last executing test programs: 3m24.463080637s ago: executing program 0 (id=2952): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108c000000000004efffffff0000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=@delchain={0x38, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfffb}, {}, {0xb, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8808}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100001040000000000000000000000007ef5ad197ef9f9d7f1966967a077ffcca7af7cfdc04ec0e4f4b111f591ec6babf2891dbccb6ec84c8898cd4332ea87a9ab119e268f949a137f0fae0741d2ec95cc4e0c3a4200b18e56454a852e4b156e85e52bd15654fff27fac2800ee65b1bc9e62dd0f8a28089626934e79a2511096daf0699fe562b6cac81cb98dcba7372d786a4b40", @ANYRES32=0x0, @ANYBLOB="000000000000000004001a8008001e0000000100140012800b000100697036746e6c000004000280"], 0x40}}, 0x0) 3m23.99218796s ago: executing program 0 (id=2958): unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3m23.924229158s ago: executing program 0 (id=2959): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {0xe, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xa2}, @generic={0xa7, 0x0, 0x0, 0x0, 0x6}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x35}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000680)="b8b2822503000000000000008100", 0xe}], 0x1}, 0x24000000) 3m23.617333599s ago: executing program 0 (id=2964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000000)={0x3, 0x6, 0x1000, &(0x7f0000000d80)=""/4096}) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x140, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0x0, 0xff000000], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0x3b, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x5, 0x1, [0x8, 0x2, 0x1, 0x3, 0x9, 0x1, 0x8, 0x100, 0x273, 0x9, 0x6, 0x6, 0x5, 0x6, 0x800, 0xffff], 0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x2, 0x0, 0x0, 0x0, @loopback, @private0, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], [0xffffff, 0x0, 0xff000000, 0xffffffff], 0x6d3784e3f74c6113, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x15, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000000)={0x3, 0x6, 0x1000, &(0x7f0000000d80)=""/4096}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x140, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0x0, 0xff000000], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0x3b, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x5, 0x1, [0x8, 0x2, 0x1, 0x3, 0x9, 0x1, 0x8, 0x100, 0x273, 0x9, 0x6, 0x6, 0x5, 0x6, 0x800, 0xffff], 0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x2, 0x0, 0x0, 0x0, @loopback, @private0, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], [0xffffff, 0x0, 0xff000000, 0xffffffff], 0x6d3784e3f74c6113, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendto$inet6(r4, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) (async) getsockopt$bt_hci(r4, 0x84, 0x15, 0x0, &(0x7f0000000000)) (async) 3m23.144164769s ago: executing program 0 (id=2968): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010008000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000980), &(0x7f00000008c0)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c042000000000000140006000000000000007468000000000400028008001300", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f00000002c0)=""/143, 0x8f}, {&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000480)=""/101, 0x65}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000580)=""/68, 0x44}], 0x8}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000003580)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e21, @multicast1}, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x22da7109, 0x1000}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 3m22.761930979s ago: executing program 0 (id=2971): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) 3m7.181108656s ago: executing program 32 (id=2971): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) 2m30.347235643s ago: executing program 2 (id=3505): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x73}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="2795aa4eed06004800450000280068000000019078ac1414bbac1414aa0e00947800050101000000050000004900000007"], 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000020000000000000018e8ffff1f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x5}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000048, 0x8, 0x5, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xfff}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4084080}, 0x24000850) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000200)=[{&(0x7f00000022c0)="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"}, {&(0x7f0000000140)="c79f7cb6604d4facdcb158a20adf7b36a87fffdd2213a4990dd83140edcd06dd727bcae293c0f450e4bc4d927302f0d4ea4eab40a1f6d4"}, {&(0x7f0000000440)="58fdbfc0c486e743d9307f2780055dcb8a9a9577628327ed7c745ed4630d0635b054f5f7c758a5798bd3d452b25e8e93155214d30f67657373ac74c38cccfec0e80664c86607d95bcdcadeaf16a2abce87051f25f240e681c2e50a644c04"}, {&(0x7f0000000940)="32c61454eaa0752233069f86b39773a9c7fb6a4dc7729a7b68e663fa1aa4a9cfe1487a0d067f2be96c574528773bf8bc58b267652cb7c51e10e205262b64841e09b63e713d1cfa737bbf70fba5f2a03408aae78145078a5255f2f41ef4e8a883409bf5184ee5a139c11a20fbbb84d8fcbc0be925ef7b9fb760400f948ea98d3735d93b34c94439ed406e531409bd0ae4ca71fbb5872f774fa89af54d0dd66ca0e33bc0dac6e3d9144fb674b65b4993a4fc2686c0a3ed2cd0d0e69449dd2dabf0ceba89f592914558bcae12d3b9c0b48e047e56e2dd3c312b6640059d84e1457f498f"}], 0xfffffffffffffd2}, 0x4) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) 2m29.792614171s ago: executing program 2 (id=3517): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c75710304e2040045800400011db103c1d55386c1f9873f08947e7910988401347c90e5ad142e7521ce6abc8adab3a903aaf0d2dc2264603b0fa8c2dbf6e4ddb284b0876e6b48205423107a8aaaa392c19bfe9b8c4b9ec7c1348ffcd5b4de4108cf90305b2d14241c14f5dbdf3aac4c81ec6e1683d4aa5b3c393e365195550b3d1c1e39ed52204d9efcc106eeb023eef158e47ed086522edacc3b77d75aa37a9e4b9092b7852fd1ac50e5f9826287ea1423d28577f3227bcf845bf51f0000000000000000000000000000b32a9970d9f36de0da06a4a1f2478bf7f8c771ea632c692e8f76d7ffd25b9e3e544f9966d15b1a869cdb1ba08f73ca62eab69fb625dad244614ab0f95b356a55ee67e50fa55e2e18a467e97ad6092f123c5284b1249a240d1c4bf41578b76562ba84b778cdf07a9ef82fec12eb10db49cefac22b3163061178dc8b22bb8b1f4b450ae8b0608a22e8ccb22d35045953ad81939b33d5a79b0ae2be610dd7efa4645622d11ff4229a7b46807c12f159eba3e65edc"], 0x1c}}, 0xc000) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001280)={0xcd0, r5, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x11, 0x30, 0x3, 0x4, 0xc7fe140f4b92e63b, 0x1b, 0x9, 0x16, 0x3a, 0x1b, 0x16, 0x9, 0x24, 0x30, 0x9, 0x12, 0x30, 0x6, 0x5, 0x5, 0x9, 0x4, 0x60, 0x1, 0x12, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfbc, 0x0, 0x5, 0x2, 0xd, 0x5, 0x7f, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x9, 0x8, 0x31dc, 0x100, 0x9, 0x400]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x388, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x1, 0x401, 0x6, 0x6, 0x7, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x7, 0x401, 0x81, 0x4, 0x101, 0xf1a]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x30, 0x48, 0x30, 0x48, 0x1b, 0xc, 0x1b, 0x68, 0x30, 0x1c, 0x1b, 0x18, 0x0, 0x4, 0x30, 0x6c, 0x2, 0x9, 0x36]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x9}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0xa}, {0x5, 0xa}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x3, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0xa}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x8}, {0x2}, {0x4, 0x6}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x2}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x5}, {0x6, 0x9}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x5, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x2, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc5, 0x10, 0x2, 0x8, 0x5, 0x8, 0xde, 0x6]}}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x1, 0x4, 0x2, 0x36, 0x36, 0x60, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xffff, 0x0, 0x9, 0x800, 0x5, 0x7f, 0x4]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x8}, {0x3, 0xa}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x2}, {0x6, 0x4}, {0x2, 0x8}, {0x3, 0x9}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x5, 0x6}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x9}, {0x2, 0x8}, {0x1, 0xb}, {0x4, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0x2}, {0x6}, {0x3, 0x2}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0xa}, {0x5, 0x1}, {0x7}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x3, 0x1}, {0x7, 0x9}, {0x2, 0x1}, {0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x3, 0x2}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x0, 0x8, 0x7, 0x8, 0x1, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x2}, {0x3, 0x4}, {0x5, 0x1}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x0, 0x2}, {0x4, 0x5}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x4}, {0x3, 0x5}, {0x7, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x6, 0x8}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x3, 0x4}, {}, {0x6, 0x1}, {0x0, 0x8}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x36, 0x24, 0x18, 0x36, 0x9, 0x0, 0x1, 0x3, 0x5, 0x18, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x400, 0x1, 0x9, 0x100, 0x14, 0x0, 0x1]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x36, 0x24, 0x1, 0x9, 0x36, 0x30, 0x0, 0x11, 0x6c, 0xb, 0x12, 0x3, 0x16, 0x60, 0x3, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x60, 0x4, 0x6c, 0x5, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x2}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x3, 0x4}, {0x5, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x4}, {0x4}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x3, 0xa}, {0x2, 0x9}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x1}, {0x5, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfa7, 0x3b38, 0x800, 0x6, 0x7, 0xa, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc0e6, 0x6, 0x216, 0xc, 0x4, 0x7f, 0x8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x24, 0xc, 0x36, 0x6c, 0x18, 0x30, 0x16, 0x24, 0x48, 0x9, 0x6c, 0x12, 0xc, 0x64, 0x3, 0x5, 0x5, 0x16, 0xc, 0xb, 0x6, 0x2, 0x16, 0xc, 0x36, 0x6, 0x2]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0x18, 0x4, 0x60, 0x6, 0x9, 0x48, 0x5, 0x48, 0x6c, 0x9, 0x16, 0x1b, 0x12, 0x1b, 0x9, 0x48, 0x3a, 0x6, 0x6c, 0x18, 0x1, 0x48, 0x2, 0x1]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x9, 0xc2, 0x8001, 0x7, 0x9, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x5}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x7}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x6}, {0x2, 0x9}, {0x1, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0x4}, {0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x1a}, {0x6, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x5, 0xb]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x2}, {0x6}, {0x4, 0x2}, {0x1, 0x4}, {0x4, 0x4}, {0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0x9}, {0x6, 0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x6, 0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x2, 0xa}, {0x5, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x7, 0x4}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x5}, {0x5, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x4}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x5, 0xa}, {0x5, 0x6}, {0x3, 0xa}, {0x3, 0x1}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3, 0x9, 0xff, 0x2, 0x1, 0x4, 0xff38]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x4, 0xa}, {0x7, 0x2}, {0x3, 0x9}, {0x4}, {0x1, 0x4}, {0x2, 0x3}, {0x5}, {0x7, 0x8}, {0x0, 0x2}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x8}, {0x2, 0x7}, {0x6, 0x3}, {0x7, 0x7}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x2}, {0x5, 0x6}, {0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0x7}, {0x4, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1}, {0x5, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x252, 0x3, 0x5, 0x7, 0x8000, 0x6]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x1, 0x69c8, 0x80, 0x4, 0x5017, 0x9e11]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x2}, {0x5, 0x2}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x5, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2b, 0xf, 0x4, 0x1, 0x1, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x2, 0x3, 0x100, 0x1, 0x589, 0x6]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2f, 0x0, 0x5, 0x2, 0x9, 0x4, 0x400, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x0, 0x0, 0x8, 0xa487, 0x3, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x0, 0x4, 0x6, 0x4, 0x3, 0x4]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x16, 0x16, 0x60, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf1da, 0x2, 0x3, 0x16, 0x4, 0x8, 0x5, 0x8]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x9}, {0x5, 0x4}, {0x3, 0x8}, {0x3, 0x9}, {0x3, 0xa}, {}, {0x0, 0x3}, {0x1, 0x5}, {0x1}, {0x7, 0x4}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x4, 0x2}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x2}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0x6}, {0x3}, {0x5, 0x5}, {0x7, 0xa}, {0x7}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x8}, {0x5}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x6}, {0x7, 0xa}, {0x6, 0x4}, {}, {0x6, 0x8}, {0x7, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x4}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0xfffb, 0x2, 0x9065, 0x8, 0x0, 0x9, 0x7ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfe, 0x4, 0x1034, 0x9, 0x9e5, 0x9, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x2, 0x4, 0xc, 0x36, 0x18, 0x18, 0x24, 0xc, 0x18, 0x9, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x8}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x4}, {0x5, 0x7}, {0x4, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x5, 0x3}, {0x5, 0xb}, {0x0, 0x7}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0xa}, {0x3, 0x3}, {0x6, 0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0x5}, {0x6, 0x5}, {0x5, 0x4}, {0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x7}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x3, 0x60, 0x24, 0x6c, 0x12, 0x48, 0x1b, 0x12, 0xb, 0x9, 0x3, 0x9f7cff67959401c5, 0x2, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x6}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x6, 0x9}, {0x7, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x7, 0x5}, {0x5, 0x6}, {0x2, 0x4}, {0x3}, {0x5, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x4, 0x5}, {0x7, 0x4}, {0x7}, {0x7}, {0x2, 0x6}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x9fd9, 0x2, 0x0, 0xb96, 0x2, 0x3ff]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x8}, {0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x2, 0x5}, {0x6, 0x6}, {0x3, 0x7}, {0x5, 0x8}, {0x6, 0x5}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x2}, {0x6, 0x8}, {0x3, 0x5}, {0x1}, {0x7, 0x2}, {0x2, 0x7}, {0x3, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x2, 0x2}, {0x1, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x3b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x2, 0x730d, 0xfff8, 0x40, 0x6, 0x5a, 0x80]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x6, 0x12, 0x1b, 0x6c, 0x5, 0x6c, 0x2, 0x4, 0x6a, 0x12, 0x1b, 0x3, 0x7d, 0x5, 0x1b, 0x4, 0x60, 0x4, 0x30, 0x6c, 0xc, 0x2, 0x1, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf0b7, 0x10, 0x2b5c, 0x7, 0xf, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x6, 0xffff, 0x1e, 0x3, 0x7ff, 0x4c9]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0xa}, {0x0, 0x8}, {}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x7}, {0x3}, {0x4}, {0x4}, {0x2, 0x8}, {0x6}, {}, {0x4, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0xa}, {0x3}, {0x1, 0x7}, {0x5}, {0x6, 0x1}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x9, 0x6, 0x0, 0x8, 0x4, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5}, {0x6, 0x5}, {0x5, 0x4}, {0x7, 0x4}, {0x7, 0x9}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x8}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x5}, {0x2, 0x5}, {0x2}, {0x4, 0x3}, {0x2, 0xa}, {0x7, 0x2}, {}, {0x0, 0x9}, {0x1, 0xa}, {0x7, 0x5}, {}, {0x3, 0x8}, {0x6, 0x3}, {0x2, 0xa}, {0x5, 0x8}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x2, 0xa}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0x7}, {}, {0x3}, {0x7, 0x8}, {0x5, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x1}, {0x2, 0x7}, {0x0, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x64, 0x16, 0xb, 0x30, 0x24, 0x12, 0x9, 0x6c, 0x9, 0x6c, 0x18, 0x5, 0x3, 0x60, 0x30, 0x2, 0x6, 0x4e]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa2, 0x0, 0x0, 0x7, 0x80, 0x3, 0x200, 0xfe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x4, 0xd, 0x3, 0x78f0, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xd, 0x5, 0x4, 0xc, 0x36, 0xc, 0x60, 0x36, 0x16, 0x3c, 0x48, 0xb, 0x30, 0x30, 0x1, 0x2, 0x24, 0x9, 0xb, 0x24, 0x5, 0x0, 0x24, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x30, 0xc, 0x4, 0x16, 0x1, 0x60, 0x9, 0x48, 0x6c, 0x6c, 0x28a1cb360f6bda6, 0xdc42b5e82a527e4, 0x18, 0x12, 0x3, 0x18, 0x9, 0x63]}]}, @NL80211_BAND_2GHZ={0x114, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xda, 0x8, 0x6, 0x5, 0x0, 0x2045, 0x3, 0xeb46]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x30, 0x48, 0xb, 0x6c, 0x48, 0x1, 0x6c, 0x9, 0x30, 0x6, 0x60, 0x9, 0x60, 0x3, 0xb, 0x36, 0x1b, 0x4, 0x6c, 0x18, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x6c, 0x24, 0x30, 0x6, 0x16, 0x36, 0x2, 0x6, 0x18, 0xc, 0x12, 0x30, 0x4, 0x12, 0x3, 0x18, 0x6, 0x16, 0x2, 0x48, 0x60, 0x18, 0x30, 0x1, 0x30, 0x36, 0x22, 0x16, 0xb, 0x48, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0xfffb, 0x5980, 0x1, 0xc, 0x100, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0x1, 0x9, 0xfff, 0xc1c, 0xfffc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb7, 0x3b6e, 0x3, 0x3, 0x0, 0xb, 0xf, 0x40]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x9}, {0x3}, {0x4, 0x6}, {0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x7, 0x6}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0x5}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0xa}, {0x3, 0x1}, {0x3, 0x2}, {}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x9}, {0x1, 0x9}, {0x5, 0x5}, {0x6, 0x9}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x1}, {0x4, 0x8}, {0x2, 0x6}, {0x6}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x4}, {}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x4}, {0x6, 0xa}, {0x7, 0x5}, {0x6, 0x4}, {0x6, 0x5}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3}, {0x5, 0x9}, {0x4, 0x3}, {0x6, 0xa}, {0x5, 0xa}, {0x0, 0x8}, {0x3, 0x4}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x4}, {0x4}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x6, 0x6}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x3, 0x4}, {0x1}, {0x4, 0x3}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x7}, {0x4, 0x7}, {0x3, 0x1}, {0x3, 0x9}, {0x4, 0x1}, {0x2, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x3, 0x10}, {0x0, 0x8}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x200, 0xb, 0x8, 0x3, 0xffff, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x0, 0xa, 0x4, 0x5, 0x6, 0x9]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x28}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x3, 0xb8, 0x8, 0x5, 0x0, 0x1, 0x95]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0x1, 0x0, 0x8, 0x40, 0x27]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x216e, 0x1, 0x3, 0x8, 0x2, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x0, 0x32, 0x30, 0x60, 0x3, 0x1b, 0x6c, 0x48, 0x60, 0x48, 0x1b, 0x6c, 0x48, 0x7b, 0x30, 0x2, 0x6c, 0x60, 0x5, 0x18, 0x6c, 0x4, 0x36, 0x6c, 0x6, 0x9, 0x48, 0xc, 0xb, 0x6, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5573, 0xfff, 0x827, 0xd, 0x80, 0x0, 0xddf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x8, 0xf, 0xc8, 0x7f, 0x1, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x9, 0x7, 0x80, 0x6, 0xf122, 0x5d]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd22e, 0x7f, 0x5, 0x71f, 0x8, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x8}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x3, 0x2}, {0x4, 0x1}, {0x3, 0x9}, {0x1, 0x9}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x6}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x5}, {0x1}, {0x2, 0x5}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x2, 0x5}, {0x5, 0xa}, {0x6, 0x9}, {0x3, 0x9}, {0x4, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x3, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x2, 0x5}, {0x6, 0x3}, {0x5, 0xa}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x159e, 0x400, 0x7, 0x2, 0xf, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x100, 0x7, 0x1, 0x3, 0xe00d, 0x7fff, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x38, 0xb, 0xc, 0x5, 0x12, 0x60, 0x1, 0x2, 0xc, 0x30, 0x36, 0x0, 0x2, 0x2, 0x3, 0x16, 0x18, 0x9, 0x36, 0x9, 0x2, 0x1, 0x1, 0x1, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x2, 0x5, 0xf, 0xb, 0x6c4e, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x36, 0x12, 0x12, 0x30, 0xb, 0x1b, 0x1b, 0x60, 0x48, 0x36, 0x3, 0x16, 0x2, 0x6c, 0x7, 0xb, 0x4, 0x36, 0x12, 0x64, 0x24, 0xb, 0x2, 0x16, 0x1b, 0x5, 0x60, 0x3, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x24, 0x4, 0x48, 0x60, 0x4, 0x9, 0x6c, 0x1b]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xfff, 0x100, 0x5, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3}, {0x4, 0x2}, {0x2, 0x4}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0x5}, {0x4, 0x4}, {0x1, 0x5}, {0x2, 0x6}, {}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0x1}, {0x7, 0x7}, {0x2, 0x9}, {0x5, 0x3}, {0x5, 0x7}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x8}, {0x3}, {0x4, 0x1}, {0x1}, {0x0, 0x5}, {0x5, 0x8}, {0x2, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x2, 0x3, 0x7, 0x0, 0x9ae, 0x6, 0x8790]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc4f0, 0x0, 0x4, 0x1400, 0x4, 0x5, 0x6, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x8, 0x4, 0x9, 0x8, 0x80, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x900c, 0x0, 0x6, 0x847, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0xcd0}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001000001c1800018014000200776c616e30000000000000000000000008000c0006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000010c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001080)={&(0x7f0000000480)={0x40, r8, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x86) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000010}, 0x8084) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xb70, 0x30, 0x51b, 0x0, 0x0, {}, [{0x4}, {0x4d0, 0x1, [@m_sample={0x104, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4, 0x20000000, 0x4, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0xb6, 0x6, "0df6aa0dc4c3b3d6fb8d00c6c94f80f9de6a50b607c592bf9e67d27a295e5d88c798f7531b61ab31526ba65bbe52f2e5504f7adef19ee054eea6a5da9dd0af66f5042b356b6a17d097132f56e62c2118aa8c563914258c6031e12501d48d951bfb3cc77c27d5fef4c61de0127a618554825a18b744f0cc2b48dfa42496103687bfdf2dd8949fcaa614785374b11acc7cba320da55bb9514c617609fab293e310f894c7474487486db7d1a651206145059ff7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xdc, 0x14, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x1000, 0x5, 0xca7, 0xf}}]}, {0x99, 0x6, "ead972a2a7ef7d09780074a5bcb88563d74616d2c6c875b587994f9df9129e2dbdae19366b29b5c3255a87d25654e82b30eba9d629db1349911382f60fba4b7bd06e22ffa4c7d7906499d9258b97c9a2772c894d4138ac9fbdef533c537d7d82f248a5645e1a36f7bfed3ced04a5b1a305388fa556136fbeab445af876cffa7dcf1c87d233a9e8374c8892849780d8a8062f6c4a0d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x70, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x22, 0x6, "26853e4f5b97b77f9772c73a90b5647465ff9b4496b683811b39477fb665"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x14c, 0x13, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x81, 0x5, 0x1000, 0x1}, 0x0, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8, 0x6, 0x8, 0xd7e}, 0x7, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0xda, 0x10000004, 0x5, 0x73d}, 0x0, r10}}]}, {0xbe, 0x6, "2c786b636315239f655a66de1fe355b5ce402012d4f636989717cad7b504a35ff99100b4389a4de31e8644b9abd2db5e24cfe999b1f0ca6045ff1314efcb81d9b6022d2e346f22c5759b3844a09b6a98903c6d52a2ee774f913ef6c5b1bea8782d383ba92fa89c1d1604780ac7e646701380d1ea1890889d5bffefdbddc483b9f18bcf11cb5049e3f212862480d03e2b13825246a0eae50658578945e0667fa55b1d619894dd454e7074a992a8f5b695079c75c78878b54c4c1b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x130, 0x18, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x1ff, 0x10000000, 0x2, 0x401}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa}]}, {0xb4, 0x6, "96b99febe0e0d4cbc6df047f4f0b9d667661f6554217fe8340b1902d16afb597f1eae2c94a17eb3a57359491ad82be15e5b1805ba78a186183e92beb6dbb275cd36cae8520929d658230935042ece4d0697dd6a7a6b449c93985ffa7937d0d23670b9076471e2441c4138dad199778b63187bb4f6118e2819ce63ddd236b9e20d25935c9bfa6882eb402105465764a512d4b839751d213f78f9ba1adda931540c329d3d713bab412f45efe600523411d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x688, 0x1, [@m_sample={0x130, 0x17, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9ae, 0x7, 0x1, 0x2, 0xccb4}}]}, {0xca, 0x6, "6bfcebf373348bddd1c1d247079ea279e2aa0fe24fe3f266569b03209e44f46ad81e11473137b5ca626e8d9cf4753c39eb79461f73e433cb80d84f6348eb6e5efe6cb71b06477213bb5b67deaa57b0d1d2a6a0f8e966f13ddd0c15566c3c0bf75831704ddb422cc841aa19ac7d64641266a8cb21295fdbe358c7294d2409a4bb6fd5d3800b45c36a57238acb0b89280b56f4e573e4afa544ab600669629d17a8ef3bf111e1b76934817d1d8eb65929a45d348161c9613a4fafe38ea6aede545adb5f7f98bb99"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xcf5, 0x4, 0xffffffffffffffff, 0x80000001}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7fff}]}, {0x88, 0x6, "8d4ab96bc9a2a60b9d53c27bc02da87a4c5442b3a0773c85a093648fa41687cf788e711c074055eec3b0243395ebcdb60ae404abfbc12035eb94eb44dcfdf038947a0839fac67aab8801155db7748eed45b787dc3f41e5583b9a7fa360417cc64facc5f3abc832e28340d0d4c036c73855b8993783276d0107494d9dba05fb7c15edbaec"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xf4, 0x2, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, 'blackhole\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, '#%\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x7fff, 0x1, 0x0, 0x5}}, @TCA_DEF_DATA={0xc, 0x3, 'ip6tnl0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x183, 0x20000000, 0x5, 0x6}}]}, {0x69, 0x6, "4e6b2ad8f977007e44499b647853a4f165f4a3d8b75c9c383419f61240a63fd859fa7c359916a9c626e769aee38bb826606d816514d57dc837767b99709933805aa3db6aa8549bc17a4cb521e28a3358c62e8a1a2fe62f1e79191d4efbafa8d68a9ab972ec"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x180, 0x14, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x401, 0x20000000, 0x0, 0x80000001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x3, 0x20000007, 0xf115, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7, 0x5, 0x1, 0xd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x7, 0x20000000, 0x5f, 0xd90b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x43c, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x0, 0x6, 0x5, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x2, 0xffffffffffffffff, 0x6, 0xc}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe0b, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb70, 0x8}}]}, {0x9d, 0x6, "f0233374fca52c9d6171de2c8700f3863a6b10aa0e1f975146470cb9539d57f99557177b11579577c9d9499145d5416499ff1932a8b30a9872c236c2e780cb16726a52a56fc61a086c1f0e5fcdb8232443a857b777f0eedca737c7f6da165df156cc722f0fa189e17c98b197dded6f6f713ddb0a9c3064a8c495d018e38645d080d4932788aff5be89f0c85a67a954b512a34c1c704800db1e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xdc, 0x5, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x860}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="b6381ae3ca40"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="0fc4cb376d25"}]}, {0x4a, 0x6, "aeca3eab87d0f2b3188e6608bfbb371fa7a4af7bcfdb09f36783a431ac648e2b5d5169c8496ad158628d5f46c6020b32367ef476ff212835acb49c288c9cd0d68177eaaf5d2f"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x10c, 0x16, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x1, 0x10000000, 0x2, 0x3}, @loopback, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x1, 0x20000000, 0x3}, @rand_addr=0x64010101, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff7, 0x4259085, 0xffffffffffffffff, 0x9, 0x9}, @loopback, @local, 0x100000100, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x400, 0x3, 0x10000, 0x7fffffff}, @remote, @multicast2, 0xff, 0x1}}]}, {0x44, 0x6, "551545bd462ee2894a0c95bee3b34be8d90c61793778230e6f61b9d9709f2e92048395d4adcafd8ccf7205f9b970871bbd44df1137792cd9616908e899a348cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xb70}}, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000280), 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r11, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r11, 0x114, 0x6, 0x0, 0x0) 2m29.443133384s ago: executing program 2 (id=3524): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000000)=0x8) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x4d) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x14804}, 0x20000810) 2m29.039450803s ago: executing program 2 (id=3527): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="6e06301805b50c1fc4ad51a16e77c1a7", 0x10) close(r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x51}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2m28.86465728s ago: executing program 2 (id=3531): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x10, r2, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="00000280d0aeaf56ad84ea86ce48d27dc2744e15106660024cf4d0ba421faf3abbb6655aa32c2c2a6c9b559177bd23e359fe9a7e02596131b724bbe4cfb6ce901d5dd49035314267ca0ee6d866fb1ceb5390e210a47933", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0069000000000000000014200001a04215789baa3e9f18fbc7b51e98188a97cde08818215293efc42160474307bdd42b30996ceaa20e8127cec43eed73ea248c27407e6bf159c48a0685985b17bcf4fee060bda51fde"], 0x58}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x808000}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5, 0x8}, 0x8) 2m28.603219032s ago: executing program 2 (id=3534): syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c6cff03400000000008000140000000010800014000000009080001400000000b080001430000001208000140000000150800034000000004"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xcc}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f00000005c0)}], 0x8, 0xf73d, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c6cff03400000000008000140000000010800014000000009080001400000000b080001430000001208000140000000150800034000000004"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xcc}}, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f00000005c0)}], 0x8, 0xf73d, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) 2m13.457087839s ago: executing program 33 (id=3534): syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c6cff03400000000008000140000000010800014000000009080001400000000b080001430000001208000140000000150800034000000004"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xcc}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f00000005c0)}], 0x8, 0xf73d, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c6cff03400000000008000140000000010800014000000009080001400000000b080001430000001208000140000000150800034000000004"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xcc}}, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f00000005c0)}], 0x8, 0xf73d, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) 2.603922521s ago: executing program 1 (id=5248): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000480)=0x8000, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "51b68736c61d4bf6", "71dac4ce0f13ff7d402f51f6e070f509bc961dee0dca5da2c91003f742729805", "390d3abb", "3f5390d7de6fc1ad"}, 0x38) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) 2.091698171s ago: executing program 1 (id=5258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@getchain={0x64, 0x66, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0xa}, {0xa, 0xc}, {0xfff2, 0xffe0}}, [{0x8, 0xb, 0xe79}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xfffffe01}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xb0}]}, 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c00038004000400"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.982801968s ago: executing program 3 (id=5260): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bddf2514000000"], 0x14}}, 0x4040) 1.899950836s ago: executing program 1 (id=5261): socket$packet(0x11, 0x3, 0x300) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.824648972s ago: executing program 3 (id=5265): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(r0, &(0x7f0000000040)=""/244, 0xf4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x2, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="3300000000000012b126e97c6a56e963558f971c00"], 0x8) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4ea0, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0xc4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.744020516s ago: executing program 6 (id=5266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x28}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x200, 0x0, 0xa, 0x547b31180522e14c, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x4d2}, 0x0, @in6=@private1, 0xfffffffd, 0x0, 0x0, 0x0, 0x7fffffff}}, 0xe8) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x2, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4c010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r7) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r8, 0x101, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x8010) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}}, 0x4040004) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000002900)=""/239, 0xef}], 0x2}, 0x8910}], 0x1, 0x0, 0x0) 1.424033873s ago: executing program 1 (id=5270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="ff9200000000000001000000000000008500000097002a81458e00008500"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r1, &(0x7f0000000280)=[{&(0x7f0000001300)="94", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0xb0c, 0x70bd25, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004084) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xaaf9eb4e73cd30a0, &(0x7f0000000400)=0x10, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="1258b7a7499068", 0x7}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48001}], 0x1, 0x4044800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 1.368915684s ago: executing program 1 (id=5273): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000001340)={&(0x7f0000000080)={0x1284, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2800000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x1194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "1e9e105d8dd5e5544040fd9f2c0ba0cbe0e68ae18a696ea275d1a54c0a005d4e9335"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "ac25b15a27c9fc7192f33feee48e2f9049f9f9c02fddfc34336ce21c5416034179ae6a5c509186652bbc9f521a68f06c556ee4bcb18fa4c6e370509086bcaa1a3b4afbb75b8ad4457899eeeabe9f51c6347bca3a2ce9ec5a4adeaa3cbb60e9c14c109d13c22c1d50a96f330e0d8e7789ed9999f824bcf2230e6cce6af9201812e5f173a849e803d9ec36a897f1f873d6214737157c08cbed58c48bc3ef91733cc760af74b209171f6fa71d71b193bdfd8b693de06ddcc7547332d9458bbd2b909c80c7a3a0143e9ad9ee04bdbe765b5de9aeac66b8b567a3e4ab3c9cd9739a52a28ee2d50e5f59c2226a5670b22b1958f912d4e895b36cfb14a4f0621ff37b9a2af16d4f64ef3c9b570d7aff32533df5f056c21f9af0e505424356cbd732fc007de68117fc3d998da5490c2323090bf31c5efb29793560278214d237b1055073e743b179f57008e2b6af50174811cc2dd9d8399dd997515a4aea22a56716b9aeed21cd04d9531eac972c753b1119b1ef78de355b511b62fce4a13fd1bb941ba442c6ab8b28f5e3ef05f8493b263d29a145e0b3b5efac97f2a25be112be6b4069047181cde764789d75fa8eb68fc9b8eb92f8e6164f0b59fb5e8dd9b582ffaee4c75f38f5544c1b66a4774ce62d8d959323254f180aeb0c4d44df66e3df3a8a2a03b573e481958ce6acadd0396b5098b3e8be614e27a5a9f2b1a762e40bbee1ca22ebc33e743688d51360394ebf73894d83718226797bb51b8c59c100b3497b3456366587d9fde5060740ca7fa1546833c212bbafff7b52b82cb5a69af9085e4b331afd27341901410d0cf55da11fa7c5448d8fbc7953bf9c183a2487712d1479528b326166d509e44e8ad8063497a602a7e7e2fde2d68752197948c952145b2b9de23b85edd8808db983f35a3aab00701226825d1bccbbc65f5688cff8d05764ec40980e3fc4f2108c9146a0b1103274e4ceacaeb6d3bfc27c20364916798b04fc2f0ca8436d5b036a929ce743f9889b7e60585db1467029d273e2460745a07a8496cd99010dc5f884ed7758db5210ac723acaf0ec4d82e5ab3870bfcade8d5f14973213583fc5199ace191377c8bb6c335fcc301a3b8bfc08eca5c40beb0325ce4b15223bb7158e09901680770ea764e3039d1d3c40a1c9b143dda3f33ca70bc2a5e7ca0f583e7522832659c61360575e070292dba01415e6fe6f15511cb9d2b7b1dcf4abb6ee16a9933a57daae2204d015aacd524bdb4c28a456b038319724e929ffdf3b7c642d9c269d6cd35d077889990bb4bb4dff02a28bbba45f8a1ee7b3c4a078ce23ae7275b06dd1e1c5fd313c25dd71a6911f3dfbae37adb66abe1f96b2d38501d58056eff15b4763c76803e3328b5ec4a5693fa4aa63577b5f9dca612aec8052943676221baf088330e7e65b384bbc459800675365ff36c31cbb141df308b25464eaf8df39ee008982ca2058fbae821fb13a24a774839b1325ad83cc6b54207d35a12f7354d3d352a07f264a1d631f0d47055a6d7073f5ba0239ab1956e71fb3c9274e77827c49f48bef8fca23f40f70b84bef1d85673117a8dd8243214676c9647628761f4c2e89da6a3c4439d8557060d17a706b93eda155e3783b359c83ca3752e28df224f704a1645a36a4d8fe5a8d3491e243c1977431a83a9287c03fcebc8f0c0f98e95cc3074f6274438019cb8dbfc6ac9a38dffef53f50bd6f874447b0756ec7d4b46b445c6d650679afb55c89289acf38bbad5cbef306e51fb77836443323c397049d037bcfb0f1e487074c0d5b96ccaaeba8d9db95d326f3478a8138a98cf99905b146f590a0e2c9a1bf8613276618168305791487c74f64a3f2f07ab5a5b6435cc7949bc02be324c90567ee5f74a3559bdb19f31b04bd17b7642dd23f8947e5c84f47cbaeace6e446d36c35aed286e742472781eb0427fd374c4e36d1e6bd3699def9d31511e20f5260b254607f151be4571a8cff38875a5c130d86efda0a86eb0bfc48bac67cd853d9c46c0103256b961834acac26ff1e6fe75798035714099c87abd5880742951a9ce0e2d2750b7ead3a797dda071451382ccfb9a46859e6f1138e21f90f66673cd99022fc9e131d84ed9cdc80568e0558ea32c1b6c4c06da48e0b63367d9ff1d472c63546d5af7e3b642821638374915d552afb80d147397ccc6dd60dd2f90464ed1ca075a43b3047bc1b04142752b54fa394076a1658745ee6cce2186af9dbc2679759ba594f1a9bd72732652255d0a41b9a9d648290525e1f0c01d9763d08d4fdfd2e3a93ef461b8b6b03e0cc9fee969b37562e8e0c74e7cbcaf2a143ffd67f56fd895a795b41d1ac03a756e17d362fd0965484d4d4e9ef37f89ab34a56eb7a6a5b13e05c4a7e7ca60d35f4d41d63f706a2ebba7886a2b48aa4233c764af42ddfa0a38820dc7b3ab4308958cb29880be400570b489457ad3614e3ba1e40eda6a88da03414d4edd39269719a344503eb0711e20589903715898f0136b7fb6704b37866529907810518c0b49ec9056031a22f5542556d98daff6b7784d8c6f4aa28e2eac22c6b7f197ac1ad27ca418149ac9d910e3c78f09c8c18896a1ba0016bac2cbda1394e1322baa5c0e8fe8ab153f9accb7c7df154b79e53f6e25707ddd7f129f634302c7bfa37faa1d5ff6984935535a6bb342df5f76180fca3c39641ad1caf5fbd46a48f7a60e051baf1a8a3c86fd1b22f10bdb7086648c4d23a05463c96bef6c828296fc4082a149e71620d4fa83d9b9c274212cdc472bbe1dab96436633b51be405fc8eadc0b8f28637482407c157189455676593488459a3ada7ce9be3960d6206479afc7c3141c42799d01b42e7c7b3f9ac0f8cfdb2438160d98dcaf7312e62af4265049353c2836d56a4e5b4c7bbe66a2a409b0ee48bbe05e1ffc118401ca4dd31bd2537c457e9929fe217ae286531c135d92a79cbbbc8e327d5bd9ce9a2f2259fdde386899dff820f9eb9e6ee38262a7f3a22d1ddc3d88ef5e24192ef2a02bfc2db8e0c0b77a56e8643202eda9c77b6aa848680d0874cf04ce72aff6aa4bf66475b113669423f579e6e44223197615bb03764742f9bcb4cc6b0b5fc98c0c7f2a588f2f98aee7280aaa61d6342278597b878ed10a038adb7a370b4dd6782e8c6e5d9e39c7528881c94fff6eba69dfcbb54794b4ceadd32739f3d83e0670ebe58628235ddcdf2618700a4c7f12be34aa0a54b0a861775f722df3075cc70ed9c6bd16660505cff95679049e7f9b2d8a6dcda8b0f46d72b3732a034aeefed49b9be2dd5839394614e4686a04fc68904a5fa48051e7373664bf86cfa7ae1b169a270ae7effb1936ef02911d856cbcd323c0596f866d3a9f51db6024ad6304c07c89e4ac0b62e1bba542e82100546e71480ec4d62c2457448f414b928c15ecafd633fb84230a1635d2b5504d7a104105e7c3e70001ca9cd0b0c4f6e49311ffc553c429debd1b072bf746652064b72a460afdd3e2f7e3267a05ee06e29c8bcc6953a5d576be8972df03f4600e8d40f392ac5c8166bf1e356a151ec3766caecd77b0845a2fa87406899e7bca0163aaf03580a89c8f8f6b22af192c5eaca10a76dbe65e19ce5cdabc00e8c2807d9b44f864361bd98adbd8c1e7aab2baaf68dad1596eea35b884bc8395d527f56b806060881af2113c12e07fd480ef6052283d5d3fb1afd8544815fc5378dd5d8884d52a965535e702b7ca1f524dfd9a6eccf87fa3fe18e7a9b8bca962d62746af80f9dfc3271f2eee5dfaab9d9c0462e432855639be1b2a972aa96ad6ddb8406c0d6f9c40cce9908d2bbfc5d3c30533ab2749aa712741c1c5396a637cc9d0bde28201f48127fab8cb0bdbf845b3e7a58a3992aacb72062a8cc2b79aa1d1ed5338e4893494e5be4e1ddecc91e6ae07c3d2bd84eb3e8810d1327925b358608e05a8b990c8438d6c88d176eb6dc33d6be6d5612d36fdb4ab012cbf27190ad724d6c083d62def3461e6a89f67dd47dc62f98bca72bc27f0a57877c4a22b49697302ba1d2344b1252431c96d536956bd0f1bcda986d04c6ea11b349aeebfa5ecf0faadd13bfb91e9bb0388fcaa8c5bc6a6d064e54be4035c134c4e08bc9a18a8c60238ee68260a10ccc1989e252e5cd5012a919e7fce7b5e09fd86289640c082056e67e19b15a098639c7c7e61dfcf966487e71a28863768d6d07f8944f6b5d55522b818e41dcd3281b04732740ab55829f56a4687c2710b0ba7c42eed979e889c08a5dea804f2da36dc57b11afb29e21c80e04ed1390bc7e0427128f502649cfe553ee2ff89d3027011d2fc16f5631c577398b9b9551b08b74a45ed7e16650aa38b4b8d8c7440fa888ef80fe6a21ef9dd06724b503f81940ad7a5311246e03c3c7087ccbe046983720b3896f90d40682cea6f69eb9bf5357f54da3e73dc07d287117f779abc51f40a30aa9fbd9dd9d14b9d9bb74817e2f003896063b8aa751e46236ca9ddaf1b1e359e2726caa444cb62766a12bfc295f54684455421bb0383cb6caaf1ff08e86d6f450f67a76bc0b0e25797a43edac64f70b8e4917bb458adf3ec0cbc44bfdc6c4fd9874aa99643b26fc4efb198881ce6192b6903dcd7e1dc9ed87664254ae99039fa04beda8b33a2eb803b2a34e1c20e04ce07001cf1d9e122888d4feb1105f4576e6e31edc8c669d0aa7d888c71b114c3354b3d6093bf34da39f69aad3b7d16c0835621e5c3ca4caf2ec4de3758e646251450afa987730b4c16ebfc80e4243fe228b672c3f9f4e8ff0e2e0bb8fd8d7954a4855d49516dcf6ed4a3ff312f2861be51cbc5ac371a73b95d72acad9771fdf536f0d2b9c775fea80b2072e5374c44d6ab29c7400086d818d2edde6604a0c097ad62c951130eb7cd1c948e5770e7ba2610f199be7878139e981531c24b768989a4dffe274c58b1aa8f28d3a0cfc48152f9b48f1ed77bfe7d58d157a1471befb89ee144e4c23f0ab4a8b257d8a298e9a7b1c98e3138ade2062f76f532a1a9f38dc0229bfe9a0d38115262d740d57926aa804c68e0eb883d690aa3b5d52279dcc5d7f7b228a39d1c8c89c361a55aa332c40b67bf4715ebe82a44807d5c1e4789be84b144b8834b6655550c6de229321d237dc66babd26a8f8c2c65bc358bac05825450ab742896f33e3ef02e948b00fd8b27a19b53ad6ec542068e5d544d37e0ac033e49db1142befe04ebfe20ee92f98bed45d774d7c053041a5771b266cb561b7bdd3c0d213cc2499f9eace3cf8812cccf435bd7927c3ba23c8580294ca6670e004e6576c64b00241e10b0ed143f80ba33449d9c001ea34e464771ea83c0c70bb25c6d3994f5c122ea01ae07bc66518de0c5ace9298da1811fbb71196d97df6ded06eb4a35bc784fb12175fd1a0e19399d27c906be4aef8fa8f6a0b20624eade8f12c71d39987c2975c7e775b18fc9b54d21a1496c550de07b3a5be9c240bc5e2d0e439628f189c0a0a8a6c845af8183c2428bcfec2636e7917f414ea53737eb2a7de25d84b38d18197c50ce3b800473f0853e743b92669ebbc67c9f459fc432d664012e12e248ff38a03c98d263f8630225230da65df2ecc3e222570734b80edc9dee5fe7e30d6aef17d756d7a6ae7ed2eda136020a3cd178aa57a97049dcb7512c8cad4561ea10463cb6af52ad64b8d9c6fa9d9039045d96cabe475e1135b7aa05fd6411fec6af6fb82da836c79673357a9d6dc06c0d9410c968b3a77dfdfef0a916bff7e05bbe16ad12e20128beef5f86c464c2485b1065e2e3c073a398bd199b4f155e6ff57f"}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "77e3931e309e983816d4facc682f90a148679791066488760ab592d313fe82abe76e27bc407c430bf8b93796da4771393c41a55e4126dc2537894968bf16c8cbe2b838935ecde5c11c97bbcf5273471845dc6ba3ade112571ef0621d6cd7427864cf9a95ac1719fa0c8d7fb6fd5ae05b217d1447dea7580cb347f830c44c89255735d44849c1c977"}, @TIPC_NLA_NODE_ID={0x67, 0x3, "02dc2802cf7e62caccf6487ac1a63fe2a96ed40458ec803a1b0aa4f19ea39104e6325968f623a10bdf4e37094995ebacd9579d23fd827ad5256503e006e06b94748de212517188bfa983b5ac33bcac373bba4acc424b81a93c3383984396d75e896836"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5dcb01b6374f3302be3bc72a661a303e942a4000"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}]}]}]}, 0x1284}, 0x1, 0x0, 0x0, 0x40004}, 0x40005) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{0x1, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x7, 0x7, 0x848, r1, 0xa, '\x00', 0x0, r2, 0x2, 0x0, 0x2}, 0x50) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3a9, 0x8, 0x4, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x3, 0x4b5b, 0x7ff]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20004840) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000016c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001700)=r6, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001880)={'gretap0\x00', &(0x7f0000001780)={'tunl0\x00', 0x0, 0x86d25836c191bf99, 0x1, 0x5, 0x7fff, {{0x29, 0x4, 0x0, 0x2e, 0xa4, 0x66, 0x0, 0xe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@cipso={0x86, 0x6e, 0xffffffffffffffff, [{0x6, 0x2}, {0x6, 0x5, "a42a7e"}, {0x7, 0xf, "72a5aa9f3463a0896a46ce5bbf"}, {0x1, 0xe, "94942b3aac389fd805c37aee"}, {0x5, 0x4, "a4e4"}, {0x5, 0x12, "d7444ac6a8ebec7b234eee9d0c95d46f"}, {0x2, 0xf, "2b164eb529dc2d88d4791b1a6d"}, {0x5, 0x8, "12d23f7e9c6e"}, {0x6, 0x9, "61df6eaa1b3c38"}, {0x2, 0xe, "0168b124c01bcd25406e7bac"}]}, @lsrr={0x83, 0x1b, 0xa8, [@empty, @loopback, @rand_addr=0x64010102, @loopback, @multicast2, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000018c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000019c0)={&(0x7f0000001740), 0xc, &(0x7f0000001980)={&(0x7f0000001900)=@mpls_getnetconf={0x4c, 0x52, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x489cf12e}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa848}, @NETCONFA_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r3) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)={0x94, r11, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x39}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6f84}, @device_a, @device_b, @random="f0679c664ff1", {0xf, 0x6}}, 0x17, @val={0x8c, 0x18, {0x53c, "8e12ae3bb258", @long="e83b1a9a204dce7011d1fb78eaa87fcb"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x182, 0x7, 0x5, 0x7, 0x2, 0x7, 0x2, 0x3, 0xf, 0x9]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x4, 0x2, 0x4, 0x7]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000001c00)={'nr0\x00'}) ioctl$sock_TIOCOUTQ(r10, 0x5411, &(0x7f0000001c40)) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r13, &(0x7f0000001c80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r14 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000001d00)={0x2, &(0x7f0000001cc0)=[{0x4, 0x9, 0xe0, 0xfffffffa}, {0x2, 0x6, 0x3, 0x9daf}]}, 0x10) ioctl$FIOCLEX(r3, 0x5451) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001d80), r10) sendmsg$SEG6_CMD_SETHMAC(r15, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2ca4ae2f3a7bc011}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x20, r16, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x58b]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8050) socket$nl_route(0x10, 0x3, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000001ec0)="c38de779ddb77c3230508b7c51e137a9a7aacc02435955631becca00b4e9eb2cfe10664d162fa73616e1c321c1160ef98d4f8ee91d43c731355bb9664210a0f9ceab1239943a7079bec86be6db31949240601809a2733332de544be35ad81dd2013061cc5ec64cc5a66fddd0b690ee298e76725a2a56637a3a6f7e8ac47de8b075f3821d2599", 0x86, 0x0, &(0x7f0000001f80)={0x23, 0x3, 0x9, 0x1}, 0x10) 1.243922559s ago: executing program 5 (id=5274): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x1}, {0x1, 0x9}, {0xf, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x1d0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x6}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xb, 0x0, &(0x7f0000000640)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @multicast1}, 0x2}}, 0x2e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x2ff, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000900)={0x54, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x11) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x1409, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c1}, 0x4090) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000060000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000060005400000000d1c0012801800fbe80e080000006f6e6e6c696d6974000000040002800800034000000120140000001000010800000000000000000084000a"], 0xa8}}, 0x20050800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf255500000008000300", @ANYRES32=0x0, @ANYBLOB="3555e9fea8f6a9f1f590716a8263705650d54352e30bba76bc44eaa7f1d5142f76312bd0339ea84318ae932ba51f794fa62104da2f71110400008ca50cedc98bf0627c8d19a625b114ea500c453bb905c312eb26fca139f35b8155503feb9f859fd0e1af6a5614c7474f1b5a7b4728307e275a283510642ac4840109ab5ffedf2db2e5e514798d6ceb11f5bb78576044504b543a057785f6a51a0dbd0db3edef21be66898c15ce0412d6a70256ffa451f74fe6eeafa65b9a76e0a7738672d58e3080fca0bace58fe94e13fdc2eb1e905e99e9a8e3011c15eea9cb7fcab80ef"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) 1.225732708s ago: executing program 4 (id=5275): r0 = socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="184ea08c000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r0) connect$caif(r0, &(0x7f0000000000)=@dbg={0x25, 0x4, 0x40}, 0x18) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6}}, {{0xa, 0x4e23, 0xff, @private1, 0x9}}}, 0x108) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0036d9fcb307130e7afc370000", @ANYRES8=r2, @ANYBLOB="b1e3331add42867ffae26106568b13172a7ae3947d50410df5b42e184d2c"], 0x7c}}, 0x20048004) 1.168158199s ago: executing program 1 (id=5276): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x6, 0x6}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f0000002ac0)=""/4081, 0xff1}, {&(0x7f0000000940)=""/61, 0x3d}], 0x4}, 0x5d}], 0x1, 0x40002022, 0x0) r7 = socket(0xf, 0x803, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r12, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r13, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x80840) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.090818363s ago: executing program 4 (id=5277): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) listen(r1, 0x3) 1.074125904s ago: executing program 5 (id=5278): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80800) connect(r0, &(0x7f0000000080)=@rc={0x1f, @none, 0x9}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x0, 0x0, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x67, 0x0, 0x2, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0x8b, 0x0, 0x0, [0x4]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltclass={0x2c, 0x29, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0x1, 0x2}, {0x4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r2, r4, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x24, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x757, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @ldst={0x2, 0xc5557fa3bff8b368, 0x4, 0x0, 0x8, 0x1e, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5}, @call={0x85, 0x0, 0x0, 0xc7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7431}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xffffffff}, @ldst={0x3, 0x2, 0x0, 0x1, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x9, 0x31, &(0x7f00000006c0)=""/49, 0xc3c341faae0ad9f9, 0x70, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x0, 0xfffffffe, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r3], 0x0, 0x10, 0x3}, 0x94) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@private2, @in6=@mcast2}}, {{@in=@loopback}}}, &(0x7f0000000940)=0xe8) r6 = socket$netlink(0x10, 0x3, 0xe) getuid() connect(r1, 0xfffffffffffffffc, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000980)=0x9) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000a40)=0xf) socket$caif_seqpacket(0x25, 0x5, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r6) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r8, 0x0, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20040040) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000e40)=0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r3) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000002dc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d80)={&(0x7f0000000f00)={0x1df8, r9, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@link_id={0x65, 0x12, {@random="01e19cc14037", @broadcast, @device_b}}, @challenge={0x10, 0x1, 0xde}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xd8, 0x80, [@mesh_id={0x72, 0x6}, @ssid={0x0, 0x14, @random="f64f1a5ed276ddb6dd9dbc5bd231c2c3bd5aa8db"}, @random_vendor={0xdd, 0x4e, "1cb69ba4cbc78809c7d2f7d5c41b30e0b758c57ab173d915614265fd92f7c92ec757eeffe9c8ee56d8855d72c8b354acc09c52aa2f90fdce0f9dd460964aa81ceee8036f76be8f298581fc6a7a0a"}, @random={0x9, 0x64, "acd95ef10d1b79288443da5f78b59bbcb0f0e59cc49d94189880480005af65eea3107f243dcd407567a6ebdcb51dc27d1502500de77d996d80cf9b761e3d5f0bb6a7a4d99b58181b849d4a985708708efa3c4ef081c6155c6a8a2db6b0f5c090ffd98387"}]}, @NL80211_ATTR_FTM_RESPONDER={0x88, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7d, 0x3, "b933a16d8eb4e951782dbe3f28d31434f5532a0f9a589b20c13ce3342aa984d5da1e3ccc1b8cab69c61077d7e9d80032ede381383e3fc66822bb5b189f8a77093a675686c9e3b93d95150343a57e59704f20db7847cb99f55ab00744465da48ec4ce79e0664320d879d659713eac00ff9bbaebc7e8a43842b2"}]}, @NL80211_ATTR_PROBE_RESP={0x652, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x2ed, 0xf, [@perr={0x84, 0xbb, {0xf, 0xb, [{{}, @broadcast, 0x43fd9ed6, @void, 0x1f}, {{0x0, 0x1}, @device_a, 0x80, @value=@device_b, 0x41}, {{}, @device_b, 0x3, @void, 0x25}, {{0x0, 0x1}, @device_b, 0x7f, @value=@device_b, 0x2a}, {{0x0, 0x1}, @device_a, 0x7ff, @value=@broadcast, 0x1e}, {{0x0, 0x1}, @broadcast, 0xffffffff, @value=@device_b, 0x32}, {{0x0, 0x1}, @device_b, 0xffffff34, @value=@device_b, 0x3c}, {{}, @device_b, 0xb4, @void, 0x2c}, {{}, @device_a, 0x2, @void, 0x36}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x2b}, {{0x0, 0x1}, @broadcast, 0x1bc, @value=@device_b, 0x25}]}}, @fast_bss_trans={0x37, 0x103, {0x8, 0xa, "cfedd29293a361c2f671c3197bf158e1", "83a2e7571ef8e3451de3216c7c97d3c701c04cb98d4b848e70469795d0757de0", "45ac98ce18a8c1c6c84f478b9259cf7c6f416001eac5d42d6824427e118cc070", [{0x4, 0x5, "acaa1d0d70"}, {0x2, 0x9, "d5ef6693b08514c6d7"}, {0x4, 0x19, "7b4d59381a44137e09951c584044d6e3b3886992c36e631c2d"}, {0x4, 0x11, "2e215e4cd7be77d15b1df7dd8f25550b52"}, {0x2, 0x19, "e792754e1857ed23a8ba2b9eb3d98267a4baae057434a69df4"}, {0x4, 0x5, "dc89e20b01"}, {0x2, 0x1a, "fb81ef1018e0ae4d021f789105a2ea8f23cb1a88531704169936"}, {0x1, 0x24, "b9f222f022746805d7f12bd35f21c7a18bcff80b52a3f8b068383b74a0dc0c988873def3"}, {0x2, 0x8, "def96b44ee7cee2f"}, {0x2, 0x1, "19"}]}}, @prep={0x83, 0x1f, {{}, 0x4, 0x0, @device_b, 0x3, @void, 0xc0, 0x4, @device_b, 0x4}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd6, 0x9, @broadcast, 0x6, @value=@device_b, 0x10, 0x40, @device_a, 0x8}}, @tim={0x5, 0xda, {0x63, 0xf3, 0x7, "bbe8e878ec9373c077dde1d1f76893608642fa521ad2b3d547ea85c44ff63bb2302392d084fac76fac5edbdc0722be292a7052831ff41a4637dbecb050f131257659359cd585711069dd9e7121652d0c46b68fab0f96cdc564b9d755b51441b0fb0da22ed7758011b8c043aa0d5b55b475b3151ad818aeaab48d8c41bfa4d8c190c3367415cb5d0acc4c7acf32b0c8bbcedd7d5c8520a28ace5d21a117d479ec266baf6e657b47b40ff451da70422b24bcd83618a22ce1acdf53932462434ac7eaeb4a8c153450f5d9923573886a6e39c59abbd3a65b0e"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_FTM_RESPONDER={0x1144, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x34, 0x2, "6101f487d13c02d280ab1b599f97280bc1493bb041228aabc39002f00bf3bb18160447c22458d0f529cd6dfbd0aae6ca"}, @NL80211_FTM_RESP_ATTR_LCI={0x3c, 0x2, "3f62408412ca56e02add54983af3ed879fc0cc4b09988895c93db074f6a4df805569b2bc1f750986d1bfc0183959b3f29cf081b07a037191"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc4, 0x3, "1db818f5cdce29c088ed68f420ca419cd1165297be04fbefb61f58eb54aeb3a3f3b713b82dfe08877adbfe18380ec8ecbabb5b49c103af9dd43ef7e7fe482f29c27e81e733c4fd8594897ff972a758cf0d25644a1f9367395da86730cc892bc67bbfd9674705ce4b1e052dfe61b4f94311ca14df8336fe480f67638129300977b4c0a60ed6a579f5df2329bc8396fb32f1e644cdf88a7e490ae365bf1a30a571956a43ae87270539555f3244c66d8328ea795f9767a71e4c82b27a6f82588bc0"}]}, @NL80211_ATTR_BEACON_TAIL={0x1d5, 0xf, [@perr={0x84, 0x128, {0x8, 0x12, [{{}, @device_b, 0x7fff, @void, 0x1}, {{}, @device_a, 0x3, @void, 0x8}, {{}, @device_b, 0xffffff23, @void, 0x2c}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x35}, {{}, @device_a, 0x3, @void, 0x3}, {{}, @device_b, 0x4, @void, 0x10}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x4}, {{}, @broadcast, 0x7, @void, 0x2e}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x26}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x29}, {{}, @device_b, 0x1, @void, 0x1f}, {{0x0, 0x1}, @device_a, 0xac, @value=@broadcast, 0x1d}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x1d}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x37}, {{0x0, 0x1}, @broadcast, 0xcf, @value=@device_b, 0x25}, {{}, @broadcast, 0xfffffffa, @void, 0xc}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x29}, {{0x0, 0x1}, @device_a, 0x7f, @value=@device_b, 0x1}]}}, @fast_bss_trans={0x37, 0xa5, {0x3, 0x6, "a6bd0a04b570ce53b2b41da5377fe811", "63bb3eb9e1bc5ad7dd315985ba6eb32926aceb1aa9a616308e9f6fad7370811a", "9f5908ffdb24a47718d7e418c48f46724ec2445e6f45e2b9844b641ce66b98b0", [{0x4, 0x6, "751a3e35e981"}, {0x1, 0x2, "a805"}, {0x4, 0x6, "9594e4e2f5c4"}, {0x2, 0xe, "f4ed56b00f43da526b7904a2a90c"}, {0x1, 0x13, "ac9f71db96e7cb9bbf6c54b2f46bf18280ebd7"}, {0x1, 0x18, "ac4db0fb966162c7d42058bf4a2908181ba0348863ee7ea3"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x1df8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000002e00)={0x2, 0x2, 0x6}) 1.007581316s ago: executing program 4 (id=5279): openat$pidfd(0xffffffffffffff9c, &(0x7f0000004f00), 0x256200, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x6020400) r1 = socket(0x10, 0x80002, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073697a300000000044000000060a010400000000000000000500000008000b40000000001c00048018000180080001006c6f67000c00028006000140000600000900010073797a30"], 0xb8}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000080)="000000000d800000", 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41071, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x28, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x4000040) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r9, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}, "5613e798"}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x9, &(0x7f0000000340)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x6}, 0x94) 892.171537ms ago: executing program 5 (id=5280): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 855.983448ms ago: executing program 6 (id=5281): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x4000002}, {0x3, 0xc, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 761.722001ms ago: executing program 3 (id=5282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x12, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xeeca9066f6e8b7c9}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r2, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87f1ee1930b7"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 704.656582ms ago: executing program 6 (id=5283): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x11, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x8, 0x0, 0x0, 0x4, 0x1}, @jmp={0x5, 0x0, 0xd, 0x4, 0x3, 0xffffffffffffffff, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x324}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x800, 0x81, &(0x7f0000000340)=""/129, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x8, 0xffffffff, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x4, 0x4, 0x0, 0x3}, {0x3, 0x2, 0x4, 0x8}, {0x5, 0x3, 0x5, 0x6}], 0x10, 0x7f}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, r1, 0x1a, 0x0, 0x4000, @void, @value=r1}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7fff) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 704.122256ms ago: executing program 4 (id=5284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xa0001f98, 0x15, 0x0, &(0x7f0000000280)="4c1b84bdac37f4451b20a3066494677ee389d422a1", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) 611.244714ms ago: executing program 3 (id=5285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r8, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xfffb}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) socket(0x29, 0x80000, 0xfffffe57) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0x3}, {0x0, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4041080) 567.502463ms ago: executing program 6 (id=5286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac05}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) 387.761703ms ago: executing program 4 (id=5287): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) (async) writev(r2, &(0x7f0000001700)=[{&(0x7f0000000240)="0d48f2bcf8", 0x5}], 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x6, @tcp_ip4_spec={@remote, @multicast1, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x7, 0x7}}}) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0xffffffffffffff68) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000580)) (async) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r7, 0x0, 0x483, &(0x7f00000005c0)={0x0, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x11, 0x80, 0x39}, 0x2c) (async) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r7}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14c, 0x14c, 0x8, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x8}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x3a, 0x5}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @struct={0x2, 0x8, 0x0, 0x4, 0x1, 0x9, [{0x7, 0x2, 0x546}, {0x3, 0x0, 0x81}, {0x9, 0x4, 0x1}, {0x0, 0x5, 0x1}, {0x1, 0x1, 0x1ff}, {0x8, 0x5, 0x5}, {0xc, 0x1, 0x36}, {0xd, 0x1, 0x1}]}, @restrict={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x3}}, @enum64={0x7, 0x9, 0x0, 0x13, 0x0, 0x0, [{0xa, 0x2}, {0x2, 0x21ef932b, 0x5}, {0x8, 0x159, 0x800}, {0x10, 0x2, 0xdd8c}, {0x2, 0x2, 0x3ff}, {0x9, 0x3, 0x1}, {0x6, 0x7, 0xd2a}, {0x3, 0x0, 0xb}, {0x4, 0x7f, 0x8}]}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x61, 0x2e, 0x0, 0x0, 0x5f]}}, &(0x7f0000000780)=""/106, 0x16c, 0x6a, 0x1, 0xfffffffb, 0x10000, @value=r8}, 0x28) (async) recvmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000040)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/122, 0x7a}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000440)=""/217, 0xd9}], 0x6}, 0x40002000) 385.827233ms ago: executing program 5 (id=5288): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x4, 0x2) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) 381.510848ms ago: executing program 3 (id=5289): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) socket$packet(0x11, 0x4000000000002, 0x300) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40880) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "54fcc1dbadb00b50", "f4d095d17fa5842e23149cba5969c47f", "8da40d64", "eb034ea618e777ea"}, 0x28) (async) sendto$inet6(r3, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r4, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r7, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendto$inet6(r3, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="e1"], 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 381.153706ms ago: executing program 6 (id=5290): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x27}, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 287.963014ms ago: executing program 4 (id=5291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRESDEC=r1], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x400000, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040005) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x34, r6, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f2, 0x10, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x4014000) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x4c, r8, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x4c}}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) 286.82496ms ago: executing program 3 (id=5292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x15, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fbffffffe000000200000000000000000000000000000000000000000000df000000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xb}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 221.03279ms ago: executing program 6 (id=5293): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETLINK(r2, 0x400454cd, 0x325) 111.335963ms ago: executing program 5 (id=5294): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 0s ago: executing program 5 (id=5295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x35}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0xe63}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x40}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0xb35, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xa0) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) (async) splice(r5, 0x0, r7, 0x0, 0x10d00, 0xf) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x7, [@struct={0xa, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x100, 0x0, 0x30000}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @float={0xa, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x800001, 0x7}}, @fwd={0x1}, @union={0x8, 0x7, 0x0, 0x5, 0x0, 0x6baf, [{0x8, 0x3, 0x5}, {0xd, 0x3, 0x8}, {0x1, 0x2, 0x6}, {0x1, 0x2}, {0x5, 0x5, 0xc}, {0x1, 0x1, 0x1}, {0xf, 0x0, 0x8}]}, @union={0x9, 0x1, 0x0, 0x5, 0x1, 0xffffffff, [{0x2, 0x0, 0x6}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000480)=""/186, 0xeb, 0xba, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4, 0x3, 0x41, 0x40003, r1, 0xa, '\x00', 0x0, r8, 0x8000005, 0x4, 0x3, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000140)="b9ff03076844268cb89e14f088a847fe803500121100632f77fbac14141dac141458254eaefeddb0", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$can_raw(0x1d, 0x3, 0x1) kernel console output (not intermixed with test programs): [ 395.153527][T17730] bond1 (unregistering): Released all slaves [ 395.473578][T17763] netlink: 'syz.4.3235': attribute type 2 has an invalid length. [ 395.678144][T17777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.930669][T17798] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 396.048209][T17808] netlink: 'syz.5.3247': attribute type 11 has an invalid length. [ 396.350626][T17827] gre1: entered promiscuous mode [ 396.361817][T17827] gre1: entered allmulticast mode [ 396.574244][T17836] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 396.599712][T17836] vcan0 (unregistering): tx drop: invalid sa for name 0x0000000000000001 [ 396.638466][T17836] vcan0 (unregistering): tx drop: invalid sa for name 0x0000000000000001 [ 397.080590][T17859] dvmrp8: entered allmulticast mode [ 397.087193][T17859] dvmrp8: left allmulticast mode [ 397.122067][T17865] __nla_validate_parse: 182 callbacks suppressed [ 397.122086][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 397.153019][T17865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3268'. [ 397.340072][T17877] netlink: 'syz.5.3271': attribute type 12 has an invalid length. [ 397.350240][T17877] netlink: 'syz.5.3271': attribute type 29 has an invalid length. [ 397.367244][T17877] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3271'. [ 397.388647][T17877] netlink: 59 bytes leftover after parsing attributes in process `syz.5.3271'. [ 397.418974][T17885] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3273'. [ 397.437292][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 397.529855][T17887] netlink: 81 bytes leftover after parsing attributes in process `syz.1.3275'. [ 397.809098][T17897] netlink: 4420 bytes leftover after parsing attributes in process `syz.1.3279'. [ 397.929617][ T9269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.938162][ T9269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.035372][T17913] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3285'. [ 398.097201][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3284'. [ 398.390936][T17934] netlink: 'syz.3.3290': attribute type 15 has an invalid length. [ 398.454461][T17934] netlink: 'syz.3.3290': attribute type 15 has an invalid length. [ 398.476445][T11554] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 398.509977][T17929] netlink: 'syz.5.3292': attribute type 3 has an invalid length. [ 398.519041][T17929] netlink: 'syz.5.3292': attribute type 3 has an invalid length. [ 398.565781][T11554] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 398.680674][T11554] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 398.700127][T11554] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 398.968044][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.138664][T17966] x_tables: unsorted entry at hook 3 [ 399.209644][T17971] netlink: 'syz.1.3305': attribute type 2 has an invalid length. [ 399.371656][T17976] pimreg: entered allmulticast mode [ 399.522322][T17982] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 399.567017][T17982] netlink: 'syz.2.3309': attribute type 4 has an invalid length. [ 399.583412][T17982] netlink: 'syz.2.3309': attribute type 4 has an invalid length. [ 399.698542][T17991] netlink: 'syz.4.3312': attribute type 2 has an invalid length. [ 399.720085][T17991] netlink: 'syz.4.3312': attribute type 1 has an invalid length. [ 400.008213][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.104376][T18008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.193974][T18010] netlink: 'syz.1.3317': attribute type 1 has an invalid length. [ 400.685301][T18037] ip6gre2: entered promiscuous mode [ 400.716237][T18037] ip6gre2: entered allmulticast mode [ 400.735018][ T5850] Bluetooth: hci2: command tx timeout [ 400.749878][T18040] Cannot find del_set index 4 as target [ 400.788407][T18037] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 400.953965][T18047] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 400.972153][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.980866][ T9269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.050235][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.059361][T18052] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 401.124589][T18053] ip6gre3: entered promiscuous mode [ 401.158548][T18053] ip6gre3: entered allmulticast mode [ 403.130442][ T7430] net_ratelimit: 2 callbacks suppressed [ 403.130458][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.527903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.541453][ T9270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.550032][ T9269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.559526][ T7452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.155978][T18059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.180597][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.425523][T18104] __nla_validate_parse: 22 callbacks suppressed [ 404.425542][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 404.450742][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3346'. [ 404.477236][T18111] veth1_to_bridge: mtu less than device minimum [ 404.490661][T18104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3346'. [ 404.675308][T18118] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3349'. [ 404.710659][T18118] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3349'. [ 404.728846][T18122] validate_nla: 1 callbacks suppressed [ 404.728866][T18122] netlink: 'syz.3.3348': attribute type 1 has an invalid length. [ 404.847329][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.932501][T18122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.001749][T18125] bond1: entered promiscuous mode [ 405.022592][T18125] bond1: entered allmulticast mode [ 405.084798][T18146] xt_hashlimit: size too large, truncated to 1048576 [ 405.227772][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.590684][ T7452] IPVS: starting estimator thread 0... [ 405.708098][T18171] IPVS: using max 27 ests per chain, 64800 per kthread [ 405.746429][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3364'. [ 405.790728][T18183] netlink: 'syz.2.3366': attribute type 21 has an invalid length. [ 405.818029][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3364'. [ 405.842420][T18185] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 405.855289][T18177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.888040][T18180] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 405.889767][T18181] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 405.936071][T18191] pimreg: entered allmulticast mode [ 406.042165][T18166] virt_wifi0 speed is unknown, defaulting to 1000 [ 406.051617][T18166] ip6_vti0 speed is unknown, defaulting to 1000 [ 406.258189][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.435243][T18213] netlink: 'syz.3.3374': attribute type 8 has an invalid length. [ 406.673840][T18221] netlink: 'syz.3.3376': attribute type 2 has an invalid length. [ 406.748589][T18223] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3379'. [ 406.765639][T18225] netlink: 'syz.4.3378': attribute type 39 has an invalid length. [ 406.871389][T18221] netlink: 'syz.3.3376': attribute type 25 has an invalid length. [ 406.892629][T18209] syzkaller0: entered promiscuous mode [ 406.930278][T18209] syzkaller0: entered allmulticast mode [ 407.083010][T18246] IPVS: set_ctl: invalid protocol: 115 172.20.20.33:20002 [ 407.115622][T18234] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 407.609764][T18265] netlink: 'syz.4.3384': attribute type 12 has an invalid length. [ 407.622047][T18265] netlink: 'syz.4.3384': attribute type 29 has an invalid length. [ 407.637082][T18265] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3384'. [ 407.661276][T18265] netlink: 'syz.4.3384': attribute type 3 has an invalid length. [ 407.669450][T18265] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3384'. [ 407.679447][T18212] virt_wifi0 speed is unknown, defaulting to 1000 [ 407.699216][T18212] ip6_vti0 speed is unknown, defaulting to 1000 [ 408.339066][ T10] net_ratelimit: 4 callbacks suppressed [ 408.339084][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.479245][T18294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.760584][T18300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.129247][T18309] xt_TCPMSS: Only works on TCP SYN packets [ 409.368514][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.649521][ T7452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.922869][T18336] __nla_validate_parse: 2 callbacks suppressed [ 409.922891][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3405'. [ 409.967305][T18336] openvswitch: netlink: Flow actions attr not present in new flow. [ 410.251734][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 410.286544][T18350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3409'. [ 410.299862][T18351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.309670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.326165][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 410.396161][T18350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3409'. [ 410.427699][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.844465][T18376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.163727][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3418'. [ 411.222627][ T7452] IPVS: starting estimator thread 0... [ 411.269220][T18390] syzkaller0: entered promiscuous mode [ 411.280232][T18390] syzkaller0: entered allmulticast mode [ 411.318672][T18388] IPVS: using max 28 ests per chain, 67200 per kthread [ 411.343498][ T7452] IPVS: starting estimator thread 0... [ 411.448593][T18394] IPVS: using max 24 ests per chain, 57600 per kthread [ 413.529397][ T7436] net_ratelimit: 5 callbacks suppressed [ 413.529413][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.768755][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.777231][ T9270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.787176][T18380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.180140][T18422] syzkaller0: entered promiscuous mode [ 414.185786][T18422] syzkaller0: entered allmulticast mode [ 414.200516][T18426] sctp: [Deprecated]: syz.3.3430 (pid 18426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.200516][T18426] Use struct sctp_sack_info instead [ 414.220691][T18426] sctp: [Deprecated]: syz.3.3430 (pid 18426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.220691][T18426] Use struct sctp_sack_info instead [ 414.568272][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.880149][T18449] syzkaller0: entered promiscuous mode [ 414.885688][T18449] syzkaller0: entered allmulticast mode [ 414.971495][T18463] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3438'. [ 415.003358][T18463] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3438'. [ 415.172392][T18476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3442'. [ 415.202536][T18476] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3442'. [ 415.232994][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 415.243388][T18477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3442'. [ 415.610186][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.649125][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.659240][T18476] veth7: entered promiscuous mode [ 416.789889][T18486] netlink: 'syz.4.3446': attribute type 13 has an invalid length. [ 416.831306][ T9270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.842050][T18495] lo: entered allmulticast mode [ 416.878776][T18495] Cannot find add_set index 2 as target [ 416.915021][T18496] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.926172][T18486] gretap0: refused to change device tx_queue_len [ 416.944790][T18499] IPVS: length: 195 != 24 [ 416.971983][T18486] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 417.000674][T18495] lo: left allmulticast mode [ 417.084360][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3451'. [ 417.116655][T18506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.192118][T18509] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3453'. [ 417.322348][T18506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.480161][T18525] xt_hashlimit: size too large, truncated to 1048576 [ 417.697095][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.697901][T18543] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3463'. [ 417.784547][T18544] netlink: 'syz.2.3463': attribute type 10 has an invalid length. [ 417.983378][T18549] netlink: 'syz.5.3465': attribute type 1 has an invalid length. [ 418.116177][T18552] ip6t_srh: unknown srh invflags 4000 [ 418.142832][T18552] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3466'. [ 418.248091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.731593][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.082591][T18602] netlink: 'syz.2.3481': attribute type 11 has an invalid length. [ 419.091759][T18602] netlink: 'syz.2.3481': attribute type 4 has an invalid length. [ 419.114010][T18602] netlink: 'syz.2.3481': attribute type 5 has an invalid length. [ 419.124669][T18602] netlink: 'syz.2.3481': attribute type 6 has an invalid length. [ 419.188961][T18606] netlink: 'syz.3.3483': attribute type 1 has an invalid length. [ 419.307091][T18612] bond2: (slave ip6gretap1): making interface the new active one [ 419.316449][T18612] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 419.326116][T18612] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 419.335144][T18612] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 419.476078][T18628] netlink: 'syz.5.3488': attribute type 1 has an invalid length. [ 419.535008][ T9270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.768095][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.055047][T18646] syzkaller0: entered promiscuous mode [ 420.067169][T18646] syzkaller0: entered allmulticast mode [ 420.327789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.469610][T18635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 420.476083][T18635] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 420.810477][ T9269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.821607][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.452947][ T7452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.848230][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.925170][T18635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 421.934039][T18635] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 421.966336][T18635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 421.974690][T18635] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 421.995014][T18681] siw: device registration error -23 [ 422.426961][T18709] __nla_validate_parse: 10 callbacks suppressed [ 422.426979][T18709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3509'. [ 422.571420][ T9269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.690334][T18724] netlink: 'syz.3.3515': attribute type 1 has an invalid length. [ 422.704259][T18724] netlink: 'syz.3.3515': attribute type 1 has an invalid length. [ 422.715576][T18724] netlink: 'syz.3.3515': attribute type 1 has an invalid length. [ 422.745485][T18724] netlink: 'syz.3.3515': attribute type 2 has an invalid length. [ 422.772433][T18725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.799049][T18724] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3515'. [ 422.864260][T18724] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3515'. [ 422.982494][T18741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3521'. [ 423.004559][T18741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3521'. [ 423.021222][T18743] veth0: entered promiscuous mode [ 423.033860][T18741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3521'. [ 423.056451][T18741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3521'. [ 423.072356][T18743] bridge0: entered promiscuous mode [ 423.121226][T18746] syzkaller0: entered promiscuous mode [ 423.126837][T18746] syzkaller0: entered allmulticast mode [ 423.136717][T18750] bridge0: left promiscuous mode [ 423.148069][T18750] veth0: left promiscuous mode [ 423.184964][T18754] syzkaller0: entered promiscuous mode [ 423.190630][T18754] syzkaller0: entered allmulticast mode [ 423.277954][T18760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3526'. [ 423.305600][T18758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3525'. [ 423.324313][T18758] netlink: 'syz.3.3525': attribute type 7 has an invalid length. [ 423.334288][T18758] netlink: 'syz.3.3525': attribute type 8 has an invalid length. [ 423.346538][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3525'. [ 423.558759][T18772] xfrm1: entered promiscuous mode [ 423.564068][T18772] xfrm1: entered allmulticast mode [ 423.603471][T18771] tipc: Started in network mode [ 423.609704][ T30] audit: type=1800 audit(1770718116.058:10): pid=18776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3531" name="memory.events" dev="tmpfs" ino=468 res=0 errno=0 [ 423.615674][T18771] tipc: Node identity 52241e3cb747, cluster identity 4711 [ 423.681746][ T30] audit: type=1804 audit(1770718116.088:11): pid=18776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3531" name="/newroot/88/memory.events" dev="tmpfs" ino=468 res=1 errno=0 [ 423.710129][T18771] tipc: Enabled bearer , priority 0 [ 423.717291][T18778] syzkaller0: entered promiscuous mode [ 423.730096][T18778] syzkaller0: entered allmulticast mode [ 423.736462][T18779] syz.5.3532: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 423.757187][T18771] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 423.819637][T18779] CPU: 0 UID: 0 PID: 18779 Comm: syz.5.3532 Not tainted syzkaller #0 PREEMPT(full) [ 423.819666][T18779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 423.819700][T18779] Call Trace: [ 423.819708][T18779] [ 423.819716][T18779] dump_stack_lvl+0xe8/0x150 [ 423.819748][T18779] warn_alloc+0x249/0x340 [ 423.819771][T18779] ? stack_trace_save+0xa9/0x100 [ 423.819801][T18779] ? __pfx_warn_alloc+0x10/0x10 [ 423.819829][T18779] ? kasan_save_track+0x4f/0x80 [ 423.819847][T18779] ? kasan_save_track+0x3e/0x80 [ 423.819863][T18779] ? __kasan_kmalloc+0x93/0xb0 [ 423.819881][T18779] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 423.819899][T18779] ? xskq_create+0x56/0x170 [ 423.819917][T18779] ? xsk_setsockopt+0x54c/0x990 [ 423.819944][T18779] ? do_sock_setsockopt+0x17c/0x1b0 [ 423.819968][T18779] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 423.819992][T18779] ? do_syscall_64+0xe2/0xf80 [ 423.820018][T18779] __vmalloc_node_range_noprof+0x132/0x1730 [ 423.820078][T18779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 423.820106][T18779] ? __kasan_kmalloc+0x93/0xb0 [ 423.820133][T18779] vmalloc_user_noprof+0xad/0xe0 [ 423.820153][T18779] ? xskq_create+0xbf/0x170 [ 423.820173][T18779] xskq_create+0xbf/0x170 [ 423.820195][T18779] xsk_init_queue+0xad/0x110 [ 423.820227][T18779] xsk_setsockopt+0x54c/0x990 [ 423.820260][T18779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 423.820289][T18779] ? __pfx_aa_sk_perm+0x10/0x10 [ 423.820317][T18779] ? aa_sock_opt_perm+0xff/0x1a0 [ 423.820346][T18779] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 423.820367][T18779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 423.820399][T18779] do_sock_setsockopt+0x17c/0x1b0 [ 423.820430][T18779] __x64_sys_setsockopt+0x13d/0x1b0 [ 423.820462][T18779] do_syscall_64+0xe2/0xf80 [ 423.820483][T18779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.820501][T18779] ? trace_irq_disable+0x37/0x100 [ 423.820521][T18779] ? clear_bhb_loop+0x60/0xb0 [ 423.820546][T18779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.820570][T18779] RIP: 0033:0x7f0ec899af79 [ 423.820592][T18779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.820609][T18779] RSP: 002b:00007f0ec9869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 423.820630][T18779] RAX: ffffffffffffffda RBX: 00007f0ec8c15fa0 RCX: 00007f0ec899af79 [ 423.820645][T18779] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 423.820657][T18779] RBP: 00007f0ec8a316e0 R08: 0000000000000004 R09: 0000000000000000 [ 423.820669][T18779] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.820682][T18779] R13: 00007f0ec8c16038 R14: 00007f0ec8c15fa0 R15: 00007ffec98d86a8 [ 423.820715][T18779] [ 423.820786][T18779] Mem-Info: [ 424.103827][ T7430] net_ratelimit: 2 callbacks suppressed [ 424.103850][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.118161][ T56] block nbd1: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 270 seconds [ 424.131645][T18779] active_anon:6568 inactive_anon:0 isolated_anon:0 [ 424.131645][T18779] active_file:3207 inactive_file:40060 isolated_file:0 [ 424.131645][T18779] unevictable:768 dirty:63 writeback:25 [ 424.131645][T18779] slab_reclaimable:12400 slab_unreclaimable:127614 [ 424.131645][T18779] mapped:34503 shmem:1364 pagetables:1335 [ 424.131645][T18779] sec_pagetables:0 bounce:0 [ 424.131645][T18779] kernel_misc_reclaimable:0 [ 424.131645][T18779] free:1277762 free_pcp:15097 free_cma:0 [ 424.217898][T18779] Node 0 active_anon:26772kB inactive_anon:0kB active_file:12828kB inactive_file:160040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138112kB dirty:252kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17076kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 424.252927][T18779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 424.271123][T18771] tipc: Resetting bearer [ 424.290944][T18779] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.341699][T18779] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 424.363322][T18768] tipc: Resetting bearer [ 424.383160][T18779] Node 0 DMA32 free:1217664kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29772kB inactive_anon:0kB active_file:12828kB inactive_file:160040kB unevictable:1536kB writepending:252kB zspages:0kB present:3129332kB managed:2554120kB mlocked:0kB bounce:0kB free_pcp:36796kB local_pcp:19772kB free_cma:0kB [ 424.422670][T18779] lowmem_reserve[]: 0 0 1 1 1 [ 424.432518][T18779] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.475696][T18768] tipc: Disabling bearer [ 424.507585][T18779] lowmem_reserve[]: 0 0 0 0 0 [ 424.519846][T18779] Node 1 Normal free:3877248kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21216kB local_pcp:13920kB free_cma:0kB [ 424.554059][T18779] lowmem_reserve[]: 0 0 0 0 0 [ 424.559750][T18779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 424.573209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.608449][T18779] Node 0 DMA32: 2493*4kB (U) 3596*8kB (UE) 2127*16kB (UM) 288*32kB (UME) 73*64kB (UM) 144*128kB (UME) 301*256kB (UM) 255*512kB (UME) 202*1024kB (UM) 74*2048kB (UME) 132*4096kB (UM) = 1211780kB [ 424.628657][T18779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 424.642924][T18779] Node 1 Normal: 170*4kB (U) 43*8kB (UME) 44*16kB (UME) 112*32kB (UME) 29*64kB (UME) 15*128kB (UME) 2*256kB (M) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 943*4096kB (M) = 3877248kB [ 424.700237][T18779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.711870][T18779] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.742656][T18779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.749622][T18804] netlink: 'syz.3.3537': attribute type 3 has an invalid length. [ 424.780671][T18779] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.791839][T18779] 46202 total pagecache pages [ 424.796570][T18779] 0 pages in swap cache [ 424.801394][T18779] Free swap = 124996kB [ 424.805795][T18779] Total swap = 124996kB [ 424.822430][T18779] 2097051 pages RAM [ 424.857152][T18779] 0 pages HighMem/MovableOnly [ 424.872451][T18779] 426623 pages reserved [ 424.889732][T18779] 0 pages cma reserved [ 424.915766][T18811] openvswitch: netlink: EtherType 50a is less than min 600 [ 425.027354][T18821] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 425.077162][T18821] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 425.131872][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.474170][T18844] pim6reg: entered allmulticast mode [ 425.498884][T18846] Cannot find map_set index 65533 as target [ 425.510617][T18846] xt_ipcomp: unknown flags 1D [ 425.610938][ T9269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.880809][T18860] netlink: 'syz.5.3556': attribute type 1 has an invalid length. [ 425.911011][T18866] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 426.179349][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.244626][T18876] geneve2: entered promiscuous mode [ 426.258800][T18876] geneve2: entered allmulticast mode [ 426.755015][T18898] Bluetooth: MGMT ver 1.23 [ 427.209610][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.300230][T18918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.422276][T18918] netlink: 'syz.4.3571': attribute type 83 has an invalid length. [ 427.441464][T18918] netlink: 'syz.4.3571': attribute type 21 has an invalid length. [ 427.530342][T18934] syzkaller0: entered promiscuous mode [ 427.535887][T18934] syzkaller0: entered allmulticast mode [ 427.555722][T18918] __nla_validate_parse: 8 callbacks suppressed [ 427.555754][T18918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3571'. [ 427.619272][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3576'. [ 428.025345][T18962] xt_hashlimit: size too large, truncated to 1048576 [ 428.266091][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.310737][T18966] IPVS: set_ctl: invalid protocol: 0 172.20.20.62:20004 [ 428.379370][T18967] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 428.389806][T18967] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 428.648467][ T7452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.051780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.303777][ T1210] net_ratelimit: 1 callbacks suppressed [ 429.303793][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.514173][T18976] netlink: 'syz.1.3585': attribute type 21 has an invalid length. [ 429.519797][T18974] syzkaller1: entered promiscuous mode [ 429.538099][T18974] syzkaller1: entered allmulticast mode [ 429.550036][T18976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3585'. [ 429.584643][T18978] netlink: 'syz.1.3585': attribute type 21 has an invalid length. [ 429.622366][T18978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3585'. [ 429.773837][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.328351][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.049212][ T7452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.370564][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.408455][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.667607][ T5197] udevd[5197]: worker [5853] /devices/virtual/block/nbd1 timeout; kill it [ 432.676382][ T5197] udevd[5197]: seq 13367 '/devices/virtual/block/nbd1' killed [ 432.807816][ T9270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.151372][T18980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.160983][T18980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.172610][T18980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.201999][T18982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3588'. [ 433.213184][T18982] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.220992][T18982] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.241479][T18985] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3589'. [ 433.497004][T18997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.636459][T19005] syzkaller0: entered promiscuous mode [ 433.642085][T19005] syzkaller0: entered allmulticast mode [ 433.667644][T19005] tipc: Started in network mode [ 433.672585][T19005] tipc: Node identity 324bd5ecced5, cluster identity 4711 [ 433.682267][T19005] tipc: Enabled bearer , priority 0 [ 433.719253][T19004] tipc: Resetting bearer [ 433.800987][T19004] tipc: Disabling bearer [ 434.096720][T19019] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3601'. [ 434.345631][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3605'. [ 434.492306][ T7436] net_ratelimit: 7 callbacks suppressed [ 434.492326][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.564844][T19037] team0: Port device team_slave_0 removed [ 434.871711][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 434.918827][T19052] netlink: 'syz.3.3609': attribute type 1 has an invalid length. [ 434.926625][T19052] netlink: 'syz.3.3609': attribute type 2 has an invalid length. [ 435.021490][T19058] netlink: 'syz.5.3611': attribute type 6 has an invalid length. [ 435.269729][T19072] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 435.538508][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.759154][T19096] x_tables: duplicate underflow at hook 1 [ 435.841071][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'. [ 435.859434][ T9269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.041386][T19113] xt_hashlimit: size too large, truncated to 1048576 [ 436.173240][T19120] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3622'. [ 436.571083][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.692240][T19145] xt_cgroup: path and classid specified [ 436.830713][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3632'. [ 436.841391][T19156] IPv6: addrconf: prefix option has invalid lifetime [ 437.270745][T19175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3636'. [ 437.280592][T19175] netlink: 'syz.5.3636': attribute type 7 has an invalid length. [ 437.295682][T19175] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3636'. [ 437.434724][T19182] netlink: 'syz.5.3639': attribute type 7 has an invalid length. [ 437.474996][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.475543][T19182] netlink: 'syz.5.3639': attribute type 7 has an invalid length. [ 437.489799][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.509699][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.520484][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.597102][T19187] syzkaller0: entered promiscuous mode [ 437.610335][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.627902][T19187] syzkaller0: entered allmulticast mode [ 437.871621][T19200] tunl0: entered promiscuous mode [ 437.892985][T19200] netlink: 'syz.3.3646': attribute type 3 has an invalid length. [ 437.963307][T19202] bond1: entered promiscuous mode [ 437.971599][T19202] bond1: entered allmulticast mode [ 437.980399][T19202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.190085][T19220] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 438.265567][T19226] netlink: 'syz.1.3652': attribute type 3 has an invalid length. [ 438.549874][T19246] netlink: 'syz.3.3658': attribute type 1 has an invalid length. [ 438.559059][T19246] __nla_validate_parse: 2 callbacks suppressed [ 438.559079][T19246] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3658'. [ 438.593567][T19246] sctp: [Deprecated]: syz.3.3658 (pid 19246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.593567][T19246] Use struct sctp_sack_info instead [ 438.793185][T19252] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 438.829104][T19255] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3660'. [ 438.848637][T19256] syzkaller0: entered promiscuous mode [ 438.854390][T19256] syzkaller0: entered allmulticast mode [ 439.063676][T19260] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3659'. [ 439.319420][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 439.356759][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.370945][T19278] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 439.381992][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.390407][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.398632][T19282] veth0: entered promiscuous mode [ 439.399081][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.412304][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 439.432205][T19278] tipc: Enabled bearer , priority 0 [ 439.440299][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.449152][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.456547][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.490711][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.503142][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 439.580649][T19275] tipc: Disabling bearer [ 439.607251][T19280] veth0: left promiscuous mode [ 439.674785][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3671'. [ 439.786573][T19284] syzkaller0: entered promiscuous mode [ 439.805646][T19284] syzkaller0: entered allmulticast mode [ 440.099466][T19306] openvswitch: netlink: Actions may not be safe on all matching packets [ 441.527577][ T5850] Bluetooth: hci6: command tx timeout [ 441.935703][T19331] rdma_op ffff8880852f59f0 conn xmit_rdma 0000000000000000 [ 442.101859][T19279] virt_wifi0 speed is unknown, defaulting to 1000 [ 442.140036][T19279] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.175786][T19339] netlink: 'syz.3.3684': attribute type 25 has an invalid length. [ 442.184254][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3684'. [ 442.205993][T19339] netlink: 'syz.3.3684': attribute type 25 has an invalid length. [ 442.206482][T13267] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 442.214573][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3684'. [ 442.234112][T19341] netlink: 'syz.3.3684': attribute type 10 has an invalid length. [ 442.263775][T13267] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 442.285601][T19341] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.308096][T19341] bridge_slave_1: left allmulticast mode [ 442.352505][T19341] bridge_slave_1: left promiscuous mode [ 442.415715][T19341] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.474627][T19341] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 442.542331][T13267] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 442.586026][T13267] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 442.739350][T19367] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 442.895745][T19376] netlink: 'syz.4.3691': attribute type 1 has an invalid length. [ 442.991816][T19376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.048875][T19376] bond2: (slave gretap1): making interface the new active one [ 443.058555][T19376] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 443.175513][T19382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.209105][T19385] dvmrp1: entered allmulticast mode [ 443.235510][T19383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.262289][T19382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.422283][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3696'. [ 443.544043][T19279] chnl_net:caif_netlink_parms(): no params data found [ 443.617873][ T5850] Bluetooth: hci6: command tx timeout [ 443.708085][T19408] netlink: 'syz.1.3697': attribute type 4 has an invalid length. [ 443.715882][T19408] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3697'. [ 443.756724][T19401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.834436][T19279] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.863818][T19279] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.887042][T19279] bridge_slave_0: entered allmulticast mode [ 443.910168][T19279] bridge_slave_0: entered promiscuous mode [ 443.922511][T19279] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.930069][T19279] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.938473][T19279] bridge_slave_1: entered allmulticast mode [ 443.946225][T19279] bridge_slave_1: entered promiscuous mode [ 443.978994][T19419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3702'. [ 444.070186][T19279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.086207][T19279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.195401][T19279] team0: Port device team_slave_0 added [ 444.241197][T19279] team0: Port device team_slave_1 added [ 444.295162][T19279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.302724][T19279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.383967][T19279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.427263][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880581bf400: rx timeout, send abort [ 444.450008][T19279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.461873][T19279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.489894][T19279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.555091][T19437] bond2: entered promiscuous mode [ 444.561886][T19437] bond2: entered allmulticast mode [ 444.571839][T19437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.698234][T19279] hsr_slave_0: entered promiscuous mode [ 444.705061][T19279] hsr_slave_1: entered promiscuous mode [ 444.720158][T19279] debugfs: 'hsr0' already exists in 'hsr' [ 444.726137][T19279] Cannot create hsr debugfs directory [ 444.808893][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3711'. [ 444.913974][T19450] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3712'. [ 444.928852][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057db0800: rx timeout, send abort [ 444.939831][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880581bf400: abort rx timeout. Force session deactivation [ 445.158695][T19466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3715'. [ 445.263519][T19466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3715'. [ 445.437235][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057db0800: abort rx timeout. Force session deactivation [ 445.609086][T19279] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 445.675156][T19279] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 445.696222][ T5850] Bluetooth: hci6: command tx timeout [ 445.731299][T19279] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 445.760968][T19279] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.054223][T19507] netlink: 'syz.4.3727': attribute type 29 has an invalid length. [ 446.084409][T19279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.140888][T19279] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.185182][T11557] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.192426][T11557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.245983][T19516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3730'. [ 446.277991][T19516] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3730'. [ 446.302825][T19516] Bluetooth: MGMT ver 1.23 [ 446.336008][T11557] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.343248][T11557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.462492][T19518] IPVS: Error connecting to the multicast addr [ 446.473689][T19525] netlink: 'syz.3.3732': attribute type 83 has an invalid length. [ 446.606700][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3733'. [ 446.714231][T19537] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3734'. [ 446.748229][T19537] netlink: ct family unspecified [ 447.103798][T19279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.724340][T19279] veth0_vlan: entered promiscuous mode [ 447.739623][T19279] veth1_vlan: entered promiscuous mode [ 447.768126][ T5850] Bluetooth: hci6: command tx timeout [ 447.790515][T19279] veth0_macvtap: entered promiscuous mode [ 447.812048][T19279] veth1_macvtap: entered promiscuous mode [ 447.852496][T19279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.873702][T19279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.891950][T13273] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.901901][T13273] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.914539][T13273] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.925943][T13273] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.061800][T11557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.071203][T11557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.119678][T13273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.128995][T13273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.929793][T19626] bond3: Unable to set up delay as MII monitoring is disabled [ 448.957103][T19626] bond3 (unregistering): Released all slaves [ 449.021743][T19636] bond3: option mode: invalid value (133) [ 449.050773][T19646] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 449.051571][T19647] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 449.097657][T19636] bond3 (unregistering): Released all slaves [ 449.360683][T19658] __nla_validate_parse: 2 callbacks suppressed [ 449.360702][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3761'. [ 449.421368][T19661] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 449.551519][T19666] syzkaller0: entered promiscuous mode [ 449.574786][T19666] syzkaller0: entered allmulticast mode [ 449.585265][T19671] IPVS: length: 17 != 8 [ 450.047043][T19692] can: request_module (can-proto-5) failed. [ 450.288254][T19704] openvswitch: netlink: Multiple metadata blocks provided [ 450.606899][T19706] syzkaller0: entered promiscuous mode [ 450.627724][T19706] syzkaller0: entered allmulticast mode [ 450.706999][T19721] x_tables: duplicate underflow at hook 3 [ 450.714667][T19721] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 451.136466][T19742] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 451.361971][T19746] syzkaller1: entered promiscuous mode [ 451.382239][T19746] syzkaller1: entered allmulticast mode [ 451.439141][T19757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3791'. [ 451.458327][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 451.474663][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 451.553798][T19763] netlink: 'syz.6.3793': attribute type 2 has an invalid length. [ 451.653167][T19763] 9: entered promiscuous mode [ 451.953848][T19787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3800'. [ 451.996210][T19787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3800'. [ 452.063323][T19795] netlink: 'syz.6.3803': attribute type 16 has an invalid length. [ 452.081646][T19793] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 452.083469][T19795] netlink: 'syz.6.3803': attribute type 17 has an invalid length. [ 452.093600][T19791] veth0: entered promiscuous mode [ 452.108736][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3802'. [ 452.128394][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3801'. [ 452.157694][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3803'. [ 452.196530][T19797] block nbd2: Unsupported socket: should be TCP or UNIX. [ 452.310620][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3805'. [ 452.374129][T19795] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.382006][T19795] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.540814][T19795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.562620][T19795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.822962][T13273] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.833255][T13273] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.915014][T13273] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.938509][T13273] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.129854][T19845] nbd: must specify at least one socket [ 454.456526][T19932] sctp: [Deprecated]: syz.4.3837 (pid 19932) Use of int in max_burst socket option deprecated. [ 454.456526][T19932] Use struct sctp_assoc_value instead [ 454.627109][T19932] __nla_validate_parse: 3 callbacks suppressed [ 454.627128][T19932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3837'. [ 454.730939][ T56] block nbd1: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 300 seconds [ 454.799555][T19949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3842'. [ 454.900627][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3844'. [ 454.920167][T19951] x_tables: duplicate underflow at hook 2 [ 454.976928][T19951] netlink: 'syz.3.3844': attribute type 21 has an invalid length. [ 454.993072][T19951] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3844'. [ 455.013119][T19951] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3844'. [ 455.309585][T19969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.596291][T19986] netlink: 'syz.3.3857': attribute type 1 has an invalid length. [ 455.696568][T19986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.771383][T19990] vlan2: entered allmulticast mode [ 455.783748][T19990] veth0_to_bond: entered allmulticast mode [ 455.794712][T19990] bond3: (slave vlan2): Opening slave failed [ 455.979647][T20000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3861'. [ 456.070794][T20007] netlink: 'syz.4.3863': attribute type 10 has an invalid length. [ 456.109448][T20007] bridge0: port 3(team0) entered blocking state [ 456.115942][T20007] bridge0: port 3(team0) entered disabled state [ 456.133944][T20007] team0: entered allmulticast mode [ 456.152460][T20007] team_slave_0: entered allmulticast mode [ 456.174402][T20007] team_slave_1: entered allmulticast mode [ 456.199264][T20007] team0: entered promiscuous mode [ 456.215697][T20007] team_slave_0: entered promiscuous mode [ 456.240586][T20007] team_slave_1: entered promiscuous mode [ 456.258367][T20007] bridge0: port 3(team0) entered blocking state [ 456.264853][T20007] bridge0: port 3(team0) entered forwarding state [ 456.341583][T20021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3867'. [ 456.417670][T20021] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3867'. [ 456.569493][T20036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3872'. [ 456.871472][T20042] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 456.916314][T20054] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3876'. [ 457.129321][T20066] netlink: 'syz.4.3879': attribute type 21 has an invalid length. [ 457.225743][T20066] bond3: Unable to set down delay as MII monitoring is disabled [ 457.271954][T20066] bond3 (unregistering): Released all slaves [ 457.981823][T20115] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 458.009301][T20111] netlink: 'syz.5.3889': attribute type 30 has an invalid length. [ 458.130157][T20111] bond2: option arp_missed_max: invalid value (0) [ 458.192988][T20111] bond2: option arp_missed_max: allowed values 1 - 255 [ 458.254273][T20111] bond2 (unregistering): Released all slaves [ 458.389542][ T5492] veth0_macvtap: left promiscuous mode [ 458.644106][T20145] pim6reg1: entered promiscuous mode [ 458.664078][T20145] pim6reg1: entered allmulticast mode [ 459.593588][T20195] netlink: 'syz.6.3912': attribute type 1 has an invalid length. [ 459.632320][T20196] __nla_validate_parse: 14 callbacks suppressed [ 459.632338][T20196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3913'. [ 459.823190][T20206] Cannot find set identified by id 65534 to match [ 459.886561][T20210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.953663][T20210] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3915'. [ 460.086065][T20212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.229392][T20215] IPVS: Scheduler module ip_vs_sip not found [ 460.469827][T20245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3924'. [ 460.491987][T20249] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3925'. [ 460.544104][T20253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'. [ 460.642103][T20253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'. [ 460.799599][T20264] netlink: 'syz.1.3927': attribute type 7 has an invalid length. [ 460.865429][T20265] veth9: entered allmulticast mode [ 461.044644][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3930'. [ 461.150099][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3930'. [ 461.252546][T20279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3931'. [ 461.375042][T20291] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3934'. [ 461.531520][T13278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.568005][T13278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.636444][T20298] netlink: 'syz.5.3937': attribute type 21 has an invalid length. [ 461.898144][T20315] netlink: 'syz.6.3944': attribute type 7 has an invalid length. [ 461.927666][T20315] netlink: 'syz.6.3944': attribute type 8 has an invalid length. [ 461.969575][T20315] team0: entered promiscuous mode [ 461.989656][T20315] team_slave_0: entered promiscuous mode [ 462.013568][T20315] team_slave_1: entered promiscuous mode [ 462.025697][T20315] bond0: entered promiscuous mode [ 462.038229][T20315] bond_slave_0: entered promiscuous mode [ 462.040578][T20328] netlink: 'syz.4.3946': attribute type 1 has an invalid length. [ 462.052911][T20315] bond_slave_1: entered promiscuous mode [ 462.072501][T20315] gretap0: entered promiscuous mode [ 462.102081][T20315] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 462.122248][T20315] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 462.133487][T20315] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 462.145049][T20315] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 462.194418][T20328] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 462.855103][T20368] veth0_virt_wifi: default FDB implementation only supports local addresses [ 462.901052][T20371] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 462.944087][T20371] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 463.001687][T20371] gretap1: entered promiscuous mode [ 463.006962][T20371] gretap1: entered allmulticast mode [ 463.146385][T20382] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 463.308778][T20388] ksmbd: Unknown IPC event: 3, ignore. [ 463.753481][T20418] syzkaller0: entered promiscuous mode [ 463.767710][T20418] syzkaller0: entered allmulticast mode [ 463.794578][T20422] openvswitch: netlink: IP tunnel dst address not specified [ 463.817720][T20418] tipc: Started in network mode [ 463.822661][T20418] tipc: Node identity 9e78c8bc17d9, cluster identity 4711 [ 463.830421][T20418] tipc: Enabled bearer , priority 0 [ 463.845431][T20416] tipc: Resetting bearer [ 463.921449][T20416] tipc: Disabling bearer [ 464.113312][T20433] netlink: 'syz.5.3975': attribute type 83 has an invalid length. [ 464.134699][T20433] netlink: 'syz.5.3975': attribute type 1 has an invalid length. [ 464.571182][T20460] geneve2: entered promiscuous mode [ 464.623097][T20457] netlink: 'syz.6.3982': attribute type 1 has an invalid length. [ 464.733255][T20462] bond2: (slave bridge1): making interface the new active one [ 464.785234][T20462] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 464.829891][T20457] sctp: [Deprecated]: syz.6.3982 (pid 20457) Use of int in maxseg socket option. [ 464.829891][T20457] Use struct sctp_assoc_value instead [ 465.293026][T20506] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 465.318107][T20506] xt_hashlimit: max too large, truncated to 1048576 [ 465.384794][T20510] __nla_validate_parse: 22 callbacks suppressed [ 465.384814][T20510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3997'. [ 465.402201][T20510] netlink: 'syz.4.3997': attribute type 7 has an invalid length. [ 465.410536][T20510] netlink: 'syz.4.3997': attribute type 8 has an invalid length. [ 465.422288][T20510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3997'. [ 465.500597][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 465.568318][T20515] bond0: entered promiscuous mode [ 465.573433][T20515] bond_slave_0: entered promiscuous mode [ 465.601306][T20515] bond_slave_1: entered promiscuous mode [ 465.631116][T20515] bond0: left promiscuous mode [ 465.641459][T20515] bond_slave_0: left promiscuous mode [ 465.647248][T20515] bond_slave_1: left promiscuous mode [ 465.684498][T20521] veth0: entered promiscuous mode [ 465.691676][T20517] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.935133][T20522] veth0: left promiscuous mode [ 466.236866][T20551] Cannot find del_set index 1 as target [ 466.263657][T20551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4010'. [ 466.303413][T20551] netlink: 'syz.4.4010': attribute type 1 has an invalid length. [ 466.374819][T20547] "syz.1.4008" (20547) uses obsolete ecb(arc4) skcipher [ 466.728449][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4016'. [ 467.112724][T20594] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 467.321810][T20609] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 467.343128][T20608] openvswitch: netlink: Key type 15236 is out of range max 32 [ 467.570683][T20624] netlink: 'syz.3.4028': attribute type 4 has an invalid length. [ 467.608999][T20628] netlink: 'syz.5.4029': attribute type 11 has an invalid length. [ 467.631810][T20626] sctp: [Deprecated]: syz.5.4029 (pid 20626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.631810][T20626] Use struct sctp_sack_info instead [ 467.670923][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4031'. [ 467.759628][T20638] xt_TCPMSS: Only works on TCP SYN packets [ 467.779038][T20640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4031'. [ 467.829134][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4031'. [ 467.907015][T20649] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 467.934111][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4033'. [ 468.017825][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4035'. [ 468.300395][T20668] netlink: 'syz.5.4039': attribute type 7 has an invalid length. [ 468.355421][T20668] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.370735][T20668] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.522028][T20668] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.539454][T20668] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.670845][T20668] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.682816][T20668] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.720117][T20665] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.730323][T20665] ip6_vti0 speed is unknown, defaulting to 1000 [ 468.771003][T20668] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.797474][T20668] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.958138][T13273] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.968833][T13273] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.005613][T13273] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.022147][T13273] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.072949][T13267] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.086415][T13267] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.147511][T13267] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.155767][T13267] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.570957][T20750] __nla_validate_parse: 1 callbacks suppressed [ 470.570978][T20750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4062'. [ 470.754638][T20754] xt_hashlimit: size too large, truncated to 1048576 [ 471.071077][T20766] syzkaller0: entered promiscuous mode [ 471.076796][T20766] syzkaller0: entered allmulticast mode [ 471.563388][T20790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4071'. [ 471.572959][T20790] netlink: 'syz.3.4071': attribute type 7 has an invalid length. [ 471.590010][T20790] netlink: 'syz.3.4071': attribute type 8 has an invalid length. [ 471.619165][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4071'. [ 471.699390][T20799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4074'. [ 471.816128][T20806] netlink: 'syz.4.4075': attribute type 1 has an invalid length. [ 471.936439][T20806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.189436][T20828] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 472.202789][T20828] bond4 (unregistering): Released all slaves [ 472.227005][T20831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4081'. [ 472.309623][T20835] netlink: 'syz.6.4082': attribute type 12 has an invalid length. [ 472.506045][T20841] syzkaller1: entered promiscuous mode [ 472.520638][T20841] syzkaller1: entered allmulticast mode [ 472.822167][T20861] netlink: 13 bytes leftover after parsing attributes in process `syz.6.4089'. [ 472.889801][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4091'. [ 472.901948][T20863] bridge_slave_0: left allmulticast mode [ 472.907959][T20863] bridge_slave_0: left promiscuous mode [ 472.913901][T20863] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.101000][T20873] syzkaller0: entered promiscuous mode [ 473.114886][T20873] syzkaller0: entered allmulticast mode [ 473.166216][T20882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4095'. [ 473.185208][T20874] syzkaller1: entered promiscuous mode [ 473.191258][T20874] syzkaller1: entered allmulticast mode [ 473.202343][T20874] syzkaller1: left promiscuous mode [ 473.208782][T20874] syzkaller1: left allmulticast mode [ 473.328067][T20887] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4096'. [ 473.347778][T20893] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4097'. [ 473.630732][T20902] veth0_to_bond: entered allmulticast mode [ 474.084453][T20929] netlink: 'syz.4.4106': attribute type 5 has an invalid length. [ 474.181566][T20937] vlan2: entered promiscuous mode [ 474.204233][T20937] vlan2: entered allmulticast mode [ 474.221981][T20937] hsr_slave_1: entered allmulticast mode [ 474.929347][T20979] netlink: 'syz.3.4121': attribute type 39 has an invalid length. [ 475.661847][T21018] syzkaller0: entered promiscuous mode [ 475.673840][T21018] syzkaller0: entered allmulticast mode [ 475.699397][T21027] tipc: Started in network mode [ 475.708098][T21027] tipc: Node identity 6611fc8c78b9, cluster identity 4711 [ 475.715677][T21027] tipc: Enabled bearer , priority 0 [ 475.949201][T21025] syzkaller0: entered promiscuous mode [ 475.954753][T21025] syzkaller0: entered allmulticast mode [ 475.962489][T21025] tipc: Resetting bearer [ 476.029223][T13273] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 476.066816][ T9361] tipc: Resetting bearer [ 476.082978][T21042] __nla_validate_parse: 6 callbacks suppressed [ 476.082996][T21042] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4135'. [ 476.577698][T21054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4138'. [ 477.653661][T21025] tipc: Resetting bearer [ 477.965169][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4139'. [ 477.974422][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4139'. [ 478.931288][T21034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.403549][T21025] tipc: Disabling bearer [ 479.436887][ T7437] tipc: Node number set to 514391180 [ 479.590359][T21084] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4144'. [ 479.713073][T21094] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 479.746767][T21096] netlink: 'syz.1.4148': attribute type 1 has an invalid length. [ 479.765421][T21094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.822323][T21096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.875616][T21105] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4151'. [ 479.875997][T21098] bond3: (slave bridge3): making interface the new active one [ 479.885047][T21107] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4151'. [ 479.926001][T21098] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 479.963864][T21102] netlink: 'syz.4.4150': attribute type 4 has an invalid length. [ 480.469291][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4161'. [ 480.481582][T21122] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 480.727303][T21145] syzkaller0: entered promiscuous mode [ 480.776305][T21145] syzkaller0: entered allmulticast mode [ 480.925861][T21153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4167'. [ 480.988095][T21155] : renamed from veth1_vlan (while UP) [ 481.059814][T21155] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4168'. [ 481.106175][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4171'. [ 481.119570][T21165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4171'. [ 481.331297][T21177] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4173'. [ 481.378281][T21182] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 481.431385][T21186] netlink: 'syz.1.4177': attribute type 1 has an invalid length. [ 481.541739][T21186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.549836][T21187] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 481.684382][T21197] netlink: 'syz.5.4179': attribute type 1 has an invalid length. [ 481.706487][T21200] netlink: 'syz.3.4181': attribute type 1 has an invalid length. [ 481.714512][T21200] netlink: 'syz.3.4181': attribute type 4 has an invalid length. [ 481.732695][T21200] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4181'. [ 481.761489][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4183'. [ 482.047258][T21222] syzkaller1: entered promiscuous mode [ 482.052984][T21222] syzkaller1: entered allmulticast mode [ 482.081289][T21224] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4188'. [ 482.225767][T21228] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 482.800421][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4199'. [ 482.836216][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4199'. [ 483.138543][T21289] netlink: 'syz.6.4205': attribute type 1 has an invalid length. [ 483.317961][T21302] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4205'. [ 483.359076][T21289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.048196][T21343] tipc: Enabling of bearer rejected, failed to enable media [ 484.078890][T21343] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4216'. [ 484.464433][T21376] sctp: [Deprecated]: syz.5.4224 (pid 21376) Use of int in maxseg socket option. [ 484.464433][T21376] Use struct sctp_assoc_value instead [ 484.494956][T21378] netlink: 'syz.6.4223': attribute type 2 has an invalid length. [ 484.512383][T21378] : entered promiscuous mode [ 484.728481][T21391] gre0: entered promiscuous mode [ 484.748816][T21391] gre0: entered allmulticast mode [ 484.808601][ T56] block nbd1: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 330 seconds [ 484.990124][T21407] netlink: 'syz.6.4233': attribute type 1 has an invalid length. [ 485.018966][T21402] syzkaller0: entered promiscuous mode [ 485.024599][T21402] syzkaller0: entered allmulticast mode [ 485.151818][T21416] netlink: 'syz.1.4235': attribute type 10 has an invalid length. [ 485.165149][T21417] netlink: 'syz.1.4235': attribute type 10 has an invalid length. [ 485.269199][T21417] team0 (unregistering): Port device team_slave_0 removed [ 485.309497][T21417] team0 (unregistering): Port device team_slave_1 removed [ 485.324134][T21407] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 485.519912][T21432] team1: entered promiscuous mode [ 485.547314][T21432] team1: entered allmulticast mode [ 485.583490][T21442] netlink: 'syz.3.4242': attribute type 1 has an invalid length. [ 486.115553][T21462] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 486.129447][T21462] bond5 (unregistering): Released all slaves [ 486.449738][T21487] __nla_validate_parse: 6 callbacks suppressed [ 486.449756][T21487] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.4258'. [ 486.511104][T21495] IPVS: set_ctl: invalid protocol: 38 127.0.0.1:20000 [ 486.519322][T21497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4258'. [ 486.539002][T21495] netlink: 'syz.1.4260': attribute type 13 has an invalid length. [ 486.547497][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4258'. [ 486.563200][ T9361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.578933][T21495] macvtap0: entered allmulticast mode [ 486.588777][ T9361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.608970][T21495] macvtap0: refused to change device tx_queue_len [ 486.622745][T21505] sctp: [Deprecated]: syz.6.4261 (pid 21505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.622745][T21505] Use struct sctp_sack_info instead [ 486.683248][T21499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.847723][T21515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4265'. [ 486.854227][T21516] netlink: 'syz.3.4266': attribute type 1 has an invalid length. [ 486.921076][T21521] ip6t_REJECT: ECHOREPLY is not supported [ 486.944647][T21516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.012785][T21522] bond4: (slave batadv2): Opening slave failed [ 487.083901][T21530] syzkaller0: entered promiscuous mode [ 487.091967][T21530] syzkaller0: entered allmulticast mode [ 487.285137][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.305183][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.350761][T21535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.366320][T21536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.387847][T21539] netlink: 'syz.6.4274': attribute type 23 has an invalid length. [ 487.406890][T21542] netlink: 'syz.6.4274': attribute type 23 has an invalid length. [ 487.510017][T21546] tipc: Failed to remove unknown binding: 66,0,0/0:3851505066/3851505067 [ 487.531364][T21546] tipc: Failed to remove unknown binding: 66,0,0/0:3851505066/3851505067 [ 487.594150][T21553] netlink: 'syz.5.4279': attribute type 1 has an invalid length. [ 487.652819][T21556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4279'. [ 487.698438][T21556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.728877][T21561] netlink: 'syz.1.4281': attribute type 1 has an invalid length. [ 487.861605][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4282'. [ 487.878235][T21565] xt_bpf: check failed: parse error [ 487.884834][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4282'. [ 487.898234][T21579] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4282'. [ 487.915663][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4282'. [ 487.925026][T21579] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4282'. [ 488.489187][T21618] xt_l2tp: invalid flags combination: 8 [ 488.499978][T21614] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 488.519178][T21618] block nbd2: Unsupported socket: should be TCP or UNIX. [ 488.823839][T21639] bridge0: port 3(team0) entered disabled state [ 488.879367][T21639] team0 (unregistering): left allmulticast mode [ 488.895387][T21639] team_slave_0: left allmulticast mode [ 488.915169][T21639] team_slave_1: left allmulticast mode [ 488.925299][T21639] team0 (unregistering): left promiscuous mode [ 488.932378][T21639] team_slave_0: left promiscuous mode [ 488.940740][T21639] team_slave_1: left promiscuous mode [ 488.946503][T21639] bridge0: port 3(team0) entered disabled state [ 488.966675][T21639] team0 (unregistering): Port device team_slave_0 removed [ 488.980880][T21639] team0 (unregistering): Port device team_slave_1 removed [ 489.163823][T21655] openvswitch: netlink: IP tunnel dst address not specified [ 489.180535][T21653] tipc: Enabled bearer , priority 0 [ 489.232482][T21653] syzkaller0: entered promiscuous mode [ 489.254765][T21661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.264654][T21653] syzkaller0: entered allmulticast mode [ 489.276438][T21653] tipc: Resetting bearer [ 489.364619][T21660] IPv6: addrconf: prefix option has invalid lifetime [ 489.435226][T21652] tipc: Resetting bearer [ 489.654819][T21680] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20001 [ 491.165244][T21652] tipc: Disabling bearer [ 491.175451][T21672] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 491.214526][ T9272] tipc: Node number set to 4238267884 [ 491.366336][T21700] sctp: [Deprecated]: syz.3.4320 (pid 21700) Use of int in max_burst socket option. [ 491.366336][T21700] Use struct sctp_assoc_value instead [ 491.410640][T21709] validate_nla: 4 callbacks suppressed [ 491.410659][T21709] netlink: 'syz.6.4323': attribute type 13 has an invalid length. [ 491.827021][T21732] __nla_validate_parse: 9 callbacks suppressed [ 491.827038][T21732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4328'. [ 491.981926][T21732] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4328'. [ 492.024521][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4329'. [ 492.488603][T21752] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4335'. [ 492.916043][T21778] gre0: entered promiscuous mode [ 492.935331][T21778] gre0: entered allmulticast mode [ 493.344007][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4344'. [ 493.423700][T21798] netlink: 'syz.5.4343': attribute type 1 has an invalid length. [ 493.432568][T21798] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4343'. [ 493.442589][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4343'. [ 493.466073][T21798] netlink: 'syz.5.4343': attribute type 13 has an invalid length. [ 493.480361][T21798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4343'. [ 493.720691][T21808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4348'. [ 493.747307][T21813] netlink: 'syz.1.4347': attribute type 21 has an invalid length. [ 493.757796][T21813] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4347'. [ 493.766959][T21813] netlink: 'syz.1.4347': attribute type 5 has an invalid length. [ 494.076988][T21828] bridge_slave_1: entered allmulticast mode [ 494.449218][T21861] netlink: 'syz.5.4364': attribute type 4 has an invalid length. [ 494.508396][T21866] netlink: 'syz.5.4364': attribute type 4 has an invalid length. [ 494.803447][T21883] netlink: 'syz.5.4369': attribute type 16 has an invalid length. [ 494.855567][T21885] IPv6: sit1: Disabled Multicast RS [ 494.864557][T21885] sit1: entered allmulticast mode [ 495.155224][T21910] netlink: 'syz.6.4374': attribute type 11 has an invalid length. [ 495.921756][T21946] netlink: 'syz.6.4387': attribute type 10 has an invalid length. [ 496.100212][T21960] netlink: 'syz.1.4392': attribute type 29 has an invalid length. [ 496.518962][T21991] validate_nla: 1 callbacks suppressed [ 496.518982][T21991] netlink: 'syz.1.4398': attribute type 2 has an invalid length. [ 496.716280][T21997] bridge4: entered promiscuous mode [ 496.768123][T21997] bridge4: entered allmulticast mode [ 497.000754][T22012] __nla_validate_parse: 20 callbacks suppressed [ 497.000774][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4402'. [ 497.958404][T22024] netlink: 'syz.4.4405': attribute type 1 has an invalid length. [ 497.976617][T22024] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4405'. [ 497.997102][T22024] NCSI netlink: No device for ifindex 0 [ 498.184095][T22040] netlink: 248 bytes leftover after parsing attributes in process `syz.5.4408'. [ 498.328690][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 498.443890][T22053] netlink: 'syz.3.4414': attribute type 11 has an invalid length. [ 498.452335][T22053] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4414'. [ 498.485322][T22056] syzkaller0: entered promiscuous mode [ 498.507698][T22056] syzkaller0: entered allmulticast mode [ 499.211766][T22083] xt_hashlimit: invalid rate [ 499.372796][T22071] syzkaller0: entered promiscuous mode [ 499.378538][T22071] syzkaller0: entered allmulticast mode [ 499.487779][T22088] can: request_module (can-proto-0) failed. [ 499.990113][T22108] netlink: 'syz.6.4424': attribute type 1 has an invalid length. [ 500.068851][T22105] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4424'. [ 500.096730][T22122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4431'. [ 500.488656][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4436'. [ 500.541548][T22150] lo: Caught tx_queue_len zero misconfig [ 500.833859][T22172] netlink: 'syz.6.4440': attribute type 3 has an invalid length. [ 501.151320][T22190] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4444'. [ 501.256209][T22189] syzkaller1: entered promiscuous mode [ 501.285609][T22199] netlink: 'syz.6.4445': attribute type 1 has an invalid length. [ 501.293880][T22189] syzkaller1: entered allmulticast mode [ 501.405235][T22204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4445'. [ 501.461078][T22199] bond5: entered promiscuous mode [ 501.466621][T22199] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.477286][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.490028][T22204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4445'. [ 501.630792][T22212] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 501.852300][T22231] netlink: 'syz.6.4456': attribute type 1 has an invalid length. [ 501.899931][T22231] bond6: entered promiscuous mode [ 501.912313][T22231] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.989251][T22231] bond6: (slave bridge3): making interface the new active one [ 502.007081][T22231] bridge3: entered promiscuous mode [ 502.026652][T22231] bridge3: left promiscuous mode [ 502.141149][T22240] syzkaller1: entered promiscuous mode [ 502.146765][T22240] syzkaller1: entered allmulticast mode [ 502.457212][T22256] __nla_validate_parse: 3 callbacks suppressed [ 502.457231][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4465'. [ 502.495045][T22256] netlink: 'syz.6.4465': attribute type 23 has an invalid length. [ 502.592844][T22263] x_tables: duplicate underflow at hook 1 [ 502.715990][T22269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4468'. [ 502.744254][T22269] netlink: 'syz.5.4468': attribute type 7 has an invalid length. [ 502.767144][T22269] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4468'. [ 502.817673][T22269] erspan0: entered promiscuous mode [ 502.826787][T22269] gretap0: entered promiscuous mode [ 502.843632][T22269] debugfs: 'hsr1' already exists in 'hsr' [ 502.863547][T22269] Cannot create hsr debugfs directory [ 502.891347][T22276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4472'. [ 502.971603][T22281] set match dimension is over the limit! [ 502.985306][T22279] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 503.085677][T22284] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 503.125534][T22293] bridge0: port 3(syz_tun) entered blocking state [ 503.143685][T22293] bridge0: port 3(syz_tun) entered disabled state [ 503.162314][T22293] syz_tun: entered allmulticast mode [ 503.171173][T22293] syz_tun: entered promiscuous mode [ 503.177086][T22293] bridge0: port 3(syz_tun) entered blocking state [ 503.183760][T22293] bridge0: port 3(syz_tun) entered forwarding state [ 503.525872][T22317] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4483'. [ 503.555464][T22314] netlink: 'syz.3.4484': attribute type 33 has an invalid length. [ 503.561189][T22309] netlink: 'syz.1.4483': attribute type 22 has an invalid length. [ 503.571658][T22314] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4484'. [ 503.622343][T22309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4483'. [ 503.632377][T22309] netlink: 'syz.1.4483': attribute type 22 has an invalid length. [ 503.642724][T22309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4483'. [ 504.170972][T22368] xt_cgroup: invalid path, errno=-2 [ 504.316071][T22314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.326100][T22322] netlink: 'syz.5.4486': attribute type 23 has an invalid length. [ 504.622333][T22385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.978527][T22416] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4506'. [ 505.002906][T22419] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 0, id = 0 [ 505.206745][T22426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4514'. [ 505.240570][T22430] syzkaller0: entered promiscuous mode [ 505.246105][T22430] syzkaller0: entered allmulticast mode [ 505.308608][T22430] 0: reclassify loop, rule prio 0, protocol 800 [ 505.474665][T22448] vlan2: entered promiscuous mode [ 505.497621][T22448] geneve1: entered promiscuous mode [ 505.503076][T22448] vlan2: entered allmulticast mode [ 505.536192][T22448] geneve1: entered allmulticast mode [ 505.852639][T22477] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 506.078648][T22493] netlink: 'syz.4.4532': attribute type 1 has an invalid length. [ 506.158261][T22499] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.165540][T22499] bridge0: port 2(bridge_slave_1) entered listening state [ 506.173043][T22499] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.180266][T22499] bridge0: port 1(bridge_slave_0) entered listening state [ 506.322060][T22509] sock: sock_timestamping_bind_phc: sock not bind to device [ 506.429016][T22514] xt_TCPMSS: Only works on TCP SYN packets [ 508.130619][T22535] lo: entered allmulticast mode [ 508.172692][T22535] tunl0: entered allmulticast mode [ 508.244992][T22535] gre0: entered allmulticast mode [ 508.398860][T22535] gretap0: entered allmulticast mode [ 508.434035][T22535] erspan0: entered allmulticast mode [ 508.477496][T22535] ip_vti0: entered allmulticast mode [ 508.512138][T22535] ip6_vti0: entered allmulticast mode [ 508.608710][T22549] __nla_validate_parse: 4 callbacks suppressed [ 508.608731][T22549] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4547'. [ 508.624552][T22549] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4547'. [ 508.641448][T22560] netlink: 'syz.1.4550': attribute type 10 has an invalid length. [ 508.681231][T22563] openvswitch: netlink: IP tunnel dst address not specified [ 508.736112][T22560] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 509.028386][T22584] siw: device registration error -23 [ 509.072208][T22586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4556'. [ 509.523739][T22609] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 509.689326][T22614] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.4563'. [ 509.785669][T22616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4565'. [ 510.302398][T22637] vlan2: entered promiscuous mode [ 510.315734][T22637] bridge0: entered promiscuous mode [ 510.432399][T22644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4575'. [ 510.806080][T22669] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4582'. [ 510.849185][T22670] dvmrp6: entered allmulticast mode [ 510.856978][T22669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4582'. [ 510.886486][T22674] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4584'. [ 510.902079][T22674] netlink: 'syz.1.4584': attribute type 10 has an invalid length. [ 510.930894][T22674] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 511.155838][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4586'. [ 511.183315][T22683] openvswitch: netlink: Missing key (keys=40, expected=80) [ 511.224971][T22683] 0{X: renamed from gretap0 [ 511.235319][T22683] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 511.626196][ T9272] IPVS: starting estimator thread 0... [ 511.731227][T22701] bridge5: entered promiscuous mode [ 511.732190][T22702] IPVS: using max 26 ests per chain, 62400 per kthread [ 511.739177][T22701] bridge5: entered allmulticast mode [ 511.874943][T22686] virt_wifi0 speed is unknown, defaulting to 1000 [ 511.885419][T22686] ip6_vti0 speed is unknown, defaulting to 1000 [ 512.281815][T22721] netlink: 'syz.1.4599': attribute type 2 has an invalid length. [ 512.372939][T22729] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 513.155417][T22776] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002 [ 513.854687][T22809] sctp: [Deprecated]: syz.5.4625 (pid 22809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.854687][T22809] Use struct sctp_sack_info instead [ 513.896068][T22815] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 514.110794][T22823] __nla_validate_parse: 7 callbacks suppressed [ 514.110812][T22823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4629'. [ 514.147098][T22823] nbd: must specify at least one socket [ 514.169786][T22823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4629'. [ 514.238641][T22831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4632'. [ 514.283073][T22829] netlink: 'syz.6.4630': attribute type 10 has an invalid length. [ 514.392956][T22823] syzkaller0: entered promiscuous mode [ 514.399305][T22823] syzkaller0: entered allmulticast mode [ 514.428527][T22829] bridge_slave_1: left allmulticast mode [ 514.434501][T22829] bridge_slave_1: left promiscuous mode [ 514.442196][T22829] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.469158][T22829] bridge_slave_1: entered promiscuous mode [ 514.483719][T22829] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 514.531169][T22844] netlink: 'syz.5.4635': attribute type 1 has an invalid length. [ 514.888094][ T56] block nbd1: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 360 seconds [ 516.188539][T22844] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 516.499338][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4640'. [ 516.534701][T22883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4640'. [ 516.554456][T22883] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.576051][T22883] IPv6: Can't replace route, no match found [ 516.949684][T22899] Set syz1 is full, maxelem 0 reached [ 516.966259][T22899] sit0: mtu less than device minimum [ 517.289305][T22921] Unknown options in mask b7f2 [ 517.336444][T22919] syzkaller0: entered promiscuous mode [ 517.342845][T22919] syzkaller0: entered allmulticast mode [ 517.418207][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4653'. [ 517.493431][T22936] netlink: 'syz.4.4655': attribute type 1 has an invalid length. [ 517.529393][T22936] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4655'. [ 517.569393][T22936] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4655'. [ 517.580237][T22936] netlink: 658 bytes leftover after parsing attributes in process `syz.4.4655'. [ 517.805021][T22945] netlink: 'syz.6.4658': attribute type 4 has an invalid length. [ 517.929703][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4661'. [ 518.468381][T22984] netlink: 'syz.4.4670': attribute type 2 has an invalid length. [ 518.539387][T22984] netlink: 'syz.4.4670': attribute type 4 has an invalid length. [ 518.988015][T23023] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 519.219956][T23038] syzkaller1: entered promiscuous mode [ 519.225505][T23038] syzkaller1: entered allmulticast mode [ 519.252651][T23034] tipc: Enabled bearer , priority 0 [ 519.338431][T23034] ip6gre0: entered promiscuous mode [ 519.353508][T23034] ip6gre0: entered allmulticast mode [ 519.501581][T23033] tipc: Disabling bearer [ 519.651185][T23052] __nla_validate_parse: 2 callbacks suppressed [ 519.651221][T23052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4688'. [ 519.676968][T23052] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 519.772525][T23060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 520.090221][T23076] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4693'. [ 520.127115][T23076] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4693'. [ 520.165671][T23076] netlink: 19 bytes leftover after parsing attributes in process `syz.6.4693'. [ 520.222368][T23081] syzkaller0: entered promiscuous mode [ 520.248151][T23081] syzkaller0: entered allmulticast mode [ 520.268101][T23081] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4695'. [ 520.285298][T23081] tipc: Enabled bearer , priority 0 [ 520.296242][T23080] tipc: Resetting bearer [ 520.336467][T23080] tipc: Disabling bearer [ 520.712066][T23105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4703'. [ 520.722084][T23106] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4703'. [ 520.830249][T23108] bond0: option ad_select: unable to set because the bond device is up [ 520.872158][T23108] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4705'. [ 520.924247][T23111] netlink: 'syz.3.4704': attribute type 12 has an invalid length. [ 520.973258][T23117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.192963][T23128] can: request_module (can-proto-0) failed. [ 521.210224][T23132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4711'. [ 521.228437][T23132] ip6tnl0: Caught tx_queue_len zero misconfig [ 521.272077][T23134] netlink: 'syz.1.4712': attribute type 39 has an invalid length. [ 521.288661][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 521.297200][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 521.618943][T23158] IPVS: set_ctl: invalid protocol: 61 172.30.1.4:20003 [ 521.645532][T23158] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20003 [ 521.947884][T23168] netlink: 'syz.6.4720': attribute type 1 has an invalid length. [ 522.115404][T23168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 522.208116][T23168] netlink: 'syz.6.4720': attribute type 1 has an invalid length. [ 522.214415][T23185] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 522.242495][T23168] netlink: 'syz.6.4720': attribute type 2 has an invalid length. [ 522.274295][T23195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.124482][T23241] syzkaller0: entered promiscuous mode [ 523.143451][T23241] syzkaller0: entered allmulticast mode [ 524.040335][T23295] bond5: entered allmulticast mode [ 524.330475][T23322] IPVS: Unknown mcast interface: vcan0 [ 524.461449][T23333] tipc: Enabled bearer , priority 2 [ 524.478049][T23333] netlink: 'syz.5.4756': attribute type 9 has an invalid length. [ 524.488646][T23333] netlink: 'syz.5.4756': attribute type 6 has an invalid length. [ 525.138528][T23367] syzkaller0: entered promiscuous mode [ 525.144069][T23367] syzkaller0: entered allmulticast mode [ 525.777529][T23408] : renamed from veth1_vlan (while UP) [ 525.937665][T23417] __nla_validate_parse: 3 callbacks suppressed [ 525.937686][T23417] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4774'. [ 526.010826][T23417] syzkaller0: entered promiscuous mode [ 526.016415][T23417] syzkaller0: entered allmulticast mode [ 526.129012][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4778'. [ 526.182234][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4778'. [ 526.225173][T23434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4777'. [ 526.294652][T23436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4779'. [ 526.488065][T23446] tipc: New replicast peer: 255.255.255.255 [ 526.507745][T23446] tipc: Enabled bearer , priority 10 [ 526.535173][T23452] tipc: Enabling of bearer rejected, already enabled [ 526.562873][T23453] netlink: 'syz.5.4783': attribute type 4 has an invalid length. [ 526.574062][T23453] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4783'. [ 526.593792][T23455] !: renamed from dummy0 (while UP) [ 526.806856][T23476] netlink: 'syz.1.4787': attribute type 1 has an invalid length. [ 526.839365][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4787'. [ 526.879836][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4787'. [ 527.555534][T23505] dvmrp0: entered allmulticast mode [ 527.628259][ T10] tipc: Node number set to 3848478268 [ 529.527242][T23453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.763313][T23515] netlink: 211524 bytes leftover after parsing attributes in process `syz.3.4792'. [ 529.904364][T23531] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 529.919766][T23532] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4798'. [ 530.814813][T23560] gre0: left allmulticast mode [ 532.878840][T23529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.100104][T23575] netlink: 'syz.6.4810': attribute type 83 has an invalid length. [ 533.144571][T23581] __nla_validate_parse: 1 callbacks suppressed [ 533.144592][T23581] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.4811'. [ 533.564388][T23610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4817'. [ 533.652628][T23612] netlink: 'syz.3.4820': attribute type 1 has an invalid length. [ 533.661036][T23612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4820'. [ 533.688180][T23615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.920810][T23625] vlan4: entered allmulticast mode [ 533.926266][T23625] hsr0: entered allmulticast mode [ 533.946546][T23625] hsr_slave_0: entered allmulticast mode [ 534.176528][T23637] netlink: 'syz.3.4829': attribute type 58 has an invalid length. [ 534.205485][T23637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4829'. [ 534.270956][T23639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4830'. [ 534.324563][T23645] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 534.685030][T23665] syzkaller0: entered promiscuous mode [ 534.698407][T23665] syzkaller0: entered allmulticast mode [ 534.800758][T23665] tipc: Enabled bearer , priority 0 [ 534.840190][T23672] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4839'. [ 534.901887][T23664] tipc: Resetting bearer [ 535.050110][T23664] tipc: Disabling bearer [ 535.082601][T23692] netdevsim0: entered promiscuous mode [ 535.109649][T23697] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4844'. [ 535.298497][T23706] netlink: 'syz.4.4848': attribute type 6 has an invalid length. [ 535.388175][T23713] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4850'. [ 535.396984][T23716] batadv0: entered promiscuous mode [ 535.689009][ T1210] IPVS: starting estimator thread 0... [ 535.777431][T23733] IPVS: using max 29 ests per chain, 69600 per kthread [ 536.059688][T23701] batadv0: left promiscuous mode [ 536.484890][T23779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4866'. [ 536.647491][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.654845][ C1] bridge0: topology change detected, propagating [ 536.663383][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.670787][ C1] bridge0: topology change detected, propagating [ 536.751438][T23790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4870'. [ 537.053545][T23795] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 537.295674][T23818] xt_l2tp: v2 doesn't support IP mode [ 537.376067][T23818] openvswitch: netlink: Key type 295 is out of range max 32 [ 537.744936][T23842] netlink: 'syz.1.4887': attribute type 21 has an invalid length. [ 537.772883][T23843] 8021q: adding VLAN 0 to HW filter on device bond8 [ 538.392121][T23890] __nla_validate_parse: 5 callbacks suppressed [ 538.392140][T23890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4899'. [ 538.449958][T23890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4899'. [ 538.591909][T23892] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 538.668977][T23912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4905'. [ 538.730185][T23892] bond9 (unregistering): Released all slaves [ 538.799365][T23914] netlink: 'syz.5.4906': attribute type 16 has an invalid length. [ 538.807711][T23914] netlink: 'syz.5.4906': attribute type 17 has an invalid length. [ 539.158249][T23914] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.166046][T23914] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.226119][T23937] sctp: [Deprecated]: syz.6.4913 (pid 23937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.226119][T23937] Use struct sctp_sack_info instead [ 539.265117][T23937] sctp: [Deprecated]: syz.6.4913 (pid 23937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.265117][T23937] Use struct sctp_sack_info instead [ 539.721281][T23914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.006157][T23914] tipc: Resetting bearer [ 540.358748][T11557] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.395590][T11557] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.435112][T11557] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.464088][T11557] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.547701][T13273] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.556132][T13273] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.610272][T23962] netlink: 'syz.3.4918': attribute type 11 has an invalid length. [ 540.614177][T13273] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.646998][T13273] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.664216][T23962] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4918'. [ 540.731246][T23958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4916'. [ 540.743097][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4916'. [ 540.768867][T23965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4919'. [ 540.783343][T23972] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4922'. [ 541.004720][T23972] netlink: 'syz.5.4922': attribute type 1 has an invalid length. [ 541.586173][T24017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4936'. [ 541.596296][T24017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4936'. [ 542.362077][T24057] netlink: 'syz.6.4950': attribute type 3 has an invalid length. [ 542.802715][T24086] erspan0: entered promiscuous mode [ 542.831552][T24088] bridge3: entered promiscuous mode [ 542.836854][T24088] bridge3: entered allmulticast mode [ 542.854704][T24088] team0: Port device bridge3 added [ 543.423869][T24115] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 543.433646][T24115] bond5: option packets_per_slave: allowed values 0 - 65535 [ 543.454339][T24115] bond5 (unregistering): Released all slaves [ 543.583503][T24125] netlink: 'syz.4.4969': attribute type 11 has an invalid length. [ 543.605919][T24125] __nla_validate_parse: 4 callbacks suppressed [ 543.605938][T24125] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4969'. [ 543.693961][T24128] warn_alloc: 1 callbacks suppressed [ 543.693980][T24128] syz.1.4970: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 543.721004][T24128] CPU: 1 UID: 0 PID: 24128 Comm: syz.1.4970 Not tainted syzkaller #0 PREEMPT(full) [ 543.721033][T24128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 543.721047][T24128] Call Trace: [ 543.721055][T24128] [ 543.721063][T24128] dump_stack_lvl+0xe8/0x150 [ 543.721096][T24128] warn_alloc+0x249/0x340 [ 543.721119][T24128] ? stack_trace_save+0xa9/0x100 [ 543.721150][T24128] ? __pfx_warn_alloc+0x10/0x10 [ 543.721179][T24128] ? kasan_save_track+0x4f/0x80 [ 543.721197][T24128] ? kasan_save_track+0x3e/0x80 [ 543.721214][T24128] ? __kasan_kmalloc+0x93/0xb0 [ 543.721233][T24128] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 543.721275][T24128] ? xskq_create+0x56/0x170 [ 543.721295][T24128] ? xsk_setsockopt+0x54c/0x990 [ 543.721322][T24128] ? do_sock_setsockopt+0x17c/0x1b0 [ 543.721346][T24128] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 543.721369][T24128] ? do_syscall_64+0xe2/0xf80 [ 543.721393][T24128] __vmalloc_node_range_noprof+0x132/0x1730 [ 543.721448][T24128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 543.721476][T24128] ? __kasan_kmalloc+0x93/0xb0 [ 543.721503][T24128] vmalloc_user_noprof+0xad/0xe0 [ 543.721523][T24128] ? xskq_create+0xbf/0x170 [ 543.721543][T24128] xskq_create+0xbf/0x170 [ 543.721566][T24128] xsk_init_queue+0xad/0x110 [ 543.721600][T24128] xsk_setsockopt+0x54c/0x990 [ 543.721632][T24128] ? __pfx_xsk_setsockopt+0x10/0x10 [ 543.721663][T24128] ? __pfx_aa_sk_perm+0x10/0x10 [ 543.721691][T24128] ? aa_sock_opt_perm+0xff/0x1a0 [ 543.721720][T24128] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 543.721742][T24128] ? __pfx_xsk_setsockopt+0x10/0x10 [ 543.721777][T24128] do_sock_setsockopt+0x17c/0x1b0 [ 543.721805][T24128] __x64_sys_setsockopt+0x13d/0x1b0 [ 543.721834][T24128] do_syscall_64+0xe2/0xf80 [ 543.721853][T24128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.721871][T24128] ? trace_irq_disable+0x37/0x100 [ 543.721889][T24128] ? clear_bhb_loop+0x60/0xb0 [ 543.721913][T24128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.721933][T24128] RIP: 0033:0x7f8e9579af79 [ 543.721951][T24128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.721968][T24128] RSP: 002b:00007f8e966c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 543.721989][T24128] RAX: ffffffffffffffda RBX: 00007f8e95a15fa0 RCX: 00007f8e9579af79 [ 543.722004][T24128] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 543.722016][T24128] RBP: 00007f8e958316e0 R08: 0000000000000004 R09: 0000000000000000 [ 543.722029][T24128] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.722041][T24128] R13: 00007f8e95a16038 R14: 00007f8e95a15fa0 R15: 00007ffde8dde4a8 [ 543.722074][T24128] [ 543.723131][T24128] Mem-Info: [ 543.912889][T24130] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4968'. [ 544.015608][T24128] active_anon:7041 inactive_anon:0 isolated_anon:0 [ 544.015608][T24128] active_file:3335 inactive_file:40108 isolated_file:0 [ 544.015608][T24128] unevictable:768 dirty:86 writeback:0 [ 544.015608][T24128] slab_reclaimable:13048 slab_unreclaimable:136260 [ 544.015608][T24128] mapped:39641 shmem:1369 pagetables:1392 [ 544.015608][T24128] sec_pagetables:0 bounce:0 [ 544.015608][T24128] kernel_misc_reclaimable:0 [ 544.015608][T24128] free:1252796 free_pcp:15555 free_cma:0 [ 544.015723][T24128] Node 0 active_anon:28164kB inactive_anon:0kB active_file:13340kB inactive_file:160232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158564kB dirty:344kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17864kB pagetables:5436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 544.015779][T24128] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 544.015826][T24128] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.015886][T24128] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 544.015932][T24128] Node 0 DMA32 free:1118012kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28164kB inactive_anon:0kB active_file:13340kB inactive_file:160232kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2554120kB mlocked:0kB bounce:0kB free_pcp:41548kB local_pcp:19728kB free_cma:0kB [ 544.015995][T24128] lowmem_reserve[]: 0 0 1 1 1 [ 544.016039][T24128] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.016096][T24128] lowmem_reserve[]: 0 0 0 0 0 [ 544.016141][T24128] Node 1 Normal free:3877812kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20672kB local_pcp:13632kB free_cma:0kB [ 544.016201][T24128] lowmem_reserve[]: [ 544.283456][T24137] tun0: tun_chr_ioctl cmd 1074025675 [ 544.319652][T24128] 0 0 0 0 0 [ 544.323145][T24128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 544.339128][T24137] tun0: persist disabled [ 544.354403][T24128] Node 0 DMA32: 4949*4kB (UME) 4597*8kB (UM) 2744*16kB (UM) 318*32kB (UME) 82*64kB (UM) 8*128kB (UME) 268*256kB (UME) 273*512kB (UME) 220*1024kB (UME) 83*2048kB (UE) 97*4096kB (UM) = 1117884kB [ 544.379708][T24128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 544.391754][T24128] Node 1 Normal: 167*4kB (U) 43*8kB (UME) 44*16kB (UME) 128*32kB (UME) 30*64kB (UME) 15*128kB (UME) 2*256kB (M) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 943*4096kB (M) = 3877812kB [ 544.426564][T24128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.444836][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4973'. [ 544.454175][T24128] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 544.463983][T24128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.475098][T24128] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 544.486826][T24128] 44808 total pagecache pages [ 544.505179][T24128] 0 pages in swap cache [ 544.509847][T24128] Free swap = 124996kB [ 544.514036][T24128] Total swap = 124996kB [ 544.518890][T24128] 2097051 pages RAM [ 544.522885][T24128] 0 pages HighMem/MovableOnly [ 544.528774][T24128] 426623 pages reserved [ 544.533213][T24128] 0 pages cma reserved [ 544.535064][T24130] syzkaller0: entered promiscuous mode [ 544.543541][T24130] syzkaller0: entered allmulticast mode [ 544.583855][T24145] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 544.973689][ T56] block nbd1: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 390 seconds [ 546.660622][T24168] erspan0: entered allmulticast mode [ 546.823434][T24191] tipc: Enabled bearer , priority 0 [ 546.845116][T24192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4982'. [ 546.910482][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4981'. [ 546.974713][T24200] syzkaller0: entered promiscuous mode [ 546.993687][T24200] syzkaller0: entered allmulticast mode [ 547.096432][T24200] tipc: Resetting bearer [ 547.152573][T24188] tipc: Resetting bearer [ 547.162256][T24211] netlink: 'syz.5.4986': attribute type 8 has an invalid length. [ 547.241870][T24188] tipc: Disabling bearer [ 547.281566][T24216] dvmrp0: left allmulticast mode [ 547.433193][T24216] dvmrp8: entered allmulticast mode [ 547.459699][T24216] dvmrp8: left allmulticast mode [ 547.514048][T24224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4991'. [ 547.561962][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4992'. [ 547.569867][T24224] block nbd2: Unsupported socket: should be TCP or UNIX. [ 547.600317][T24230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4992'. [ 547.637845][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4992'. [ 547.677521][T24230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4992'. [ 548.076784][T24259] netlink: 'syz.4.4998': attribute type 153 has an invalid length. [ 548.426217][T24282] netlink: 'syz.5.5006': attribute type 1 has an invalid length. [ 549.262240][T13273] tipc: Subscription rejected, illegal request [ 549.426135][T24340] __nla_validate_parse: 2 callbacks suppressed [ 549.426154][T24340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5027'. [ 549.531210][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 550.366955][T24398] netlink: 'syz.1.5040': attribute type 1 has an invalid length. [ 550.443453][T24402] openvswitch: netlink: Missing key (keys=40, expected=80) [ 550.615272][T24421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5045'. [ 550.646166][T24422] syzkaller1: entered promiscuous mode [ 550.656345][T24422] syzkaller1: entered allmulticast mode [ 550.695445][T24422] ip6gre1: entered promiscuous mode [ 550.721313][T24422] ip6gre1: entered allmulticast mode [ 550.773780][T24421] geneve2: entered promiscuous mode [ 550.992404][T24433] netlink: 'syz.6.5051': attribute type 1 has an invalid length. [ 551.055422][T24441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5051'. [ 551.143649][T24445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5054'. [ 551.162557][T24433] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 551.495442][T13267] nci: nci_rsp_packet: unsupported rsp opcode 0xf04 [ 552.026279][T24488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5065'. [ 552.129953][T24492] netlink: 'syz.4.5066': attribute type 1 has an invalid length. [ 552.219569][T24494] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 554.401731][T24457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.632113][T24508] set match dimension is over the limit! [ 554.696209][T24519] syzkaller0: entered promiscuous mode [ 554.704324][T24519] syzkaller0: entered allmulticast mode [ 554.741043][T24512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5073'. [ 554.763475][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5073'. [ 554.844868][T24525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5076'. [ 555.040583][T24522] syzkaller0: entered promiscuous mode [ 555.046328][T24522] syzkaller0: entered allmulticast mode [ 555.174843][T24539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5079'. [ 555.184062][T24539] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5079'. [ 555.279332][T24542] netlink: 'syz.4.5080': attribute type 1 has an invalid length. [ 555.357163][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5080'. [ 555.534739][T24548] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5081'. [ 555.679228][T24549] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5081'. [ 557.659809][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5084'. [ 557.689532][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5084'. [ 557.729864][T24560] bridge_slave_0: entered allmulticast mode [ 557.738994][T24565] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 557.786424][T16773] NFSD: Failed to start, no listeners configured. [ 557.950524][T24583] xt_hashlimit: max too large, truncated to 1048576 [ 558.463919][T24598] team_slave_0 (unregistering): left promiscuous mode [ 558.526752][T24598] team0: Port device team_slave_0 removed [ 558.582057][T24612] vlan4: entered promiscuous mode [ 558.600434][T24612] vlan4: entered allmulticast mode [ 558.616112][T24612] hsr_slave_1: entered allmulticast mode [ 559.012956][T24640] netlink: 'syz.5.5106': attribute type 1 has an invalid length. [ 559.135518][T24640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.206291][T24647] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 559.250343][T24650] tunl0: left promiscuous mode [ 559.296427][T24650] gre0: left promiscuous mode [ 559.308353][T24650] gre0: left allmulticast mode [ 559.626425][T24668] openvswitch: netlink: Duplicate or invalid key (type 0). [ 559.648494][T24668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.207286][T24707] __nla_validate_parse: 9 callbacks suppressed [ 560.227540][T24707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5124'. [ 560.253375][T24707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5124'. [ 560.363423][T24715] dvmrp6: left allmulticast mode [ 560.525432][T24690] virt_wifi0 speed is unknown, defaulting to 1000 [ 560.535359][T24690] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.831596][T24741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5135'. [ 561.105692][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5140'. [ 561.275079][T24764] sctp: [Deprecated]: syz.4.5141 (pid 24764) Use of int in maxseg socket option. [ 561.275079][T24764] Use struct sctp_assoc_value instead [ 561.441835][T24766] netlink: 'syz.4.5142': attribute type 1 has an invalid length. [ 561.521681][T24766] 8021q: adding VLAN 0 to HW filter on device bond6 [ 562.115873][T24792] netlink: 'syz.6.5150': attribute type 1 has an invalid length. [ 562.351214][T24804] bond9: option min_links: invalid value (18446744073709551614) [ 562.371734][T24804] bond9: option min_links: allowed values 0 - 2147483647 [ 562.386223][T24804] bond9 (unregistering): Released all slaves [ 562.559552][T24823] ipt_ECN: cannot use operation on non-tcp rule [ 562.893480][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 562.905517][T24833] syzkaller1: entered promiscuous mode [ 562.911685][T24833] syzkaller1: entered allmulticast mode [ 563.323957][T24860] netlink: 'syz.1.5169': attribute type 29 has an invalid length. [ 563.334172][T24860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5169'. [ 563.454249][T24866] tipc: Started in network mode [ 563.476040][T24866] tipc: Node identity 262cd466fec4, cluster identity 4711 [ 563.492020][T24866] tipc: Enabled bearer , priority 0 [ 563.520981][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5172'. [ 563.692403][T24862] syzkaller0: entered promiscuous mode [ 563.698420][T24862] syzkaller0: entered allmulticast mode [ 563.704669][T24862] tipc: Resetting bearer [ 563.729374][T24866] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 563.767251][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5170'. [ 563.807966][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5170'. [ 563.831277][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5170'. [ 563.864351][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5170'. [ 563.999174][ T12] tipc: Resetting bearer [ 564.011915][T24861] tipc: Resetting bearer [ 565.891083][T24861] tipc: Disabling bearer [ 565.919790][T24894] gre0: left promiscuous mode [ 565.949623][T24894] erspan0: left allmulticast mode [ 566.134007][T24894] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.141341][T24894] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.228239][ T9272] tipc: Node number set to 3639137382 [ 566.353767][T24929] __nla_validate_parse: 1 callbacks suppressed [ 566.353787][T24929] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5187'. [ 566.430943][T24933] netlink: 'syz.5.5189': attribute type 21 has an invalid length. [ 566.445227][T24935] netlink: 'syz.6.5188': attribute type 39 has an invalid length. [ 566.458254][T24937] netlink: 'syz.5.5189': attribute type 21 has an invalid length. [ 566.604515][T24947] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 566.699888][T24951] netlink: 'syz.5.5194': attribute type 2 has an invalid length. [ 566.759441][T24951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5194'. [ 566.876700][T24958] sctp: [Deprecated]: syz.5.5194 (pid 24958) Use of int in max_burst socket option deprecated. [ 566.876700][T24958] Use struct sctp_assoc_value instead [ 566.894154][T24966] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5199'. [ 566.976612][T24958] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5194'. [ 567.084724][T24978] netlink: 'syz.1.5202': attribute type 1 has an invalid length. [ 567.093526][T24978] netlink: 280 bytes leftover after parsing attributes in process `syz.1.5202'. [ 567.105957][T24976] syzkaller0: entered promiscuous mode [ 567.115817][T24976] syzkaller0: entered allmulticast mode [ 567.125540][T24980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5203'. [ 567.140562][T24976] netlink: 'syz.6.5201': attribute type 13 has an invalid length. [ 567.209685][T24980] bond7: Invalid ad_actor_system MAC address. [ 567.229730][T24980] bond7: option ad_actor_system: invalid value (1) [ 567.238920][T24980] bond7 (unregistering): Released all slaves [ 567.346399][T24990] netlink: 'syz.1.5205': attribute type 1 has an invalid length. [ 567.493020][T24993] netlink: 'syz.1.5206': attribute type 6 has an invalid length. [ 567.978957][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5210'. [ 568.001357][T25004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5210'. [ 568.296303][T25041] syz.4.5218 uses old SIOCAX25GETINFO [ 568.472553][T25052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5224'. [ 568.483298][T25053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5223'. [ 568.599714][T25057] netlink: 'syz.5.5225': attribute type 13 has an invalid length. [ 568.867690][T25078] netlink: 'syz.4.5229': attribute type 4 has an invalid length. [ 568.924836][T25082] syz.1.5231 (25082) used obsolete PPPIOCDETACH ioctl [ 569.070859][T25091] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 569.414701][T25107] netlink: 'syz.4.5239': attribute type 3 has an invalid length. [ 569.486942][T25115] netlink: 'syz.5.5241': attribute type 4 has an invalid length. [ 569.498183][T25115] mac80211_hwsim hwsim44 wlan1: Caught tx_queue_len zero misconfig [ 569.552184][T25107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 569.566470][T25108] `: renamed from bond0 [ 569.581841][T25118] x_tables: duplicate entry at hook 1 [ 569.786865][T25128] gretap0: entered promiscuous mode [ 569.795785][T25128] gretap0: entered allmulticast mode [ 570.070978][ T1210] IPVS: starting estimator thread 0... [ 570.180983][T25153] ip6tnl0: Caught tx_queue_len zero misconfig [ 570.187841][T25149] IPVS: using max 30 ests per chain, 72000 per kthread [ 570.271836][T25160] ipt_ECN: cannot use operation on non-tcp rule [ 571.363174][T25220] syzkaller0: entered promiscuous mode [ 571.370325][T25220] syzkaller0: entered allmulticast mode [ 571.476214][T25228] bond8: Unable to set down delay as MII monitoring is disabled [ 571.491313][T25228] bond8 (unregistering): Released all slaves [ 571.552493][T25220] validate_nla: 5 callbacks suppressed [ 571.552513][T25220] netlink: 'syz.1.5276': attribute type 1 has an invalid length. [ 571.584138][T25235] lo: Caught tx_queue_len zero misconfig [ 571.609948][T25233] __nla_validate_parse: 20 callbacks suppressed [ 571.609967][T25233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5280'. [ 571.740406][T25233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.819691][T25241] netlink: 'syz.4.5284': attribute type 1 has an invalid length. [ 571.888882][T25245] netlink: 'syz.6.5286': attribute type 11 has an invalid length. [ 571.897051][T25245] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5286'. [ 572.123803][T25260] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5290'. [ 572.216580][T25263] netlink: 'syz.4.5291': attribute type 21 has an invalid length. [ 572.240036][T25263] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5291'. [ 572.260902][T25265] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5292'. [ 572.496684][ T31] INFO: task syz.2.3534:18794 blocked for more than 143 seconds. [ 572.504715][ T31] Not tainted syzkaller #0 [ 572.510478][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.519916][ T31] task:syz.2.3534 state:D stack:25320 pid:18794 tgid:18783 ppid:17097 task_flags:0x400140 flags:0x00080002 [ 572.532181][ T31] Call Trace: [ 572.535514][ T31] [ 572.538856][ T31] __schedule+0x14ea/0x5050 [ 572.543574][ T31] ? __pfx___schedule+0x10/0x10 [ 572.549787][ T31] ? schedule+0x90/0x360 [ 572.554206][ T31] schedule+0x164/0x360 [ 572.558600][ T31] schedule_preempt_disabled+0x13/0x30 [ 572.564102][ T31] __mutex_lock+0x7fe/0x1300 [ 572.569679][ T31] ? __mutex_lock+0x5ac/0x1300 [ 572.574517][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 572.582363][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 572.587639][ T31] ? __nlmsg_put+0xef/0x1b0 [ 572.592195][ T31] ? genlmsg_put+0x137/0x2e0 [ 572.596860][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 572.604522][ T31] ? kmem_cache_free+0x195/0x610 [ 572.610084][ T31] ? nlmon_xmit+0xb0/0x100 [ 572.614541][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 572.620958][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 572.626322][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 572.632408][ T31] ? __asan_memcpy+0x40/0x70 [ 572.637072][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 572.643845][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 572.649644][ T31] genl_rcv_msg+0x61c/0x7a0 [ 572.654210][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.660172][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 572.666323][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 572.672565][ T31] netlink_rcv_skb+0x232/0x4b0 [ 572.677751][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.682830][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.689040][ T31] ? genl_rcv+0x19/0x40 [ 572.693274][ T31] ? down_read+0x272/0x2e0 [ 572.699191][ T31] ? genl_rcv+0xd/0x40 [ 572.703365][ T31] genl_rcv+0x28/0x40 [ 572.707866][ T31] netlink_unicast+0x80f/0x9b0 [ 572.712798][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 572.718756][ T31] ? __alloc_skb+0x193/0x390 [ 572.723398][ T31] ? netlink_sendmsg+0x650/0xb40 [ 572.729260][ T31] ? skb_put+0x11b/0x210 [ 572.733539][ T31] netlink_sendmsg+0x813/0xb40 [ 572.738671][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.744100][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 572.749674][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.755021][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.761055][ T31] ____sys_sendmsg+0xa68/0xad0 [ 572.765862][ T31] ? __might_fault+0xaf/0x130 [ 572.771097][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.776455][ T31] ? import_iovec+0x73/0xa0 [ 572.781918][ T31] ___sys_sendmsg+0x2a5/0x360 [ 572.786678][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 572.792758][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.798308][ T31] ? futex_wake+0x4ac/0x580 [ 572.802980][ T31] ? __fget_files+0x2a/0x420 [ 572.808145][ T31] ? __fget_files+0x3a0/0x420 [ 572.812898][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 572.818674][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.824229][ T31] ? rcu_is_watching+0x15/0xb0 [ 572.829139][ T31] do_syscall_64+0xe2/0xf80 [ 572.833691][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.840661][ T31] ? trace_irq_disable+0x37/0x100 [ 572.846082][ T31] ? clear_bhb_loop+0x60/0xb0 [ 572.851503][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.857665][ T31] RIP: 0033:0x7fcd04f9af79 [ 572.862323][ T31] RSP: 002b:00007fcd05d91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.871242][ T31] RAX: ffffffffffffffda RBX: 00007fcd05215fa0 RCX: 00007fcd04f9af79 [ 572.879896][ T31] RDX: 0000000020044042 RSI: 0000200000000780 RDI: 0000000000000005 [ 572.890596][ T31] RBP: 00007fcd050316e0 R08: 0000000000000000 R09: 0000000000000000 [ 572.899237][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.907250][ T31] R13: 00007fcd05216038 R14: 00007fcd05215fa0 R15: 00007ffd6011b188 [ 572.916080][ T31] [ 572.919560][ T31] [ 572.919560][ T31] Showing all locks held in the system: [ 572.927768][ T31] 1 lock held by khungtaskd/31: [ 572.932665][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 572.943382][ T31] 3 locks held by kworker/u9:0/52: [ 572.952654][ T31] #0: ffff88803154c148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 572.966574][ T31] #1: ffffc90000bd7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 572.980852][ T31] #2: ffff88807da70ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 572.991802][ T31] 2 locks held by getty/5582: [ 572.996506][ T31] #0: ffff88814e1e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 573.007012][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 573.018904][ T31] 1 lock held by udevd/5853: [ 573.023529][ T31] #0: ffff888141fde358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 573.033440][ T31] 3 locks held by kworker/u8:40/11554: [ 573.039284][ T31] #0: ffff88814db92948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 573.052508][ T31] #1: ffffc9000393fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 573.066741][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 573.079407][ T31] 3 locks held by kworker/u8:46/13267: [ 573.084920][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 573.097167][ T31] #1: ffffc9001abefbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 573.109693][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 573.118876][ T31] 2 locks held by syz.0.2971/16773: [ 573.124498][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.133238][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 573.144400][ T31] 2 locks held by syz.2.3534/18794: [ 573.149877][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.158383][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 573.169549][ T31] 2 locks held by syz.1.5276/25219: [ 573.174767][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 573.184056][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 573.195486][ T31] 2 locks held by syz.4.5291/25263: [ 573.201822][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.210444][ T31] #1: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_doit+0x48f/0xf40 [ 573.220128][ T31] 2 locks held by syz.4.5291/25270: [ 573.223660][T23785] Bluetooth: hci6: command 0x0405 tx timeout [ 573.225358][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.242855][ T31] #1: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 573.252441][ T31] 1 lock held by syz.4.5291/25277: [ 573.258541][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 573.267997][ T31] 3 locks held by syz.3.5292/25264: [ 573.273247][ T31] #0: ffff8880589235c8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 573.283997][ T31] #1: ffffffff8fa18270 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 573.296970][ T31] #2: ffff88801eee44d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 573.307738][ T31] 1 lock held by syz.3.5292/25265: [ 573.312881][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 573.323431][ T31] 3 locks held by syz.6.5293/25267: [ 573.328808][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.337253][ T31] #1: ffff888011baa6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 573.348743][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_vendor_cmd_dump+0x92/0x14c0 [ 573.358864][ T31] 1 lock held by syz.6.5293/25272: [ 573.364166][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 573.373863][ T31] 1 lock held by syz.6.5293/25280: [ 573.380417][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 573.390113][ T31] 2 locks held by syz.5.5295/25274: [ 573.395320][ T31] #0: ffffffff8fef61e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 573.405842][ T31] #1: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 573.416627][ T31] 4 locks held by syz.5.5295/25275: [ 573.421991][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.431693][ T31] #1: ffff88807f5136f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 573.444131][ T31] #2: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_dumpit+0xdb/0x1b0 [ 573.453709][ T31] #3: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_prepare_wpan_dev_dump+0x4c/0x450 [ 573.464431][ T31] 2 locks held by dhcpcd/25283: [ 573.470198][ T31] #0: ffff888061d1a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 573.480058][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 573.491419][ T31] [ 573.502608][ T31] ============================================= [ 573.502608][ T31] [ 573.511756][ T31] NMI backtrace for cpu 0 [ 573.511777][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 573.511800][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 573.511812][ T31] Call Trace: [ 573.511820][ T31] [ 573.511829][ T31] dump_stack_lvl+0xe8/0x150 [ 573.511861][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 573.511891][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 573.511924][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 573.511958][ T31] sys_info+0x135/0x170 [ 573.511981][ T31] watchdog+0xf90/0xfe0 [ 573.512009][ T31] ? watchdog+0x209/0xfe0 [ 573.512038][ T31] kthread+0x726/0x8b0 [ 573.512065][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.512085][ T31] ? __pfx_kthread+0x10/0x10 [ 573.512111][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.512128][ T31] ? __pfx_kthread+0x10/0x10 [ 573.512153][ T31] ret_from_fork+0x51b/0xa40 [ 573.512175][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 573.512192][ T31] ? __switch_to+0xc82/0x1410 [ 573.512224][ T31] ? __pfx_kthread+0x10/0x10 [ 573.512248][ T31] ret_from_fork_asm+0x1a/0x30 [ 573.512293][ T31] [ 573.512302][ T31] Sending NMI from CPU 0 to CPUs 1: [ 573.637201][ C1] NMI backtrace for cpu 1 [ 573.637217][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 573.637238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 573.637250][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 573.637284][ C1] RIP: 0010:debug_smp_processor_id+0xb/0x20 [ 573.637313][ C1] Code: f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 a0 39 07 8c <48> c7 c6 e0 39 07 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 573.637330][ C1] RSP: 0018:ffffc90000117428 EFLAGS: 00000283 [ 573.637346][ C1] RAX: 0000000000000001 RBX: ffffffff9083e601 RCX: 0000000080000002 [ 573.637360][ C1] RDX: ffffc90000117501 RSI: ffffffff81759195 RDI: ffffffff8c0739a0 [ 573.637375][ C1] RBP: dffffc0000000000 R08: ffffc90000117d90 R09: 0000000000000000 [ 573.637389][ C1] R10: ffffc900001175d8 R11: fffff52000022ebd R12: ffffc90000117da0 [ 573.637403][ C1] R13: ffffffff81759195 R14: ffffffff8e55a360 R15: ffffffff81759195 [ 573.637419][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 573.637435][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.637447][ C1] CR2: 0000564ecb01a660 CR3: 000000002dddc000 CR4: 00000000003526f0 [ 573.637465][ C1] Call Trace: [ 573.637472][ C1] [ 573.637478][ C1] rcu_is_watching+0x15/0xb0 [ 573.637501][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 573.637519][ C1] lock_release+0x4b/0x3a0 [ 573.637543][ C1] ? deref_stack_reg+0x19f/0x230 [ 573.637564][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 573.637582][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 573.637605][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 573.637623][ C1] ? worker_thread+0xda6/0x1360 [ 573.637651][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 573.637675][ C1] arch_stack_walk+0x11b/0x150 [ 573.637697][ C1] ? kthread+0x726/0x8b0 [ 573.637718][ C1] stack_trace_save+0xa9/0x100 [ 573.637739][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 573.637759][ C1] ? __kfree_skb+0x5d/0x210 [ 573.637781][ C1] ? kthread+0x726/0x8b0 [ 573.637798][ C1] ? ret_from_fork+0x51b/0xa40 [ 573.637817][ C1] kasan_save_track+0x3e/0x80 [ 573.637833][ C1] ? kasan_save_track+0x3e/0x80 [ 573.637847][ C1] ? kasan_save_free_info+0x46/0x50 [ 573.637869][ C1] ? __kasan_slab_free+0x5c/0x80 [ 573.637884][ C1] ? kmem_cache_free+0x195/0x610 [ 573.637907][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 573.637941][ C1] ? process_scheduled_works+0xaec/0x17a0 [ 573.637966][ C1] ? worker_thread+0xda6/0x1360 [ 573.638019][ C1] kasan_save_free_info+0x46/0x50 [ 573.638042][ C1] __kasan_slab_free+0x5c/0x80 [ 573.638059][ C1] kmem_cache_free+0x195/0x610 [ 573.638076][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 573.638105][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 573.638141][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 573.638168][ C1] process_scheduled_works+0xaec/0x17a0 [ 573.638209][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.638234][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 573.638255][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 573.638273][ C1] ? schedule+0x90/0x360 [ 573.638294][ C1] worker_thread+0xda6/0x1360 [ 573.638334][ C1] kthread+0x726/0x8b0 [ 573.638355][ C1] ? __pfx_worker_thread+0x10/0x10 [ 573.638380][ C1] ? __pfx_kthread+0x10/0x10 [ 573.638401][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.638416][ C1] ? __pfx_kthread+0x10/0x10 [ 573.638435][ C1] ret_from_fork+0x51b/0xa40 [ 573.638452][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 573.638466][ C1] ? __switch_to+0xc82/0x1410 [ 573.638491][ C1] ? __pfx_kthread+0x10/0x10 [ 573.638511][ C1] ret_from_fork_asm+0x1a/0x30 [ 573.638544][ C1] [ 573.641820][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 573.641874][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 573.641942][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 573.641975][ T31] Call Trace: [ 573.641996][ T31] [ 573.642026][ T31] vpanic+0x1e0/0x670 [ 573.642109][ T31] panic+0xc5/0xd0 [ 573.642197][ T31] ? __pfx_panic+0x10/0x10 [ 573.642270][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 573.642380][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 573.642465][ T31] watchdog+0xfda/0xfe0 [ 573.642540][ T31] ? watchdog+0x209/0xfe0 [ 573.642623][ T31] kthread+0x726/0x8b0 [ 573.642698][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.642751][ T31] ? __pfx_kthread+0x10/0x10 [ 573.642824][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.642876][ T31] ? __pfx_kthread+0x10/0x10 [ 574.090508][ T31] ret_from_fork+0x51b/0xa40 [ 574.095127][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.100262][ T31] ? __switch_to+0xc82/0x1410 [ 574.104965][ T31] ? __pfx_kthread+0x10/0x10 [ 574.109583][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.114402][ T31] [ 574.118053][ T31] Kernel Offset: disabled [ 574.122413][ T31] Rebooting in 86400 seconds..