last executing test programs: 3m11.150158213s ago: executing program 0 (id=4706): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x275a, 0x0) ioctl$int_in(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffffffffffffff3a, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000153566f43c83aae7f0000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021240011800b00010065787468647200001400028008000740000000000800064000000000140000001000010000000000000000000000000a70e12d6e6bf72398b958236860b2a1df09c313"], 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x80) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], &(0x7f0000000040)=""/196, 0x160, 0xc4, 0x0, 0x1d8e09d4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r7, &(0x7f0000000280)=ANY=[], 0xc2) r9 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m10.841422551s ago: executing program 0 (id=4709): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000278, 0x3, &(0x7f0000000200)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x7a, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f00000007c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x7, 0x4, 0x100, 0x4, 0x4020, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r6, &(0x7f0000000140), &(0x7f0000000200)=""/179}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) preadv(r9, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) splice(r9, 0x0, r7, 0x0, 0xf3a, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x4884, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pS \x00'}, 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x30}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x6, &(0x7f00000000c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x1, 0x0, 0x1, 0x2, 0x4, 0x30, 0xfffffffffffffff0}], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @cgroup_sysctl=0x12, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x6, 0xf1, 0x10}, 0x10, r5, 0xffffffffffffffff, 0x5, &(0x7f0000000c40)=[0xffffffffffffffff, 0x1, r6, r12, r7, r10, r11, r12], &(0x7f0000000c80)=[{0x4, 0x1, 0x8, 0x1}, {0x4, 0x2, 0xe, 0x8}, {0x3, 0x5, 0xc, 0xa}, {0xdb81, 0x4, 0x4, 0x9}, {0x5, 0x5, 0x2, 0x1}], 0x10, 0x9}, 0x94) r13 = socket$unix(0x1, 0x4, 0x0) recvmmsg$unix(r13, &(0x7f0000003000)=[{{&(0x7f0000001140), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001240)=""/68, 0x44}, {&(0x7f00000012c0)=""/255, 0xff}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001440)=""/5, 0x5}, {&(0x7f0000001480)=""/229, 0xe5}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/220, 0xdc}], 0x4, &(0x7f00000026c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002740), 0x6e, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/44, 0x2c}, {&(0x7f0000002800)=""/86, 0x56}, {&(0x7f0000002880)=""/43, 0x2b}], 0x3}}, {{&(0x7f0000002900), 0xfffffe8b, &(0x7f0000002a80)=[{&(0x7f0000002980)=""/157, 0x9d}, {&(0x7f0000002a40)=""/19, 0x13}], 0x2, &(0x7f0000002ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/31, 0x1f}, {&(0x7f0000002d00)=""/66, 0x42}, {&(0x7f0000002d80)=""/245, 0xf5}], 0x4, &(0x7f0000002ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}], 0x5, 0x0, 0x0) r14 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r15) bind$packet(r7, &(0x7f0000001100)={0x11, 0x11, r4, 0x1, 0xf1, 0x6, @local}, 0x14) socket(0xb, 0x2, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x34, r16, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_devices(r14, &(0x7f0000000280)=ANY=[@ANYRES32=r14, @ANYRESHEX=r16, @ANYRES32=r16, @ANYRES32=r15, @ANYBLOB="4852f16a00da6349c6c3e94d0a9a1b269898d7bf4fb822723fc1c820d9cd6f9b8e806ad32c0194d23c9ab4f99ef3f90bf500e4cd56ed511ee3c98c27fb6fe23763fb90352799cba951b253d3d7b27a588466efd95a1ce8fba06fc64db7fc992c390ce0d1c88fc40a3f8427b1b7da55969e3fd5004ecb62873c604cd7962b82f7a4d93b21d47f3e72dfc155c859db082c7a7494e13efa36c3f202309a7264f94573e7f37fb68e5547f36a8665ab2164749b2d218034f462179f211c2d602ac3465f8428e07803bba667c955fb704ad6536e32a1c02483c3a6306257b31aace3ed16b3683ac39171bb603a"], 0xa) 3m10.686361911s ago: executing program 0 (id=4712): r0 = epoll_create(0x401) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a300000000008000240000000012c000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000000140000000400000000000000000000000000000a"], 0x9c}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000280)=""/54, &(0x7f00000002c0)=0x36) close(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x5b, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000ac0)=0x1ff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000b00)=[0x0], &(0x7f0000000840)=[0x0], 0x0, 0x85, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r4, r0, 0xa, 0x2000}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) 3m10.461081727s ago: executing program 0 (id=4716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="110026bd7000ffdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="c745ac844496e763c7ab68603de282"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x2f, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3m10.265362423s ago: executing program 0 (id=4720): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, 0x0, 0x0) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x1}, 0x8) 3m10.046108321s ago: executing program 0 (id=4724): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0xf8, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0xd0, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x230, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x130, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWTABLE={0x1b4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xd8, 0x6, "e30edd820bef0789d5871a6c8bc61b4d8f4d122e01e00a785b05fa38c0615e4960f0c996e6919225e51a369cef0d7e30bb9deda0edc8956fecea3672f4aba05f5c5b24fc4925200e1d4ded4920b2828546c5b0a93cc34fb49194289c075a77396301dbdbef1d7609892d8f15beedf978151d16f84de8090b8b653fcb7f1256694797ece059de2eb035b25567c828d9c1d4157108391d310b36376270f5c2b3f272cdc44042aa8ed8101f2a31d2cfe523c29df5dd57542fb9332aaa6a23c6bd64e4a9a9193c9f5d8240a071be5915853c7416d86a"}, @NFTA_TABLE_USERDATA={0xc5, 0x6, "41f7c6f1cdcf2629202180fb435bffa5a1ad375707e9fc9852cba3937b86b0be736ef24c89a7e498352d9f07d28a5571d9aab178c4c5dd8408ffcb342c36acf8ed5de52ad7e4b7f8bb5788037cc4c6c66c485bfbf60652b0aaf5579fd45d9b1b3494b8610ce8c8b4e5cf977f176442f89124f736d2b8f9eb37420e3e033f6845e536d2bc5178bfa084680aea8f17a21c920239674114b2fa33c728b0631c45dd4f2f0ae6d5f051d7406009b6c15163901d904c5c8c67b725be8395574440fff244"}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x148, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x50, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x89d0266ac5358407}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x92ab6abaf3aa7804}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x4f, 0x7, 0x1, 0x0, "dc5f8bb91eecb73e176751a505475ebfa7b9c06f71b8b4a5c07bf037a7d116f6d8e1f9cc1d703a44df4522a254a0534ec7364926b479fc6527d168f6659d7bc25b76cec0834632b5d62a04"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x778}, 0x1, 0x0, 0x0, 0x44890}, 0x40) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x69, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7, 0x8, 0x8, 0x0, 0x4a6e, 0x40a00004, r4}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) 2m54.991980812s ago: executing program 32 (id=4724): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0xf8, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0xd0, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x230, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x130, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWTABLE={0x1b4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xd8, 0x6, "e30edd820bef0789d5871a6c8bc61b4d8f4d122e01e00a785b05fa38c0615e4960f0c996e6919225e51a369cef0d7e30bb9deda0edc8956fecea3672f4aba05f5c5b24fc4925200e1d4ded4920b2828546c5b0a93cc34fb49194289c075a77396301dbdbef1d7609892d8f15beedf978151d16f84de8090b8b653fcb7f1256694797ece059de2eb035b25567c828d9c1d4157108391d310b36376270f5c2b3f272cdc44042aa8ed8101f2a31d2cfe523c29df5dd57542fb9332aaa6a23c6bd64e4a9a9193c9f5d8240a071be5915853c7416d86a"}, @NFTA_TABLE_USERDATA={0xc5, 0x6, "41f7c6f1cdcf2629202180fb435bffa5a1ad375707e9fc9852cba3937b86b0be736ef24c89a7e498352d9f07d28a5571d9aab178c4c5dd8408ffcb342c36acf8ed5de52ad7e4b7f8bb5788037cc4c6c66c485bfbf60652b0aaf5579fd45d9b1b3494b8610ce8c8b4e5cf977f176442f89124f736d2b8f9eb37420e3e033f6845e536d2bc5178bfa084680aea8f17a21c920239674114b2fa33c728b0631c45dd4f2f0ae6d5f051d7406009b6c15163901d904c5c8c67b725be8395574440fff244"}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x148, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x50, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x89d0266ac5358407}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x92ab6abaf3aa7804}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x4f, 0x7, 0x1, 0x0, "dc5f8bb91eecb73e176751a505475ebfa7b9c06f71b8b4a5c07bf037a7d116f6d8e1f9cc1d703a44df4522a254a0534ec7364926b479fc6527d168f6659d7bc25b76cec0834632b5d62a04"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x778}, 0x1, 0x0, 0x0, 0x44890}, 0x40) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x69, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7, 0x8, 0x8, 0x0, 0x4a6e, 0x40a00004, r4}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) 2m34.974186635s ago: executing program 4 (id=5112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_OPERSTATE={0x5, 0x10, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m34.829471018s ago: executing program 4 (id=5114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x1}}, 0x2e) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r4, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r6, 0x8, 0x70bd26, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) listen(r1, 0x5) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, &(0x7f0000000b80)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) (async) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfc, @loopback}, 0x1c) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) 2m34.655343334s ago: executing program 4 (id=5116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x3, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x20}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x0, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xd8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xd8}}, 0x0) 2m34.585261722s ago: executing program 4 (id=5118): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0x122}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='io.latency\x00', 0x2, 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2404c014) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000100)=@ethtool_modinfo={0x42, 0x3, 0x6}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3300459e", @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 2m34.423067725s ago: executing program 4 (id=5119): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082abd7000fedbdf25510000000800030063d6f26dad3e1446c91d22ed0d6fcad5f5ff8851e5912c0d805142e089459d5dd1562470d1bd92083989257645b5a1ef977d804e8051cd51e4bd643eb42fe45fbd5a7d3e46a1f2bdbc63de971e26e1fd5b65ae02093c6d748f8a04f1f81170863bb8e78787e92473975e171ed8a1f455ed31eb4a511b590400c13f06ab0846a67b6eb93efe44ee632c64141b6ffba8354fb7a3e5a05c66b01d7fe56cb23beb20917586994e5e1d6c3ad953fb8f950b81f2191de0d77bdcd8b828320dc19129975c51369309234f", @ANYRES32=r4, @ANYBLOB="05008a000100000005008a00010000000a00060008021100000000000a000600ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r7}}, 0x40) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r13, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r17, {0x0, 0xb}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x5}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2m33.574949077s ago: executing program 4 (id=5131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (rerun: 32) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002600090000000000000000000300000068000f138a2a60819740aab250a6a16459a354f0ac04bdf25d81144b7871f81db8a5af6e1e25254803bd1c6505fa30aa53244efc6218"], 0x14}}, 0x0) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0x8004b706, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r7], 0x1c}}, 0x4040080) 2m20.781180795s ago: executing program 1 (id=5355): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xe8, &(0x7f0000000740)='cgr\x00up\x00 B\x80\xef\x06\x1e\xd1\xdc\x14Qq\xf3\xf3\x1fS\x9b\xd3\x00\xd3\xf0\xa0\x81.\x98\x1e\xc9\xe3\xfb\x81\xce\x89\xfe\x10t\x17\xf9P\xeb\xb2\x81\xd0T\xcc\x00\xdb\x90=\xb2{\xa8^_QO\x04#/z\x1c\xea\xeb!\xa5=24\xb6\x94RyS_\x11.\xe6~\xcd\xa6\xfaH\v\v\xd0\xed\xc2\x19\x17\xa6z:\x9e\x18\b\xa4G\v\xec\xe3\xe2\xc3\xc3\xf5j\x85\x04\x8b\x11uq,\x12\xb9\xa8)\x12\xd5y\xa4\x90\xe9\x8c\x82\"6*\xf2\x19Z\xcb\x84\xbd\xfd\xc1\xaa*AD\x8b\x04Y\xe7\xdb\xab\x98\x99\x1fEu\xde\x03\x05IK\x91\xc6\xe7c\xc9\x00\x00\x00\x00\xf2\xbd\x1f\xcb&hg`~r\xf9\xd9\xe5\xec\xd4\x89\xd7\xe5\x0e@\xe4\x13\xd5\xfbaYZ\xe0\f\xdd\xfe\xe1\x88\x11\x896\x91s\xa3\xd3t\x1aHG\x06Gj\x13\x1a\x88%\xf6`bK\xd6\x88\xbdG\xbb\x04?u'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) listen(0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000240)={r10, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r10, 0x1}, &(0x7f0000000180)=0x8) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00100e00", @ANYRES16=r12, @ANYBLOB="01000000000000000000010000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 2m19.828880752s ago: executing program 1 (id=5369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x2, 0x6, 0xc, 0x9}, {0x2, 0x7, 0x3, 0x3}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}]}, 0x40}}, 0x0) 2m19.503286224s ago: executing program 1 (id=5374): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x7f}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x41, 0x210}}}}}}]}, 0x48}}, 0x0) 2m19.214515286s ago: executing program 1 (id=5379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff000000007111bf00000000008510000002000000850006000000000095000810000000009541f0366e402759"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x300, 0x0, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x44011) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x11c, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2800}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2000000}}, {0x8}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xe7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2122}, {0x6}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x6) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xeee}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9b9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x1, 0x0, {{0x17, 0x4, 0x1, 0x3b, 0x5c, 0x65, 0x0, 0xcd, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0x68, [@private=0xa010102, @multicast2, @private=0xa010102, @empty]}, @timestamp_prespec={0x44, 0x34, 0xfe, 0x3, 0x6, [{@broadcast, 0x3}, {@loopback, 0xdd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x22}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x7}, {@private=0xa010102, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'sit0\x00', &(0x7f00000008c0)={'syztnl0\x00', r9, 0x0, 0x8, 0x6, 0x10000, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x8, 0xd3, 0x0, 0x7, [0x1]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x2, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfff973280}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x65b}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x24000005) 2m18.874381865s ago: executing program 1 (id=5383): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r4 = epoll_create1(0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@local, @broadcast, 0xffffffffffffffff, "91e4995fb93b569ecc6aeeb856f4809debdd79f131ca543d78e61d7607acbf13", 0xc7d, 0xf2e9f72c, 0x1ff, 0x1}, 0x3c) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x1}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)={0x10000000}) ioctl$sock_proto_private(r3, 0x8b01, &(0x7f0000000000)) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r8, 0x0, 0x0, 0x80000) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 2m18.734778408s ago: executing program 1 (id=5386): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe}, 0x38) 2m18.540480524s ago: executing program 33 (id=5131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (rerun: 32) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002600090000000000000000000300000068000f138a2a60819740aab250a6a16459a354f0ac04bdf25d81144b7871f81db8a5af6e1e25254803bd1c6505fa30aa53244efc6218"], 0x14}}, 0x0) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0x8004b706, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r7], 0x1c}}, 0x4040080) 2m3.671719741s ago: executing program 34 (id=5386): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe}, 0x38) 1m46.380134882s ago: executing program 2 (id=5847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0xfffffffffffffdbc, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xffffffffffffff33}}]}]}, 0x38}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x8c04}, 0x20000000) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x4000000e, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x14, 0x400, 0x70bd29, 0x25dfdbfd, {0x3, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0df40116"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "e13580b39e5af636bbdfd356ced405d2c824a376749e654995e2e9615f03af9fa140d2664b"}]}, 0x48}}, 0x80) 1m46.229704409s ago: executing program 2 (id=5851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9fea010018000300000000000000000f04fe000000005f004aad0da7f3a5e20000882a47421b26f0c7673c7a326e491a0e2d3fa5f773fa31d9a500a0a5b25cbb8b4ba66f128c151f429c33faca18d0806c5d0d93f8912b33df1fa25d645989f738b426968dfa26dab8e96f1619f0158685f28b0dfebeb10f111c76a6ab4634fefc7551eb72f37de5233ffffffffffffffff48441939c50a198f1324f17633ab82a7a81001295620060efef3134feef75d98996ff3c3031cd0d47fa0100000000000000026394c718abb9acd0d5f7e183ef64c89f23859325ef3dba1788e67f12f8746acdce29512d89a112c7db83c4a6da21"], 0x0, 0x28, 0x0, 0x1, 0xffffffff}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000000)=0x3f, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) (async) recvmmsg(r6, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}, 0x4}], 0x1, 0x2, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x4c004, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) (async) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000), 0x4) (async) close(r7) 1m45.906129939s ago: executing program 2 (id=5856): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000100081044881f782db44b904021d080b01000000000000001800150006001500000000120800030043000000a800160037fcb659362e2e55e799aac5525ffa000400c020db2d47782a462c9c801f298225c506000d00036010fab94dcf1c0461c1d67f6f94007134cf66e08000a0e40852a9d7c7c0b7c4a700002a76549eae02ede8359f79d073d37af66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa27e8ddc64193071e9f8775730d16a4683f1aeb4edbb5", 0xd8}], 0x1}, 0x8040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001100)) 1m45.606491464s ago: executing program 2 (id=5862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) close(r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c001a800800058004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r7, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r7, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="e52851c65312af9ea164588f550ad592da13b4a275f5207d1b5aebffb3923eea6635ef1736dd0985", 0x28}, {&(0x7f0000000200)="eb5355c67653a06636ea98b813e4a5268a15c5d02f5f1247cba87e4747a8d224288caa3a7e7b47ff8375ba3b82c772bc6b0a367231ddbcc4f4122b94bb0f20110a1f9115c6a023efa3427bfaefe0699d876ae9b2ddd881f7", 0x58}, {&(0x7f0000000280)="2b34d40a6059259df35ca3325a87bb2bd8899f718add9b4c478fbfd8a9d3462b5d031de808497bc4ea86ba08eff4069583051d78008bd8207b5001a54eadfbc8deb2480fc86e23bb9737706369a06cad9160d0888ded1c0c99d8d3c90bb2c9bf12df32fe317e641d41e3780eaadc1eaca76bc2a660dd3f99bff3ea0ea5177421", 0x80}, {&(0x7f00000003c0)="bde03eb1ccfbff0a9320895cd36be061aca1641abaebb344fe4f44c592986c560672db9dde11c2c2a273d509059de0eed68f56d7c3ee314fbba660c8c251fcff555841d95103bd8c952071b6c14319439fd4cb0b382716b757b6f0ddc98bd696ddd2f01ca84d12ee9639c88c111a707be9615f7e97809a863e8996e54889653d20a5f7", 0x83}], 0x4, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop, @end, @timestamp={0x44, 0x10, 0xf7, 0x0, 0xa, [0x1, 0x7a, 0x2]}, @noop, @cipso={0x86, 0x43, 0x2, [{0x0, 0xf, "f7fbf05ebe514ad971fd040ab6"}, {0x2, 0x8, "a6cf177f94f6"}, {0x2, 0x5, "8c76a9"}, {0x5, 0x4, "b8b1"}, {0x0, 0xa, "9e071063eb88e1ad"}, {0x5, 0xd, "33b6492bcf175f821e2ebd"}, {0x1, 0x2}, {0x5, 0x4, "95dd"}]}, @rr={0x7, 0xb, 0x79, [@local, @loopback]}, @end]}}}], 0x90}, 0x40) ioctl$SIOCX25SDTEFACILITIES(r3, 0x890b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) (async) close(r1) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c001a800800058004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSACTIVE(r7, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) read(r7, 0x0, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="e52851c65312af9ea164588f550ad592da13b4a275f5207d1b5aebffb3923eea6635ef1736dd0985", 0x28}, {&(0x7f0000000200)="eb5355c67653a06636ea98b813e4a5268a15c5d02f5f1247cba87e4747a8d224288caa3a7e7b47ff8375ba3b82c772bc6b0a367231ddbcc4f4122b94bb0f20110a1f9115c6a023efa3427bfaefe0699d876ae9b2ddd881f7", 0x58}, {&(0x7f0000000280)="2b34d40a6059259df35ca3325a87bb2bd8899f718add9b4c478fbfd8a9d3462b5d031de808497bc4ea86ba08eff4069583051d78008bd8207b5001a54eadfbc8deb2480fc86e23bb9737706369a06cad9160d0888ded1c0c99d8d3c90bb2c9bf12df32fe317e641d41e3780eaadc1eaca76bc2a660dd3f99bff3ea0ea5177421", 0x80}, {&(0x7f00000003c0)="bde03eb1ccfbff0a9320895cd36be061aca1641abaebb344fe4f44c592986c560672db9dde11c2c2a273d509059de0eed68f56d7c3ee314fbba660c8c251fcff555841d95103bd8c952071b6c14319439fd4cb0b382716b757b6f0ddc98bd696ddd2f01ca84d12ee9639c88c111a707be9615f7e97809a863e8996e54889653d20a5f7", 0x83}], 0x4, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop, @end, @timestamp={0x44, 0x10, 0xf7, 0x0, 0xa, [0x1, 0x7a, 0x2]}, @noop, @cipso={0x86, 0x43, 0x2, [{0x0, 0xf, "f7fbf05ebe514ad971fd040ab6"}, {0x2, 0x8, "a6cf177f94f6"}, {0x2, 0x5, "8c76a9"}, {0x5, 0x4, "b8b1"}, {0x0, 0xa, "9e071063eb88e1ad"}, {0x5, 0xd, "33b6492bcf175f821e2ebd"}, {0x1, 0x2}, {0x5, 0x4, "95dd"}]}, @rr={0x7, 0xb, 0x79, [@local, @loopback]}, @end]}}}], 0x90}, 0x40) (async) ioctl$SIOCX25SDTEFACILITIES(r3, 0x890b, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) 1m45.122787509s ago: executing program 2 (id=5868): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1m43.235272776s ago: executing program 2 (id=5872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x1, 0x8000, 0x4, 0x5, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x68, 0x0, 0x65, 0x4, 0x0, @empty, @local, {[@cipso={0x86, 0x26, 0x3, [{0x5, 0x5, "f9ee56"}, {0x5, 0x4, "ac0c"}, {0x5, 0x3, "85"}, {0x6, 0x10, "05a35eab05350ffb385edf136c63"}, {0x5, 0x4, "f261"}]}, @ssrr={0x89, 0xb, 0x69, [@rand_addr=0x64010101, @rand_addr=0x64010100]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x720, 0x3, 0x100, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x66, 0x0, 0x2, 0x4, 0x0, @empty, @broadcast, {[@generic={0x88, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7, 0x20, 0x7fff, 0x2, {{0x8, 0x4, 0x1, 0x28, 0x20, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@rr={0x7, 0xb, 0x22, [@broadcast, @private=0xa010102]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x3, 0x6, 0x40, @local, @rand_addr=' \x01\x00', 0x40, 0x20, 0x8, 0xfffffa81}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x0, 0x0, {{0x1e, 0x4, 0x1, 0x3b, 0x78, 0x66, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @empty, {[@lsrr={0x83, 0xf, 0x39, [@local, @broadcast, @empty]}, @cipso={0x86, 0x27, 0x3, [{0x2, 0xf, "9e571c220ccfc3b4f6005b977b"}, {0x5, 0x6, "a6331af1"}, {0x2, 0xc, "a7898612859328a42820"}]}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x8, [{@loopback, 0xffff7d9f}, {@rand_addr=0x64010102, 0x3ff}, {@multicast2, 0x2}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x9}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x1, 0x9, 0x0, @private1, @mcast1, 0x8, 0x8000, 0x4, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x4, 0xfffffff8, {{0xb, 0x4, 0x2, 0x27, 0x2c, 0x68, 0x0, 0x40, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@generic={0x44, 0xa, "d62edba5b3a9cc36"}, @timestamp={0x44, 0xc, 0x7a, 0x0, 0x2, [0x1, 0xfffffff8]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x20c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 1m28.185556486s ago: executing program 35 (id=5872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x1, 0x8000, 0x4, 0x5, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x68, 0x0, 0x65, 0x4, 0x0, @empty, @local, {[@cipso={0x86, 0x26, 0x3, [{0x5, 0x5, "f9ee56"}, {0x5, 0x4, "ac0c"}, {0x5, 0x3, "85"}, {0x6, 0x10, "05a35eab05350ffb385edf136c63"}, {0x5, 0x4, "f261"}]}, @ssrr={0x89, 0xb, 0x69, [@rand_addr=0x64010101, @rand_addr=0x64010100]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x720, 0x3, 0x100, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x66, 0x0, 0x2, 0x4, 0x0, @empty, @broadcast, {[@generic={0x88, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7, 0x20, 0x7fff, 0x2, {{0x8, 0x4, 0x1, 0x28, 0x20, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@rr={0x7, 0xb, 0x22, [@broadcast, @private=0xa010102]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x3, 0x6, 0x40, @local, @rand_addr=' \x01\x00', 0x40, 0x20, 0x8, 0xfffffa81}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x0, 0x0, {{0x1e, 0x4, 0x1, 0x3b, 0x78, 0x66, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @empty, {[@lsrr={0x83, 0xf, 0x39, [@local, @broadcast, @empty]}, @cipso={0x86, 0x27, 0x3, [{0x2, 0xf, "9e571c220ccfc3b4f6005b977b"}, {0x5, 0x6, "a6331af1"}, {0x2, 0xc, "a7898612859328a42820"}]}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x8, [{@loopback, 0xffff7d9f}, {@rand_addr=0x64010102, 0x3ff}, {@multicast2, 0x2}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x9}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x1, 0x9, 0x0, @private1, @mcast1, 0x8, 0x8000, 0x4, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x4, 0xfffffff8, {{0xb, 0x4, 0x2, 0x27, 0x2c, 0x68, 0x0, 0x40, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@generic={0x44, 0xa, "d62edba5b3a9cc36"}, @timestamp={0x44, 0xc, 0x7a, 0x0, 0x2, [0x1, 0xfffffff8]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x20c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 1.996681469s ago: executing program 5 (id=7237): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000008000007110060000000056fc00000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.567241275s ago: executing program 5 (id=7243): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="630ffff00b95114229759ba7b665947dda8f20e1d1b1a1de24ff59e14ae1754bd1f177a0cdf55475f3cd348c11d47eeeabaf51ed199165ff618be6d5b2d416a272527ed3243bb6ecb288ba1800af1cf2009db1ef8304a774ef3b8592f05a1a6399cb18cde389cfc22e9755678588505ca035bf550131df641c96dca9c120844e678be73d816b8c8052096a5d1a4e49722c79a98458cb07d274abb7cc52e18d729e6190944f1552505748251b277630114cc8f139bc88e2139b682992a1862f94460eae07a3e800bdbd9e40fd8b", 0xcd}], 0x1, &(0x7f00000001c0)}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8001, 0x3}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="575e68d9f0baaa8950bc5f9ad5d1e015f5cdbb63e872efe0ad5ef6d4460df91e46316d353b3c28aa4e50c24c4391a58b293c4eab1b96119b20b42f6e2ec761778cde7ad4c4ffcc22f4db4a778babe53f2ce09c20dddbfd6bd467959ce5d6d1c87692a3e56fd510eecd966117dfa938cb5bc19b6d4509e8b799d383617e2664c0b8247aa7e8751618df62f55f909cccdbc7c033cafa50f435cb73a4f46b90d4cd61aa09b1d0d790ee4e1b66ae06edc9b2eda33ae99e5bebe064b1f348bc84e013a1b4eb0b256db339136e56b69e0980e9f8a6885a3adf06d9f7894898f14373f36bcdb40a499cd599d171a2f85d4d90da", 0xf0}, {&(0x7f0000000680)="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", 0x7e8}], 0x2}}], 0x1, 0x20004001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1, 0x99}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r4, &(0x7f0000000880)}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000240)=0x1, 0xfffffcf8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0, @in6}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, r5, 0xffffffffffffffff}, {@in6=@ipv4, 0x0, 0x33}, @in6=@local, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'tgr160-generic\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) 1.315511407s ago: executing program 7 (id=7246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000000012800b00010062acecb433c1fc4a8d0fb7f17e4f6964676500000c0000000800020001010000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000000012800b00010062acecb433c1fc4a8d0fb7f17e4f6964676500000c0000000800020001010000"], 0x3c}}, 0x0) (async) 1.315186273s ago: executing program 8 (id=7247): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x22ebf5fc018f6bde) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001000)=ANY=[@ANYBLOB="900100001900010000000000000000001d0109003201108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b00000000000000000028002d802200be00c8ef6b8ced0c8ef9408a2c6c"], 0x190}}, 0x0) 1.301717018s ago: executing program 3 (id=7249): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250700000008008fa3cc0a207f2b760100000000004c8ad58543120d0557ef53129cc8be5a"], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x8880) 1.193182457s ago: executing program 7 (id=7250): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x2, 0x4) recvmsg(r0, &(0x7f00000006c0)={&(0x7f00000000c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f0000000480)=""/189, 0xbd}], 0x6, &(0x7f00000005c0)=""/210, 0xd2}, 0x40) recvfrom$netrom(r1, &(0x7f0000000700)=""/79, 0x4f, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3b}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4810}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%pi6 \x00'}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x13, &(0x7f0000000980)=@raw=[@ldst={0x3, 0x1, 0x0, 0xa, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xad}, @alu={0x4, 0x0, 0x0, 0xa, 0x7, 0xffffffffffffffff, 0x10}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @ldst={0x2, 0x2, 0x6, 0x2, 0x4, 0x2, 0xfffffffffffffff0}, @generic={0x2, 0x0, 0xc, 0x8, 0x2}, @exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}, @exit], &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x57, &(0x7f0000000a80)=""/87, 0x41100, 0xa, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000b80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, 0xf3b}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000d80)=[r7, r8, r9], &(0x7f0000000dc0)=[{0x0, 0x3, 0x5, 0xb}, {0x5, 0x2, 0x3, 0xb}, {0x0, 0x2, 0xe, 0x6}, {0x4, 0x3, 0x5, 0xe}, {0x4, 0x2, 0x0, 0x4}, {0x1, 0x1, 0xf}, {0x5, 0x4, 0xd, 0xa}], 0x10, 0x4}, 0x94) r11 = accept4$llc(r0, &(0x7f0000000f00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000f40)=0x10, 0x80000) bind$llc(r11, &(0x7f0000000f80)={0x1a, 0x324, 0xc, 0x7f, 0xd, 0xf7, @random="dcdbc46d0bb6"}, 0x10) r12 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r12, 0x6b, 0x2, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) ioctl$RFKILL_IOC_MAX_SIZE(r4, 0x2, &(0x7f0000001040)=0x4e55) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@map=r7, 0x4, 0x1, 0xfffffffc, &(0x7f0000001080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000011c0)={@map=r7, r10, 0x1e, 0x1007, r10, @void, @value=r10, @void, @void, r13}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe, 0x12, r12, 0x9) ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000001200)="92c623470a6600ef461be73afe19553d47f56ae83a56af438a3afb72f451d153982a094ff26d1c10c26aa4e6ebe91c4879f3012b5e0ed6ab37e8dd02ebb38cee537cc8f79e6d25e7c13cc99436705ecdc170cde0d5ece8b01807fb4a2c42425633e3c720558f5e4ded829771735faeb2e610c446775719d21bea17ce19fa0eab4e36448c88970b313e7169f1caee64215dae9225659191fc4e332ba5669750219a17fe9201d63661a90403ec88e9c4ffeb048211b163a2ed3a339dee") ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0xa8, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xb, 0x5d}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4b}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2af}, @NL80211_ATTR_SSID={0x13, 0x34, @random="a76837dbc9240eaa59473f2957191a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "76aacd444de4c2794de287dd1758bd54"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8ea5a185de7a"}, @NL80211_ATTR_PMKID={0x14, 0x55, "63787842fd9c5150b88f26e11e728c41"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9cb328c780a7"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1d}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r15 = accept4$packet(r1, 0x0, &(0x7f0000001480), 0x0) getsockname$packet(r15, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001500)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001600)={'gretap0\x00', &(0x7f0000001540)={'syztnl2\x00', r5, 0x80, 0x7, 0x93b1, 0x8, {{0x1a, 0x4, 0x3, 0x7, 0x68, 0x68, 0x0, 0xde, 0x2f, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x1b, 0x3e, [@dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @loopback]}, @ssrr={0x89, 0x7, 0xa7, [@remote]}, @noop, @cipso={0x86, 0x2f, 0x2, [{0x1, 0xe, "211d51ccf50af43abe759f50"}, {0x1, 0x2}, {0x0, 0x9, "4ccb2fc2cad4b0"}, {0x2, 0x7, "596f9fb478"}, {0x0, 0x9, "fe05c04e3f02af"}]}]}}}}}) 1.127457524s ago: executing program 3 (id=7251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031080003400000000114000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x20008094}, 0x20000010) 1.119738214s ago: executing program 5 (id=7252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000002400048020000180080001006c6f6700140002800600014000000000060004400009000009004b2ebdf4f8cfe07000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) 1.118985742s ago: executing program 8 (id=7253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c073ccc4d2b0000000000000000000000840013000000000000000000000009000000000000000a000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000f0b000000000000000100000000000000000000000200"/165], 0xa0}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) 1.118623687s ago: executing program 6 (id=7254): setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000000)={{0x2f, @local, 0x4e23, 0x3, 'ovf\x00', 0x4, 0xd7, 0x61}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4e20, 0x0, 0x9, 0x7, 0x9}}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x101}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000090) (async) bind(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x1, 0x3, {0xa, 0x4e23, 0x5, @mcast1, 0xfffff800}}}, 0x80) (async, rerun: 32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x4200, 0x0) (rerun: 32) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x1ff, 0xff, 0x1, 0x3}, {0x800, 0x3, 0xa0}, {0x9, 0x7, 0x5, 0x4}, {0xc9, 0x1, 0xf4, 0x81}, {0x81, 0x1, 0x2, 0x7}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @empty}, &(0x7f0000000380)=0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@fwd={0x1}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x30, 0x0, 0x61, 0x30, 0x61, 0x0, 0x5f]}}, &(0x7f0000000400)=""/37, 0x30, 0x25, 0x1, 0x7, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x55a, 0x62c, 0x4, 0x0, 0x1, 0x7f, '\x00', r3, r4, 0x4, 0x1, 0x0, 0x5}, 0x50) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r6, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x55}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4000) (async, rerun: 64) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (rerun: 64) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000640)) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf8, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffc}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd4b}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x89}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6a71}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) (async, rerun: 64) r8 = socket(0x11, 0xa, 0x8) (rerun: 64) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r9, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000a80)={'batadv_slave_0\x00', @multicast}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r6, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x59}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r6, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x6a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x40}, 0x1, 0x0, 0x0, 0x44050}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x15, 0x2, 0x9ca9, 0x1, 0x8, r5, 0x2, '\x00', r3, r4, 0x2, 0x4, 0x3}, 0x50) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x78000}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xee72}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x48001) (async) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000e80)={'filter\x00', 0xa3, "9bd799514b17d2ca62b7c6309e1f6967553432fd4578ab4479a1487d9f2e82bade9372730ca717b91807ae343e65ced31f96aab9164299f03ddb539b0b6a417899f2a21ce55ca707490cd57ea9c2bc1bef35d5c81cc16a01e893d9407b3401e19e81ffe7c352926ee8d915e08c42734518cf85f85696ce9a1dc26be631868bf7c91f3ce9508ac007955c0b3a3570cedd0e91380bd458d9f2378e54a20e1b6542012c3c"}, &(0x7f0000000f80)=0xc7) setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000fc0)) (async) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000001000)) (async, rerun: 32) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001180)={0x0, 0xd8}, 0x8) (rerun: 32) 1.022250497s ago: executing program 3 (id=7255): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) connect$llc(r1, &(0x7f0000000080)={0x1a, 0xffe2, 0xf5, 0x97, 0x5, 0xdd, @random="c2835963fc83"}, 0x10) (async) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000001140)) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r3, 0x401, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc0) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x238, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1fc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'b\xcd\x98\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x12c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (rerun: 32) 943.483065ms ago: executing program 8 (id=7256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000040)=0x27, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r1, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 874.556661ms ago: executing program 5 (id=7257): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xd}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000013c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001400)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000014c0)={&(0x7f0000001340), 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x3c, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000030000850000001b070000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3674}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r11, 0x0, 0x7, &(0x7f00000010c0)='cgroup\x00\xc3\x92m\xc0N\xf3\xcfLx\xd5\xb1\x8d\x84R\xe5\x8a[R\x86\x87\x9bP\x97\xc6\xe8t\x96\x1a*U\xf7\x15\xc5\xc6\x86\x81\x05\x8an\xda\x86\'\x18\x87\x02\x9d\xca\x16\xc3\xe6\xfb\x11\x8b\x8c\x12\xe6\x92(\xe8\xd0'}, 0x94) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_subtree(r12, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r13, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r14 = openat$cgroup_type(r12, &(0x7f00000011c0), 0x2, 0x0) write$cgroup_type(r14, &(0x7f0000000080), 0x9) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000001600)={0xfc, r15, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfce}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xfc}}, 0x4000) 874.030505ms ago: executing program 6 (id=7258): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x1}, 0x10}, 0x94) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x1, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0xffffffffffffff88}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002580)={0x28, r5, 0x32b, 0x0, 0x25dfdbfc, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xd8, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 801.929643ms ago: executing program 7 (id=7259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'gre0\x00', {0x2}, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x18, 0x2, 0xf) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0xa683a4d7744667dd, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1a9, 0x3}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20008044) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000001c0)="3b7d0795299c39c219f9d9c71b817412455c976343994a64b710ec81bec986ab0849a940a96daa") ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000280)={@multicast1, @multicast2}, &(0x7f00000002c0)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x4, 0x0, 0x8001, 0x102, 0xffffffffffffffff, 0x401, '\x00', r4, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0xd}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x45}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000540)=0xc00, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000580)={0x1, @multicast1, 0x4e23, 0x2, 'sed\x00', 0x2, 0x20, 0x7f}, 0x2c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000005c0)={0x7, 'bridge0\x00', {0x101}, 0x5}) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000018c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f0000000640)={0x121c, 0x13, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0xd6, 0x7, 0x6, {0x4e22, 0x4e23, [0x7, 0xffff, 0x5, 0x3], [0x8, 0x2, 0x5, 0xf], r6, [0x10001, 0x3]}, 0x1, 0x87e}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "e476a7a14bcf27fe58f2b8aa7cf5af06b9f2f81bd18882087f187974b7b7c84d3560f62bf37ba8e79fa74f5168629d7c57091fb0a846d8c9b468afeb96deaff119b69037585f84f8724a75e77719d04097c49041273b206d1380bd2a0a00127be178b819e6fc1151037beae760301ec8352485e0be1932676d647f9c25"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "ddff007bae335a8740961cc7597ec5729f41eb6f9b1de6a209c3d9ffc6d77ae0435f78a5e67ab89e648598cf10957d6ed01d0208ee8e009491a1ba59b146b3d8c2254ab09b0f7de6738d3522add0a8bf823b4a98b2168c1cc25f98ce3ed85b29518e95fadb"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "f8a20678359286bff99c9b05d77b7e49a01f7d9b11278284ef20b2ffe658975fedef8b22815c951beaf76de1dcf1d722fdfd29fe71bb1eeacf166331fb55cbb517b2947bde8a4ad9578014b3b514aa72da5970d82ee51dd5817a7f84878a135138d7bd6cab1cc4bfb442a8db6f50f15b080bdec426f23d0cde9042c1fc09b9204a3c36ad084d239d59e99dd65b24a361352466b19c5188069bf1810c9c6db9d8026ec010e910e22c3b4ba6ec24959e5e5d99e480b094a78b31ffd98f54577c21d788fcc5ee16fcddf8fe36578147c88736b5ba02567c0572"}]}, 0x121c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x18, 0xc, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000001980)='GPL\x00', 0x14b, 0xa7, &(0x7f00000019c0)=""/167, 0x41000, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001b40)=[r5, r7, r5, 0x1, r5, r5], &(0x7f0000001b80)=[{0x0, 0x4, 0x8, 0x3}, {0x3, 0x2, 0x9, 0xc}, {0x4, 0x2, 0x5, 0x2}, {0x4, 0x3, 0x7, 0x7}, {0x4, 0x5, 0xe, 0x9}, {0x0, 0x2, 0xa, 0x2}, {0x2, 0x1, 0x5, 0x8}], 0x10, 0xb}, 0x94) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d00), r2) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r2) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x28, r9, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8820) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000020c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0x88, r10, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000002100)={0x0, 0xa6, 0xf069, 0x8, 0xb, 0x7}, &(0x7f0000002140)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002180)={r11, 0x1}, 0x8) recvmsg$can_j1939(r2, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000021c0)=""/183, 0xb7}, {&(0x7f0000002280)=""/102, 0x66}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/248, 0xf8}, {&(0x7f0000003400)=""/78, 0x4e}, {&(0x7f0000003480)=""/30, 0x1e}, {&(0x7f00000034c0)=""/161, 0xa1}], 0x7}, 0x12100) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x5c, r3, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 730.220663ms ago: executing program 8 (id=7260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getchain={0x6c, 0x66, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0x1}, {0xfff3, 0x6}, {0xfff3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0xdca}, {0x8, 0xb, 0xe73b}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xa6}, {0x8, 0xb, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000000), 0x4) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 597.951447ms ago: executing program 3 (id=7261): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6b3a6e7e216920a8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@delchain={0x2410, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x23dc, 0x2, [@TCA_MATCHALL_ACT={0x23d8, 0x2, [@m_mirred={0x130, 0x17, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0xe5, 0x20000000, 0x6, 0x80000000}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x8, 0x0, 0x6, 0x7}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7fffffff, 0x20000000, 0xc528, 0x94}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x401, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0xfffffffe, 0x4, 0x6, 0xffffffff}, 0x1, r8}}]}, {0x61, 0x6, "70b35a16bcf81a31dc931a001209b27077472159d2e53d19a81eb707a4f51e2e46c6f8642bed6df9a5ec850c02971afc5e02cddf972f13e8284d4df6a6548bd4ad8ca62006a081a61d63444992876fa635c72e98bbae0249d2fc851153"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0xd8, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0xa2, 0x6, "7c17248679a742f1ff3516ac97f61e6f63f42b880a8d07d2fe596cf13c9bf628e1f6e8efd93262a3acbc9f3b90d54f61939a6135b47403002392bd9ff79da0f9aaf5c474bdcef1872231cab12a9586914f74955a790c6af130a32edc190fd01a7b37c09acc735950d0d23b0a49a3ce9b35eae1a478b93cf4d15ab79db0199ce28718c3e5dabe30f2bab041f21273a93690503872f9e2479de375a3c7088b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1d00, 0x1c, 0x0, 0x0, {{0xb}, {0x1c88, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x1, 0x1ff, 0x6, 0x3, 0xc9e, 0x8, 0xc34, 0x5, 0x3, 0x6, 0x8001, 0x3, 0x8cd1, 0x0, 0x3, 0x9, 0x0, 0x2, 0x2, 0x9, 0xfffffff7, 0x9, 0x2f, 0x5, 0x3, 0x4, 0x7, 0x1, 0x3, 0x7fff, 0x4, 0x80, 0x8, 0x1000, 0x80, 0xfff, 0x3, 0xffffffff, 0xfffffff1, 0x0, 0x8000, 0x0, 0x80, 0x8, 0x282, 0x15, 0x2, 0x7, 0xfe7, 0x8001, 0xfffffffc, 0x10000, 0x6a80, 0x3, 0x7, 0x5, 0x0, 0x8, 0xfffffffb, 0x17, 0x800, 0x1, 0xfffffffb, 0x883f, 0x800, 0x1000, 0x80000001, 0x10001, 0x7, 0x2, 0x8f1, 0x6, 0x8, 0x3, 0x3, 0xb756, 0xbbb, 0x1, 0x2800000, 0x7fff, 0x7fffffff, 0x4, 0x4, 0x10000, 0x9, 0x3, 0x800, 0x0, 0x1a, 0xffffffff, 0x4, 0x7, 0x5, 0x0, 0x9, 0x80000001, 0x8, 0x0, 0x7, 0x2, 0x6, 0x3, 0x9, 0x76, 0x8, 0x7, 0x0, 0x9, 0xb, 0xe, 0x1, 0x8000, 0x4, 0x4, 0x2, 0x2, 0x40, 0x1, 0x10000, 0xfffffffa, 0x7, 0x8001, 0x6, 0xe1, 0x2, 0x8001, 0x6, 0x6, 0x8, 0xa65, 0xd, 0x1, 0x6, 0x7, 0xb, 0x0, 0x0, 0xa4b3, 0x1, 0x9, 0x3, 0x7, 0x4, 0x1, 0x2, 0x8, 0x5, 0x3, 0x5, 0x68a, 0x0, 0x1, 0x1000, 0x2f, 0x4, 0x0, 0x762b, 0x4c, 0x5, 0x1, 0x7, 0x6, 0x120, 0x179, 0x7fffffff, 0xc2b, 0x6f5, 0xa, 0x2, 0x0, 0x512e, 0x3, 0x3, 0x100, 0x4, 0xc2d5, 0x9, 0x201, 0x7, 0x10001, 0xff, 0x6, 0x800, 0x81, 0x1, 0x2, 0x200, 0x4, 0x8, 0x8, 0x2, 0x2, 0x0, 0x3, 0xe191, 0x8, 0x0, 0x8, 0x146, 0x3, 0x9, 0x2, 0x6, 0x0, 0x0, 0x8b, 0xffffffec, 0x7, 0xff, 0x3, 0x3412, 0x4, 0x0, 0x55fb, 0x2, 0x6, 0x7fffffff, 0x6, 0x7602626b, 0x4, 0x2, 0x5, 0x7, 0xffffffff, 0x7, 0xfffffc00, 0x2, 0xb, 0x2, 0x2, 0x1, 0x80000001, 0x10001, 0x2, 0x0, 0x7fffffff, 0x101, 0x8, 0x40, 0x7, 0x40, 0x8956, 0x5, 0x9, 0x264, 0x9, 0x9, 0x4a7feb62, 0xffffffff, 0x9, 0x7, 0x9, 0xffff, 0x6, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0x100, 0x2613, 0x1, 0x9, 0x2705, 0x5, 0x5, 0x1, 0x0, 0xc29b, 0x32, 0x1, 0xb, 0x3, 0x4b3, 0x8, 0x10000, 0x4, 0x3, 0x111, 0x6, 0x3, 0x9, 0x800, 0xe, 0x3, 0x1, 0x2b, 0x4, 0x18, 0x6, 0xffffffff, 0x4, 0x76b5, 0x171, 0xf, 0x9, 0x6, 0x1000, 0xbd4, 0x81, 0x4, 0x2, 0x68, 0x7, 0x3, 0x4, 0xe7, 0xe8, 0x4, 0xbc, 0x1, 0x4, 0x3, 0x4, 0x6, 0x2, 0x7, 0xa61, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80000000, 0xa2, 0x1, 0x5, 0xd, 0x6, 0x6, 0x0, 0x8, 0x3, 0x0, 0x2, 0x2, 0x6, 0x5, 0x4, 0x27b, 0x3e, 0x8000, 0x1, 0x8000, 0x1, 0x1800, 0x3, 0x9, 0x1, 0x3, 0x8, 0x7ff, 0x3, 0x8d6e, 0x4, 0x8, 0x0, 0x80000001, 0x97, 0x9, 0x1, 0x1ff, 0xe, 0x6, 0xe48, 0x9, 0x7, 0x2, 0xb7, 0x5, 0xa, 0x0, 0x0, 0x90000, 0x81, 0x82, 0xe430, 0x7, 0xc6e, 0x5, 0x3, 0xa1, 0xd, 0x1, 0x3cb, 0x6, 0x4, 0x7, 0x5d30a7cb, 0x9, 0xbf, 0x40, 0x6, 0x1, 0xd9, 0x8, 0x6, 0x7, 0xffffffff, 0x6, 0x2, 0x6, 0x1, 0x8, 0x6, 0x7, 0x10001, 0xd62e, 0xb, 0x7, 0x23a8, 0x3, 0x4, 0x1000, 0x0, 0x1, 0x10000, 0xd82, 0x2, 0x0, 0xc, 0x800, 0x80000001, 0x8001, 0xf8, 0x8, 0x80000000, 0x0, 0x5, 0x8, 0x57, 0xbef, 0x72, 0x2, 0x81, 0x2, 0x10000, 0x6, 0x5, 0x1, 0x2, 0x5, 0x1, 0xfff, 0x14000000, 0x200, 0x7, 0xfffffffc, 0x8, 0x0, 0xdc1c0000, 0x6, 0xf95a, 0x0, 0xfffffff7, 0x88, 0x1, 0xffff, 0x734, 0xfffffff1, 0xc518, 0x6, 0x2, 0x2, 0xfffffeff, 0x3, 0x4, 0x204, 0x9, 0x3, 0x8, 0x8, 0x5, 0x2, 0x1ff, 0x2, 0xfffffff7, 0x3, 0x25fb4205, 0x80000, 0x2, 0x40, 0x3ea6, 0x401, 0x3, 0x7fff, 0x8ef, 0xc33, 0x50e2, 0x7, 0x8001, 0x80000001, 0x1, 0xfffffff9, 0x5, 0x4, 0x6, 0x2ad8, 0x10001, 0x1, 0x57f, 0x3, 0x7, 0x2, 0x80000001, 0x2, 0x77ff054e, 0x0, 0x7, 0x2, 0xe, 0x7, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x0, 0x40, 0x1ff, 0xff, 0x9, 0x4, 0x6, 0x3, 0x6, 0x3, 0x51fce2, 0x9, 0x7, 0x101, 0x6, 0x8, 0x7, 0x8, 0x6, 0xb5e0, 0x7, 0x1, 0x5, 0xa, 0x8, 0x5, 0x0, 0x9, 0x7fff, 0x1, 0x2, 0x3, 0x8, 0x7fffffff, 0x9, 0x7, 0x3, 0xca, 0x3, 0x5, 0x8ee, 0x7fff, 0x7c, 0x4, 0x8, 0x1, 0x8, 0x3, 0x5, 0x200, 0x32, 0x2, 0x3, 0x6, 0x4, 0x7, 0x2, 0x5, 0x9, 0x73, 0xf, 0x8001, 0xa, 0x9, 0x8, 0x9, 0x6, 0xd67, 0x6, 0x829b, 0x7, 0x6, 0x0, 0x401, 0xfffffffa, 0x0, 0x6, 0xfffffff2, 0xd, 0x101, 0x40, 0xfffffffd, 0x2, 0xffffff01, 0x401, 0x8, 0x7, 0xb, 0x7ff, 0x3, 0x1, 0x1, 0x8001, 0x1b, 0x116, 0x6, 0x80000001, 0x18c6, 0x9, 0x3, 0x7, 0x9, 0x2, 0xb8b9, 0x9, 0x3, 0x0, 0xfff, 0x1b8, 0x81, 0x0, 0x1c0, 0x4, 0x800, 0x101, 0x8, 0x3, 0x7, 0x9, 0x8, 0x6, 0x2, 0x80, 0x1, 0x471220a3, 0x0, 0xff, 0xd, 0x4, 0x0, 0xaa, 0x67, 0x1, 0x3, 0x9, 0xf, 0x7f, 0x0, 0x7, 0x6247, 0x0, 0x6, 0x1, 0xb, 0x7ff, 0x7, 0x200, 0x96, 0x6, 0x7, 0xc1a, 0x10001, 0x9, 0x9, 0x10001, 0x4, 0xffffff7f, 0xffffffff, 0x8, 0x39e, 0xd756, 0x7, 0x2, 0x8, 0x10, 0x6, 0x5, 0x6, 0x6, 0x9, 0x3ff, 0x401, 0x4, 0x8, 0x0, 0x8000, 0x0, 0xfffffff8, 0x1, 0x1ff, 0x9d4, 0x1, 0x8, 0x4, 0x7fffffff, 0x8, 0x7, 0xfff, 0x2, 0x4, 0x1, 0x8, 0x4, 0x100, 0x0, 0x93, 0x8, 0x2, 0x3, 0x100000, 0xf, 0x7ac8, 0xffffffff, 0x7fffffff, 0xa, 0x8, 0xffffffff, 0x4f, 0x5, 0xe2b, 0x9, 0x6, 0x40, 0x8, 0x6, 0x9, 0x101, 0x5, 0x6, 0x86c, 0x6, 0x4, 0x0, 0xfffffff8, 0xfa6, 0x8, 0x11, 0xfff, 0x8, 0x2, 0x8, 0xe3, 0x1, 0x63, 0x0, 0x6c2, 0x7, 0x9, 0x10001, 0x0, 0x9, 0x2, 0x61df, 0x6, 0xffff8000, 0xc56, 0x1, 0x8, 0x3, 0x0, 0x6, 0x89, 0x81, 0xff, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x20000000, 0x3, 0x81, 0xfffffffb, {0x5, 0x1, 0x0, 0x3, 0x5, 0x10001}, {0x9, 0x1, 0x9, 0x4, 0x4c, 0x1}, 0xfffffffc, 0x3, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x2, 0x2e6, 0x10001, 0x5, 0x8, 0xd, 0x7, 0x6, 0x6, 0xf, 0x3, 0x9, 0x1000, 0x0, 0x3, 0x0, 0x926, 0x4, 0x8, 0x8395, 0x8, 0xfffffbff, 0x8, 0x80, 0x80000000, 0x9, 0xf, 0x7, 0x7d8, 0x0, 0x5, 0xd4a, 0x401, 0x8, 0xb0, 0x7fffffff, 0x4, 0x3, 0x400, 0x4, 0x3, 0x4, 0x6, 0x7, 0x7, 0x3, 0x10, 0x400, 0x80000000, 0x0, 0xffff, 0x7fff, 0xcf, 0x6, 0x6, 0xa, 0x3, 0x7, 0x4, 0x187, 0x10, 0xb, 0x1, 0x6, 0x8, 0x200, 0xf8, 0x1, 0x88fa, 0x6, 0x7ff, 0x2a, 0x1000, 0x2, 0xe, 0xb302, 0x1ff, 0x8f, 0x7fffffff, 0x3, 0x6, 0xfffffff7, 0x3ff, 0xa1, 0x44c, 0x40, 0x2c, 0x5, 0xff, 0x9, 0x1, 0x3c7, 0xe, 0x4, 0x7, 0x7, 0xffffffff, 0x5, 0x1, 0x7, 0x9, 0x78, 0x10001, 0x8001, 0xff, 0x10001, 0x6, 0x9, 0xee4c, 0x0, 0x7f340009, 0x6, 0xfffffffa, 0x401, 0x9, 0x9, 0x9, 0x9, 0x7, 0x0, 0x10001, 0x8, 0xbea3, 0x8, 0x3, 0x0, 0x3ae, 0x2, 0x8, 0x7, 0xfffffffa, 0x401, 0x6, 0x800, 0x0, 0x7, 0x0, 0x2, 0x6, 0x7, 0x1, 0xa, 0x1, 0x7df3, 0x3ff, 0x200, 0x4, 0x0, 0x5, 0x4, 0x3ff, 0x9, 0x8001, 0x1, 0x30, 0x8, 0x10, 0x1000, 0x0, 0x2, 0x36, 0x6, 0xfffff43c, 0x2, 0x80, 0x4, 0xbb2, 0x0, 0x3, 0x49, 0x0, 0x65, 0x1, 0x4, 0x1, 0x7, 0x9, 0x0, 0x6, 0x5def, 0x1, 0x2, 0x5, 0x2, 0x425, 0xf, 0x1, 0x4, 0x80, 0x1ff, 0x10000, 0x2, 0x4d6840c8, 0x8, 0x3, 0x10000, 0x4, 0x5, 0xc519, 0x9, 0x4529, 0x1, 0x7, 0x5, 0xeca3, 0xfffffffd, 0x9, 0xb0, 0x643, 0x8, 0x9, 0x200, 0x6, 0x8, 0xdc1, 0x7f, 0x1, 0xf7, 0x7, 0x4, 0x0, 0xfffffffb, 0x0, 0xc5ab, 0x5a, 0x10, 0x7, 0x6, 0x5, 0x7, 0x95, 0x6, 0x8, 0xfffffffd, 0x8, 0x1, 0x2, 0xc00000, 0x6, 0x800, 0x80000, 0x4f4, 0xd, 0x4, 0x9, 0x10000, 0x1, 0x5, 0x6, 0xfffffff2, 0x40800000, 0x8001, 0xe4, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0x9, 0x5, 0x6, 0x6, 0x9, 0x5, 0x2, 0x3, 0xae7, 0x1ff, 0xfffffffc, 0x0, 0x8, 0x66e, 0x7, 0x2, 0xd4, 0x7, 0xb, 0x4, 0x5, 0x90, 0x8001, 0x1, 0xfff, 0x2, 0x200, 0x1, 0x8, 0x6, 0xa, 0x8, 0x7, 0x5, 0x5, 0x3, 0x3000, 0x1, 0x6, 0x21, 0x4, 0x5, 0x0, 0x4, 0x9, 0x0, 0x9, 0x3, 0x6, 0x1, 0x6, 0xa263, 0x4, 0x4, 0x80000000, 0x3, 0x9, 0x5f6, 0x7c, 0xec, 0x9, 0x1, 0x1000, 0x5, 0xcc, 0xfffffff9, 0x5, 0x7, 0x1, 0xf523, 0x2, 0x5, 0x1778, 0xffff, 0x3, 0xaf0, 0x10001, 0x0, 0x3000, 0x8001, 0x8, 0x6c7e138b, 0x100, 0x100, 0x4, 0xccc, 0x0, 0x9, 0x3, 0x6, 0x88, 0x4, 0x30, 0x2, 0x9, 0x4, 0x6e17, 0x66ee, 0xfffffff7, 0x8, 0x7, 0x0, 0x6, 0x1, 0x200, 0x8, 0x1800000, 0x7fffffff, 0xf, 0x8000, 0x2, 0xfd, 0x5, 0x9, 0x80000000, 0x7, 0xffffffff, 0x6, 0x6, 0x3, 0x2, 0x401, 0xfffffffa, 0x0, 0x71, 0x4, 0x7, 0xf684, 0x6d06, 0x4, 0x7, 0xfffffffc, 0x81, 0x7, 0x200, 0x7f, 0x7, 0x2c7, 0x3, 0xd, 0xb9, 0xb1, 0xc0000, 0xa, 0x8, 0x5, 0x1, 0x9, 0x175f, 0x4, 0x6, 0x4, 0x40, 0x4, 0x5, 0x7, 0x6d1, 0x4, 0x217, 0x3, 0xfffffffd, 0x3ff, 0x6bff, 0x9, 0x2, 0x7, 0xe64e, 0xb29, 0x10, 0x400, 0x10001, 0x4, 0xd9, 0x6, 0x4, 0x1000, 0x8, 0x5, 0x4, 0xb8, 0xfa8e, 0x7, 0x8001, 0xa1bb, 0x9c8, 0x6, 0x2, 0x7, 0x1, 0x1ff, 0xb18, 0x0, 0x7, 0x0, 0x6, 0x6, 0x0, 0xffff, 0x8000, 0x7, 0x60c0, 0x4, 0x9, 0x8b, 0xd1, 0x2, 0x5, 0x6, 0x45, 0x1, 0x80, 0x5, 0xd, 0x0, 0x2, 0xc, 0x5, 0x2, 0x3e7b60d8, 0x0, 0x0, 0x40, 0x80000000, 0x0, 0x1, 0x80000001, 0xe4cd, 0x5, 0x4, 0xf73, 0x1, 0x666, 0x3, 0x1c0f, 0x5, 0x1, 0x6235, 0x5, 0x823d, 0xfffffff9, 0x8, 0x0, 0x7, 0xfffffff8, 0x4, 0x3fc, 0x0, 0x6, 0x6, 0xfffffffe, 0x9, 0x400, 0x3, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9, 0x6, 0x5, 0x81, 0x5, 0x0, 0x3, 0x8, 0x7, 0x1ff, 0x2, 0x4, 0x8001, 0x1, 0x7f, 0x1, 0x8, 0x16000000, 0x2, 0x7fffffff, 0x7, 0x9, 0x6, 0x9, 0x2, 0x7ff0, 0x1, 0x8eb, 0x1, 0xef1, 0x7, 0x7ff, 0x1, 0x5, 0x5, 0xffff7fff, 0xffffffff, 0x7078, 0xab3d, 0x12, 0x7, 0xfffffffa, 0x0, 0x1, 0x9, 0x2, 0x10001, 0x5, 0xf7, 0xffff779e, 0x80000001, 0x6, 0x0, 0xfe14, 0x2, 0x97f, 0x2, 0xfffffff9, 0x8, 0x800, 0x2, 0x2, 0x5, 0x1ff, 0x6, 0x3, 0x7f, 0x38, 0x400, 0xacd7, 0x5, 0xfffffff7, 0x2, 0x10001, 0x6, 0x5, 0x9, 0x800, 0x5, 0xfffffffd, 0x5, 0x5, 0x8, 0x8, 0x6, 0x4a92, 0x7fffffff, 0x76, 0x7, 0x4, 0x43da, 0x6, 0x4, 0xfffffff8, 0x1, 0xb, 0x3ff, 0x8, 0x80000001, 0x9, 0xe15, 0x6, 0x0, 0x6, 0x1000, 0xfffffc01, 0x5, 0x5, 0x800, 0x3, 0x4, 0xffffffeb, 0x6, 0x43, 0x101, 0x5, 0x5d, 0x2, 0x4, 0x800, 0x23, 0x8, 0x5, 0x101, 0x9, 0x5a, 0x760, 0x5, 0x5, 0x401, 0x32, 0x57, 0x1, 0x4, 0x3ff, 0xff, 0xc7, 0x3, 0x5, 0x8, 0x6, 0x2, 0x0, 0x401, 0x9, 0x200, 0x7fff, 0x0, 0xf, 0x5, 0x7ff, 0x80, 0x3, 0x8, 0x0, 0x0, 0x4, 0x1000, 0x2, 0x5, 0x9, 0x1, 0xffff, 0x2, 0x6, 0x0, 0x3, 0x3, 0x1, 0x4d, 0x4, 0x10001, 0xe, 0x6, 0x10000, 0x5, 0x4, 0x6, 0x9, 0x76cc, 0x4, 0x0, 0x2, 0x40, 0x7, 0xffffffff, 0x5, 0x1, 0xffff7fff, 0x1, 0xf2, 0xfa, 0x2, 0x31, 0x2800, 0x6, 0x400, 0x0, 0xf, 0x0, 0x8, 0x7f75, 0x7ff, 0x1, 0x2, 0xb4e, 0x6, 0xdf6, 0xf7, 0x9, 0x8001, 0xffff, 0x10001, 0x7, 0x1, 0x8, 0xffffffff, 0x0, 0x3, 0x10, 0x80000000, 0x7fffffff, 0x8, 0x581f, 0x40, 0x6c, 0x400, 0x40000005, 0x4, 0x1b81, 0x3, 0x8, 0x5, 0x80000000, 0x81, 0x9, 0x2, 0x0, 0x5, 0x9, 0xe, 0x5, 0x80000000, 0x2, 0x7ff, 0x6, 0x10, 0x2, 0x4, 0x598, 0x7, 0x8, 0xffff, 0x3, 0x4daa]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x9, 0xe5bb, 0x1, 0x6, 0x8, 0x7, 0x1, 0xfffff5cc, 0x4, 0x1000, 0x9, 0xdc3, 0x1, 0xfc, 0x8, 0xfffff801, 0x3, 0x7, 0x4c, 0xdccd, 0x5ae, 0x70d982b8, 0xfffffff1, 0x2, 0x4, 0x1000, 0x80000001, 0xfffffffc, 0x7, 0x5, 0xe, 0x2, 0x8, 0x200, 0x200, 0x46, 0x400, 0x0, 0x3476, 0x5, 0x7, 0xffffffff, 0x4, 0x1ff, 0x4, 0x8000, 0x80000001, 0x8, 0xd, 0xcf, 0xffffffff, 0x5, 0x40, 0x2, 0x5, 0x0, 0x9, 0x7, 0x1, 0x0, 0xb34, 0x8, 0xd1d, 0x1, 0x4, 0x0, 0x9, 0x5, 0x9, 0x4, 0x100, 0x8, 0x4, 0x4, 0x401, 0x6, 0x400, 0x4bd64d64, 0x4, 0x10000, 0x9, 0x400, 0x80, 0x800, 0x3, 0xd1fa, 0xe, 0x0, 0x7, 0xffffffff, 0x80000001, 0x2, 0x4, 0x7, 0xb8fb, 0x9, 0x0, 0x67, 0x9, 0x3, 0x6, 0x8, 0x7, 0x1, 0x6, 0x80000000, 0x0, 0x800, 0x2, 0x80, 0xc8, 0x4, 0x7a8, 0x27d, 0x10001, 0x9, 0x7, 0xffffffff, 0x1, 0x4, 0x7, 0xfffff000, 0x5, 0x8, 0x7, 0x5, 0x4c3, 0x80, 0x6, 0x81, 0x1, 0x9, 0x3, 0x40e7, 0x118c, 0x10ac0, 0x6, 0x1, 0x5, 0x9, 0x7fffffff, 0x80000001, 0x401, 0x7ff, 0x1, 0x1d, 0x0, 0x6, 0x7, 0x9, 0x6, 0x7f, 0x7, 0x7fffffff, 0x7, 0x7, 0x1, 0x100, 0x4, 0xc, 0xfffffffa, 0x43e, 0x0, 0x8001, 0x9, 0x2, 0x6, 0x6, 0x5, 0x221, 0x6, 0x5, 0x0, 0x1, 0x7, 0x9, 0x3, 0x8000, 0xfffff000, 0x5, 0x200, 0x8, 0x6, 0x0, 0x9, 0x2, 0x5, 0x8001, 0x8001, 0x9, 0x100000, 0x4a0, 0x10, 0x27c, 0x7, 0xff99, 0x37d, 0x4, 0x1000, 0x1, 0x40, 0x8054, 0x2, 0x21c4, 0x7, 0x101, 0x5, 0x3, 0x40, 0x7fffffff, 0x1, 0x7, 0x1f02, 0x5, 0xa, 0x5, 0x800, 0x1, 0x3, 0x0, 0x6, 0x4, 0x1, 0x0, 0x5, 0xffffa91d, 0x0, 0x7, 0xc9a8, 0xfd, 0x5, 0x6, 0x57, 0xb1af, 0x800, 0x7, 0x78, 0x5, 0x252d, 0x0, 0x0, 0x9, 0xff, 0x95e4, 0x80d6000, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x71e5, 0x7, 0xc, 0x3, 0x7]}]]}, {0x50, 0x6, "b2b1768d3dda9d3a98b9a92a95fe43292d577516026eb97349a097f76614ff62ed0e29df94be2414293f79de868582ea2ee402d5d5c21d1e3296935e4845ee1ba4cbcba3f6002c9b23943600"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x2bc, 0x18, 0x0, 0x0, {{0x8}, {0x28c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x7, 0x1, 0x9, 0x1}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x31db, 0x20000000, 0x4a50, 0x4}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x4, 0x7}, {0x1, 0x2, 0x6, 0x597}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0x1fd, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x8f14, 0x40, 0x4, 0x7}, {0xac2, 0x12, 0x3, 0xd}, {0x7, 0x81, 0x2, 0x8}, {0xe, 0x1, 0x4, 0xefb}, {0x9, 0x2b, 0x2, 0x2}, {0x2328, 0x8a, 0x50, 0x7}, {0x6, 0xfe, 0x80, 0x8}]}]}, {0xb, 0x6, "be8252cbb98ac4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x100, 0x5, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x4, 0x4000000a, 0x3, 0x6}, @rand_addr=0x64010102, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x485e, 0x2, 0x1, 0xfff}, @local, @rand_addr=0x64010100, 0xff, 0x1}}]}, {0x86, 0x6, "8ba79a8e9df096d584c006653232d5d8a73c259cf53c55270bca4e4751aaaa5609a12bb2c9906abee743c68909778ad7d5a2797b5c33f3af091d459e47707dc0d8596addac0f2071f2961b63827cfadd3d67ff6480e8c55579ca842d3977d3a5120e55435e2e174b65ce7fdacb12388bfb76e9ed1ea5f78c392160ad8084cda505dd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x110, 0x1f, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0xfffffffb, 0x8, 0x8976}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x2, 0x8, 0x6, 0x89b}, 0x2}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x4, 0x3, 0x0, 0x200}, 0x3}}]}, {0x75, 0x6, "8eeeb6868d94105343145d2063902e9144136dcbd0c1184baecc291dbd39e9da364dc2ca0a0f2dcbc2ecd8ed82465e54f8ac5a072f75a3724bf13119c099f3d7e133685274797403d82fa10fffc39a1881738f23e20f9c915a6ceb8aed982183f6a10b703f861ca86143eaa61fde215bfe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2410}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0x1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x4041080) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18ea1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) 596.437022ms ago: executing program 5 (id=7262): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$kcm(0x29, 0x5, 0x0) sendto(r5, &(0x7f00000002c0), 0x0, 0x8000, &(0x7f0000000500)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100c62020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000ab03000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000884a368a000000000000a03185fca700611034000000f1009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$inet6(0xa, 0x5, 0x101) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltclass={0x34, 0x29, 0x200, 0x70bd27, 0x25dfdaff, {0x0, 0x0, 0x0, r8, {0xc, 0x8}, {0xffe0, 0xc}, {0x4, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @TCA_RATE={0x6, 0x5, {0xe, 0x4}}]}, 0x34}}, 0x40004) 580.758818ms ago: executing program 7 (id=7263): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 500.972594ms ago: executing program 8 (id=7264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x5a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x24000055) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x5300428}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c01}, 0x8000805) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000440)={0xf1bc, 0xe17, 0x8}, 0xc) getpeername$llc(r2, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000004c0)=0x10) r5 = openat$cgroup_ro(r2, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r5, r2, 0x0, r2}, 0x10) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000580)=0x100, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={0x0, 0x5, 0x1}, &(0x7f0000000600)=0xc) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe7a}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x10000, 0x30, &(0x7f0000000740)=""/48, 0x41000, 0x29, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000780)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0xf, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, r5]}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r2, r2, 0x4, r8}, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r5) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x140, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}, {0x6}, {0x8, 0x13, 0x400}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x1ec}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xa529}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x38}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000c80)={r7, 0x7}, &(0x7f0000000cc0)=0x8) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r5) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x440d0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x150, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x731d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x150}, 0x1, 0x0, 0x0, 0x2400c050}, 0x8000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r5) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0x100, r11, 0x20, 0x7, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x35}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x486}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xbe, 0xbe, "9763a62e6281e6ce6ec7452eb36b90acec984e377b0d4c87d3e2ef9b66d70ac0a65e9c36d1107d81dc459f465cddea68fe5a400d06117d9af922252339e251064fe88020beac8d343913babb710f345c3dde6cdf9acdcfd2794500c87b99cc5e9198dfdad06c99d5f037d3d33c25be5340637bf64b3ad57e07ebf868523d03c393f823ba0c00b4078ea86e87ae76ccdccd7645e4879f32ab64ef5a2f28277d5b45e6f06941d8aaa0d5c2a0e9629f1dd9ca2eee6a12670897bf88"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x40080}, 0x24010005) write$cgroup_subtree(r5, &(0x7f00000012c0)={[{0x2d, 'freezer'}]}, 0x9) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000001300)) 443.0485ms ago: executing program 6 (id=7265): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$FITHAW(r0, 0xc0045878) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2f0, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @loopback, 0x8000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd4}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000006) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5b0}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c4}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x1, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4044000) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x108, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "44aa0cf92b9f1a2c6f7bdaf92abacdd6d293d225be0ead38"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "482df610c8f1a7d1f9733a5342568d634a2c44cfa75cd361"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "617019beea0a38078760c2071ae030b4c5611698bb754cc0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ee0a8a2b4e36875d2bdb77b0a99ad66e36c4807654005122"}, @NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x108}, 0x1, 0x0, 0x0, 0x8810}, 0x80) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000b40)=0xe8) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000b80)={0x3, @null, r8}) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000c00), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r9, &(0x7f0000000f40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c80)={0x27c, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0xd0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x4, 0x40, 0x7}, {0x2, 0x93, 0x1, 0x8}, {0xfff, 0x9, 0x2, 0x200}, {0x6, 0xf, 0x2, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6ace}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040051) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000001240)={&(0x7f0000000f80), 0xc, &(0x7f0000001200)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x154, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0xf1, 0xc, "b80f0baa9a87ea587d78f8fc287a4decb75631febb969a5bc2ea925ae019321233bb8fd60b8abd2451401ddb18957a669f557bd71741e4f8fad845b934680df6b707594119b58a5cb368e927cac717341096531ef73b8bc267aa33dcbe496e9bc9bdb361528fd9ab925f9affdab656fcd80b96e890b6835e4f916eb48d6791b40cda8b314eb4a9cee41ed6cb8ac189f9fe77e1a55bae6efa698b2acb37a3a95d5de0a26a989bfbe6dc8f8b73f381eed8550c7728e47bbddbdcb73e19c91aca9f0e75514a882547553f609ecce0b10033f72e8bca46fa19afa42efcaa59b3495be37280ce971d228e3f91d29513"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x36}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7fff}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffeffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x214}}, 0x4) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000012c0), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r9, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r12, 0x100, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000010) (async) socket$kcm(0x29, 0x5, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r13, 0x6b, 0x4, &(0x7f00000013c0), &(0x7f0000001400)=0x4) r14 = accept(r4, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) bind$bt_hci(r14, &(0x7f0000001500), 0x6) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000001680), r14) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x34, r15, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xc, 0xff, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) 356.783413ms ago: executing program 7 (id=7266): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000001c0)={0x3, 0x6, 0x0, &(0x7f0000000180)}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0x29, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001c00)={&(0x7f0000001300), 0xc, &(0x7f0000001bc0)={&(0x7f0000001340)={0x85c, r0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x844c, 0x4, 0x9, 0x0, 0x5, 0x419b, 0x80, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x78, 0x5, 0x16, 0x0, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x2}, {0x3, 0x8}, {0x4, 0xa}, {0x2, 0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x2, 0x8}, {}, {0x1, 0x1}, {0x5, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x2}, {0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x4d, 0x23, 0x30, 0x6, 0x1b, 0x48, 0x4, 0x18, 0x3, 0x12, 0x6c, 0xe964fbc387fa21da, 0x3, 0x60, 0x5, 0x6]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x4}, {0x2, 0x3}, {0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x5, 0x7}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x5, 0xa}, {0x5, 0x8}, {0x3}, {0x2, 0xa}, {0x7, 0x8}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x6}, {0x4, 0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {}, {0x2, 0x8}, {0x2, 0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x3}, {0x3}, {0x2, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x7, 0x3}, {0x6, 0xa}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe6ad, 0x5, 0x9, 0x5d56, 0x9, 0x9, 0x8, 0xd00]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x77, 0x5, 0xb, 0x1b, 0x60, 0x6c, 0x24, 0x9, 0xb, 0x8bf61621cfa0941d, 0x16, 0x18, 0x2, 0x60, 0x36, 0x3, 0x48, 0x48, 0x5, 0x1b, 0x60, 0x16, 0x6c]}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb83, 0x3, 0xffad, 0xdd0, 0x37ff, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x4}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0x2}, {0x6, 0x3}, {0x2, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x547, 0x4, 0x5, 0x6992, 0x3, 0x8, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x74a5, 0x1000, 0x3, 0x7, 0x7, 0xff, 0xfffc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa9a3, 0x8, 0xb, 0x1, 0x4, 0x3, 0xbe1, 0x9]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x9, 0x4, 0x1, 0x9, 0x48, 0xb, 0x16, 0xc, 0x4, 0x4, 0x6f8eeff5586ec82f, 0x0, 0x1b, 0x30]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x9, 0x2, 0x48, 0x6d868f880aaa677d, 0x6, 0xb, 0x12, 0x5, 0x2, 0x48, 0x48, 0x12, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7ff, 0x1, 0x9, 0x5, 0x8, 0x6, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x4, 0x0, 0x8, 0x892, 0x8, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4468, 0x1000, 0x5, 0xfffe, 0xb6b, 0x0, 0x2c6, 0x5]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x8}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x4}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x4, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {0x3, 0x5}, {0x2, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0xa}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x4, 0x16, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb58, 0x400, 0x89c, 0x80, 0x1, 0x6f80, 0x101, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x3}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x60, 0x39, 0x16, 0x6, 0x30, 0xc, 0x24, 0x1, 0x6c, 0x48, 0x36, 0x60, 0xb, 0x60]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xc0, 0x6, 0x4, 0x9, 0x7, 0x9, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xde, 0xb59, 0x9a28, 0x1, 0x8, 0x0, 0x1, 0xc928]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe5c, 0x1000, 0x2, 0x4, 0x8, 0x4600, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x9, 0x3fe, 0x4, 0x4, 0x4d71]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x3}, {0x5, 0x5}, {0x1}, {0x3, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x6, 0x8}, {0x1}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x6, 0x1b, 0x2, 0x60, 0x0, 0x0, 0x24, 0x24, 0x48, 0x5, 0x12, 0x4, 0x2, 0x6c, 0xb, 0x5, 0x12, 0x16, 0x6, 0x4, 0x2, 0x24, 0x1c]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x8, 0x5, 0x800, 0x3, 0x7, 0x1, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x7, 0x800, 0x40, 0xb5, 0x81, 0x6, 0x91d3]}}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x3}, {0x6, 0x3}, {0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x4, 0x9}, {0x4, 0xa}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x4}, {0x1}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x8}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x1}, {0x6, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0x6}, {0x3, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x4}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x8}, {0x6}, {0x3, 0x9}, {0x2, 0x9}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x7}, {0x7, 0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x60, 0x18, 0x1b, 0x2, 0x6e, 0x9, 0x3, 0x6, 0x60, 0x16, 0x1b, 0x2, 0x6, 0x3, 0x6]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0xa, 0xff, 0x984, 0x67, 0x401, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4a, 0x30, 0x0, 0x3, 0x6, 0x9, 0x12, 0x1b, 0x48, 0x16, 0x4, 0x18, 0x1b, 0x18, 0x24, 0x16, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x5]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0xb, 0x2, 0x6, 0xb, 0x12, 0x2, 0x30, 0x4, 0x1, 0x48, 0x5, 0x18, 0x5, 0x36, 0x36, 0x1, 0x5, 0x6c, 0x1b, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x84dd, 0x9, 0x2, 0xf9, 0xff, 0x9498, 0x1, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x14c, 0xb, 0x7, 0x0, 0x3, 0xd, 0xffff, 0x82]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa, 0x0, 0x2, 0x200, 0xbb, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x488, 0x9, 0xa0, 0x8, 0x5, 0x5, 0x2, 0xbf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x7, 0x2, 0x0, 0xfffd, 0x0, 0x1ff, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x400, 0xc90, 0x7, 0x0, 0x8, 0x4, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x5f, 0xf800, 0x1, 0x2, 0x5, 0x1f3, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0xb]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x0, 0x7ff, 0x9, 0x8, 0x92b0, 0x4ce9, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x258, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x30, 0x48, 0xc, 0x60, 0x30, 0x12, 0x12, 0x1b, 0x12, 0x1b, 0x60, 0x4, 0x1, 0xb, 0x16, 0xb, 0x24, 0x68, 0x0, 0x3, 0x60, 0xbf455cae2561cea1, 0x9, 0x16, 0xb, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x6, 0x2}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x3}, {0x5, 0x8}, {0x1, 0x4}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x7, 0x3}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x7}, {}, {0x1, 0x8}, {0x0, 0x9}, {0x3}, {0x1, 0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x4, 0xa}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x4}, {0x7, 0x1}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x3}, {0x2, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x2, 0x81, 0x0, 0x9, 0x4, 0x235]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7, 0xdf5, 0xd, 0x6, 0x400, 0xff, 0xffff]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x500, 0xc8, 0xa, 0x6, 0x4a7e, 0xb9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0xb, 0x12, 0x1b, 0x5, 0x60, 0x6c, 0x60, 0x6c, 0xc, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x8}, {0x2, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x6}, {0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x7}, {}, {0x4, 0x8}, {0x6, 0x8}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x7, 0x8}, {0x3, 0x7}, {0x7, 0x3}, {0x7}, {0x1}, {0x4, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x6}, {0x6, 0x3}, {0x4, 0x2}, {0x6, 0x7}, {0x0, 0x8}, {0x3}, {0x7, 0x4}, {0x2, 0xa}, {}, {0x1, 0x6}, {0x3, 0x1}, {0x5, 0x4}, {0x2, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0x3}, {0x5, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x6}, {0x7, 0x9}, {0x3, 0x4}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7d, 0x4, 0x1000, 0x401, 0x0, 0x7f, 0x9, 0x2]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x2, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc9, 0x9b, 0xd52, 0x0, 0x3, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x2, 0x4, 0x36, 0x3, 0x36, 0x60, 0x6c, 0x16]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x2}, {0x5, 0x8}, {0x3, 0x9}, {0x7, 0x5}, {0x5, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xc, 0x2, 0x1, 0x8, 0x2, 0x8, 0x3]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x8001, 0x41, 0xa0, 0xf6d8, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x4, 0x6, 0x0, 0x48, 0x30, 0x4, 0x12, 0x1b, 0x1, 0x12, 0x30, 0x2, 0x30, 0x3, 0x1b, 0x2, 0x1, 0x1, 0x5, 0xd, 0x2, 0x48, 0x48, 0x9, 0xc, 0x6, 0x4, 0x30, 0x3, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8000, 0x14, 0x5, 0xaf86, 0x3, 0x3ff, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x4, 0x65, 0x7fff, 0x9, 0x7f, 0x5]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0x5, 0x50, 0x9, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xd16, 0x11, 0x3, 0x0, 0x1000, 0xf]}}]}]}]}, 0x85c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0x15, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "48786f4e7059da1eef89651726"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc015}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f00000012c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x4000840) 324.613555ms ago: executing program 6 (id=7267): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a3100000005000000000000004000000003"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0014"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x2b, 0x200, 0x70bd2d, 0x25dfdbfe, {0xd}, [@typed={0x14, 0xc2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40005) (async) r1 = accept4(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x80, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xe1a323967b12bddc}, 0x20008854) 279.074616ms ago: executing program 8 (id=7268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01"], 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xfffffffffffffe08, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xfffffffffffffe08, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x3) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}]}]}]}}]}, 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r5, r10, 0x25, 0x2, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80a65fd1c288", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80a65fd1c288", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 228.762486ms ago: executing program 3 (id=7269): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0xf48, 0x4}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200dfad0000aaaaaaaaaaaa86dd6001044a00183ab3fe880000000000000000070000000001fe8000000000000000000000000000aa8800020438c08900fe8000000000000000000000000000bb"], 0x0) 161.993441ms ago: executing program 5 (id=7270): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x40c0}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0xffffff44}], 0x10}}], 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32], 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000004000000040000003eeb88ac33000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000000d0a01030000000000af9cba30d24b3d1dd0a9933cfc98000000050000000900020073797a32000000000800044000008de843f764aa1c4596a7c7e7520069b457e1f148b9656e787c20f91a32d87dc37d80d0dc44750cc75097870cdc9d0341076201c4b91fe9c4f8cff8ff311e941afa67d9a643f091a6cafaf999ecde1e44011fcc32b41176911df8d137bacac5"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r11) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r12, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x5c, r12, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffb}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 83.257216ms ago: executing program 6 (id=7271): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000440)='memory.current\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000440)='memory.current\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006000340000200001400018008000100ac1414aa08000200ff00075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c000180140003002001000000000000000000008000000214000400"/176], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006000340000200001400018008000100ac1414aa08000200ff00075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c000180140003002001000000000000000000008000000214000400"/176], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) 80.567013ms ago: executing program 7 (id=7272): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@setlink={0x58, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MTU={0x8, 0x4, 0x7e}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}]}]}, 0x58}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001300), 0x4) (async) connect$inet6(r0, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) read(r3, &(0x7f0000000040)=""/244, 0xf4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000001880)=@gcm_256={{0x304}, "e1a8375b6f203410", "88f8e480a74417a80f7404e3d15f0249400522bb3e39a720b4775071312959c9", "81e850ca", "a555464693bd1103"}, 0x38) 75.051891ms ago: executing program 3 (id=7273): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0xf) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 0s ago: executing program 6 (id=7274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) kernel console output (not intermixed with test programs): de [ 582.004626][T25240] team0: Port device bridge1 added [ 582.012509][T25240] bridge0: port 3(team0) entered blocking state [ 582.019967][T25240] bridge0: port 3(team0) entered disabled state [ 582.027911][T25240] team0: entered allmulticast mode [ 582.033860][T25240] team_slave_0: entered allmulticast mode [ 582.041439][T25240] team_slave_1: entered allmulticast mode [ 582.051853][T25240] team0: entered promiscuous mode [ 582.058134][T25240] team_slave_0: entered promiscuous mode [ 582.063996][T25240] team_slave_1: entered promiscuous mode [ 582.072826][T25240] bridge0: port 3(team0) entered blocking state [ 582.079580][T25240] bridge0: port 3(team0) entered forwarding state [ 582.847550][ T5856] Bluetooth: hci6: command tx timeout [ 583.094205][T25294] __nla_validate_parse: 5 callbacks suppressed [ 583.094226][T25294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5510'. [ 583.165800][T25296] netlink: 'syz.5.5514': attribute type 22 has an invalid length. [ 583.187151][T25296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5514'. [ 583.279952][T25296] netlink: 'syz.5.5514': attribute type 22 has an invalid length. [ 583.288186][T25296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5514'. [ 583.570857][T25326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5522'. [ 583.635461][T25331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5525'. [ 583.817642][T25343] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5529'. [ 583.826712][T25342] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5530'. [ 583.826806][T25342] netem: invalid attributes len -24 [ 583.826818][T25342] netem: change failed [ 583.855369][T25343] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 583.987990][T25353] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967286. macoff=82 [ 584.442363][T25365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5540'. [ 584.460192][T25368] batman_adv: batadv0: Adding interface: dummy0 [ 584.470225][T25368] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.498171][T25368] batman_adv: batadv0: Interface activated: dummy0 [ 584.747325][T25380] tipc: Cannot configure node identity twice [ 584.754389][T25380] netlink: 'syz.2.5542': attribute type 13 has an invalid length. [ 585.423507][T25400] x_tables: duplicate underflow at hook 3 [ 585.617448][T25415] netlink: 'syz.2.5554': attribute type 1 has an invalid length. [ 585.701901][T25415] 8021q: adding VLAN 0 to HW filter on device bond11 [ 585.733544][T25421] bond11: (slave ip6gretap1): making interface the new active one [ 585.772605][T25421] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 585.848248][T25429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5559'. [ 586.027799][T25431] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5560'. [ 586.182336][ T30] audit: type=1107 audit(1766010558.811:12): pid=25438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='pdO@' [ 586.867410][T25479] syz_tun: left allmulticast mode [ 586.885432][T25479] tunl0: entered promiscuous mode [ 586.923940][T25479] netlink: 'syz.3.5577': attribute type 3 has an invalid length. [ 586.936359][T25466] wg1 speed is unknown, defaulting to 1000 [ 587.754620][T25514] xt_CT: No such helper "pptp" [ 587.981173][T25534] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 587.993256][T25535] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 588.033982][T25537] netlink: 'syz.3.5595': attribute type 1 has an invalid length. [ 588.121491][T25537] 8021q: adding VLAN 0 to HW filter on device bond7 [ 588.422872][T25561] IPVS: length: 121 != 24 [ 588.428724][T25561] __nla_validate_parse: 10 callbacks suppressed [ 588.428745][T25561] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5603'. [ 588.516040][T25566] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.553310][T25569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5607'. [ 588.562832][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5607'. [ 588.574455][T25569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5607'. [ 588.583946][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5607'. [ 588.705879][T25572] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5608'. [ 588.811144][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 588.820852][T25582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5611'. [ 588.832073][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 588.841983][T25582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5611'. [ 589.342917][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 589.353569][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 589.362360][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 589.372567][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 589.388693][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 589.613975][T25609] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 589.908525][T25629] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 590.071715][T25597] wg1 speed is unknown, defaulting to 1000 [ 590.357442][T25648] netlink: 'syz.3.5634': attribute type 3 has an invalid length. [ 590.424920][T25648] nbd: device at index 3 is going down [ 590.604226][T25597] chnl_net:caif_netlink_parms(): no params data found [ 590.845479][T25597] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.866373][T25597] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.874032][T25597] bridge_slave_0: entered allmulticast mode [ 590.883244][T25597] bridge_slave_0: entered promiscuous mode [ 590.900911][T25597] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.919476][T25597] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.936484][T25597] bridge_slave_1: entered allmulticast mode [ 590.957994][T25597] bridge_slave_1: entered promiscuous mode [ 591.072215][T25597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.093316][T25667] bridge3: port 1(veth0_to_bond) entered blocking state [ 591.112478][T25667] bridge3: port 1(veth0_to_bond) entered disabled state [ 591.120109][T25667] veth0_to_bond: entered allmulticast mode [ 591.130859][T25667] veth0_to_bond: entered promiscuous mode [ 591.149509][T25597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.271972][T25597] team0: Port device team_slave_0 added [ 591.293147][T25597] team0: Port device team_slave_1 added [ 591.365139][T25597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.375154][T25597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.409614][T25597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.423386][T25597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.431528][T25597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.472314][T25597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.488529][ T5850] Bluetooth: hci7: command tx timeout [ 591.629144][T25597] hsr_slave_0: entered promiscuous mode [ 591.638309][T25597] hsr_slave_1: entered promiscuous mode [ 591.645365][T25597] debugfs: 'hsr0' already exists in 'hsr' [ 591.652880][T25597] Cannot create hsr debugfs directory [ 591.767149][T25690] tipc: Resetting bearer [ 591.773465][T25690] tipc: Resetting bearer [ 591.797972][ T44] wg1 speed is unknown, defaulting to 1000 [ 592.550929][T25597] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 592.580468][T25597] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 592.608362][T25597] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 592.655995][T25597] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 592.974556][T25597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.005913][T25757] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003 [ 593.031420][T25597] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.063552][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.070800][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.164380][T17163] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.171660][T17163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.439543][T25782] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 593.510275][T25785] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 593.557448][ T5850] Bluetooth: hci7: command tx timeout [ 593.642568][T25792] __nla_validate_parse: 9 callbacks suppressed [ 593.642587][T25792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5678'. [ 593.707492][T25794] netlink: 'syz.6.5679': attribute type 11 has an invalid length. [ 593.831164][T25597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.853067][T25799] Cannot find set identified by id 0 to match [ 594.170656][T25820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.423942][T25837] macsec2: entered promiscuous mode [ 594.602903][T25597] veth0_vlan: entered promiscuous mode [ 594.620310][T25597] veth1_vlan: entered promiscuous mode [ 594.688581][T25597] veth0_macvtap: entered promiscuous mode [ 594.703764][T25597] veth1_macvtap: entered promiscuous mode [ 594.747287][T25597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.769669][T25597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.795751][T17161] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.812069][T17161] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.837519][T17161] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.855067][T17161] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.865482][T25852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5698'. [ 594.894245][T25852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5698'. [ 594.908261][T25852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5698'. [ 594.977782][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5700'. [ 594.992226][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5700'. [ 595.079022][T17161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.106352][T17161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.161441][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.177326][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.400117][T25865] netlink: 'syz.5.5704': attribute type 1 has an invalid length. [ 595.524607][T25882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5708'. [ 595.567615][T25882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5708'. [ 595.568624][T25881] netlink: 'syz.6.5706': attribute type 1 has an invalid length. [ 595.598638][T25865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 595.611614][T25882] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 595.636522][ T5850] Bluetooth: hci7: command tx timeout [ 595.638648][T25882] netlink: 184 bytes leftover after parsing attributes in process `syz.7.5708'. [ 595.691153][T25886] sctp: [Deprecated]: syz.6.5706 (pid 25886) Use of int in maxseg socket option. [ 595.691153][T25886] Use struct sctp_assoc_value instead [ 595.729658][T25881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.803955][T25886] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5706'. [ 595.835890][T25881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.853690][T25881] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 595.917704][T25881] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 595.968275][T25904] sctp: [Deprecated]: syz.3.5713 (pid 25904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.968275][T25904] Use struct sctp_sack_info instead [ 595.996896][T25886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 596.004240][T25901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.095239][T25904] bridge0: port 4(ipvlan3) entered blocking state [ 596.136552][T25904] bridge0: port 4(ipvlan3) entered disabled state [ 596.175448][T25904] ipvlan3: entered allmulticast mode [ 596.230468][T25904] bridge0: entered allmulticast mode [ 596.251242][T25904] ipvlan3: left allmulticast mode [ 596.292815][T25904] bridge0: left allmulticast mode [ 596.463179][T25926] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 596.639027][T25936] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 596.640857][T25937] xt_cluster: node mask cannot exceed total number of nodes [ 596.685756][T25936] sit1: entered promiscuous mode [ 596.709091][T25936] sit1: entered allmulticast mode [ 596.985571][T25958] netlink: 'syz.6.5722': attribute type 1 has an invalid length. [ 597.140593][T25963] nbd: must specify at least one socket [ 597.177203][T25968] nbd: must specify at least one socket [ 597.721765][ T5850] Bluetooth: hci7: command tx timeout [ 597.914407][T26002] ip6gretap0: entered promiscuous mode [ 597.927244][T26002] vlan0: entered promiscuous mode [ 598.012849][T26007] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 598.342044][T26015] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 598.666049][T26020] __nla_validate_parse: 7 callbacks suppressed [ 598.689699][T26020] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5740'. [ 598.839269][T26032] x_tables: duplicate underflow at hook 3 [ 599.571441][T26082] smc: net device gre0 applied user defined pnetid SYZ2 [ 599.590800][T26080] tipc: Enabled bearer , priority 0 [ 599.613505][T26082] smc: net device gre0 erased user defined pnetid SYZ2 [ 599.709768][T26080] syzkaller0: entered promiscuous mode [ 599.715551][T26080] syzkaller0: entered allmulticast mode [ 599.728211][T26080] tipc: Resetting bearer [ 599.741686][T26078] tipc: Resetting bearer [ 601.423911][T26078] tipc: Disabling bearer [ 601.439336][T26090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5759'. [ 601.463873][ T44] tipc: Node number set to 1595186602 [ 601.478538][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 601.483272][ T5850] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 601.783555][T26118] team_slave_1: entered allmulticast mode [ 602.109782][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5772'. [ 602.132532][T26133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5771'. [ 602.383844][T26145] netlink: 'syz.7.5774': attribute type 1 has an invalid length. [ 602.887594][T26162] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5780'. [ 603.058155][T26177] openvswitch: netlink: Message has 4 unknown bytes. [ 603.172607][T26184] netlink: 'syz.2.5788': attribute type 9 has an invalid length. [ 603.191211][T26184] netlink: 'syz.2.5788': attribute type 11 has an invalid length. [ 603.211645][T26184] netlink: 'syz.2.5788': attribute type 12 has an invalid length. [ 603.219970][T26184] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.5788'. [ 603.300957][T26194] netlink: 168684 bytes leftover after parsing attributes in process `syz.5.5791'. [ 603.407315][T26198] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5793'. [ 603.669658][T26207] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 603.678835][T26207] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 603.718712][T26207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5796'. [ 604.073385][T26235] netlink: 'syz.5.5805': attribute type 1 has an invalid length. [ 604.356414][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.390429][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.399914][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.410558][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.412583][T26255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5812'. [ 604.420763][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.470951][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.484839][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.498794][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.532354][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.548238][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.564400][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.590074][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.612194][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.629376][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.641149][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.651935][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.662969][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.672712][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.689165][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.699394][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.725920][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.740848][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.750714][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.767792][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.777408][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.799322][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.843920][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.875571][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.901684][T26273] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5817'. [ 604.920745][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.930115][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.940379][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.952997][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 604.962470][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 605.032242][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 605.042601][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 605.053408][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 605.071851][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 605.083571][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 605.094591][T26246] tipc: Enabling of bearer rejected, failed to enable media [ 605.208469][ C0] Unknown status report in ack skb [ 605.402516][T26296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5826'. [ 605.514983][T26304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5830'. [ 605.539172][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5830'. [ 605.607556][T26304] bridge0: entered promiscuous mode [ 605.628695][T26304] macsec1: entered promiscuous mode [ 605.634147][T26304] macsec1: entered allmulticast mode [ 605.659402][T26304] bridge0: entered allmulticast mode [ 605.691132][T26317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.011086][T26339] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 606.210045][T26348] xt_hashlimit: overflow, rate too high: 0 [ 606.228410][T26348] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 606.412087][T26364] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.439114][T26366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5851'. [ 606.511745][T26366] vcan0 (unregistering): left allmulticast mode [ 606.732902][T26382] C: renamed from lo (while UP) [ 606.744860][T26387] netlink: 'syz.3.5858': attribute type 1 has an invalid length. [ 606.752448][T26385] sctp: [Deprecated]: syz.6.5859 (pid 26385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.752448][T26385] Use struct sctp_sack_info instead [ 606.781272][T26387] team0: left allmulticast mode [ 606.794068][T26382] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5856'. [ 606.803724][T26387] team_slave_0: left allmulticast mode [ 606.812739][T26387] team_slave_1: left allmulticast mode [ 606.817029][T26382] netlink: 'syz.2.5856': attribute type 9 has an invalid length. [ 606.828347][T26387] team0: left promiscuous mode [ 606.839985][T26387] team_slave_0: left promiscuous mode [ 606.857703][T26387] team_slave_1: left promiscuous mode [ 606.863581][T26387] bridge0: port 3(team0) entered disabled state [ 606.882470][T26387] batman_adv: batadv0: Interface deactivated: dummy0 [ 606.890894][T26387] batman_adv: batadv0: Removing interface: dummy0 [ 606.922749][T26387] bridge_slave_0: left allmulticast mode [ 606.930148][T26387] bridge_slave_0: left promiscuous mode [ 606.936106][T26387] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.951182][T26387] bridge_slave_1: left allmulticast mode [ 606.959628][T26387] bridge_slave_1: left promiscuous mode [ 606.967438][T26387] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.983350][T26387] bond1: (slave veth0_to_bond): Releasing active interface [ 607.030733][T26387] bond0: (slave bond_slave_0): Releasing backup interface [ 607.054401][T26387] bond0: (slave bond_slave_1): Releasing backup interface [ 607.082306][T26387] team0: Port device team_slave_0 removed [ 607.111701][T26387] team0: Port device team_slave_1 removed [ 607.141581][T26387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.149789][T26387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.160644][T26387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.169689][T26387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.179981][T26387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 607.247820][T26415] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5865'. [ 607.325103][T26417] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5866'. [ 609.111928][T26420] __nla_validate_parse: 1 callbacks suppressed [ 609.111947][T26420] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5867'. [ 609.259024][T26433] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5871'. [ 609.271197][T26434] netlink: 'syz.7.5871': attribute type 1 has an invalid length. [ 609.499946][T26445] tipc: Resetting bearer [ 609.513549][T26450] netlink: 'syz.5.5876': attribute type 10 has an invalid length. [ 609.555448][T26450] team0: Failed to send options change via netlink (err -105) [ 609.567859][T26450] team0: Port device dummy0 added [ 609.574662][T26450] netlink: 'syz.5.5876': attribute type 10 has an invalid length. [ 609.598792][T26450] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 609.612688][T26450] team0: Failed to send options change via netlink (err -105) [ 609.622297][T26450] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 609.634347][T26450] team0: Port device dummy0 removed [ 609.651872][T26450] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 609.784541][T26465] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.5879'. [ 609.905444][T26474] netlink: 'syz.7.5882': attribute type 30 has an invalid length. [ 610.174550][T26490] xt_hashlimit: invalid interval [ 610.230410][T26491] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 610.244063][T26491] bond4 (unregistering): Released all slaves [ 610.709673][T26517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.723932][T26517] netlink: 'syz.6.5898': attribute type 2 has an invalid length. [ 610.817492][T26515] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.863609][T26522] netlink: 'syz.5.5897': attribute type 16 has an invalid length. [ 610.874601][T26522] netlink: 'syz.5.5897': attribute type 17 has an invalid length. [ 610.909133][T26524] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5901'. [ 611.009363][T26522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.262710][T26536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5905'. [ 611.268865][T26538] netlink: 'syz.5.5906': attribute type 8 has an invalid length. [ 611.294920][T26540] IPv6: NLM_F_CREATE should be specified when creating new route [ 611.500277][T26552] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5912'. [ 611.860425][T26579] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5918'. [ 611.874326][T26579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5918'. [ 611.956432][ T5850] Bluetooth: hci7: command tx timeout [ 611.987054][T26585] syzkaller0: entered promiscuous mode [ 611.992701][T26585] syzkaller0: entered allmulticast mode [ 612.015966][T26587] netlink: 'syz.5.5924': attribute type 1 has an invalid length. [ 612.194366][ T30] audit: type=1800 audit(1766010584.821:13): pid=26587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5924" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1150 res=0 errno=0 [ 612.271649][T26596] x_tables: unsorted underflow at hook 1 [ 612.323723][T26598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5927'. [ 612.338962][T26598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5927'. [ 612.399277][T26603] netlink: 'syz.6.5928': attribute type 1 has an invalid length. [ 612.451308][T26603] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 612.503191][T26609] syzkaller0: entered promiscuous mode [ 612.519934][T26609] syzkaller0: entered allmulticast mode [ 612.705023][T26618] C: renamed from lo (while UP) [ 612.719982][T26618] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 613.254436][T26649] bridge9: entered promiscuous mode [ 613.285548][T26649] bridge9: entered allmulticast mode [ 613.904205][T26698] gtp0: entered promiscuous mode [ 614.078147][T26712] bond2: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 614.102460][T26712] bond2: (slave C): Enslaving as a backup interface with an up link [ 614.114769][T26712] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 614.208616][T26720] __nla_validate_parse: 6 callbacks suppressed [ 614.208638][T26720] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5963'. [ 614.242359][T26720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5963'. [ 614.335607][T26728] xt_ecn: cannot match TCP bits for non-tcp packets [ 614.345706][T26728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5967'. [ 614.807783][T26763] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5974'. [ 614.845473][T26769] validate_nla: 5 callbacks suppressed [ 614.845492][T26769] netlink: 'syz.6.5976': attribute type 12 has an invalid length. [ 614.859925][T26763] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 614.893782][T26769] netlink: 'syz.6.5976': attribute type 29 has an invalid length. [ 614.914377][T26769] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5976'. [ 614.961226][T26769] netlink: 59 bytes leftover after parsing attributes in process `syz.6.5976'. [ 615.009648][T26774] netlink: 'syz.5.5977': attribute type 10 has an invalid length. [ 615.060471][T26776] netlink: 'syz.7.5978': attribute type 15 has an invalid length. [ 615.104348][T26776] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5978'. [ 615.131473][T26780] netlink: 'syz.6.5980': attribute type 24 has an invalid length. [ 615.210567][T26787] netlink: 'syz.3.5982': attribute type 30 has an invalid length. [ 615.320508][T26787] bond8: option arp_missed_max: invalid value (0) [ 615.333026][T26787] bond8: option arp_missed_max: allowed values 1 - 255 [ 615.344276][T26787] bond8 (unregistering): Released all slaves [ 615.379367][T26796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5984'. [ 615.421308][T26799] netlink: 'syz.5.5985': attribute type 1 has an invalid length. [ 615.442261][T26799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5985'. [ 615.697588][T26811] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5989'. [ 615.919777][T26832] netlink: 'syz.3.5995': attribute type 9 has an invalid length. [ 615.937243][T26831] netlink: 'syz.3.5995': attribute type 9 has an invalid length. [ 615.955444][T26831] netlink: 'syz.3.5995': attribute type 11 has an invalid length. [ 616.128082][T26841] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 616.356694][ T5850] Bluetooth: hci5: command 0x0419 tx timeout [ 616.834924][T26868] bond8: (slave bridge9): making interface the new active one [ 616.904310][T26868] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 617.320188][T26892] sctp: [Deprecated]: syz.5.6010 (pid 26892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.320188][T26892] Use struct sctp_sack_info instead [ 617.967812][T26884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.993075][T20434] wg1 speed is unknown, defaulting to 1000 [ 618.010817][T20434] syz2: Port: 1 Link DOWN [ 618.305756][T26927] geneve2: entered promiscuous mode [ 618.311602][T26927] geneve2: entered allmulticast mode [ 619.054430][T26968] ip6t_rpfilter: unknown options [ 619.223299][T26976] __nla_validate_parse: 14 callbacks suppressed [ 619.223322][T26976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6041'. [ 619.247979][T26982] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6039'. [ 619.282571][T26977] bond3: Removing last ns target with arp_interval on [ 619.291693][T26976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6041'. [ 619.421468][T26991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6043'. [ 619.446161][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6043'. [ 619.472810][T26991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6043'. [ 619.493102][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6043'. [ 619.513242][T26991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6043'. [ 619.534489][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6043'. [ 619.555830][T26991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6043'. [ 619.775794][T27013] Cannot find set identified by id 65534 to match [ 620.382913][T27031] bond2: option mode: unable to set because the bond device has slaves [ 620.430415][T27031] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 620.452334][T27031] validate_nla: 5 callbacks suppressed [ 620.452353][T27031] netlink: 'syz.6.6053': attribute type 2 has an invalid length. [ 620.479642][T27031] netlink: 'syz.6.6053': attribute type 1 has an invalid length. [ 621.875282][T27128] mac80211_hwsim hwsim49 : renamed from wlan1 (while UP) [ 621.985351][T27132] netlink: 'syz.5.6080': attribute type 9 has an invalid length. [ 622.090283][T27137] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 622.245894][T27150] tipc: Started in network mode [ 622.255054][T27150] tipc: Node identity ac14140f, cluster identity 4711 [ 622.263406][T27150] tipc: New replicast peer: 255.255.255.255 [ 622.271480][T27150] tipc: Enabled bearer , priority 10 [ 623.255583][T27208] x_tables: duplicate entry at hook 3 [ 623.388296][T20419] tipc: Node number set to 2886997007 [ 623.893228][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 623.904745][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 623.914307][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 623.931368][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 623.949660][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 624.034017][T27234] tap0: tun_chr_ioctl cmd 1074025678 [ 624.040607][T27234] tap0: group set to 0 [ 624.487607][T27251] __nla_validate_parse: 142 callbacks suppressed [ 624.487630][T27251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6122'. [ 624.579482][T27230] wg1 speed is unknown, defaulting to 1000 [ 624.600703][T27254] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6123'. [ 624.885170][T27263] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6126'. [ 624.971834][ T5856] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 624.989149][ T5856] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 625.004857][ T5856] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 625.015148][ T5856] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 625.023497][ T5856] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 625.134265][T27230] chnl_net:caif_netlink_parms(): no params data found [ 625.531670][T27230] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.566950][T27230] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.587216][T27230] bridge_slave_0: entered allmulticast mode [ 625.621434][T27230] bridge_slave_0: entered promiscuous mode [ 625.632425][T27230] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.655176][T27230] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.671933][T27230] bridge_slave_1: entered allmulticast mode [ 625.682594][T27230] bridge_slave_1: entered promiscuous mode [ 625.697858][T27304] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 625.811479][T27230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.841249][T27230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.844272][T27306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6135'. [ 625.984360][T27266] wg1 speed is unknown, defaulting to 1000 [ 626.007398][T27230] team0: Port device team_slave_0 added [ 626.022443][T27230] team0: Port device team_slave_1 added [ 626.037707][ T5850] Bluetooth: hci5: command tx timeout [ 626.171879][T27230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.179614][T27230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.230386][T27230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.251803][T27230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.268449][T27230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.324324][T27230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.360512][T27289] wg1 speed is unknown, defaulting to 1000 [ 626.521874][T27230] hsr_slave_0: entered promiscuous mode [ 626.529770][T27230] hsr_slave_1: entered promiscuous mode [ 626.542650][T27230] debugfs: 'hsr0' already exists in 'hsr' [ 626.549963][T27230] Cannot create hsr debugfs directory [ 626.673207][T27333] nbd: socks must be embedded in a SOCK_ITEM attr [ 627.077316][ T5856] Bluetooth: hci8: command tx timeout [ 627.162404][T27266] chnl_net:caif_netlink_parms(): no params data found [ 627.182487][T27343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.249788][T27345] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6143'. [ 627.259956][T27345] netlink: 'syz.6.6143': attribute type 7 has an invalid length. [ 627.281567][T27345] netlink: 'syz.6.6143': attribute type 8 has an invalid length. [ 627.290225][T27345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6143'. [ 627.354612][T27345] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 627.368246][T27345] batadv_slave_1: entered promiscuous mode [ 627.374407][T27345] batadv_slave_1: left promiscuous mode [ 627.381524][T27345] netdevsim netdevsim6 netdevsim1: left promiscuous mode [ 627.408419][T27351] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6145'. [ 627.473215][T27230] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.510099][T27230] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 627.530733][T27230] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 627.605728][T27356] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6146'. [ 627.640004][T27357] bond4: ARP target 1.0.0.0 is already present [ 627.647980][T27357] bond4: option arp_ip_target: invalid value (1) [ 627.661379][T27357] bond4 (unregistering): Released all slaves [ 627.690316][T27266] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.697881][T27266] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.708066][T27266] bridge_slave_0: entered allmulticast mode [ 627.720585][T27365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6148'. [ 627.729108][T27266] bridge_slave_0: entered promiscuous mode [ 627.760532][T27230] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.771064][T27230] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 627.783157][T27230] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 627.814475][T27266] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.822251][T27266] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.833827][T27266] bridge_slave_1: entered allmulticast mode [ 627.846956][T27266] bridge_slave_1: entered promiscuous mode [ 627.880001][T27230] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.901491][T27230] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 627.925495][T27230] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 628.048692][T27266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.100124][T27266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.124400][ T5856] Bluetooth: hci5: command tx timeout [ 628.139387][T27230] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.149697][T27230] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 628.161910][T27230] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 628.166309][ T5836] IPVS: starting estimator thread 0... [ 628.266367][T27380] IPVS: using max 27 ests per chain, 64800 per kthread [ 628.296817][T27266] team0: Port device team_slave_0 added [ 628.313137][T27266] team0: Port device team_slave_1 added [ 628.435950][T27266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.444156][T27266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.483275][T27266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.495445][T27388] netlink: 'syz.7.6157': attribute type 2 has an invalid length. [ 628.590392][T27397] xt_CT: No such helper "syz0" [ 628.632271][T27266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.663947][T27266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.714773][T27266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.774663][T27406] team_slave_1: entered allmulticast mode [ 628.822765][T27410] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6162'. [ 628.912497][T27412] netlink: 'syz.6.6161': attribute type 4 has an invalid length. [ 628.934720][T27266] hsr_slave_0: entered promiscuous mode [ 628.957785][T27266] hsr_slave_1: entered promiscuous mode [ 628.966431][T27266] debugfs: 'hsr0' already exists in 'hsr' [ 628.972243][T27266] Cannot create hsr debugfs directory [ 629.031569][T27230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 629.064840][T27230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 629.103615][T27230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 629.122563][T27422] netlink: 'syz.7.6165': attribute type 13 has an invalid length. [ 629.138163][T27230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 629.154585][T27422] gretap0: refused to change device tx_queue_len [ 629.161464][ T5856] Bluetooth: hci8: command tx timeout [ 629.167035][T27422] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 629.202643][T27423] syzkaller0: entered promiscuous mode [ 629.208514][T27423] syzkaller0: entered allmulticast mode [ 629.579170][T27443] __nla_validate_parse: 1 callbacks suppressed [ 629.579190][T27443] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6168'. [ 629.649602][T27443] nbd: couldn't find a device at index 0 [ 629.651918][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 629.701885][T27266] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 629.727904][T27266] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 629.771628][T27266] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 629.807331][T27266] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 629.822855][T27459] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6172'. [ 629.864617][T27459] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6172'. [ 629.892543][T27230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.034378][T27230] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.055740][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.062995][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.105086][T15868] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.112250][T15868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.200897][ T5856] Bluetooth: hci5: command tx timeout [ 630.209192][T27473] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6175'. [ 630.350377][T27266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.391284][T27484] netlink: 'syz.7.6178': attribute type 21 has an invalid length. [ 630.404303][T27484] IPv6: NLM_F_CREATE should be specified when creating new route [ 630.421158][T27266] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.455117][T27486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6179'. [ 630.465740][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.472989][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.494205][T27487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6179'. [ 630.542041][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.549471][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.809464][T27230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.837734][T27501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6182'. [ 630.881311][T27503] netlink: 'syz.7.6183': attribute type 3 has an invalid length. [ 630.958130][T27230] veth0_vlan: entered promiscuous mode [ 630.995008][T27230] veth1_vlan: entered promiscuous mode [ 631.101199][T27230] veth0_macvtap: entered promiscuous mode [ 631.131411][T27230] veth1_macvtap: entered promiscuous mode [ 631.198128][T27266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.235366][T27230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.245067][ T5856] Bluetooth: hci8: command tx timeout [ 631.287332][T27230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.316597][T17159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.332441][T17159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.349710][T17159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.367599][T17159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.462207][T27516] netlink: 'syz.7.6188': attribute type 1 has an invalid length. [ 631.680075][T15775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.709112][T15775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.785687][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.802929][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.942495][T27266] veth0_vlan: entered promiscuous mode [ 631.983707][T27266] veth1_vlan: entered promiscuous mode [ 632.231291][T27266] veth0_macvtap: entered promiscuous mode [ 632.277830][ T5856] Bluetooth: hci5: command tx timeout [ 632.283987][T27266] veth1_macvtap: entered promiscuous mode [ 632.387999][T27266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.445537][T27266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.483349][T17166] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.574124][T17166] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.604787][T27553] IPVS: Unknown mcast interface: pim6reg0 [ 632.632676][T17166] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.662075][T17166] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.818672][T27562] syz_tun: entered allmulticast mode [ 632.857758][T27565] netlink: 'syz.3.6198': attribute type 1 has an invalid length. [ 632.971260][T17160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.989522][T17160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.099056][T17163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.126526][T17163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.138279][T27577] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.6204'. [ 633.320717][ T5856] Bluetooth: hci8: command tx timeout [ 633.393606][T27593] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6206'. [ 633.437825][T27593] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6206'. [ 633.446276][T27594] xt_hashlimit: size too large, truncated to 1048576 [ 633.483834][T27601] : renamed from bridge_slave_0 (while UP) [ 633.490623][T27594] syz.3.6207: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 633.513070][T27590] sctp: [Deprecated]: syz.7.6206 (pid 27590) Use of int in maxseg socket option. [ 633.513070][T27590] Use struct sctp_assoc_value instead [ 633.529269][T27594] CPU: 1 UID: 0 PID: 27594 Comm: syz.3.6207 Not tainted syzkaller #0 PREEMPT(full) [ 633.529299][T27594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.529320][T27594] Call Trace: [ 633.529332][T27594] [ 633.529341][T27594] dump_stack_lvl+0x189/0x250 [ 633.529374][T27594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.529397][T27594] ? __pfx__printk+0x10/0x10 [ 633.529425][T27594] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 633.529457][T27594] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 633.529491][T27594] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 633.529522][T27594] warn_alloc+0x214/0x310 [ 633.529557][T27594] ? __pfx_warn_alloc+0x10/0x10 [ 633.529593][T27594] ? __get_vm_area_node+0x28f/0x300 [ 633.529639][T27594] ? htable_create+0x101/0x7a0 [ 633.529668][T27594] __vmalloc_node_range_noprof+0x690/0x12d0 [ 633.529723][T27594] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 633.529748][T27594] ? htable_create+0x101/0x7a0 [ 633.529777][T27594] ? rcu_is_watching+0x15/0xb0 [ 633.529801][T27594] ? htable_create+0x101/0x7a0 [ 633.529828][T27594] __kvmalloc_node_noprof+0x670/0x910 [ 633.529856][T27594] ? htable_create+0x101/0x7a0 [ 633.529880][T27594] ? hashlimit_pernet+0x23/0x240 [ 633.529907][T27594] ? hashlimit_pernet+0x23/0x240 [ 633.529933][T27594] ? hashlimit_pernet+0x23/0x240 [ 633.529967][T27594] htable_create+0x101/0x7a0 [ 633.530002][T27594] hashlimit_mt_check_common+0x719/0xa10 [ 633.530041][T27594] xt_check_match+0x3d1/0xab0 [ 633.530074][T27594] ? __pfx_xt_check_match+0x10/0x10 [ 633.530104][T27594] ? pcpu_alloc_noprof+0xf95/0x1750 [ 633.530142][T27594] ? xt_find_match+0x1f7/0x250 [ 633.530177][T27594] translate_table+0x1553/0x2040 [ 633.530222][T27594] ? __pfx_translate_table+0x10/0x10 [ 633.530251][T27594] ? __might_fault+0xb0/0x130 [ 633.530297][T27594] ? _copy_from_user+0x94/0xb0 [ 633.530332][T27594] do_ip6t_set_ctl+0x970/0xce0 [ 633.530375][T27594] ? rcu_is_watching+0x15/0xb0 [ 633.530413][T27594] ? trace_contention_end+0x39/0x100 [ 633.530439][T27594] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 633.530485][T27594] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 633.530518][T27594] ? __pfx_css_rstat_updated+0x10/0x10 [ 633.530559][T27594] nf_setsockopt+0x26f/0x290 [ 633.530593][T27594] rawv6_setsockopt+0x23b/0x5b0 [ 633.530620][T27594] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 633.530649][T27594] ? aa_sock_opt_perm+0xff/0x1a0 [ 633.530672][T27594] ? sock_common_setsockopt+0x36/0xc0 [ 633.530696][T27594] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 633.530724][T27594] do_sock_setsockopt+0x17c/0x1b0 [ 633.530759][T27594] __x64_sys_setsockopt+0x13f/0x1b0 [ 633.530795][T27594] do_syscall_64+0xfa/0xf80 [ 633.530822][T27594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.530842][T27594] ? clear_bhb_loop+0x60/0xb0 [ 633.530868][T27594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.530887][T27594] RIP: 0033:0x7f8a4e18f749 [ 633.530905][T27594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.530923][T27594] RSP: 002b:00007f8a4f0af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 633.530943][T27594] RAX: ffffffffffffffda RBX: 00007f8a4e3e6180 RCX: 00007f8a4e18f749 [ 633.530959][T27594] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 633.530970][T27594] RBP: 00007f8a4e213f91 R08: 0000000000000528 R09: 0000000000000000 [ 633.530983][T27594] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 633.530995][T27594] R13: 00007f8a4e3e6218 R14: 00007f8a4e3e6180 R15: 00007ffc6982d9a8 [ 633.531031][T27594] [ 633.531123][T27594] Mem-Info: [ 634.017712][T27594] active_anon:5241 inactive_anon:0 isolated_anon:0 [ 634.017712][T27594] active_file:2436 inactive_file:40110 isolated_file:0 [ 634.017712][T27594] unevictable:768 dirty:29 writeback:0 [ 634.017712][T27594] slab_reclaimable:13526 slab_unreclaimable:348252 [ 634.017712][T27594] mapped:49407 shmem:1363 pagetables:1231 [ 634.017712][T27594] sec_pagetables:0 bounce:0 [ 634.017712][T27594] kernel_misc_reclaimable:0 [ 634.017712][T27594] free:1023331 free_pcp:13562 free_cma:0 [ 634.096434][T27594] Node 0 active_anon:20928kB inactive_anon:0kB active_file:9744kB inactive_file:160248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:197552kB dirty:104kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16656kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 634.206726][T27594] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 634.307211][T27594] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.362164][T27594] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 634.369685][T27594] Node 0 DMA32 free:182108kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20728kB inactive_anon:0kB active_file:9744kB inactive_file:160248kB unevictable:1536kB writepending:104kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:36764kB local_pcp:16544kB free_cma:0kB [ 634.450336][T27594] lowmem_reserve[]: 0 0 0 0 0 [ 634.465419][T27594] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.538627][T27594] lowmem_reserve[]: 0 0 0 0 0 [ 634.543728][T27594] Node 1 Normal free:3894476kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19248kB local_pcp:7244kB free_cma:0kB [ 634.580899][T27594] lowmem_reserve[]: 0 0 0 0 0 [ 634.585703][T27594] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 634.601683][T27594] Node 0 DMA32: 1209*4kB (UM) 369*8kB (UME) 201*16kB (UME) 55*32kB (ME) 51*64kB (UME) 14*128kB (UM) 14*256kB (UM) 19*512kB (UME) 1*1024kB (E) 1*2048kB (U) 36*4096kB (M) = 181660kB [ 634.619529][T27632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.626011][T27594] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 634.643632][T27594] Node 1 Normal: 187*4kB (UE) 54*8kB (UME) 51*16kB (UME) 88*32kB (UME) 26*64kB (UME) 11*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894476kB [ 634.663376][T27594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.674660][T27594] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 634.685358][T27594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.697459][T27594] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 634.706989][T27594] 43907 total pagecache pages [ 634.711700][T27594] 0 pages in swap cache [ 634.715875][T27594] Free swap = 124996kB [ 634.725831][T27594] Total swap = 124996kB [ 634.795620][T27594] 2097051 pages RAM [ 634.805347][T27594] 0 pages HighMem/MovableOnly [ 634.815468][T27594] 424280 pages reserved [ 634.825582][T27594] 0 pages cma reserved [ 635.055068][T27651] netlink: 'syz.5.6223': attribute type 39 has an invalid length. [ 635.222418][T27657] __nla_validate_parse: 1 callbacks suppressed [ 635.222437][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6227'. [ 635.289257][T27663] netlink: 'syz.8.6228': attribute type 1 has an invalid length. [ 635.314852][T27663] netlink: 228 bytes leftover after parsing attributes in process `syz.8.6228'. [ 635.364079][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6228'. [ 635.390868][T27670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6231'. [ 635.700506][T27688] wlan0 speed is unknown, defaulting to 1000 [ 635.714834][T27688] wlan0 speed is unknown, defaulting to 1000 [ 635.715576][T27690] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6237'. [ 635.723502][T27688] wlan0 speed is unknown, defaulting to 1000 [ 635.821839][T27693] netlink: 'syz.7.6238': attribute type 12 has an invalid length. [ 635.830346][T27693] netlink: 'syz.7.6238': attribute type 29 has an invalid length. [ 635.841453][T27693] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6238'. [ 635.851687][T27693] netlink: 59 bytes leftover after parsing attributes in process `syz.7.6238'. [ 635.936035][T27695] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.6239'. [ 635.976847][T27695] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 636.104412][T27704] netlink: 'syz.5.6239': attribute type 1 has an invalid length. [ 636.259282][T27688] infiniband syz0: set active [ 636.264126][ T24] wlan0 speed is unknown, defaulting to 1000 [ 636.282345][T27688] infiniband syz0: added wlan0 [ 636.347762][T27688] RDS/IB: syz0: added [ 636.352017][T27688] smc: adding ib device syz0 with port count 1 [ 636.359420][T27688] smc: ib device syz0 port 1 has no pnetid [ 636.368519][T27714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6242'. [ 636.390923][ T24] wlan0 speed is unknown, defaulting to 1000 [ 636.402857][T27688] wlan0 speed is unknown, defaulting to 1000 [ 636.830403][T27733] netlink: 'syz.5.6250': attribute type 3 has an invalid length. [ 636.867355][T27733] netlink: 'syz.5.6250': attribute type 1 has an invalid length. [ 636.896667][T27733] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6250'. [ 636.928317][T27688] wlan0 speed is unknown, defaulting to 1000 [ 637.023814][T27744] netlink: 'syz.8.6253': attribute type 39 has an invalid length. [ 637.153438][T27751] netlink: 'syz.7.6254': attribute type 1 has an invalid length. [ 637.499380][T27688] wlan0 speed is unknown, defaulting to 1000 [ 637.785215][T27746] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 637.800800][T27746] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 637.860122][T27746] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 637.878378][T27746] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 637.914656][T27746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 637.931059][T27746] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 638.094100][T27688] wlan0 speed is unknown, defaulting to 1000 [ 638.120767][T27782] netlink: 'syz.8.6262': attribute type 1 has an invalid length. [ 638.188177][T27746] tipc: Resetting bearer [ 638.207083][T27746] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.216952][T27746] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 638.341049][T27790] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.357254][T27790] bridge0: entered allmulticast mode [ 638.370128][T27746] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 638.382293][T27746] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 638.483868][T14007] wlan0 speed is unknown, defaulting to 1000 [ 638.499956][T14007] syz0: Port: 1 Link DOWN [ 638.524860][T14007] wlan0 speed is unknown, defaulting to 1000 [ 638.531395][T27746] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 638.546216][T27746] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 638.660296][T27746] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 638.670754][T27746] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 638.715906][T27746] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 638.734178][T27746] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 638.764930][T27688] wlan0 speed is unknown, defaulting to 1000 [ 639.194071][T27688] wlan0 speed is unknown, defaulting to 1000 [ 639.625317][T27688] wlan0 speed is unknown, defaulting to 1000 [ 639.744427][T27842] vcan0: tx drop: invalid sa for name 0x0002000000000000 [ 640.028026][T27688] wlan0 speed is unknown, defaulting to 1000 [ 640.548514][T27688] wlan0 speed is unknown, defaulting to 1000 [ 640.579527][T27876] netlink: 'syz.5.6290': attribute type 12 has an invalid length. [ 641.035263][T27688] wlan0 speed is unknown, defaulting to 1000 [ 641.439097][T27913] __nla_validate_parse: 8 callbacks suppressed [ 641.439117][T27913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6303'. [ 641.490002][T27688] wlan0 speed is unknown, defaulting to 1000 [ 641.620074][T27920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6305'. [ 641.630868][T27920] openvswitch: netlink: IP tunnel dst address not specified [ 641.672991][T27921] syzkaller0: entered allmulticast mode [ 641.925802][T27931] netlink: 'syz.3.6308': attribute type 1 has an invalid length. [ 641.990749][T27931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 642.133408][T27937] veth5: entered promiscuous mode [ 642.533781][T27964] ipt_REJECT: ECHOREPLY no longer supported. [ 642.581521][T27964] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6319'. [ 642.633408][T27970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6321'. [ 642.644089][T27970] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 642.974213][T27991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6325'. [ 643.161699][T28007] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6330'. [ 643.258966][T28011] netlink: 'syz.8.6332': attribute type 10 has an invalid length. [ 643.292166][T28014] netlink: 'syz.3.6333': attribute type 1 has an invalid length. [ 643.305827][T28011] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.318352][T28013] netlink: 'syz.3.6333': attribute type 1 has an invalid length. [ 643.329523][T28011] bond0: (slave team0): Enslaving as an active interface with an up link [ 643.333392][T28016] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6334'. [ 643.496687][T28014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.684613][T28002] warn_alloc: 2 callbacks suppressed [ 643.684633][T28002] syz.5.6329: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 643.734099][T28002] CPU: 1 UID: 0 PID: 28002 Comm: syz.5.6329 Not tainted syzkaller #0 PREEMPT(full) [ 643.734130][T28002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.734143][T28002] Call Trace: [ 643.734151][T28002] [ 643.734159][T28002] dump_stack_lvl+0x189/0x250 [ 643.734190][T28002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.734226][T28002] ? __pfx__printk+0x10/0x10 [ 643.734252][T28002] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 643.734284][T28002] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 643.734316][T28002] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 643.734359][T28002] warn_alloc+0x214/0x310 [ 643.734393][T28002] ? __pfx_warn_alloc+0x10/0x10 [ 643.734429][T28002] ? __get_vm_area_node+0x28f/0x300 [ 643.734454][T28002] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 643.734483][T28002] __vmalloc_node_range_noprof+0x690/0x12d0 [ 643.734511][T28002] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 643.734566][T28002] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 643.734592][T28002] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 643.734620][T28002] ? rcu_is_watching+0x15/0xb0 [ 643.734644][T28002] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 643.734670][T28002] __kvmalloc_node_noprof+0x670/0x910 [ 643.734696][T28002] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 643.734720][T28002] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 643.734745][T28002] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 643.734777][T28002] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 643.734819][T28002] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 643.734842][T28002] ? __fget_files+0x2a/0x420 [ 643.734863][T28002] ? __fget_files+0x2a/0x420 [ 643.734880][T28002] ? __fget_files+0x2a/0x420 [ 643.734902][T28002] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 643.734935][T28002] link_create+0x673/0x850 [ 643.734983][T28002] __sys_bpf+0x6be/0x860 [ 643.735009][T28002] ? __pfx___sys_bpf+0x10/0x10 [ 643.735057][T28002] ? rcu_is_watching+0x15/0xb0 [ 643.735090][T28002] __x64_sys_bpf+0x7c/0x90 [ 643.735113][T28002] do_syscall_64+0xfa/0xf80 [ 643.735141][T28002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.735161][T28002] ? clear_bhb_loop+0x60/0xb0 [ 643.735186][T28002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.735205][T28002] RIP: 0033:0x7f461bd8f749 [ 643.735223][T28002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.735241][T28002] RSP: 002b:00007f461cbb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 643.735263][T28002] RAX: ffffffffffffffda RBX: 00007f461bfe5fa0 RCX: 00007f461bd8f749 [ 643.735278][T28002] RDX: 0000000000000040 RSI: 0000200000000740 RDI: 000000000000001c [ 643.735291][T28002] RBP: 00007f461be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.735303][T28002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.735315][T28002] R13: 00007f461bfe6038 R14: 00007f461bfe5fa0 R15: 00007ffc23a65078 [ 643.735357][T28002] [ 643.735365][T28002] Mem-Info: [ 643.965937][T28041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6338'. [ 643.986883][T28002] active_anon:5231 inactive_anon:0 isolated_anon:0 [ 643.986883][T28002] active_file:2436 inactive_file:40116 isolated_file:0 [ 643.986883][T28002] unevictable:768 dirty:66 writeback:0 [ 643.986883][T28002] slab_reclaimable:13575 slab_unreclaimable:352602 [ 643.986883][T28002] mapped:49409 shmem:1362 pagetables:1240 [ 643.986883][T28002] sec_pagetables:0 bounce:0 [ 643.986883][T28002] kernel_misc_reclaimable:0 [ 643.986883][T28002] free:1015513 free_pcp:15234 free_cma:0 [ 644.126194][T28002] Node 0 active_anon:20940kB inactive_anon:0kB active_file:9744kB inactive_file:160264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:197556kB dirty:240kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16720kB pagetables:4724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 644.160180][T28051] netlink: 'syz.8.6341': attribute type 17 has an invalid length. [ 644.168722][T28051] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6341'. [ 644.168984][T28048] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 644.177672][T28051] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6341'. [ 644.187092][T28002] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 644.207320][T28048] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 644.228479][T28002] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.273226][T28002] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 644.311316][T28047] batman_adv: batadv0: Adding interface: dummy0 [ 644.319199][T28047] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.354865][T28002] Node 0 DMA32 free:151988kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20940kB inactive_anon:0kB active_file:9744kB inactive_file:160264kB unevictable:1536kB writepending:240kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:42428kB local_pcp:24920kB free_cma:0kB [ 644.397617][T28047] batman_adv: batadv0: Interface activated: dummy0 [ 644.404905][T28002] lowmem_reserve[]: 0 0 0 0 0 [ 644.421930][T28051] erspan0: entered promiscuous mode [ 644.429636][T28051] gretap0: entered promiscuous mode [ 644.474004][T28002] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.505626][T28002] lowmem_reserve[]: 0 0 0 0 0 [ 644.511236][T28002] Node 1 Normal free:3894476kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19248kB local_pcp:7244kB free_cma:0kB [ 644.607585][T28002] lowmem_reserve[]: 0 0 0 0 0 [ 644.615644][T28002] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 644.662009][T28002] Node 0 DMA32: 1291*4kB (M) 103*8kB (ME) 135*16kB (M) 55*32kB (ME) 49*64kB (M) 14*128kB (ME) 15*256kB (UME) 18*512kB (ME) 1*1024kB (U) 0*2048kB 30*4096kB (M) = 151796kB [ 644.701854][T28002] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 644.758524][T28002] Node 1 Normal: 187*4kB (UE) 54*8kB (UME) 51*16kB (UME) 88*32kB (UME) 26*64kB (UME) 11*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894476kB [ 644.779416][T28002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.791645][T28002] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.802007][T28002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.816773][T28002] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.848390][T28002] 44036 total pagecache pages [ 644.853906][T28002] 0 pages in swap cache [ 644.859367][T28002] Free swap = 124996kB [ 644.863622][T28002] Total swap = 124996kB [ 644.868674][T28002] 2097051 pages RAM [ 644.872608][T28002] 0 pages HighMem/MovableOnly [ 644.877488][T28002] 424280 pages reserved [ 644.881721][T28002] 0 pages cma reserved [ 645.330511][T28101] x_tables: duplicate underflow at hook 2 [ 645.459016][T28108] netlink: 'syz.7.6358': attribute type 5 has an invalid length. [ 645.489772][T28110] sctp: [Deprecated]: syz.5.6359 (pid 28110) Use of int in max_burst socket option. [ 645.489772][T28110] Use struct sctp_assoc_value instead [ 645.598525][T28112] netlink: 'syz.7.6360': attribute type 1 has an invalid length. [ 645.639968][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.663701][T28112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 645.671738][T28116] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 645.694747][T28116] bond2: entered allmulticast mode [ 645.759926][T28112] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 646.147921][T28146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.229505][T28149] tipc: Started in network mode [ 646.234645][T28149] tipc: Node identity ac14140f, cluster identity 4711 [ 646.242042][T28149] tipc: Enabling of bearer rejected, failed to enable media [ 646.648497][T28179] __nla_validate_parse: 8 callbacks suppressed [ 646.648519][T28179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6380'. [ 646.709482][T28179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6380'. [ 646.746449][T28179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6380'. [ 646.777514][T28185] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 647.234838][T28223] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6388'. [ 647.306980][T28227] siw: device registration error -23 [ 647.318290][T28228] siw: device registration error -23 [ 647.416769][T28233] netlink: 18 bytes leftover after parsing attributes in process `syz.3.6393'. [ 647.499411][T28237] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 647.774002][T28253] netlink: zone id is out of range [ 647.786273][T28253] netlink: zone id is out of range [ 647.792606][T28253] netlink: zone id is out of range [ 647.812836][T28253] netlink: get zone limit has 4 unknown bytes [ 647.985388][T28267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6404'. [ 648.187368][T28278] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6409'. [ 648.280292][T28286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6411'. [ 648.437059][T28292] secmark_tg_check: 1 callbacks suppressed [ 648.437080][T28292] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 648.509367][T28302] bridge3: entered promiscuous mode [ 648.525673][T28302] bridge3: entered allmulticast mode [ 648.538565][T28302] team0: Port device bridge3 added [ 648.558532][T28292] syzkaller0: entered promiscuous mode [ 648.564121][T28292] syzkaller0: entered allmulticast mode [ 648.608653][T28302] bridge0: port 3(team0) entered blocking state [ 648.615158][T28302] bridge0: port 3(team0) entered disabled state [ 648.621019][T28310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6413'. [ 648.630643][T28310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6413'. [ 648.640822][T28302] team0: entered allmulticast mode [ 648.649484][T28292] x_tables: duplicate underflow at hook 1 [ 648.666853][T28302] team_slave_0: entered allmulticast mode [ 648.672809][T28302] team_slave_1: entered allmulticast mode [ 648.700850][T28302] team0: entered promiscuous mode [ 648.708168][T28302] team_slave_0: entered promiscuous mode [ 648.720387][T28302] team_slave_1: entered promiscuous mode [ 648.730469][T28302] bridge0: port 3(team0) entered blocking state [ 648.736883][T28302] bridge0: port 3(team0) entered forwarding state [ 648.962909][T28331] team_slave_0: entered promiscuous mode [ 648.970848][T28331] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 648.979645][T28331] team0: Device macvtap1 is already an upper device of the team interface [ 648.994167][T28331] team_slave_0: left promiscuous mode [ 649.291833][T28357] netlink: 'syz.7.6433': attribute type 21 has an invalid length. [ 649.319414][T28357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.410711][T28364] netlink: 'syz.7.6436': attribute type 1 has an invalid length. [ 649.568432][T28370] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 649.582002][T28370] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 649.603365][T28374] netlink: 'syz.5.6438': attribute type 7 has an invalid length. [ 649.634142][T28374] netlink: 'syz.5.6438': attribute type 8 has an invalid length. [ 649.774097][T28386] gretap1: entered promiscuous mode [ 649.788762][T28386] bond3: (slave gretap1): making interface the new active one [ 649.799647][T28386] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 649.835529][T28391] macvlan2: entered promiscuous mode [ 649.841184][T28391] macvlan2: entered allmulticast mode [ 649.849098][T28391] bond3: entered promiscuous mode [ 649.854827][T28391] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 649.865854][T28391] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 649.889693][T28391] bond3: left promiscuous mode [ 650.025427][T28403] "syz.8.6445" (28403) uses obsolete ecb(arc4) skcipher [ 650.108913][T28408] netlink: 'syz.7.6446': attribute type 58 has an invalid length. [ 650.713851][T28430] netlink: 'syz.5.6453': attribute type 11 has an invalid length. [ 651.296726][T28461] syzkaller1: entered promiscuous mode [ 651.306264][T28461] syzkaller1: entered allmulticast mode [ 651.438532][T28470] tipc: Enabled bearer , priority 0 [ 651.446801][T28470] syzkaller0: entered promiscuous mode [ 651.452321][T28470] syzkaller0: entered allmulticast mode [ 651.468851][T28470] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 651.557480][T28470] tipc: Resetting bearer [ 651.577686][T28474] syzkaller1: entered promiscuous mode [ 651.597531][T28474] syzkaller1: entered allmulticast mode [ 651.636467][T28469] tipc: Resetting bearer [ 651.673843][T28469] tipc: Disabling bearer [ 651.817138][T28493] __nla_validate_parse: 12 callbacks suppressed [ 651.817159][T28493] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6468'. [ 651.983566][T28491] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6470'. [ 651.983566][T28494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6470'. [ 651.983848][T28494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6470'. [ 652.022336][T28491] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6470'. [ 652.102916][T28496] lo: entered promiscuous mode [ 652.145685][T28502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6475'. [ 652.149515][T28496] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 652.190859][T28496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.260264][T28509] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6476'. [ 652.322398][T28513] netlink: 'syz.3.6478': attribute type 1 has an invalid length. [ 652.389382][T28513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 652.411501][T14356] tipc: Subscription rejected, illegal request [ 652.541879][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6481'. [ 652.714238][T28513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6478'. [ 652.724355][T28525] veth7: entered promiscuous mode [ 652.763872][T28525] bond3: (slave veth7): Enslaving as an active interface with a down link [ 652.867250][T28534] 8021q: VLANs not supported on ip6_vti0 [ 652.985779][T28541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6486'. [ 653.083875][ T5836] IPVS: starting estimator thread 0... [ 653.176563][T28548] IPVS: using max 28 ests per chain, 67200 per kthread [ 653.223793][T28554] x_tables: duplicate underflow at hook 2 [ 653.390445][T28568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.534040][T28576] netlink: 'syz.3.6493': attribute type 2 has an invalid length. [ 653.803014][T28578] bridge7: entered promiscuous mode [ 653.827836][T28578] bridge7: entered allmulticast mode [ 653.938926][T28601] netlink: 'syz.5.6500': attribute type 1 has an invalid length. [ 654.049763][T28601] bond4: entered promiscuous mode [ 654.067539][T28601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 654.237781][T28618] IPv6: sit1: Disabled Multicast RS [ 654.409625][T28628] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 654.425922][T28628] bond4: entered promiscuous mode [ 654.433040][T28628] bond4: entered allmulticast mode [ 654.439487][T28628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 654.465189][T28628] syzkaller0: entered promiscuous mode [ 654.471495][T28628] syzkaller0: entered allmulticast mode [ 654.487123][T28633] batadv_slave_0: entered promiscuous mode [ 654.545154][T28628] netem: change failed [ 654.921963][T28655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.118582][T28663] geneve3: entered promiscuous mode [ 655.223673][T28625] batadv_slave_0: left promiscuous mode [ 655.498788][T28681] syzkaller1: entered promiscuous mode [ 655.504817][T28681] syzkaller1: entered allmulticast mode [ 655.782902][T28695] syzkaller1: entered promiscuous mode [ 655.789266][T28695] syzkaller1: entered allmulticast mode [ 655.998031][T28707] netlink: 'syz.8.6539': attribute type 20 has an invalid length. [ 656.053263][ T6273] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.064244][T28707] netlink: 'syz.8.6539': attribute type 20 has an invalid length. [ 656.090815][ T6273] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.110539][ T6273] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.156744][ T6273] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.331439][T28726] netlink: 'syz.6.6543': attribute type 11 has an invalid length. [ 656.727463][T28746] lo: left promiscuous mode [ 656.963876][T28762] netlink: 'syz.6.6554': attribute type 10 has an invalid length. [ 656.973105][T28762] __nla_validate_parse: 21 callbacks suppressed [ 656.973128][T28762] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6554'. [ 657.159031][T28746] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.166766][T28746] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.513517][T28746] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 657.545981][T28750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 657.581971][T28762] dummy0: entered promiscuous mode [ 657.597508][T28762] batman_adv: batadv0: Interface deactivated: dummy0 [ 657.604266][T28762] batman_adv: batadv0: Removing interface: dummy0 [ 657.632270][T28762] bridge0: port 4(dummy0) entered blocking state [ 657.666489][T28762] bridge0: port 4(dummy0) entered disabled state [ 657.673146][T28762] dummy0: entered allmulticast mode [ 657.721113][T28762] bridge0: port 4(dummy0) entered blocking state [ 657.727763][T28762] bridge0: port 4(dummy0) entered forwarding state [ 657.969280][T28793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6561'. [ 657.982626][T28793] netlink: 'syz.6.6561': attribute type 5 has an invalid length. [ 657.990595][T28793] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6561'. [ 658.021938][T28794] netlink: 'syz.3.6560': attribute type 1 has an invalid length. [ 658.031668][T28793] geneve3: entered promiscuous mode [ 658.075350][T28793] geneve3: entered allmulticast mode [ 658.110201][ T1083] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 658.247017][ T1083] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 658.258430][T28793] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6561'. [ 658.277292][T28793] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6561'. [ 658.286448][T17163] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 658.302150][T28809] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6561'. [ 658.304162][T17163] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 658.381768][T28812] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 658.644470][T28812] bond5 (unregistering): Released all slaves [ 658.958249][T28840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6574'. [ 659.190457][T28854] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6576'. [ 659.658540][T28888] netlink: 'syz.8.6588': attribute type 1 has an invalid length. [ 659.762620][T28892] bond1: (slave gretap1): making interface the new active one [ 659.780739][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6588'. [ 659.790956][T28892] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 659.820333][T28888] bond1 (unregistering): (slave gretap1): Releasing active interface [ 659.822087][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6590'. [ 659.861865][T28888] bond1 (unregistering): Released all slaves [ 659.883971][T28897] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 660.284615][T28917] syzkaller0: entered promiscuous mode [ 660.294804][T28917] syzkaller0: entered allmulticast mode [ 660.420917][T28926] syzkaller0: entered promiscuous mode [ 660.426969][T28926] syzkaller0: entered allmulticast mode [ 662.724883][T28962] __nla_validate_parse: 6 callbacks suppressed [ 662.724901][T28962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6610'. [ 662.744470][T28956] : renamed from bond_slave_0 (while UP) [ 662.769395][T28980] netlink: 'syz.5.6614': attribute type 12 has an invalid length. [ 662.894322][T28990] netlink: 'syz.5.6617': attribute type 1 has an invalid length. [ 662.918738][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 662.987437][T28989] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 663.018183][T28989] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 663.036362][T28989] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 663.039471][T28997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6616'. [ 663.082176][T28997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6616'. [ 663.125354][T29004] openvswitch: netlink: Multiple metadata blocks provided [ 663.168655][T28990] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 663.193789][T28990] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 663.289510][T29010] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6623'. [ 663.309324][T29010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6623'. [ 663.417751][T29014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6625'. [ 663.438154][T29014] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6625'. [ 663.452022][T29018] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6627'. [ 663.461640][T29014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6625'. [ 663.473091][T29014] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6625'. [ 664.070615][T29062] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.116484][T29062] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 664.206720][T29073] tipc: Enabling of bearer rejected, failed to enable media [ 664.250005][T29075] netlink: 'syz.7.6643': attribute type 42 has an invalid length. [ 664.305507][T29075] syzkaller0: entered promiscuous mode [ 664.327286][T29075] syzkaller0: entered allmulticast mode [ 664.441339][T29087] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 664.483792][T29087] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 664.485243][T29075] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.722303][T29103] netlink: 'syz.6.6651': attribute type 10 has an invalid length. [ 664.751297][T29105] openvswitch: netlink: Flow actions attr not present in new flow. [ 664.758550][T29103] geneve0: entered promiscuous mode [ 664.772418][T29103] geneve0: entered allmulticast mode [ 664.788695][T29103] team0: Port device geneve0 added [ 665.031524][T29118] netlink: 'syz.6.6655': attribute type 1 has an invalid length. [ 665.053734][T29116] syzkaller0: entered promiscuous mode [ 665.068127][T29116] syzkaller0: entered allmulticast mode [ 666.843843][T29125] tipc: Started in network mode [ 666.851103][T29125] tipc: Node identity ba8f9cb1a78e, cluster identity 4711 [ 666.859691][T29125] tipc: Enabled bearer , priority 0 [ 666.867136][T29126] C: renamed from lo (while UP) [ 666.875729][T29133] syzkaller0: entered promiscuous mode [ 666.883874][T29133] syzkaller0: entered allmulticast mode [ 666.895650][T29132] netlink: 'syz.3.6660': attribute type 12 has an invalid length. [ 666.917773][T29132] netlink: 'syz.3.6660': attribute type 29 has an invalid length. [ 666.946988][T29136] tipc: Resetting bearer [ 666.982546][T29117] tipc: Resetting bearer [ 667.051192][T29117] tipc: Disabling bearer [ 667.410858][T29164] bridge1: entered allmulticast mode [ 667.457573][T29169] IPVS: length: 16 != 8 [ 667.692840][T29181] macvtap1: entered allmulticast mode [ 667.708498][T29181] veth0_macvtap: entered allmulticast mode [ 667.722116][T29186] netlink: 'syz.5.6673': attribute type 1 has an invalid length. [ 667.772770][T29186] netlink: 'syz.5.6673': attribute type 2 has an invalid length. [ 668.264049][T29220] netlink: 'syz.8.6684': attribute type 1 has an invalid length. [ 668.353081][T29225] syzkaller1: entered promiscuous mode [ 668.364926][T29225] syzkaller1: entered allmulticast mode [ 668.465040][T29232] __nla_validate_parse: 13 callbacks suppressed [ 668.465061][T29232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6688'. [ 668.491966][T29232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6688'. [ 668.785130][T29242] sctp: [Deprecated]: syz.8.6690 (pid 29242) Use of int in max_burst socket option. [ 668.785130][T29242] Use struct sctp_assoc_value instead [ 668.898612][T29253] netlink: 'syz.6.6695': attribute type 15 has an invalid length. [ 668.924708][T29253] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6695'. [ 669.172714][T29270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6697'. [ 669.455945][T29284] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6699'. [ 669.541639][T29274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6699'. [ 669.690728][T29293] sctp: [Deprecated]: syz.5.6706 (pid 29293) Use of int in maxseg socket option. [ 669.690728][T29293] Use struct sctp_assoc_value instead [ 669.727443][T29293] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6706'. [ 669.879421][T29306] syzkaller0: entered promiscuous mode [ 669.907878][T29306] syzkaller0: entered allmulticast mode [ 669.983741][T29300] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6709'. [ 670.118840][T29315] bridge0: port 3(ipvlan2) entered blocking state [ 670.125680][T29315] bridge0: port 3(ipvlan2) entered disabled state [ 670.135293][T29315] ipvlan2: entered allmulticast mode [ 670.142774][T29315] bridge0: entered allmulticast mode [ 670.151955][T29315] ipvlan2: left allmulticast mode [ 670.157650][T29315] bridge0: left allmulticast mode [ 670.429850][T29326] syzkaller1: entered promiscuous mode [ 670.438113][T29326] syzkaller1: entered allmulticast mode [ 670.458011][T29326] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6714'. [ 670.541654][T29336] bond5: option min_links: invalid value (18446744073709551614) [ 670.560277][T29336] bond5: option min_links: allowed values 0 - 2147483647 [ 670.574545][T29336] bond5 (unregistering): Released all slaves [ 670.682805][T29343] vlan2: entered allmulticast mode [ 670.693420][T29344] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6717'. [ 670.925143][ T5927] IPVS: starting estimator thread 0... [ 671.016483][T29358] IPVS: using max 25 ests per chain, 60000 per kthread [ 671.674173][ T30] audit: type=1107 audit(1766010644.301:14): pid=29395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\_' [ 671.708945][T29399] netlink: 'syz.6.6733': attribute type 4 has an invalid length. [ 671.789482][T29399] netlink: 'syz.6.6733': attribute type 4 has an invalid length. [ 671.835897][T29399] xfrm2: entered promiscuous mode [ 671.853232][T29399] xfrm2: entered allmulticast mode [ 672.605421][T29464] xt_policy: neither incoming nor outgoing policy selected [ 672.761019][T29472] tipc: Enabling of bearer rejected, failed to enable media [ 672.834622][T29479] mac80211_hwsim hwsim52 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 673.061504][T29491] team0: left allmulticast mode [ 673.075843][T29491] team_slave_0: left allmulticast mode [ 673.092926][T29491] team_slave_1: left allmulticast mode [ 673.115820][T29491] team0: left promiscuous mode [ 673.139639][T29491] team_slave_0: left promiscuous mode [ 673.150694][T29491] team_slave_1: left promiscuous mode [ 673.167051][T29491] bridge0: port 3(team0) entered disabled state [ 673.181931][T29491] bridge_slave_1: left allmulticast mode [ 673.190557][T29491] bridge_slave_1: left promiscuous mode [ 673.197293][T29491] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.209118][T29491] bridge_slave_0: left allmulticast mode [ 673.215103][T29491] bridge_slave_0: left promiscuous mode [ 673.223319][T29491] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.341797][T29491] bridge0 (unregistering): left allmulticast mode [ 673.583919][T29514] __nla_validate_parse: 12 callbacks suppressed [ 673.583940][T29514] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6764'. [ 673.638373][T29519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6764'. [ 673.660867][T29519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6764'. [ 673.681579][T29518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.744047][T29519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6764'. [ 673.825909][T29525] syzkaller0: entered promiscuous mode [ 673.848927][T29525] syzkaller0: entered allmulticast mode [ 673.923565][T29538] netlink: 212304 bytes leftover after parsing attributes in process `syz.5.6770'. [ 673.946691][T29538] openvswitch: netlink: Message has 6 unknown bytes. [ 673.992862][T29540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6771'. [ 674.022159][T29540] vlan2: entered allmulticast mode [ 674.028999][T29540] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 674.143439][T29546] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6774'. [ 674.291863][T29550] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6776'. [ 674.527756][T29557] sctp: [Deprecated]: syz.3.6778 (pid 29557) Use of int in maxseg socket option. [ 674.527756][T29557] Use struct sctp_assoc_value instead [ 674.775146][T29567] netlink: 'syz.6.6782': attribute type 83 has an invalid length. [ 674.915509][T29577] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6786'. [ 674.978064][T29581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6787'. [ 675.063591][T29582] vcan0: tx drop: invalid sa for name 0x0040000000000000 [ 675.320644][T29602] veth1_to_bond: entered allmulticast mode [ 675.470569][T29602] bond0: (slave bond_slave_1): Releasing backup interface [ 675.564337][T29602] veth1_to_bond (unregistering): left allmulticast mode [ 675.600093][T29606] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 675.621168][T29614] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 676.204066][T29648] bridge8: entered promiscuous mode [ 676.222960][T29648] bridge8: entered allmulticast mode [ 676.503720][T29663] ip6gre2: entered promiscuous mode [ 676.702400][T29675] IPv6: NLM_F_REPLACE set, but no existing node found! [ 676.862708][T29685] vlan2: entered promiscuous mode [ 676.873169][T29685] vlan2: entered allmulticast mode [ 676.879727][T29685] hsr_slave_1: entered allmulticast mode [ 677.219973][T29698] vxcan1: tx address claim with different name [ 677.994079][T29749] netlink: 'syz.8.6833': attribute type 6 has an invalid length. [ 678.023889][T29749] netlink: 'syz.8.6833': attribute type 6 has an invalid length. [ 678.600173][T29792] netlink: 'syz.8.6843': attribute type 11 has an invalid length. [ 678.633918][T29792] __nla_validate_parse: 26 callbacks suppressed [ 678.633937][T29792] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6843'. [ 678.727397][T29787] netlink: 'syz.7.6842': attribute type 2 has an invalid length. [ 678.894804][T29804] netlink: 'syz.8.6847': attribute type 1 has an invalid length. [ 678.910059][T29804] netlink: 'syz.8.6847': attribute type 2 has an invalid length. [ 678.910784][T29805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6845'. [ 678.926742][T29804] netlink: 'syz.8.6847': attribute type 1 has an invalid length. [ 679.089454][T29812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.101877][T29814] netlink: 'syz.8.6850': attribute type 10 has an invalid length. [ 679.137797][T29814] team0: Device veth1_macvtap failed to register rx_handler [ 679.205337][T29816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6850'. [ 679.347201][T29816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6850'. [ 679.399646][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6853'. [ 679.449877][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6853'. [ 679.470251][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6853'. [ 679.591803][T29836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6856'. [ 679.616610][T29836] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6856'. [ 679.821549][T29847] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6859'. [ 679.975043][T29838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.037523][T29838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.840390][T29838] veth7: left promiscuous mode [ 680.856704][T29838] veth0_macvtap: left allmulticast mode [ 680.862503][T29838] macvtap1: left allmulticast mode [ 680.877590][T29823] wg1 speed is unknown, defaulting to 1000 [ 680.890951][T29823] wlan0 speed is unknown, defaulting to 1000 [ 680.918131][ T3580] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.958224][ T3580] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.987663][ T3580] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.073749][ T3580] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.454590][T29882] syzkaller1: entered promiscuous mode [ 681.474566][T29882] syzkaller1: entered allmulticast mode [ 681.495464][T29885] : renamed from bond_slave_0 (while UP) [ 681.501948][T29846] wg1 speed is unknown, defaulting to 1000 [ 681.549816][T29887] netlink: 'syz.8.6872': attribute type 10 has an invalid length. [ 681.575607][T29885] tipc: Enabled bearer , priority 0 [ 681.582729][T29846] wlan0 speed is unknown, defaulting to 1000 [ 681.589673][T29888] syzkaller0: entered promiscuous mode [ 681.595183][T29888] syzkaller0: entered allmulticast mode [ 681.672564][T29884] tipc: Resetting bearer [ 681.729482][T29884] tipc: Disabling bearer [ 681.936067][T29898] tipc: Failed to remove unknown binding: 66,1,1/1595186602:382729313/382729315 [ 682.444231][T29912] xt_HMARK: spi-set and port-set can't be combined [ 682.931708][T29944] netlink: 'syz.7.6888': attribute type 21 has an invalid length. [ 682.971070][T29944] netlink: 'syz.7.6888': attribute type 7 has an invalid length. [ 683.563403][T29970] netlink: 'syz.6.6899': attribute type 19 has an invalid length. [ 683.632279][T15775] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.650174][T29970] netlink: 'syz.6.6899': attribute type 19 has an invalid length. [ 683.668298][T15775] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.689297][T29970] __nla_validate_parse: 52 callbacks suppressed [ 683.689320][T29970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6899'. [ 683.706968][T15775] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.736719][T15775] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.794312][T29979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6901'. [ 683.816646][T29979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6901'. [ 683.830051][T29979] openvswitch: netlink: Duplicate or invalid key (type 0). [ 683.837716][T29979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.164837][T30000] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 684.181798][T29987] syzkaller0: entered promiscuous mode [ 684.200063][T29987] syzkaller0: entered allmulticast mode [ 684.378805][T30019] openvswitch: netlink: EtherType 50a is less than min 600 [ 684.511571][T30025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6913'. [ 684.595833][T30025] bond6 (unregistering): Released all slaves [ 684.707984][T30040] tipc: Enabling of bearer rejected, failed to enable media [ 684.828216][T30048] netlink: 'syz.3.6919': attribute type 1 has an invalid length. [ 684.838885][T30048] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.6919'. [ 684.928314][T30056] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6923'. [ 684.949031][T30056] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6923'. [ 685.024366][T30063] gre0: entered promiscuous mode [ 685.347593][T30071] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6927'. [ 685.366466][T30071] netlink: 'syz.8.6927': attribute type 7 has an invalid length. [ 685.380635][T30071] netlink: 'syz.8.6927': attribute type 8 has an invalid length. [ 685.406412][T30071] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6927'. [ 685.519344][T30082] netlink: 'syz.5.6931': attribute type 1 has an invalid length. [ 685.530433][T30082] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6931'. [ 685.542282][T20417] IPVS: starting estimator thread 0... [ 685.570708][T30088] syzkaller1: entered promiscuous mode [ 685.577513][T30088] syzkaller1: entered allmulticast mode [ 685.688664][T30087] IPVS: using max 28 ests per chain, 67200 per kthread [ 685.816385][T30097] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 685.874967][T30101] netlink: 'syz.7.6936': attribute type 1 has an invalid length. [ 686.480141][T30139] SET target dimension over the limit! [ 686.933293][T30173] netlink: 'syz.6.6959': attribute type 1 has an invalid length. [ 687.193340][T30192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.248237][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.369880][T30205] openvswitch: netlink: Invalid VLAN frame [ 687.531094][T30216] netlink: 'syz.7.6972': attribute type 1 has an invalid length. [ 687.562485][T30216] netlink: 'syz.7.6972': attribute type 2 has an invalid length. [ 687.647830][T30223] x_tables: unsorted underflow at hook 1 [ 687.737855][T30232] netlink: 'syz.7.6975': attribute type 15 has an invalid length. [ 687.750258][T30232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.797832][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.000417][T30245] sctp: [Deprecated]: syz.5.6980 (pid 30245) Use of int in max_burst socket option deprecated. [ 688.000417][T30245] Use struct sctp_assoc_value instead [ 688.490577][T30256] lo: entered promiscuous mode [ 688.510159][T30256] lo: entered allmulticast mode [ 688.524264][T30252] wg1 speed is unknown, defaulting to 1000 [ 688.533601][T30252] wlan0 speed is unknown, defaulting to 1000 [ 688.730369][T30264] netlink: 'syz.8.6985': attribute type 13 has an invalid length. [ 688.807023][T30269] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 688.849636][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.897779][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.188581][T30280] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.196290][T30280] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.226006][T30284] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 689.872801][T30307] tipc: Enabled bearer , priority 10 [ 689.880825][ T44] net_ratelimit: 3 callbacks suppressed [ 689.880843][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.881245][T30302] can: request_module (can-proto-4) failed. [ 689.908853][T30307] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 690.071077][T30316] : renamed from bond_slave_0 (while UP) [ 690.449131][T30332] __nla_validate_parse: 15 callbacks suppressed [ 690.449154][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7004'. [ 690.615500][T30338] syzkaller0: entered promiscuous mode [ 690.623272][T30342] netlink: 7364 bytes leftover after parsing attributes in process `syz.6.7007'. [ 690.629256][T30338] syzkaller0: entered allmulticast mode [ 690.636940][T30342] openvswitch: netlink: Flow key attr not present in new flow. [ 690.920756][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.090630][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 691.968554][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.116461][T14007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.734162][T30370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7016'. [ 692.869164][T30384] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7021'. [ 692.889738][T30385] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7021'. [ 692.889772][T30386] netlink: 'syz.8.7020': attribute type 11 has an invalid length. [ 692.910743][T30386] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7020'. [ 692.942961][T30386] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7020'. [ 692.999611][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.124785][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7024'. [ 693.150310][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7024'. [ 693.166760][T30397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7024'. [ 693.230673][T30400] netlink: 'syz.8.7025': attribute type 30 has an invalid length. [ 693.652180][T30417] IPv6: NLM_F_CREATE should be specified when creating new route [ 694.017295][T30447] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 694.038414][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.079079][T30449] dvmrp0: entered allmulticast mode [ 694.087064][T30449] dvmrp0: left allmulticast mode [ 694.141362][T30453] xt_recent: Unsupported userspace flags (000000b1) [ 694.160610][T30452] netlink: 'syz.6.7040': attribute type 9 has an invalid length. [ 694.169241][T30452] netlink: 'syz.6.7040': attribute type 11 has an invalid length. [ 694.187895][T30452] netlink: 'syz.6.7040': attribute type 12 has an invalid length. [ 695.078752][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.156651][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.332869][T30509] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 695.363268][T30509] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 695.390326][T30509] gretap1: entered promiscuous mode [ 695.399043][T30509] gretap1: entered allmulticast mode [ 695.682985][T30532] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 695.708659][T30532] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 695.825202][T30545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.835214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.121112][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.568647][T30596] __nla_validate_parse: 5 callbacks suppressed [ 696.568671][T30596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7085'. [ 696.840799][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.849132][T30608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.099614][T30619] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7091'. [ 697.158712][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.195659][T30628] netlink: 'syz.7.7094': attribute type 21 has an invalid length. [ 697.237949][T30628] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7094'. [ 697.248189][T30629] netlink: 'syz.7.7094': attribute type 21 has an invalid length. [ 697.293975][T30629] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7094'. [ 697.309975][T30635] netlink: 'syz.5.7096': attribute type 2 has an invalid length. [ 697.321355][T30635] netlink: 'syz.5.7096': attribute type 2 has an invalid length. [ 697.329360][T30628] netlink: 'syz.7.7094': attribute type 4 has an invalid length. [ 697.338959][T30628] netlink: 'syz.7.7094': attribute type 5 has an invalid length. [ 697.349194][T30628] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7094'. [ 697.359593][T30629] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7094'. [ 697.400168][T30636] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7096'. [ 697.624117][T30654] bond0: (slave wlan1): Opening slave failed [ 697.732670][T30660] sctp: [Deprecated]: syz.6.7102 (pid 30660) Use of int in maxseg socket option. [ 697.732670][T30660] Use struct sctp_assoc_value instead [ 698.197634][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.206058][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.294509][T30699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7112'. [ 698.398838][T30703] tipc: Started in network mode [ 698.403859][T30703] tipc: Node identity 080211, cluster identity 4711 [ 698.414256][T30703] tipc: Enabled bearer , priority 0 [ 698.449185][T30710] validate_nla: 5 callbacks suppressed [ 698.449203][T30710] netlink: 'syz.5.7114': attribute type 39 has an invalid length. [ 698.575552][T30713] syzkaller0: entered promiscuous mode [ 698.590286][T30713] syzkaller0: entered allmulticast mode [ 698.695941][T30724] netlink: 'syz.6.7118': attribute type 10 has an invalid length. [ 698.737789][T30724] team0: Device veth1_macvtap failed to register rx_handler [ 699.014177][ T30] audit: type=1107 audit(1766010671.641:15): pid=30737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 699.034685][T30736] netlink: 'syz.3.7121': attribute type 1 has an invalid length. [ 699.043321][T30736] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7121'. [ 699.417002][ T5981] tipc: Node number set to 134353152 [ 699.498227][T30765] netlink: 'syz.5.7127': attribute type 2 has an invalid length. [ 699.537156][T30765] lo: left promiscuous mode [ 699.664068][T30780] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7132'. [ 699.693467][T30777] netlink: 'syz.7.7134': attribute type 1 has an invalid length. [ 700.254632][T30765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.291026][ T5898] net_ratelimit: 56 callbacks suppressed [ 700.291043][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.342415][T30765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.670558][T30765] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 700.719233][T30765] bridge1: left promiscuous mode [ 700.740888][T30765] bridge7: left promiscuous mode [ 700.758130][T30765] bond4: left promiscuous mode [ 700.768793][T30765] bridge8: left promiscuous mode [ 700.786921][T30765] ip6gre2: left promiscuous mode [ 700.798557][T30765] vlan2: left promiscuous mode [ 700.820499][T30765] gretap1: left promiscuous mode [ 700.902762][ T3002] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.935435][ T3002] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.002531][ T3002] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.053945][ T3002] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.059824][T30796] sctp: [Deprecated]: syz.6.7137 (pid 30796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 701.059824][T30796] Use struct sctp_sack_info instead [ 701.117753][ T3002] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.129627][ T3002] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.139232][ T3002] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.148860][ T3002] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.240502][T20434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.356256][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.931099][T30823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7146'. [ 701.949080][T30824] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7146'. [ 701.961971][T30823] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7146'. [ 702.448686][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.488698][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.577269][T30840] netlink: 'syz.6.7153': attribute type 6 has an invalid length. [ 703.615174][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7150'. [ 703.651906][T30843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7152'. [ 703.676755][T30843] netlink: 'syz.3.7152': attribute type 7 has an invalid length. [ 703.693337][T30843] netlink: 'syz.3.7152': attribute type 8 has an invalid length. [ 703.722256][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7152'. [ 703.779217][T30843] bridge0: entered promiscuous mode [ 703.786009][T30843] ip6gretap0: entered promiscuous mode [ 703.794850][T30843] gretap0: entered promiscuous mode [ 703.805743][T30843] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 703.835970][T30843] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 703.850542][T30843] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 703.863928][T30857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7156'. [ 703.946475][T30857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7156'. [ 704.089772][T30872] netlink: 'syz.7.7161': attribute type 1 has an invalid length. [ 704.163497][T30872] 8021q: adding VLAN 0 to HW filter on device bond4 [ 704.248524][T30880] netlink: 'syz.6.7163': attribute type 1 has an invalid length. [ 704.249376][T30878] bond4: (slave geneve3): making interface the new active one [ 704.274301][T30878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.284941][T14004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.293145][T30878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.302892][T30878] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 704.374403][T30883] bond6: (slave bridge4): making interface the new active one [ 704.383903][T30883] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 704.419653][T14356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.471630][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.499334][T30880] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 704.522925][T30883] macvlan0: entered promiscuous mode [ 704.543240][T30883] macvlan0: entered allmulticast mode [ 704.567831][T30883] bond6: entered promiscuous mode [ 704.573143][T30883] bridge4: entered promiscuous mode [ 704.593904][T30883] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 704.605181][T30883] bond6: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 704.623859][T30883] bond6: left promiscuous mode [ 704.630285][T30883] bridge4: left promiscuous mode [ 704.705534][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7170'. [ 704.715807][T30903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.890642][T30903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.961487][T30918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7174'. [ 705.187080][T30927] vlan3: entered promiscuous mode [ 705.193603][T30927] vlan3: entered allmulticast mode [ 705.209316][T30927] hsr_slave_1: entered allmulticast mode [ 705.220582][T30931] netlink: 'syz.3.7175': attribute type 11 has an invalid length. [ 705.394424][T30932] v: renamed from vlan0 (while UP) [ 705.557038][T20419] net_ratelimit: 4 callbacks suppressed [ 705.557059][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.133353][T15775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.167367][T15775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.232038][T30984] bridge_slave_1: left allmulticast mode [ 706.250699][T30984] bridge_slave_1: left promiscuous mode [ 706.262970][T30984] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.284877][T30991] tipc: Enabled bearer , priority 0 [ 706.309813][T30993] tipc: Enabled bearer , priority 0 [ 706.326820][T30991] syzkaller0: entered promiscuous mode [ 706.333021][T30991] syzkaller0: entered allmulticast mode [ 706.367633][ T2907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.411233][T30993] syzkaller0: entered promiscuous mode [ 706.419826][T30993] syzkaller0: entered allmulticast mode [ 706.447877][T14004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.454483][T30993] tipc: Resetting bearer [ 706.548762][T31018] netlink: 'syz.3.7199': attribute type 1 has an invalid length. [ 706.615969][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.751469][T30996] tipc: Resetting bearer [ 706.844272][T15775] tipc: Resetting bearer [ 706.853319][T30989] tipc: Resetting bearer [ 706.907504][T30989] tipc: Disabling bearer [ 706.932126][T30994] tipc: Resetting bearer [ 707.011571][T20434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.320973][T20434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.477891][T15775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.637753][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.589486][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888067e26800: rx timeout, send abort [ 708.731574][T30994] tipc: Disabling bearer [ 708.799164][T20434] tipc: Node number set to 486644913 [ 708.823947][T31041] __nla_validate_parse: 4 callbacks suppressed [ 708.823971][T31041] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7204'. [ 709.099310][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888067e26800: abort rx timeout. Force session deactivation [ 709.255117][T31072] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7213'. [ 709.482663][T31076] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7214'. [ 709.562419][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7215'. [ 709.782730][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7221'. [ 709.932048][T31092] syzkaller1: entered promiscuous mode [ 709.941088][T31092] syzkaller1: entered allmulticast mode [ 709.960208][T31104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7224'. [ 709.969713][T31104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7224'. [ 710.118036][T31112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7227'. [ 710.148838][T31112] tipc: Enabled bearer , priority 11 [ 710.171622][T31112] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7227'. [ 710.218603][T31110] can: request_module (can-proto-0) failed. [ 710.388482][T31124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7230'. [ 710.591520][T31139] net_ratelimit: 6 callbacks suppressed [ 710.591541][T31139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.606554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.663477][T31148] bridge10: port 1(veth0_to_bond) entered blocking state [ 710.704249][T31148] bridge10: port 1(veth0_to_bond) entered disabled state [ 710.732614][T31148] veth0_to_bond: entered allmulticast mode [ 710.752763][T31148] veth0_to_bond: entered promiscuous mode [ 710.760837][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.807863][T31155] geneve4: entered promiscuous mode [ 710.848110][T31155] geneve4: entered allmulticast mode [ 710.860528][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.962572][T31164] netlink: 'syz.7.7241': attribute type 62 has an invalid length. [ 711.131491][T31176] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 711.138537][T31176] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 711.182244][T31175] veth0_to_team: entered promiscuous mode [ 711.445625][T31193] nftables ruleset with unbound set [ 711.748305][T31214] netlink: 'syz.8.7256': attribute type 62 has an invalid length. [ 711.797037][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.855650][T31221] nbd: must specify an index to disconnect [ 711.997885][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.273874][T31253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.494291][T31267] netlink: 'syz.5.7270': attribute type 2 has an invalid length. [ 712.504363][T31267] netlink: 'syz.5.7270': attribute type 3 has an invalid length. [ 712.581479][T31274] sctp: [Deprecated]: syz.7.7272 (pid 31274) Use of int in max_burst socket option deprecated. [ 712.581479][T31274] Use struct sctp_assoc_value instead [ 712.839196][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.958362][ T44] net_ratelimit: 6 callbacks suppressed [ 715.958384][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.041939][T20434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.442380][T20434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.497772][T17159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.007312][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.316908][ T31] INFO: task syz.4.5131:24038 blocked for more than 143 seconds. [ 717.327194][ T31] Not tainted syzkaller #0 [ 717.332196][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.341107][ T31] task:syz.4.5131 state:D stack:26248 pid:24038 tgid:24035 ppid:17265 task_flags:0x400140 flags:0x00080002 [ 717.353376][ T31] Call Trace: [ 717.357374][ T31] [ 717.360327][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 717.364880][ T31] ? __pfx___schedule+0x10/0x10 [ 717.371831][ T31] ? schedule+0x91/0x360 [ 717.377023][ T31] schedule+0x165/0x360 [ 717.381325][ T31] schedule_preempt_disabled+0x13/0x30 [ 717.387494][ T31] __mutex_lock+0x7e6/0x1350 [ 717.392234][ T31] ? __mutex_lock+0x5bb/0x1350 [ 717.401077][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 717.407660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 717.412774][ T31] ? __nlmsg_put+0xef/0x1b0 [ 717.457857][ T31] ? genlmsg_put+0x137/0x2e0 [ 717.462544][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 717.536850][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 717.543016][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 717.587908][ T31] ? kernel_text_address+0xa5/0xe0 [ 717.593136][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 717.617191][T17159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.618551][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 717.656093][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 717.661130][ T31] genl_rcv_msg+0x60e/0x790 [ 717.665683][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.717923][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 717.724102][ T31] netlink_rcv_skb+0x208/0x470 [ 717.756714][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.761864][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.786879][ T31] ? down_read+0x274/0x2e0 [ 717.791386][ T31] ? genl_rcv+0xd/0x40 [ 717.795489][ T31] genl_rcv+0x28/0x40 [ 717.837823][ T31] netlink_unicast+0x82f/0x9e0 [ 717.842692][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 717.867904][ T31] ? netlink_sendmsg+0x642/0xb30 [ 717.872919][ T31] ? skb_put+0x11b/0x210 [ 717.897824][ T31] netlink_sendmsg+0x805/0xb30 [ 717.902700][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.936741][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 717.941768][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.956467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.965170][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.976149][ T31] __sock_sendmsg+0x21c/0x270 [ 717.980905][ T31] ____sys_sendmsg+0x505/0x820 [ 717.985721][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.007955][ T31] ? import_iovec+0x74/0xa0 [ 718.012549][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 718.037069][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.045397][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.056760][ T31] ? futex_wait+0x285/0x360 [ 718.061380][ T31] ? __fget_files+0x2a/0x420 [ 718.065994][ T31] ? __fget_files+0x3a0/0x420 [ 718.083588][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 718.098425][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.103985][ T31] ? do_syscall_64+0xbe/0xf80 [ 718.127142][ T31] do_syscall_64+0xfa/0xf80 [ 718.131731][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.157584][ T31] ? clear_bhb_loop+0x60/0xb0 [ 718.162378][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.176757][ T31] RIP: 0033:0x7ff70198f749 [ 718.181245][ T31] RSP: 002b:00007ff7028b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.199448][ T31] RAX: ffffffffffffffda RBX: 00007ff701be6090 RCX: 00007ff70198f749 [ 718.208371][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000068 [ 718.217307][ T31] RBP: 00007ff701a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 718.225321][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.235350][ T31] R13: 00007ff701be6128 R14: 00007ff701be6090 R15: 00007ffde6637998 [ 718.244224][ T31] [ 718.253922][ T31] INFO: task syz.1.5386:24880 blocked for more than 144 seconds. [ 718.263644][ T31] Not tainted syzkaller #0 [ 718.278386][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.288129][ T31] task:syz.1.5386 state:D stack:27080 pid:24880 tgid:24879 ppid:16190 task_flags:0x400140 flags:0x00080002 [ 718.300309][ T31] Call Trace: [ 718.303616][ T31] [ 718.307068][ T31] __schedule+0x14bc/0x5000 [ 718.311632][ T31] ? __pfx___schedule+0x10/0x10 [ 718.317835][ T31] ? schedule+0x91/0x360 [ 718.322100][ T31] schedule+0x165/0x360 [ 718.326876][ T31] schedule_preempt_disabled+0x13/0x30 [ 718.332372][ T31] __mutex_lock+0x7e6/0x1350 [ 718.337165][ T31] ? __mutex_lock+0x5bb/0x1350 [ 718.341944][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1660 [ 718.348182][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 718.353241][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 718.358552][ T31] nfsd_nl_listener_set_doit+0x137/0x1660 [ 718.364303][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 718.370310][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 718.376735][ T31] ? rcu_is_watching+0x15/0xb0 [ 718.381553][ T31] ? __nla_parse+0x40/0x60 [ 718.386002][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 718.394385][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 718.400049][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 718.406562][ T31] ? bpf_lsm_capable+0x9/0x20 [ 718.411273][ T31] ? security_capable+0x7e/0x2e0 [ 718.416296][ T31] genl_rcv_msg+0x60e/0x790 [ 718.420827][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 718.425853][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 718.432532][ T31] netlink_rcv_skb+0x208/0x470 [ 718.437997][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 718.443068][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 718.448612][ T31] ? down_read+0x274/0x2e0 [ 718.453048][ T31] ? genl_rcv+0xd/0x40 [ 718.457186][ T31] genl_rcv+0x28/0x40 [ 718.461269][ T31] netlink_unicast+0x82f/0x9e0 [ 718.466313][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 718.471637][ T31] ? netlink_sendmsg+0x642/0xb30 [ 718.476688][ T31] ? skb_put+0x11b/0x210 [ 718.480959][ T31] netlink_sendmsg+0x805/0xb30 [ 718.485733][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.491286][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 718.496663][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 718.502616][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.508463][ T31] __sock_sendmsg+0x21c/0x270 [ 718.513168][ T31] ____sys_sendmsg+0x505/0x820 [ 718.523044][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.528590][ T31] ? import_iovec+0x74/0xa0 [ 718.533141][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 718.537962][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.543208][ T31] ? futex_wait+0x285/0x360 [ 718.547965][ T31] ? __fget_files+0x2a/0x420 [ 718.552563][ T31] ? __fget_files+0x3a0/0x420 [ 718.557318][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 718.562281][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.568012][ T31] ? do_syscall_64+0xbe/0xf80 [ 718.572725][ T31] do_syscall_64+0xfa/0xf80 [ 718.577328][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.583398][ T31] ? clear_bhb_loop+0x60/0xb0 [ 718.588239][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.594155][ T31] RIP: 0033:0x7fc31938f749 [ 718.600494][ T31] RSP: 002b:00007fc31a307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.610445][ T31] RAX: ffffffffffffffda RBX: 00007fc3195e5fa0 RCX: 00007fc31938f749 [ 718.619054][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 718.627323][ T31] RBP: 00007fc319413f91 R08: 0000000000000000 R09: 0000000000000000 [ 718.635340][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.643381][ T31] R13: 00007fc3195e6038 R14: 00007fc3195e5fa0 R15: 00007ffcdc1c17c8 [ 718.651552][ T31] [ 718.654651][ T31] [ 718.654651][ T31] Showing all locks held in the system: [ 718.696244][ T31] 1 lock held by khungtaskd/31: [ 718.701176][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 718.719757][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.730609][ T31] 3 locks held by kworker/u8:4/73: [ 718.735809][ T31] 2 locks held by getty/5597: [ 718.740941][ T31] #0: ffff88803401f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 718.750896][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 718.761335][ T31] 3 locks held by kworker/u8:31/17163: [ 718.766896][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 718.779089][ T31] #1: ffffc90003a9fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 718.790233][ T31] #2: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 718.799534][ T31] 2 locks held by syz.0.4724/22642: [ 718.804764][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 718.813653][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 718.824158][ T31] 1 lock held by syz-executor/23218: [ 718.829564][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 718.841935][ T31] 2 locks held by syz.4.5131/24038: [ 718.849313][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 718.857815][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 718.868073][ T31] 2 locks held by syz.1.5386/24880: [ 718.873298][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 718.881791][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 718.892165][ T31] 1 lock held by syz-executor/24916: [ 718.897679][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 718.906812][ T31] 4 locks held by syz-executor/25597: [ 718.912313][ T31] 3 locks held by syz.2.5872/26441: [ 718.919184][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 718.930155][ T31] #1: ffff888066c876f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 718.941269][ T31] #2: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 718.953013][ T31] 2 locks held by syz-executor/27230: [ 718.962157][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 718.972227][ T31] #1: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 718.983711][ T31] 1 lock held by syz-executor/27266: [ 718.989078][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 718.998402][ T31] [ 719.000791][ T31] ============================================= [ 719.000791][ T31] [ 719.010292][ T31] NMI backtrace for cpu 0 [ 719.010312][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 719.010332][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.010343][ T31] Call Trace: [ 719.010350][ T31] [ 719.010359][ T31] dump_stack_lvl+0x189/0x250 [ 719.010387][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.010405][ T31] ? __pfx__printk+0x10/0x10 [ 719.010440][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 719.010460][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 719.010480][ T31] ? __pfx__printk+0x10/0x10 [ 719.010507][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 719.010533][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 719.010553][ T31] watchdog+0xf3c/0xf80 [ 719.010579][ T31] ? watchdog+0x1e2/0xf80 [ 719.010605][ T31] kthread+0x711/0x8a0 [ 719.010629][ T31] ? __pfx_watchdog+0x10/0x10 [ 719.010649][ T31] ? __pfx_kthread+0x10/0x10 [ 719.010671][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 719.010691][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 719.010711][ T31] ? __pfx_kthread+0x10/0x10 [ 719.010732][ T31] ret_from_fork+0x599/0xb30 [ 719.010760][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 719.010796][ T31] ? __switch_to_asm+0x39/0x70 [ 719.010816][ T31] ? __switch_to_asm+0x33/0x70 [ 719.010834][ T31] ? __pfx_kthread+0x10/0x10 [ 719.010856][ T31] ret_from_fork_asm+0x1a/0x30 [ 719.010891][ T31] [ 719.010898][ T31] Sending NMI from CPU 0 to CPUs 1: [ 719.160707][ C1] NMI backtrace for cpu 1 [ 719.160725][ C1] CPU: 1 UID: 0 PID: 6273 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 719.160746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.160765][ C1] Workqueue: krdsd rds_connect_worker [ 719.160793][ C1] RIP: 0010:rds_tcp_restore_callbacks+0x4/0x330 [ 719.160820][ C1] Code: 89 d9 80 e1 07 80 c1 03 38 c1 7c e7 48 89 df e8 d2 05 90 f7 eb dd 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <55> 41 57 41 56 41 55 41 54 53 50 49 89 f6 48 89 fb 49 bd 00 00 00 [ 719.160836][ C1] RSP: 0018:ffffc9000b3978b8 EFLAGS: 00000246 [ 719.160850][ C1] RAX: 1ffff110050e1991 RBX: ffff88804b8c8b80 RCX: ffff88802eb8db80 [ 719.160864][ C1] RDX: 0000000000000000 RSI: ffff8880484bd7e8 RDI: ffff88804b8c8b80 [ 719.160876][ C1] RBP: ffffc9000b3979f8 R08: ffff88802eb8db80 R09: 0000000000000002 [ 719.160889][ C1] R10: 00000000ffffff8d R11: 0000000000000000 R12: 1ffff92001672f20 [ 719.160900][ C1] R13: 00000000ffffffea R14: dffffc0000000000 R15: ffff88802870cc88 [ 719.160913][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 719.160927][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.160939][ C1] CR2: 00007f8a4ef17d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 719.160954][ C1] Call Trace: [ 719.160962][ C1] [ 719.160969][ C1] rds_tcp_conn_path_connect+0x583/0x680 [ 719.161001][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 719.161034][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 719.161066][ C1] rds_connect_worker+0x1d8/0x290 [ 719.161086][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 719.161113][ C1] process_scheduled_works+0xad1/0x1770 [ 719.161156][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 719.161192][ C1] worker_thread+0x8a0/0xda0 [ 719.161210][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 719.161236][ C1] ? __kthread_parkme+0x7b/0x200 [ 719.161259][ C1] kthread+0x711/0x8a0 [ 719.161282][ C1] ? __pfx_worker_thread+0x10/0x10 [ 719.161298][ C1] ? __pfx_kthread+0x10/0x10 [ 719.161319][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 719.161338][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 719.161359][ C1] ? __pfx_kthread+0x10/0x10 [ 719.161380][ C1] ret_from_fork+0x599/0xb30 [ 719.161407][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 719.161438][ C1] ? __switch_to_asm+0x39/0x70 [ 719.161458][ C1] ? __switch_to_asm+0x33/0x70 [ 719.161477][ C1] ? __pfx_kthread+0x10/0x10 [ 719.161498][ C1] ret_from_fork_asm+0x1a/0x30 [ 719.161528][ C1] [ 719.422921][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.465441][T24916] syz_tun (unregistering): left allmulticast mode [ 719.734568][T17160] bond0: (slave netdevsim0): Releasing backup interface [ 719.827633][T17160] bridge_slave_1: left allmulticast mode [ 719.833318][T17160] bridge_slave_1: left promiscuous mode [ 719.840109][T17160] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.853589][T17160] : left allmulticast mode [ 719.858674][T17160] : left promiscuous mode [ 719.863260][T17160] bridge0: port 1() entered disabled state [ 719.889059][T17160] veth0_to_bond: left allmulticast mode [ 719.894737][T17160] veth0_to_bond: left promiscuous mode [ 719.900659][T17160] bridge10: port 1(veth0_to_bond) entered disabled state [ 720.020786][T17160] tipc: Disabling bearer [ 720.768806][T17160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.779277][T17160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.790249][T17160] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 720.801432][T17160] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 720.811939][T17160] bond0 (unregistering): Released all slaves [ 720.827566][T17160] bond1 (unregistering): Released all slaves [ 720.940264][T17160] bond2 (unregistering): Released all slaves [ 720.990489][ T3002] net_ratelimit: 3 callbacks suppressed [ 720.990505][ T3002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.070051][T17160] bond3 (unregistering): Released all slaves [ 721.195780][T17160] bond4 (unregistering): Released all slaves [ 721.210695][T17160] bond5 (unregistering): Released all slaves [ 721.331596][T17160] tipc: Disabling bearer [ 721.338961][T17160] tipc: Left network mode [ 721.482864][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.805822][T14005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.905425][T17160] hsr_slave_0: left promiscuous mode [ 721.914795][T17160] hsr_slave_1: left promiscuous mode [ 721.920971][T17160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.928962][T17160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.128773][T17168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.357263][T17160] team0 (unregistering): Port device team_slave_1 removed [ 722.400344][T17160] team0 (unregistering): Port device team_slave_0 removed [ 722.519368][T14005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.528662][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.060092][T17160] IPVS: stop unused estimator thread 0... [ 723.231317][T17160] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.243199][T17160] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.258113][T17159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.332409][T17160] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.342938][T17160] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.430693][T17160] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.441238][T17160] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.503783][T17160] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.514568][T17160] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.567698][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.630322][T17160] bridge_slave_0: left promiscuous mode [ 723.637446][T17160] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.890693][T17160] erspan0 (unregistering): left promiscuous mode [ 723.913751][T17160] gretap0 (unregistering): left promiscuous mode [ 724.237822][T17160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.249905][T17160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.261347][T17160] bond0 (unregistering): (slave team0): Releasing backup interface [ 724.270335][T17160] bond0 (unregistering): Released all slaves [ 724.285265][T17160] bond1 (unregistering): Released all slaves [ 724.361482][T17160] tipc: Disabling bearer [ 724.372757][T17160] tipc: Left network mode [ 724.406995][T15775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.609800][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.860447][T17160] hsr_slave_0: left promiscuous mode [ 724.867037][T17160] hsr_slave_1: left promiscuous mode [ 724.872996][T17160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.880643][T17160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.889365][T17160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.897187][T17160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.912767][T17160] veth0_macvtap: left promiscuous mode [ 724.920196][T17160] veth1_vlan: left promiscuous mode [ 724.925568][T17160] veth0_vlan: left promiscuous mode [ 725.388396][T17160] team0 (unregistering): Port device team_slave_1 removed [ 725.432159][T17160] team0 (unregistering): Port device team_slave_0 removed [ 725.978301][T17160] IPVS: stop unused estimator thread 0... [ 726.656867][T17163] net_ratelimit: 3 callbacks suppressed [ 726.656888][T17163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.678190][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.920590][T14004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog