c3cc0a54630dbe1c8a0904960f98e68961cb6b9a3c32d4d2d7c476819f9b9b815eba43e318e6fa807ad1a3f048a7239c74e33cd51492f1290fefa777dfbebb9b26869ad32f104fc4b857ed0607a28b6672c259d39ca73d5b8c419244182b4322f786812dd2d73c48b2b6a0faa0b5f477c9f6b31ca470b16273d1b54357635bd527c7c8b4577d330a1b2e4d55749e1ff2f97636231f038eb88fc3de9648d5fb8a9b98cd46aeb44740f65e408a7d23f36f2e7ddd1d22f4f77defbff9ac6690d5bb19154f2eae60dcf3fa023284a5271014edf23bc02d0315f4bc372ed26345ad432f4365", 0xe9}, {&(0x7f0000000280)="39d8cd36ba397f9731acb2f36b8f29", 0xf}, {&(0x7f0000000e00)="5a4ce644230e1c53939feb4bd877536a852a278f35c5724cfb6752df1b96d04654f267dc103459187c8a0bd6f6226020d75760558d290c4336ddeae48fee6cb6e6d3f33aac887bf581eaf6ecc026240f512a5cd8eb7e04a6d02b080b88064aaac4e562bf670731d60806c3ddb013cbb84795760e36eabd57e5c4379933ba34d67bf7900a0c9fd444a6ff0402837fa0f885a66f38a236119ac1c1c6df", 0x9c}, {&(0x7f0000000840)="05ce83d64cf8bec0aed03484cd410c5fae8dcc8a7366681fdd56", 0x1a}, {&(0x7f0000000ec0)="4e044cf84412afd3f21fe2687827fc567e4759045b717532d8f7a4608a08e2d16a20dc03aee67db2380c870f2cdf9e6058fad01540ef02463f6ed77a5d45b37b15dfd9965ee88ca8e2d6d47758ba0463357a5d562258db1c529c06b21cff8c8a19ffa1029f94fea4e0d628073c435df4b21a6394551dcac3007945c91bcf300b08dcdd430320d25e1ec7f88a4f71ec7c15f83c6e66e12ce8e84568a6ac468d6403aa8910f830e62400d37fc872da806b194723d5b4c87b72574e9092a174a0000f85e6a27dbe1616aad16b", 0xcb}, {&(0x7f0000000fc0)="a84f802e3baea81fe8d8b22f3c4828e3d4199474a8b0e72c1e4ff65dd137215b95f6f002da", 0x25}, {&(0x7f0000002d00)="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", 0xd63}], 0x7}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m10.259014853s ago: executing program 7 (id=8187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x0, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb0000000000000009e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acdf902703c7bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x0, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb0000000000000009e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acdf902703c7bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) (async) 1m10.043970826s ago: executing program 7 (id=8192): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 54.949735313s ago: executing program 35 (id=8192): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 9.702487868s ago: executing program 5 (id=9284): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8, 0x1b, 0x1000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0xfffffffffffffe14}]}}}]}, 0x40}}, 0x0) 9.429380279s ago: executing program 5 (id=9289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)=r0}, 0x20) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x20000000, 0x2, 0x7, 0x80000000, {0x6, 0x1, 0x3, 0x6, 0x200, 0xc6}, {0x0, 0x0, 0x1, 0x5, 0x4, 0x10001}, 0x7fffffff, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xaffd, 0x3, 0x3, 0x1, 0x2, 0x6327, 0x8, 0x0, 0x40, 0x1, 0x3, 0x8, 0x7, 0xfffffff9, 0xffffffff, 0x80000000, 0x1, 0xc3, 0x10, 0x5, 0x200, 0x7, 0x7, 0x7d, 0x0, 0x80, 0x6, 0xfffffffd, 0x7f, 0x9, 0x400, 0x0, 0x7, 0x1, 0x2, 0x40, 0xfffffff9, 0xffffffff, 0x1, 0x1, 0x400, 0xfffffffe, 0x3, 0x0, 0x5, 0x4, 0x4, 0xfffff800, 0x4, 0x401, 0x3, 0x7fffffff, 0x1, 0x1, 0x8001, 0xf, 0x2f37, 0x6, 0x9, 0x4, 0x5, 0x101, 0x83, 0x1, 0x4, 0x7, 0x58b, 0x8f, 0x8001, 0x3, 0x5, 0x6, 0x80, 0x5, 0x81, 0x3, 0x7, 0x0, 0x3, 0xd3aa, 0xc690, 0x800, 0x3, 0x1, 0x0, 0x9, 0x0, 0x4, 0x10, 0xac3, 0x9, 0x728, 0x1, 0x0, 0x3, 0x8001, 0x7, 0x1, 0x8000, 0xa1f9, 0x2, 0x8, 0x0, 0x5415, 0xf1, 0x3, 0x7fffffff, 0xbb35, 0x1, 0x4, 0x0, 0x0, 0x5, 0xac, 0x7ff, 0x4, 0x1, 0x4, 0x4, 0x8000, 0x10, 0x7f, 0x8, 0x6, 0x2, 0x8, 0x800, 0x7, 0x9a2e, 0x1398, 0x5, 0xf7b1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x5, 0x1000, 0x0, 0x5, 0xb, 0x0, 0x5, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x6, 0xb03c, 0x7, 0x7ff, 0x80000001, 0x7fff, 0xffffffff, 0x6, 0x9, 0x9, 0x5, 0x200, 0x7fff, 0x1, 0x5, 0x6, 0x0, 0x80000000, 0x5, 0x80, 0x9, 0x7, 0x8, 0x363, 0x610b, 0xfff, 0x8, 0x4, 0x9, 0x6, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x1, 0x10, 0x2, 0xd9, 0x0, 0xffff2dae, 0x7fff, 0x6, 0x7, 0x6b85, 0x8, 0x5, 0x5, 0xffff, 0x0, 0x80, 0x6, 0x4, 0x11a1, 0x0, 0xf3, 0x1, 0x2, 0xb5, 0x4, 0x7, 0x0, 0x7ff, 0x4, 0x4, 0xc585, 0x10001, 0x5bb7, 0x3, 0x1, 0x5, 0x4, 0x8001, 0x8, 0x9, 0x9, 0x94, 0x3, 0xb, 0x4, 0x63, 0x1, 0x9, 0x1000, 0x1, 0x6, 0x8, 0x6d1, 0x0, 0x9, 0x5, 0x400, 0x81, 0x401, 0x7, 0x5, 0x4d, 0x2, 0x8d46, 0x4, 0x81, 0xff, 0xfd9, 0x7, 0x5ad, 0x7, 0x16b3]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@volatile={0x2}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x8}, @enum={0x2, 0x7, 0x0, 0x6, 0x4, [{0x6, 0x2}, {0x10, 0xfffffffb}, {0x9, 0x5}, {0xe, 0x7d4c}, {0x3, 0x20c}, {0xe, 0x9}, {0x5, 0x4909}]}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000400)=""/66, 0x97, 0x42, 0x1}, 0x28) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000e00)={r1, &(0x7f0000000d00)='#\x00', 0xa000, &(0x7f0000000d40)={@_ha_fsid={[0x3000000, 0x1935]}, {0x5409, 0x4, 0x2, 0x1}}, 0x53f8, &(0x7f0000000d80), &(0x7f0000000dc0)=0x6}) (async, rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x18, 0x7, 0x83, 0x6, 0x400, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x5, 0x9, 0x9, 0x55, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000280)='syzkaller\x00', 0xfffffff9, 0x5f, &(0x7f00000002c0)=""/95, 0x41100, 0x34, '\x00', r4, 0x1b, r5, 0x8, &(0x7f00000004c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r6, r7, r8, r9, r10, r11], &(0x7f00000008c0)=[{0x1, 0x3, 0xe, 0x8}, {0x3, 0x3, 0x4, 0x9}], 0x10, 0x5}, 0x94) 9.189884724s ago: executing program 5 (id=9296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x3, 0x0) unshare(0x22020600) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000440)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) unshare(0x10000200) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e1f, @private=0xa010100}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.112224313s ago: executing program 5 (id=9298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltclass={0xf0, 0x29, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x3, 0x2}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xfa}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x42}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x85, 0x4}}, @TCA_RATE={0x6, 0x5, {0x40, 0x6}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x1000}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3ff, 0x0, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x35a, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x8, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x2, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8001, 0x0, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x10, 0xffffffff, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x4e, 0x7fff}}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltclass={0xf0, 0x29, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x3, 0x2}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xfa}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x42}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x85, 0x4}}, @TCA_RATE={0x6, 0x5, {0x40, 0x6}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x1000}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3ff, 0x0, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x35a, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x8, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x2, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8001, 0x0, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x10, 0xffffffff, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x4e, 0x7fff}}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r1 = socket(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x139}], 0x1}}], 0x1, 0x81) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x139}], 0x1}}], 0x1, 0x81) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x2000001) 9.032608241s ago: executing program 5 (id=9299): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000040)={&(0x7f0000000000)=[{0x2, 0x0, 0xeb6000, 0xe, 0x1, 0x8, 0xd1, 0x9}], 0x1, 0x38, 0x1, 0x9}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000100)) (async, rerun: 32) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000180)={0x7, 0x10, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x80000001) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000200)=',&\x00', 0x951880, &(0x7f0000000240)={@_ha_fsid={[0x40, 0x18]}, {0x7, 0x3, 0x81, 0x3}}, 0x100, &(0x7f0000000280), &(0x7f00000002c0)=0x5}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async, rerun: 32) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000003c0)=0x74) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x100, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ip={@empty, @remote, 0xff000000, 0xff000000, 'pim6reg0\x00', 'batadv0\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x69}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7fff, 0x40, 0x8, 0x1, 0x9, 0x800, 0x8, 0x2]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4}}, @common=@unspec=@mac={{0x30}, {@empty, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000880)={'sit0\x00', &(0x7f00000007c0)={@dev={0xac, 0x14, 0x14, 0x16}, 0x1, 0x0, 0x90, 0x0, [{}, {@private}, {}, {@multicast2}, {@initdev}, {@local}, {@private}, {@local}, {@private}]}}) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xf26f6c9ae3998250}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x80, 0x1405, 0x4, 0x0, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x40) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4004011) (async, rerun: 32) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) (rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000bc0)={0x6, 0x1, 0x8000, 0x1, 0x8c0, 0x11c9, 0x0, 0x0, 0x0}, &(0x7f0000000c00)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000c40)={r4, 0xeb}, &(0x7f0000000c80)=0x8) (async) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000cc0), &(0x7f0000000d00)=0x30) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000dc0)={'ip6tnl0\x00', &(0x7f0000000d40)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x4, 0x3f, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x7, 0x4, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000e80)={'erspan0\x00', &(0x7f0000000e00)={'sit0\x00', r5, 0x8, 0x8, 0x1, 0x1, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x7f, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x2}, {@rand_addr=0x64010101, 0x7}, {@empty, 0x200}, {@multicast1, 0x400}, {@empty, 0x7}, {@broadcast, 0x4}, {@local, 0xfffffff1}]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000ec0)={r4, @in6={{0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x8866}}, 0x1ff, 0x2, 0x0, 0x101, 0x0, 0x2, 0x1}, 0x9c) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xbc, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x41) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000001100)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x1}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001140)={r4, @in6={{0xa, 0x4e22, 0x8001, @remote, 0xc8}}, 0x4, 0x2000}, 0x90) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001200)={r4, 0x14, "3f3d8fd2c8a467a934f87fb157bb4c59ac5cf699"}, &(0x7f0000001240)=0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001280)={r8, 0x400}, 0x8) 8.914318353s ago: executing program 5 (id=9302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000360009000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000000036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b0113000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a8cb62d81814c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c550282778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b358f571cd15af64f69951d79e5b57ba3640d345fbe1c9bf7ca74846bf4c2a73a80cee7c15839e2326694f6f5cc5408cbfdef7c6868299b1c8cdaf52740cc2e66daafc00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000004c0)={'erspan0\x00', {0x2, 0x4e22, @multicast2}}) connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="7816", 0x2}], 0x1}}], 0x1, 0x20040020) syz_genetlink_get_family_id$team(&(0x7f0000000200), r5) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x81, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r3}, @alu={0x4, 0x1, 0x5, 0x2, 0x2, 0x80, 0xffffffffffffffff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @flow_dissector=0x11, r4, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x5, 0x2, 0x2}, 0x10, r8, r0, 0xa, 0x0, &(0x7f0000000340)=[{0x0, 0x4, 0x0, 0x8}, {0x2, 0x2, 0x6, 0x9}, {0x2, 0x2, 0x2, 0x2}, {0x2, 0x1, 0x5, 0x7}, {0x2, 0x2, 0x8, 0x6}, {0x0, 0x4, 0x7, 0x3}, {0x0, 0x5, 0x0, 0x7539f6fd40659e99}, {0x0, 0x4, 0xc, 0x8}, {0x2, 0x2, 0x8}, {0x0, 0x5, 0xa, 0x4}], 0x10, 0x4}, 0x94) 2.643550047s ago: executing program 6 (id=9381): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg\x00', 0x0}) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000040)="fb3079faaf84eb03d512a5de4284401df69d1529f848304c70de9e8fec53fdcf94bdfb8b54229b26e8cb91b0d896fe18fb76e43c58799f") ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='pim6reg\x00', 0x200000, &(0x7f0000000100)={@_ha_fsid={[0x1, 0x9]}, {0x3, 0x9, 0xffffff81}}, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x5}) ioctl$XFS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, r2, 0x3, 0x0, 0x2}, 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, r2, 0x3, 0x0, 0x2}, 0x50) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000300)={0x3, 0x8, '\x00', 0x1, &(0x7f00000002c0)=[0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000300)={0x3, 0x8, '\x00', 0x1, &(0x7f00000002c0)=[0x0]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000340)) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) (async) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000003c0)={{0x200, 0x4}, 0x100, './file0\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000500)=0x1) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000540)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000580)="abbed98bf4942bbf2ddd24c70bd82012df4bf65dd2696feac31ce26ded95b628c18b25723c41945c79b9ce62a401ef80984422ab3bf34a0e5c30ae6ac8ace7b88378cb83718796e735819909b58fc2b177067354789561be9322e95ad7586ed5a6ca433f879ef306ff64a4f9437b0778a00c544f96d43c54aa528a70061a5ae4dd9650edfcc75b0a85df57251729758b79804ff8b3e569656878073f7187563e0091708d65a3ad9548860241f42f31920e74a612b07ad9fc81f0ab4951d7e21fd60797d80f2781d32f134c550f7d7cedebbc2647f0ed2423a606cf6a5894c26272f4a14bbabe31956380bfb175", 0xed}, {&(0x7f0000000680)="1be4f8b9395a98c00167c7c70968398c61245d061f92d4942c54a30012e90561159d2c9d36eac7bcfe28f2d9b1d9a32ca8c04b236a410ff6e330ac345ccdf503e0d86aa2b85f02fdde7a31849a9f31697b48c90eae1005f0ec9fb4ef88be4afde27cc1fbd0e265357622d597d9494cbd3dcb280e7a6160f26f6cb8e773d2cf5311fe43e3f88623e33debdddc7f41b6fdfe8cd5bfceffcf02b4375f88e45d784fa7f8e383dfbfafa978", 0xa9}], 0x2, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}], 0x98}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000540)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000580)="abbed98bf4942bbf2ddd24c70bd82012df4bf65dd2696feac31ce26ded95b628c18b25723c41945c79b9ce62a401ef80984422ab3bf34a0e5c30ae6ac8ace7b88378cb83718796e735819909b58fc2b177067354789561be9322e95ad7586ed5a6ca433f879ef306ff64a4f9437b0778a00c544f96d43c54aa528a70061a5ae4dd9650edfcc75b0a85df57251729758b79804ff8b3e569656878073f7187563e0091708d65a3ad9548860241f42f31920e74a612b07ad9fc81f0ab4951d7e21fd60797d80f2781d32f134c550f7d7cedebbc2647f0ed2423a606cf6a5894c26272f4a14bbabe31956380bfb175", 0xed}, {&(0x7f0000000680)="1be4f8b9395a98c00167c7c70968398c61245d061f92d4942c54a30012e90561159d2c9d36eac7bcfe28f2d9b1d9a32ca8c04b236a410ff6e330ac345ccdf503e0d86aa2b85f02fdde7a31849a9f31697b48c90eae1005f0ec9fb4ef88be4afde27cc1fbd0e265357622d597d9494cbd3dcb280e7a6160f26f6cb8e773d2cf5311fe43e3f88623e33debdddc7f41b6fdfe8cd5bfceffcf02b4375f88e45d784fa7f8e383dfbfafa978", 0xa9}], 0x2, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}], 0x98}, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000880)=0x9, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_DIOINFO(r6, 0x800c581e, &(0x7f00000008c0)) (async) ioctl$XFS_IOC_DIOINFO(r6, 0x800c581e, &(0x7f00000008c0)) recvfrom$inet(r5, &(0x7f0000000900)=""/221, 0xdd, 0x10000, &(0x7f0000000a00)={0x2, 0x4e20, @local}, 0x10) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000a40)={0x30000002}) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000a80)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x101, 0x80000001, 0x3ff, 0xd560, 0xc8]}, &(0x7f0000000b00)=0x78) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000b40)="9be9e170fa5c2c093329fa77ea4b240f51d9") (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000b40)="9be9e170fa5c2c093329fa77ea4b240f51d9") setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000b80)={0x1, 0x8, 0x6, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010100}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000bc0)={0x0, 0x7fffffff, 0x30}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)) bind$can_j1939(r2, &(0x7f0000000c40)={0x1d, r1, 0x0, {0x3, 0x1, 0x1}, 0xff}, 0x18) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000d80)={r5, &(0x7f0000000c80)='*,-\x00', 0x600082, &(0x7f0000000cc0)={@_ha_fsid={[0xc3, 0x4]}, {0x1, 0x0, 0x9}}, 0xb, &(0x7f0000000d00), &(0x7f0000000d40)=0x1}) 2.336398974s ago: executing program 2 (id=9386): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@loopback, @loopback}, 0x8) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r2}, 0x18) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000000340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x80, 0x0, 0x1, 0x200, r4, 0x9, '\x00', r5, r6, 0x1, 0x5, 0x2, 0xe}, 0x50) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x6e922}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x4) 2.201664133s ago: executing program 6 (id=9388): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x5, 0x3, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32, @ANYBLOB="de6984283cb11ab4ea37cea44c1a087dc0ae68ce2fa7d8ea33998e37c61e95d6fd2d77390c15a2dc7380dde4aabb626957b8d3e9142e365326dbb22cca7f85d819818d4eaad6b9821ebc", @ANYRES64=0x0], 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x1, 0x1, 0x4, 0x1, 0x3ff, 0x2, 0x9}, &(0x7f0000000080)={0x7, 0x0, 0x8, 0x1, 0x7, 0xfffffffffffffffc, 0x4, 0xe7c}, &(0x7f0000000140)={0x2, 0xfffffffffffffff7, 0x1, 0x8000000000000000, 0x1ff, 0x6, 0xe2f, 0x101}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x3]}, 0x8}) 2.057775658s ago: executing program 8 (id=9389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000700)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x2, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4}}}]}]}, 0x50}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000400)) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r11, 0x25, 0x0, @val=@netkit={@void, @value=r8}}, 0x1c) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) write$tun(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x141) (async) setsockopt(r12, 0x84, 0x18, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x75, 0x3a, 0x1000, 0x8, 0x0, 0x0, 0xfffffffd}, 0x1c) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r10, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) 1.931350938s ago: executing program 6 (id=9390): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) socket$inet6(0xa, 0x3, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000840)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x12, 0x10001, 0x6b}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587547"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.880923723s ago: executing program 2 (id=9392): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r1, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000000740)={0xfffffffd, 0x10, 0x1, 0x1fa4, 0x4, 0x4, 0xfffffffe, 0x7}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRESOCT=r1, @ANYBLOB="3f00200006020400280012800b0001006272696467650000180002800c002e0003000000060000000500070008", @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000040) 1.675210102s ago: executing program 2 (id=9393): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="167f000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.619641964s ago: executing program 1 (id=9394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r1) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r9, 0x0, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) 1.56147239s ago: executing program 8 (id=9395): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.489633664s ago: executing program 2 (id=9396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in=@local, 0x4e23, 0x0, 0x4e20, 0x0, 0x2}, {0x1, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x4d3, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x181}, 0x14}}, 0x0) 1.461200902s ago: executing program 1 (id=9397): r0 = socket(0x10, 0x3, 0x0) (async) clock_gettime(0x1, &(0x7f0000000080)) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010008000000000000000000000a54000000060a0b04000000000000000002000000200004801c0001800900010068617368000000000c00028008000740000000010900010073797a30000000000900020073797a320000000005000740db000000140000001100010000000000000000000040000a46ca0b99c706bcd940610a40102fb256ffe8f9d7608bbe5e4ba03942e613acb77c8ec2301f983a78677e1277948fb90730e3c26e1ac58b5bab2c54965dcf5be8d2705454d0eb03b10a3eaf6ed70c6218cb9abb4be8c0ec909321310505e818d60e3906a0ea267980d01e5864b4cbef2ac80bdb94be4f1eb6c919cdbcdc3f6f47fe9901232e2b11c3ec6ee297ced847f41dc1473f3e8eb0bce1cc22d275e7819afdc7fcfa25c5b03fedbd915ff80814a8cb"], 0x7c}}, 0x0) setsockopt(r0, 0x6, 0x75, &(0x7f0000000500)="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", 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100e81cbcde000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a30"], 0xec}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) 1.281467971s ago: executing program 2 (id=9398): syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32, @ANYBLOB="08000500010000001400040074"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4004001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pimreg0\x00', @multicast}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083300fe88a43de1a400000046000000007d01ff020000000000000000000000000001"], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r5) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x919, 0x7, 0xfd, 0x2}, {0xd800, 0x59, 0x8f, 0x7}, {0x1, 0x8, 0xf}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000380)=r6) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/net\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32, @ANYBLOB="08000500010000001400040074"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4004001) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pimreg0\x00', @multicast}) (async) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083300fe88a43de1a400000046000000007d01ff020000000000000000000000000001"], 0xfdef) (async) pipe(&(0x7f0000000000)) (async) close(r5) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x919, 0x7, 0xfd, 0x2}, {0xd800, 0x59, 0x8f, 0x7}, {0x1, 0x8, 0xf}]}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getpid() (async) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000380)=r6) (async) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/net\x00') (async) 1.277281969s ago: executing program 1 (id=9399): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0x1f, 0x1, 0x2) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x1, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0xffffffffffffff94, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0040, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000068f9d5c0000000000008c000000ff000069d18f4f1ecef03590bb3ce3a5171b3967a8278891737e9ddf7fdffedf5872baee2991d60d1f75c501111e03e87eec1e83faf1f1d2f58b856d8c4af5e08d49", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020600000000000000000003002200850000006c0000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x4c}}, 0x2000a100) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) 1.160274874s ago: executing program 8 (id=9400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113680000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113680000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000480000004800000004000000030000000000000901000000000000000000000300000000030000000100000008000000050000000100001306000000070000000300000003000000080000000000000c01000000005f2e"], 0x0, 0x64, 0x0, 0x1, 0xfffffffa, 0x10000}, 0x28) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x80000001, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@loopback, @in6=@mcast2, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@loopback, @in6=@mcast2, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 977.762736ms ago: executing program 8 (id=9401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x1}, 0x2000c010) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket(0x1d, 0x0, 0x4) 914.059634ms ago: executing program 6 (id=9402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xfdaf) syz_emit_ethernet(0x3b6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0x4009}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f00000012c0)=""/206, 0xce}, {&(0x7f0000000800)=""/137, 0x89}, {&(0x7f0000000040)=""/156, 0x9c}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f00000038c0)=""/4121, 0x1019}], 0x6}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x40, 0x0) 803.703022ms ago: executing program 2 (id=9403): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x0, 0x1f8, 0x0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'wg0\x00', {0xff}, {0xff}, 0x3b, 0xff, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xffffffff, 0x0, 0xffffff00, 0xffffff00], 0x4, 0x1, {0x4}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xff, 0x0, 0xff000000], 'wlan1\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x9, 0x7, 0x10}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x4, 0xb5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 736.457581ms ago: executing program 6 (id=9404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x55, 0xfffffffe, 0x97, 0x11440, 0x1, 0x1, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 681.415118ms ago: executing program 1 (id=9405): socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r2, r2, 0x0, 0x4) socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x3ff}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x6004812, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0x8, 0x6, @broadcast}, 0x14) 560.12989ms ago: executing program 8 (id=9406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x3, 0x11, 0x2}}]}, 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x3, 0x11, 0x2}}]}, 0x4c}}, 0x0) (async) 525.1116ms ago: executing program 1 (id=9407): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000009aa248300000000071105348000000000000000000000000223fd049"], &(0x7f0000000400)='syzkaller\x00'}, 0x80) (async) r2 = accept(r0, &(0x7f0000000500)=@nfc, &(0x7f0000000580)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000020000000c000000180001801400020076657468315f766972745f77696669001800038014"], 0x44}, 0x1, 0x0, 0x0, 0x4054}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xc0, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xe0a}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r8, 0xff06, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100010000002db5ec6ebd7233aa470eb6bed136f9445ab4be6ca1425d321c1d3b0ecffaec7a31b742ee0926468db3b632bdfc115de4605fd3341bfd189bc885a29d84a1a7d7b2f677125d59d5b52adac986f7cd3d9bb0887d74427cd362dbb4b43c6223e73e70cb062ba162d347f96a4c86db332f68b2840ea14c942e4abf4b4b7e1ccff9b964901daa"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f, 0x30]}}, 0x0, 0x29}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef000000000000000000000000060003000a0000000800010000000000240002"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000c5) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) 289.796025ms ago: executing program 8 (id=9408): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1e, 0x81, 0x37}, {@rand_addr=0x64010105, 0x4e23, 0x0, 0xc3, 0x3, 0x12d5c}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000044) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x2b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'dh\x00', 0x1, 0x400, 0x62}, 0x2c) 257.332993ms ago: executing program 6 (id=9409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000700)={r1, "61d40bf7fae404830c982f4639def9d8"}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 0s ago: executing program 1 (id=9410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x20002890}, 0x10) kernel console output (not intermixed with test programs): 2 bytes leftover after parsing attributes in process `syz.1.7622'. [ 531.920350][ T699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7621'. [ 531.944245][ T699] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 532.051990][ T712] netlink: 'syz.5.7626': attribute type 2 has an invalid length. [ 532.098602][ T721] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.7629'. [ 532.107792][ T721] veth0_to_bond: default FDB implementation only supports local addresses [ 532.187687][ T730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7627'. [ 532.253800][ T732] block nbd5: not configured, cannot reconfigure [ 532.329373][ T741] bond6: (slave geneve2): making interface the new active one [ 532.337663][ T741] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 532.346767][ T5858] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 532.355595][ T5858] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 532.364378][ T5858] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 532.373436][ T5858] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 533.154215][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888040e43000: rx timeout, send abort [ 533.352865][ T793] IPVS: Error connecting to the multicast addr [ 533.364095][ T794] IPVS: Error connecting to the multicast addr [ 533.480791][ T799] x_tables: duplicate underflow at hook 2 [ 533.491049][ T799] xt_hashlimit: max too large, truncated to 1048576 [ 533.578216][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c2f1400: rx timeout, send abort [ 533.699558][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888040e43000: abort rx timeout. Force session deactivation [ 533.743106][ T823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.806241][ T823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.136306][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c2f1400: abort rx timeout. Force session deactivation [ 534.570126][ T822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.953234][ T906] syzkaller0: entered promiscuous mode [ 534.963203][ T906] syzkaller0: entered allmulticast mode [ 534.975237][ T906] 8021q: VLANs not supported on ipvlan0 [ 535.298702][ T930] x_tables: duplicate underflow at hook 2 [ 535.463598][ T950] validate_nla: 9 callbacks suppressed [ 535.463615][ T950] netlink: 'syz.6.7676': attribute type 4 has an invalid length. [ 535.603376][ T967] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20002 [ 535.653442][ T967] netlink: 'syz.6.7679': attribute type 3 has an invalid length. [ 535.669675][ T967] __nla_validate_parse: 30 callbacks suppressed [ 535.669691][ T967] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7679'. [ 535.964877][ T991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7684'. [ 535.979364][ T991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7684'. [ 536.179748][ T999] tipc: Enabled bearer , priority 0 [ 536.272470][ T1001] syzkaller0: entered promiscuous mode [ 536.278926][ T1001] syzkaller0: entered allmulticast mode [ 536.315159][ T1001] tipc: Resetting bearer [ 536.334827][ T998] tipc: Resetting bearer [ 536.352489][ T998] tipc: Disabling bearer [ 536.520802][ T1019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7690'. [ 536.559570][ T1019] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 536.562836][ T1017] netlink: 51 bytes leftover after parsing attributes in process `syz.1.7689'. [ 536.793677][ T1043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7694'. [ 536.842518][ T1043] bridge0: Device is already in use. [ 536.938753][ T1053] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7695'. [ 536.973687][ T1057] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7697'. [ 537.111317][ T1074] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7702'. [ 537.144383][ T1074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7702'. [ 537.333499][ T1091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.345176][ T1091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.358271][ T1091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 537.421745][ T1091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.439711][ T1091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.453728][ T1091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 537.551954][ T1091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.562245][ T1091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.572582][ T1091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 537.664992][ T1091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.678078][ T1091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.691397][ T1091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 537.786301][T10510] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.794569][T10510] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 537.803694][T10510] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 537.815188][T10510] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.823363][T10510] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 537.831603][T10510] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 537.843040][T10510] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.851212][T10510] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 537.859438][T10510] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 537.880650][T10508] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.888996][T10508] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 537.897298][T10508] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 538.114230][ T1137] lo speed is unknown, defaulting to 1000 [ 538.130620][ T1137] lo speed is unknown, defaulting to 1000 [ 538.138166][ T1137] lo speed is unknown, defaulting to 1000 [ 538.144432][ T1137] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 538.159512][ T1137] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 538.176856][ T1137] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 538.189802][ T1137] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 538.223023][ T1137] lo speed is unknown, defaulting to 1000 [ 538.231500][ T1137] lo speed is unknown, defaulting to 1000 [ 538.238664][ T1137] lo speed is unknown, defaulting to 1000 [ 538.245322][ T1137] lo speed is unknown, defaulting to 1000 [ 538.252404][ T1137] lo speed is unknown, defaulting to 1000 [ 538.259535][ T1137] lo speed is unknown, defaulting to 1000 [ 538.266592][ T1137] lo speed is unknown, defaulting to 1000 [ 538.273117][ T1137] lo speed is unknown, defaulting to 1000 [ 538.280241][ T1137] lo speed is unknown, defaulting to 1000 [ 538.294572][T10508] tipc: Subscription rejected, illegal request [ 538.301589][ T1143] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 538.470455][ T1154] macsec2: entered promiscuous mode [ 538.480540][ T1154] bridge0: entered promiscuous mode [ 538.490438][ T1154] macsec2: entered allmulticast mode [ 538.496853][ T1154] bridge0: entered allmulticast mode [ 538.666376][ T1174] netlink: 'syz.2.7730': attribute type 1 has an invalid length. [ 538.674153][ T1174] netlink: 'syz.2.7730': attribute type 2 has an invalid length. [ 538.710284][ T1178] team_slave_1: entered promiscuous mode [ 538.814928][ T8599] IPVS: starting estimator thread 0... [ 538.909030][ T1202] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 538.962831][ T1209] netlink: 'syz.1.7738': attribute type 1 has an invalid length. [ 538.976780][ T1190] IPVS: using max 48 ests per chain, 115200 per kthread [ 539.137076][ T1219] sctp: [Deprecated]: syz.2.7745 (pid 1219) Use of int in maxseg socket option. [ 539.137076][ T1219] Use struct sctp_assoc_value instead [ 539.138781][ T1220] openvswitch: netlink: IP tunnel dst address not specified [ 539.620158][ T1249] netlink: 'syz.2.7752': attribute type 21 has an invalid length. [ 539.645102][ T1249] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 539.671498][ T1249] bond6 (unregistering): Released all slaves [ 539.864326][ T1261] nbd: couldn't find a device at index 0 [ 539.995230][ T4938] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 540.004391][ T4938] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 540.012277][ T4938] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 540.020509][ T4938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 540.028731][ T4938] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 540.527728][ T1302] netlink: 'syz.2.7764': attribute type 3 has an invalid length. [ 540.709855][ T1321] __nla_validate_parse: 21 callbacks suppressed [ 540.709887][ T1321] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7771'. [ 540.715276][ T1271] vxcan1 speed is unknown, defaulting to 1000 [ 540.943631][ T1343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7774'. [ 540.977016][ T1344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7774'. [ 541.051998][ T1349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.060159][ T1349] IPv6: NLM_F_CREATE should be set when creating new route [ 541.117775][ T1271] lo speed is unknown, defaulting to 1000 [ 541.254772][ T1365] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7779'. [ 541.262428][ T1373] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 541.290252][ T1373] bond6 (unregistering): Released all slaves [ 541.315000][ T1382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7781'. [ 541.324692][ T1382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7781'. [ 541.447192][ T1271] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.454360][ T1271] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.461603][ T1271] bridge_slave_0: entered allmulticast mode [ 541.468468][ T1271] bridge_slave_0: entered promiscuous mode [ 541.475949][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.483305][ T1271] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.502573][ T1271] bridge_slave_1: entered allmulticast mode [ 541.502875][ T1400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7783'. [ 541.509527][ T1271] bridge_slave_1: entered promiscuous mode [ 541.541858][ T1271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.553057][ T1271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.579737][ T1271] team0: Port device team_slave_0 added [ 541.587313][ T1271] team0: Port device team_slave_1 added [ 541.622161][ T1271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.629211][ T1271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.655078][ T1271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.666893][ T1271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.673833][ T1271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.700319][ T1271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.830794][ T1271] hsr_slave_0: entered promiscuous mode [ 541.837480][ T1427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7791'. [ 541.838179][ T1271] hsr_slave_1: entered promiscuous mode [ 541.863108][ T1271] debugfs: 'hsr0' already exists in 'hsr' [ 541.869484][ T1271] Cannot create hsr debugfs directory [ 542.067176][ T4938] Bluetooth: hci7: command tx timeout [ 542.087379][ T1442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7796'. [ 542.130136][ T1271] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 542.148536][ T1271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.168863][ T1271] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 542.201601][ T1271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.243388][ T1271] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 542.256905][ T1271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.264894][ T1271] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 542.280240][ T1271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.297850][ T1465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7800'. [ 542.319223][ T1466] netlink: 'syz.6.7799': attribute type 1 has an invalid length. [ 542.366852][ T1474] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 542.387984][ T1474] bond6 (unregistering): Released all slaves [ 542.442251][ T1271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.502011][ T1271] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.540803][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.547967][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.588274][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.595407][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.606828][ T1486] openvswitch: netlink: IP tunnel dst address not specified [ 542.628785][ T1488] syzkaller0: entered promiscuous mode [ 542.646863][ T1488] syzkaller0: entered allmulticast mode [ 542.790682][ T1495] gretap1: entered promiscuous mode [ 542.813043][ T1495] batman_adv: batadv0: Adding interface: gretap1 [ 542.824769][ T1495] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 542.850737][ T1495] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 542.861663][ T1500] openvswitch: netlink: IPv4 tun info is not correct [ 543.100444][ T1521] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 543.118375][ T1521] bond8 (unregistering): Released all slaves [ 543.164218][ T1520] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 543.177710][ T1520] bond8 (unregistering): Released all slaves [ 543.198197][ T1524] xfrm1: entered promiscuous mode [ 543.204033][ T1524] xfrm1: entered allmulticast mode [ 543.397335][ T1271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.420268][ T1537] bridge0: left allmulticast mode [ 543.425332][ T1537] bridge0: left promiscuous mode [ 543.430619][ T1537] macsec2: left promiscuous mode [ 543.473636][ T1537] gretap1: left promiscuous mode [ 543.478707][ T1537] xfrm1: left promiscuous mode [ 543.485395][ T1540] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 543.502047][ T1537] tipc: Failed to remove unknown binding: 66,0,0/0:74979971/74979972 [ 543.538880][ T1537] tipc: Failed to remove unknown binding: 66,0,0/0:74979971/74979972 [ 543.567236][ T1551] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 543.773059][ T1566] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 543.792431][ T1566] bond8 (unregistering): Released all slaves [ 543.879121][ T1271] veth0_vlan: entered promiscuous mode [ 543.921544][ T1271] veth1_vlan: entered promiscuous mode [ 543.927724][ T1579] netlink: 'syz.2.7826': attribute type 1 has an invalid length. [ 543.999056][ T1271] veth0_macvtap: entered promiscuous mode [ 544.011840][ T1271] veth1_macvtap: entered promiscuous mode [ 544.038456][ T1271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.071039][ T1271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.103499][ T6363] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.127748][ T6363] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.147323][ T4938] Bluetooth: hci7: command tx timeout [ 544.172968][ T6363] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.211147][ T6363] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.386571][T10528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.406047][T10528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.479735][ T1623] syzkaller0: entered promiscuous mode [ 544.485389][ T1623] syzkaller0: entered allmulticast mode [ 544.587319][ T1631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.768523][ T1638] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 546.226053][ T4938] Bluetooth: hci7: command tx timeout [ 547.262325][ T1601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.296692][ T1635] __nla_validate_parse: 15 callbacks suppressed [ 547.296712][ T1635] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7838'. [ 547.313441][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.331284][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.394362][ T1659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7844'. [ 547.430031][ T1660] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 547.532214][ T1667] syzkaller0: entered promiscuous mode [ 547.544718][ T1667] syzkaller0: entered allmulticast mode [ 547.554646][ T1667] netlink: 212288 bytes leftover after parsing attributes in process `syz.6.7845'. [ 547.601601][ T1675] netlink: 'syz.1.7849': attribute type 1 has an invalid length. [ 547.629627][ T1678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7850'. [ 547.640770][ T1678] netlink: 'syz.5.7850': attribute type 2 has an invalid length. [ 547.710771][ T1683] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7851'. [ 547.749861][ T1685] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7852'. [ 547.759815][ T1685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.779905][ T1683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7851'. [ 547.994126][ T1711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7859'. [ 548.306203][ T4938] Bluetooth: hci7: command tx timeout [ 548.315416][ T1743] sctp: [Deprecated]: syz.1.7867 (pid 1743) Use of int in maxseg socket option. [ 548.315416][ T1743] Use struct sctp_assoc_value instead [ 548.320110][ T1745] netlink: 'syz.2.7868': attribute type 1 has an invalid length. [ 548.339875][ T1745] netlink: 280 bytes leftover after parsing attributes in process `syz.2.7868'. [ 548.416758][ T1743] netlink: 'syz.1.7867': attribute type 1 has an invalid length. [ 548.432325][ T1743] tipc: Enabling of bearer rejected, already enabled [ 548.542138][ T1755] syzkaller0: entered promiscuous mode [ 548.547667][ T1755] syzkaller0: entered allmulticast mode [ 548.620921][ T1748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7870'. [ 548.693617][ T1764] netlink: 'syz.7.7873': attribute type 4 has an invalid length. [ 548.715078][ T1748] bond6: entered promiscuous mode [ 548.720144][ T1748] bond6: entered allmulticast mode [ 549.087731][ T1779] syzkaller0: entered promiscuous mode [ 549.093482][ T1779] syzkaller0: entered allmulticast mode [ 549.368974][T10528] tipc: Resetting bearer [ 549.439069][ T1814] openvswitch: netlink: Message has -2 unknown bytes. [ 549.632894][ T1828] vlan1: entered allmulticast mode [ 549.652006][ T1828] veth0_vlan: entered allmulticast mode [ 549.996100][ T1850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 550.427770][ T1865] team0: entered promiscuous mode [ 550.441560][ T1865] team0: entered allmulticast mode [ 551.526367][ T1758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.540151][ T1848] netlink: 'syz.5.7892': attribute type 1 has an invalid length. [ 551.742322][ T1876] bridge0: port 3(gretap0) entered blocking state [ 551.752899][ T1876] bridge0: port 3(gretap0) entered disabled state [ 551.759496][ T1876] gretap0: entered allmulticast mode [ 551.776261][ T1876] gretap0: entered promiscuous mode [ 551.782248][ T1876] bridge0: port 3(gretap0) entered blocking state [ 551.788732][ T1876] bridge0: port 3(gretap0) entered forwarding state [ 551.984057][ T1907] syz_tun: refused to change device tx_queue_len [ 552.103553][ T1911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.200001][ T1929] bond2 (unregistering): Released all slaves [ 552.231328][ T1933] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 552.458303][ T1952] netlink: 'syz.7.7922': attribute type 7 has an invalid length. [ 552.563864][ T1959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.570571][ T1961] __nla_validate_parse: 9 callbacks suppressed [ 552.570599][ T1961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7927'. [ 552.592349][ T1961] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.665348][ T1969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7929'. [ 552.745251][ T1964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7928'. [ 552.753797][ T1976] tunl0: entered promiscuous mode [ 552.769836][ T1976] netlink: 'syz.5.7931': attribute type 4 has an invalid length. [ 552.779040][ T1976] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7931'. [ 552.822436][ T1976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7931'. [ 552.850672][ T1980] netlink: 'syz.1.7932': attribute type 1 has an invalid length. [ 552.868998][ T1976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.950348][ T1990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7935'. [ 552.962817][ T1976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.037766][ T1976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.680965][ T2035] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 553.691549][ T2035] bond7 (unregistering): Released all slaves [ 554.226627][ T4938] Bluetooth: hci1: command 0x040f tx timeout [ 556.095373][ T2003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.217943][ T2040] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7947'. [ 556.240398][ T2045] mac80211_hwsim hwsim94 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 556.272753][ T2046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7951'. [ 556.286242][ T2051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7950'. [ 556.299636][ T2053] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 556.311530][ T2046] veth0_macvtap: left promiscuous mode [ 556.452647][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7959'. [ 556.539322][ T2080] netlink: 'syz.7.7962': attribute type 29 has an invalid length. [ 556.556428][ T2080] netlink: 'syz.7.7962': attribute type 29 has an invalid length. [ 556.710629][ T2099] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 556.946179][ T4938] Bluetooth: hci4: command 0x0406 tx timeout [ 557.094714][ T2153] netlink: 'syz.1.7979': attribute type 1 has an invalid length. [ 557.183954][ T2162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.304140][ T2169] netlink: 'syz.6.7985': attribute type 2 has an invalid length. [ 557.557483][ T2194] No such timeout policy "syz1" [ 557.582683][ T2192] bond7: option lp_interval: invalid value (0) [ 557.621271][ T2192] bond7: option lp_interval: allowed values 1 - 2147483647 [ 557.669397][ T2192] bond7 (unregistering): Released all slaves [ 557.763688][ T2187] bridge9: entered promiscuous mode [ 557.769237][ T2187] bridge9: entered allmulticast mode [ 557.780076][ T2187] __nla_validate_parse: 26 callbacks suppressed [ 557.780091][ T2187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7991'. [ 557.824255][ T2223] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7999'. [ 557.833246][ T2223] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7999'. [ 557.842512][ T2223] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7999'. [ 558.060449][ T2247] openvswitch: netlink: IP tunnel dst address not specified [ 558.098266][ T2253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8008'. [ 558.107501][ T2253] netlink: 'syz.1.8008': attribute type 1 has an invalid length. [ 558.115913][ T2253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8008'. [ 558.148349][ T2258] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 558.324730][ T2272] netlink: 'syz.2.8016': attribute type 1 has an invalid length. [ 558.343589][ T2272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 558.381434][ T2272] bond7: (slave geneve2): making interface the new active one [ 558.390243][ T2266] netlink: 'syz.1.8014': attribute type 4 has an invalid length. [ 558.390247][ T2272] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 558.489571][ T2281] syzkaller0: entered promiscuous mode [ 558.495098][ T2281] syzkaller0: entered allmulticast mode [ 558.505109][ T2281] netlink: 'syz.2.8018': attribute type 23 has an invalid length. [ 558.532403][ T2286] netlink: 'syz.1.8020': attribute type 1 has an invalid length. [ 558.590840][ T2291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8022'. [ 558.641666][ T2301] netlink: 'syz.1.8025': attribute type 11 has an invalid length. [ 558.651593][ T2301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8025'. [ 558.660536][ T2301] nbd: must specify a device to reconfigure [ 558.704770][ T2303] netlink: 'syz.1.8026': attribute type 1 has an invalid length. [ 558.717429][ T2303] netlink: 'syz.1.8026': attribute type 7 has an invalid length. [ 558.725268][ T2303] netlink: 'syz.1.8026': attribute type 8 has an invalid length. [ 558.733978][ T2303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8026'. [ 558.782109][ T2313] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8028'. [ 558.783111][ T2316] veth1_macvtap: left promiscuous mode [ 559.279881][ T2346] netlink: 'syz.2.8035': attribute type 1 has an invalid length. [ 559.323867][ T2351] xt_hashlimit: size too large, truncated to 1048576 [ 559.399643][ T2355] syzkaller0: entered promiscuous mode [ 559.407321][ T2358] vxcan0: tx address claim with different name [ 559.413821][ T2355] syzkaller0: entered allmulticast mode [ 559.673060][ T2377] netlink: 'syz.7.8043': attribute type 18 has an invalid length. [ 559.697736][ T5282] veth1_macvtap: entered promiscuous mode [ 559.721444][T10508] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.734308][T10508] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.753863][T10508] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.767811][T10508] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.861302][ T2390] bond2: Unable to set up delay as MII monitoring is disabled [ 559.874833][ T2390] bond2 (unregistering): Released all slaves [ 559.971362][ T2401] bond8 (unregistering): Released all slaves [ 560.309005][ T2431] ý=<Ϧ: renamed from tunl0 [ 560.555117][ T2469] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 560.699341][ T2486] veth1_to_team: entered promiscuous mode [ 560.708069][ T2486] dummy0: entered promiscuous mode [ 560.713663][ T2486] debugfs: 'hsr1' already exists in 'hsr' [ 560.720037][ T2486] Cannot create hsr debugfs directory [ 560.725441][ T2486] hsr1: entered promiscuous mode [ 560.984539][ T2521] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001 [ 561.106034][ T2535] macvtap1: entered promiscuous mode [ 561.111447][ T2535] team0: Device macvtap1 is already an upper device of the team interface [ 561.312119][ T2568] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 561.480727][ T2591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.884418][ T2632] openvswitch: netlink: Flow key attr not present in new flow. [ 561.964684][ T2661] geneve1: entered promiscuous mode [ 561.971277][ T2661] geneve1: left promiscuous mode [ 562.066743][ T4938] Bluetooth: hci1: command 0x040f tx timeout [ 562.107648][ T2669] hsr0: left promiscuous mode [ 562.143044][ T2669] vlan0: left promiscuous mode [ 562.150074][ T2669] macvlan0: left promiscuous mode [ 562.155402][ T2669] veth1_vlan: left promiscuous mode [ 562.165713][ T2669] mac80211_hwsim hwsim85 wlan0: left promiscuous mode [ 562.173981][ T2669] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 562.189395][ T29] lo speed is unknown, defaulting to 1000 [ 562.195124][ T29] syú2: Port: 1 Link ACTIVE [ 562.410592][ T2692] team_slave_1: left promiscuous mode [ 562.491936][ T2692] mac80211_hwsim hwsim81 wlan0: left promiscuous mode [ 562.500989][ T2692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 562.573451][ T2692] gretap1: left promiscuous mode [ 562.594741][ T2692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.603935][ T2692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 562.611628][ T2692] ip6tnl2: left promiscuous mode [ 562.618814][ T2692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 562.630242][ T2692] bond6: left promiscuous mode [ 562.635227][ T2692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 562.643239][ T2692] team0: left promiscuous mode [ 562.648279][ T2692] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.663289][T10528] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.670450][T10528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.683559][ T5858] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.693443][ T5858] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 564.996916][ T2665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.080868][ T2712] netlink: 'syz.7.8119': attribute type 11 has an invalid length. [ 565.117033][ T2712] __nla_validate_parse: 17 callbacks suppressed [ 565.117064][ T2712] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8119'. [ 565.167381][ T2719] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8118'. [ 565.311613][ T2733] x_tables: unsorted entry at hook 1 [ 565.333477][ T2735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8123'. [ 565.369470][ T2733] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 565.382591][ T2735] validate_nla: 7 callbacks suppressed [ 565.382608][ T2735] netlink: 'syz.6.8123': attribute type 5 has an invalid length. [ 565.494554][ T2733] IPVS: length: 1869440365 != 24 [ 565.598454][ T2762] IPVS: length: 181 != 8 [ 565.623290][ T2767] netlink: 'syz.6.8129': attribute type 18 has an invalid length. [ 565.673527][ T5858] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.720675][ T5858] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.740580][ T5858] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.750010][ T5858] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.885139][ T2796] netlink: 'syz.2.8137': attribute type 4 has an invalid length. [ 565.897207][ T2795] netlink: 'syz.2.8137': attribute type 4 has an invalid length. [ 565.936883][ T2798] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8138'. [ 566.075240][ T2815] tipc: Resetting bearer [ 566.116667][ T2815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8141'. [ 566.198676][ T2826] tipc: Started in network mode [ 566.203754][ T2826] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 566.214396][ T2826] tipc: Enabled bearer , priority 10 [ 566.278875][ T2829] : entered promiscuous mode [ 566.299672][ T2840] netlink: 'syz.5.8148': attribute type 4 has an invalid length. [ 566.309659][ T2842] netlink: 'syz.5.8148': attribute type 4 has an invalid length. [ 566.449449][ T2862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.457584][ T2862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.688905][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.759535][ T2896] tc_dump_action: action bad kind [ 566.773108][ T2896] netlink: 'syz.5.8162': attribute type 11 has an invalid length. [ 566.793477][ T2896] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8162'. [ 566.818925][ T2901] netlink: 'syz.1.8163': attribute type 1 has an invalid length. [ 566.840001][ T2901] 8021q: adding VLAN 0 to HW filter on device bond8 [ 566.847457][ T2904] tipc: Started in network mode [ 566.857330][ T2904] tipc: Node identity ac14140f, cluster identity 4711 [ 566.864658][ T2904] tipc: Enabled bearer , priority 10 [ 566.945634][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 566.979883][ T2916] sctp: [Deprecated]: syz.5.8168 (pid 2916) Use of int in maxseg socket option. [ 566.979883][ T2916] Use struct sctp_assoc_value instead [ 567.007737][ T2906] bond8: (slave veth11): Enslaving as an active interface with a down link [ 567.222746][ T2935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8173'. [ 567.235085][ T2942] bridge_slave_1: left allmulticast mode [ 567.241150][ T2942] bridge_slave_1: left promiscuous mode [ 567.248087][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.273031][ T2934] nbd: must specify an index to disconnect [ 567.280141][ T2942] bridge_slave_0: left allmulticast mode [ 567.288259][ T2942] bridge_slave_0: left promiscuous mode [ 567.297523][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.304025][ T2934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8172'. [ 567.341658][ T8592] tipc: Node number set to 1 [ 567.381404][ T2947] xt_l2tp: v2 doesn't support IP mode [ 567.772667][ T2987] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8186'. [ 567.837402][ T2990] sctp: [Deprecated]: syz.5.8188 (pid 2990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.837402][ T2990] Use struct sctp_sack_info instead [ 567.917287][ T29] tipc: Node number set to 2886997007 [ 567.923080][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.003734][ T3013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8193'. [ 568.119623][ T3024] 8021q: VLANs not supported on lo [ 568.282062][ T3036] netlink: 'syz.6.8200': attribute type 1 has an invalid length. [ 568.319422][ T3038] syzkaller1: entered promiscuous mode [ 568.324890][ T3038] syzkaller1: entered allmulticast mode [ 569.012563][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.124328][ T3064] syzkaller1: entered promiscuous mode [ 569.135674][ T3064] syzkaller1: entered allmulticast mode [ 569.147345][ T3082] ipt_REJECT: TCP_RESET invalid for non-tcp [ 569.197594][ T3088] netlink: 'syz.1.8218': attribute type 13 has an invalid length. [ 569.298920][ T3088] tipc: Resetting bearer [ 569.572326][ T3118] netlink: 'syz.2.8226': attribute type 2 has an invalid length. [ 569.622571][ T3118] tunl0: entered promiscuous mode [ 569.777749][ T3128] tipc: Disabling bearer [ 569.888728][ T3140] syzkaller1: entered promiscuous mode [ 569.894322][ T3140] syzkaller1: entered allmulticast mode [ 569.908171][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.067398][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.286693][ T3179] syzkaller0: entered promiscuous mode [ 570.303350][ T3179] syzkaller0: entered allmulticast mode [ 570.492697][ T3223] __nla_validate_parse: 16 callbacks suppressed [ 570.492715][ T3223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8249'. [ 570.571372][ T3230] nbd: illegal input index 2958377 [ 570.882246][ T3261] validate_nla: 4 callbacks suppressed [ 570.882263][ T3261] netlink: 'syz.1.8255': attribute type 1 has an invalid length. [ 570.905511][ T3260] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8257'. [ 570.988406][ T3261] bond9: entered promiscuous mode [ 570.993747][ T3261] 8021q: adding VLAN 0 to HW filter on device bond9 [ 571.016019][ T3274] bridge0: Device is already in use. [ 571.032228][ T3261] bridge0: Device is already in use. [ 571.053026][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8260'. [ 571.061916][ T3279] netlink: 'syz.6.8260': attribute type 1 has an invalid length. [ 571.069827][ T3271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8259'. [ 571.126768][ T3279] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8260'. [ 571.139914][ T3279] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8260'. [ 571.140640][ T3286] tipc: Enabling of bearer rejected, failed to enable media [ 571.206009][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.206255][ T3289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.369507][ T3301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8266'. [ 571.379123][ T3301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.394936][ T3301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8266'. [ 571.427957][ T3305] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.8267'. [ 571.514564][ T3315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8270'. [ 571.558771][ T3317] xt_hashlimit: overflow, rate too high: 0 [ 571.615023][ T3320] mac80211_hwsim hwsim86 syzkaller0: Caught tx_queue_len zero misconfig [ 571.757946][ T3344] IPv6: sit1: Disabled Multicast RS [ 571.877614][ T3351] vlan1: entered allmulticast mode [ 571.882775][ T3351] bond0: entered allmulticast mode [ 571.890555][ T3351] bond_slave_0: entered allmulticast mode [ 572.066485][ T4938] Bluetooth: hci7: command 0x0405 tx timeout [ 572.149572][ T3381] netlink: 'syz.1.8289': attribute type 1 has an invalid length. [ 572.279316][ T3388] netlink: 'syz.2.8292': attribute type 1 has an invalid length. [ 572.318526][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.366939][ T3398] openvswitch: netlink: IP tunnel dst address not specified [ 572.433204][ T3398] lo: Caught tx_queue_len zero misconfig [ 572.594774][ T3420] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 572.627381][ T3416] tipc: Enabled bearer , priority 0 [ 572.654749][ T3415] tipc: Disabling bearer [ 572.946315][ T8592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.350001][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.366724][ T3465] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 573.373574][ T3465] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 573.388777][ T3465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 573.407424][ T3465] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 573.425707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.448295][ T3465] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 573.454230][ T3465] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 573.480705][ T3465] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 573.486638][ T3465] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 573.565130][ T3465] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 573.572742][ T3465] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 573.624821][ T3465] tipc: Resetting bearer [ 573.666635][ T3465] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.666900][ T3486] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 573.683223][ T3465] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 573.714968][ T3465] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 573.724411][ T3465] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 573.757599][ T3465] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 573.763528][ T3465] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 574.146861][ T3531] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 574.155449][ T3531] netlink: 'syz.5.8334': attribute type 1 has an invalid length. [ 574.276560][ T3530] netlink: 'syz.1.8335': attribute type 11 has an invalid length. [ 574.293276][ T3546] sctp: [Deprecated]: syz.5.8338 (pid 3546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.293276][ T3546] Use struct sctp_sack_info instead [ 574.366663][ T3548] sock: sock_set_timeout: `syz.5.8339' (pid 3548) tries to set negative timeout [ 574.387648][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.593339][ T3572] veth0_macvtap: Caught tx_queue_len zero misconfig [ 574.708865][ T8592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.728698][ T3582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.755216][ T3585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.828746][ T3591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.893002][ T3585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.905449][ T3585] netlink: 'syz.6.8350': attribute type 5 has an invalid length. [ 574.920045][ T3585] geneve2: entered promiscuous mode [ 574.925376][ T3585] geneve2: entered allmulticast mode [ 574.933721][ T5858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 574.944861][ T5858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 574.957186][ T5858] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 574.966920][ T5858] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 575.154984][ T3610] mac80211_hwsim hwsim86 syzkaller0: left promiscuous mode [ 575.163191][ T3610] mac80211_hwsim hwsim86 syzkaller0: left allmulticast mode [ 575.347639][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 575.357545][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.436680][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.524095][ T3625] __nla_validate_parse: 19 callbacks suppressed [ 575.524112][ T3625] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8362'. [ 575.614959][ T3633] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8365'. [ 575.627622][ T3633] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8365'. [ 575.637712][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.644829][ T3633] bridge0: port 1(bridge_slave_0) entered listening state [ 575.654977][ T3633] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8365'. [ 575.674310][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.817355][ T3643] macvtap1: entered promiscuous mode [ 575.835986][ T3643] vlan0: entered promiscuous mode [ 575.842435][ T3643] vlan0: left promiscuous mode [ 575.874228][ T3651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.900817][ T3655] netlink: 'syz.2.8371': attribute type 4 has an invalid length. [ 575.912128][ T3656] netlink: 'syz.5.8372': attribute type 9 has an invalid length. [ 575.967610][ T3643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.985949][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 576.003029][ T3664] dvmrp0: entered allmulticast mode [ 576.072066][ T3671] xt_socket: unknown flags 0xe4 [ 576.133859][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8379'. [ 576.330223][ T3686] netlink: 'syz.5.8383': attribute type 2 has an invalid length. [ 576.447917][ T3697] netlink: 'syz.5.8386': attribute type 1 has an invalid length. [ 576.458149][ T3696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8386'. [ 576.468311][ T3696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8386'. [ 576.468676][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.513552][ T3700] netlink: 165 bytes leftover after parsing attributes in process `syz.5.8387'. [ 576.637892][ T3642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.072274][ T3727] netlink: 'syz.2.8397': attribute type 5 has an invalid length. [ 577.150097][ T3731] 8021q: adding VLAN 0 to HW filter on device bond8 [ 577.706955][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8403'. [ 577.784138][ T3768] netlink: 'syz.6.8404': attribute type 8 has an invalid length. [ 577.793823][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8404'. [ 577.860894][ T3771] netlink: 'syz.2.8405': attribute type 2 has an invalid length. [ 577.880068][ T3764] netlink: 'syz.6.8404': attribute type 5 has an invalid length. [ 577.898584][ T3771] netlink: 'syz.2.8405': attribute type 2 has an invalid length. [ 577.919942][ T3773] netlink: 'syz.2.8405': attribute type 2 has an invalid length. [ 577.994990][ T3778] IPv6: NLM_F_CREATE should be specified when creating new route [ 578.057526][ T30] audit: type=1804 audit(1782353500.079:15): pid=3780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8408" name="/newroot/532/cgroup.controllers" dev="tmpfs" ino=2743 res=1 errno=0 [ 578.141435][ T30] audit: type=1800 audit(1782353500.079:16): pid=3780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8408" name="cgroup.controllers" dev="tmpfs" ino=2743 res=0 errno=0 [ 578.388543][ T9717] net_ratelimit: 1 callbacks suppressed [ 578.388560][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.485335][ T3818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.546295][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.643624][ T3827] bond2: option all_slaves_active: invalid value (222) [ 578.652614][ T3827] bond2 (unregistering): Released all slaves [ 578.919822][ T3854] veth0: entered promiscuous mode [ 578.931030][ T3853] veth0: left promiscuous mode [ 579.585888][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.731606][ T3908] syzkaller0: entered promiscuous mode [ 579.741879][ T3908] syzkaller0: entered allmulticast mode [ 580.345288][ T3948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 580.628558][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.880127][ T9717] IPVS: starting estimator thread 0... [ 580.976066][ T3973] IPVS: using max 54 ests per chain, 129600 per kthread [ 580.989877][ T3980] __nla_validate_parse: 12 callbacks suppressed [ 580.989906][ T3980] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8468'. [ 580.997395][ T3983] vcan0: entered allmulticast mode [ 581.184543][ T3992] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 581.314084][ T4014] xt_cgroup: path and classid specified [ 581.333758][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8478'. [ 581.426098][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.638738][ T4043] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8488'. [ 581.662151][ T4046] netlink: 51 bytes leftover after parsing attributes in process `syz.6.8487'. [ 581.679176][ T4047] validate_nla: 5 callbacks suppressed [ 581.679204][ T4047] netlink: 'syz.1.8489': attribute type 1 has an invalid length. [ 581.693623][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.772643][ T4047] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 581.799105][ T4056] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8491'. [ 581.900315][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8495'. [ 581.957042][ T4073] netlink: 'syz.2.8497': attribute type 10 has an invalid length. [ 581.965287][ T4073] veth1_macvtap: left promiscuous mode [ 581.974601][ T4073] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 582.060671][ T4086] raw_sendmsg: syz.6.8499 forgot to set AF_INET. Fix it! [ 582.128858][ T4087] 8021q: adding VLAN 0 to HW filter on device bond9 [ 582.331757][ T4104] bond3: option resend_igmp: invalid value (32767) [ 582.352539][ T4104] bond3: option resend_igmp: allowed values 0 - 255 [ 582.361175][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8508'. [ 582.373936][ T4104] bond3 (unregistering): Released all slaves [ 582.421986][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8508'. [ 582.576998][ T4131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8514'. [ 582.601487][ T4131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8514'. [ 582.617478][ T4136] syzkaller0: entered promiscuous mode [ 582.623342][ T4136] syzkaller0: entered allmulticast mode [ 582.641986][ T4136] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 582.704733][ T4139] 8021q: adding VLAN 0 to HW filter on device bond11 [ 582.712725][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.783518][ T4144] gretap1: left allmulticast mode [ 582.799736][ T4144] vlan3: left allmulticast mode [ 582.804702][ T4144] erspan0: left allmulticast mode [ 582.814061][ T4144] bond6: left allmulticast mode [ 582.820720][ T4144] team0: left allmulticast mode [ 582.829829][ T4144] vlan1: left allmulticast mode [ 582.834754][ T4144] bond0: left allmulticast mode [ 582.843274][ T4144] bond_slave_0: left allmulticast mode [ 583.012505][ T4165] nbd: device at index 64 is going down [ 583.149937][ T4176] netlink: 'syz.6.8528': attribute type 21 has an invalid length. [ 583.158880][ T4176] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.182247][ T4182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 583.193296][ T832] udevd[832]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 583.257311][ T4938] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 583.261878][ T832] udevd[832]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 583.264581][ T4938] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 583.287143][ T4938] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 583.294818][ T4938] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 583.303362][ T4938] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 583.337646][T31385] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 583.350613][T31385] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 583.358555][T31385] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 583.368086][T31385] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 583.377411][T31385] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 583.525113][ T4197] bond3 (unregistering): Released all slaves [ 583.604978][ T4201] netlink: 'syz.1.8535': attribute type 15 has an invalid length. [ 583.687351][ T4209] batadv1: entered allmulticast mode [ 583.748074][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.890047][ T4221] netlink: 'syz.6.8540': attribute type 1 has an invalid length. [ 583.930026][ T4225] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 584.057939][ T4187] vxcan1 speed is unknown, defaulting to 1000 [ 584.093400][ T4229] mac80211_hwsim hwsim86 syzkaller0: entered promiscuous mode [ 584.129480][ T4229] mac80211_hwsim hwsim86 syzkaller0: entered allmulticast mode [ 584.140788][ T4229] tipc: Resetting bearer [ 584.309377][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.337744][ T4187] lo speed is unknown, defaulting to 1000 [ 584.467350][ T8592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.786742][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.798084][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.805322][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.813102][ T4187] bridge_slave_0: entered allmulticast mode [ 584.822336][ T4187] bridge_slave_0: entered promiscuous mode [ 584.830779][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.838556][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.846328][ T4187] bridge_slave_1: entered allmulticast mode [ 584.853269][ T4187] bridge_slave_1: entered promiscuous mode [ 584.878364][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.890190][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.917429][ T4187] team0: Port device team_slave_0 added [ 584.925106][ T4187] team0: Port device team_slave_1 added [ 584.953717][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.962654][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.989735][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.002540][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.010291][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.053461][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.115839][ T4187] hsr_slave_0: entered promiscuous mode [ 585.123025][ T4187] hsr_slave_1: entered promiscuous mode [ 585.130001][ T4187] debugfs: 'hsr0' already exists in 'hsr' [ 585.139015][ T4187] Cannot create hsr debugfs directory [ 585.309179][ T4187] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 585.327854][ T4187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.348975][ T4187] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 585.379734][ T4187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.392846][ T4187] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 585.409129][ T4187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.426036][T31385] Bluetooth: hci8: command tx timeout [ 585.432274][ T4187] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 585.448520][ T4187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.590024][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.601543][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.602533][ T4357] netlink: 'syz.5.8572': attribute type 1 has an invalid length. [ 585.638194][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.650366][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.657500][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.709352][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.716511][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.827200][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.938287][ T4379] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 585.970102][ T4379] syzkaller0: entered promiscuous mode [ 585.984534][ T4379] syzkaller0: entered allmulticast mode [ 586.025198][ T4387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.042976][ T4387] IPVS: set_ctl: invalid protocol: 47 172.20.20.66:20004 [ 586.157023][ T4325] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 586.204090][ T4401] __nla_validate_parse: 25 callbacks suppressed [ 586.204117][ T4401] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8585'. [ 586.380036][ T4420] IPVS: length: 24 != 77612585496 [ 586.474871][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.664284][ T4443] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8593'. [ 586.674259][ T4443] openvswitch: netlink: Flow key attr not present in new flow. [ 586.784139][ T4187] veth0_vlan: entered promiscuous mode [ 586.803248][ T4187] veth1_vlan: entered promiscuous mode [ 586.829962][ T4187] veth0_macvtap: entered promiscuous mode [ 586.840782][ T4187] veth1_macvtap: entered promiscuous mode [ 586.858838][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.874098][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.882775][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.893831][T10511] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.907487][T10511] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.916805][T10511] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.927452][T10511] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.507932][T31385] Bluetooth: hci8: command tx timeout [ 587.916678][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.946642][ T809] net_ratelimit: 1 callbacks suppressed [ 588.946669][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.110496][ T4396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.231151][T10511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.261841][T10511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.314997][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.339775][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.352130][ T4467] openvswitch: netlink: IP tunnel dst address not specified [ 589.352264][ T4469] openvswitch: netlink: IP tunnel dst address not specified [ 589.403187][ T4467] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8599'. [ 589.422233][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8600'. [ 589.475205][ T4471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8600'. [ 589.489640][ T4473] syzkaller0: entered promiscuous mode [ 589.495123][ T4473] syzkaller0: entered allmulticast mode [ 589.587081][T31385] Bluetooth: hci8: command tx timeout [ 589.787898][ T4501] netlink: 'syz.1.8610': attribute type 13 has an invalid length. [ 589.886876][ T4512] bridge12: entered promiscuous mode [ 589.892260][ T4512] bridge12: entered allmulticast mode [ 589.903621][ T4512] team0: Port device bridge12 added [ 589.996226][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.027289][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.666492][T31385] Bluetooth: hci8: command tx timeout [ 591.672050][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.986255][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 592.066458][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.619654][ T4487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.851141][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8619'. [ 592.879250][ T4553] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8619'. [ 592.901928][ T4553] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8619'. [ 592.923961][ T4559] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8621'. [ 593.028050][ T4565] netlink: 'syz.1.8624': attribute type 2 has an invalid length. [ 593.064584][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8627'. [ 593.117003][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.167882][ T4580] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8629'. [ 593.265691][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 593.411969][ T4594] netlink: 'syz.1.8635': attribute type 4 has an invalid length. [ 593.419968][ T4590] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8633'. [ 593.436006][ T4594] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8635'. [ 593.467550][ T4571] vxcan1 speed is unknown, defaulting to 1000 [ 593.701202][ T4612] netlink: 'syz.1.8641': attribute type 11 has an invalid length. [ 593.720100][ T4610] netlink: 'syz.6.8640': attribute type 15 has an invalid length. [ 593.731406][ T4612] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.8641'. [ 593.743866][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8640'. [ 593.762881][ T4571] lo speed is unknown, defaulting to 1000 [ 593.807798][ T4612] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 593.909289][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.146682][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.451406][ T4654] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 594.464118][ T4659] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 594.711260][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.803017][ T4687] syzkaller1: entered promiscuous mode [ 594.816752][ T4687] syzkaller1: entered allmulticast mode [ 595.044912][ T4701] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 595.110742][ T4707] netlink: 'syz.6.8671': attribute type 1 has an invalid length. [ 595.187668][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.319590][ T4711] bond4: (slave geneve3): making interface the new active one [ 595.328427][ T4711] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 595.352747][T10510] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 595.371186][T10510] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 595.393615][ T6363] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 595.414128][ T6363] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 595.436675][ T4717] syzkaller0: entered promiscuous mode [ 595.449879][ T4717] syzkaller0: entered allmulticast mode [ 595.849430][ T4938] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 595.858273][ T4938] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 595.867001][ T4938] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 595.869790][ T4752] syzkaller0: entered promiscuous mode [ 595.883444][ T4938] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 595.891910][ T4938] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 595.906660][ T4756] xt_cgroup: invalid path, errno=-2 [ 595.913432][ T4752] syzkaller0: entered allmulticast mode [ 596.228231][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.598677][ T4806] veth7: entered allmulticast mode [ 596.669672][ T4809] bond5: option lp_interval: invalid value (0) [ 596.681929][ T4809] bond5: option lp_interval: allowed values 1 - 2147483647 [ 596.692528][ T4809] bond5 (unregistering): Released all slaves [ 596.759903][ T4816] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input10 [ 596.903839][ T4826] H: renamed from dummy0 (while UP) [ 596.913450][ T4832] bridge0: port 3(gretap0) entered disabled state [ 596.920052][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.927492][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.972659][ T4840] bridge0: port 3(gretap0) entered blocking state [ 596.979239][ T4840] bridge0: port 3(gretap0) entered forwarding state [ 596.986054][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.993180][ T4840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.000578][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.007711][ T4840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.035601][ T4840] bridge0: entered promiscuous mode [ 597.044908][ T4840] bridge0: entered allmulticast mode [ 597.074316][ T4832] netlink: 'syz.2.8702': attribute type 1 has an invalid length. [ 597.144888][ T4832] bond10: (slave geneve3): making interface the new active one [ 597.154028][ T4832] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 597.171038][ T4753] vxcan1 speed is unknown, defaulting to 1000 [ 597.198653][ T4845] syzkaller0: entered promiscuous mode [ 597.204523][ T4845] syzkaller0: entered allmulticast mode [ 597.211780][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 597.260859][ T4832] 8021q: adding VLAN 0 to HW filter on device bond10 [ 597.268529][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.367745][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 597.395113][ T4753] lo speed is unknown, defaulting to 1000 [ 597.395142][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 597.418100][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 597.533666][ T4864] netlink: 'syz.5.8709': attribute type 1 has an invalid length. [ 597.593104][ T4874] xt_TCPMSS: Only works on TCP SYN packets [ 597.748927][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.812260][ T4893] netlink: 'syz.6.8716': attribute type 2 has an invalid length. [ 597.861554][ T4896] __nla_validate_parse: 21 callbacks suppressed [ 597.861582][ T4896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8717'. [ 597.869386][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8716'. [ 597.905624][T31385] Bluetooth: hci9: command tx timeout [ 598.067871][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.086542][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.094429][ T4753] bridge_slave_0: entered allmulticast mode [ 598.103126][ T4753] bridge_slave_0: entered promiscuous mode [ 598.114433][ T4909] tipc: Enabled bearer , priority 0 [ 598.122749][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.130309][ T4918] netlink: 'syz.5.8724': attribute type 27 has an invalid length. [ 598.141373][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.150483][ T4753] bridge_slave_1: entered allmulticast mode [ 598.159253][ T4753] bridge_slave_1: entered promiscuous mode [ 598.184679][ T4909] syzkaller0: entered promiscuous mode [ 598.190978][ T4909] syzkaller0: entered allmulticast mode [ 598.214830][ T4753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.248343][ T4909] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 598.258277][ T4926] netlink: 'syz.8.8725': attribute type 1 has an invalid length. [ 598.274358][ T4926] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8725'. [ 598.279350][ T4753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.298946][ T4909] tipc: Resetting bearer [ 598.305961][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.332484][ T4908] tipc: Resetting bearer [ 598.347716][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8725'. [ 598.361222][ T4908] tipc: Disabling bearer [ 598.429934][ T4753] team0: Port device team_slave_0 added [ 598.441823][ T4753] team0: Port device team_slave_1 added [ 598.459284][ T4921] netlink: 'syz.8.8725': attribute type 1 has an invalid length. [ 598.494520][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.503169][ T4921] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8725'. [ 598.511907][ T4940] Cannot find del_set index 4 as target [ 598.519354][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.534696][ T4921] workqueue: Failed to create a rescuer kthread for wq "phy7": -EINTR [ 598.552307][ T4940] Cannot find del_set index 4 as target [ 598.576857][ T4753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.608348][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.636306][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.695119][ T4954] xt_TCPMSS: Only works on TCP SYN packets [ 598.718706][ T4753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.747927][ T4956] netlink: 666 bytes leftover after parsing attributes in process `syz.6.8732'. [ 598.766301][ T4956] netlink: 666 bytes leftover after parsing attributes in process `syz.6.8732'. [ 598.781350][ T4957] 8021q: VLANs not supported on ip_vti0 [ 598.801029][ T4956] netlink: 666 bytes leftover after parsing attributes in process `syz.6.8732'. [ 598.814761][ T4956] netlink: 666 bytes leftover after parsing attributes in process `syz.6.8732'. [ 598.826566][ T4956] netlink: 666 bytes leftover after parsing attributes in process `syz.6.8732'. [ 598.829179][ T4957] 8021q: VLANs not supported on ip_vti0 [ 598.858188][ T4957] 8021q: VLANs not supported on ip_vti0 [ 598.881381][ T4957] 8021q: VLANs not supported on ip_vti0 [ 598.899866][ T4753] hsr_slave_0: entered promiscuous mode [ 598.908134][ T4753] hsr_slave_1: entered promiscuous mode [ 598.914492][ T4753] debugfs: 'hsr0' already exists in 'hsr' [ 598.921238][ T4753] Cannot create hsr debugfs directory [ 598.928894][ T4957] 8021q: VLANs not supported on ip_vti0 [ 598.952650][ T4957] 8021q: VLANs not supported on ip_vti0 [ 598.976416][ T4957] 8021q: VLANs not supported on ip_vti0 [ 598.983655][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.009450][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.044555][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.051856][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.068006][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.075166][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.091513][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.103639][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.134459][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.151551][ T4986] netlink: 'syz.2.8739': attribute type 30 has an invalid length. [ 599.166807][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.191248][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.211771][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.223073][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.244293][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.260748][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.274748][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.305443][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.313782][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.331111][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.339649][ T4753] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.353248][ T4753] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 599.364147][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.364552][ T4753] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 599.390073][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.396780][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.402766][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.417599][ T5009] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 599.442431][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.449689][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.456475][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.463704][ T4753] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.474023][ T4753] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 599.484721][ T4753] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 599.498914][ T4957] 8021q: VLANs not supported on ip_vti0 [ 599.548045][ T4753] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.560688][ T4753] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 599.574883][ T4753] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 599.612387][ T4753] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.622988][ T4753] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 599.634939][ T4753] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 599.733449][ T5018] veth0_to_bridge: entered promiscuous mode [ 599.742171][ T4753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 599.753909][ T4753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.762358][ T4753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 599.773684][ T4753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.784246][ T4753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 599.797108][ T4753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.813331][ T5017] veth0_to_bridge: left promiscuous mode [ 599.821076][ T4753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 599.838367][ T4753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.977534][ T4753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.987078][T31385] Bluetooth: hci9: command tx timeout [ 600.051622][ T4753] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.074683][T10528] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.081866][T10528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.141771][ T5049] IPv6: NLM_F_CREATE should be specified when creating new route [ 600.147725][T10528] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.156674][T10528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.202241][ T5047] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 600.386598][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.432988][ T809] IPVS: starting estimator thread 0... [ 600.490203][ T5062] syzkaller0: entered promiscuous mode [ 600.506436][ T5062] syzkaller0: entered allmulticast mode [ 600.546219][ T5074] IPVS: using max 48 ests per chain, 115200 per kthread [ 600.787177][ T8599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.838043][ T5105] netlink: 'syz.8.8766': attribute type 32 has an invalid length. [ 600.940431][ T5117] vcan1: entered promiscuous mode [ 600.962193][ T5117] vcan1: entered allmulticast mode [ 600.980378][ T5860] vlan7: left allmulticast mode [ 601.010231][ T5860] bridge_slave_0: left allmulticast mode [ 601.030754][ T5860] bridge0: port 1(vlan7) entered disabled state [ 601.147344][ T5860] bond7 (unregistering): (slave gretap1): Releasing active interface [ 601.177316][ T5860] bond2 (unregistering): (slave geneve2): Releasing active interface [ 601.250969][ T5860] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 601.259862][ T5860] bridge8 (unregistering): left promiscuous mode [ 601.270216][ T5860] bridge8 (unregistering): left allmulticast mode [ 601.293076][ T5860] bond0 (unregistering): Released all slaves [ 601.302812][ T5860] bond1 (unregistering): Released all slaves [ 601.318647][ T5860] bond2 (unregistering): Released all slaves [ 601.330366][ T5860] bond3 (unregistering): Released all slaves [ 601.342471][ T5860] bond4 (unregistering): Released all slaves [ 601.360731][ T5860] bond5 (unregistering): Released all slaves [ 601.372386][ T5860] bond6 (unregistering): Released all slaves [ 601.388137][ T5860] bond7 (unregistering): Released all slaves [ 601.399663][ T5860] bond8 (unregistering): Released all slaves [ 601.417141][ T5860] bond9 (unregistering): Released all slaves [ 601.431659][ T5860] bond10 (unregistering): Released all slaves [ 601.432949][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.443293][ T5860] bond11 (unregistering): Released all slaves [ 601.460625][ T5119] netlink: 'syz.8.8770': attribute type 5 has an invalid length. [ 601.471212][ T5117] sch_fq: defrate 190892945 ignored. [ 601.479646][ T5117] sch_fq: defrate 190892945 ignored. [ 601.491144][ T4753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.541128][ T5860] tipc: Left network mode [ 601.722355][ T5154] netlink: 'syz.6.8779': attribute type 83 has an invalid length. [ 601.722563][ T4753] veth0_vlan: entered promiscuous mode [ 601.800906][ T4753] veth1_vlan: entered promiscuous mode [ 601.875083][ T5165] netlink: 'syz.5.8783': attribute type 1 has an invalid length. [ 602.035247][ T4753] veth0_macvtap: entered promiscuous mode [ 602.069608][T31385] Bluetooth: hci9: command tx timeout [ 602.107667][ T4753] veth1_macvtap: entered promiscuous mode [ 602.150166][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.217469][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.450264][ T6363] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.460923][ T6363] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.493190][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.512849][ T5860] hsr_slave_0: left promiscuous mode [ 602.520601][ T5860] hsr_slave_1: left promiscuous mode [ 602.529548][ T5860] vlan0: left allmulticast mode [ 602.534423][ T5860] veth0_vlan: left allmulticast mode [ 602.540319][ T5860] vlan0: left promiscuous mode [ 602.545489][ T5860] veth1_macvtap: left promiscuous mode [ 602.552734][ T5860] veth1_vlan: left promiscuous mode [ 602.558615][ T5860] veth0_vlan: left promiscuous mode [ 602.831857][ T6363] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.845596][ T6363] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.007931][ T5858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.044724][ T5858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.086013][ T5217] tipc: Enabling of bearer rejected, failed to enable media [ 603.097409][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.106884][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.108098][ T5860] IPVS: stop unused estimator thread 0... [ 603.278647][ T5232] __nla_validate_parse: 300 callbacks suppressed [ 603.278664][ T5232] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8799'. [ 603.345081][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8802'. [ 603.383754][ T5243] netlink: 'syz.6.8802': attribute type 1 has an invalid length. [ 603.411110][ T5243] netlink: 236 bytes leftover after parsing attributes in process `syz.6.8802'. [ 603.509286][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.517659][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.619535][ T5256] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8805'. [ 603.635373][ T5260] veth0: entered promiscuous mode [ 603.642832][ T5256] netlink: 'syz.6.8805': attribute type 1 has an invalid length. [ 603.651352][ T5256] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8805'. [ 603.700552][ T5259] veth0: left promiscuous mode [ 603.767932][ T5263] netlink: 'syz.1.8808': attribute type 83 has an invalid length. [ 603.827653][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.931948][ T5276] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.8811'. [ 604.040255][ T5294] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8818'. [ 604.059033][ T5296] gretap3: entered promiscuous mode [ 604.121545][ T5302] netlink: 'syz.5.8820': attribute type 49 has an invalid length. [ 604.149453][T31385] Bluetooth: hci9: command tx timeout [ 604.239377][ T5307] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 604.252256][ T5307] syzkaller1: Refused to change device type [ 604.285357][ T5311] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8824'. [ 604.473645][ T5327] openvswitch: netlink: Key type 218 is out of range max 32 [ 604.502906][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8832'. [ 604.542586][ T5334] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8833'. [ 604.557066][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.730363][ T5343] vlan2: entered allmulticast mode [ 604.755162][ T5343] veth1_virt_wifi: entered allmulticast mode [ 604.861619][ T5360] netlink: 'syz.2.8836': attribute type 1 has an invalid length. [ 604.895315][ T5360] netlink: 'syz.2.8836': attribute type 2 has an invalid length. [ 605.376501][ T5404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.426409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.588895][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.709484][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.716980][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.782825][ T5420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.796705][ T5420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.947890][ T5858] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.963889][ T5858] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.978120][ T5858] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.988515][ T5858] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.038970][ T5452] validate_nla: 6 callbacks suppressed [ 606.038987][ T5452] netlink: 'syz.8.8861': attribute type 75 has an invalid length. [ 606.053526][ T5452] netlink: 'syz.8.8861': attribute type 1 has an invalid length. [ 606.580677][ T5504] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 606.630723][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.711245][ T5504] bond1 (unregistering): Released all slaves [ 606.793321][ T5520] xt_nat: multiple ranges no longer supported [ 606.868153][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.043449][ T5525] syzkaller0: entered promiscuous mode [ 607.051277][ T5525] syzkaller0: entered allmulticast mode [ 607.334879][ T5558] netlink: 'syz.6.8890': attribute type 8 has an invalid length. [ 607.510225][ T5573] netlink: 'syz.6.8895': attribute type 2 has an invalid length. [ 607.666453][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.709327][ T5583] bond5: Unable to set down delay as MII monitoring is disabled [ 607.721550][ T5583] bond5 (unregistering): Released all slaves [ 607.853398][ T5593] ý=<Ϧ: left promiscuous mode [ 608.252142][ T5593] tipc: Resetting bearer [ 608.278333][ T5593] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 608.657178][ T5648] __nla_validate_parse: 20 callbacks suppressed [ 608.657197][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8918'. [ 608.731252][T31385] block nbd2: Receive control failed (result -1) [ 608.862992][ T5658] bridge1: entered promiscuous mode [ 608.885260][ T5658] bridge1: entered allmulticast mode [ 609.078446][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8928'. [ 609.235992][ T5674] bond12: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 609.281218][ T5674] bond12 (unregistering): Released all slaves [ 609.439210][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8932'. [ 609.473533][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8931'. [ 609.488696][ T5699] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8933'. [ 609.508436][ T5700] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8933'. [ 609.523508][ T5697] team1: entered promiscuous mode [ 609.530881][ T5697] team1: entered allmulticast mode [ 609.747517][T27323] net_ratelimit: 3 callbacks suppressed [ 609.747543][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.773050][ T5718] netlink: 592 bytes leftover after parsing attributes in process `syz.6.8938'. [ 609.908705][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.984548][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8942'. [ 610.006802][ T5749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8945'. [ 610.151462][ T5771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8948'. [ 610.796552][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.075193][ T5780] IPVS: set_ctl: invalid protocol: 48 0.0.0.0:0 [ 611.826912][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.306632][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.867326][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.027199][ T5755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.158548][ T5788] openvswitch: netlink: IPv4 tun info is not correct [ 613.365088][ T5808] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 613.679815][ T5837] __nla_validate_parse: 5 callbacks suppressed [ 613.679841][ T5837] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8976'. [ 613.719053][ T30] audit: type=1804 audit(1782353535.739:17): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8977" name="/newroot/527/cgroup.controllers" dev="tmpfs" ino=2710 res=1 errno=0 [ 613.791471][ T30] audit: type=1800 audit(1782353535.739:18): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8977" name="cgroup.controllers" dev="tmpfs" ino=2710 res=0 errno=0 [ 613.822413][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8979'. [ 613.896959][ T5850] netlink: 'syz.6.8982': attribute type 1 has an invalid length. [ 613.909079][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.914094][ T5850] netlink: 'syz.6.8982': attribute type 2 has an invalid length. [ 613.927924][ T5843] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 613.928218][ T5850] netlink: 'syz.6.8982': attribute type 2 has an invalid length. [ 613.947780][ T5850] netlink: 'syz.6.8982': attribute type 2 has an invalid length. [ 613.956317][ T5851] netlink: 'syz.6.8982': attribute type 1 has an invalid length. [ 613.971991][ T5851] netlink: 'syz.6.8982': attribute type 2 has an invalid length. [ 613.980825][ T5851] netlink: 'syz.6.8982': attribute type 2 has an invalid length. [ 613.989851][ T5851] netlink: 'syz.6.8982': attribute type 2 has an invalid length. [ 614.219171][ T5878] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 614.258500][ T5880] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8988'. [ 614.427535][ T5894] netlink: 'syz.6.8993': attribute type 16 has an invalid length. [ 614.455614][ T5894] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8993'. [ 614.488772][ T5897] xt_TCPMSS: Only works on TCP SYN packets [ 614.495977][ T5894] veth0_macvtap: entered allmulticast mode [ 614.503970][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8996'. [ 614.522229][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8996'. [ 614.599432][ T5898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.622653][ T5910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.635346][ T5908] netlink: 204 bytes leftover after parsing attributes in process `syz.8.8997'. [ 614.678178][ T5908] : entered promiscuous mode [ 614.815344][ T5915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9000'. [ 614.846254][ T5915] bond0: ARP target 8.4.0.0 is already present [ 614.867278][ T5915] bond0: option arp_ip_target: invalid value (1032) [ 614.871804][ T5929] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8999'. [ 614.880430][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9004'. [ 614.947559][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.948263][ T6363] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.986315][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.997404][ T6363] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.061909][ T5945] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 615.186589][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.346549][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.457257][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.504020][ T5973] vlan2: entered promiscuous mode [ 615.523031][ T5973] bridge0: entered promiscuous mode [ 615.641208][ T5992] openvswitch: netlink: Flow key attr not present in new flow. [ 616.065774][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.314425][ T6031] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 616.367871][ T6035] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 616.390993][ T6035] bond12: (slave lo): Enslaving as an active interface with an up link [ 616.400901][ T6035] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 616.715290][ T6063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.813690][ T6071] netlink: 'syz.2.9041': attribute type 1 has an invalid length. [ 617.116012][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.233092][ T6104] x_tables: unsorted underflow at hook 2 [ 617.240026][ T6103] x_tables: unsorted underflow at hook 2 [ 617.604947][ T6129] syzkaller0: entered promiscuous mode [ 617.610909][ T6129] syzkaller0: entered allmulticast mode [ 617.620367][ T6129] 0: reclassify loop, rule prio 0, protocol 800 [ 618.147338][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.197836][ T6166] macvlan0: entered promiscuous mode [ 618.214561][ T6169] netlink: 'syz.5.9070': attribute type 11 has an invalid length. [ 618.273774][ T6163] 8021q: adding VLAN 0 to HW filter on device bond12 [ 618.283200][ T6163] bond0: (slave bond12): Enslaving as an active interface with an up link [ 618.388744][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.763083][ T6208] xt_hashlimit: size too large, truncated to 1048576 [ 618.862542][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 618.872792][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 618.881075][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 618.890425][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 618.902126][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 619.059029][ T6222] __nla_validate_parse: 17 callbacks suppressed [ 619.059047][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9086'. [ 619.425596][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 619.566121][ T6244] validate_nla: 7 callbacks suppressed [ 619.566138][ T6244] netlink: 'syz.8.9091': attribute type 75 has an invalid length. [ 619.584051][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9092'. [ 619.611060][ T6245] netlink: 'syz.5.9092': attribute type 1 has an invalid length. [ 619.653619][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9092'. [ 619.684540][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9092'. [ 619.705088][ T6245] netlink: 'syz.5.9092': attribute type 1 has an invalid length. [ 619.721824][ T6213] vxcan1 speed is unknown, defaulting to 1000 [ 619.722914][ T6253] netlink: 'syz.8.9095': attribute type 13 has an invalid length. [ 619.738133][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9092'. [ 619.991663][ T6273] netlink: 27 bytes leftover after parsing attributes in process `syz.5.9100'. [ 620.019839][ T6213] lo speed is unknown, defaulting to 1000 [ 620.023194][ T6278] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 620.037013][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9102'. [ 620.131917][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9104'. [ 620.226536][T27323] net_ratelimit: 5 callbacks suppressed [ 620.226576][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.433437][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9109'. [ 620.507559][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.518009][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.525964][ T6213] bridge_slave_0: entered allmulticast mode [ 620.533145][ T6213] bridge_slave_0: entered promiscuous mode [ 620.554110][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.561264][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.568450][ T6213] bridge_slave_1: entered allmulticast mode [ 620.577904][ T6213] bridge_slave_1: entered promiscuous mode [ 620.624489][ T6213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.657574][ T6319] netlink: 13 bytes leftover after parsing attributes in process `syz.8.9113'. [ 620.672798][ T6213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.722208][ T6319] bond0: (slave bond_slave_1): Releasing backup interface [ 620.779155][ T6213] team0: Port device team_slave_0 added [ 620.799512][ T6213] team0: Port device team_slave_1 added [ 620.840998][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.852734][ T6333] netlink: 'syz.5.9117': attribute type 1 has an invalid length. [ 620.861575][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.891879][ T6333] netlink: 'syz.5.9117': attribute type 3 has an invalid length. [ 620.915955][ T6213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.944679][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.959351][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.961655][T31385] Bluetooth: hci3: command tx timeout [ 620.994523][ T6213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.081337][ T6213] hsr_slave_0: entered promiscuous mode [ 621.089824][ T6213] hsr_slave_1: entered promiscuous mode [ 621.097825][ T6213] debugfs: 'hsr0' already exists in 'hsr' [ 621.103982][ T6213] Cannot create hsr debugfs directory [ 621.275631][ T6213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 621.290111][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.300168][ T6213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 621.314877][ T6213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.327625][ T6213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.408566][ T6213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 621.448610][ T6213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 621.459660][ T6213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.470826][ T6213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.558321][ T6213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 621.572476][ T6213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 621.585328][ T6213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.614572][ T6213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.635213][ T6388] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 621.674457][ T6390] IPv6: Can't replace route, no match found [ 621.737715][ T6213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 621.766507][ T6213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 621.779898][ T6213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.792865][ T6213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.840587][ T6396] gretap0: entered promiscuous mode [ 621.851979][ T6396] gretap0: left promiscuous mode [ 621.991119][ T6213] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 622.003613][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.031542][ T6213] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 622.061179][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.073671][ T6213] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 622.092754][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.109914][ T6213] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 622.124632][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.277302][ T6438] syz_tun: entered promiscuous mode [ 622.283611][ T6438] syz_tun: left promiscuous mode [ 622.300761][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.316179][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.319345][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.339021][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.346146][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.362531][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.369682][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.548271][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.686705][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.721095][ T6213] veth0_vlan: entered promiscuous mode [ 622.731196][ T6213] veth1_vlan: entered promiscuous mode [ 622.759400][ T6213] veth0_macvtap: entered promiscuous mode [ 622.768724][ T6213] veth1_macvtap: entered promiscuous mode [ 622.783882][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.805307][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.824326][ T5858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.838895][ T5858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.849098][ T5858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.859832][ T5858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.874885][ T6459] IPv6: sit1: Disabled Multicast RS [ 622.882107][ T6459] sit1: entered allmulticast mode [ 622.988827][ T6426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.026379][T31385] Bluetooth: hci3: command tx timeout [ 623.060349][ T5860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.083227][ T5860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.171746][ T6475] sctp: [Deprecated]: syz.1.9150 (pid 6475) Use of int in maxseg socket option. [ 623.171746][ T6475] Use struct sctp_assoc_value instead [ 623.188913][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.218657][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.261685][ T6481] ip6t_rpfilter: unknown options [ 623.311259][ T6486] ip6t_rpfilter: unknown options [ 623.349401][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.517461][ T6514] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 623.605228][ T6512] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 623.612956][ T6522] netlink: 'syz.1.9162': attribute type 32 has an invalid length. [ 623.652408][ T6525] netlink: 'syz.2.9164': attribute type 1 has an invalid length. [ 623.662785][ T6522] bond1: option coupled_control: invalid value (192) [ 623.671944][ T6522] bond1 (unregistering): Released all slaves [ 623.705976][ T6526] h: entered promiscuous mode [ 623.801303][ T6537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.957411][ T6548] syzkaller0: entered promiscuous mode [ 623.992803][ T6548] syzkaller0: entered allmulticast mode [ 624.094488][ T6557] __nla_validate_parse: 23 callbacks suppressed [ 624.094508][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9170'. [ 624.158757][ T6573] netlink: 'syz.1.9176': attribute type 1 has an invalid length. [ 624.291939][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9179'. [ 624.376800][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9181'. [ 624.398776][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.574667][ T6604] netlink: 'syz.2.9186': attribute type 12 has an invalid length. [ 624.586735][ T6604] netlink: 'syz.2.9186': attribute type 29 has an invalid length. [ 624.603351][ T6604] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9186'. [ 624.621240][ T6604] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9186'. [ 624.647478][ T6613] nbd: couldn't find a device at index 1048580 [ 624.753926][ T6614] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9186'. [ 624.972233][ T6639] syzkaller1: entered promiscuous mode [ 625.001923][ T6639] syzkaller1: entered allmulticast mode [ 625.021243][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9196'. [ 625.065143][ T6644] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 625.090263][ T6653] Bluetooth: MGMT ver 1.23 [ 625.094828][ T6644] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 625.109409][T31385] Bluetooth: hci3: command tx timeout [ 625.109908][ T6644] gretap2: entered promiscuous mode [ 625.128739][ T6644] gretap2: entered allmulticast mode [ 625.237254][ T6662] netlink: 'syz.2.9201': attribute type 30 has an invalid length. [ 625.351443][ T6673] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.9204'. [ 625.426104][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.586040][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.682902][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9211'. [ 625.702832][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9211'. [ 625.717293][ T6699] netlink: 'syz.1.9211': attribute type 12 has an invalid length. [ 625.744171][ T6699] netlink: 'syz.1.9211': attribute type 11 has an invalid length. [ 625.767008][ T6702] syzkaller0: entered promiscuous mode [ 625.775047][ T6702] syzkaller0: entered allmulticast mode [ 625.866864][ T6698] syzkaller0: entered promiscuous mode [ 625.886063][ T6698] syzkaller0: entered allmulticast mode [ 625.906714][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.919664][ T6716] netlink: 'syz.6.9218': attribute type 1 has an invalid length. [ 626.014680][ T6716] ip6gretap1: entered promiscuous mode [ 626.020600][ T6716] ip6gretap1: entered allmulticast mode [ 626.030695][ T6716] bond5: (slave ip6gretap1): making interface the new active one [ 626.040714][ T6716] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 626.049820][ T6716] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 626.058184][ T6716] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 626.137585][ T6734] IPv6: sit1: Disabled Multicast RS [ 626.201011][ T6741] netlink: 'syz.1.9225': attribute type 1 has an invalid length. [ 626.318102][ T6757] netlink: 'syz.6.9229': attribute type 32 has an invalid length. [ 626.357507][ T6759] netlink: 'syz.6.9229': attribute type 32 has an invalid length. [ 626.374143][ T6757] bond6: option coupled_control: invalid value (192) [ 626.387355][ T6757] bond6 (unregistering): Released all slaves [ 626.410368][ T6759] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 626.466795][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.546638][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 626.691742][ T6787] syzkaller1: entered promiscuous mode [ 626.698527][ T6787] syzkaller1: entered allmulticast mode [ 626.792575][ T6800] netlink: 'syz.6.9243': attribute type 1 has an invalid length. [ 626.919659][ T6808] xt_l2tp: invalid flags combination: 8 [ 627.020206][ T6815] macvtap1: entered promiscuous mode [ 627.026822][ T6815] vlan0: entered promiscuous mode [ 627.032212][ T6815] macvtap1: entered allmulticast mode [ 627.040469][ T6815] vlan0: entered allmulticast mode [ 627.046794][ T6815] veth0_vlan: entered allmulticast mode [ 627.072517][ T6820] netlink: 'syz.1.9250': attribute type 24 has an invalid length. [ 627.187081][T31385] Bluetooth: hci3: command tx timeout [ 627.274305][ T6833] tipc: Started in network mode [ 627.281592][ T6833] tipc: Node identity ac14142f, cluster identity 4711 [ 627.306442][ T6833] tipc: New replicast peer: 0.0.0.0 [ 627.312233][ T6833] tipc: Enabled bearer , priority 10 [ 627.507984][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.532144][ T6857] netlink: 'syz.1.9263': attribute type 11 has an invalid length. [ 627.694057][ T6868] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ö0x0000000000000003000000000000 [ 627.700520][ T6871] x_tables: duplicate underflow at hook 4 [ 627.855168][ T6879] syzkaller0: entered promiscuous mode [ 627.869825][ T6879] syzkaller0: entered allmulticast mode [ 628.378680][ T6923] geneve4: entered promiscuous mode [ 628.403034][ T6923] geneve4: entered allmulticast mode [ 628.419559][ T6927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 628.426836][ T6927] IPv6: NLM_F_CREATE should be set when creating new route [ 628.426926][ T6925] xt_limit: Overflow, try lower: 271964/0 [ 628.447576][T10513] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 628.465757][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.483679][ T6930] NCSI netlink: No device for ifindex 0 [ 628.485380][T10513] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 628.516367][ T187] tipc: Node number set to 2886997039 [ 628.546250][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.558678][ T6925] bond1: entered promiscuous mode [ 628.576096][ T6925] bond1: entered allmulticast mode [ 628.599517][ T6925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.627891][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.674605][T10513] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 628.694033][T10513] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 628.978865][ T6969] veth1_to_team: entered promiscuous mode [ 629.002726][ T6969] gretap0: entered promiscuous mode [ 629.021543][ T6969] debugfs: 'hsr1' already exists in 'hsr' [ 629.039264][ T6969] Cannot create hsr debugfs directory [ 629.053107][ T6969] hsr1: entered promiscuous mode [ 629.106481][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.160894][ T6944] vxcan1 speed is unknown, defaulting to 1000 [ 629.309112][ T6944] lo speed is unknown, defaulting to 1000 [ 629.453934][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 629.462870][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 629.470967][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 629.481594][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 629.493007][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 629.564357][ T6993] __nla_validate_parse: 33 callbacks suppressed [ 629.564384][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9306'. [ 629.600494][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.122511][T10514] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.180675][T10514] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.198068][T10514] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 630.201014][ T7035] siw: device registration error -23 [ 630.209104][T10514] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 630.214973][ T7036] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 630.241112][ T7034] tc_dump_action: action bad kind [ 630.278177][T10514] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.297344][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9316'. [ 630.309301][T10514] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.340413][T10514] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 630.352054][T10514] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 630.446547][T10514] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.463886][T10514] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.477289][T10514] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 630.490470][T10514] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 630.588530][T10514] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.612421][T10514] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.638272][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.647947][T10514] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 630.662129][T10514] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 630.680736][ T7067] xt_hl: Unknown TTL match mode: 255 [ 630.708453][ T7056] syzkaller0: entered promiscuous mode [ 630.714007][ T7056] syzkaller0: entered allmulticast mode [ 630.744416][ T7058] bridge_slave_1: left allmulticast mode [ 630.752097][ T7058] bridge_slave_1: left promiscuous mode [ 630.768333][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.790793][ T7058] bridge_slave_0: left allmulticast mode [ 630.798538][ T7058] bridge_slave_0: left promiscuous mode [ 630.804305][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.832348][ T6989] vxcan1 speed is unknown, defaulting to 1000 [ 631.055558][ T6989] lo speed is unknown, defaulting to 1000 [ 631.108743][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.148848][ T7084] bridge_slave_0 (unregistering): left allmulticast mode [ 631.173570][ T7084] bridge_slave_0 (unregistering): left promiscuous mode [ 631.181630][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.210878][T10514] bridge_slave_0: left allmulticast mode [ 631.217533][T10514] bridge_slave_0: left promiscuous mode [ 631.223345][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.409207][T10514] bond1 (unregistering): (slave gretap1): Releasing active interface [ 631.449645][T10514] bond6 (unregistering): (slave geneve2): Releasing active interface [ 631.486599][T10514] bond3 (unregistering): (slave bridge1): Releasing active interface [ 631.494779][T10514] bridge1 (unregistering): left promiscuous mode [ 631.503533][T10514] bridge1 (unregistering): left allmulticast mode [ 631.544328][T10514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.561351][T10514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.571682][T10514] bond0 (unregistering): (slave bond12): Releasing backup interface [ 631.581380][T10514] bond0 (unregistering): Released all slaves [ 631.587760][ T4938] Bluetooth: hci0: command tx timeout [ 631.597477][T10514] bond1 (unregistering): Released all slaves [ 631.609510][T10514] bond2 (unregistering): Released all slaves [ 631.626142][T10514] bond3 (unregistering): Released all slaves [ 631.637682][T10514] bond4 (unregistering): Released all slaves [ 631.649103][T10514] bond5 (unregistering): Released all slaves [ 631.666428][T10514] bond6 (unregistering): Released all slaves [ 631.672589][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.681457][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.683113][T10514] bond7 (unregistering): Released all slaves [ 631.702383][T10514] bond8 (unregistering): Released all slaves [ 631.713685][T10514] bond9 (unregistering): Released all slaves [ 631.727692][T10514] bond10 (unregistering): Released all slaves [ 631.739064][T10514] bond11 (unregistering): Released all slaves [ 631.750684][T10514] bond12 (unregistering): Released all slaves [ 631.781649][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 631.880521][T10514] : left promiscuous mode [ 631.964823][ T7111] validate_nla: 6 callbacks suppressed [ 631.964840][ T7111] netlink: 'syz.8.9332': attribute type 1 has an invalid length. [ 631.978348][T10514] tipc: Disabling bearer [ 632.001743][T10514] tipc: Left network mode [ 632.178520][ T7111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 632.218630][ T7135] netlink: 'syz.1.9336': attribute type 97 has an invalid length. [ 632.272927][ T7141] sctp: [Deprecated]: syz.1.9336 (pid 7141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.272927][ T7141] Use struct sctp_sack_info instead [ 632.414852][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9338'. [ 632.469874][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9338'. [ 632.557698][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9338'. [ 632.568152][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9338'. [ 632.591776][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.609559][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.627380][ T6989] bridge_slave_0: entered allmulticast mode [ 632.640635][ T6989] bridge_slave_0: entered promiscuous mode [ 632.660036][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 632.671888][ T1079] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.699633][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.707604][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.717514][ T8586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.727931][ T6989] bridge_slave_1: entered allmulticast mode [ 632.749373][ T6989] bridge_slave_1: entered promiscuous mode [ 632.801459][ T1079] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.828816][ T1079] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.872801][ T1079] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.899945][ T7195] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9349'. [ 632.912638][ T7197] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9349'. [ 632.933708][ T6989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.961245][ T6989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.094057][ T6989] team0: Port device team_slave_0 added [ 633.128375][ T6989] team0: Port device team_slave_1 added [ 633.272336][ T7220] veth0_macvtap: entered allmulticast mode [ 633.341299][ T7220] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 633.349499][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9357'. [ 633.416553][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.423579][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.451018][ T6989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.463868][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.471774][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.526389][ T6989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.579071][T10514] veth1_to_team: left promiscuous mode [ 633.644122][T10514] H: left promiscuous mode [ 633.666834][ T4938] Bluetooth: hci0: command tx timeout [ 633.686612][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9359'. [ 633.704978][T10514] hsr_slave_0: left promiscuous mode [ 633.719991][T10514] hsr_slave_1: left promiscuous mode [ 633.731324][ T7243] netlink: 'syz.1.9359': attribute type 142 has an invalid length. [ 633.746195][ T8586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.008304][ T7265] netlink: 'syz.6.9364': attribute type 11 has an invalid length. [ 634.017913][T10514] team0 (unregistering): Port device team_slave_1 removed [ 634.031521][T10514] team0 (unregistering): Port device team_slave_0 removed [ 634.062372][ T76] smc: removing ib device syz0 [ 634.151782][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 634.213429][ T76] smbdirect: ib_dev[syz0] removed [ 634.278435][ T6989] hsr_slave_0: entered promiscuous mode [ 634.312735][ T6989] hsr_slave_1: entered promiscuous mode [ 634.344691][ T6989] debugfs: 'hsr0' already exists in 'hsr' [ 634.358676][ T6989] Cannot create hsr debugfs directory [ 634.372891][ T7273] pim6reg1: entered allmulticast mode [ 634.706135][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.713761][ T7292] netlink: 'syz.6.9369': attribute type 1 has an invalid length. [ 634.788336][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.844633][ T7294] __nla_validate_parse: 3 callbacks suppressed [ 634.844650][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9370'. [ 635.102140][ T7313] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.9374'. [ 635.334360][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9379'. [ 635.369078][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9379'. [ 635.400837][ T7332] netlink: 'syz.2.9379': attribute type 12 has an invalid length. [ 635.412038][ T7332] netlink: 'syz.2.9379': attribute type 11 has an invalid length. [ 635.602247][ T6989] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 635.649613][ T6989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 635.689158][ T6989] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 635.739817][ T6989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 635.747712][ T4938] Bluetooth: hci0: command tx timeout [ 635.766467][ T6989] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 635.786562][ T6989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 635.820252][ T6989] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 635.837467][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.851709][ T6989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 635.903860][ T7364] vcan2: entered promiscuous mode [ 635.914404][ T7364] vcan2: entered allmulticast mode [ 636.060341][ T7378] netlink: 'syz.8.9389': attribute type 1 has an invalid length. [ 636.131660][ T7383] syzkaller1: entered promiscuous mode [ 636.181716][ T7383] syzkaller1: entered allmulticast mode [ 636.197521][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9391'. [ 636.491979][ T6989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.563406][ T6989] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.589034][ T7410] netlink: 14 bytes leftover after parsing attributes in process `syz.8.9395'. [ 636.600198][T10527] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.607308][T10527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.618340][ T7413] nbd: must specify a device to reconfigure [ 636.720886][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.728032][T10509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.869989][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.881001][ T7427] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.9400'. [ 636.900817][ T7426] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.9400'. [ 637.329329][ T7447] can: request_module (can-proto-4) failed. [ 637.476261][ T7454] vxcan1 speed is unknown, defaulting to 1000 [ 637.554519][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9406'. [ 637.574587][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9407'. [ 637.746039][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.826391][ T4938] Bluetooth: hci0: command tx timeout [ 637.828126][ T7473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 637.868819][ T7488] IPVS: set_ctl: invalid protocol: 47 172.30.0.9:20001 [ 637.908935][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.936669][ T7454] lo speed is unknown, defaulting to 1000 [ 637.946847][T10514] IPVS: stop unused estimator thread 0... [ 637.960867][ T7492] IPVS: set_ctl: invalid protocol: 43 172.30.1.9:20003 [ 638.069840][ T31] INFO: task syz.4.6827:30460 blocked for more than 143 seconds. [ 638.091941][ T31] Not tainted syzkaller #0 [ 638.117549][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.173513][ T31] task:syz.4.6827 state:D stack:26008 pid:30460 tgid:30457 ppid:27083 task_flags:0x400140 flags:0x00080002 [ 638.206406][ T7500] netlink: 'syz.6.9411': attribute type 49 has an invalid length. [ 638.226039][ T31] Call Trace: [ 638.234174][ T31] [ 638.241733][ T31] __schedule+0x17d9/0x56c0 [ 638.258660][ T6989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.259425][ T31] ? rcu_is_watching+0x15/0xb0 [ 638.280649][ T31] ? __pfx___schedule+0x10/0x10 [ 638.286343][ T31] ? rcu_is_watching+0x15/0xb0 [ 638.298252][ T31] ? rcu_is_watching+0x15/0xb0 [ 638.312970][ T31] ? lock_release+0x4b/0x3c0 [ 638.336073][ T31] ? rcu_is_watching+0x15/0xb0 [ 638.344294][ T31] schedule+0x164/0x360 [ 638.349040][ T31] schedule_preempt_disabled+0x13/0x30 [ 638.354544][ T31] __mutex_lock+0x7bf/0x1550 [ 638.359762][ T31] ? __mutex_lock+0x5d4/0x1550 [ 638.364567][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 638.371305][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 638.376894][ T31] ? rcu_is_watching+0x15/0xb0 [ 638.381722][ T31] ? trace_sched_exit_tp+0x3a/0x130 [ 638.389764][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 638.396706][ T31] ? kasan_save_track+0x3e/0x80 [ 638.401596][ T31] ? __alloc_skb+0x2bd/0x7a0 [ 638.406698][ T31] ? genl_rcv+0x28/0x40 [ 638.410942][ T31] ? netlink_unicast+0x7bb/0x940 [ 638.425513][ T31] ? netlink_sendmsg+0x813/0xb40 [ 638.430534][ T31] ? ____sys_sendmsg+0x9b9/0xa20 [ 638.440631][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 638.450730][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 638.461369][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 638.476060][ T31] ? __pfx___schedule+0x10/0x10 [ 638.486026][ T31] ? rcu_is_watching+0x15/0xb0 [ 638.493693][ T31] ? trace_irq_enable+0x3b/0x140 [ 638.499242][ T31] ? irqentry_exit+0x218/0x8f0 [ 638.504081][ T31] ? trace_irq_disable+0x3b/0x140 [ 638.510393][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 638.526000][ T31] genl_dumpit+0x10b/0x1b0 [ 638.536012][ T31] netlink_dump+0x711/0xee0 [ 638.541369][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 638.547304][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 638.552623][ T31] ? genl_start+0x497/0x6d0 [ 638.559567][ T31] __netlink_dump_start+0x589/0x7b0 [ 638.565206][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 638.572446][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 638.579547][ T31] ? genl_get_cmd+0x523/0x960 [ 638.584632][ T31] ? __pfx_genl_start+0x10/0x10 [ 638.595375][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 638.603931][ T31] ? __pfx_genl_done+0x10/0x10 [ 638.610482][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 638.617921][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 638.622866][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.629061][ T31] ? ref_tracker_free+0x689/0x830 [ 638.634606][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 638.644728][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 638.651738][ T31] netlink_rcv_skb+0x226/0x4a0 [ 638.657352][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.662981][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.669247][ T31] ? down_read+0x2be/0x330 [ 638.674161][ T31] genl_rcv+0x28/0x40 [ 638.680454][ T31] netlink_unicast+0x7bb/0x940 [ 638.686020][ T31] netlink_sendmsg+0x813/0xb40 [ 638.692284][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.699915][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 638.706907][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.711821][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.722943][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.729240][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 638.734461][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.741341][ T31] ? lock_release+0x4b/0x3c0 [ 638.747993][ T31] ? import_iovec+0x73/0xa0 [ 638.753071][ T31] ___sys_sendmsg+0x2a5/0x360 [ 638.758764][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.764433][ T31] ? futex_wake+0x51b/0x5f0 [ 638.770493][ T31] ? __fget_files+0x2a/0x420 [ 638.775841][ T31] ? __fget_files+0x3a2/0x420 [ 638.780948][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 638.789073][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.797269][ T31] ? rcu_is_watching+0x15/0xb0 [ 638.802459][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.810254][ T31] do_syscall_64+0x174/0x580 [ 638.815266][ T31] ? clear_bhb_loop+0x40/0x90 [ 638.821614][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.830140][ T31] RIP: 0033:0x7f21d739ce59 [ 638.834957][ T31] RSP: 002b:00007f21d8273028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.844993][ T31] RAX: ffffffffffffffda RBX: 00007f21d7615fa0 RCX: 00007f21d739ce59 [ 638.854057][ T31] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000008 [ 638.864186][ T31] RBP: 00007f21d7432e6f R08: 0000000000000000 R09: 0000000000000000 [ 638.873828][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.883450][ T31] R13: 00007f21d7616038 R14: 00007f21d7615fa0 R15: 00007fff94da8288 [ 638.893023][ T31] [ 638.897940][ T31] INFO: lockdep is turned off. [ 638.951885][T27323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.971972][ T31] NMI backtrace for cpu 1 [ 638.971993][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 638.972011][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.972021][ T31] Call Trace: [ 638.972027][ T31] [ 638.972035][ T31] dump_stack_lvl+0xe8/0x150 [ 638.972056][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 638.972140][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 638.972166][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 638.972184][ T31] sys_info+0x135/0x170 [ 638.972200][ T31] watchdog+0xfd7/0x1030 [ 638.972222][ T31] ? watchdog+0x1c7/0x1030 [ 638.972244][ T31] kthread+0x388/0x470 [ 638.972259][ T31] ? __pfx_watchdog+0x10/0x10 [ 638.972277][ T31] ? __pfx_kthread+0x10/0x10 [ 638.972291][ T31] ret_from_fork+0x514/0xb70 [ 638.972308][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 638.972324][ T31] ? __switch_to+0xc89/0x1420 [ 638.972345][ T31] ? __pfx_kthread+0x10/0x10 [ 638.972359][ T31] ret_from_fork_asm+0x1a/0x30 [ 638.972383][ T31] [ 638.972425][ T31] Sending NMI from CPU 1 to CPUs 0: [ 639.093415][ C0] NMI backtrace for cpu 0 [ 639.093432][ C0] CPU: 0 UID: 0 PID: 7530 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 639.093451][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 639.093462][ C0] RIP: 0010:__kasan_poison_slab+0x2f/0x70 [ 639.093491][ C0] Code: c7 c0 ff ff ff ff eb 08 48 ff c0 48 39 c8 73 13 b9 01 00 00 00 48 f7 07 40 00 00 00 74 ea 8b 4f 78 eb e5 48 8b 15 61 2a f6 0b <48> 8b 05 4a 2a f6 0b 48 f7 07 40 00 00 00 75 04 31 c9 eb 04 0f b6 [ 639.093505][ C0] RSP: 0018:ffffc90003b0fbe8 EFLAGS: 00000246 [ 639.093521][ C0] RAX: 0000000000000001 RBX: ffff88801c2c38c0 RCX: 0000000000000001 [ 639.093532][ C0] RDX: ffffea0000000000 RSI: ffffffff8c291100 RDI: ffffea00014c0440 [ 639.093544][ C0] RBP: 00000000000c2cc0 R08: ffffffff903114f7 R09: 1ffffffff206229e [ 639.093557][ C0] R10: dffffc0000000000 R11: fffffbfff206229f R12: 0000000000082cc0 [ 639.093568][ C0] R13: 0000000000000010 R14: ffffea00014c0440 R15: 0000000000000000 [ 639.093580][ C0] FS: 0000000000000000(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000 [ 639.093594][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 639.093605][ C0] CR2: 00007f2b18561a10 CR3: 000000004d0a0000 CR4: 00000000003526f0 [ 639.093620][ C0] Call Trace: [ 639.093626][ C0] [ 639.093632][ C0] allocate_slab+0x1b0/0x5d0 [ 639.093660][ C0] refill_objects+0x328/0x3c0 [ 639.093679][ C0] __pcs_replace_empty_main+0x2e0/0x6b0 [ 639.093700][ C0] kmem_cache_alloc_noprof+0x373/0x650 [ 639.093721][ C0] ? do_getname+0x2e/0x250 [ 639.093736][ C0] ? kmem_cache_alloc_noprof+0x156/0x650 [ 639.093758][ C0] do_getname+0x2e/0x250 [ 639.093772][ C0] ? getname_flags+0x11/0x20 [ 639.093788][ C0] do_sys_openat2+0xcc/0x200 [ 639.093806][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 639.093825][ C0] ? fput_close_sync+0x1f8/0x240 [ 639.093843][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 639.093864][ C0] __x64_sys_openat+0x138/0x170 [ 639.093883][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.093898][ C0] do_syscall_64+0x174/0x580 [ 639.093916][ C0] ? trace_irq_disable+0x3b/0x140 [ 639.093938][ C0] ? clear_bhb_loop+0x40/0x90 [ 639.093957][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.093972][ C0] RIP: 0033:0x7f2b1888e0ba [ 639.093987][ C0] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 639.094000][ C0] RSP: 002b:00007fff8042ac68 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 639.094017][ C0] RAX: ffffffffffffffda RBX: 00007fff8042ace0 RCX: 00007f2b1888e0ba [ 639.094029][ C0] RDX: 0000000000080000 RSI: 00007fff8042ace0 RDI: 00000000ffffff9c [ 639.094040][ C0] RBP: 00007fff8042acd0 R08: 00007fff8042aed7 R09: 0000000000000000 [ 639.094052][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000017 [ 639.094061][ C0] R13: 00007f2b18862000 R14: 00007fff8042aef0 R15: 0000000000000000 [ 639.094080][ C0] [ 639.235454][ T6989] veth0_vlan: entered promiscuous mode [ 639.237846][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 639.237871][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 639.237898][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 639.237908][ T31] Call Trace: [ 639.237915][ T31] [ 639.237923][ T31] vpanic+0x56c/0xa60 [ 639.237946][ T31] ? __pfx___schedule+0x10/0x10 [ 639.237966][ T31] ? __pfx_vpanic+0x10/0x10 [ 639.237982][ T31] ? rcu_is_watching+0x15/0xb0 [ 639.237999][ T31] ? trace_irq_enable+0x3b/0x140 [ 639.238022][ T31] panic+0xc5/0xd0 [ 639.238038][ T31] ? __pfx_panic+0x10/0x10 [ 639.238060][ T31] watchdog+0x1030/0x1030 [ 639.238083][ T31] ? watchdog+0x1c7/0x1030 [ 639.238104][ T31] kthread+0x388/0x470 [ 639.238120][ T31] ? __pfx_watchdog+0x10/0x10 [ 639.238137][ T31] ? __pfx_kthread+0x10/0x10 [ 639.238153][ T31] ret_from_fork+0x514/0xb70 [ 639.238169][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 639.238185][ T31] ? __switch_to+0xc89/0x1420 [ 639.238206][ T31] ? __pfx_kthread+0x10/0x10 [ 639.238222][ T31] ret_from_fork_asm+0x1a/0x30 [ 639.238245][ T31] [ 639.240842][ T31] Kernel Offset: disabled