last executing test programs: 4.590325176s ago: executing program 4 (id=2708): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x2, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES8, @ANYBLOB="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"], 0x32600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0xffffffff, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, &(0x7f0000000280)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000080)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="eebc262c4d11ad699823ddb21eab600906d48f2fe730c264ef64f1410544a8f6902f317eecd1faa9c822264a205354d6806296a3e5c432da2094dbe14f9f0b1381c7d0cb2119b1aab7a1084d5f0f683c97b0967b3db7da8f2588e493a877a331f6dc80b4ec43add33f91", 0x6a}, {&(0x7f00000002c0)="ad38df91f7e5532d5d2275b515d7df66a2d91e2f8d175fc33e4a71c7d9c77d024aa8a372e31960c2b731cffc296f77c64440c3f26b31af0ebfacb668207145c1f126caab93577604b0cf1be77890029912b693349b25db215bc8519667cd0bd833e306aa01ba7318c6c83d8d0f5a724da7c89e3c34aff2a2f28081810aa17d693d29531d4c40bdbff3398eb74764233143bb74efe072f790da785359c7022955df393574ec47c13d74e9c89edec24c19b5d8ff280cf57a97f4fc0c588db3983d6f6544ee01bedcd363e4672f892d78cd", 0xd0}], 0x2, &(0x7f00000003c0)=[{0xe8, 0x88, 0xff, "839e8e06d77535fea58e45be0f23b3e7c35b7d15bdebbcf92ffa2297be0955312504d6789d4273a337510644fd41b4c711944a82df226b128e51748785a31a376b8dfa1292f22c1afaf2be50731cf6131fe4e42641ad18e7006481ed2602c36ed259a66bff1c1d2d68ab8ee596f73f4245f4385abd7c93213728afb454a659729cbf360ad1ea1b0c0000dc98c91bc617b47291e9f002d10ac9fe2332ceb2824bcccb33dcde335c4362e9a2f76c69106af0e6ff0e0f07837fa042b7ebb1d24150f162b153e62a7b260cfd3b5ed26f4fef006b02f022a648"}, {0x60, 0x10a, 0x0, "3ef9e8793227156c18b4ed5407abd836d8049ac1c67155927fa36ff5b622c83225ed8b71e70ca120492f067b1abaafa3d6097dc2fea2830f53f8dee2ecd5d193236484ea4d1aa429f15f11fbb04a5a75"}], 0x148}, 0x4041) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, @can={0x1d, r4}, @xdp={0x2c, 0x6, r8, 0x34}, @rc={0x1f, @any, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='vlan0\x00', 0x8a, 0x0, 0xe0df}) 4.156759333s ago: executing program 4 (id=2715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = socket(0xa, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 4.007357105s ago: executing program 2 (id=2717): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000003080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x664, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014800d02b7030000000000008500000083000000bf090000000000005509010000000000950000000000000007090000080080ffbf91000000000000b7020000000000008500000085000000b70600000000000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x200000000000011, 0x2, 0x0) unshare(0x2c060000) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3.983507876s ago: executing program 4 (id=2720): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) unshare(0x6a040000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20004010) pipe(&(0x7f00000004c0)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000240)=0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x200, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a6c000000060a0b04000000000000000002000000380004803400018009000100686173680000"], 0x94}, 0x1, 0x0, 0x0, 0x8010}, 0x4008800) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)=0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="0a000000010001", 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x7, r6, 0x1, 0x10, 0x6, @dev}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x32, 0xffffffffffffffff}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="40001e00", @ANYRES16, @ANYBLOB="01002bbd7009fedb1fa09d3b2b3f000021000a00044ece708bf143505927bff385e5f6f591a16e30c547ce46e79794ccead94bf24b8ee502427c29ce004073e2037237e634516d3d35d7fcaf1cc9d6712261470f4c6f1ceedb28e4019b25e62af2c13b3d61df7ad5ddb5c2eb2b580b35f1e1f4730e014a1578ffd7cf67c1673d371c"], 0x40}}, 0x8084) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 3.630770802s ago: executing program 2 (id=2726): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x0, 0x43, 0xa0, 0x1b0, 0x98, 0x298, 0x178, 0x178, 0x298, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0xff, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x58f98b2c60eaba70, 0x0, 0x61}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x390) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xd1, &(0x7f0000000180), &(0x7f0000000200)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf250800", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000800) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000000)) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 3.159733472s ago: executing program 2 (id=2732): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$unix(0x1, 0x6733fb09beb0135c, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x8100, 0x0, 0x4, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0xbe, "c3d9f9c760a6df7f240d7fe201ec6e52418362c4c4f4e49a500d1043b390d0f7c12bce5717582472fbf4e66230d8e87e59570af4bd9e9b19033612937502448678a0cd64f6e13987eb5835d259c013eb06b8c75dabc9d7326c3a7fc2c8987ea8c42c5549c861c9defcb3494214e0168dffc871964fcc4334b2d509de94be01581efde594bd8ea7dd225803b311700ea7354de4dd23d16aef02c16a7f711396f839789a842290399ede48f7b677683d40b36fd0a52d75bf1ff35398b3169c"}, 0xc6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@random="49c73a740cdd", @remote, @val={@void, {0x8100, 0x7}}, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0x3b, 0x1, 0x0, 0x0, "d6f771a064523e9a41004a889cf8eb2629858d603ed85395f5bca2f34c3799123f5cead96f45bf3477a028270acf99a2e72170b17c513388be1a5c194bf227e1"}}}}, &(0x7f0000000200)={0x1, 0x4, [0xf74, 0x1d, 0x881, 0xa99]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x10, 0x8, 0xfffffff0, 0x7ff, {{0x2d, 0x4, 0x3, 0x1c, 0xb4, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xf, 0x3, [{0x6, 0x9, "4813ac51465f47"}]}, @timestamp_prespec={0x44, 0xc, 0xa5, 0x3, 0x6, [{@multicast2, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x8e, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010102, 0x5}, {@rand_addr=0x64010102, 0x5}, {@empty, 0xc85}, {@empty, 0x7}, {@loopback, 0xff}]}, @ssrr={0x89, 0x7, 0xbd, [@multicast1]}, @timestamp_prespec={0x44, 0x24, 0xb0, 0x3, 0x4, [{@multicast2, 0x1}, {@remote, 0xfffffffc}, {@empty, 0x7fff}, {@empty, 0x3}]}, @ssrr={0x89, 0x1f, 0x63, [@multicast2, @private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x4, 0xffffffff, 0x4, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x80, 0xa5e}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @local}, &(0x7f0000000680)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@loopback, @local, 0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x9d, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x10, 0x9, 0x401}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1b8, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) socket$nl_route(0x10, 0x3, 0x0) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x12, 0x2, 0x8f5, 0x7ff, 0x40040, 0x1, 0x9, '\x00', r5, 0xffffffffffffffff, 0x1, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan1\x00', 0x0}) r18 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@bloom_filter={0x1e, 0x7ea29cf5, 0x5, 0xffff, 0x40210, r16, 0x7, '\x00', r17, r18, 0xfffffff8, 0x0, 0x0, 0xf}, 0x50) r19 = accept4$vsock_stream(r18, &(0x7f0000000d40)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r19, 0x8983, &(0x7f0000000d80)) r20 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r20, 0x6b, 0x3, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xe5}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 2.749407056s ago: executing program 2 (id=2738): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffb, 0x2000000, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x14000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/2, 0x2}], 0x1, 0x479, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x1000000, 0x0, 0x2400c810}, 0x4) 1.894809885s ago: executing program 1 (id=2744): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x2982b62d4fad2ce6}, 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x1c, 0x1a, 0x1, 0x70bd26, 0x1, {0x2, 0x0, 0x20}}, 0x1c}, 0x1, 0x0, 0x0, 0x48074}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x1, 0x5, 0x0) close(r1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)={0xe000200c}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000040)={0x80000004}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0xfffc, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x3, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0xcd17}, 0x9, 0x40000000, 0x0, 0x1, 0x2, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 32) r5 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) (rerun: 32) 1.684232217s ago: executing program 0 (id=2745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x886b, 0x10f, 0x20, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0xd}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x177, 0x177, 0xc, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0x9, 0x3}, {0xb, 0x203}, {0x9, 0x4}, {0xe, 0x5}, {0xf}, {0xb, 0x5}, {0x6, 0x5}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x19, 0x0, 0x4, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x9, 0x3}]}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x5, 0xccf7}, {0xe, 0xffffffff}, {0x1, 0x7fffffff}]}, @enum64={0xf, 0x8, 0x0, 0x13, 0x1, 0x9, [{0x3, 0x7, 0x81}, {0xb, 0x2, 0x80000000}, {0x3, 0x0, 0x9}, {0xf, 0x1, 0x77b800}, {0x1, 0x7fffffff, 0x3}, {0xd, 0x3032, 0x3}, {0xa, 0xdca7, 0xb4}, {0xb, 0x38, 0x3}]}, @datasec={0x1, 0x3, 0x0, 0xf, 0x3, [{0x4, 0x0, 0x8}, {0x5, 0x7, 0x4}, {0x5, 0x2, 0x3}], "b57c87"}, @struct={0x8, 0x4, 0x0, 0x4, 0x1, 0x8, [{0x7, 0x5, 0x3}, {0x6, 0x3, 0x4}, {0x9, 0x1, 0x2}, {0x4, 0x0, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x61, 0x61, 0x2e, 0x30, 0x30, 0x5f, 0x61]}}, &(0x7f0000000200)=""/150, 0x19c, 0x96, 0x0, 0x1, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0xd3c, 0xda47, 0x80, 0x2, 0x1, 0x3, '\x00', r1, r2, 0x4, 0x4, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.327339882s ago: executing program 0 (id=2747): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x94800, &(0x7f0000000080)={@align=0x36f8, {0x8001, 0x3, 0xa, 0x7fff}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000005f2dcfb28c54df3106", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e000100776972656775617264"], 0x44}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x50}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004080}, 0x4008814) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884807"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 1.326719099s ago: executing program 1 (id=2748): r0 = socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0x8, 0xffe0}, {0xe, 0x9}}}, 0x8}, 0x1, 0x0, 0x0, 0x50}, 0x801) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa20000000000000702000078ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000040)="07f0b5b0044f86a64bf6b92d350fae1fe31a5ff6643ebc77507d43d7a0a896f4286b39d576e23f64ee0d3f0845fad2bf01fe1be106f8fcefad28a2f34c8e5911ed331c7be98ce667bb04c8c9410b75490ada62e506e16e4c6f2249ac20cf6b625bfc6a9d6a3a461d4363c778680681e3baa4cecdf805940571eb183e54eeb6e20a8d2e5cde8c4765e218a2ae36e3b5c3b7bd3f47898d7464d66b25d194e17a0a") (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) unshare(0x600) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000100)=0x3ff, 0x4) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000e700a31bd909e81729c52a2fb1dd0c0000"], 0x14}, 0x1, 0x0, 0x0, 0x40ebe4ec9ca5cb72}, 0x0) (rerun: 64) 1.292808655s ago: executing program 3 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'sit0\x00', r3, 0x8, 0x700, 0x1, 0x7fffffff, {{0x28, 0x4, 0x0, 0x6, 0xa0, 0x68, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x81, 0x4, '~y'}, @timestamp_addr={0x44, 0x24, 0x29, 0x1, 0x0, [{@rand_addr=0x64010101, 0x80}, {@broadcast, 0x7}, {@multicast1, 0x6}, {@multicast1, 0x1}]}, @rr={0x7, 0xb, 0x66, [@local, @loopback]}, @rr={0x7, 0x1b, 0x84, [@rand_addr=0x64010100, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty]}, @ssrr={0x89, 0x1b, 0xcf, [@local, @empty, @loopback, @local, @loopback, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x1, [{@empty, 0xe6}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xef, 0x3, 0x3, [{@private=0xa010102, 0x4}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {0xfff1, 0x9}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.226844711s ago: executing program 1 (id=2750): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'bond0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.11716801s ago: executing program 3 (id=2751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="050427c67002fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001"], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x20000000, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x40, 0x7, 0xc00, 0x82, {{0x2d, 0x4, 0x3, 0x39, 0xb4, 0x67, 0x0, 0x16, 0x29, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x6b, 0x3, 0x4, [{@loopback, 0x98}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x3}, {@remote, 0xffff}]}, @timestamp={0x44, 0x8, 0xda, 0x0, 0x1, [0xa]}, @generic={0x5, 0xc, "0b2a1d5d8509b7d81160"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x11, 0x3, 0x7, [{@multicast1, 0x9}, {@loopback, 0xffff}, {@remote, 0x5}, {@loopback}]}, @timestamp={0x44, 0x2c, 0x61, 0x0, 0x0, [0x7fff, 0x9, 0xfffffffc, 0x7f, 0x21f28de4, 0x8, 0x0, 0x0, 0x10001, 0x1ff]}, @timestamp_prespec={0x44, 0x1c, 0x5b, 0x3, 0xd, [{@local, 0xedb}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x1000}, {@broadcast, 0x43}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xd369c59c767204e0, &(0x7f0000000340)={@private, @dev, 0x0}, &(0x7f0000000380)=0xc) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) (async) r12 = socket(0x400000000010, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xfff2, 0xe}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xb, 0x8, 0x8, 0x7, 0x3, 0x2, 0x400, 0x7fffffff, [{0x4, 0xd27a, 0x80000001, 0x1}, {0x8, 0x5, 0x72a, 0x4ea0}, {0x4c, 0x6, 0x1, 0x9}, {0x2, 0x5, 0x1c, 0x20000}, {0x9, 0xd6, 0x4, 0x83bd}, {0x0, 0x3, 0xe, 0x5}, {0xffffffff, 0xffff0001, 0x2, 0x7}, {0xe2fb, 0x7, 0x8, 0x7ff}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) (async) r15 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r15, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4", 0x20}, {&(0x7f00000001c0)="43ef6e06729e", 0x6}], 0x2}, 0x40804) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x40, 0x7800, 0xfd0e, 0x3, {{0xc, 0x4, 0x2, 0x5, 0x30, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @local, {[@timestamp={0x44, 0x1c, 0x94, 0x0, 0x8, [0x5, 0x6, 0x6, 0x9, 0x10, 0x0]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)={0x4b4, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x745}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x9a, 0x0, 0x3}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x92, 0x6, 0xbd, 0xfff}, {0x100, 0x6, 0x9, 0xfffffff9}, {0x8, 0xff, 0x4, 0xd}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf9}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb3826ff9}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r17}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf9}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.039908939s ago: executing program 0 (id=2752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff9, 0xffff}, {0x3, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0xd}, [@TCA_NETEM_SLOT={0xfffffffffffffe09, 0xc, {0x5, 0x8, 0xda3, 0x7fffffff, 0x7, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2084}, 0x4000a894) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004014}, 0x800) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@private=0xa010101, 0x0, 0xfffe, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x1, 0x1, 0x0, 0x52b, 0x2000000000000b}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x280001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.035040555s ago: executing program 4 (id=2753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r1, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffff7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) 1.024274754s ago: executing program 1 (id=2754): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r1) (async) write(r0, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, r2, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 915.521136ms ago: executing program 3 (id=2755): accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) (async) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) recvfrom$inet(r0, &(0x7f0000000040)=""/241, 0xf1, 0x101, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) gettid() (async) r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETNSID={0x24, 0x5a, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r1}, @NETNSA_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x801) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r1) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xd, 0x7, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x69e6, 0x81}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'gretap0\x00', r2, 0x20, 0x40, 0xc98, 0x3, {{0x10, 0x4, 0x1, 0xf, 0x40, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0x7, [{@loopback, 0x13}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xaa8e}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@broadcast, 0x4fe00edf}]}]}}}}}) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="e4e713940c4ea59b576bfc026ee4fae6d7f2e2bd3efa85649e616e5d6db6abe046526a1fed32209db73db1d8d2372cf3fff62557fb241c18c16d5c4164001ddaa7841373019a4e4e09b81d912aac93e367eecf884be16ef285c904fe8510c282d2b116cdfbd8c5a5e55b6a6b077e8035808d891d03a4da72435ab12b82f4fa616a39051ce2e7e215c2baedf26f4be6eec2778de2bbc573cc438c785eec", 0x9d}, {&(0x7f0000000500)="7b513791d6d1b5b21a96aa373f3ccaaa66fd654be460291d7c19604462a71e73f414c89a64550cdcfd62b45d9028dda9ebea898ec5e98a58ee8a", 0x3a}, {&(0x7f0000000540)="4b867f0419b60702f409023f5aaea45232e553fc2b18075b8c4cab898e5963b5b9819fb49c8bf459ae68fe8b86b26e0dff5fd8b9d50ad51e106f1558467901d772f6975e01e090b13b0442e3e5e588a05ddb54e5895fdbf61b73f788b7f23f1ee461548540c5f3474287c9fc4dc17389adb5d7a825e132a58b7873367b03852a244c6ba2a54860b9723d9184019d2d8ad154a42c7726a41711fefa6d024bea99f1afba516ed05af2a7995fec14c2531e36fef2a029d492c1d662d5d4c2183d49f6061be6418f1f8bea", 0xc9}], 0x3, 0x0, 0x0, 0x4}, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x4, 0x40, 0x3, 0xf, 0xf, @private0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x20, 0x1, 0x81, 0x3731}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x80000) setsockopt$ax25_int(r5, 0x101, 0xc, &(0x7f00000007c0)=0xd1, 0x4) r6 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000800)=r6) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) accept$ax25(r5, &(0x7f0000000880)={{}, [@null, @remote, @bcast, @default, @rose, @remote, @rose, @bcast]}, &(0x7f0000000900)=0x48) (async) accept$ax25(r5, &(0x7f0000000880)={{}, [@null, @remote, @bcast, @default, @rose, @remote, @rose, @bcast]}, &(0x7f0000000900)=0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000980)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c040) getsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) (async) getsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r7) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000001040)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000001000)={&(0x7f0000000b80)={0x44c, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x154, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1f9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xda98, @rand_addr=' \x01\x00', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x299}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1800000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x44c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8f4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc0}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "d3d5053898ff80287319ccf06e0356433644e67b825c17"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "f957ee8f09f8068ac7bdd14e0d55e3e512340dd7c3af0164e4b63295730043ee7b6d"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "3de1232903cab393c130e822ff82ba41dc05dfd65c8322ac19d98a6dc5451880a3c3e3"}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000001040)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000001000)={&(0x7f0000000b80)={0x44c, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x154, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1f9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xda98, @rand_addr=' \x01\x00', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x299}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1800000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x44c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8f4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc0}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "d3d5053898ff80287319ccf06e0356433644e67b825c17"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "f957ee8f09f8068ac7bdd14e0d55e3e512340dd7c3af0164e4b63295730043ee7b6d"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "3de1232903cab393c130e822ff82ba41dc05dfd65c8322ac19d98a6dc5451880a3c3e3"}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000014c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001480)={&(0x7f00000010c0)={0x38c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd4, 0x3, "7a8b31e9ac77f39c806df6b3b268dc3e92672011e260f9e9f28967e2832bfbbf6a26f11d3e328fdfc8d6e1e02d6ae912a0626f2b46d968673decc4fa20c91215753f1f4454dcd7c3368198afdfa705dc6bd9025b247a5d27b180ba49010113bcadf8958d5f6a4cc3e4e59f0057350988a9a03b625e9faae7ac559c4bda71beeb60521e368919680cc6a68366eba31c6367a2709fb3c7e72c486ebb2567031773660d4d61e5ec876af7cb6587df4a97a94bcab964de5f121180ad0ab321d4ea9802cbeff8f1c082e4c3fc77cd53f056ed"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "d07449ae141164ac98ee5d0eead320a72c8aa18f9099abd7ec64b0823ba02fc0dd1a37ca1f4605af9d4e2aa0508a842db458dd7e0ed9028b8258cf71d003c5c7d634c2516537e665628f2338f03494abd150037ec9e8026ed78f122705f9827af32d1a703f55bd9996c77df173690cc8ab8aa479d84cde45753cc099c81652bde10021f400f11a79a7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5890afdcb7339d3cce505d4f4bbeef2eda65dea897ba2b07b3dd70a100c6bf97da8d9352"}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4911}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd13}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x2}, 0x40000) r11 = socket(0x27, 0x3, 0x3ff) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x1, &(0x7f0000001500)=0x5, 0x8) r12 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r12, 0x8940, &(0x7f0000001540)=@generic={0x0, 0x4, 0x7fff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 788.138951ms ago: executing program 3 (id=2756): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$packet(0x11, 0x1, 0x300) unshare(0x0) unshare(0xa020480) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 786.449071ms ago: executing program 1 (id=2757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x8000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105840, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120088be"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24001, 0x0) 785.408315ms ago: executing program 0 (id=2758): socket(0x23, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x2, 0x80805, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000724000/0x2000)=nil, 0x2000, 0x8, 0x11, r2, 0xc385d25767ee48ba) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3cad75f87b473622140aca9f6be4377caaba76f08daaad767f134c2ffc2ba9c92a5971b01b71a225dababc99832633ea975d465532309695b29d56eb9befec5159067bffa2d17b24093b372ebaf5589d18a8905982d01ee2870aa096647d6afabca77e0f36a01481b10ed8f0a585ceb41bf50f0515c259bbbbee74db0e045a9fde3614d35c6f2dfa1e71dace811a410bdfb395dd7c54fa733c6f8111f24df309ad928c6462d0a53a3824f9af07b11cb0c05724c33acfad1f5f16bffaf6c58ab2b8c4626bd9d4d1cc4ab67c9838b1fc53fb4ce46d304a12fffc2110043381d08160f056e8d3908497a402dcc156ff69bbf5cb5e5443c06bc4e3c6e4f231aab0eb6fdd2bb0740ae88095360d8b247daa6628fc10edbf048d800625134022e1d5d0bcb5c50e567f50c1990b1a434caa57d210b6084c9424d37c7a71479613b69b67670baab82f13b0923a73786655cfceb0c70d511b94f992391cad9ce57c5c76675cae6a2712cb9ce6dc07bdd0118001f062a22943ca72742a0fe97c48b9b895515fc71145fac9dfd27118a70b71dd564f27e31e1112292864a7be45459524ad8fb03c1f4388bdba3d9e3882a9be894133b0deea92885d0276f268bad0396635036192da1a9788e7525b08de07b0f351147e0f2aaa239e197924a5fc6961dbfcc96ad4cae4cf59f7a812d0c7f8506216dfb7658f8f8545477f4b6c1a606554ee19621d85438014d5e569b0c467e67cf0bb046284f4145ee9f9601b950b0217d183d0266da78f83ed2cf8a83f1374295853d52cdd561a756f247598126cddc98416c42c47a5ad4fda1c419b6ce04f4b57efd2cecf7bfe1589aab05c33e397c8acfb5e4d05cc62db2ba633e74d08c9a3c92111d39ef7d1c0321bfa1827b9fbbb592c49d46244b57c985ee4cc830f7eeda32cae961c4386916f927fc7f442eb6e2eaf45a3d2b0f28d4d319fdedd003aedc1c6384085921397a041384edee7172973fddb3eee2132acdec385cb596055f82a41087097ffece144a340cfe3ec0c0b833f4a92d28709419827eb0f747d73a2e7cc7d00a24749b9dd340793e2ca36536bc47233c9e2602a7f7f94450b22117215be6086d0c0132d24350c19abcb3d713fa97f76ce6ec8f61b24bfecb3ddcd0e7bccd0c4839de19283e95e08bc629554aac9543c15b0f69f1d03374269796c477579d212708b760914bde3269d9e9b0036c7cd0e8f3376d6a62ed0cde76861423ec5f76f2ab4d0f05b21db57277feaaf8475e6e6d1e5672281db17046b7464439d69e25210f67998e912d02c5296c60a450a38495e3b6737339a05f83e5a02aa1ee5bca6bf67ba84c659ef3cc4495cb1551e749277a86db07e7c48f61ee0672919d6a00472a893b6c6eead02140318fb497a1819b692b9bcb3b5cbe7cb55b9524abb1268b3f4a031a64fe6305519a2212298089c443b0503e77b7c8a3da14387872ca35cd6524f629161d85f253498568587513aa16848fa8f8f3dea115cbe8e85bdb8aa20f20ce26f3fcaac4615a9b9d7d6919ba952f7e93a96ba26010cc4bc24622ed3bb9b063e0e686f41b2cece5a50d787676600a04bfe7e6eb78e740b8bcb4b3a51f2a39250d0163a75d8f97032c60efc5516ba48ce2d53da0a7aab99330369a2c44cfc6ac65707733971493de86a519629f7be4643a52abe3d0ca1e22dfa27d8f7c54c50e0e1f3f639dbc622afa56d22b2732232d62b0a312c359dfd25e266f2138a49689fcc789470b01aabc05563ab025938153c15abbb300192e0bc27f810246d4d24295f337db02aa6b3e801905ee519a681fd73462eb330800763f75ae88e3e57c2a5552fba4b6154cab775625b817e18ff1e26273d21bf8b3cb2a79df7e92a8e498dadc04f11c62d6841bdd0408b212a43951a4a4f4f29c9b8918644e743e2f30cc52d422a9ce03750307096a5f8b61bb585ada2ad7a63d440e418c16e6827792dd470fa980a72cbe53b354ab208b0cb99ad858ff2ee4395f7fbff96c38fe2f84ccca78b6c867d1ff0440c5795b875339b87d98e59dca2dd80b3624c7406b56dc76b0198514bdb97b228e5b726683b3c12f71fb2b1dda24d085175acdc5d7744129df8065168ac103d819bc95dd408e17bfa7ae37d0ff5145e393a37b5cc08c2c10e5ef5d80dd6c79d35c650417e6fc47467c3552bbc1a3d50d2cdce471e5cd43b48475272e30c9d415c826bed60369c1841219e15d93bd87de49e2566de3a01dfc60cd3295134c876863cbfb7be8be44b0d4369b81a778f8fb2fcd039048fd16bf9d4f08a9458dbeadb298ee12b7ee7f6f43099dc684e33bee75d23f37c5b058e56f785f1c2af0c2ad66b69fc1fc06073bd53bed4a967314a6af8ede4d2facdae08ed503c4903fd5fdfd291327cd2ead1876361a16d9341cc24a63b2b51538b7199e048c00cab7127d19ae9a3ea0755b9b5d9604fefcfe7237d641019291bcd9ce30d5a388ad7127fde6061f1e307c0024ff1c200dc04354340eb4e8daac073b7c2f1fe1cee49330cc89ac061bd8a5f1676391d22d4afc8e5875daf4806bac0b5565bb99f07723cdd063ff070ba409fba6642888ea88109b333c3748f77b99f3bd4b9b61ec5e3d798d3584937c0165f4df571b8132ae425849e7e5ce414fbb00d9a30c129e2c13b6791435bb552bb01cedf3003b3bb24503fe226121d1f83419d5c23fad54dbd08fb3449b8a561954a23b47e34b7b14ddbcec2745353269e19fe218da2d0aad6df73083b3979160d4e52c8532c9f6602bc8ee624b9d5157fefbffec98e0e91a4f3824ccb4c33e17d19011f4c8db333d0fc5530930951cb63353a3aa0617ab2aba52268b81628d9f4a56b227300488c10df1e7f7533e1e4db449cb9cb6e588debf4795f98810702de5bfb81414bdacfcbd9e66f051ec7272b41ba281e8a68fe7c61e1cb4e74077342ddb7c5191d9731448a9e42a30c4df80e533db26ca3e12ab8ce8b5f0d114888692589b6c836c603ea4210c31b0e053092d75d9ceb49c5e9e2815b5aeebfcb53e97017d0ff6c7d3410120e355f9a6a1226e64a1621a2e6c04865acb25e137243ab9b82beea39c411163afd8969b086df73751020879785ec79c451fb822c11df1ae927318b35bd583a56827fd8744df8e7693837b8ddb0e831fd97b87505d5540d76d3e09895e64cc563dadf60bec88ee70b6008a53e50523ffbd2c0aa9f19123bd6f28de9851ae1f3f6101b46acf9139792be4872bf494c8970aee100a7a0c4dfbccbf01b6ccbebdfa8291f8ab3e25a9e4ff5dbda11488630e3bb8158b8f8de8cd4f793885e7a28e5afdf45eb57ad1330dfc0c51f51986e53c458feb4a4ef55b810a32f847d7ff5500c0f769d9abc090c10f87ba4e5250f36e70abb838ccb8f9fa95d96ba1e2e75a2d808a8fa26b686149ed6738a8e63ef70ed284e25d044aaa1e14c8caea04b77c9fba96036dd8b3be2e7704c65090fa7e8bf0e45c291709d3eb16a81e8aac27a120e52c05866310d8f288367f2b5187e83a1f7d5cb9dc6f8faa648683b7c88d54871dfcdca822568959ac2f7eb7dd3a345b0a8149806105dc90abfee3d5cefae3dfece4723fdc5a73c3a087020ca2fe1b166fe5b54cfb2f661fa5b017502155bf91856c3aae5cd20a48fbb958e1a0e70df51e4e46bbea56f639f6f32698d45297296244e8aaa845c13b70fa7f4f31115de0808975c143191c89c0233c557ddb93d6233ce22a699ca9a54ca6e8ddcfb5bf9d95b9807a49d9a64f7a239c77fa4e0d92d561fca5aa3e6c149c16c11131c9ad78493572cf1a9f953cc63ef8121cfa86a0f3fdb5a73c8530ddf93a9308fcaf436455aa6817f65e4616c9e38733b1cf9fa09822953d7d203748c5e45cbbe84a4fb7d59318013ba2a7da6f972c47ff9289091d7476035affddf44cc7a0b223cd14af5243dd14cd5d0f42849bd31af8ef9de434a01c52ee583c2d93b4785c34969629ffa406335ccd090637b83a5ee126a4833e6d6cf92b8aa6f9a2213df25fa575980c0cbd98039ca978860442b7466c3d4aa215593243d9c7ad3980470c9ef85154566ceed93ccb0330634f92d1fe5050bfe135f345527c93476e474f31ea45729ec534475d36b69876644e5db59c8cb0412f8d65be9ff2bea5ac37c5b1ff5d5d484aebed8b33920bbc8ed59ba9b3bf24ab6da8ebeda14dad9148183411980136cc2fde47049c98063b0ff1816a0852af035cbe8313d88620559e8331d983a43e0f4b515a61f5761bcd2130853ea24377d042643684699ceb9441a73f1285f6a15c8e00d17b4e051df2bd16b1a5699f6dce4556b0b6c88b8b86464beb6415777a8ec890c9335cc14452d6b23e2483d5b77b56042a694435bf913cb6e48ce6ca60c3009b274869bb350a8026d80680b32c9394e9b5dfee8df555a705bb1ff17ac848ccec95bb37206a72ab1d56160682d83e38c8acca34b08fa3b8665b35d01967c0a49681ef74b89b39f785977187a9d6f70affe2a32f41fe942fbd30fd9da981cf8f75485015962cb598d3d09a039787bf8d339695d0f5cd7cb60d25cdba119fa435e3692e06bdd76db5856eb2ed2cd85a081209b0a1453d52e1f8cf5120c7f044bddc38cded7ed59a793bfb2b289137137147f704a0628bb8e3e342b6084fbcc105b5345023fed9b2d339b95b0d0c97945943a70e007fe2172c501fae54ad04c279ae6da7150ea25469ce7e9c33b51713b05dcd4753930a0a37326d276fd28c8c0f6e06660beb102e2868fee31f70d37d38769e824846b081d120d8fcd394627fd672fe823cfdcf7af07b20b40e8e5efce8e93e8414744efd2723798aad9dabd8e23efc08983db6c65cf3c43d5b759ca52d118fad7a1bb23e5b3578f616fc42e304c797e640d8b985987274766adbf424e4e9a78c29dc436636e0df6e9255ebdd2c7c0cd261d42631cc49df231d0bd080da2928bcab9a0546b404b658f75fca9d8e506f3f6639bca2a13eae6bded0081fd2239bd8c0ab2382d23eecfb8985da82fe5ed32a96ac1e198d7f8cf5752cfb296af0a2d59ed19022cb084b525d44d8c773a14743a706baf209aebb270104b16181fdc2462d356341d89ba8024171c462640abfc3bd6f602c3bbd710f6ae6a2cef146f27002f78051d6687b83dac0cc627e0af1ed8765396d9783c6429b4063a8d58728c60ec88416c5dbdf362b891d278db21c9a4558c724b06547fc5f641801dd0da8403e57cff37d407fab07bb389c40555af869af263265333bf8aa4290d7cdb9a78573362d608a549165f13323c0107aa4dfac934fef838cf6e5f06b9324a5d8474183f077de97287eaf3c85cb74165b189d7547d3fccc4c763d02ce57d59c70f39e8065cdeb5fd13c4c14609f98941b73b16fed60bc55a2d8ef92104568b595f4a31f6428d527b34c470715d1300cd41ea992763f46a739ba387f359ee1d97c51e889e5599cebd800dbeef1496e3dbacaafc403d0dc7cd3c7d193788536aa5b0f5f25482744107d74795f27a8a8832596166fdcaa548b90c48890715526a52518f16d697d65beb6321befa003dc56432e3dd4b01cede5447813eb429dce845bf9702e5063fe571d8cb6cfecf12870e373b42c4f86f75b7b249f1bdb397113dfd7a23f1930f8533e300e8d0dc1674acb3ce38342b01edcaa09a0f4502f0ba94efeb853fa917612fc16a3829b437663a1e1", 0xfc1}], 0x1, 0x6) close(0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000061dd4e9513329f0cbb70dd83cedb1380dee5b347163139adbe671d6c96be3cf84be5bcd30b47b0156cc4b6503ae2cdd902", @ANYRES16=r5, @ANYBLOB="0d7d26bd7000ffdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000"], 0x3c}}, 0x800) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x2, 0x0, 0x0, 0xa, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @union]}}, 0x0, 0x56}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003400128008000100736974002800028014000b00fc01000000000000000000003b000000000000007f00000106000d0003000000"], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00'}) 776.559961ms ago: executing program 4 (id=2759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (fail_nth: 2) 704.878901ms ago: executing program 2 (id=2760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f00000000c0)={0x10b4, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_IE={0x104e, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x7}, @measure_req={0x26, 0x1003, {0x1, 0xa, 0x5, "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"}}, @challenge={0x10, 0x1, 0x51}, @mic={0x8c, 0x18, {0x8c8, "4c3bde9fbea2", @long="533c510d6516348bdf163c092ed6e82d"}}, @ht={0x2d, 0x1a, {0x8, 0x2, 0x1, 0x0, {0x7, 0x8, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x3, 0x6}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x16, 0x34, @random="47b62abc98f46046331170e0efe78b32652b"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x7, 0x34, @random="8f687b"}]}, 0x10b4}}, 0x8c0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001880)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001240)={0x5e0, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x1}, {0x0, 0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x6}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x5}, {0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x5, 0x8}, {0x5, 0xa}, {0x3, 0x2}, {0x3, 0x9}]}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x101, 0x0, 0x400, 0xfff, 0x8, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x0, 0x7fff, 0x6, 0xcad, 0x40, 0x7b69]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x6, 0x7, 0x9, 0x8, 0x27, 0x8, 0x781]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x1}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x40, 0xd, 0x2b7, 0x7, 0x6e25, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x6, 0x2a, 0x8, 0x10, 0xfffe, 0x7f]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x2}, {0x5, 0x4}, {0x6, 0x2}, {0x2, 0x8}, {0x5}, {0x4, 0x9}, {0x2, 0x1}, {0x2, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x6}, {0x3, 0xa}, {0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x6, 0x7}, {0x6}, {0x4, 0x5}, {0x3, 0xa}, {0x6}, {0x5, 0xa}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x9}, {0x4}, {0x7, 0x8}, {0x1, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x2, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x4}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x5}, {0x3}, {0x3, 0xa}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb6f, 0x3, 0x6, 0xff00, 0x3, 0xadd3, 0x7a85]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x31, 0x24, 0x1, 0xbe, 0x18, 0x3, 0x6c, 0x5, 0x4, 0x4, 0x1, 0x48, 0x16, 0x5, 0x66]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x6, 0x8}, {0x6, 0x3}, {0x3, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x9, 0x6e, 0x9, 0x16, 0x5, 0x16, 0x1, 0x6, 0x24, 0xc, 0x30, 0x5, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x30, 0xb, 0x18, 0xb, 0x1, 0x5, 0x5, 0xc]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0xa}, {0x7}, {0x7, 0x6}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x1}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0xa}, {0x6, 0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {0x2}, {0x5, 0x2}, {0x6, 0x5}, {0x6, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x7}, {}, {0x2, 0x8}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0x2}, {0x2}, {0x6, 0x9}, {0x6, 0x8}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x3, 0x7}, {0x5, 0x9}, {0x5, 0x4}, {0x3, 0x8}, {0x7}, {0x5, 0x4}, {0x5, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0xa}, {0x4, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x6}, {0x6, 0x8}, {0x4}, {0x2, 0x3}, {0x5, 0x6}, {0x5}, {0x1, 0x4}, {0x4, 0x5}, {0x2, 0x7}, {0x2, 0x7}, {0x0, 0x6}, {0x3}, {0x5}, {}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x224, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x3}, {0x6, 0x1}, {0x7, 0xa}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0x7}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x1}, {0x3, 0x9}, {0x5, 0x1}, {0x2, 0xa}, {0x2, 0x6}, {0x7, 0x3}, {0x5, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x6, 0x4}, {0x5, 0xa}, {0x6, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x12b4, 0x577b, 0x2, 0x3, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x6, 0x0, 0x6, 0x2, 0x0, 0x46]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x1, 0xc, 0x9, 0x2, 0x48, 0x48, 0x2, 0x18, 0x4, 0x16, 0x30, 0x3, 0x18, 0x6, 0x6, 0x48, 0x78, 0x4, 0x2e, 0x24, 0x18]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xaa5, 0x7f, 0x9, 0x48e6, 0x2, 0x40, 0x401]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x31, 0x3, 0xff, 0x9, 0x2, 0xc4, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xc3a, 0xb, 0xfff, 0x4, 0x200, 0x8, 0xacc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xd}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x1}, {0x4, 0x5}, {0x5, 0x3}, {0x7, 0x1}, {0x3, 0x7}, {0x3, 0x4}, {0x7, 0x1}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x1}, {0x4, 0x5}, {0x5, 0x4}, {0x4, 0x3}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x3, 0x7}, {0x5}, {0x5}, {0x6, 0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x7, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x3, 0x5}, {}, {0x0, 0x6}, {0x7, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x7, 0x2}, {0x5}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x48, 0x1, 0xc, 0x3, 0x16, 0x6c, 0x6c, 0xb, 0x1b, 0x36, 0x24, 0x12, 0x24, 0x9, 0x1, 0x6c, 0x1b, 0xb, 0x30, 0x3, 0x1]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7ff, 0xf0b, 0x0, 0x7, 0x1, 0x6, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x401, 0xf, 0xfff2, 0x1000, 0x7, 0xfe62, 0x4]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x6}, {0x3, 0x3}, {0x7, 0x5}, {0x3, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb, 0x6, 0x0, 0x5c, 0x2, 0x8a84, 0x93]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x5}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x3, 0x3}, {0x6, 0x5}, {0x4, 0x7}, {0x7, 0x6}, {0x6}, {0x6, 0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x6, 0x8}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x9, 0x2, 0xc, 0x30, 0x12, 0x1b, 0x36, 0x30, 0x6, 0x36, 0x48, 0x2, 0x6, 0x3, 0x39, 0xc, 0x4, 0xb, 0x12, 0x18, 0x18, 0x6, 0x1, 0x18, 0x1, 0x6a]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x1b, 0xc, 0x4, 0x2, 0x36, 0x48, 0x1b, 0x432fbafc3b7565e3, 0x36, 0x30, 0x30, 0x18, 0x2, 0x24, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x3, 0xbc9eb83597dd1fe7, 0x48, 0x24, 0x1, 0x2, 0x18, 0xc, 0x16, 0x24]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x60, 0x2, 0x14, 0x2, 0x48, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3ff, 0x7ff, 0x6, 0x40, 0x1, 0x23eb, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xaa2f, 0x7ff, 0x7ff, 0x7a, 0xdad1, 0x2, 0xd, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x8}, {0x1, 0xa}, {0x2, 0x2}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x2}, {0x2, 0x6}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x5}, {0x5}, {}, {0x3, 0x7}, {0x7, 0x5}, {0x4, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x9}, {0x3, 0xa}, {}, {0x1, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x7}, {0x0, 0x5}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x0, 0x4}, {0x4, 0x5}, {0x4, 0x5}, {0x7}, {0x5, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x9}, {0x7, 0x1}, {0x3}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x2, 0x5}, {0x7, 0x3}, {0x5, 0x5}, {0x1}, {0x7, 0x6}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x3}]}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x2}, {0x6, 0x4}, {0x0, 0x4}, {0x4, 0x4}, {0x2, 0x4}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x4}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x6}, {0x3, 0xa}, {}, {0x0, 0xa}, {0x3, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0x4}, {0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4fd7, 0x63df, 0x0, 0x8, 0x7, 0x8000, 0xfff3]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x5}, {0x2}, {0x3, 0x5}, {0x5, 0x5}, {0x6, 0xa}, {0x3}, {0x1, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x7, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0x7, 0x5}, {0x5, 0x6}, {0x0, 0xa}, {0x3, 0x1}, {0x7, 0x9}, {0x7}, {0x2, 0x1}, {0x7, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x1, 0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x0, 0x1}, {}, {0x0, 0x5}, {0x2, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x2}, {0x6, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x4, 0x1}, {0x6, 0x8}, {0x5, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x5, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x81, 0x4, 0xd, 0x4, 0x7a, 0x26, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x2}, {0x5, 0x7}, {0x5, 0x7}, {0x2, 0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x9}, {0x3, 0x4}, {}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x1}, {0x2, 0x2}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x3}, {0x2, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x4, 0x4}, {0x7, 0x5}, {}, {0x1}, {0x3}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x5, 0x6}, {0x5, 0x3}, {0x4, 0x8}, {0x0, 0xa}]}]}]}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) bind$bt_hci(r3, &(0x7f00000018c0)={0x1f, 0x2, 0x1}, 0x6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0xac, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "4f9a14271f5110f4"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xf5, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x17, 0x5}, {0x3, 0x2}, {0x4, 0x1}, {0x96, 0x6}, {0x2, 0x7}, {0xc2, 0x3}, {0x0, 0x6}, {0xb5, 0x6}, {0xfb, 0x2}], "75911d0ef549bc6b"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1}, {0x7a, 0x7}, {0xd, 0x5}, {0x6}, {0x0, 0x5}, {0x49, 0x4}, {0x6, 0x3}, {0xff, 0x5}, {0x3, 0x5}, {0x8e, 0x4}, {0xd, 0x5}, {0x58, 0x6}, {0x9, 0x7}, {0xfe, 0x4}, {0xf7, 0x6}, {0x8, 0x4}, {0x61, 0x4}, {0x4, 0x1}, {0xf9}, {0x81, 0x2}, {0x2, 0x4}], "65edef8cf6e6ef84"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xa5, 0x1}, {0x6}, {0x5, 0x2}, {0x4, 0x7}, {0xb, 0x5}, {0x1, 0x4}, {0x7, 0x1}, {0xb, 0x6}, {0x8, 0x4}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x40, 0x1}], "ec23bfd55f682780"}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80cc}, 0x801) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001ac0)={'vcan0\x00', 0x0}) (async) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001b00)='cgroup.threads\x00', 0x2, 0x0) (async) r9 = gettid() write$cgroup_pid(r8, &(0x7f0000001b40)=r9, 0x12) (async) listen(r5, 0x3) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f00000031c0)={{r4, &(0x7f0000001b80)='nl80211\x00', 0x111400, &(0x7f0000001bc0)={@_ha_fsid={[0x1]}, {0x1000, 0x3e, 0x6, 0x4}}, 0x9, &(0x7f0000001c00)={@_ha_fsid}, &(0x7f0000001c40)=0x2de}, 0x7, &(0x7f00000030c0)=[{0x1, 0x3ff, &(0x7f0000001c80)='PPPPPP', &(0x7f0000001cc0)="2dd85eca4a69766fe409b4de8ff1f02ca8fc601982772b698b9e5e70ea0dae9d9df2794a772a6b5357253882030f1a9679393b888fb398b1d9d427abef1b74ab348ac0197065bc7d98c4c106f6607e05aac9d69881a3391a81144f668bee4062fd3b6c4353b1b98cd0c056aaaa60d64fd218f85c53443d7fc1", 0x79, 0x10}, {0x1, 0x7fffffff, &(0x7f0000001d40)='*\x00', &(0x7f0000001d80)="a2183bbfb8587af614b6f55a83d1a9c1bbceb0d09a573362ea2f5dcb26341b0edd41357e6cff2b4381cbd5047e5a7307e6a8ee494a85566dc43cee05b69654e6d06c96838317e05dff2d8e42b1e7ece103f7fe0ed1234dc4714b0d748221bd076f32f86887797cc27060baa338568cd8b7cc716ac5701639f397e80271ef546127ea10cda93ad2f198b33b7e3c07af6412ba6972280f42ce137e77a84ffad6b5a7b0b5c7d2a34c2feda4bd9c0ea06a17a5952710c569dfb3c22bf3ca5627cb409355be68391a093d7fd387f21a9a42f01c3058f5395be4780d82794fb54c627e16ffa2f109422a827585c3dfeeba8d98c3cd3be4c98b2aa380aa6adc6db599861b22e94820fa799247e74ff971469e96ff5e22fa2bafc40b4c9c83015b51f6e0e6e1027567872709c4a0d091f827e8e1d7b9defb3cd4cf1d19f2435c6484b93c8b52990ad29775a744600e68bdfe9d5e67f0855f7aeb7f5588ab96b9934a3706ef556b88ef1a6abec3126a8d7efa15723a0cda39ee699ab7b249ea0835a0be94c2c32a4dfb16b4124a035173a5882c0dbfb218d0c652c89a91ebd82c842e857c959d28d17a8aaf04d55dcc64401c5ff3bdb68b8ec17e926870e4bf141006d200588f6a57d222a60461172a4c6fcf54a49e5da028dfa9ff13f25e6279e347433e5136b2d021a2e683d77d6c86fd52e954f86177cd5d5c9a4fbaf889d3f98533c7d44c5def7d7a64ffca2b9a855118ea234635924f059e933d534dddaf7876f1676d97e0c5334531d95ab2277142bd4f314c2934b32ef457e7606e4a316848fa01d9340d2338bb96a4288d3878253dfde6fb5de19734bd7ecf69f99d321f40f93f76a2af3eb7f5e1930c7e051a8a3c0bf2d49f2606df237c55ed20de90c19a08f2b36f8b473819ad1b83884d6862a9a7a53cb00d75d35283784e38080709fa6efd7a56359ce7a6b0c7c81f2e8a14700f897493acf9f4c74f204fe3d14e85fe24ce26b61e13083e4002c82b87f76a9dde8acdcaf930c8e95c999c491a9b3bc3317c8eae2b4963b29a98c62edd9f8092ab55f8bba9dadf6470f9024e26bc81d4089104ad284970aa8b88f478949774639dd95dfb5d22585c2d272abef5f1ad1c587d79059ecb690edb1311da40f74aba670e97c68d192118be3e5cd301ddbea43b6631ef1b3ef65976cd6d234d39ebf6e1bece1519d6ae635f164e936aa62dbec31908e5a60192ad4fc5b6b8f30e78bed6f89e989cdbed7c002d2f8f80606b801df2d4d6148e8d072d40f5beb2d6b8aa7be0ac926bc71c0737c60dc6e4b2ed1be633f7d5bbe00c49fac8d95da1c606a758d5edffb5b08766fc39725ed9c1d44b76fedfe01b9c135f861233b9704f489a705fdb01ef0c7ca2f5f34cb233bd982931a14ef718f5467cfba69deebdbf2468d1f12ea77ff19c2b4c2c839f5a61ce060f41f3208c23658f684656ceb366d9e0c7c547903ceac70212fc6cb48ca59e4764f669c8532f45ff608f3e540a64c102c1f7da192d7d746922ce717454233f8df9b8444a96aebb079c95bcc95aff30a8f933c7a8bc789a90a931c5f6f747bf1fbeb50a2c04965113622a42e919bbbe17e20a4e9a34ab9f25eaa21393686b85692544907e5ed0211f555be05701c31ebbb26a1b08894382e5ef8daf40ef1b1fb3ac5515b9b6a483b2ac6054463f09efea01e191d96def9e8a1863c2768fc106ffe7cf789d3e6ca669f909b8787964fee03e4b9e06e6fbc090b57333114a32ea518d24cf6648282629bd797b9a1b956640cf6d515b6ceb47caf54adfa5f6c7ba92654b47634366984df2154cb2296ed2de8f83d49f1a80ebb4afb829281d3864fdafed7b66a344280805da27f3abf7427dd131c063f81b18a199fdd958f04528f37e4fa6066391300f01e9fc4e13d4b6ebe3f273ed2576132c019ee4e285dbd33839fde1eff22c2225199da9598e6bab5cf91bb1684e5df27f3a8de837dbc6d817945b0fed669eba7b38fc7d548bb226ec77bc0a1d9880e8df5db22ee234bf675921e4593646809cf9b35cb1fc79db1100717a6a2e8f6407e2c9fbf3bfec6dc8b3030ac737da009cee50ce1cb584087fdcf8856715792ce8a697299838d8e5e41bd21221b2947402edd1aa32e5e803dd653139b73a2d65305df0cb40604c08b04c73c7430d3c78344192cea7806bfc6e1268534bfd14cbcc958665742574feb949dc6f63f03c2ee071c7e3729a7866d3d55d8bee6b7320e61efc528d5ab14421731e1f29d8583f98144736eb961814aef9e5adf625f800bc7d3b858856b0e2dbc62cd613ff118a057b72576d97485ebc9bfd818e1ddaba2f3422855236ff2cb30f5263e30498945c530e79e2f29c9cc9990e6f753d6bdb07dc4aaa70d178cb401fa4bc07a0cb548785751a7b88e16467608de88d15afe111452a7852a84339fbcfb57ca66fc5e0786a0c0be40c7baa84abbd52a4fbe37a268790636284200971a4218804c6e59a4b3e01778099fcf7a09785ee1babf5165af27a80eb210107b689ba46f26ddfb018dcbd45117f693cf3b22e04a0b1fdda034da55444374271fc56e1e0f18969ba35c69e3edded8972dff8947b754aecfcbf95e5fbf4bccd62b860fa2cf13793994aa49777eda9f01784f0e1707b95c4a00a8d5e27dbe15dd2a713442d113a8b914daf928738b2c583c06a4901752d80fd3fb4339c808bd0ad5c6b8979e8326102c3340f4979fe2d41a9844013c6dc1fb135f651e7d1d238c48f48e9b576d9ce9bea09c546f983a62eb6231218aa2c16de80882359fc0164b59ca15e6fd87f41d1072ae3d4d2e014ee95f4ea67e4f5cdb75fb2f7f443bfd353c21906cd3f0b9a9df65f830eb8ee3747f6e9612ba59c46ce79a9f13059b4596450c17cde25622b92100d4e2b7d64fd12082804257582d2e692e1d7b104fdec32f0f7bcf53c7bb199c8531cc10ac83fc14ef4db49f56ab55261ccef3777b6d36e8db20ab52d09beeee9904018e1ddc0aac7e99ab1671e9dc3f73a6fd7d73ab2a064f7b8247db80ef8e29c5b05a747ddcce50f678f2a25065826d41506adacb17fcc9dd9adf1b25c616f0798a537f8f1a383b9f678e45b534821bf879da42a424eb5c7a46aec1f1cb7c57d2c3c7deae7e6be75f5e0db6ed98a18268e4e9da96581f5e2f92518bcb71c5af3e091f1455f20509a23ed8cb23a700629af360ad10dc7fee858ce6b7d892a0b6e2bd9e7df5c9dedd1897c0aaae6a1794009f3e030b978679aa568cc71f0ce53efc36cb93b18c1c4deaa09f4d4433dd73a86a0d4c19ef8e2bea5ab943a634a519fedbcbd7fa871ddae4a61f11ff6d72159b77e462bd2b0666f7ce010db04019163446fd174ad730613a12561222019e163112b3ae2e5773482308c1e46cfb5a0b48080574177a65393fc58d57a93114687f19f3ce9b9da22c6f0581994e03b1fc513f3f4361f907760184ff7ddae1bf655028c62045aa9047de6e8b077f59decb83774479442c63f96382000b0bf264523a4081edbbd8efa03a2071a66ff273aaaaec601632c26ec3ee36f5299b9f7d18e90611cc1f2bc8cd9130b20eeb5fda5167229343713b64c3ffc1eab8b2ebf205c55fdac1fa4ece5d786ff56d846d1ab3f870277865f6f9b79b35095e35071577749bf6d1df0b563234d828936a64a67bb0f5881e9b033edcc258aa161f2c3fc4894307b90d36a8be47b896d8bbcec36a4686f6d7d72c89ac89b227d57a97eaa82939e242bd8fe3582f2c6878db430262f8f8f9037f4ed9f38a7a60ef02d62977765857e4374679d108838d487145c656249fc687bab08cefe10e6c2cee741080efd8ba9c7a5ad4382164558b6cc97ac366de36923af22939e2e4d074d3becd85c900faef934a7bef7bbb5d80ea9a2c3a0294c50fca7a29e6193cc2c20bf26fb4fb15b73b2e2f9c3c6ecd522affa29fe6934c7590e6575768352f8667336d6bd2cb316547686c87ef0a9e83ec743f33c4c99d2e893066361dbb7616e30635ef73a8d24acdd085452959ecb0c4cffaa6538083a04cd3d41508611da35c3a6ad7317f119298eb1ae1c459b90072b8bfe3128217c10d82ec13c14618634532d362d3f98499f26f5d963403167936e25fd6e6eef4cd93cec9ddddf8be69bcbca8c6badd063502e30d6ab45e33ce0713a7e028534230426b55115e7717a57ca5e35b61ce18f273b2c12784bde20c1c7cf78a44c7eceff573babc0e4a7776879d0adfbbd62a7c54f9ae3a4c42b4c94d603dba158dde751259f883aba5091306b20ef2ab53f653609d6ca698ebaac610d5cdeec0f42a59192435959db15e3b2d0caf17e01f597ccb4b86af25c6b02705c10238ff4a0fbaa963cc65fb611a998fdee8817e154b8ada522016603e2d1c86d579d08a5018e87d903f4933505f165c543d039f59925fcf78aca1a639131c8eac14cc3e64125513d44fded1864461c35eaab5b8626ce9bb4c41498c213b75f7a25d876b4420fcfff9691521790c64be4e07c74b72e5c69caf24fc12b62151c421532487a05514d01621da3d1cf849dd33437c696b5b0b4d89140369171de0513b694da1e8b4e0d9903c7da146d5c776b457afb38eba2fad756702eb3aa2f041da9f7dd8a4cf2dfba3c3a1b4c6a3a3cc1399b5307dd5b2bc58c3d98c3f2251845c8855173b1a8e1e212a4c879757c7b484e65ede99aec6c363f86db70216d9a7f687728ebe45fba7bd74b0921aa724fab48e97f1f034ff4df3efabe1a6ce9b841a0b228402ea4b45548c163f9d00ff2889453edb90174416ad2c6ba7f0a27a05fee42396dbdf333626d004d6d5cf8a5ffc17e7877fd959cd805c3ee9700a20e5f2927f8f5580e62a21825f0502482e7c2d81d1203d9efedd853e827f0e39c124a8e45b47df2332aa70b42d5d20697d8c3ef894a3a942fe0feaf7e633f62d7af29d16560e812c588e29acd549718a632324ae3d473682a75027367070b7b01ca9d68b3e8ea84c4dee6743450b99946fbcfa915a4adee9d200f90e87fff884bac77403b20872ae281e017a2250a3d4aef767b7ea23203d8e30ef48af0a79936444bc1f3b16bb89a44a7e2006b83e889e76a2c63348a93aaae555f7c10346d3e495387e9425d075474946878b50fab9d55d930ca6768a664ae8a1fb1501da6311c4f6781622f5f920785c42ca2cf63bdf86b516d432f058aa7ebcc605db96fcc54b62350721972a82bd89e6579ff4098a0fce840084dad06b485a47e28d321edef3f60e1c3139261c8f0cce61e2de24862561bc83a4ea2ee2ab47126a66704ce829910b3708b5fe56c25fc9d96c7857e0c9ad52dec86b7ae7a4cf73290684f7721570bc0981783372a0b94c57e98d1c7e5aa19dc6b1647ee8fd1363660b2ceb6891001f290a9ff3b9e822d34ba4f84261fe0af07d1d537dfbb13214d3496e9425ea60b569d2d811072e7d6ce9e5d0311a189c5bd2b9d0db2719b1810b316b3eda7916109ee817c7264eb8f7ac87b6eaa0082eedbf120b8331a01d2003ca734c3e21d5f823e19118746c12fe72ac59a217a6bb4546afd1bccc9460ba09cc43dfd3c60e27959278fbf067f37d681072bbf789d9fa3707669678869d35d7fe5e9f8da40ae118037f2615bfc460778f8e2147684924d9bc488d4cb9ab78665295582a851985536f841d65197b4bf93025fa9ce4317892b6e20fbbe72e8eb34976993de36c1ce22449519519271e783b5ea3639fa751dc4710670107df4bbb66235e41174efce5a5d4971969a130b08664aa77a789a4b2c24d9df3a4e0090731c2634", 0x1000, 0x10}, {0x2, 0x0, &(0x7f0000002d80)='](@{&,:-::\x00', &(0x7f0000002dc0)="81f5d40f7a51c61b2240bd0e631c023a1431a4f70b79f1233a5d9c01b441f1f4963a4b1f8fc4fbde6d3b5f66bf23976074ab477624854e246869c31703ecd23e1465fb470aee4675120087e10078cbddfcf0e2886c2b833fd10b0a167a269ba1ec7bae96241f2aff64dd05f57cfa578f598fc75a56c9e74deef9bfdb843b83e8c21df7117802ceb45ff1948aa39e164cd45cd762eb75300a90c776ca1b", 0x9d, 0x2}, {0x1, 0x2, &(0x7f0000002e80)='cgroup.threads\x00', &(0x7f0000002ec0)="e998aa983b2d3c2a1cfd4c742608c1b9730c", 0x12}, {0x3, 0xffff, &(0x7f0000002f00)='-\x00', &(0x7f0000002f40)="3396a793160cb88871df34c35e73806922f74c3d8202a7abce76abe14379", 0x1e, 0x32}, {0x3, 0x4, &(0x7f0000002f80)='PPPPPP', &(0x7f0000002fc0)="8fe49bfbbd4d357ed98df4bc4fca45b43a2e365164db6c09ea7d93d59d6833f98a03cdd608fb8cbcfa8cd772f5b5ca73b199805e372aa4dfc4c2799947f700db7801b8abe5dfcef1", 0x48, 0x2}, {0x1, 0x2, &(0x7f0000003040)='PPPPPP', &(0x7f0000003080)="70f298c620d5652f641e94c724add072180314fb8968f9f47919a4c14651ff9404000c069fb6a8ba5748d46d0a4a3fd8f6", 0x31, 0x20}]}) (rerun: 64) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000003240)=r11, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000003280)={0x3, 'nr0\x00', {0x40}, 0xe26}) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003300), r11) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f00000036c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003680)={&(0x7f0000003340)={0x308, r12, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5f, 0x4, "bd132dab6426ca1031f854267d3f872c644a2b4ae305dc6184a7a6e1a13a65ba6fefcbf58647e9862f465cd02b8eb81de02cfeb459158994bb88b50e3f9404f2bf1684c5fd9822c429c3f931418a217f451dad3cf29d579daee0ca"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x80, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7a, 0x4, "04d5530fee6341ff686019d446d8e1957ccbea029098302783cb143f155555521d9dae1e22f57b21a8bd9c1ef665fd63715448852d3172ba93238b094ba8af06ada64696bb04ec40578a8716f5a4e3b7f790435d258f500e965fcc1d41e05b0f10c3765fdaba185ab0c8a4e0973421cf8566ce1d2a64"}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x138, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb5, 0x4, "61761ec97d092f0cf5f9c18fe620db4c8e4fa690d957783f0cfb101f4ccf45ed899380e2a7753d8f578c13588d6f908dd045f3da8fc240f4955d53f154718f6f77336078dc855bb12698b98573f405e1d95583bf6a92f4c68817692b5c616ffa012381f6630c7db4ce28047901a711d42251e34d28b0c9d081b760c873307170a29e84ddcb80113b85cdd6e0e962073728d5effc37741eeb5c95904f5a4739dabec1b21ba830ae90af7d06e419d1d9158a"}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '))\\(+[}]&}\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@]}[#\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x35e5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffbff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a77acbb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd11b}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4001}, 0x80000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000003700)={r5}) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000003740)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x6}, &(0x7f0000003800)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000003840)={r14, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x9caf, 0x718f}, 0x90) (async) r15 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r16 = accept$netrom(r11, &(0x7f0000004cc0)={{0x3, @rose}, [@netrom, @null, @rose, @remote, @rose, @netrom, @rose, @default]}, &(0x7f0000004d40)=0x48) r17 = accept$netrom(r11, &(0x7f0000004d80)={{0x3, @netrom}, [@null, @null, @null, @netrom, @bcast, @bcast, @null]}, &(0x7f0000004e00)=0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000004e40)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000004f40)=0xe8) (async) r19 = getgid() sendmmsg$unix(r11, &(0x7f0000006e80)=[{{&(0x7f0000003900)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004c40)=[{&(0x7f0000003980)="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", 0x1000}, {&(0x7f0000004980)="c31b38706505e14353b3a1e63c22479fc379f429f240dd68e600ae9b4162f33736e02672f230e56783a890e4c2f5be5b2f3aa9b6dab1e075b503b6fbf726be106d9fcabbe240d1c4dc32b987c0516a09f6ec941dab54a3074f7926", 0x5b}, {&(0x7f0000004a00)="8c0c7b1e575982252836e1dc5739355bc90da774c1dd6d4ed399e0c93371624ef719c3e77ece3a6c3cbfe1e61c80a7909eb51d0d627c5e9c38e9010ce5f66a2657cb8488f02b26f52e9103215ab66b28baf7573b4bc5e3075277aebb1de143bb91c617007b2b2f6a87a7b8afed56e37d8073b11fdb7048a3d0fb31e4956a687ba8be813e10077df25032cde17529d7c08238898075088bc61df2d4cd1e78037d7f1dc718968bc349565a484f4e", 0xad}, {&(0x7f0000004ac0)="0f07d7c4ca6281c3127195a55e7dc91b246ffe24560d61547f37db05055a899ce898cd5285cb3c98faf1ee7ea30b773cb900bb5ee459ecd2a29ee5704c1c1408e0faa4246fdc9aab57fd49e4003dee540205f5cc21db19b1d894798ba0be2aa5552abffb4a2e22b7ed38135c4bd6", 0x6e}, {&(0x7f0000004b40)="1927b3ad10916e628a", 0x9}, {&(0x7f0000004b80)="005bc9556de8a768bf47b9e7a22feaab0548219211fe1b", 0x17}, {&(0x7f0000004bc0)="221ffcbca1e5733bfab4fcf94752a3ceff8d113a62b724f2f0b37d8630ddf329aa32ac3c1c1bf4b9b167cbd1a2cf72d4801f6b44fa767c3938b2a361ea54953fb48222aefa018d974ee2e80c9280bcf7e11cf0829d012dd10ef39c", 0x5b}], 0x7, &(0x7f0000005140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, r16]}}, @rights={{0x34, 0x1, 0x1, [r3, r8, r8, r8, r5, r3, r8, r17, r13]}}, @cred={{0x1c, 0x1, 0x2, {r9, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x28, 0x1, 0x1, [r10, r11, r8, r3, r6, r15]}}, @rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13, r10]}}, @rights={{0x30, 0x1, 0x1, [r10, r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r11, r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r11]}}], 0x128, 0x40}}, {{&(0x7f0000005280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006800)=[{&(0x7f0000005300)="01475d090a8b7cb5b7be29562c7e7b989d2f61f4b2d2f918c384b8b8c48e196925424ed4cde201b669876e32d38fdc8501b89c61c81dfbda9ac2b9b7f7fd2ac173b0c4975a18191a68df4e2ab9a142377bb63d9e2a391985907e9d0caf59c964fb7245fb59e613daec21fb4993cd3a37129fe73f9e73b5457dae9e267afeaaa37cbe173f088d54d7428bcdb05684f7ee6610ff18e959eace94409a2947199b9e00b7be7cac2a5c7a517178e603c7b273128597b41f370c4b338c480b2727cb21f8c3784e02fdad99a4dd", 0xca}, {&(0x7f0000005400)="10ed0d4632f9abc129f679271b129ebc14b69e9c9702205b2b6634660fd2408989585c69bd776929", 0x28}, {&(0x7f0000005440)="848fc1febfe93d57e027f46d9707634f976882ddaf253e1eb780035b64fbd38afff9bb", 0x23}, {&(0x7f0000005480)="ed0915e0e12c1e65226b22a295f8b816ee9486321a3ca47ea667699bfe0cb70223cdf1b5a7b6c8391ab8814de82cd70ada7e2ec93dcae231dcae988c6090893649b8e7079d3ff4748ac9bd29d6e82ba302d27a1e9bc511bab95b959cd3dd2b17415b85917ff8a9f751801d18b419b23a45895a207bb78a88d9065cbb82e35e202e5af1c5f162af67ba98c93aad3840797064d696ceabb8140b9c90ea65666b54d61a", 0xa2}, {&(0x7f0000005540)}, {&(0x7f0000005580)="0d04a29b287600ecc04d", 0xa}, {&(0x7f00000055c0)="2ef8e08d5f447a36c4b817959cc690b78873596121d08381226843ef6776b5a0179f42a8f5315d67e907315f7fbd2a17308a7f07ef7676f753a2b9ffdfb2519de635c26ee212231fb1267c5ea58a5509d981739b2c2ab99e4290452f5ef25c7800dff0813124e5684967a3145458c4d204298fc2a52a3eec7367dd162afa571d93c977fcba44288d20da5ad4dbc58cd247565fe6946cc1e38d0e05cfe7e749fb4f12ee8c4d4d75e19a76440c2814c8f369a7127023e204cfa76d079d431422f24816a4d1ec42d7cfac16dcfbb8", 0xcd}, {&(0x7f00000056c0)="d6cfa4a242e6aae53b84a158a9112f631b9bc8ed4a1667465d920ade6bd71b912791cbeff7be8b34f933a68be8baeeaaa8b05c4f8ab241c1a375ab8f3d0be9b6d5bb4db8d0ea122a8c48b006fbadc5a9a1e15e28f6626aacc83b03e2f01e34324c42fbbdfa67a9446bb0b9a5720554de376796ca3a7bbe811f7b6ddaf7a22a9f9fe3e35c12bfddcf47c11389a5d88401ca0278ecc2483d575a5747e4ccf6f57cd42b4525e841f725f2d3c0ff7e12cf2efbeba9b34734eb", 0xb7}, {&(0x7f0000005780)="a434f752eec5b49a2cc69423c6063c4618788b5bc9e737432aeae68e282f4e2ffc0ee4c7c8751ab43459afefe26d99b165d9935a2e0497e74d7adabee11086aa91d58ef9bcd8bb81305d53392b03a7b6f05b2a8178ea9a07ac533bcf", 0x5c}, {&(0x7f0000005800)="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", 0x1000}], 0xa, &(0x7f0000006940)=[@rights={{0x20, 0x1, 0x1, [r10, r4, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0x40, 0x400c804}}, {{&(0x7f0000006980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006b00)=[{&(0x7f0000006a00)="ff4c5bcb9495548ead6c60ec6c076c34af0506a840698d379d4aa0bdd3b699a2c62261f3282f76c87e42d6d93d94bc95dc6d48a140230acc9fec1d30a1022ca375ebfa8f1d621a38fa11cce880de9a718d24db8c98c3eae3ed4b625c6202f61a69e38fb45a41ad5fc05170769d65e5fc3472b4008f5ffe4ad17b6d65ca422f0742e9b967cdfcc58a42b0cb91bd12437ec04f224733f3b804ed5de84abe67a4518400a60c1cf46e1f557a64719499c4135a2586aaf979b1ff72dda2c3d61a80a0da47e1a23c3c8abac64a73c88f504a69a0d02d701a9ffd102018c1b567f4f198c8abb1c98d3a38852cd7a45e", 0xec}], 0x1, &(0x7f0000006dc0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x30, 0x1, 0x1, [r11, r3, r3, r3, r3, r11, r8, r4]}}, @rights={{0x20, 0x1, 0x1, [r13, r11, r10, r5]}}], 0x90, 0x85}}], 0x3, 0x4000000) 624.121784ms ago: executing program 3 (id=2761): r0 = socket(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7}) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d000000000000000800", 0x1e) 308.792816ms ago: executing program 4 (id=2762): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/681], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x4, @val=@tcx}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000c80)=@dellinkprop={0xb8, 0x6d, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x200, 0x40091}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x800}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5580b}, @IFLA_MAP={0x24, 0xe, {0xf4, 0x80000000000e, 0x1fe, 0xb230, 0x2, 0x6}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x2}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x840) getsockname$packet(r6, 0x0, &(0x7f0000000040)) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000308000000000000000045ad00140068000060049009001e0001ffffffff"], 0x22) write$tun(r8, &(0x7f0000000240)=ANY=[], 0xfdef) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x81, 0x5, {{0x1c, 0x4, 0x2, 0x7, 0x70, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @broadcast, {[@lsrr={0x83, 0xb, 0x2e, [@remote, @dev={0xac, 0x14, 0x14, 0x2e}]}, @noop, @timestamp={0x44, 0x1c, 0x8d, 0x0, 0x6, [0x9, 0xfffffff9, 0x9, 0x0, 0x5, 0x6]}, @timestamp_prespec={0x44, 0x14, 0x6e, 0x3, 0x6, [{@remote, 0xfffffffd}, {@empty, 0x3}]}, @rr={0x7, 0xf, 0x5b, [@dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0xf, 0x9a, [@local, @broadcast, @broadcast]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@getqdisc={0x0, 0x26, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x6, 0x6}, {0x12, 0xc}, {0xf, 0x9}}, [{}]}, 0x240}}, 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 279.277276ms ago: executing program 2 (id=2763): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) socket(0x28, 0x5, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_macvtap\x00', 0xffffffe9) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = socket$inet6(0xa, 0x805, 0x0) recvmsg(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001080)=""/7, 0x7}], 0x1, &(0x7f0000001140)=""/230, 0xe6}, 0x40000040) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 195.178436ms ago: executing program 0 (id=2764): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) unshare(0x4020400) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c008d1d398be9e2ee9ceaae07b05349f259f6b0f5b8cefbc479d2a06cca472d89a7dd46760eb1d2b16d795d0d1eff8e8eb5501e71939f9cc5ee2d89bb8736dea3511c83d2f821bd18bbd95906f22a261b75a4ecc76bfad0308726fd63bb30414244364cd61af021d01fb7eb2d2dd7b005c6b6ad1005cd6df2650050ee91", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000800178004000500700df2915fe0e10e600e0b6f3f1209544eb626199937d9d8ddc1ea6ae3d5488795b61f8f36415e41f631d741af501561bbd27b14443f382f4c518a4adb6a669ca79521a1e60c4058250d716c9866626d9c82c4af89e88d4b996fc0d024be46e1a3f1d7c28b2066a8ff49e2af5073cd20a381c6d6870308273a9770f74621da02317f079bd2bf629de6a4115c4216da0906a86ab8e8f860cb5428a156f6b978594c90a8a19be9f802"], 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x4, [@ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x2}]}, @struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x2, [{0xe, 0x4, 0xffff8001}, {0xd, 0x1, 0x6}]}, @struct={0xe, 0x6, 0x0, 0x4, 0x1, 0x0, [{0x8, 0x4, 0x361c}, {0x8, 0x5, 0x8}, {0x5}, {0x9, 0x3, 0x1}, {0x0, 0x5}, {0x0, 0x5, 0xc383}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x5}}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000880)=""/219, 0xd8, 0xdb, 0x1, 0x0, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xae8f, 0x4, 0x7, 0x40, r5, 0x0, '\x00', 0x0, r6, 0x2, 0x5, 0x2, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000006e93000000000000b50302000000000085000000b7000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x80000b, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x5, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x253, 0x81, 0xb, 0x5, 0x3, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffa, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x1, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async, rerun: 32) r7 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000714010000000000000000000500600004"], 0x18}}, 0x0) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x336, 0x0, 0x0, 0xc9e}, 0x600) 157.936786ms ago: executing program 3 (id=2765): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000001073113a000000000085100000020000850000004b000cf63bf2c0592a74b0e10fee000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7d}, 0x70) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) getpeername(r0, &(0x7f0000000140)=@can, &(0x7f00000001c0)=0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) bind$rxrpc(r3, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x5f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x24) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r5, 0xba87317d461c07c9, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 58.335538ms ago: executing program 0 (id=2766): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x0, @rand_addr=0x64010100, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x76}, {@remote, 0x4e22, 0x3, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) (async) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0xa74}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}, {0x0}], 0x6}, 0x800) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000700)="26d4bc2028b12f5598a0b3ad4aeb4c06002cf1b87c80b0030214d24a6f2b8025b24db8edb7b87143d7b5f7f2fdf5c0d5d318886667d9edb4785cb45f95cf796c39f4399d71e8fa09587b26dbefdcd86136e81f9ce06aa8d04298f358c0fdacb337f970617aec4ea5938d7f6dbc4a0dc1b6dbf9dce42a921e6794a1a663b8c862e48ade0c738bbd84835baf180000000000") (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a700"/28], 0x48) (async) socket$kcm(0xa, 0x3, 0x87) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES8=r6, @ANYRES16=r7, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00O\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) 0s ago: executing program 1 (id=2767): preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x93}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func_proto, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x28) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000200)) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x767bd2c3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010025000000851000000100000095000000000000001840000002000000ff01000000000000950000000000000085000000270000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) kernel console output (not intermixed with test programs): d [ 240.578335][ T9588] smc: adding ib device syz2 with port count 1 [ 240.584990][ T9588] smc: ib device syz2 port 1 has no pnetid [ 240.824713][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.842807][ T5890] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.849302][ T9588] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.956405][ T9623] FAULT_INJECTION: forcing a failure. [ 240.956405][ T9623] name failslab, interval 1, probability 0, space 0, times 0 [ 240.994119][ T9623] CPU: 0 UID: 0 PID: 9623 Comm: syz.1.964 Not tainted syzkaller #0 PREEMPT(full) [ 240.994148][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.994167][ T9623] Call Trace: [ 240.994175][ T9623] [ 240.994184][ T9623] dump_stack_lvl+0xe8/0x150 [ 240.994217][ T9623] should_fail_ex+0x412/0x560 [ 240.994251][ T9623] should_failslab+0xa8/0x100 [ 240.994283][ T9623] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 240.994311][ T9623] ? __alloc_skb+0x1d0/0x7d0 [ 240.994331][ T9623] ? __local_bh_enable_ip+0xd0/0x130 [ 240.994360][ T9623] __alloc_skb+0x1d0/0x7d0 [ 240.994388][ T9623] netlink_dump+0x1ef/0xe80 [ 240.994415][ T9623] ? __netlink_lookup+0xc6/0x8b0 [ 240.994440][ T9623] ? __pfx_netlink_dump+0x10/0x10 [ 240.994457][ T9623] ? __netlink_lookup+0x7e4/0x8b0 [ 240.994496][ T9623] ? netlink_lookup+0x30/0x200 [ 240.994514][ T9623] ? netlink_lookup+0x30/0x200 [ 240.994530][ T9623] ? netlink_lookup+0x30/0x200 [ 240.994555][ T9623] __netlink_dump_start+0x5cb/0x7e0 [ 240.994584][ T9623] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 240.994608][ T9623] ? __pfx_neigh_dump_info+0x10/0x10 [ 240.994633][ T9623] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 240.994654][ T9623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.994673][ T9623] ? ref_tracker_free+0x693/0x840 [ 240.994702][ T9623] ? __pfx_neigh_dump_info+0x10/0x10 [ 240.994744][ T9623] netlink_rcv_skb+0x232/0x4b0 [ 240.994765][ T9623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.994789][ T9623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.994823][ T9623] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.994863][ T9623] netlink_unicast+0x80f/0x9b0 [ 240.994901][ T9623] ? __pfx_netlink_unicast+0x10/0x10 [ 240.994932][ T9623] ? netlink_sendmsg+0x650/0xb40 [ 240.994961][ T9623] ? skb_put+0x11b/0x210 [ 240.994997][ T9623] netlink_sendmsg+0x813/0xb40 [ 240.995024][ T9623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.995045][ T9623] ? aa_sock_msg_perm+0xf1/0x1b0 [ 240.995071][ T9623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.995097][ T9623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.995114][ T9623] ____sys_sendmsg+0xa68/0xad0 [ 240.995136][ T9623] ? __might_fault+0xaf/0x130 [ 240.995168][ T9623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.995198][ T9623] ? import_iovec+0x73/0xa0 [ 240.995220][ T9623] ___sys_sendmsg+0x2a5/0x360 [ 240.995240][ T9623] ? __lock_acquire+0x6b5/0x2cf0 [ 240.995262][ T9623] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.995318][ T9623] ? __fget_files+0x2a/0x420 [ 240.995334][ T9623] ? __fget_files+0x3a0/0x420 [ 240.995361][ T9623] __x64_sys_sendmsg+0x1bd/0x2a0 [ 240.995386][ T9623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.995418][ T9623] ? __pfx_ksys_write+0x10/0x10 [ 240.995450][ T9623] do_syscall_64+0x14d/0xf80 [ 240.995473][ T9623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.995495][ T9623] ? trace_irq_disable+0x37/0x100 [ 240.995515][ T9623] ? clear_bhb_loop+0x40/0x90 [ 240.995536][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.995553][ T9623] RIP: 0033:0x7fa2ad79c629 [ 240.995569][ T9623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.995584][ T9623] RSP: 002b:00007fa2ae5a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.995603][ T9623] RAX: ffffffffffffffda RBX: 00007fa2ada15fa0 RCX: 00007fa2ad79c629 [ 240.995615][ T9623] RDX: 000000002000c000 RSI: 00002000000009c0 RDI: 0000000000000005 [ 240.995627][ T9623] RBP: 00007fa2ae5a8090 R08: 0000000000000000 R09: 0000000000000000 [ 240.995638][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.995648][ T9623] R13: 00007fa2ada16038 R14: 00007fa2ada15fa0 R15: 00007ffd7a368a68 [ 240.995677][ T9623] [ 241.516214][ T9588] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.876501][ T9642] syzkaller0: entered promiscuous mode [ 242.013459][ T9588] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.495025][ T9588] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.676641][ T5832] block nbd2: Receive control failed (result -32) [ 242.778977][ T9588] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.998450][ T9588] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.231122][ T9588] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.784458][ T9674] lo speed is unknown, defaulting to 1000 [ 244.160581][ T9659] lo speed is unknown, defaulting to 1000 [ 244.292085][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 244.429428][ T9690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.506405][ T9643] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 244.588870][ T9699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 245.329940][ T9731] syzkaller0: entered promiscuous mode [ 245.385999][ T9731] syzkaller0: entered allmulticast mode [ 245.838740][ T9749] netlink: 'syz.2.995': attribute type 8 has an invalid length. [ 245.848085][ T9750] netlink: 'syz.2.995': attribute type 8 has an invalid length. [ 245.913346][ T9750] netlink: 'syz.2.995': attribute type 2 has an invalid length. [ 245.921261][ T9750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.995'. [ 248.838255][ T9749] vlan2: entered promiscuous mode [ 248.843651][ T9749] geneve1: entered promiscuous mode [ 248.849073][ T9749] vlan2: entered allmulticast mode [ 248.855722][ T9749] geneve1: entered allmulticast mode [ 248.862763][ T9709] lo speed is unknown, defaulting to 1000 [ 248.981973][ T9756] team0: Caught tx_queue_len zero misconfig [ 249.006523][ T9756] syzkaller1: entered promiscuous mode [ 249.015187][ T9756] syzkaller1: entered allmulticast mode [ 249.266947][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 249.397229][ T9709] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.684876][ T9775] syzkaller1: entered promiscuous mode [ 249.690408][ T9775] syzkaller1: entered allmulticast mode [ 250.036069][ T9781] x_tables: duplicate underflow at hook 2 [ 250.457262][ T9798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1011'. [ 250.770952][ T9804] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig [ 251.124366][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 251.158963][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 251.216317][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 251.296364][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 251.452851][ T9838] veth0_to_team: Caught tx_queue_len zero misconfig [ 251.824498][ T9854] netlink: 'syz.3.1023': attribute type 2 has an invalid length. [ 251.833446][ T9854] netlink: 1696 bytes leftover after parsing attributes in process `syz.3.1023'. [ 252.548120][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'. [ 252.586619][ T9874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1029'. [ 252.653744][ T9879] netlink: 'syz.1.1030': attribute type 21 has an invalid length. [ 252.685058][ T9879] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.685282][ T9882] netlink: 'syz.3.1031': attribute type 2 has an invalid length. [ 252.754860][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 252.855956][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 253.332985][ T9908] netem: invalid attributes len -1 [ 253.344181][ T9908] netem: change failed [ 253.916807][ T9922] gretap1: entered promiscuous mode [ 253.949148][ T9899] lo speed is unknown, defaulting to 1000 [ 254.365771][ T9945] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 254.375378][ T9899] ip6_vti0 speed is unknown, defaulting to 1000 [ 254.502293][ T29] audit: type=1800 audit(1771370111.585:2): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1051" name="memory.events" dev="tmpfs" ino=1330 res=0 errno=0 [ 255.173359][ T9966] tipc: Enabled bearer , priority 0 [ 255.188758][ T9971] syzkaller0: entered promiscuous mode [ 255.222993][ T9971] syzkaller0: entered allmulticast mode [ 255.333564][ T9983] syzkaller0: entered promiscuous mode [ 255.339272][ T9983] syzkaller0: entered allmulticast mode [ 257.820745][ T9964] tipc: Resetting bearer [ 257.838874][ T9964] tipc: Disabling bearer [ 257.865394][ T5954] tipc: Node number set to 3778518176 [ 257.872003][T10000] __nla_validate_parse: 4 callbacks suppressed [ 257.872021][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 258.161648][T10016] syzkaller0: entered promiscuous mode [ 258.176185][T10022] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1070'. [ 258.206202][T10016] syzkaller0: entered allmulticast mode [ 258.887815][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 259.340263][T10056] netlink: 'syz.2.1077': attribute type 28 has an invalid length. [ 259.359989][T10056] netlink: 'syz.2.1077': attribute type 3 has an invalid length. [ 259.395959][T10056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1077'. [ 259.535735][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 259.553677][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 259.694769][T10059] lo speed is unknown, defaulting to 1000 [ 259.904272][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 259.960001][T10059] ip6_vti0 speed is unknown, defaulting to 1000 [ 260.125455][T10076] lo speed is unknown, defaulting to 1000 [ 260.386240][T10076] ip6_vti0 speed is unknown, defaulting to 1000 [ 261.409951][T10031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.429184][T10069] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 261.917078][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1089'. [ 261.942330][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1089'. [ 262.039795][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1091'. [ 262.239345][T10119] netlink: zone id is out of range [ 262.244883][T10119] netlink: zone id is out of range [ 262.250159][T10119] netlink: zone id is out of range [ 262.270102][T10119] netlink: zone id is out of range [ 262.289451][T10119] netlink: zone id is out of range [ 262.305140][T10119] netlink: zone id is out of range [ 262.318423][T10119] netlink: zone id is out of range [ 262.348750][T10119] netlink: zone id is out of range [ 262.370267][T10119] netlink: zone id is out of range [ 262.399286][T10119] netlink: zone id is out of range [ 262.479434][T10130] sit2: entered promiscuous mode [ 262.606530][T10135] xfrm1: entered allmulticast mode [ 262.835933][T10142] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 262.856207][T10142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.886263][T10142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.919847][T10142] hsr0: entered promiscuous mode [ 262.929721][T10142] bridge0: port 3(hsr0) entered blocking state [ 262.936674][T10142] bridge0: port 3(hsr0) entered disabled state [ 262.943612][T10142] hsr0: entered allmulticast mode [ 262.948852][T10142] hsr_slave_0: entered allmulticast mode [ 262.956257][T10142] hsr_slave_1: entered allmulticast mode [ 263.077916][T10160] __nla_validate_parse: 6 callbacks suppressed [ 263.077933][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 263.241279][T10160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.250610][T10163] tipc: Enabling of bearer rejected, failed to enable media [ 263.282406][T10160] bond2: option ad_select: unable to set because the bond device is up [ 263.703670][T10184] x_tables: duplicate underflow at hook 3 [ 264.105003][T10206] netlink: 'syz.3.1121': attribute type 9 has an invalid length. [ 264.121483][T10197] nftables ruleset with unbound set [ 264.146408][T10206] netlink: 'syz.3.1121': attribute type 6 has an invalid length. [ 264.192317][T10206] netlink: 'syz.3.1121': attribute type 7 has an invalid length. [ 264.217451][T10206] netlink: 'syz.3.1121': attribute type 8 has an invalid length. [ 264.526953][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 264.544785][T10227] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1126'. [ 264.562376][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 264.571879][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 264.969170][T10262] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1130'. [ 265.353680][T10277] xt_hashlimit: size too large, truncated to 1048576 [ 265.498972][T10276] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 265.959983][T10302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1140'. [ 266.074994][T10305] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.110151][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'. [ 266.217207][T10305] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.267975][T10314] tipc: Enabling of bearer rejected, failed to enable media [ 266.320041][T10314] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 266.346425][T10305] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.430142][T10318] bond3 (unregistering): Released all slaves [ 266.482151][T10305] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.494492][T10314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'. [ 266.557033][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1144'. [ 266.566534][T10295] lo speed is unknown, defaulting to 1000 [ 266.577708][T10317] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 266.729023][T10310] netlink: 'syz.1.1143': attribute type 16 has an invalid length. [ 266.759103][T10310] netlink: 'syz.1.1143': attribute type 17 has an invalid length. [ 266.780572][ T3475] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.801255][ T3475] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.864788][ T3475] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.935252][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.063173][T10331] netlink: 'syz.3.1148': attribute type 9 has an invalid length. [ 267.111725][T10331] netlink: 'syz.3.1148': attribute type 6 has an invalid length. [ 267.153620][T10331] netlink: 'syz.3.1148': attribute type 7 has an invalid length. [ 267.191914][T10331] netlink: 'syz.3.1148': attribute type 8 has an invalid length. [ 267.211252][T10335] syzkaller0: entered promiscuous mode [ 267.217744][T10335] syzkaller0: entered allmulticast mode [ 267.272582][T10295] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.947085][ T1737] block nbd1: Possible stuck request ffff888026358000: control (read@0,4096B). Runtime 120 seconds [ 268.958181][ T5342] block nbd0: Possible stuck request ffff888026318000: control (read@0,1024B). Runtime 150 seconds [ 268.969034][ T5342] block nbd0: Possible stuck request ffff888026318200: control (read@1024,1024B). Runtime 150 seconds [ 268.980126][ T5342] block nbd0: Possible stuck request ffff888026318400: control (read@2048,1024B). Runtime 150 seconds [ 268.991161][ T5342] block nbd0: Possible stuck request ffff888026318600: control (read@3072,1024B). Runtime 150 seconds [ 269.111152][T10395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.127638][T10395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54155 - 0 [ 269.301014][T10395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.311934][T10395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54155 - 0 [ 269.470013][T10395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.480798][T10395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54155 - 0 [ 269.550401][T10376] lo speed is unknown, defaulting to 1000 [ 269.608620][T10395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.645418][T10395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54155 - 0 [ 269.887917][ T3475] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 54155 - 0 [ 269.907113][ T3475] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.963940][ T3475] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 54155 - 0 [ 269.994516][ T3475] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.015181][T10421] xt_TCPMSS: Only works on TCP SYN packets [ 270.093909][ T3475] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 54155 - 0 [ 270.112371][T10417] netlink: 'syz.4.1173': attribute type 1 has an invalid length. [ 270.122106][ T3475] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.160470][ T3475] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 54155 - 0 [ 270.172503][ T3475] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.189264][T10376] ip6_vti0 speed is unknown, defaulting to 1000 [ 270.236680][T10426] tipc: Enabled bearer , priority 0 [ 270.257201][T10426] syzkaller0: entered promiscuous mode [ 270.268366][T10431] __nla_validate_parse: 2 callbacks suppressed [ 270.268385][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1178'. [ 270.286644][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1178'. [ 270.287076][T10426] syzkaller0: entered allmulticast mode [ 270.385750][T10431] dummy0: entered promiscuous mode [ 270.396717][T10431] bridge0: entered promiscuous mode [ 270.398221][T10435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1180'. [ 270.416695][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 270.426176][T10431] debugfs: 'hsr1' already exists in 'hsr' [ 270.441689][T10431] Cannot create hsr debugfs directory [ 270.449032][T10438] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 270.488686][T10431] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 270.521441][T10428] tipc: Resetting bearer [ 270.572607][T10425] tipc: Resetting bearer [ 270.599404][T10425] tipc: Disabling bearer [ 270.672620][T10445] netlink: 'syz.4.1180': attribute type 3 has an invalid length. [ 271.248645][T10467] syzkaller0: entered promiscuous mode [ 271.276150][T10467] syzkaller0: entered allmulticast mode [ 271.338114][T10451] lo speed is unknown, defaulting to 1000 [ 271.751586][T10451] ip6_vti0 speed is unknown, defaulting to 1000 [ 271.842059][T10460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.216660][T10490] nbd4: detected capacity change from 0 to 63 [ 272.224262][T10492] block nbd4: NBD_DISCONNECT [ 272.232333][T10492] block nbd4: Disconnected due to user request. [ 272.249512][T10492] block nbd4: shutting down sockets [ 272.255787][ T9845] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 272.297656][ T9845] Buffer I/O error on dev nbd4, logical block 0, async page read [ 272.306915][ T1737] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 272.322364][ T1737] Buffer I/O error on dev nbd4, logical block 1, async page read [ 272.331100][ T1737] Buffer I/O error on dev nbd4, logical block 2, async page read [ 272.339792][ T1737] Buffer I/O error on dev nbd4, logical block 3, async page read [ 272.349899][ T9845] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 272.369733][ T9845] Buffer I/O error on dev nbd4, logical block 0, async page read [ 272.378036][ T9845] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 272.388579][ T9845] Buffer I/O error on dev nbd4, logical block 1, async page read [ 272.396845][ T9845] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 272.406793][ T9845] Buffer I/O error on dev nbd4, logical block 2, async page read [ 272.415340][ T9845] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 272.425364][ T9845] Buffer I/O error on dev nbd4, logical block 3, async page read [ 272.433465][ T9845] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 272.444495][ T9845] Buffer I/O error on dev nbd4, logical block 0, async page read [ 272.452877][ T9845] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 272.463091][ T9845] Buffer I/O error on dev nbd4, logical block 1, async page read [ 272.470914][ T9845] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 272.480983][ T9845] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 272.502958][ T9845] ldm_validate_partition_table(): Disk read failed. [ 272.510995][ T9845] Dev nbd4: unable to read RDB block 0 [ 272.521149][ T9845] nbd4: unable to read partition table [ 272.556250][ T9845] ldm_validate_partition_table(): Disk read failed. [ 272.565968][ T9845] Dev nbd4: unable to read RDB block 0 [ 272.572124][ T9845] nbd4: unable to read partition table [ 272.714869][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 272.760470][T10504] net_ratelimit: 770 callbacks suppressed [ 272.760502][T10504] openvswitch: netlink: IP tunnel dst address not specified [ 272.774151][T10505] openvswitch: netlink: IP tunnel dst address not specified [ 273.178783][T10519] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1202'. [ 273.201773][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 273.224983][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 273.320327][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1201'. [ 273.772074][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1206'. [ 274.066692][T10537] lo speed is unknown, defaulting to 1000 [ 274.285664][T10537] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.360261][T10577] __nla_validate_parse: 2 callbacks suppressed [ 275.360281][T10577] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1220'. [ 275.395653][T10574] vlan2: entered allmulticast mode [ 275.400829][T10574] bond5: entered allmulticast mode [ 276.203370][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 276.450678][T10599] validate_nla: 1 callbacks suppressed [ 276.450696][T10599] netlink: 'syz.2.1226': attribute type 18 has an invalid length. [ 276.484091][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 276.522583][T10599] netlink: 'syz.2.1226': attribute type 18 has an invalid length. [ 276.530692][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 276.904696][T10614] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1229'. [ 276.965168][ T3475] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.973837][ T3475] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.028317][ T3475] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.043790][T10613] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 277.062929][ T3475] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.272670][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1232'. [ 277.526308][T10648] netlink: 'syz.0.1239': attribute type 3 has an invalid length. [ 277.552411][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'. [ 277.561846][T10648] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 277.592335][T10648] netlink: 'syz.0.1239': attribute type 2 has an invalid length. [ 277.861035][T10659] xt_CT: No such helper "snmp_trap" [ 277.901983][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 278.434841][T10671] netlink: 'syz.4.1245': attribute type 1 has an invalid length. [ 278.434841][T10672] netlink: 'syz.4.1245': attribute type 1 has an invalid length. [ 278.434867][T10671] netlink: 'syz.4.1245': attribute type 3 has an invalid length. [ 278.493390][T10672] netlink: 'syz.4.1245': attribute type 3 has an invalid length. [ 278.509775][T10672] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1245'. [ 278.522340][T10671] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1245'. [ 278.809947][T10684] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 278.826761][T10684] syzkaller0: entered promiscuous mode [ 278.871031][T10684] syzkaller0: entered allmulticast mode [ 278.901010][T10691] tipc: Enabled bearer , priority 0 [ 278.953682][T10684] tipc: Resetting bearer [ 278.970047][T10693] syzkaller1: entered promiscuous mode [ 278.982507][T10693] syzkaller1: entered allmulticast mode [ 279.016438][T10683] tipc: Resetting bearer [ 279.042796][T10683] tipc: Disabling bearer [ 279.300884][T10710] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 279.588779][T10726] smc: net device wlan0 applied user defined pnetid SYZ0 [ 279.608406][T10726] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 279.790030][T10690] lo speed is unknown, defaulting to 1000 [ 280.113293][T10690] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.802531][T10754] sctp: [Deprecated]: syz.0.1268 (pid 10754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.802531][T10754] Use struct sctp_sack_info instead [ 280.960872][T10756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.982021][T10761] __nla_validate_parse: 9 callbacks suppressed [ 280.982041][T10761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1271'. [ 281.021666][T10766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1272'. [ 281.082300][T10768] siw: device registration error -23 [ 281.104714][T10768] smc: removing ib device syz1 [ 281.316265][T10770] bond6: entered promiscuous mode [ 281.332518][T10770] bond6: entered allmulticast mode [ 281.391710][T10773] gre2: entered allmulticast mode [ 282.134422][T10807] validate_nla: 9 callbacks suppressed [ 282.134442][T10807] netlink: 'syz.3.1281': attribute type 2 has an invalid length. [ 282.278006][T10807] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1281'. [ 283.130878][T10842] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1291'. [ 283.150923][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'. [ 283.368077][T10852] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 284.194249][T10856] syzkaller0: entered promiscuous mode [ 284.199794][T10856] syzkaller0: entered allmulticast mode [ 284.484608][T10872] xt_hashlimit: size too large, truncated to 1048576 [ 284.491764][T10872] xt_hashlimit: max too large, truncated to 1048576 [ 284.855138][T10883] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1302'. [ 284.978482][T10886] syzkaller0: entered promiscuous mode [ 284.984064][T10886] syzkaller0: entered allmulticast mode [ 284.994362][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1303'. [ 285.118599][T10886] bond7: entered promiscuous mode [ 285.138692][T10886] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.145662][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1304'. [ 285.196411][T10893] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.214447][T10893] bond7: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 285.227048][T10893] bond7: (slave ip6tnl1): Error -95 calling set_mac_address [ 285.237354][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 285.329017][T10912] netlink: 'syz.1.1304': attribute type 2 has an invalid length. [ 285.340572][T10912] netlink: 'syz.1.1304': attribute type 2 has an invalid length. [ 285.396640][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1311'. [ 285.497608][T10914] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 285.510714][T10914] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 285.680627][T10923] syzkaller0: entered promiscuous mode [ 285.692038][T10923] syzkaller0: entered allmulticast mode [ 285.783859][T10932] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 285.843366][T10932] veth9: entered promiscuous mode [ 286.040871][T10942] __nla_validate_parse: 3 callbacks suppressed [ 286.040891][T10942] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1319'. [ 286.178673][T10945] tap0: tun_chr_ioctl cmd 1074025680 [ 286.195125][T10950] netlink: 'syz.4.1321': attribute type 3 has an invalid length. [ 286.229512][T10945] syzkaller0: entered promiscuous mode [ 286.237680][T10945] syzkaller0: entered allmulticast mode [ 286.253031][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 286.362053][T10956] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1324'. [ 286.421581][T10957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.551213][T10962] siw: device registration error -23 [ 286.717758][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1328'. [ 286.796433][T10973] lo: Caught tx_queue_len zero misconfig [ 287.003133][T10985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1334'. [ 287.070063][T10991] lo speed is unknown, defaulting to 1000 [ 287.162011][T10994] syzkaller0: entered promiscuous mode [ 287.168707][T10994] syzkaller0: entered allmulticast mode [ 287.411164][T11015] ipt_rpfilter: unknown options [ 288.004674][T11021] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 288.013280][T11021] netlink: 'syz.1.1343': attribute type 6 has an invalid length. [ 288.022003][T11021] netlink: 'syz.1.1343': attribute type 3 has an invalid length. [ 288.063823][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 288.192862][T11024] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 288.561004][T11011] tipc: Enabled bearer , priority 10 [ 288.575091][T11015] m1Ie5èÿá: entered promiscuous mode [ 288.581659][T10991] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.817878][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'. [ 288.838292][T11028] tipc: Enabled bearer , priority 0 [ 288.846552][T11028] syzkaller0: entered promiscuous mode [ 288.858227][T11028] syzkaller0: entered allmulticast mode [ 288.887322][T11028] tipc: Resetting bearer [ 288.896937][T11027] tipc: Resetting bearer [ 288.911405][T11027] tipc: Disabling bearer [ 289.153643][T11041] bond2: option resend_igmp: invalid value (2878) [ 289.171324][T11041] bond2: option resend_igmp: allowed values 0 - 255 [ 289.181000][T11041] bond2 (unregistering): Released all slaves [ 289.419501][T11056] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1353'. [ 289.432302][T11056] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1353'. [ 289.449953][T11047] lo speed is unknown, defaulting to 1000 [ 289.569351][T11062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1355'. [ 289.654310][T11067] netlink: 'syz.0.1356': attribute type 1 has an invalid length. [ 289.764818][T11063] bond8: (slave bridge4): making interface the new active one [ 289.788392][T11063] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 289.926483][T11047] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.218761][T11088] syzkaller0: entered promiscuous mode [ 290.234857][T11088] syzkaller0: entered allmulticast mode [ 290.304928][T11090] pim6reg: entered allmulticast mode [ 290.332550][T11090] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 290.687672][T11099] bridge4: entered promiscuous mode [ 290.701941][T11099] bridge4: entered allmulticast mode [ 291.129128][T11106] __nla_validate_parse: 3 callbacks suppressed [ 291.129149][T11106] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1366'. [ 291.342445][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.188085][T11120] sctp: [Deprecated]: syz.4.1371 (pid 11120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.188085][T11120] Use struct sctp_sack_info instead [ 292.281031][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1372'. [ 292.301539][T11122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1372'. [ 292.518072][T11127] lo speed is unknown, defaulting to 1000 [ 293.164318][T11147] netlink: 'syz.0.1379': attribute type 6 has an invalid length. [ 293.183486][T11147] netlink: 'syz.0.1379': attribute type 5 has an invalid length. [ 293.284775][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1381'. [ 293.326384][T11127] ip6_vti0 speed is unknown, defaulting to 1000 [ 293.574673][T11159] netlink: 872 bytes leftover after parsing attributes in process `syz.2.1383'. [ 293.592891][T11159] netlink: 872 bytes leftover after parsing attributes in process `syz.2.1383'. [ 293.947674][T11176] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1388'. [ 294.081685][T11181] netlink: 'syz.2.1389': attribute type 4 has an invalid length. [ 294.116247][T11181] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1389'. [ 294.159673][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 294.697283][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1395'. [ 295.418009][T11224] tunl0: entered promiscuous mode [ 295.436220][T11224] tunl0: entered allmulticast mode [ 295.625121][T11223] bridge0: port 1(1¾x9ÿ) entered disabled state [ 295.647006][T11223] batman_adv: batadv0: Interface deactivated: dummy0 [ 295.723845][T11223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.737764][T11223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.816923][T11223] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 295.876730][T11223] bridge2: left allmulticast mode [ 295.889951][T11223] gretap1: left promiscuous mode [ 295.911273][ T6977] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.922664][ T6977] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.942404][ T6977] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.955550][ T6977] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.006711][T11241] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 296.018057][T11241] bond7 (unregistering): Released all slaves [ 296.193687][T11248] netlink: 'syz.0.1406': attribute type 1 has an invalid length. [ 296.286842][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 297.460519][T11202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.646107][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 297.770802][T11270] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 297.785412][T11270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.796652][T11265] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 297.804904][T11265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1407'. [ 297.946914][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.956126][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.980580][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.007757][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.060907][T11288] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1418'. [ 298.086658][T11288] bond0: Caught tx_queue_len zero misconfig [ 298.135683][T11288] syzkaller0: entered promiscuous mode [ 298.141353][T11288] syzkaller0: entered allmulticast mode [ 298.339558][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1420'. [ 298.351693][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 298.483961][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1422'. [ 298.848684][T11329] lo speed is unknown, defaulting to 1000 [ 298.858396][T11340] netlink: 'syz.4.1424': attribute type 83 has an invalid length. [ 299.023025][ T1737] block nbd1: Possible stuck request ffff888026358000: control (read@0,4096B). Runtime 150 seconds [ 299.060869][ T5342] block nbd0: Possible stuck request ffff888026318000: control (read@0,1024B). Runtime 180 seconds [ 299.074807][ T5342] block nbd0: Possible stuck request ffff888026318200: control (read@1024,1024B). Runtime 180 seconds [ 299.086340][ T5342] block nbd0: Possible stuck request ffff888026318400: control (read@2048,1024B). Runtime 180 seconds [ 299.097643][ T5342] block nbd0: Possible stuck request ffff888026318600: control (read@3072,1024B). Runtime 180 seconds [ 299.129829][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 299.384018][T11354] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1432'. [ 299.406151][T11354] tipc: Invalid UDP bearer configuration [ 299.406214][T11354] tipc: Enabling of bearer rejected, failed to enable media [ 299.453740][T11358] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 299.532879][T11329] ip6_vti0 speed is unknown, defaulting to 1000 [ 299.558850][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 300.364197][T11384] lo speed is unknown, defaulting to 1000 [ 300.854156][T11384] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.608391][T11417] bond0: (slave rose0): Error: Device can not be enslaved while up [ 301.678209][T11420] __nla_validate_parse: 5 callbacks suppressed [ 301.678209][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1454'. [ 301.678230][T11420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1454'. [ 301.779561][T11426] netlink: 7076 bytes leftover after parsing attributes in process `syz.3.1453'. [ 301.789068][T11426] openvswitch: netlink: Flow key attr not present in new flow. [ 302.131160][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 302.152154][T11430] x_tables: duplicate underflow at hook 3 [ 302.275875][T11441] lo speed is unknown, defaulting to 1000 [ 302.525791][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1462'. [ 302.653307][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1462'. [ 302.930759][T11441] ip6_vti0 speed is unknown, defaulting to 1000 [ 303.106072][T11469] pim6reg1: entered promiscuous mode [ 303.120849][T11469] pim6reg1: entered allmulticast mode [ 303.136554][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 303.161279][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1464'. [ 303.416965][T11476] SET target dimension over the limit! [ 303.530647][T11480] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 303.684748][T11485] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1470'. [ 304.066394][T11491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.149137][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 304.287224][T11505] netlink: 'syz.2.1477': attribute type 2 has an invalid length. [ 304.308723][T11505] hmac(sha224: entered promiscuous mode [ 304.456174][T11516] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 304.468536][T11516] batman_adv: batadv0: Adding interface: gretap2 [ 304.475680][T11516] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.522747][T11516] batman_adv: batadv0: Interface activated: gretap2 [ 304.542792][T11511] bond0: left promiscuous mode [ 304.547621][T11511] bond0: left allmulticast mode [ 304.730261][T11520] bond3: option ad_actor_sys_prio: invalid value (0) [ 304.745409][T11520] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 304.755054][T11520] bond3 (unregistering): Released all slaves [ 305.233529][T11551] dummy0: entered promiscuous mode [ 305.246009][T11551] macvlan1: entered promiscuous mode [ 305.261909][T11551] debugfs: 'hsr1' already exists in 'hsr' [ 305.285056][T11551] Cannot create hsr debugfs directory [ 305.302029][T11551] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 305.323073][T11551] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network [ 305.342637][T11551] hsr1: entered allmulticast mode [ 305.358611][T11551] dummy0: entered allmulticast mode [ 305.374146][T11551] macvlan1: entered allmulticast mode [ 305.741102][T11587] lo speed is unknown, defaulting to 1000 [ 305.879265][T11595] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 305.896915][T11595] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 305.916749][T11595] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 305.935431][T11595] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 306.336054][T11587] ip6_vti0 speed is unknown, defaulting to 1000 [ 306.411029][T11619] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 306.429346][T11619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.002924][T11632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.049741][T11626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.228590][T11643] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 307.236576][T11643] netlink: 'syz.4.1514': attribute type 4 has an invalid length. [ 307.245150][T11643] __nla_validate_parse: 10 callbacks suppressed [ 307.245165][T11643] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1514'. [ 307.263951][T11643] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 307.274118][T11643] netlink: 'syz.4.1514': attribute type 4 has an invalid length. [ 307.281887][T11643] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1514'. [ 307.406912][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1514'. [ 307.480864][T11651] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1515'. [ 308.102313][T11679] netlink: 'syz.1.1522': attribute type 4 has an invalid length. [ 308.183983][T11678] bond0: (slave bond_slave_0): Releasing backup interface [ 308.209660][T11678] bond0: (slave bond_slave_1): Releasing backup interface [ 308.263692][T11678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.271460][T11678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.304644][T11678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.312093][T11678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.327689][T11678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.345674][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.370594][T11685] syzkaller1: entered promiscuous mode [ 308.376320][T11685] syzkaller1: entered allmulticast mode [ 309.823572][T11693] veth1_to_hsr: left allmulticast mode [ 309.901783][T11711] team0: left promiscuous mode [ 309.907050][T11711] team_slave_0: left promiscuous mode [ 309.913311][T11711] team_slave_1: left promiscuous mode [ 309.926420][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 309.946968][ T5890] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.953561][T11715] tipc: Enabling of bearer rejected, failed to enable media [ 309.978897][ T5890] syz2: Port: 1 Link DOWN [ 309.993556][ T5890] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.023024][ T6977] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 54155 - 0 [ 310.044323][ T6977] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.082858][T11745] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1533'. [ 310.099170][ T6977] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 54155 - 0 [ 310.132927][ T6977] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.154800][ T6977] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 54155 - 0 [ 310.182042][T11753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1535'. [ 310.196168][ T6977] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.222329][ T6977] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 54155 - 0 [ 310.252334][ T6977] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.349573][T11755] lo speed is unknown, defaulting to 1000 [ 310.392306][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1537'. [ 310.467485][T11770] validate_nla: 1 callbacks suppressed [ 310.467503][T11770] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 310.594728][T11757] gretap3: entered allmulticast mode [ 310.656061][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 310.678870][T11782] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1542'. [ 310.878130][T11782] netlink: 'syz.1.1542': attribute type 37 has an invalid length. [ 311.371582][T11794] lo speed is unknown, defaulting to 1000 [ 311.386127][T11755] ip6_vti0 speed is unknown, defaulting to 1000 [ 311.899086][ T1329] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.912237][ T1329] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.962715][ T1329] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.978147][ T1329] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.148208][T11794] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.188705][T11835] lo speed is unknown, defaulting to 1000 [ 312.462548][T11849] __nla_validate_parse: 6 callbacks suppressed [ 312.462568][T11849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1553'. [ 312.786702][T11868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 312.881081][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 313.027824][T11835] ip6_vti0 speed is unknown, defaulting to 1000 [ 313.042351][T11876] netlink: 'syz.1.1556': attribute type 31 has an invalid length. [ 313.997400][T11895] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 314.054500][T11895] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 314.082506][T11895] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 314.125981][T11895] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 316.089642][T11941] netlink: 'syz.4.1569': attribute type 10 has an invalid length. [ 316.112998][T11941] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1569'. [ 316.336692][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1575'. [ 316.756486][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1580'. [ 317.033998][T11986] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1583'. [ 317.110514][T11992] netlink: 'syz.3.1587': attribute type 29 has an invalid length. [ 317.130010][T11992] netlink: 'syz.3.1587': attribute type 29 has an invalid length. [ 317.155983][T11992] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1587'. [ 317.174273][T11995] netlink: 'syz.1.1586': attribute type 14 has an invalid length. [ 317.558620][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1591'. [ 317.577164][T12015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1592'. [ 317.622341][T12020] x_tables: duplicate underflow at hook 2 [ 317.632705][T12013] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1591'. [ 317.813888][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1597'. [ 317.853188][T12033] netlink: 'syz.3.1598': attribute type 3 has an invalid length. [ 317.863426][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1597'. [ 317.872415][ T3475] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.880814][ T3475] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.903088][ T3475] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.911308][ T3475] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.239698][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1605'. [ 318.388829][T12059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1607'. [ 318.577545][T12066] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1608'. [ 318.592532][T12066] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1608'. [ 318.617101][T12066] netlink: 'syz.3.1608': attribute type 5 has an invalid length. [ 318.670528][T12066] netlink: 'syz.3.1608': attribute type 6 has an invalid length. [ 318.690692][T12066] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1608'. [ 318.933065][T12081] netlink: 'syz.2.1614': attribute type 1 has an invalid length. [ 318.942643][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 318.948926][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 319.127007][T12085] bond7: (slave bridge2): making interface the new active one [ 319.159832][T12085] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 319.578655][T11741] lo speed is unknown, defaulting to 1000 [ 319.578856][T12105] bridge0: entered allmulticast mode [ 319.586503][T11741] syz0: Port: 1 Link DOWN [ 319.654981][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.684970][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.712470][T11740] lo speed is unknown, defaulting to 1000 [ 319.712516][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.732922][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.799463][T12125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.853086][T12123] : entered promiscuous mode [ 319.877830][T12133] sctp: [Deprecated]: syz.3.1625 (pid 12133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.877830][T12133] Use struct sctp_sack_info instead [ 320.112349][T12149] tipc: Enabled bearer , priority 0 [ 320.139932][T12149] syzkaller0: entered promiscuous mode [ 320.166768][T12149] syzkaller0: entered allmulticast mode [ 320.229388][T12149] tipc: Resetting bearer [ 320.243883][T12148] tipc: Resetting bearer [ 320.283655][T12148] tipc: Disabling bearer [ 320.314842][T12155] netlink: set zone limit has 4 unknown bytes [ 320.412768][T12158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.452522][T12158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.842317][T12183] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 322.202123][T12203] team1: entered promiscuous mode [ 322.208663][T12203] team1: entered allmulticast mode [ 322.214643][T12203] 8021q: adding VLAN 0 to HW filter on device team1 [ 322.281313][T12207] team2: entered promiscuous mode [ 322.292337][T12207] team2: entered allmulticast mode [ 322.316705][T12207] 8021q: adding VLAN 0 to HW filter on device team2 [ 322.481178][T12224] syzkaller0: entered promiscuous mode [ 322.489013][T12224] syzkaller0: entered allmulticast mode [ 322.505314][T12224] tipc: Enabled bearer , priority 0 [ 322.545593][T12223] tipc: Resetting bearer [ 322.601976][T12232] __nla_validate_parse: 12 callbacks suppressed [ 322.601991][T12232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1656'. [ 322.619132][T12223] tipc: Disabling bearer [ 322.625882][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'. [ 322.643014][T12230] nbd: socks must be embedded in a SOCK_ITEM attr [ 322.674314][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1657'. [ 322.686852][T12233] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 322.694663][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1657'. [ 322.937118][T12249] lo speed is unknown, defaulting to 1000 [ 322.945895][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1659'. [ 323.000758][T12239] syzkaller0: entered promiscuous mode [ 323.020894][T12239] syzkaller0: entered allmulticast mode [ 323.149063][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 323.341106][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 323.351334][T12277] netlink: 'syz.2.1671': attribute type 1 has an invalid length. [ 323.497828][T12282] nbd: nbd2 already in use [ 323.510209][T12249] ip6_vti0 speed is unknown, defaulting to 1000 [ 323.517583][T12270] lo speed is unknown, defaulting to 1000 [ 323.880168][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1678'. [ 323.913447][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1678'. [ 323.949516][T12296] ip6gretap0: entered promiscuous mode [ 323.993279][T12296] erspan0: entered promiscuous mode [ 323.999656][T12296] hsr2: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 324.032355][T12296] hsr2: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 324.078603][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1679'. [ 324.334099][T12316] syzkaller0: entered promiscuous mode [ 324.339626][T12316] syzkaller0: entered allmulticast mode [ 324.498667][T12270] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.992330][T12334] lo speed is unknown, defaulting to 1000 [ 325.381605][T12339] syzkaller0: entered promiscuous mode [ 325.400255][T12339] syzkaller0: entered allmulticast mode [ 325.841932][T12358] team0: Device is already in use. [ 325.878418][T12334] ip6_vti0 speed is unknown, defaulting to 1000 [ 325.894042][T12354] netlink: 'syz.2.1692': attribute type 23 has an invalid length. [ 325.985378][T12360] netlink: 'syz.4.1695': attribute type 10 has an invalid length. [ 326.314392][T12374] lo speed is unknown, defaulting to 1000 [ 326.406204][T11740] IPVS: starting estimator thread 0... [ 326.524285][T12381] IPVS: using max 27 ests per chain, 64800 per kthread [ 327.239669][T12377] lo speed is unknown, defaulting to 1000 [ 327.239679][T12374] ip6_vti0 speed is unknown, defaulting to 1000 [ 327.754715][T12416] __nla_validate_parse: 12 callbacks suppressed [ 327.754738][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 327.836157][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 327.846286][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 327.855966][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 327.867298][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 327.912534][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 327.921692][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 327.930985][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 327.940149][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 327.955537][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 328.001475][T12377] ip6_vti0 speed is unknown, defaulting to 1000 [ 328.001673][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.063180][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.079567][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.088360][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.211628][T12424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.102996][ T1737] block nbd1: Possible stuck request ffff888026358000: control (read@0,4096B). Runtime 180 seconds [ 329.108168][ T5342] block nbd0: Connection timed out, retrying (0/1 alive) [ 329.121823][ T5342] block nbd0: Connection timed out, retrying (0/1 alive) [ 329.129149][ T5342] block nbd0: Connection timed out, retrying (0/1 alive) [ 329.137048][ T11] block nbd0: Dead connection, failed to find a fallback [ 329.147124][ T5342] block nbd0: Connection timed out, retrying (0/1 alive) [ 329.369769][T12459] No such timeout policy "syz0" [ 329.543349][T12464] netlink: 'syz.1.1718': attribute type 10 has an invalid length. [ 329.995422][T12476] syzkaller0: entered promiscuous mode [ 330.000954][T12476] syzkaller0: entered allmulticast mode [ 330.920381][T12527] lo speed is unknown, defaulting to 1000 [ 330.941208][T12536] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 331.216408][T12527] ip6_vti0 speed is unknown, defaulting to 1000 [ 331.487873][T12561] openvswitch: netlink: Flow actions attr not present in new flow. [ 331.501820][T12558] lo speed is unknown, defaulting to 1000 [ 331.872067][T12558] ip6_vti0 speed is unknown, defaulting to 1000 [ 332.075686][T12578] "syz.0.1747" (12578) uses obsolete ecb(arc4) skcipher [ 332.249880][T12587] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 332.701357][T12607] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 332.774106][T12609] team0 (unregistering): Port device team_slave_0 removed [ 332.815318][T12609] team0 (unregistering): Port device team_slave_1 removed [ 333.443377][T12630] __nla_validate_parse: 194 callbacks suppressed [ 333.445028][T12630] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1759'. [ 333.806486][T12630] vlan2: entered promiscuous mode [ 333.815685][T12630] geneve1: entered promiscuous mode [ 333.821156][T12630] vlan2: entered allmulticast mode [ 333.830046][T12630] geneve1: entered allmulticast mode [ 333.923625][T12636] IPVS: Unknown mcast interface: macvlan0 [ 334.079650][T12647] netlink: 'syz.3.1764': attribute type 1 has an invalid length. [ 334.152901][T12647] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1764'. [ 334.406425][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 334.456699][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1764'. [ 334.956705][T12676] lo speed is unknown, defaulting to 1000 [ 335.163317][T12698] batadv1: entered promiscuous mode [ 335.205391][T12698] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 335.255721][T12676] ip6_vti0 speed is unknown, defaulting to 1000 [ 335.455585][T12707] lo speed is unknown, defaulting to 1000 [ 335.752942][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'. [ 335.868829][T12732] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 335.889711][T12734] geneve3: entered promiscuous mode [ 335.910125][T12732] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.042671][T12707] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.067449][T12732] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.174422][T12732] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.327765][T12732] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.493316][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.548577][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.625698][ T6977] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.807388][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.280987][T12779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1792'. [ 337.654787][T12801] openvswitch: netlink: IP tunnel dst address not specified [ 337.971732][T12804] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 337.992461][T12807] lo speed is unknown, defaulting to 1000 [ 338.052608][T12824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1800'. [ 338.391608][T12832] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 338.495205][T12807] ip6_vti0 speed is unknown, defaulting to 1000 [ 338.506172][T12835] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1811'. [ 338.532513][T12835] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1811'. [ 338.568185][T12835] tipc: Can't bind to reserved service type 2 [ 338.750185][T12842] lo speed is unknown, defaulting to 1000 [ 338.825389][T12847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1814'. [ 338.918071][T12860] netlink: 'syz.0.1819': attribute type 3 has an invalid length. [ 338.930987][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1818'. [ 339.007339][T12857] xfrm2: entered promiscuous mode [ 339.055069][T12857] xfrm2: entered allmulticast mode [ 339.065274][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1818'. [ 339.239644][T12842] ip6_vti0 speed is unknown, defaulting to 1000 [ 339.379837][T12865] syz.1.1821 uses old SIOCAX25GETINFO [ 339.418117][T12877] geneve5: entered promiscuous mode [ 339.508471][ T6977] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.541581][ T6977] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.583315][ T6977] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.603258][ T6977] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.799001][T12892] tipc: Enabling of bearer rejected, failed to enable media [ 339.984355][T12899] lo speed is unknown, defaulting to 1000 [ 340.368318][T12899] ip6_vti0 speed is unknown, defaulting to 1000 [ 340.446197][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.464606][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.631928][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1839'. [ 340.641239][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1839'. [ 340.678790][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1839'. [ 340.694680][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1839'. [ 340.705057][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1839'. [ 340.782794][T12935] netlink: 'syz.3.1842': attribute type 2 has an invalid length. [ 340.818330][T12935] !©9: entered promiscuous mode [ 340.843729][T12935] netlink: 'syz.3.1842': attribute type 2 has an invalid length. [ 340.920427][T12935] !©9: left promiscuous mode [ 341.628218][T12957] dummy0: entered promiscuous mode [ 341.643603][T12957] macvlan1: entered promiscuous mode [ 341.661426][T12957] debugfs: 'hsr1' already exists in 'hsr' [ 341.671876][T12957] Cannot create hsr debugfs directory [ 341.684272][T12957] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 341.696026][T12957] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network [ 341.706742][T12957] hsr1: entered allmulticast mode [ 341.711908][T12957] dummy0: entered allmulticast mode [ 341.717701][T12957] macvlan1: entered allmulticast mode [ 342.194739][T12975] syzkaller0: entered promiscuous mode [ 342.207103][T12975] syzkaller0: entered allmulticast mode [ 342.258417][T12982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.614554][T12991] batadv_slave_1: entered promiscuous mode [ 342.895854][T13005] syzkaller0: entered promiscuous mode [ 342.901750][T13005] syzkaller0: entered allmulticast mode [ 342.909005][T13013] tipc: Enabling of bearer rejected, failed to enable media [ 344.221910][T13036] netlink: 'syz.4.1871': attribute type 3 has an invalid length. [ 344.233409][T13032] __nla_validate_parse: 11 callbacks suppressed [ 344.233425][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 344.298028][T13036] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 344.308950][T13039] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 344.328395][T13036] bond3 (unregistering): Released all slaves [ 344.377995][T13040] veth7: entered allmulticast mode [ 344.389164][T13040] siw: device registration error -23 [ 344.431569][T13035] veth7: left allmulticast mode [ 344.544238][T13051] lo speed is unknown, defaulting to 1000 [ 344.719958][T13064] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1881'. [ 344.767994][T13064] netlink: 'syz.4.1881': attribute type 4 has an invalid length. [ 344.937736][T13051] ip6_vti0 speed is unknown, defaulting to 1000 [ 345.182896][T13069] lo speed is unknown, defaulting to 1000 [ 345.438688][T13069] ip6_vti0 speed is unknown, defaulting to 1000 [ 345.582036][T13081] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 345.811176][T13081] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 345.826312][T13081] bond3: (slave batadv1): making interface the new active one [ 345.841004][T13081] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 346.166498][T13092] netlink: 'syz.2.1887': attribute type 62 has an invalid length. [ 346.271642][T13093] block nbd3: server does not support multiple connections per device. [ 346.316738][T13093] block nbd3: shutting down sockets [ 346.526830][T13111] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1893'. [ 346.799519][T13122] netlink: 'syz.2.1895': attribute type 12 has an invalid length. [ 346.808082][T13122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1895'. [ 346.818500][T13121] batadv_slave_0: Caught tx_queue_len zero misconfig [ 346.954636][T13130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1899'. [ 346.979938][T13131] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1900'. [ 347.174057][T13143] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 347.264821][T13144] lo speed is unknown, defaulting to 1000 [ 347.867335][T13180] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1912'. [ 348.018240][T13182] syzkaller0: entered promiscuous mode [ 348.042330][T13182] syzkaller0: entered allmulticast mode [ 348.061889][T13182] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1914'. [ 348.069394][T13144] ip6_vti0 speed is unknown, defaulting to 1000 [ 348.317431][T13201] delete_channel: no stack [ 348.326022][T13200] bond0: entered promiscuous mode [ 348.340592][T13200] bond_slave_0: entered promiscuous mode [ 348.347363][T13200] bond_slave_1: entered promiscuous mode [ 348.372860][T13200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1916'. [ 348.423433][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1918'. [ 348.475378][T13206] netlink: 'syz.0.1918': attribute type 13 has an invalid length. [ 348.647634][T13210] x_tables: unsorted underflow at hook 2 [ 348.656732][T13211] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 349.294748][T13241] __nla_validate_parse: 3 callbacks suppressed [ 349.294768][T13241] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1929'. [ 349.555286][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 349.744100][T13274] Cannot find set identified by id 65534 to match [ 349.806200][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1934'. [ 349.860768][T13279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1936'. [ 349.963194][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1934'. [ 349.972373][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 350.055431][T13280] macvtap1: entered promiscuous mode [ 350.075286][T13280] veth1_to_hsr: entered promiscuous mode [ 350.096395][T13280] macvtap1: entered allmulticast mode [ 350.102058][T13280] veth1_to_hsr: entered allmulticast mode [ 350.286106][T13296] vlan3: entered allmulticast mode [ 350.291298][T13296] bridge_slave_0: entered allmulticast mode [ 350.297741][T13296] bridge0: port 1(vlan3) entered blocking state [ 350.304284][T13296] bridge0: port 1(vlan3) entered disabled state [ 350.316802][T13296] vlan3: entered promiscuous mode [ 350.321864][T13296] bridge_slave_0: entered promiscuous mode [ 350.434432][ T29] audit: type=1800 audit(1771370207.525:3): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1940" name=CB dev="tmpfs" ino=2282 res=0 errno=0 [ 350.826868][T13331] geneve1: entered promiscuous mode [ 350.998189][T13339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1951'. [ 351.261393][T13354] bond3: invalid ARP target 0.0.0.0 specified for addition [ 351.269309][T13354] bond3: option arp_ip_target: invalid value (0) [ 351.277613][T13354] bond3 (unregistering): Released all slaves [ 351.314910][T13361] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1958'. [ 351.334925][T13361] dummy0 (unregistering): left promiscuous mode [ 351.372694][ T29] audit: type=1804 audit(1771370208.455:4): pid=13363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1960" name="memory.events" dev="tmpfs" ino=2030 res=1 errno=0 [ 351.394405][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1960'. [ 351.414906][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 351.427459][ T29] audit: type=1800 audit(1771370208.465:5): pid=13363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1960" name="memory.events" dev="tmpfs" ino=2030 res=0 errno=0 [ 351.861046][T13394] tipc: Enabling of bearer rejected, failed to enable media [ 352.096812][T13415] netlink: 'syz.0.1970': attribute type 29 has an invalid length. [ 352.105495][T13415] netlink: 'syz.0.1970': attribute type 29 has an invalid length. [ 352.405832][T13432] syzkaller0: entered promiscuous mode [ 352.422821][T13432] syzkaller0: entered allmulticast mode [ 352.496434][T13439] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 352.531742][T13439] bond3: entered promiscuous mode [ 352.537517][T13439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.413098][T13462] netlink: 'syz.2.1977': attribute type 2 has an invalid length. [ 354.181038][T13518] tipc: Invalid UDP bearer configuration [ 354.181089][T13518] tipc: Enabling of bearer rejected, failed to enable media [ 354.350153][T13529] __nla_validate_parse: 6 callbacks suppressed [ 354.350174][T13529] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'. [ 354.392374][T13529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1993'. [ 354.421740][T13529] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'. [ 354.466862][T13529] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'. [ 354.625615][T13540] netlink: 'syz.3.1995': attribute type 11 has an invalid length. [ 354.664120][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 354.825564][T13558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.906247][T13555] lo speed is unknown, defaulting to 1000 [ 355.158186][T13578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2002'. [ 355.240402][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 355.362546][T13590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2004'. [ 355.409467][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 355.444285][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 355.728528][T13567] lo speed is unknown, defaulting to 1000 [ 355.819007][T13555] ip6_vti0 speed is unknown, defaulting to 1000 [ 356.476697][T13574] lo speed is unknown, defaulting to 1000 [ 356.588044][T13567] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.447822][T13574] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.695651][T13677] netlink: 'syz.1.2021': attribute type 1 has an invalid length. [ 358.319023][T13685] lo speed is unknown, defaulting to 1000 [ 359.156170][T13685] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.189578][ T1737] block nbd1: Possible stuck request ffff888026358000: control (read@0,4096B). Runtime 210 seconds [ 359.577471][T13715] __nla_validate_parse: 6 callbacks suppressed [ 359.577489][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 359.614909][T13715] macvtap1: entered promiscuous mode [ 359.622230][T13715] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 359.722371][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 360.833022][T13742] lo speed is unknown, defaulting to 1000 [ 360.991011][T13744] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 361.045251][T13749] "syz.4.2036" (13749) uses obsolete ecb(arc4) skcipher [ 361.249214][T13760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2039'. [ 361.259076][T13758] netlink: 'syz.2.2038': attribute type 5 has an invalid length. [ 361.267172][T13758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 361.296014][T13760] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2039'. [ 361.632075][T13742] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.900533][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 361.929975][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 361.984250][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 362.025394][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 362.068530][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 362.093997][T13797] macsec1: entered promiscuous mode [ 362.427706][T13775] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 362.433352][T13780] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 362.898132][T13843] SET target dimension over the limit! [ 363.313634][T13852] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.587628][T13856] syzkaller0: entered promiscuous mode [ 363.612340][T13856] syzkaller0: entered allmulticast mode [ 363.664557][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 363.752361][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 364.817769][T13859] lo speed is unknown, defaulting to 1000 [ 365.204900][T13859] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.327332][T13904] sctp: [Deprecated]: syz.0.2076 (pid 13904) Use of int in maxseg socket option. [ 365.327332][T13904] Use struct sctp_assoc_value instead [ 365.527520][T13908] __nla_validate_parse: 6 callbacks suppressed [ 365.527537][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 365.539231][T13914] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 365.651268][T13914] bond9: invalid ARP target 0.0.0.0 specified for addition [ 365.663013][T13914] bond9: option arp_ip_target: invalid value (0) [ 365.684085][T13914] bond9 (unregistering): Released all slaves [ 365.783544][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'. [ 365.796709][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2081'. [ 366.030771][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 366.126807][T13935] netlink: 'syz.3.2085': attribute type 1 has an invalid length. [ 366.208290][T13943] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 366.297875][T13946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2087'. [ 366.497571][T13936] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2085'. [ 366.731804][T13951] bond4: (slave geneve0): making interface the new active one [ 366.740709][T13951] bond4: (slave geneve0): Enslaving as an active interface with an up link [ 366.911627][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 366.925129][T13247] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 366.947385][T13247] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 366.972492][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 367.064544][T13247] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 367.079355][T13950] lo speed is unknown, defaulting to 1000 [ 367.085794][T13957] syzkaller0: entered promiscuous mode [ 367.098805][T13247] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 367.652402][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2094'. [ 367.736942][T13984] x_tables: duplicate underflow at hook 1 [ 368.011875][T13947] lo speed is unknown, defaulting to 1000 [ 368.011922][T13950] ip6_vti0 speed is unknown, defaulting to 1000 [ 368.065757][T14003] netlink: 'syz.4.2098': attribute type 32 has an invalid length. [ 368.074436][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 368.174573][T14003] bond5: Setting coupled_control to off (0) [ 368.459787][T14021] x_tables: duplicate underflow at hook 2 [ 368.485779][T14021] x_tables: duplicate underflow at hook 2 [ 368.776704][T14031] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 368.876428][T14031] 8021q: adding VLAN 0 to HW filter on device bond9 [ 368.898038][T14032] vlan4: entered promiscuous mode [ 368.907806][T14032] bond9: entered promiscuous mode [ 368.922434][T14032] vlan4: entered allmulticast mode [ 368.929427][T14032] bond9: entered allmulticast mode [ 369.041173][T13947] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.150982][T14049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.313751][T14049] netlink: 'syz.4.2114': attribute type 6 has an invalid length. [ 369.441854][T14058] lo speed is unknown, defaulting to 1000 [ 369.925790][T14069] lo speed is unknown, defaulting to 1000 [ 369.937691][T14058] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.326961][T14088] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 370.575312][T14092] veth9: entered promiscuous mode [ 370.642218][T14069] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.712703][T14095] __nla_validate_parse: 6 callbacks suppressed [ 370.712747][T14095] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2126'. [ 370.730701][T14095] nbd: socks must be embedded in a SOCK_ITEM attr [ 371.396982][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 371.419014][T14107] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 372.645647][T14136] netlink: 'syz.3.2137': attribute type 12 has an invalid length. [ 372.712065][T14138] lo speed is unknown, defaulting to 1000 [ 372.741702][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'. [ 372.839146][ T29] audit: type=1800 audit(1771370229.895:6): pid=14144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2139" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2471 res=0 errno=0 [ 372.973399][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2140'. [ 373.127912][T14157] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2142'. [ 373.221148][T14138] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.553399][T14180] syzkaller0: entered promiscuous mode [ 373.566225][T14180] syzkaller0: entered allmulticast mode [ 373.809650][T14194] netlink: 'syz.1.2153': attribute type 7 has an invalid length. [ 373.817650][T14194] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2153'. [ 375.450136][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 375.763130][T14224] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 376.555222][T14245] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2170'. [ 376.732061][T14252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 376.748509][T14252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 376.770409][T14256] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 376.810011][T14256] bond10: entered promiscuous mode [ 376.816317][T14256] 8021q: adding VLAN 0 to HW filter on device bond10 [ 377.056862][T14263] veth7: entered promiscuous mode [ 377.206710][T14275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2181'. [ 377.620348][T14301] sch_fq: defrate 4294967293 ignored. [ 378.213345][T14329] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 378.627406][T14332] netlink: 'syz.0.2197': attribute type 14 has an invalid length. [ 378.709634][T14334] netlink: 'syz.0.2198': attribute type 15 has an invalid length. [ 378.720922][T14334] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2198'. [ 378.997692][T14346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2202'. [ 379.159679][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 379.205728][T14357] lo speed is unknown, defaulting to 1000 [ 379.685410][T14356] lo speed is unknown, defaulting to 1000 [ 379.689568][T14357] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.841419][T14366] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2209'. [ 380.187088][T14369] x_tables: duplicate underflow at hook 2 [ 380.516280][T14356] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.685339][T14387] netlink: 'syz.0.2214': attribute type 1 has an invalid length. [ 380.694415][T14385] mac80211_hwsim hwsim3 wlan0: Caught tx_queue_len zero misconfig [ 380.706382][T14387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2214'. [ 380.860249][T14393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2215'. [ 380.946886][T14394] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 380.983863][T14394] bond5 (unregistering): Released all slaves [ 381.199105][T14403] lo speed is unknown, defaulting to 1000 [ 381.292099][T14412] atomic_op ffff888054a4e198 conn xmit_atomic 0000000000000000 [ 381.330433][T14394] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 381.748572][T14430] __nla_validate_parse: 2 callbacks suppressed [ 381.748593][T14430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2224'. [ 381.935752][T14434] tipc: Enabled bearer , priority 0 [ 381.957031][T14434] syzkaller0: entered promiscuous mode [ 381.972326][T14434] syzkaller0: entered allmulticast mode [ 382.046061][T14403] ip6_vti0 speed is unknown, defaulting to 1000 [ 382.069524][T14441] tipc: Resetting bearer [ 382.123339][T14433] tipc: Resetting bearer [ 382.164354][T14433] tipc: Disabling bearer [ 382.225560][T14445] syzkaller0: entered promiscuous mode [ 382.231264][T14445] syzkaller0: entered allmulticast mode [ 382.780982][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 382.887868][T14463] vlan3: entered promiscuous mode [ 383.148963][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 383.296102][T14472] netlink: 'syz.4.2238': attribute type 13 has an invalid length. [ 383.413823][T14474] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 383.432938][T14474] syzkaller0: entered promiscuous mode [ 383.442538][T14474] syzkaller0: entered allmulticast mode [ 383.529772][T14472] tipc: Enabled bearer , priority 0 [ 383.546996][T14475] lo speed is unknown, defaulting to 1000 [ 383.555583][T14471] tipc: Resetting bearer [ 383.584249][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2241'. [ 383.635639][T14471] tipc: Disabling bearer [ 384.275839][T14505] geneve6: entered promiscuous mode [ 384.498896][T14513] Cannot find del_set index 1 as target [ 384.588034][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 384.668692][T14522] xt_hashlimit: size too large, truncated to 1048576 [ 384.860553][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2255'. [ 384.968206][T14475] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.988408][T14540] vlan3: entered allmulticast mode [ 384.994952][T14540] bond10: entered allmulticast mode [ 385.234563][T14547] ip6tnl0: Caught tx_queue_len zero misconfig [ 386.946016][T14559] netlink: 'syz.1.2260': attribute type 8 has an invalid length. [ 387.095432][T14570] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2262'. [ 387.663742][T14521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.800085][T14579] syzkaller0: entered promiscuous mode [ 387.807137][T14579] syzkaller0: entered allmulticast mode [ 387.817667][T14579] netlink: 'syz.4.2265': attribute type 1 has an invalid length. [ 387.915207][T14584] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 387.934291][T14585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2266'. [ 387.944494][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2266'. [ 387.955148][T14587] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2268'. [ 388.113678][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2273'. [ 388.154221][T14601] netlink: 'syz.4.2274': attribute type 13 has an invalid length. [ 388.380871][T14608] lo speed is unknown, defaulting to 1000 [ 388.391413][T14617] netlink: 'syz.4.2279': attribute type 11 has an invalid length. [ 388.399455][T14617] netlink: 'syz.4.2279': attribute type 23 has an invalid length. [ 388.414112][T14617] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2279'. [ 388.487117][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 388.511266][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 388.540421][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 388.568003][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 388.627224][T14624] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 389.014040][T14608] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.263951][ T1737] block nbd1: Possible stuck request ffff888026358000: control (read@0,4096B). Runtime 240 seconds [ 389.464373][T14656] bond6: invalid ARP target 0.0.0.0 specified for addition [ 389.522306][T14656] bond6: option arp_ip_target: invalid value (0) [ 389.538662][T14656] bond6 (unregistering): Released all slaves [ 389.932862][T14687] netlink: 'syz.3.2297': attribute type 30 has an invalid length. [ 390.056575][T14687] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 390.069734][T14687] bond3 (unregistering): Released all slaves [ 390.186883][T14687] netlink: 'syz.3.2297': attribute type 30 has an invalid length. [ 390.341795][T14709] netlink: 'syz.4.2302': attribute type 83 has an invalid length. [ 390.380317][T14687] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 390.393138][T14711] netlink: 'syz.0.2304': attribute type 1 has an invalid length. [ 390.425515][T14687] bond3 (unregistering): Released all slaves [ 390.581908][T14687] netlink: 'syz.3.2297': attribute type 30 has an invalid length. [ 390.764671][T14687] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 390.776716][T14687] bond3 (unregistering): Released all slaves [ 390.920353][T14726] xfrm1: entered allmulticast mode [ 391.457572][T14760] xt_TCPMSS: Only works on TCP SYN packets [ 391.907516][T14799] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20004 [ 394.187551][T14744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.371232][T14801] __nla_validate_parse: 16 callbacks suppressed [ 394.371258][T14801] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2324'. [ 394.468679][T14805] syzkaller0: entered promiscuous mode [ 394.486504][T14805] syzkaller0: entered allmulticast mode [ 394.618771][T14814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2327'. [ 394.676693][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2330'. [ 394.725496][T14824] macvlan0: entered allmulticast mode [ 394.973647][T14836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2333'. [ 395.023908][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 395.113181][T14848] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2338'. [ 395.202999][T14851] sctp: [Deprecated]: syz.1.2337 (pid 14851) Use of int in maxseg socket option. [ 395.202999][T14851] Use struct sctp_assoc_value instead [ 395.224628][T14849] lo speed is unknown, defaulting to 1000 [ 395.247843][T14851] IPVS: length: 24 != 36888 [ 395.357317][T14864] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 395.550310][T14849] ip6_vti0 speed is unknown, defaulting to 1000 [ 395.599938][T14873] sctp: [Deprecated]: syz.4.2345 (pid 14873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.599938][T14873] Use struct sctp_sack_info instead [ 395.965784][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2346'. [ 396.138231][T14892] netlink: 'syz.2.2349': attribute type 1 has an invalid length. [ 396.182026][T14892] bond11: entered promiscuous mode [ 396.190275][T14892] 8021q: adding VLAN 0 to HW filter on device bond11 [ 396.346633][T14895] bond11: (slave bridge3): making interface the new active one [ 396.355762][T14895] bridge3: entered promiscuous mode [ 396.364511][T14895] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 396.434307][T14876] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 396.898149][T14923] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 397.398958][T14953] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2363'. [ 397.521140][T14953] tipc: Enabled bearer , priority 0 [ 397.543516][T14954] syzkaller0: entered promiscuous mode [ 397.573143][T14954] syzkaller0: entered allmulticast mode [ 397.732644][T14954] tipc: Resetting bearer [ 397.760233][T14954] tipc: Disabling bearer [ 399.950805][ T5188] udevd[5188]: worker [5878] /devices/virtual/block/nbd0 timeout; kill it [ 399.964478][ T5188] udevd[5188]: seq 11825 '/devices/virtual/block/nbd0' killed [ 399.973474][ T5188] udevd[5188]: worker [5875] /devices/virtual/block/nbd1 timeout; kill it [ 399.985175][ T5188] udevd[5188]: seq 13071 '/devices/virtual/block/nbd1' killed [ 419.352483][ T1737] block nbd1: Possible stuck request ffff888026358000: control (read@0,4096B). Runtime 270 seconds [ 449.424347][ T1737] block nbd1: Possible stuck request ffff888026358000: control (read@0,4096B). Runtime 300 seconds [ 454.427459][T14972] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.474949][T14972] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.513383][T14978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2370'. [ 454.539012][T14972] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.558630][T14978] siw: device registration error -23 [ 454.564050][T14972] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.642010][T14982] bond12: entered promiscuous mode [ 454.658528][T14972] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.678066][T14983] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2371'. [ 454.688632][T14972] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.810140][T14972] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.832615][T14972] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.927180][T14995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2373'. [ 454.938910][ T1326] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.951736][ T1326] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.974816][ T1326] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.983679][ T1326] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.027290][T14780] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.038508][T14780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.092516][T14783] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.101206][T14783] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.456884][T15014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2375'. [ 455.516896][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 455.554104][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 455.563784][T15019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2377'. [ 455.572998][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 455.573425][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 455.621329][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 455.817153][T15028] pimreg: entered allmulticast mode [ 456.101294][T15033] bond13 (unregistering): Released all slaves [ 456.320617][T15016] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 456.462345][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 456.749645][T15053] veth1_to_team: Caught tx_queue_len zero misconfig [ 456.855240][T15055] lo speed is unknown, defaulting to 1000 [ 457.352422][T15055] ip6_vti0 speed is unknown, defaulting to 1000 [ 457.364214][T15061] lo speed is unknown, defaulting to 1000 [ 458.461741][T15071] lo speed is unknown, defaulting to 1000 [ 458.470046][T15061] ip6_vti0 speed is unknown, defaulting to 1000 [ 459.088706][T15071] ip6_vti0 speed is unknown, defaulting to 1000 [ 460.331576][T15114] netlink: 'syz.1.2403': attribute type 10 has an invalid length. [ 460.480724][T15118] __nla_validate_parse: 5 callbacks suppressed [ 460.480746][T15118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 460.545238][T15118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 460.880392][T15130] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 461.069664][T15138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2409'. [ 461.081398][T15138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2409'. [ 461.431771][T15148] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2413'. [ 461.498443][T15148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2413'. [ 461.522861][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 461.535131][T15148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2413'. [ 461.574657][T15148] netlink: 'syz.1.2413': attribute type 3 has an invalid length. [ 461.755027][T15161] netlink: 'syz.1.2418': attribute type 66 has an invalid length. [ 461.805056][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 461.870111][T15165] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 462.514301][T15214] netlink: 'syz.4.2429': attribute type 13 has an invalid length. [ 462.523351][T15214] netlink: 'syz.4.2429': attribute type 17 has an invalid length. [ 462.616789][T15222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2434'. [ 462.730275][T15214] bridge0: left allmulticast mode [ 462.741037][T15227] netlink: 'syz.1.2436': attribute type 13 has an invalid length. [ 462.750220][T15214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.761580][T15214] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.773913][T15214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.012688][T13249] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.022592][T13249] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.048383][T13249] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.058377][T13249] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.237299][T15249] netlink: 'syz.0.2442': attribute type 1 has an invalid length. [ 463.260658][T15247] wireguard0: entered promiscuous mode [ 463.279452][T15246] netlink: 'syz.4.2440': attribute type 21 has an invalid length. [ 463.813337][T15249] syzkaller1: entered promiscuous mode [ 463.818965][T15249] syzkaller1: entered allmulticast mode [ 464.241516][T15278] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 464.250023][T15278] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 464.797499][T15321] xt_cluster: node mask cannot exceed total number of nodes [ 465.045325][T15331] syzkaller0: entered promiscuous mode [ 465.050863][T15331] syzkaller0: entered allmulticast mode [ 465.273220][T15359] netlink: 'syz.1.2470': attribute type 1 has an invalid length. [ 465.401838][T15366] rdma_op ffff88807c67a1f0 conn xmit_rdma 0000000000000000 [ 465.565343][T15364] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 465.584236][T15364] bond5: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 465.600824][T15364] bond5: (slave vxcan1): making interface the new active one [ 465.609200][T15364] bond5: (slave vxcan1): Enslaving as an active interface with an up link [ 465.633339][T15377] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 465.646886][T15369] bond5 (unregistering): (slave vxcan1): Releasing backup interface [ 465.660845][T15369] bond5 (unregistering): Released all slaves [ 465.668985][T15381] netlink: 'syz.4.2477': attribute type 15 has an invalid length. [ 465.677284][T15380] netlink: 'syz.4.2477': attribute type 15 has an invalid length. [ 465.687689][T15382] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 465.968628][T15393] lo speed is unknown, defaulting to 1000 [ 466.039467][T15405] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 466.052200][T15405] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 466.060716][T15406] __nla_validate_parse: 12 callbacks suppressed [ 466.060763][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 466.247448][T15393] ip6_vti0 speed is unknown, defaulting to 1000 [ 466.779607][T15434] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 466.882430][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 466.896685][T15443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2493'. [ 466.906761][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 467.024369][T15445] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.051411][T15445] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.122863][T15433] lo speed is unknown, defaulting to 1000 [ 467.129447][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 467.153630][T15445] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.185178][T15445] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.263498][T15451] netlink: 'syz.2.2494': attribute type 4 has an invalid length. [ 467.274088][T15445] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.287569][T15445] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.338205][T15456] netlink: 'syz.2.2494': attribute type 4 has an invalid length. [ 467.436444][T15445] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.453062][T15445] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.698024][T13249] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.712238][T13249] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.805667][T13249] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.822642][T13249] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.869530][T14780] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.889174][T14780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.988647][T13249] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.017716][T13249] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.038428][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 468.077159][T15433] ip6_vti0 speed is unknown, defaulting to 1000 [ 468.289494][T15494] pim6reg: entered allmulticast mode [ 468.297978][T15493] netlink: 'syz.1.2506': attribute type 1 has an invalid length. [ 468.368877][T15493] 8021q: adding VLAN 0 to HW filter on device bond5 [ 468.404680][T15494] pim6reg: left allmulticast mode [ 468.580937][T15501] bond5: (slave veth9): Enslaving as an active interface with a down link [ 468.604402][T15504] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 468.611698][T15504] bond5: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 468.653273][T15518] netlink: 'syz.2.2510': attribute type 142 has an invalid length. [ 468.661461][T15519] netlink: 'syz.2.2510': attribute type 142 has an invalid length. [ 468.960729][T15507] veth1_to_hsr: left allmulticast mode [ 468.967887][T15507] veth1_to_hsr: left promiscuous mode [ 469.044470][T13249] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 469.060420][T13249] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 469.077365][T15514] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.090195][T15514] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.116580][T13249] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 469.135309][T13249] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 469.195467][T15514] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.219378][T15514] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.321737][T15514] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.345232][T15514] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.378232][T15549] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 469.417948][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 469.468646][T15514] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.515394][T15514] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.532415][T15559] block nbd3: server does not support multiple connections per device. [ 469.547619][T15559] block nbd3: shutting down sockets [ 469.580019][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2521'. [ 469.749693][T14780] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.776744][T14780] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.799520][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2523'. [ 469.822586][T14780] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.837704][T15573] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2522'. [ 469.842792][T14780] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.925542][T15571] bond13: entered promiscuous mode [ 469.931360][T15571] 8021q: adding VLAN 0 to HW filter on device bond13 [ 469.958643][T15571] bond13 (unregistering): Released all slaves [ 470.021888][T14780] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.030548][T14780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.068489][T14780] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.095442][T14780] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.547232][T15608] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 470.559410][T15608] bond6 (unregistering): Released all slaves [ 470.707548][T14780] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.732396][T14780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.747833][T14780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.758220][T14780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.926128][T15621] syzkaller1: entered promiscuous mode [ 470.945541][T15621] syzkaller1: entered allmulticast mode [ 471.275753][T15639] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 471.334702][T15639] __nla_validate_parse: 2 callbacks suppressed [ 471.334725][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 471.372372][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'. [ 471.628612][T15654] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2542'. [ 471.705249][T13249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.716930][T13249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.731597][T15655] lo speed is unknown, defaulting to 1000 [ 471.802543][T14781] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.843086][T14781] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.896393][T14781] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.932291][T14781] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.979666][T15655] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.023073][ T29] audit: type=1800 audit(1771370329.115:7): pid=15636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2539" name="memory.events" dev="tmpfs" ino=2333 res=0 errno=0 [ 472.080861][T15669] netlink: 'syz.3.2547': attribute type 1 has an invalid length. [ 472.099631][T15669] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2547'. [ 472.131658][T15670] tipc: Enabling of bearer rejected, failed to enable media [ 472.163495][T15669] syzkaller0: entered promiscuous mode [ 472.169028][T15669] syzkaller0: entered allmulticast mode [ 472.784362][T15686] tipc: Enabled bearer , priority 0 [ 472.833422][T15686] syzkaller0: entered promiscuous mode [ 472.842024][T15686] syzkaller0: entered allmulticast mode [ 472.876609][T15690] netlink: 'syz.0.2551': attribute type 4 has an invalid length. [ 472.908928][T15686] tipc: Resetting bearer [ 472.934640][T15685] tipc: Resetting bearer [ 472.959872][T15685] tipc: Disabling bearer [ 473.002960][T15697] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 473.191050][T15688] netlink: 'syz.3.2550': attribute type 10 has an invalid length. [ 473.233484][T15697] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.272596][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 473.335655][T15715] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2558'. [ 473.449973][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 473.589192][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 473.639853][T15729] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 473.858078][T15747] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 473.974669][T15755] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2569'. [ 474.045774][T15759] veth0: entered promiscuous mode [ 474.054003][T15761] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16) [ 474.063374][T15761] openvswitch: netlink: Message has 16 unknown bytes. [ 474.082954][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2571'. [ 474.099716][T15758] veth0: left promiscuous mode [ 474.151503][T15763] x_tables: duplicate underflow at hook 1 [ 474.184197][T15765] netlink: 'syz.3.2573': attribute type 3 has an invalid length. [ 474.210243][T15765] netlink: 'syz.3.2573': attribute type 1 has an invalid length. [ 474.249082][T15770] netlink: 'syz.3.2573': attribute type 2 has an invalid length. [ 474.516047][T15782] syzkaller0: entered promiscuous mode [ 474.526677][T15782] syzkaller0: entered allmulticast mode [ 474.752772][T15803] pim6reg: entered allmulticast mode [ 474.824270][T15808] wg0: Caught tx_queue_len zero misconfig [ 475.286377][T15835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.025606][T15891] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 476.060898][T15888] gretap3: entered allmulticast mode [ 476.070278][T15888] bond7: (slave gretap3): making interface the new active one [ 476.079060][T15888] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 477.590837][T15791] pim6reg: left allmulticast mode [ 478.550131][T15858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.769792][T15926] __nla_validate_parse: 11 callbacks suppressed [ 478.769820][T15926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2613'. [ 478.807698][T15926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2613'. [ 479.032818][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2619'. [ 479.086497][T15952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2620'. [ 479.265874][T15964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'. [ 479.479273][T15969] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.509438][ T1737] block nbd1: Possible stuck request ffff888026358000: control (read@0,4096B). Runtime 330 seconds [ 479.544976][T15973] netlink: 'syz.3.2623': attribute type 10 has an invalid length. [ 479.573222][T15969] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.658802][T15969] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.707211][T15969] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.745260][T15986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2627'. [ 479.754773][T15986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2627'. [ 480.084461][T15969] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.142885][T15969] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.221736][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 480.258088][T16009] netlink: 'syz.4.2632': attribute type 10 has an invalid length. [ 480.351395][T15969] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.434275][T15969] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.566913][T14780] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.583283][T14780] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.656091][ T48] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.668853][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.756947][ T48] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.766526][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2639'. [ 480.779801][ T48] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.837473][T16018] lo speed is unknown, defaulting to 1000 [ 480.960041][T16034] 8021q: adding VLAN 0 to HW filter on device bond13 [ 481.002692][ T48] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.015586][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.039465][T16036] bond13: option miimon: invalid value (18446744071562067968) [ 481.079255][T16036] bond13: option miimon: allowed values 0 - 2147483647 [ 481.201072][T16056] netlink: 'syz.2.2643': attribute type 29 has an invalid length. [ 481.243376][T16056] netlink: 'syz.2.2643': attribute type 29 has an invalid length. [ 481.286450][T16057] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2643'. [ 481.291173][T16018] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.403093][T16071] openvswitch: netlink: Message has 16 unknown bytes. [ 481.527379][T16076] x_tables: duplicate underflow at hook 1 [ 482.187278][T16126] netlink: 'syz.4.2665': attribute type 5 has an invalid length. [ 482.203926][T16127] netlink: 'syz.4.2665': attribute type 5 has an invalid length. [ 482.422544][T16130] lo speed is unknown, defaulting to 1000 [ 482.809237][T16148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.151962][T16158] netlink: 'syz.3.2676': attribute type 10 has an invalid length. [ 483.164712][T16158] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 483.175859][T16158] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 483.202197][T16158] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 483.267323][T16130] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.404831][T16171] netlink: 'syz.0.2680': attribute type 1 has an invalid length. [ 483.422764][T16171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.613405][T16171] geneve3: entered promiscuous mode [ 483.642761][T16171] geneve3: entered allmulticast mode [ 483.902676][T16190] 8021q: adding VLAN 0 to HW filter on device bond14 [ 484.160658][T16205] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 484.184810][T16207] netlink: 'syz.1.2689': attribute type 1 has an invalid length. [ 484.226882][T16207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.413369][T16217] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 484.592659][T16217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.836906][T16234] __nla_validate_parse: 6 callbacks suppressed [ 484.836925][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 484.911529][T16245] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 485.213200][T16263] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2708'. [ 485.233986][T16263] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2708'. [ 485.324412][T16269] x_tables: duplicate underflow at hook 1 [ 485.342929][T16269] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2711'. [ 485.364547][T16271] tipc: Enabled bearer , priority 0 [ 485.372857][T16271] syzkaller0: entered promiscuous mode [ 485.378362][T16271] syzkaller0: entered allmulticast mode [ 485.423721][T16271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2710'. [ 485.518498][T16271] tipc: Resetting bearer [ 485.556789][T16270] tipc: Resetting bearer [ 485.585580][T16270] tipc: Disabling bearer [ 485.627733][T16287] netlink: 'syz.2.2716': attribute type 3 has an invalid length. [ 485.751438][T16293] netlink: 'syz.3.2719': attribute type 2 has an invalid length. [ 485.759576][T16293] netlink: 'syz.3.2719': attribute type 2 has an invalid length. [ 485.856363][T16299] lo speed is unknown, defaulting to 1000 [ 485.877998][T16302] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2720'. [ 485.896966][T16303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.908097][T16302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2720'. [ 485.973500][T16306] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2720'. [ 486.037954][T16309] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2724'. [ 486.214256][T16319] xt_connbytes: Forcing CT accounting to be enabled [ 486.260363][T16325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2728'. [ 486.267226][T16324] netlink: 'syz.2.2726': attribute type 6 has an invalid length. [ 486.281586][T16326] netlink: 'syz.1.2727': attribute type 13 has an invalid length. [ 486.526671][T16299] ip6_vti0 speed is unknown, defaulting to 1000 [ 486.860977][T16353] bond0: Caught tx_queue_len zero misconfig [ 486.896955][T16353] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 487.111816][T16365] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 487.332778][T16374] syzkaller0: entered promiscuous mode [ 487.338415][T16374] syzkaller0: entered allmulticast mode [ 487.351443][T16370] tunl0: Caught tx_queue_len zero misconfig [ 487.516714][T16362] lo speed is unknown, defaulting to 1000 [ 487.875429][T16384] 8021q: adding VLAN 0 to HW filter on device bond15 [ 488.120176][T16396] FAULT_INJECTION: forcing a failure. [ 488.120176][T16396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.133679][T16396] CPU: 1 UID: 0 PID: 16396 Comm: syz.3.2746 Not tainted syzkaller #0 PREEMPT(full) [ 488.133709][T16396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.133731][T16396] Call Trace: [ 488.133740][T16396] [ 488.133749][T16396] dump_stack_lvl+0xe8/0x150 [ 488.133785][T16396] should_fail_ex+0x412/0x560 [ 488.133821][T16396] _copy_from_user+0x2d/0xb0 [ 488.133844][T16396] __sys_bpf+0x229/0x950 [ 488.133872][T16396] ? __pfx___sys_bpf+0x10/0x10 [ 488.133914][T16396] ? ksys_write+0x242/0x270 [ 488.133943][T16396] ? __pfx_ksys_write+0x10/0x10 [ 488.133976][T16396] __x64_sys_bpf+0x7c/0x90 [ 488.133999][T16396] do_syscall_64+0x14d/0xf80 [ 488.134026][T16396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.134045][T16396] ? trace_irq_disable+0x37/0x100 [ 488.134069][T16396] ? clear_bhb_loop+0x40/0x90 [ 488.134094][T16396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.134119][T16396] RIP: 0033:0x7f97d679c629 [ 488.134138][T16396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.134157][T16396] RSP: 002b:00007f97d762d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 488.134180][T16396] RAX: ffffffffffffffda RBX: 00007f97d6a15fa0 RCX: 00007f97d679c629 [ 488.134195][T16396] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 488.134209][T16396] RBP: 00007f97d762d090 R08: 0000000000000000 R09: 0000000000000000 [ 488.134222][T16396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.134235][T16396] R13: 00007f97d6a16038 R14: 00007f97d6a15fa0 R15: 00007ffdd7253788 [ 488.134269][T16396] [ 488.373383][T16362] ip6_vti0 speed is unknown, defaulting to 1000 [ 488.468592][T16406] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 488.722939][T16418] syzkaller0: entered allmulticast mode [ 489.054064][T16443] FAULT_INJECTION: forcing a failure. [ 489.054064][T16443] name failslab, interval 1, probability 0, space 0, times 0 [ 489.099682][T16443] CPU: 0 UID: 0 PID: 16443 Comm: syz.4.2759 Not tainted syzkaller #0 PREEMPT(full) [ 489.099713][T16443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.099726][T16443] Call Trace: [ 489.099734][T16443] [ 489.099742][T16443] dump_stack_lvl+0xe8/0x150 [ 489.099776][T16443] should_fail_ex+0x412/0x560 [ 489.099811][T16443] should_failslab+0xa8/0x100 [ 489.099843][T16443] __kmalloc_noprof+0xe8/0x760 [ 489.099870][T16443] ? bpf_test_init+0x9f/0x150 [ 489.099894][T16443] bpf_test_init+0x9f/0x150 [ 489.099918][T16443] bpf_prog_test_run_xdp+0x529/0x1160 [ 489.099955][T16443] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 489.099983][T16443] ? __fget_files+0x2a/0x420 [ 489.100009][T16443] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 489.100031][T16443] bpf_prog_test_run+0x2c7/0x340 [ 489.100063][T16443] __sys_bpf+0x643/0x950 [ 489.100091][T16443] ? __pfx___sys_bpf+0x10/0x10 [ 489.100132][T16443] ? ksys_write+0x242/0x270 [ 489.100160][T16443] ? __pfx_ksys_write+0x10/0x10 [ 489.100193][T16443] __x64_sys_bpf+0x7c/0x90 [ 489.100216][T16443] do_syscall_64+0x14d/0xf80 [ 489.100249][T16443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.100269][T16443] ? trace_irq_disable+0x37/0x100 [ 489.100293][T16443] ? clear_bhb_loop+0x40/0x90 [ 489.100317][T16443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.100344][T16443] RIP: 0033:0x7fba2839c629 [ 489.100363][T16443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.100380][T16443] RSP: 002b:00007fba29189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.100402][T16443] RAX: ffffffffffffffda RBX: 00007fba28615fa0 RCX: 00007fba2839c629 [ 489.100417][T16443] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 489.100430][T16443] RBP: 00007fba29189090 R08: 0000000000000000 R09: 0000000000000000 [ 489.100443][T16443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.100456][T16443] R13: 00007fba28616038 R14: 00007fba28615fa0 R15: 00007ffc100bb738 [ 489.100490][T16443] [ 489.351843][T16440] syzkaller1: entered promiscuous mode [ 489.357918][T16440] syzkaller1: entered allmulticast mode [ 489.766878][ T30] INFO: task kworker/0:0H:11 blocked for more than 143 seconds. [ 489.782508][ T30] Not tainted syzkaller #0 [ 489.788042][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 489.797695][ T30] task:kworker/0:0H state:D stack:26536 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 489.810728][T16472] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004 [ 489.818844][ T30] Workqueue: kblockd blk_mq_requeue_work [ 489.826677][ T30] Call Trace: [ 489.830226][ T30] [ 489.833508][ T30] __schedule+0x1568/0x5290 [ 489.838656][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 489.844324][ T30] ? __pfx___schedule+0x10/0x10 [ 489.849427][ T30] ? schedule+0x90/0x360 [ 489.869036][ T30] schedule+0x164/0x360 [ 489.879150][ T30] schedule_timeout+0x158/0x2c0 [ 489.889959][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 489.904722][ T30] ? __pfx_process_timeout+0x10/0x10 [ 489.911240][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 489.917482][ T30] ? prepare_to_wait_event+0x436/0x480 [ 489.923407][ T30] nbd_queue_rq+0x857/0x1100 [ 489.928221][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 489.933818][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 489.940297][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 489.946662][ T30] ? sbitmap_get+0x229/0x390 [ 489.951688][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 489.958850][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 489.966384][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 489.974667][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 489.981647][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 489.990530][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 489.999358][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 490.005426][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 490.011581][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 490.017590][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 490.023171][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 490.028644][ T30] blk_mq_requeue_work+0x71c/0x780 [ 490.034644][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 490.040553][ T30] ? process_scheduled_works+0xa0f/0x17a0 [ 490.047042][ T30] ? process_scheduled_works+0xa0f/0x17a0 [ 490.053470][ T30] process_scheduled_works+0xaec/0x17a0 [ 490.059245][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 490.065877][ T30] ? assign_work+0x3d5/0x5e0 [ 490.070792][ T30] worker_thread+0xa50/0xfc0 [ 490.076008][ T30] kthread+0x388/0x470 [ 490.080246][ T30] ? __pfx_worker_thread+0x10/0x10 [ 490.086285][ T30] ? __pfx_kthread+0x10/0x10 [ 490.091230][ T30] ret_from_fork+0x51e/0xb90 [ 490.097384][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 490.103332][ T30] ? __switch_to+0xc7d/0x1400 [ 490.108304][ T30] ? __pfx_kthread+0x10/0x10 [ 490.113425][ T30] ret_from_fork_asm+0x1a/0x30 [ 490.118481][ T30] [ 490.121896][ T30] [ 490.121896][ T30] Showing all locks held in the system: [ 490.130404][T16471] veth0: entered promiscuous mode [ 490.138442][ T30] 4 locks held by kworker/0:0H/11: [ 490.144079][ T30] #0: ffff88801fac8548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 490.155711][ T30] #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 490.187120][ T30] #2: ffff888025b79218 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 490.205306][ T30] #3: ffff888026318380 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 490.215166][ T30] 1 lock held by khungtaskd/30: [ 490.220203][ T30] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 490.230816][ T30] 4 locks held by kworker/u8:6/1326: [ 490.236577][ T30] 2 locks held by getty/5577: [ 490.241534][ T30] #0: ffff888036cb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 490.252263][ T30] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 490.263014][ T30] 1 lock held by udevd/5875: [ 490.267779][ T30] #0: ffff88802624a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 490.277759][ T30] 1 lock held by udevd/5878: [ 490.282893][ T30] #0: ffff88802622e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 490.302497][ T30] 1 lock held by syz.4.2762/16457: [ 490.311226][ T30] #0: ffffffff8e764200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 490.334164][ T30] 2 locks held by syz.3.2765/16474: [ 490.346310][ T30] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 490.359260][ T30] #1: ffffffff8e764338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 490.370887][ T30] [ 490.373937][ T30] ============================================= [ 490.373937][ T30] [ 490.376080][T16474] veth0 (unregistering): left promiscuous mode [ 490.387416][ T30] NMI backtrace for cpu 1 [ 490.387489][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 490.387545][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.387576][ T30] Call Trace: [ 490.387598][ T30] [ 490.387626][ T30] dump_stack_lvl+0xe8/0x150 [ 490.387714][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 490.387768][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 490.387839][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 490.387902][ T30] sys_info+0x135/0x170 [ 490.387970][ T30] watchdog+0xf90/0xfe0 [ 490.388052][ T30] ? watchdog+0x209/0xfe0 [ 490.388128][ T30] kthread+0x388/0x470 [ 490.388209][ T30] ? __pfx_watchdog+0x10/0x10 [ 490.388265][ T30] ? __pfx_kthread+0x10/0x10 [ 490.388342][ T30] ret_from_fork+0x51e/0xb90 [ 490.388406][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 490.388478][ T30] ? __switch_to+0xc7d/0x1400 [ 490.388548][ T30] ? __pfx_kthread+0x10/0x10 [ 490.388621][ T30] ret_from_fork_asm+0x1a/0x30 [ 490.388752][ T30] [ 490.388860][ T30] Sending NMI from CPU 1 to CPUs 0: [ 490.504073][ C0] NMI backtrace for cpu 0 [ 490.504092][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 490.504112][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.504123][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 490.504152][ C0] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 490.504167][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 490.504183][ C0] RAX: 00000000001a0461 RBX: ffffffff8199661d RCX: 0000000080000001 [ 490.504195][ C0] RDX: 0000000000000001 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 490.504208][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 490.504221][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 490.504234][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 490.504245][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 490.504259][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.504271][ C0] CR2: 000000110c3bcac3 CR3: 0000000033a9e000 CR4: 00000000003526f0 [ 490.504294][ C0] Call Trace: [ 490.504301][ C0] [ 490.504310][ C0] default_idle+0x9/0x20 [ 490.504336][ C0] default_idle_call+0x72/0xb0 [ 490.504362][ C0] do_idle+0x1bd/0x500 [ 490.504382][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 490.504406][ C0] ? __pfx_do_idle+0x10/0x10 [ 490.504431][ C0] cpu_startup_entry+0x43/0x60 [ 490.504450][ C0] rest_init+0x2de/0x300 [ 490.504467][ C0] start_kernel+0x380/0x3d0 [ 490.504489][ C0] x86_64_start_reservations+0x24/0x30 [ 490.504515][ C0] x86_64_start_kernel+0x143/0x1c0 [ 490.504539][ C0] common_startup_64+0x13e/0x147 [ 490.504574][ C0] [ 490.691101][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 490.698002][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 490.707194][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.717285][ T30] Call Trace: [ 490.720591][ T30] [ 490.723546][ T30] vpanic+0x1e0/0x670 [ 490.727574][ T30] panic+0xc5/0xd0 [ 490.731331][ T30] ? __pfx_panic+0x10/0x10 [ 490.735787][ T30] watchdog+0xfda/0xfe0 [ 490.739988][ T30] ? watchdog+0x209/0xfe0 [ 490.744346][ T30] kthread+0x388/0x470 [ 490.748465][ T30] ? __pfx_watchdog+0x10/0x10 [ 490.753183][ T30] ? __pfx_kthread+0x10/0x10 [ 490.757809][ T30] ret_from_fork+0x51e/0xb90 [ 490.762434][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 490.767572][ T30] ? __switch_to+0xc7d/0x1400 [ 490.772278][ T30] ? __pfx_kthread+0x10/0x10 [ 490.776907][ T30] ret_from_fork_asm+0x1a/0x30 [ 490.781719][ T30] [ 490.785384][ T30] Kernel Offset: disabled [ 490.789718][ T30] Rebooting in 86400 seconds..